diff --git a/.github/workflows/canvaslink.yml b/.github/workflows/canvaslink.yml new file mode 100644 index 000000000..8737deb76 --- /dev/null +++ b/.github/workflows/canvaslink.yml @@ -0,0 +1,48 @@ +name: CanvasLink alpha + +on: + pull_request: + workflow_dispatch: + +permissions: + contents: read + +jobs: + contracts: + runs-on: ubuntu-latest + timeout-minutes: 15 + steps: + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 + with: + node-version: 22 + cache: npm + - run: npm ci --ignore-scripts + - run: npx playwright install --with-deps chromium + - run: npm run test:canvaslink + - run: npm run typecheck + + android-debug: + runs-on: ubuntu-latest + timeout-minutes: 15 + steps: + - uses: actions/checkout@v7 + - uses: actions/setup-node@v7 + with: + node-version: 22 + - uses: actions/setup-java@v4 + with: + distribution: temurin + java-version: '17' + - uses: android-actions/setup-android@v3 + with: + packages: platform-tools + log-accepted-android-sdk-licenses: 'false' + - run: sdkmanager 'platforms;android-35' 'build-tools;35.0.0' + - run: node integrations/canvaslink/scripts/build-android.cjs + - name: Upload alpha APK (ephemeral CI development signature) + uses: actions/upload-artifact@v4 + with: + name: CanvasLink-debug + path: integrations/canvaslink/dist/CanvasLink-debug.apk + retention-days: 30 diff --git a/README.md b/README.md index 5efdb8790..cb68208d7 100644 --- a/README.md +++ b/README.md @@ -69,6 +69,10 @@ npm run dev The opt-in **Settings → Controls → Even G2** integration adapts CanvasTTY's terminal and AI-agent workflows to Even G2 glasses. Pair with six digits on the same local network, approve access on the computer, then read responses on the glasses HUD, dictate through local Nemotron speech recognition, and create, rename or close shared sessions. The companion includes a More agents picker and supports the desktop's provider list. Its source lives in `integrations/even-g2` and builds with the desktop. See [setup, distribution status and acceptance limits](docs/even-g2.md); a compatible public installer and Even Hub approval are still pending. +## CanvasLink for Android (alpha) + +**Settings → CanvasLink** streams the current CanvasTTY window to an Android phone or tablet on the same LAN, with touch, direct terminal keyboard input and a shortcut bar. Access starts off; pairing uses a short-lived six-digit code. The desktop host is integrated, with no separate application. See [setup, APK builds and platform limits](docs/canvaslink.md). The prototype has macOS/Android user acceptance; this source port remains experimental, with Windows/Linux device acceptance pending. + ## Web companion The opt-in [Web companion](docs/mobile-companion.md) shares selected sessions with Android, iOS, and desktop browsers through **Tailscale Serve HTTPS**, not Funnel. CanvasTTY binds its companion endpoint to `127.0.0.1:3481` in this mode; pair with a short-lived code and approve each browser on the desktop. Open **Settings → Controls → Web companion** for setup, grants, and revocation. End-to-end Tailscale Serve deployment on Windows, Linux, and macOS remains unverified. diff --git a/docs/README.md b/docs/README.md index 3e0c19d1d..5a4c007bb 100644 --- a/docs/README.md +++ b/docs/README.md @@ -12,6 +12,7 @@ CanvasTTY is a spatial Electron desktop for real local terminals and AI-agent CL | [Built-in browser and audit log](browser.md) | Canvas controls, settings, agent access, website/file boundaries, activity, and persistent redacted audit files | | [File browser and reader](files.md) | Opening a Files card, session and folder roots, supported content, read limits, quick open, persistence, and read-only security boundaries | | [Web companion](mobile-companion.md) | Tailscale Serve HTTPS setup, browser pairing, session grants, revocation, and security limits | +| [CanvasLink for Android (alpha)](canvaslink.md) | Full-window LAN streaming, touch/keyboard input, APK build, security boundaries and platform limits | | [Installing, releases, and local data](installing-and-security.md) | Installer formats, unsigned-preview caveats, credential boundaries, and release checks | | [Widget authoring](widget-authoring.md) | Source-level extension paths, visual grammar, process boundaries, and an AI-agent brief | | [Pixel terminal themes (Russian)](pixel-skin-packs.ru.md) | Ten-PNG ZIP layout, terminal apertures, app import, and local agent CLI | diff --git a/docs/canvaslink-security-audit-2026-10-26.md b/docs/canvaslink-security-audit-2026-10-26.md new file mode 100644 index 000000000..1fee75ffe --- /dev/null +++ b/docs/canvaslink-security-audit-2026-10-26.md @@ -0,0 +1,101 @@ +# CanvasLink: bounded security and failure-path audit + +Reviewed on 2026-10-26, starting at `f643b31c476e490904437c95c13f0db33ad7c310`. +This report covers the embedded host, Android transport/direct-input assets, +pairing/channel implementation, IPC ownership and installation contract. It is +not a penetration-test certification or acceptance of an installed release. + +## Confirmed findings and fixes + +Severity below is a local assessment of the demonstrated behavior, not a CVSS score. + +| Finding | Preconditions and impact | Fix and regression evidence | +| --- | --- | --- | +| Medium: session expiry did not revoke an established video peer | An already paired client could stop polling and keep receiving video after the advertised 12-hour session lifetime. Request/input checks rejected expired credentials, but no passive expiry path stopped media. This did not bypass the PIN. | `Pairing.expire()` removes credentials before invoking revocation; requests and outgoing signals invoke it, and the host invokes it every 200 ms independently of client traffic and UI health polling. Tests cover the exact expiry boundary, one-time revocation, silent clients and rejected expired requests/queues. Timer delivery still depends on the Electron main event loop. | +| Medium: revocation waited for an asynchronous UI refresh | A stalled or rejected settings-state read delayed or prevented closing a live peer after a valid revoke event. | The capture worker closes tracks, peer and input ownership synchronously before refreshing its UI. A deferred/rejected refresh test proves media and control stop first. | +| Low: delayed signalling could undo client suspension/disconnect | In-flight offers could create a new peer while hidden or locally disconnected. A delayed native pairing callback could also re-arm the client after explicit disconnect. These were stale messages from an existing authenticated connection, not unauthenticated remote pairing. | Ignore offers/disconnect signals unless paired and visible; ignore pairing completions after explicit disconnect until a new connect request. Tests cover unpaired, hidden and disconnected clients, delayed pairing completion and negotiation completion after disconnect. | +| Reliability: stale SDP failure overwrote current connection state | Failure of a superseded offer could mark a healthy new connection as failed. | Peer generations and checks after asynchronous SDP steps isolate stale completion/errors. | +| Reliability: buffered pointer motion survived session close | A queued animation-frame callback could submit old pointer movement to the next connection. | Close discards buffered movement and cancels its frame callback. No clicks, text or keys are replayed. | +| Input safety: one-shot Ctrl leaked through other commits | A Unicode/multi-character IME commit or native key could leave Ctrl armed, turning the next letter into an unexpected shortcut such as Ctrl+C. | Consume Ctrl on each committed text/key event. Browser fixture covers Cyrillic, emoji, multi-character text and native arrow input. | + +Before fixes, the new regressions failed in seven cases in the first targeted +run and two further cases in the revocation-focused run. These were application +failures. A separate HTTP fixture initially lacked Node's `Buffer` global; that +test-harness error was corrected and is not an application finding. + +## Boundaries exercised + +- Real SRP mutual authentication and AES-GCM request/response code, using + synthetic keys and messages. Wrong PIN, used/expired code, attempt limits, + wrong address, tampering, reflection and replay are rejected. +- The actual HTTP request handler, driven by in-memory Node request streams: + public source addresses, browser origins (including `null`), unsupported + routes/methods, non-JSON content types, invalid JSON and oversized bodies are + rejected. An authenticated signal reaches the renderer once; a forged, + replayed, unsupported or revoked signal does not. +- IPC owner/main-frame checks and serialized settings operations, including a + window closing while a command waits. Capture is scoped to the owned window; + no global input injector or shell execution was added. +- Android navigation/resource allowlists, disabled file/content access, denied + WebView media permissions and encrypted app-private session storage were + inspected. Those native boundaries were not penetration-tested on hardware. +- Installation remains pinned to the published APK hash/certificate and stops + on signing conflicts. No private signing files or pairing credentials were + copied into the source tree or report. + +## Verification of this patch + +- **115/115 CanvasLink tests passed**, no skips; 12 tests added to the previous 103. +- **3/3 desktop installation-prompt tests passed**. +- TypeScript checks, production desktop bundles and the source/built-output + secret audit passed. +- The Android development APK compiled with SDK 35 / JDK 17; apksigner verified + its v2/v3 signatures. This is a local development artifact, not a release APK. +- Tests use simulated WebRTC/Electron objects and browser fixtures; HTTP tests + do not open a network listener. They prove the demonstrated control flow, + not real GPU capture or physical input on Windows/Linux/Android. + +The installed desktop/tablet and public `0.3.0-alpha.1` APK were not replaced. +The client-side fixes require a subsequent APK build/release; desktop fixes +require a CanvasTTY build containing this patch. No new release is claimed. + +## Open dependency issues + +Fresh `npm audit --package-lock-only --json` reports **6 vulnerable packages: +5 high, 1 moderate**, matching an audit of the unchanged upstream baseline +`0fa6895d3675b40ec4dc75886826dd2db234c234` with its own manifest/lockfile. +The package names are Electron, Vite, undici, zod, source-map-js and fast-uri. +An installed-tree audit reports 18 affected packages including dependent parent +packages; this is a different audit tree/count, not 12 newly introduced root +advisories. CanvasLink's bonjour/SRP dependencies are not listed by these audits. + +`npm audit --omit=dev` reports zero, but that **does not establish runtime safety**: +Electron is declared as a development dependency and is shipped in the desktop. +Its pinned version here is 43.7.7. The maintainer's +[Electron advisory](https://github.com/electron/electron/security/advisories/GHSA-jr5w-w6x2-84p9) +describes compromised intermediate TLS certificates; 43.8.1 contains the fix +for this release line. Exploitation requires intercepted TLS traffic and a +relevant certificate. This audit did not demonstrate exploitation in CanvasTTY. +Vite's +[file-serving advisory](https://github.com/vitejs/vite/security/advisories/GHSA-rq7h-c2jc-7f22) +requires an exposed development server and additional path/import conditions; +it is not evidence that CanvasLink's separate JSON listener serves files. + +Dependency updates and their desktop/native packaging validation remain open; +this patch does not silently change the upstream Electron/build toolchain. + +## Remaining acceptance and review gaps + +- Physical source-port acceptance on macOS, Windows, Linux and Android remains + pending. Prior prototype acceptance is not acceptance of this patch or APK. +- Native Android logout clears persisted credentials only after its queued + network revoke attempt. Abrupt process death during an offline logout and + pairing/restore cancellation need a native lifecycle regression and follow-up; + the JavaScript disconnect guard does not prove durable native logout. +- No independent cryptographic review of the SRP implementation or WebRTC stack + was performed. Passing protocol tests is not such a review. +- A paired device controls the entire owned CanvasTTY window, including its + terminals and settings. Pairing is a broad trust grant, not terminal sandboxing. + LAN/source-address checks do not protect against a compromised paired device. +- No claim of denial-of-service resistance under adversarial LAN load, + dependency remediation, zero vulnerabilities or release readiness is made. diff --git a/docs/canvaslink-verification.md b/docs/canvaslink-verification.md new file mode 100644 index 000000000..660dcdbed --- /dev/null +++ b/docs/canvaslink-verification.md @@ -0,0 +1,99 @@ +# CanvasLink alpha: verification scope + +Follow-up: [2026-10-26 security/failure-path audit](canvaslink-security-audit-2026-10-26.md) +records six fixed findings, 115 passing integration tests, dependency issues and +the remaining native/runtime acceptance gaps. The older counts below describe +the earlier source-port and distribution snapshots. + +The source port is based on upstream commit +`0fa6895d3675b40ec4dc75886826dd2db234c234` (package version 1.8.1). +It does not replace the user's installed CanvasTTY 1.8.2 or its active preview. + +## Prior prototype acceptance + +The user manually exercised the macOS/Android prototype and confirmed it worked +before publication preparation. Its installed APK SHA-256 was +`48b967d7102c8e733666a630562b420e5bee5ac3bc734ad065d7a89ffd038783`. +Prior bounded device checks covered real terminal input/ACKs, Settings touch, +native selects, resume, Wi-Fi and high-density capture on Android 12. +This is prototype evidence, not device acceptance of this source-port package. + +## Source-port checks + +- General upstream suite in an isolated source snapshot with a clean environment: + 2,221 passed, 27 skipped, zero failures. No Go toolchain was present; native-helper + parity/release coverage is not claimed. +- 103 CanvasLink tests passed: pairing/authentication/replay rejection, input + ordering and uncertainty, reconnect races, direct-input/gesture fixtures, + select/touch behavior, graphics bounds, icons and IPC/lifecycle ownership. +- TypeScript node and renderer checks passed. +- Production desktop bundles built with the integrated settings section, + preload API and copied host assets. +- Android 0.3.0-alpha.1 debug APK built; apksigner verified v2/v3 signatures. + Instrumentation entry points are excluded from the normal APK. +- Even G2: 47 tests passed; its access and pairing implementation is unchanged. +- Source and built-output secret audit passed. +- npm audit found six advisories (five high, one moderate). An audit of the + unchanged upstream lockfile reports the same six dependency names; no + dependency-security remediation is claimed by this feature port. + +The general upstream suite initially exposed a path-handling bug in existing +hook tests when the checkout path contains spaces (URL `.pathname` retains +`%20`). The affected hook tests passed through a temporary path without spaces +using Node's `--preserve-symlinks` and `--preserve-symlinks-main`. The final full +run used a real source copy without spaces and removed inherited agent-capability +environment variables. This port does not change unrelated hook handling. + +The Android HTML/CSS/JS/font assets are byte-identical to the accepted prototype. +The new normal APK omits instrumentation and carries the alpha version: +SHA-256 `509e44e12d0be251db6ed323e03035a0e2d16897c519a439679e8533ff5934fb`. +It has not replaced the installed APK. + +A macOS directory package reached ASAR creation; inspection found the host assets, +bonjour-service and secure-remote-password and no acceptance instrumentation. +Final ad-hoc signing failed with a local “internal error in Code Signing +subsystem”. No signing certificate/keychain access was requested. This is not a +successfully signed distributable. The standalone hidden Electron smoke also +failed to start to completion in this environment (timeout with no script output), +including an attempt from a disposable unprotected directory. Its runtime result +is **unverified**; the installed prototype remains the only user-accepted runtime. + +## Required release acceptance + +Real packaged-build acceptance for this source port remains pending. CI and +synthetic fixtures do not prove GPU capture, Android IME, TalkBack, rotation, +host firewalls or real device input on Windows/Linux. Official desktop release +signing, store distribution and a 30 FPS guarantee are outside this alpha. + +The `CanvasLink alpha` workflow runs the contracts and builds a downloadable +development APK. Its CI signature is ephemeral; it is not an update channel. +Run `node scripts/smoke-canvaslink.mjs` after the desktop build to exercise real +Electron preload/IPC and host enable/revoke/disable against a disposable hidden +fixture. It does not send input to user terminals or provide video acceptance. + +## Community APK distribution and onboarding (2026-10-26) + +- [CanvasLink](https://github.com/teo-nex/CanvasLink) is a separate public + distribution repository; application source remains in this PR. +- Version `0.3.0-alpha.1` is the APK from successful CI run `40235936427`, source + commit `eba7baf1f3db716b6600a605f1fda07c39e9119f`, re-signed locally with a + persistent distribution key. All ZIP entries outside `META-INF` match the CI + input byte for byte. Normal APKs contain no acceptance instrumentation. +- Distribution APK SHA-256: + `0534857896b2e22d7e832a8aaa6146b3fc6acb19f3df857cc9d3e8c1caf5a760`. + Public signing certificate SHA-256: + `0235b1aee591e4f0e24e59484927ead112889521a1b92e40959076d03635b3cb`. + The private key and password remain outside both repositories. +- Settings can copy a bilingual, pinned installation prompt and open the guide. + Copying does not enable the host, mutate pairing, install an APK or expose the + pairing code/device name. Three handler tests cover both locales and clipboard + failure; all passed. They use the repository's React test stand-in, not a live + desktop clipboard or physical Android device. +- The 103 integration tests, TypeScript checks, production build and source/built + output secret audit passed again after the settings change. +- The agent prompt selects one ADB device, verifies the APK hash, preserves app + data and stops on signature/downgrade conflicts. USB debugging and the initial + Android RSA confirmation belong to the device owner. +- Earlier debug signatures may conflict with the new distribution signature. + No APK was installed on the accepted tablet and no installed desktop was replaced. + Publication is distinct from physical acceptance of this exact APK/desktop port. diff --git a/docs/canvaslink.md b/docs/canvaslink.md new file mode 100644 index 000000000..18802ef5c --- /dev/null +++ b/docs/canvaslink.md @@ -0,0 +1,117 @@ +# CanvasLink for Android (experimental alpha) + +CanvasLink streams the **whole current CanvasTTY window** to an Android phone or +tablet on the same private IPv4 LAN. Touch, terminal keyboard input and shortcuts +are delivered to that window. This includes Settings and any sensitive content +visible in it. Enable access only for a device you trust. + +The host lives in **Settings → CanvasLink**. There is no separate desktop app to +install. It starts **off** on every desktop launch. The existing Web companion +and Even G2 integration retain their separate pairing and permissions. + +## Connect + +1. Install the [pinned Android alpha](https://github.com/teo-nex/CanvasLink#installation) + (Android 8+). **Settings → CanvasLink → Copy prompt for agent** copies USB/ADB + installation instructions with the exact APK URL and checksum. Enable USB + debugging and approve the RSA dialog on Android yourself. The agent installs + on one selected device and preserves data; it must stop on signing conflicts. + The desktop must be built from this PR; the official stable release does not + contain this integration yet. +2. Open Settings → CanvasLink on the desktop and choose **Enable access**. +3. Open CanvasLink on Android, select the discovered computer and enter the six + digits shown on the desktop. The code expires after two minutes and is used + once. If discovery is blocked, the Android connection screen has a manual + private IPv4 address option. Both devices must be on the same non-isolated LAN. +4. Tap a terminal to open the Android keyboard. Text goes directly into the + focused terminal; Enter executes it. The shortcut bar includes paste and + interrupt. Zoom/pan can bring a terminal into view. +5. **Forget device** revokes its session and generates a new code. **Turn off + access** closes the listener, discovery, video and input. A desktop restart + requires fresh pairing. Sessions expire after twelve hours and are bound to + the client's address; a changed address can require pairing again. + +The app distinguishes processed, pending and uncertain input. A disconnect does +not automatically replay a command. Check the terminal before retrying uncertain +input. Clipboard paste uses the Android clipboard; it does not read the desktop +clipboard. + +## Transport and boundaries + +- Host listener: private IPv4 clients on TCP 3499; mDNS `_canvaslink._tcp` discovery. + Do not expose or forward this port to the Internet. Networks may require an + inbound firewall allowance. No firewall rule or startup service is installed. +- No cloud service, STUN or TURN. Pairing uses SRP-6a; the code is not sent as + plaintext. Signalling uses AES-256-GCM with authenticated sequence numbers; + WebRTC media/data use DTLS-SRTP/SCTP encryption. The HTTP endpoint is not HTTPS; + the application protocol supplies the encryption. +- Pairing attempts and request sizes are bounded. A code authorizes the **whole + window**, not a selected-session grant. Treat the Android device as a keyboard + and pointer with the same authority as the person at that window. +- Electron capture is restricted to CanvasTTY's own main frame; input uses its + `webContents`, never OS-wide keyboard or pointer injection. This integrated + path does not require Accessibility control of other applications. +- A hidden isolated renderer handles media. Its IPC and the settings IPC reject + other renderers and child frames. Private test sockets, startup automation, + instrumentation entry points and global input helpers are not shipped. + +## Build + +From the repository root: + +```sh +npm ci +npx playwright install chromium +npm run test:canvaslink +npm run typecheck +npm run build +``` + +For the APK, install JDK 17 and Android SDK platform 35/build-tools 35.0.0, set +`JAVA_HOME` and `ANDROID_SDK_ROOT` (or `ANDROID_HOME`), then run: + +```sh +npm run build:canvaslink:android +``` + +Output: `integrations/canvaslink/dist/CanvasLink-debug.apk`. No Gradle or Android +Java dependencies are downloaded by the build script. A local development key +is generated under the ignored `.runtime` directory. CI produces an APK artifact +with an ephemeral development signature. Different builds can have different +keys and may not install as an update over one another. Keep your existing app +and its data until you have planned the transition. + +The separate community [CanvasLink distribution repository](https://github.com/teo-nex/CanvasLink) +publishes a pinned alpha APK and bilingual installation prompts. Its APK is the +verified CI payload re-signed with a persistent local distribution key; provenance, +SHA-256 and the public certificate fingerprint are recorded there. No private +signing key enters either repository. Source CI still produces ephemeral debug +signatures; the distribution release is a separate maintained publication, not +an official CanvasTTY release or automatic stable update channel. + +## Quality and platform status + +The prototype was physically tested on macOS with an Android 12 tablet and +accepted by its user before this source port. That acceptance applies to the +prototype APK/preview, not automatically to a newly packaged desktop or APK. +See [the port verification record](canvaslink-verification.md). + +Windows and Linux have not received physical device acceptance. Their shared +Electron path and JavaScript discovery implementation are candidates for testing, +not a verified compatibility promise. CI tests contracts and builds an APK; it +cannot establish real IME, GPU capture, firewall or touch behavior on those hosts. + +Capture first tries the owned renderer stream and falls back to bounded raw +snapshots (up to 2560×1600). The prototype's observed fallback was around 3–6 FPS; +30 FPS is not promised. High density can improve text clarity at a cost in CPU +and bandwidth. Normal desktop density is unchanged. For an isolated developer +run, `--force-device-scale-factor=2` supplies density at process start, or +`--canvaslink-high-density` requests one relaunch with that switch. Never enable +this while preserving an active terminal session without planning the restart. + +Before promotion beyond alpha: test a packaged build with a physical Android +device on macOS, Windows and Linux; include discovery, pairing/revocation, +Settings touch, native selects, IME composition, Ctrl+C/paste, Unicode, rotation, +background/resume, network loss, minimized/closed windows and capture quality. + +Краткая инструкция по-русски: [canvaslink.ru.md](canvaslink.ru.md). diff --git a/docs/canvaslink.ru.md b/docs/canvaslink.ru.md new file mode 100644 index 000000000..ce691e400 --- /dev/null +++ b/docs/canvaslink.ru.md @@ -0,0 +1,41 @@ +# CanvasLink: Android по локальной сети + +Экспериментальная интеграция: планшет показывает **всё текущее окно CanvasTTY** +и управляет им. Доступ включает терминалы, настройки и видимые секреты. +Подключайте только своё доверенное устройство. + +1. Установите [APK alpha на Android 8+](https://github.com/teo-nex/CanvasLink/blob/main/README.ru.md#установка). + В **Настройки → CanvasLink** есть кнопка **«Скопировать промпт агенту»**: + она копирует инструкцию по USB/ADB с точной ссылкой и SHA-256 APK. + Владелец включает USB-отладку и подтверждает RSA-запрос на Android; + агент устанавливает приложение на выбранное устройство с сохранением данных. + Нужна сборка компьютера из этого PR: в официальной стабильной версии раздела пока нет. +2. На компьютере откройте **Настройки → CanvasLink → Включить доступ**. +3. Откройте CanvasLink на планшете, выберите найденный компьютер и введите код. + Оба устройства должны быть в одной локальной сети без изоляции клиентов. + Ручной адрес нужен только при недоступном обнаружении. +4. Коснитесь терминала: появится клавиатура. Ввод передаётся напрямую; + Enter выполняет команду. В панели есть вставка и прерывание. +5. «Забыть устройство» отзывает сессию. «Выключить доступ» останавливает сеть, + видео и управление. При новом запуске компьютера доступ выключен. + +Одноразовый код действует две минуты. Сессия — до двенадцати часов; смена адреса +может потребовать нового подключения. При обрыве команды не повторяются +автоматически: сначала проверьте терминал. Вставка берёт буфер Android. + +Отдельное приложение на компьютере не требуется. Очки Even G2 и Web companion +сохраняют свои отдельные коды и разрешения. Порт 3499 не открывайте в Интернет. + +Проверенная пользователем версия работала на Mac с планшетом Android 12. +Этот перенос в исходники проходит отдельные проверки. Реальная работа с +Windows и Linux пока не подтверждена; плавность 30 FPS не обещается. +Отладочные APK разных сборок могут иметь разные подписи и не устанавливаться +поверх друг друга. Рабочую установленную версию сохраняйте до проверки новой. + +Отдельный репозиторий [CanvasLink](https://github.com/teo-nex/CanvasLink) содержит +APK-релизы и инструкции; исходники остаются в CanvasTTY. Опубликованная alpha +получает постоянную локальную подпись, её SHA-256 и открытый отпечаток сертификата +записаны в манифесте релиза. Это публикация сообщества, а не официальный релиз CanvasTTY. +При несовместимой подписи агент останавливается: удаление приложения и данных не выполняется. + +Команды сборки, устройство защиты и границы проверки: [canvaslink.md](canvaslink.md). diff --git a/electron.vite.config.ts b/electron.vite.config.ts index eefc35363..c175d1931 100644 --- a/electron.vite.config.ts +++ b/electron.vite.config.ts @@ -1,4 +1,5 @@ import { resolve } from "node:path"; +import { cpSync, mkdirSync } from "node:fs"; import react from "@vitejs/plugin-react"; import { defineConfig, externalizeDepsPlugin } from "electron-vite"; @@ -11,7 +12,14 @@ export default defineConfig({ || "" ) }, - plugins: [externalizeDepsPlugin()], + plugins: [externalizeDepsPlugin(), { + name: "canvaslink-host-assets", + closeBundle() { + const destination = resolve("out/main/canvaslink/host"); + mkdirSync(destination, { recursive: true }); + cpSync(resolve("integrations/canvaslink/host"), destination, { recursive: true }); + } + }], build: { rollupOptions: { input: resolve("src/main/index.ts") diff --git a/integrations/canvaslink/.gitignore b/integrations/canvaslink/.gitignore new file mode 100644 index 000000000..172582f4f --- /dev/null +++ b/integrations/canvaslink/.gitignore @@ -0,0 +1,7 @@ +node_modules/ +build/ +dist/ +.runtime/ +*.log +verification/*.png +verification/icon-previews.json diff --git a/integrations/canvaslink/LICENSE b/integrations/canvaslink/LICENSE new file mode 100644 index 000000000..d57e4c69a --- /dev/null +++ b/integrations/canvaslink/LICENSE @@ -0,0 +1,21 @@ +MIT License + +Copyright (c) 2026 CanvasLink contributors + +Permission is hereby granted, free of charge, to any person obtaining a copy +of this software and associated documentation files (the "Software"), to deal +in the Software without restriction, including without limitation the rights +to use, copy, modify, merge, publish, distribute, sublicense, and/or sell +copies of the Software, and to permit persons to whom the Software is +furnished to do so, subject to the following conditions: + +The above copyright notice and this permission notice shall be included in all +copies or substantial portions of the Software. + +THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR +IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, +FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE +AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER +LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, +OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE +SOFTWARE. diff --git a/integrations/canvaslink/THIRD_PARTY_NOTICES.md b/integrations/canvaslink/THIRD_PARTY_NOTICES.md new file mode 100644 index 000000000..7c045f906 --- /dev/null +++ b/integrations/canvaslink/THIRD_PARTY_NOTICES.md @@ -0,0 +1,17 @@ +# Dependencies + +- Electron 43.7.7 — MIT; Chromium and other bundled notices remain inside the + Electron distribution (`LICENSE`, `LICENSES.chromium.html`). +- bonjour-service 1.3.0 — MIT. +- secure-remote-password 0.3.1 — MIT. + +Transitive dependency licenses remain in their installed package directories. +The CanvasTTY desktop bundle retains production dependency licenses and Electron's +original bundled notices. Android uses platform APIs and contains no embedded +third-party Java libraries. No RustDesk or spacedesk source or binaries are used. + +## Onest + +Bundled Android UI font, from google/fonts/ofl/onest (Onest Project Authors). +SIL Open Font License 1.1; full license: `android/assets/onest-OFL.txt`. +Source: https://github.com/google/fonts/tree/main/ofl/onest diff --git a/integrations/canvaslink/android/AndroidManifest.xml b/integrations/canvaslink/android/AndroidManifest.xml new file mode 100644 index 000000000..e4493af36 --- /dev/null +++ b/integrations/canvaslink/android/AndroidManifest.xml @@ -0,0 +1,12 @@ + + + + + + + + + + + + diff --git a/integrations/canvaslink/android/assets/client.js b/integrations/canvaslink/android/assets/client.js new file mode 100644 index 000000000..4a53883aa --- /dev/null +++ b/integrations/canvaslink/android/assets/client.js @@ -0,0 +1,51 @@ +(()=>{ + 'use strict'; + const $=id=>document.getElementById(id),api=window.CanvasLinkClient,input=window.CanvasLinkInput; + let state=api.getState(),selected='',signature='',lastPointer=null,touchTimer,noticeTimer,viewTarget=''; + const put=(id,value)=>{if($(id)&&$(id).textContent!==value)$(id).textContent=value;}; + function targetStatus(){const kind=(state.source?.target==='terminal'||viewTarget==='terminal'&&state.source?.surface!=='settings')?'Терминал':state.source?.target==='text-field'?'Текстовое поле':state.source?.surface==='settings'?'Настройки':'Canvas';put('target-status',(input.active()?'Ввод · ':'')+kind);document.querySelector('.session-badge').dataset.state=state.connection;} + const errors={'delivery-uncertain':'Доставка не подтверждена. Проверьте терминал. Ввод остановлен, повтора не будет.','input-busy':'Канал занят. Ввод остановлен. Коснитесь терминала, чтобы продолжить.','not-connected':'Связь прервана. Ввод остановлен.','text-target-required':'Коснитесь терминала или текстового поля.','invalid-code':'Введите шесть цифр из Настройки → CanvasLink.','input-rejected':'Компьютер отклонил ввод.'}; + function notice(value){put('input-status',errors[value]||value);$('input-status').hidden=!value;clearTimeout(noticeTimer);if(value)noticeTimer=setTimeout(()=>{$('input-status').hidden=true;},7000);} + function updateConnect(){const busy=['connecting','pairing','resuming'].includes(state.connection);$('connect').disabled=busy||!/^\d{6}$/.test($('pin').value)||(!selected&&!($('manual').open&&$('address').value.trim()));$('connect').querySelector('span').textContent=busy?'Подключаем…':'Подключиться';} + function renderComputers(s){ + const list=s.computers||[];if(!list.some(c=>c.id===selected))selected=list.length===1?list[0].id:''; + const next=JSON.stringify(list.map(c=>[c.id,c.name])); + if(next!==signature){signature=next;$('computers').replaceChildren();for(const c of list){const button=document.createElement('button');button.type='button';button.dataset.computerId=c.id;button.className='computer';const name=document.createElement('span');name.textContent=String(c.name||'CanvasTTY').replace(/^CanvasLink\s+/,'');const icon=document.createElement('span');icon.className='computer-icon';icon.textContent='▣';const check=document.createElement('span');check.className='computer-check';check.textContent='✓';button.append(icon,name,check);button.onclick=()=>{selected=c.id;renderComputers(state);updateConnect();};$('computers').append(button);}} + for(const b of $('computers').querySelectorAll('button'))b.setAttribute('aria-pressed',String(b.dataset.computerId===selected)); + $('pair-status').hidden=!!list.length;put('pair-status',s.discovery==='searching'?'Ищем компьютер в вашей Wi-Fi сети…':'Включите CanvasLink в настройках CanvasTTY на компьютере.'); + } + function render(s){ + state=s;const show=s.connection==='connected'||['reconnecting','suspended'].includes(s.connection)||(!['idle','error'].includes(s.connection)&&!$('workspace').hidden); + $('workspace').hidden=!show;$('pairing').hidden=show;document.body.classList.toggle('is-workspace',show);renderComputers(s);updateConnect(); + const labels={connected:'Подключено',connecting:'Подключаем…',pairing:'Проверяем код…',resuming:'Восстанавливаем…',reconnecting:'Нет связи',suspended:'На паузе'}; + put('connection-status',labels[s.connection]||'Нет связи');$('connection-pill').dataset.state=s.connection; + for(const button of $('controls').querySelectorAll('button'))if(button.id!=='menu-toggle')button.disabled=s.connection!=='connected'; + const stats=s.stats||{},source=s.source||{}; + const wait=s.connection!=='connected'||!stats.framesDecoded; // A static frame remains usable; do not cover it with an opaque waiting card. + $('waiting').hidden=!wait;$('resume').hidden=!['reconnecting','suspended'].includes(s.connection); + put('waiting-title',s.connection==='suspended'?'Соединение на паузе':s.connection==='reconnecting'?'Восстанавливаем связь':'Открываем CanvasTTY'); + put('waiting-copy',s.connection==='reconnecting'?'Ввод остановлен. Ничего не отправляем повторно.':'Изображение появится здесь.'); + targetStatus(); + put('metrics',`Видео ${stats.width||'—'} × ${stats.height||'—'}\nКадров/с ${Number.isFinite(stats.framesPerSecond)?stats.framesPerSecond.toFixed(1):'—'}\nRTT канала ${Number.isFinite(stats.rtt)?Math.round(stats.rtt)+' мс':'—'}\nОжидают ACK ${s.pending||0}`); + const error=s.error?errors[s.error]||s.error:'';put('pair-error',show?'':error);put('stream-error',show?error:'');$('stream-error').hidden=!show||!error; + } + $('pair-form').onsubmit=e=>{e.preventDefault();try{if(api.connect({code:$('pin').value,computerId:selected||undefined,host:$('manual').open?$('address').value.trim()||undefined:undefined})){$('pin').value='';document.activeElement?.blur();api.hideKeyboard();}}catch(error){put('pair-error',errors[error.message]||error.message);}updateConnect();}; + $('pin').oninput=updateConnect;$('address').oninput=updateConnect;$('manual').ontoggle=updateConnect;$('rescan').onclick=()=>api.discover();$('resume').onclick=()=>api.resume(); + // Pointer-down never steals the native terminal IME focus. + $('controls').addEventListener('pointerdown',e=>{if(e.target.closest('button'))e.preventDefault();}); + for(const b of document.querySelectorAll('[data-key]'))b.onclick=()=>input.key(b.dataset.key,b.dataset.control?['control']:[]); + $('ctrl').onclick=()=>input.toggleControl();$('paste').onclick=()=>input.paste(); + $('keyboard-toggle').onclick=()=>{if(input.active())input.stop();else notice('Коснитесь терминала — клавиатура откроется сама.');}; + $('menu-toggle').onclick=()=>{input.stop();$('session-menu').showModal();};$('menu-close').onclick=()=>$('session-menu').close(); + $('diagnostics-toggle').onclick=()=>{$('session-menu').close();$('diagnostics').showModal();};$('diagnostics-close').onclick=()=>$('diagnostics').close(); + $('disconnect').onclick=()=>{$('session-menu').close();$('disconnect-dialog').showModal();};$('cancel-disconnect').onclick=()=>$('disconnect-dialog').close();$('confirm-disconnect').onclick=()=>{$('disconnect-dialog').close();input.stop();api.disconnect();}; + for(const id of ['fit','mode','reset-view'])$(id).addEventListener('click',()=>{$('session-menu').close();}); + window.addEventListener('canvaslink:tap',e=>{if(document.querySelector('dialog[open]')||state.connection!=='connected')return;input.open(e.detail.focus);}); + window.addEventListener('canvaslink:notice',e=>notice(e.detail)); + window.addEventListener('canvaslink:input-state',e=>{const d=e.detail;$('ctrl').setAttribute('aria-pressed',String(d.control));$('keyboard-toggle').setAttribute('aria-pressed',String(d.active));$('keyboard-toggle').setAttribute('aria-label',d.active?'Скрыть клавиатуру':'Как открыть клавиатуру');$('workspace').classList.toggle('is-typing',d.active);if(d.composition!==undefined){put('preedit',d.composition);$('preedit').hidden=!d.composition;}if(d.focus)state={...state,source:{...state.source,...d.focus,target:d.focus.kind}};targetStatus();}); + function pointerPosition(p){const video=$('video'),b=video.getBoundingClientRect(),v=$('viewport').getBoundingClientRect(),w=video.videoWidth||state.stats?.width||1280,h=video.videoHeight||state.stats?.height||800,k=Math.min(b.width/w,b.height/h);return{x:b.left-v.left+(b.width-w*k)/2+p.x*w*k,y:b.top-v.top+(b.height-h*k)/2+p.y*h*k};} + function paint(p,pulse){const q=pointerPosition(p);$('local-cursor').hidden=!p.trackpad;$('local-cursor').style.transform=`translate(${q.x-4}px,${q.y-3}px)`;if(pulse&&p.action==='down'){const f=$('touch-feedback');clearTimeout(touchTimer);f.hidden=false;f.style.transform=`translate(${q.x-16}px,${q.y-16}px)`;touchTimer=setTimeout(()=>{f.hidden=true;},280);}} + window.addEventListener('canvaslink:pointer',e=>{lastPointer=e.detail;paint(lastPointer,true);});window.addEventListener('canvaslink:view',e=>{viewTarget=e.detail.target||'';targetStatus();if(lastPointer){lastPointer.trackpad=e.detail.trackpad;paint(lastPointer,false);}}); + const resize=()=>{document.documentElement.style.setProperty('--app-height',Math.max(120,Math.round(window.visualViewport?.height||innerHeight))+'px');if(lastPointer)paint(lastPointer,false);};window.visualViewport?.addEventListener('resize',resize);window.addEventListener('resize',resize);resize(); + api.attachVideo($('video'));api.subscribe(render); +})(); diff --git a/integrations/canvaslink/android/assets/delivery.js b/integrations/canvaslink/android/assets/delivery.js new file mode 100644 index 000000000..cb1537500 --- /dev/null +++ b/integrations/canvaslink/android/assets/delivery.js @@ -0,0 +1,25 @@ +/* Transport contract v2. No DOM dependencies; shared by the client and tests. */ +(function(root,factory){if(typeof module==='object')module.exports=factory();else root.CanvasLinkDelivery=factory();})(globalThis,()=>{ + class Delivery { + constructor({channel,onChange=()=>{},timeout=65000,setTimer=(fn,ms)=>setTimeout(fn,ms),clearTimer=token=>clearTimeout(token),id=()=>crypto.randomUUID()}){Object.assign(this,{channel,onChange,timeout,setTimer,clearTimer,id});this.pending=new Map();this.sent=0;this.acked=0;this.seq=0;} + send(input){ + const dc=this.channel(); + if(!dc||dc.readyState!=='open')return Promise.reject(Error('not-connected')); + if(dc.bufferedAmount>65536||this.pending.size>=64)return Promise.reject(Error('input-busy')); + const id=this.id(); + return new Promise((resolve,reject)=>{ + const entry={resolve,reject,input,timer:this.setTimer(()=>this.finish(id,false,'delivery-uncertain'),this.timeout)}; + this.pending.set(id,entry); + try{dc.send(JSON.stringify({...input,id,seq:++this.seq}));this.sent++;this.onChange({id,status:'pending',kind:input.type,pending:this.pending.size});} + catch{this.finish(id,false,'not-sent');} + }); + } + finish(id,ok,error,focus){const entry=this.pending.get(id);if(!entry)return false;this.pending.delete(id);this.clearTimer(entry.timer);if(ok)this.acked++; + this.onChange({id,status:ok?'processed':error==='delivery-uncertain'?'uncertain':'failed',kind:entry.input.type,error:error||'',pending:this.pending.size}); + if(ok)entry.resolve({id,status:'processed',...(focus?{focus}:{})});else entry.reject(Error(error||'input-rejected'));return true; + } + receive(value){if(!['input-ok','input-error'].includes(value?.type))return false;return this.finish(value.id,value.type==='input-ok',value.error,value.focus);} + close(){for(const id of [...this.pending.keys()])this.finish(id,false,'delivery-uncertain');} + } + return {Delivery}; +}); diff --git a/integrations/canvaslink/android/assets/direct-input.js b/integrations/canvaslink/android/assets/direct-input.js new file mode 100644 index 000000000..ec04faa66 --- /dev/null +++ b/integrations/canvaslink/android/assets/direct-input.js @@ -0,0 +1,41 @@ +/* Ordered, immediate terminal input. Only the peer owns the queue; never replay. */ +(()=>{ + const api=window.CanvasLinkClient; + let token='',control=false,inflight=0; + const notify=detail=>window.dispatchEvent(new CustomEvent('canvaslink:input-state',{detail:{active:!!token,control,inflight,...detail}})); + function stop(focus){token='';control=false;api.hideKeyboard();notify({composition:'',...(focus?{focus}:{})});} + function fail(error){stop();window.dispatchEvent(new CustomEvent('canvaslink:notice',{detail:error.message||String(error)}));} + function send(value){ + if(api.getState().connection!=='connected')return Promise.reject(Error('not-connected')); + const owner=token;inflight++;notify(); + let promise;try{promise=api.sendInput(value);}catch(error){promise=Promise.reject(error);} + return Promise.resolve(promise).then(result=>{if(result?.status!=='processed')throw Error('delivery-uncertain');return result;}).catch(error=>{if(owner===token)fail(error);throw error;}).finally(()=>{inflight--;notify();}); + } + window.CanvasLinkInput=Object.freeze({ + open(focus){if(!focus?.editable)return stop(focus);token=crypto.randomUUID();control=false;notify({focus,composition:''});if(typeof Native?.showKeyboard==='function')Native.showKeyboard(token);}, + stop, + toggleControl(){control=!control;notify();}, + key(key,modifiers=[]){ + if(control&&!modifiers.includes('control'))modifiers=[...modifiers,'control'];control=false;notify(); + if(typeof Native?.terminalKey==='function'&&token)Native.terminalKey(key,JSON.stringify(modifiers));else send({type:'key',key,modifiers}).catch(()=>{}); + }, + paste(){control=false;notify();if(token&&typeof Native?.paste==='function')Native.paste();else window.dispatchEvent(new CustomEvent('canvaslink:notice',{detail:'Сначала коснитесь терминала или текстового поля для вставки.'}));}, + receive(value){ + if(!token||value?.token!==token)return; + if(value.type==='composition'){notify({composition:value.text||''});return;} + if(value.type==='notice'){window.dispatchEvent(new CustomEvent('canvaslink:notice',{detail:value.text}));return;} + if(value.type==='paste'){control=false;notify();send({type:'text',text:value.text}).catch(()=>{});return;} + if(value.type==='text'){ + const useControl=control;control=false;notify(); + if(useControl&&[...value.text].length===1&&/^[a-z]$/i.test(value.text)){send({type:'key',key:value.text.toLowerCase(),modifiers:['control']}).catch(()=>{});} + else send({type:'text',text:value.text}).catch(()=>{}); + } + if(value.type==='key'){ + let modifiers=value.modifiers||[];if(control&&!modifiers.includes('control'))modifiers=[...modifiers,'control']; + control=false;notify();send({type:'key',key:value.key,modifiers}).catch(()=>{}); + } + }, + active:()=>!!token + }); + api.subscribe(state=>{if(state.connection!=='connected'&&token)stop();}); +})(); diff --git a/integrations/canvaslink/android/assets/gestures.js b/integrations/canvaslink/android/assets/gestures.js new file mode 100644 index 000000000..c31fbef60 --- /dev/null +++ b/integrations/canvaslink/android/assets/gestures.js @@ -0,0 +1,289 @@ +/* Local interaction layer. CanvasLinkClient v2 and the pointer DOM contract stay stable. */ +(() => { + 'use strict'; + const $ = id => document.getElementById(id); + const api = window.CanvasLinkClient; + const viewport = $('viewport'), video = $('video'); + const touches = new Map(); + const clamp = (value, min, max) => Math.max(min, Math.min(max, value)); + const editor = target => target instanceof Element && (target.isContentEditable || + Boolean(target.closest('input,textarea,select,[contenteditable]:not([contenteditable="false"])'))); + const control = target => target instanceof Element && + Boolean(target.closest('button,input,textarea,select,a,summary,[role="button"],[contenteditable]')); + let scale = 1, offset = {x: 0, y: 0}, trackpad = false; + let pointer = {x: .5, y: .5}, drag = false, press = null, pinch = null; + let composing = false, pairFrame = 0, holdTimer = 0; + let tapEpoch=0, focusRect=null, focusCaret=null, focusKind='',focusFont=14,focusViewportWidth=0,focusContext=null,knownTerminal=null,autoFramePending=true,focusedView=false,beforeFocus=null,remoteSurface='canvas',remoteViewportWidth=0,dragRects=[]; + const validRect=r=>r&&['x','y','width','height'].every(k=>Number.isFinite(r[k]))&&r.width>0&&r.height>0; + + const connected = () => api.getState().connection === 'connected'; + const canInput = () => connected() && !composing && !editor(document.activeElement); + // Never queue, retry, or turn a rejected/uncertain delivery into another input. + function deliver(send) { + try { return Promise.resolve(send()).catch(() => undefined); } catch (_) { return Promise.resolve(); } + } + function send(value, cleanup = false) { + if (cleanup ? connected() : canInput()) return deliver(() => api.sendInput(value)); + } + function mouse(action, at, extra = {}) { + // A held button must still be released if focus has just entered an editor. + const cleanup = action === 'up' && drag; + if (!(cleanup ? connected() : canInput())) return; + pointer = {x: at.x, y: at.y}; + window.dispatchEvent(new CustomEvent('canvaslink:pointer', { + detail: {...pointer, action, trackpad} + })); + return send({type: 'pointer', action, ...pointer, button: 0, ...extra}, cleanup); + } + + // The element fills the viewport, but object-fit:contain can leave letterboxes. + // Its transformed bounding box already includes our centre-origin scale/offset. + function contentBox() { + const rect = video.getBoundingClientRect(); + const vw = video.videoWidth || 1280, vh = video.videoHeight || 800; + const fit = Math.min(rect.width / vw, rect.height / vh); + const width = vw * fit, height = vh * fit; + return {rect, width, height, left: rect.left + (rect.width - width) / 2, + top: rect.top + (rect.height - height) / 2}; + } + function position(x, y) { + const box = contentBox(); + return {x: clamp((x - box.left) / Math.max(1, box.width), 0, 1), + y: clamp((y - box.top) / Math.max(1, box.height), 0, 1)}; + } + function transform() { + video.style.transform = `translate(${offset.x}px,${offset.y}px) scale(${scale})`; + const percentage = `${Math.round(scale * 100)}%`; + if($('view-toggle')){$('view-toggle').disabled=!connected()||!focusedView&&scale===1&&(!knownTerminal||remoteSurface==='settings');$('view-toggle').setAttribute('aria-label',focusedView||scale>1?'Показать весь Canvas':'Приблизить активный терминал');$('view-toggle-label').textContent=focusedView||scale>1?'Весь Canvas':'Терминал';} + if ($('zoom-label')) $('zoom-label').textContent = percentage; + $('fit').setAttribute('aria-label', `${percentage} — ${scale === 1 ? 'увеличить окно' : 'вписать окно целиком'}`); + if ($('mode-label')) $('mode-label').textContent = trackpad ? 'Тачпад' : 'Касание'; + $('mode').setAttribute('aria-pressed', String(trackpad)); + if ($('gesture-hint')) $('gesture-hint').textContent = trackpad + ? 'Палец — курсор · касание — клик · удержание — перетаскивание · два пальца — прокрутка · щипок — масштаб' + : 'Касание — клик · движение — перетаскивание · два пальца — масштаб и обзор'; + window.dispatchEvent(new CustomEvent('canvaslink:view', { + detail: {scale, offset: {...offset}, trackpad,...(focusedView?{target:focusKind}:{})} + })); + } + function zoomView(nextScale, anchor, nextAnchor = anchor, base = {scale, offset: {...offset}}) { + autoFramePending=false;focusedView=false; + const box = contentBox(), bounds = viewport.getBoundingClientRect(); + const centre = {x: box.rect.left + box.rect.width / 2 - offset.x, + y: box.rect.top + box.rect.height / 2 - offset.y}; + const width = box.width / scale, height = box.height / scale; + scale = clamp(nextScale, 1, 8); + const ratio = scale / base.scale; + const maxX = Math.max(0, (width * scale - bounds.width) / 2); + const maxY = Math.max(0, (height * scale - bounds.height) / 2); + offset = { + x: clamp(nextAnchor.x - centre.x - (anchor.x - centre.x - base.offset.x) * ratio, -maxX, maxX), + y: clamp(nextAnchor.y - centre.y - (anchor.y - centre.y - base.offset.y) * ratio, -maxY, maxY) + }; + transform(); + } + + function frameFocus(){ + if(!focusedView||!focusRect)return; + const r=viewport.getBoundingClientRect(),vw=video.videoWidth||1280,vh=video.videoHeight||800; + const fit=Math.min(r.width/vw,r.height/vh),width=vw*fit,height=vh*fit; + const field=focusKind==='text-field',typing=!!window.CanvasLinkInput?.active(); + const remoteWidth=focusViewportWidth||vw; + scale=field?clamp(Math.min(r.width*.92/(Math.max(.08,focusRect.width)*width),14/(width/remoteWidth*Math.max(10,focusFont))),1,4):clamp(Math.min(r.width*.96/(Math.max(.08,focusRect.width)*width),typing?8:r.height*.92/(Math.max(.08,focusRect.height)*height)),1,8); + const maxX=Math.max(0,(width*scale-r.width)/2),maxY=Math.max(0,(height*scale-r.height)/2); + const context=field&&validRect(focusContext)&&focusContext.width*width*scale{ + const d=e.detail; + if(d.focus){remoteSurface=d.focus.surface||'canvas';dragRects=d.focus.dragRects||[];} + if(['terminal','text-field'].includes(d.focus?.kind)&&d.focus.editable&&validRect(d.focus.rect)){ + if(!focusedView)beforeFocus={scale,offset:{...offset}}; + focusRect=d.focus.rect;focusCaret=d.focus.caret;focusKind=d.focus.kind;focusFont=d.focus.fontSize||14;focusViewportWidth=d.focus.viewport?.width||0;focusContext=d.focus.contextRect;focusedView=true;frameFocus(); + }else if(d.focus){ + // Non-text controls keep the surrounding Settings context. + if(focusedView&&beforeFocus){scale=beforeFocus.scale;offset=beforeFocus.offset;transform();} + focusedView=false;beforeFocus=null;focusRect=null;focusCaret=null; + }else if(!d.active){if(focusedView&&focusKind==='text-field'&&beforeFocus){scale=beforeFocus.scale;offset=beforeFocus.offset;transform();beforeFocus=null;focusedView=false;}else if(focusedView&&focusKind==='terminal')frameFocus();} + }); + new ResizeObserver(()=>{if(focusedView)frameFocus();else transform();}).observe(viewport); + video.addEventListener('resize',()=>{if(focusedView)frameFocus();}); + $('view-toggle')?.addEventListener('click',()=>{autoFramePending=false;if(focusedView||scale>1){window.CanvasLinkInput?.stop();focusedView=false;scale=1;offset={x:0,y:0};transform();}else if(knownTerminal&&remoteSurface!=='settings'){focusKind='terminal';focusRect=knownTerminal.rect;focusCaret=knownTerminal.caret;focusViewportWidth=knownTerminal.viewport?.width||0;focusedView=true;frameFocus();}}); + + const stopHold = () => { clearTimeout(holdTimer); holdTimer = 0; }; + function updatePair() { + pairFrame = 0; + if (touches.size !== 2 || !pinch || !canInput()) return; + const [a, b] = [...touches.values()]; + const x = (a.x + b.x) / 2, y = (a.y + b.y) / 2; + const distance = Math.hypot(a.x - b.x, a.y - b.y); + if (trackpad && !pinch.kind) { + if (Math.abs(distance - pinch.distance) > 8 && Math.abs(distance / pinch.distance - 1) > .06) pinch.kind = 'zoom'; + else if (Math.hypot(x - pinch.x, y - pinch.y) > 6) pinch.kind = 'scroll'; + else return; + } + if (trackpad && pinch.kind === 'scroll') { + focusedView=false; + const dx = clamp(pinch.lastX - x, -2000, 2000), dy = clamp(pinch.lastY - y, -2000, 2000); + if (dx || dy) send({type: 'scroll', ...pointer, dx, dy}); + } else { + zoomView(pinch.scale * distance / pinch.distance, {x: pinch.x, y: pinch.y}, {x, y}, pinch); + } + pinch.lastX = x; pinch.lastY = y; + } + function flushPair() { + if (pairFrame) { cancelAnimationFrame(pairFrame); updatePair(); } + } + function cancelGesture() { + stopHold(); + if (pairFrame) { cancelAnimationFrame(pairFrame); pairFrame = 0; } + if (drag && connected()) mouse('up', pointer); + drag = false; press = null; pinch = null; + const ids = [...touches.keys()]; + touches.clear(); // Clear before releasing capture: loss can arrive synchronously. + for (const id of ids) { + try { if (viewport.hasPointerCapture(id)) viewport.releasePointerCapture(id); } catch (_) {} + } + } + + $('fit').onclick = () => { + cancelGesture(); autoFramePending=false;focusedView=false;scale = scale === 1 ? 2 : 1; offset = {x: 0, y: 0}; transform(); + }; + $('mode').onclick = () => { cancelGesture(); trackpad = !trackpad; transform(); }; + // Optional hook: also works while the parent UI is being upgraded in place. + document.addEventListener('click', e => { + if (e.target instanceof Element && e.target.closest('#reset-view')) { + cancelGesture(); autoFramePending=false;focusedView=false;scale = 1; offset = {x: 0, y: 0}; transform(); + } + }); + if (!viewport.hasAttribute('tabindex')) viewport.tabIndex = 0; + viewport.addEventListener('pointerdown', e => { + if (!canInput()) { e.preventDefault(); return; } + if (e.button !== 0 || control(e.target) || e.target.closest?.('#waiting')) return; + e.preventDefault();++tapEpoch;viewport.focus({preventScroll: true}); + try { viewport.setPointerCapture(e.pointerId); } catch (_) { cancelGesture(); return; } + touches.set(e.pointerId, {x: e.clientX, y: e.clientY}); + if (touches.size === 1) { + const at=position(e.clientX,e.clientY); + const onSlider=dragRects.some(r=>validRect(r)&&at.x>=r.x&&at.x<=r.x+r.width&&at.y>=r.y&&at.y<=r.y+r.height); + press = {x: e.clientX, y: e.clientY, travel: 0,scroll:!trackpad&&remoteSurface==='settings'&&!onSlider,at}; + if (trackpad && e.pointerType !== 'mouse') { + const held = press; + holdTimer = setTimeout(() => { + holdTimer = 0; + if (press === held && touches.size === 1 && held.travel < 8 && canInput()) { + drag = true; mouse('down', pointer); + } + }, 450); + } + } else if (touches.size === 2) { + stopHold(); + if (drag) mouse('up', pointer); + drag = false; press = null; + const [a, b] = [...touches.values()]; + pinch = {distance: Math.max(1, Math.hypot(a.x - b.x, a.y - b.y)), scale, + x: (a.x + b.x) / 2, y: (a.y + b.y) / 2, lastX: (a.x + b.x) / 2, + lastY: (a.y + b.y) / 2, offset: {...offset}, kind: null}; + } + }); + viewport.addEventListener('pointermove', e => { + const previous = touches.get(e.pointerId); + if (!previous) return; + touches.set(e.pointerId, {x: e.clientX, y: e.clientY}); + if (touches.size === 2 && pinch) { + // Classify the settled frame, not half of a two-pointer update. Scroll uses + // centroid deltas, so moving both fingers never doubles the remote scroll. + if (!pairFrame) pairFrame = requestAnimationFrame(updatePair); + return; + } + if (!press) return; + press.travel = Math.max(press.travel, Math.hypot(e.clientX - press.x, e.clientY - press.y)); + if (press.travel >= 8) stopHold(); + if (trackpad) { + const r = viewport.getBoundingClientRect(); + pointer = {x: clamp(pointer.x + (e.clientX - previous.x) / Math.max(1, r.width), 0, 1), + y: clamp(pointer.y + (e.clientY - previous.y) / Math.max(1, r.height), 0, 1)}; + mouse('move', pointer, drag ? {drag: true} : {}); + } else if(press.scroll&&press.travel>8){ + focusedView=false; + const k=(remoteViewportWidth||video.videoWidth)/Math.max(1,contentBox().width); + send({type:'scroll',...press.at,dx:clamp((previous.x-e.clientX)*k,-2000,2000),dy:clamp((previous.y-e.clientY)*k,-2000,2000)}); + } else if (press.travel > 8 || drag) { + if (!drag) { mouse('down', position(press.x, press.y)); drag = true; } + mouse('move', position(e.clientX, e.clientY), {drag: true}); + } + }); + function release(e) { + if (!touches.has(e.pointerId)) return; + stopHold(); + if (e.type === 'pointerup') flushPair(); + else if (pairFrame) { cancelAnimationFrame(pairFrame); pairFrame = 0; } + if (drag && e.type === 'pointercancel') mouse('up', pointer); + if (touches.size === 1 && press && e.type !== 'pointercancel') { + const at = trackpad ? pointer : position(e.clientX, e.clientY); + if (drag) mouse('up', at); + else if (press.travel < 8 && Math.hypot(e.clientX - press.x, e.clientY - press.y) < 8) { + const epoch=tapEpoch; + mouse('down', at);Promise.resolve(mouse('up', at)).then(receipt=>{ + if(epoch===tapEpoch&&connected()&&receipt?.status==='processed')window.dispatchEvent(new CustomEvent('canvaslink:tap',{detail:{focus:receipt.focus,at}})); + }); + } + } + touches.delete(e.pointerId); + if (touches.size < 2) pinch = null; + // No remaining finger may turn a pair gesture into a tap or resumed drag. + press = null; drag = false; + } + viewport.addEventListener('pointerup', release); + viewport.addEventListener('pointercancel', release); + viewport.addEventListener('lostpointercapture', e => { + // The video's implicit capture is transferred to the viewport. Its own loss + // bubbles here but must NOT cancel the viewport's newly captured gesture. + if (e.target === viewport) release({pointerId: e.pointerId, type: 'pointercancel'}); + }); + window.addEventListener('blur', cancelGesture); + document.addEventListener('visibilitychange', () => { if (document.hidden) cancelGesture(); }); + api.subscribe(state => { + if(state.connection!=='connected'){++tapEpoch;cancelGesture();focusedView=false;focusCaret=null;return;} + if(state.source?.viewport?.width>0)remoteViewportWidth=state.source.viewport.width; + if(state.source?.surface){remoteSurface=state.source.surface;dragRects=state.source.dragRects||[];} + const terminal=state.source?.target==='terminal'&&validRect(state.source.rect)?state.source:state.source?.terminalView; + if(terminal&&validRect(terminal.rect)){knownTerminal=terminal;if(autoFramePending&&remoteSurface!=='settings'){autoFramePending=false;focusKind='terminal';focusRect=knownTerminal.rect;focusCaret=knownTerminal.caret;focusViewportWidth=knownTerminal.viewport?.width||0;focusedView=true;frameFocus();}} + if(remoteSurface==='settings'&&focusedView&&focusKind==='terminal'){focusedView=false;scale=1;offset={x:0,y:0};transform();} + // Health may follow an already selected cursor, but can never open an IME. + // Manual pan/zoom/scroll disables following until another confirmed tap. + if(focusedView&&focusKind==='terminal'&&state.source?.target==='terminal'&&validRect(state.source.rect)&&validRect(state.source.caret)){focusRect=state.source.rect;focusCaret=state.source.caret;frameFocus();} + }); + document.addEventListener('focusin', e => { if (editor(e.target)) cancelGesture(); }); + window.addEventListener('compositionstart', () => { composing = true; cancelGesture(); }); + window.addEventListener('compositionend', () => { composing = false; }); + + viewport.addEventListener('wheel', e => { + if (!canInput() || control(e.target) || e.target.closest?.('#waiting')) return; + e.preventDefault(); + const dx = e.deltaX * (e.deltaMode === 1 ? 16 : e.deltaMode === 2 ? viewport.clientWidth : 1); + const dy = e.deltaY * (e.deltaMode === 1 ? 16 : e.deltaMode === 2 ? viewport.clientHeight : 1); + // Chromium exposes physical trackpad pinch as Ctrl+wheel, not touch pointers. + if (e.ctrlKey) { cancelGesture(); zoomView(scale * Math.exp(-dy * .002), {x: e.clientX, y: e.clientY}); return; } + focusedView=false;send({type: 'scroll', ...(trackpad ? pointer : position(e.clientX, e.clientY)), + dx: clamp(dx, -2000, 2000), dy: clamp(dy, -2000, 2000)}); + }, {passive: false}); + const terminalKeys = new Set(['Enter', 'Tab', 'Escape', 'Backspace', 'Delete', + 'ArrowLeft', 'ArrowRight', 'ArrowUp', 'ArrowDown', 'Home', 'End', 'PageUp', 'PageDown']); + window.addEventListener('keydown', e => { + if (document.querySelector('dialog[open]') || !canInput() || e.defaultPrevented || e.isComposing || e.keyCode === 229 || editor(e.target)) return; + if (!(e.target instanceof Element) || control(e.target)) return; + if (e.target !== $('workspace') && !viewport.contains(e.target)) return; + if (e.key === 'Enter' && e.repeat) { e.preventDefault(); return; } + const modifiers = [e.ctrlKey ? 'control' : null, e.shiftKey ? 'shift' : null, + e.altKey ? 'alt' : null, e.metaKey ? 'meta' : null].filter(Boolean); + let sendKey; + if (terminalKeys.has(e.key)) sendKey = () => api.sendKey(e.key, modifiers); + else if ((e.ctrlKey || e.metaKey) && 'cavzdl'.includes(e.key.toLowerCase())) sendKey = () => api.sendKey(e.key.toLowerCase(), modifiers); + else if ([...e.key].length === 1 && !e.ctrlKey && !e.metaKey && !e.altKey) sendKey = () => api.sendText(e.key); + if (sendKey) { e.preventDefault(); deliver(sendKey); } + }); +})(); diff --git a/integrations/canvaslink/android/assets/index.html b/integrations/canvaslink/android/assets/index.html new file mode 100644 index 000000000..4c54abe9d --- /dev/null +++ b/integrations/canvaslink/android/assets/index.html @@ -0,0 +1,14 @@ +CanvasLink +
+
CanvasLinkЛокальное подключение
+
CANVASTTY · ANDROID

Ваш Canvas.
Под рукой.

Терминалы, проекты и привычная работа.
Теперь — на экране планшета.

+
НАЧНЁМ

Подключить компьютер

Оба устройства должны быть в одной Wi-Fi сети.

Ищем компьютер…

CanvasTTY → Настройки → CanvasLink

Компьютер не находится?

Проверьте Wi-Fi или введите адрес из настроек компьютера.

Напрямую. Без облака и аккаунта.
+
+

Рабочая область CanvasTTY

+

Открываем CanvasTTY

Изображение появится здесь.

+ +
+
Подключаем…

Коснитесь терминала, чтобы печатать. Два пальца — масштаб и обзор.

 +

Диагностика

RTT — обмен данными. Это не полная задержка изображения.

+
Завершить сеанс?
Терминалы и проекты останутся открыты на компьютере.

+
diff --git a/integrations/canvaslink/android/assets/onest-OFL.txt b/integrations/canvaslink/android/assets/onest-OFL.txt
new file mode 100644
index 000000000..f480c31d2
--- /dev/null
+++ b/integrations/canvaslink/android/assets/onest-OFL.txt
@@ -0,0 +1,93 @@
+Copyright 2021 The Onest Project Authors (https://github.com/googlefonts/onest)
+
+This Font Software is licensed under the SIL Open Font License, Version 1.1.
+This license is copied below, and is also available with a FAQ at:
+https://scripts.sil.org/OFL
+
+
+-----------------------------------------------------------
+SIL OPEN FONT LICENSE Version 1.1 - 26 February 2007
+-----------------------------------------------------------
+
+PREAMBLE
+The goals of the Open Font License (OFL) are to stimulate worldwide
+development of collaborative font projects, to support the font creation
+efforts of academic and linguistic communities, and to provide a free and
+open framework in which fonts may be shared and improved in partnership
+with others.
+
+The OFL allows the licensed fonts to be used, studied, modified and
+redistributed freely as long as they are not sold by themselves. The
+fonts, including any derivative works, can be bundled, embedded,
+redistributed and/or sold with any software provided that any reserved
+names are not used by derivative works. The fonts and derivatives,
+however, cannot be released under any other type of license. The
+requirement for fonts to remain under this license does not apply
+to any document created using the fonts or their derivatives.
+
+DEFINITIONS
+"Font Software" refers to the set of files released by the Copyright
+Holder(s) under this license and clearly marked as such. This may
+include source files, build scripts and documentation.
+
+"Reserved Font Name" refers to any names specified as such after the
+copyright statement(s).
+
+"Original Version" refers to the collection of Font Software components as
+distributed by the Copyright Holder(s).
+
+"Modified Version" refers to any derivative made by adding to, deleting,
+or substituting -- in part or in whole -- any of the components of the
+Original Version, by changing formats or by porting the Font Software to a
+new environment.
+
+"Author" refers to any designer, engineer, programmer, technical
+writer or other person who contributed to the Font Software.
+
+PERMISSION & CONDITIONS
+Permission is hereby granted, free of charge, to any person obtaining
+a copy of the Font Software, to use, study, copy, merge, embed, modify,
+redistribute, and sell modified and unmodified copies of the Font
+Software, subject to the following conditions:
+
+1) Neither the Font Software nor any of its individual components,
+in Original or Modified Versions, may be sold by itself.
+
+2) Original or Modified Versions of the Font Software may be bundled,
+redistributed and/or sold with any software, provided that each copy
+contains the above copyright notice and this license. These can be
+included either as stand-alone text files, human-readable headers or
+in the appropriate machine-readable metadata fields within text or
+binary files as long as those fields can be easily viewed by the user.
+
+3) No Modified Version of the Font Software may use the Reserved Font
+Name(s) unless explicit written permission is granted by the corresponding
+Copyright Holder. This restriction only applies to the primary font name as
+presented to the users.
+
+4) The name(s) of the Copyright Holder(s) or the Author(s) of the Font
+Software shall not be used to promote, endorse or advertise any
+Modified Version, except to acknowledge the contribution(s) of the
+Copyright Holder(s) and the Author(s) or with their explicit written
+permission.
+
+5) The Font Software, modified or unmodified, in part or in whole,
+must be distributed entirely under this license, and must not be
+distributed under any other license. The requirement for fonts to
+remain under this license does not apply to any document created
+using the Font Software.
+
+TERMINATION
+This license becomes null and void if any of the above conditions are
+not met.
+
+DISCLAIMER
+THE FONT SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
+EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTIES OF
+MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT
+OF COPYRIGHT, PATENT, TRADEMARK, OR OTHER RIGHT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
+INCLUDING ANY GENERAL, SPECIAL, INDIRECT, INCIDENTAL, OR CONSEQUENTIAL
+DAMAGES, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
+FROM, OUT OF THE USE OR INABILITY TO USE THE FONT SOFTWARE OR FROM
+OTHER DEALINGS IN THE FONT SOFTWARE.
diff --git a/integrations/canvaslink/android/assets/onest.ttf b/integrations/canvaslink/android/assets/onest.ttf
new file mode 100644
index 000000000..477cb3102
Binary files /dev/null and b/integrations/canvaslink/android/assets/onest.ttf differ
diff --git a/integrations/canvaslink/android/assets/style.css b/integrations/canvaslink/android/assets/style.css
new file mode 100644
index 000000000..a101c8076
--- /dev/null
+++ b/integrations/canvaslink/android/assets/style.css
@@ -0,0 +1,31 @@
+@font-face{font-family:Onest;src:url('onest.ttf') format('truetype');font-weight:100 900;font-style:normal;font-display:swap}
+:root{color-scheme:dark;--bg:#151819;--panel:#1f2324;--raised:#292e2e;--line:#363d3d;--ink:#f0f2ec;--muted:#adb5b0;--accent:#d4e8b9;--danger:#ffb4a2;--app-height:100dvh;font:16px/1.5 Roboto,'Noto Sans',sans-serif}
+*{box-sizing:border-box}html,body{margin:0;min-width:280px;background:var(--bg);color:var(--ink);-webkit-font-smoothing:antialiased}body.is-workspace{height:var(--app-height);overflow:hidden;overscroll-behavior:none}[hidden]{display:none!important}.sr-only{position:absolute!important;width:1px;height:1px;overflow:hidden;clip:rect(0,0,0,0);white-space:nowrap}
+button,input{font:inherit;color:inherit;-webkit-tap-highlight-color:transparent}button{cursor:pointer;touch-action:manipulation;display:inline-flex;align-items:center;justify-content:center;gap:10px;border:1px solid var(--line);background:var(--panel);border-radius:10px;min-height:48px;min-width:48px;padding:10px 16px;font-size:14px;font-weight:500}button:hover{background:var(--raised)}button:active{background:#394238}button:disabled{opacity:.45;cursor:default}button:focus-visible,input:focus-visible,summary:focus-visible,#viewport:focus-visible{outline:2px solid var(--accent);outline-offset:2px}.button{min-height:52px}.primary{background:var(--accent);border-color:var(--accent);color:#20271a;font-weight:650}.primary:hover{background:#e1f0cf}.danger{color:var(--danger)}.icon-button{width:48px;padding:0;border:0;background:transparent;font-size:30px}.eyebrow{font:11px/1.5 monospace;letter-spacing:.13em;color:var(--muted)}.subtle,.hint{color:var(--muted);font-size:14px;line-height:1.6}
+.pairing-screen{max-width:1280px;margin:auto;padding:0 clamp(20px,5vw,72px) 36px}.pair-header{height:100px;display:flex;align-items:center;justify-content:space-between;border-bottom:1px solid #2b3031;gap:20px}.wordmark{display:flex;align-items:center;font-size:23px;font-weight:600;letter-spacing:-1px}.wordmark svg{height:34px;width:34px;margin-right:12px}.wordmark>span{font-weight:400;color:var(--muted)}.local-label{font-size:12px;color:var(--muted);display:flex;align-items:center;gap:8px}.local-label i,.connection-pill i,.session-badge i{width:6px;height:6px;display:inline-block;border-radius:50%;background:var(--accent)}.pair-layout{display:grid;grid-template-columns:1fr 400px;align-items:center;gap:clamp(40px,8vw,120px);padding:clamp(40px,8vh,80px) 0}.pair-intro h1{font-weight:450;font-size:clamp(44px,5.5vw,70px);line-height:1.08;letter-spacing:-3px;margin:22px 0}.pair-intro h1 em{font-style:normal;color:var(--accent)}.pair-intro>p{color:var(--muted);font-size:16px;line-height:1.7}.pair-illustration{margin-top:38px;max-width:350px}.mini-canvas{height:180px;position:relative;border:1px solid var(--line);background:radial-gradient(#4b555039 .8px,transparent .8px) 0 0/14px 14px;border-radius:12px;color:var(--muted);font:10px monospace;padding:10px 12px;overflow:hidden}.mini-dot{display:inline-block;width:5px;height:5px;border-radius:50%;background:var(--accent);margin-right:5px}.mini-window{position:absolute;left:26px;top:44px;right:48px;height:108px;border:1px solid #586451;border-radius:7px;background:#1b201d;box-shadow:0 12px 30px #0003;padding:0 12px;color:var(--ink);font:13px/2 monospace}.mini-title{font:10px/28px sans-serif;border-bottom:1px solid #343d35;display:block;margin:0 -12px 12px;padding:0 12px;color:var(--muted)}.mini-window b{color:var(--accent);font-weight:400}.mini-ghost{position:absolute;left:302px;top:60px;width:100px;height:98px;border:1px solid #424946;border-radius:7px;background:#232927}.illustration-caption{display:block;color:#909b93;font-size:11px;margin:12px 0 0 1px}.pair-card{padding:28px;border:1px solid var(--line);background:var(--panel);border-radius:20px}.pair-card h2{font-size:23px;letter-spacing:-.6px;font-weight:500;line-height:1.25;margin:8px 0}.pair-card>.subtle{font-size:13px;margin-bottom:24px}.field-heading{display:flex;align-items:center;justify-content:space-between;margin:8px 0}.field-label,.field-heading>label{font-size:13px;color:var(--ink);display:block;margin:20px 0 8px}.field-heading>label{margin:0}.text-button{font-size:12px;color:var(--muted);border:0;background:transparent;padding:4px 0;min-width:48px;min-height:36px}.computers{display:grid;gap:8px}.computer{width:100%;text-align:left;justify-content:flex-start;min-height:60px;background:#1b1f20;border-color:#454e49}.computer[aria-pressed=true]{border-color:#849776;background:#2b342a}.computer-icon{font-size:24px;color:var(--accent)}.computer-check{margin-left:auto;color:var(--accent);opacity:0}.computer[aria-pressed=true] .computer-check{opacity:1}#pair-status{color:var(--muted);font-size:13px;min-height:52px;margin:0}input{width:100%;background:#171b1b;border:1px solid #46504a;border-radius:10px;min-height:50px;padding:12px 14px;outline:none}#pin{font:30px/1.5 monospace;letter-spacing:.32em;text-align:center;padding-left:24px}#pin::placeholder{color:#69736c}.hint{font-size:11px;margin:8px 0 20px}#connect{width:100%;justify-content:space-between}#connect>b{font-size:23px;font-weight:400}#pair-error:empty{display:none}#pair-error{color:var(--danger);font-size:13px}details{margin-top:20px;font-size:12px;color:var(--muted)}summary{cursor:pointer;min-height:32px;display:flex;align-items:center;justify-content:center;list-style:none}summary::-webkit-details-marker{display:none}summary:after{content:'⌄';margin-left:8px}details[open] summary:after{content:'⌃'}.pair-foot{text-align:center;font-size:11px;color:#9aa59c;border-top:1px solid #333b35;padding-top:20px;margin-top:18px}
+/* The sole reserved chrome is a single 56px keyboard accessory row. */
+.workspace{height:var(--app-height);width:100%;display:flex;flex-direction:column;overflow:hidden;padding:0 env(safe-area-inset-right) env(safe-area-inset-bottom) env(safe-area-inset-left);background:#111414}.remote-viewport{flex:1;min-height:0;position:relative;overflow:hidden;touch-action:none;outline:none!important;background:#15191a}#video{position:absolute;inset:0;width:100%;height:100%;object-fit:contain;transform-origin:center;pointer-events:none}.session-badge{position:absolute;top:12px;left:12px;display:flex;align-items:center;gap:7px;border:1px solid #46514688;background:#1a211cba;backdrop-filter:blur(10px);padding:5px 10px;border-radius:20px;color:#d4ddd4;font-size:10px;pointer-events:none;opacity:.8}.session-badge[data-state=reconnecting] i,.session-badge[data-state=suspended] i{background:#e7b571}.keybar{display:flex;align-items:center;height:56px;flex:0 0 56px;padding:4px;gap:4px;border-top:1px solid #303838;background:#202627;z-index:2}.keybar button{border:0;border-radius:6px;background:transparent;height:48px;min-height:48px;min-width:48px;flex:0 0 auto;padding:0 12px;font:14px/1 monospace;color:#e2e8e1}.keybar button:hover,.keybar button:active{background:#354037}.keybar button[aria-pressed=true]{background:var(--accent);color:#1a2618}.keybar .bar-icon{width:48px;flex-shrink:0;font:21px/1 sans-serif;color:var(--muted)}.keys{display:flex;flex:1;min-width:0;overflow-x:auto;overflow-y:hidden;align-items:center;gap:2px;scrollbar-width:none;white-space:nowrap}.keys::-webkit-scrollbar{display:none}.key-divider{height:18px;width:1px;background:#49534c;flex:0 0 1px;margin:0 8px}.keybar .enter-key{color:var(--accent);font-size:23px}.local-cursor{position:absolute;left:0;top:0;font-size:27px;line-height:1;color:#f5f5e8;text-shadow:0 1px 3px #000;pointer-events:none}.touch-feedback{position:absolute;left:0;top:0;width:32px;height:32px;border-radius:50%;border:2px solid #d4e8b9cc;background:#d4e8b926;pointer-events:none}.preedit{position:absolute;left:16px;bottom:12px;max-width:calc(100% - 32px);padding:4px 10px;background:#25332af0;border:1px solid #899f78;border-radius:6px;text-decoration:underline;font:16px/1.4 monospace;white-space:pre-wrap;overflow:hidden}.waiting{position:absolute;inset:0;display:flex;flex-direction:column;justify-content:center;align-items:center;background:#151819f5;padding:24px;text-align:center;z-index:4}.waiting-mark{font-size:48px;color:var(--accent)}.waiting h2{font-size:20px;font-weight:500;margin:10px}.waiting p{font-size:14px;color:var(--muted);max-width:340px}.toast{position:absolute;bottom:12px;left:50%;transform:translateX(-50%);max-width:min(560px,calc(100% - 32px));width:max-content;z-index:6;background:#29382bf2;border:1px solid #718568;border-radius:10px;padding:10px 16px;font-size:13px;margin:0;box-shadow:0 4px 20px #0004}.toast.error{color:var(--danger);background:#332c27}.sheet{color:var(--ink);background:#202627;border:1px solid #47534b;border-radius:20px;padding:24px;width:min(440px,calc(100% - 32px));max-height:calc(var(--app-height) - 24px);overflow:auto;box-shadow:0 20px 80px #0008}.sheet::backdrop{background:#0008;backdrop-filter:blur(4px)}.sheet-heading{display:flex;align-items:center;justify-content:space-between;gap:20px}.sheet h2{font-size:22px;font-weight:500;margin:0}.connection-pill{display:flex;align-items:center;gap:8px;font-size:12px;color:var(--accent);margin:12px 0}.connection-pill[data-state=reconnecting] i{background:#e7b571}.menu-actions{display:grid;margin-top:22px}.menu-actions>button{border:0;border-top:1px solid #3a443e;border-radius:0;background:transparent;justify-content:space-between;min-height:56px;padding-left:0;padding-right:0}.menu-actions>button>span:last-child{color:var(--muted)}.sheet pre{font:13px/2 monospace;color:var(--accent);margin:20px 0}.sheet-actions{display:flex;gap:8px;margin-top:24px}.sheet-actions button{flex:1}
+@media(max-width:760px){.pair-header{height:76px}.local-label{font-size:0}.local-label i{width:8px;height:8px}.pair-layout{grid-template-columns:1fr;gap:30px;max-width:430px;margin:auto;padding:32px 0}.pair-intro h1{font-size:43px;letter-spacing:-2px;margin:12px 0}.pair-intro>p{font-size:14px;margin:0}.pair-illustration,.pair-intro>.eyebrow{display:none}.pair-card{padding:24px}.keybar{height:56px;flex-basis:56px}}@media(max-height:500px) and (min-width:761px){.pair-header{height:64px}.pair-layout{padding:24px 0;gap:40px}.pair-illustration{display:none}.pair-intro h1{font-size:48px}.pair-card{padding:20px}.sheet{padding:16px}}@media(prefers-reduced-motion:no-preference){.touch-feedback{animation:touch .28s ease-out}@keyframes touch{from{opacity:1;scale:.7}to{opacity:0;scale:1.3}}}
+.text-button{min-height:48px}summary{min-height:48px}
+@media(max-width:760px) and (max-height:760px){.pair-header{height:64px}.pair-layout{padding:20px 0;gap:20px}.pair-intro h1{font-size:32px;letter-spacing:-1.5px;margin:8px 0}.pair-intro>p,.pair-card>.eyebrow{display:none}.pair-card{padding:20px}.pair-card h2{margin-top:0}.pair-card>.subtle{margin:8px 0 12px}.field-label{margin-top:14px}.field-heading{margin-top:0}}
+
+.keybar #paste{color:var(--accent);background:#344031;flex-shrink:0}
+
+/* CanvasLink workbench: graphite surfaces, quiet keycaps, one clear accent. */
+:root{--bg:#121719;--panel:#1b2225;--raised:#263034;--line:#354045;--ink:#edf1ed;--muted:#a9b7b6;--accent:#d3e2c2;font-family:Onest,'Noto Sans',sans-serif}
+.wordmark{font-weight:650;letter-spacing:-.9px}.pair-intro h1{font-weight:500;letter-spacing:-2.5px}.pair-card{box-shadow:0 20px 60px #0002}.pair-foot{letter-spacing:.01em}
+.workspace{background:#101617}.remote-viewport{background:#101617}.session-badge{top:14px;left:14px;border-color:#48545166;background:#131c1ee8;border-radius:8px;padding:6px 10px;font-size:11px;letter-spacing:.01em;opacity:1;max-width:calc(100% - 28px)}
+.keybar{background:#171e21;border-top:1px solid #394447;gap:5px;padding:4px 6px;box-shadow:0 -5px 20px #0002}
+.keybar button{font:500 13px/1 Onest,'Noto Sans',sans-serif;color:#cbd5d5;gap:8px;border:1px solid #354045;border-radius:8px;background:#212a2e;padding:0 13px;letter-spacing:.01em}
+.keybar button:hover{background:#2b363a;border-color:#51605e}.keybar button:active{background:#3a4947;box-shadow:inset 0 1px 2px #0003}.keybar button[aria-pressed=true]{background:#cdddba;border-color:#cdddba;color:#1b281c}
+.keybar button svg{width:20px;height:20px;flex:none;fill:none;stroke:currentColor;stroke-width:1.65;stroke-linecap:round;stroke-linejoin:round}
+.keybar .bar-icon{padding:0;background:transparent;border-color:transparent;color:#b6c5c5}.keys{gap:4px}.key-divider{background:#3e4c50;margin:0 4px;height:22px}
+.keybar #paste{background:#d3e2c2;border-color:#d3e2c2;color:#213024;font-weight:650}.keybar #paste:hover{background:#e0edcf}.keybar .enter-key{color:#d3e2c2;background:#2b3730;border-color:#4c5c47}.keybar .view-toggle{padding:0;width:48px;background:transparent;border-color:transparent}.view-toggle span{display:none}
+.sheet{border-color:#455157;border-radius:16px;background:#1b2427;padding:24px;box-shadow:0 24px 80px #0008}.sheet h2{font-size:21px;letter-spacing:-.5px;font-weight:600}.sheet::backdrop{background:#080d10aa;backdrop-filter:blur(6px)}.menu-actions>button{font-size:14px;border-top-color:#354348}.menu-actions>button:hover{color:#edf4e8;background:#243135}.connection-pill{font-size:12px;color:#c9dcb5}.subtle,.hint{line-height:1.55}
+.toast{font-family:Onest,'Noto Sans',sans-serif;border-radius:8px;background:#1f302a}.preedit{font-family:Onest,'Noto Sans',sans-serif}.waiting h2{font-weight:550;letter-spacing:-.5px}
+@media(min-width:1000px){.keybar .view-toggle{width:auto;padding:0 12px}.view-toggle span{display:inline}}
+@media(prefers-reduced-motion:no-preference){dialog[open]{animation:sheet-in .14s ease-out}@keyframes sheet-in{from{opacity:0;translate:0 6px}to{opacity:1;translate:0 0}}}
+
+/* Keep status in the key row, clear of streamed terminal text. */
+.keybar .session-badge{position:static;flex:0 0 auto;max-width:150px;gap:6px;padding:0 8px;border:0;background:none;backdrop-filter:none;white-space:nowrap;overflow:hidden;pointer-events:auto}.session-badge i{flex:0 0 6px}.session-badge span{overflow:hidden;text-overflow:ellipsis}
+@media(max-width:999px){.keybar .session-badge{width:8px;padding:0}.session-badge span{position:absolute;width:1px;height:1px;overflow:hidden;clip-path:inset(50%);white-space:nowrap}}
diff --git a/integrations/canvaslink/android/assets/transport.js b/integrations/canvaslink/android/assets/transport.js
new file mode 100644
index 000000000..448058606
--- /dev/null
+++ b/integrations/canvaslink/android/assets/transport.js
@@ -0,0 +1,103 @@
+/* Public designer API v2. This file owns secure transport and delivery state. */
+(()=>{
+ let pc,dc,video,paired=false,acceptPairing=true,move,moveFrame,peerEpoch=0,stats={},lastFrames=0,lastFrameAt=0,draftTouched=false;
+ const listeners=new Set(),computers=new Map();
+ let state={version:2,connection:'idle',discovery:'searching',computers:[],computer:'',error:'',pending:0,delivery:null,stats:{},source:null,draft:''};
+ const snapshot=()=>JSON.parse(JSON.stringify(state));
+ const update=patch=>{Object.assign(state,patch);for(const listener of listeners)listener(snapshot());};
+ const signal=message=>Native.signal(JSON.stringify(message));
+ const delivery=new CanvasLinkDelivery.Delivery({channel:()=>dc,onChange:value=>{if(['pointer','scroll'].includes(value.kind)){state.pending=value.pending;return;}update({delivery:value,pending:value.pending});}});
+ const raw=value=>{if(dc?.readyState==='open'&&dc.bufferedAmount<65536)dc.send(JSON.stringify(value));};
+ function close(){peerEpoch++;if(moveFrame)cancelAnimationFrame(moveFrame);moveFrame=null;move=null;delivery.close();dc=null;const previous=pc;pc=null;previous?.close();stats={};lastFrames=0;lastFrameAt=0;window.CanvasLink.stats={};update({stats:{},source:null});if(video)video.srcObject=null;}
+ async function offer(message){
+   close();update({connection:'connecting',error:''});
+   const epoch=peerEpoch;
+   try{
+   const current=pc=new RTCPeerConnection({iceServers:[]});
+   current.ontrack=event=>{if(current!==pc)return;if(video){video.srcObject=event.streams[0];video.play().catch(()=>{});}};
+   current.ondatachannel=event=>{
+     if(current!==pc)return;dc=event.channel;
+     dc.onopen=()=>{if(current===pc)update({connection:'connected',error:''});};
+     dc.onclose=()=>{if(current===pc){delivery.close();update({connection:'reconnecting'});}};
+     dc.onmessage=event=>{
+       if(current!==pc||typeof event.data!=='string'||event.data.length>40000)return;
+       let value;try{value=JSON.parse(event.data);}catch{return;}
+       if(value.type==='source-state'){update({source:{capture:value.capture,windowFocused:!!value.windowFocused,target:value.target,surface:value.surface||'canvas',viewport:value.viewport||null,terminalView:value.terminalView||null,dragRects:value.dragRects||[],rect:value.rect||null,caret:value.caret||null}});return;}
+       if(value.type==='pong')stats.rtt=Math.round(performance.now()-value.at);
+       if(delivery.receive(value))return;
+       if(value.type==='fixture-state'){window.CanvasLink.fixture=value;Native.acceptance(JSON.stringify(value));}
+     };
+   };
+   current.onconnectionstatechange=()=>{
+     if(current!==pc)return;
+     if(current.connectionState==='connected'&&dc?.readyState==='open')update({connection:'connected',error:''});
+     if(['failed','disconnected'].includes(current.connectionState)){
+       delivery.close();update({connection:'reconnecting'});
+       setTimeout(()=>{if(paired&¤t===pc&¤t.connectionState!=='connected')signal({type:'ping'});},2500);
+     }
+   };
+   await current.setRemoteDescription(message);if(current!==pc)return;
+   const answer=await current.createAnswer();if(current!==pc)return;
+   await current.setLocalDescription(answer);if(current!==pc)return;
+   await new Promise((resolve,reject)=>{if(current.iceGatheringState==='complete')return resolve();const timer=setTimeout(()=>reject(Error('ice-timeout')),12000);current.onicegatheringstatechange=()=>{if(current.iceGatheringState==='complete'){clearTimeout(timer);resolve();}};});
+   if(current===pc)signal({type:'answer',sdp:current.localDescription.sdp});
+   }catch(error){if(epoch===peerEpoch){close();update({connection:'error',error:error.message});}}
+ }
+ function connect({code,computerId,host}={}){
+   const address=host||computers.get(computerId)?.host||(computers.size===1?[...computers.values()][0].host:'');
+   if(!address){update({error:computers.size?'choose-computer':'computer-not-found'});return false;}
+   if(!/^\d{6}$/.test(code||'')){update({error:'invalid-code'});return false;}
+   acceptPairing=true;update({connection:'pairing',computer:address,error:''});Native.connect(address,code);return true;
+ }
+ function sendInput(input){
+   if(input.type==='pointer'&&input.action==='move'){
+     // Coalesce motion only; never replay or coalesce text, clicks, or keys.
+     move=input;if(!moveFrame)moveFrame=requestAnimationFrame(()=>{moveFrame=null;const m=move;move=null;delivery.send(m).catch(()=>{});});return Promise.resolve({status:'coalesced'});
+   }
+   if(move){cancelAnimationFrame(moveFrame);moveFrame=null;const m=move;move=null;delivery.send(m).catch(()=>{});}
+   return delivery.send(input);
+ }
+ const api=window.CanvasLinkClient=Object.freeze({
+   version:2,getState:snapshot,subscribe(listener){listeners.add(listener);listener(snapshot());return()=>listeners.delete(listener);},
+   attachVideo(element){video=element;},connect,discover(){update({discovery:'searching'});Native.discover();},
+   disconnect(){acceptPairing=false;paired=false;close();Native.disconnect();update({connection:'idle'});},
+   sendInput,sendText(text){if(typeof text!=='string'||!text.length||text.length>8000)return Promise.reject(Error('invalid-text'));return sendInput({type:'text',text});},
+   sendKey(key,modifiers=[]){return sendInput({type:'key',key,modifiers});},
+   setDraft(text){draftTouched=true;state.draft=String(text).slice(0,8000);return Native.saveDraft(state.draft);},
+   hideKeyboard(){Native.hideKeyboard();},resume(){if(paired)signal({type:'ping'});}
+ });
+ window.CanvasLink={stats:{},fixture:null,connectForTest:(host,code)=>connect({host,code}),requestFixture:requestId=>raw({type:'stats',...(typeof requestId==='string'&&requestId.length<=80?{requestId}:{})}),receive(event){
+   const value=event.value;
+   if(event.type==='discovered'){computers.set(value.id,{...value});update({discovery:'ready',computers:[...computers.values()]});}
+   if(event.type==='lost'){computers.delete(value);update({computers:[...computers.values()]});}
+   if(event.type==='discovery')update({discovery:value});
+   if(event.type==='draft'&&!draftTouched)update({draft:value||''});
+   if(event.type==='paired'){if(!acceptPairing)return;paired=true;update({connection:'connecting',computer:value.host,error:''});}
+   if(event.type==='signal'){
+     if(!paired||document.hidden)return;
+     if(value.type==='offer')void offer(value);
+     if(value.type==='disconnect'){close();update({connection:'reconnecting'});}
+   }
+   if(event.type==='error')update({connection:paired?'reconnecting':'error',error:String(value)});
+   if(event.type==='network')update({connection:paired?'reconnecting':'idle',error:String(value)});
+   // A reconnect ping sent while Wi-Fi is down cannot reach the host. Retry
+   // only signalling once encrypted polling succeeds; input is never replayed.
+   if(event.type==='network-restored'&&paired&&!document.hidden&&state.connection!=='connected')signal({type:'ping'});
+   if(event.type==='disconnected'){paired=false;close();update({connection:'idle'});}
+ }};
+ document.addEventListener('visibilitychange',()=>{if(!paired)return;if(document.hidden){signal({type:'disconnect'});close();update({connection:'suspended'});}else{update({connection:'reconnecting'});signal({type:'ping'});}});
+ setInterval(async()=>{
+   const current=pc;if(!current)return;
+   try{
+     raw({type:'ping',at:performance.now(),videoFrames:stats.framesDecoded||0});const reports=await current.getStats();if(current!==pc)return;let inbound,selected;
+     reports.forEach(r=>{if(r.type==='inbound-rtp'&&r.kind==='video')inbound=r;if(r.type==='candidate-pair'&&r.state==='succeeded'&&r.nominated)selected=r;});
+     if(inbound){
+       const now=performance.now(),frames=inbound.framesDecoded||0;if(frames>lastFrames){lastFrameAt=now;lastFrames=frames;}
+       stats={...stats,framesDecoded:frames,framesPerSecond:inbound.framesPerSecond||0,width:inbound.frameWidth||0,height:inbound.frameHeight||0,inputs:delivery.sent,ackedInputs:delivery.acked,state:current.connectionState,bytes:inbound.bytesReceived||0,stalled:state.source?state.source.capture==='stalled':!!lastFrameAt&&now-lastFrameAt>15000};
+       if(selected){const local=reports.get(selected.localCandidateId),remote=reports.get(selected.remoteCandidateId);stats.transport=local?.protocol||'';stats.local=local?.address||'';stats.remote=remote?.address||'';stats.candidateType=remote?.candidateType||'';}
+       window.CanvasLink.stats=stats;Native.diagnostics(JSON.stringify(stats));update({stats:{...stats}});
+     }
+   }catch{}
+ },1000);
+ Native.discover();Native.restore();Native.loadDraft();
+})();
diff --git a/integrations/canvaslink/android/res/drawable/ic_launcher_foreground.xml b/integrations/canvaslink/android/res/drawable/ic_launcher_foreground.xml
new file mode 100644
index 000000000..6ab56d856
--- /dev/null
+++ b/integrations/canvaslink/android/res/drawable/ic_launcher_foreground.xml
@@ -0,0 +1,10 @@
+
+
+
+  
+  
+
diff --git a/integrations/canvaslink/android/res/drawable/ic_launcher_monochrome.xml b/integrations/canvaslink/android/res/drawable/ic_launcher_monochrome.xml
new file mode 100644
index 000000000..a483831b3
--- /dev/null
+++ b/integrations/canvaslink/android/res/drawable/ic_launcher_monochrome.xml
@@ -0,0 +1,10 @@
+
+
+
+  
+  
+
diff --git a/integrations/canvaslink/android/res/mipmap-anydpi-v26/ic_launcher.xml b/integrations/canvaslink/android/res/mipmap-anydpi-v26/ic_launcher.xml
new file mode 100644
index 000000000..51deb97dc
--- /dev/null
+++ b/integrations/canvaslink/android/res/mipmap-anydpi-v26/ic_launcher.xml
@@ -0,0 +1 @@
+
diff --git a/integrations/canvaslink/android/res/mipmap-anydpi-v33/ic_launcher.xml b/integrations/canvaslink/android/res/mipmap-anydpi-v33/ic_launcher.xml
new file mode 100644
index 000000000..3d1008cb4
--- /dev/null
+++ b/integrations/canvaslink/android/res/mipmap-anydpi-v33/ic_launcher.xml
@@ -0,0 +1,7 @@
+
+
+
+  
+  
+  
+
diff --git a/integrations/canvaslink/android/res/values/colors.xml b/integrations/canvaslink/android/res/values/colors.xml
new file mode 100644
index 000000000..e50c4c575
--- /dev/null
+++ b/integrations/canvaslink/android/res/values/colors.xml
@@ -0,0 +1 @@
+#121814
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/AcceptanceInstrumentation.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/AcceptanceInstrumentation.java
new file mode 100644
index 000000000..1aa894c58
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/AcceptanceInstrumentation.java
@@ -0,0 +1,185 @@
+package io.nexcore.canvaslink;
+
+import android.app.Instrumentation;
+import android.app.Activity;
+import android.content.Intent;
+import android.os.Bundle;
+import android.os.SystemClock;
+import android.view.MotionEvent;
+import org.json.*;
+import java.util.concurrent.*;
+
+/** Local adb-only acceptance. Never logs pairing material or captured content. */
+public final class AcceptanceInstrumentation extends Instrumentation {
+  private Bundle arguments; private MainActivity activity;
+  void stage(String name){Bundle b=new Bundle();b.putString("stage",name);sendStatus(0,b);}
+  @Override public void onCreate(Bundle args){arguments=args;start();}
+  String js(String code) throws Exception {
+    CountDownLatch latch=new CountDownLatch(1);String[] out={"null"};
+    runOnMainSync(()->activity.web.evaluateJavascript(code,value->{out[0]=value;latch.countDown();}));
+    if(!latch.await(5,TimeUnit.SECONDS))throw new Exception("WebView evaluation timeout");return out[0];
+  }
+  void tap(String selector) throws Exception {
+    tap(selector,null);
+  }
+  void tap(String selector, String point) throws Exception {
+    boolean[] focused={false};runOnMainSync(()->focused[0]=activity.web.hasWindowFocus());
+    if(!focused[0])throw new Exception("Touch Activity is not foreground");
+    String coordinate="{x:r.x+r.width/2,y:r.y+r.height/2}";
+    if(point!=null){String[] xy=point.split(",");double x=Double.parseDouble(xy[0]),y=Double.parseDouble(xy[1]);if(x<0||x>1||y<0||y>1)throw new Exception("Invalid normalized point");coordinate="(()=>{const f=Math.min(r.width/e.videoWidth,r.height/e.videoHeight),w=e.videoWidth*f,h=e.videoHeight*f;return {x:r.x+(r.width-w)/2+w*"+x+",y:r.y+(r.height-h)/2+h*"+y+"}})()";}
+    String rect=js("(()=>{const e=document.querySelector("+JSONObject.quote(selector)+");e.scrollIntoView({block:'center',inline:'center'});const r=e.getBoundingClientRect(),p="+coordinate+";return {...p,dpr:devicePixelRatio,w:innerWidth,h:innerHeight}})()");
+    JSONObject p=new JSONObject(rect);int[] offset=new int[2];runOnMainSync(()->activity.web.getLocationOnScreen(offset));
+    if(p.getDouble("x")<0||p.getDouble("x")>=p.getDouble("w")||p.getDouble("y")<0||p.getDouble("y")>=p.getDouble("h"))throw new Exception("Touch target outside viewport: "+selector);
+    float x=(float)(p.getDouble("x")*p.getDouble("dpr"))+offset[0];
+    float y=(float)(p.getDouble("y")*p.getDouble("dpr"))+offset[1];
+    // CSS px and WebView device px differ by density, including viewport scaling.
+    long at=SystemClock.uptimeMillis();MotionEvent down=MotionEvent.obtain(at,at,MotionEvent.ACTION_DOWN,x,y,0);
+    MotionEvent up=MotionEvent.obtain(at,at+60,MotionEvent.ACTION_UP,x,y,0);
+    down.setSource(android.view.InputDevice.SOURCE_TOUCHSCREEN);up.setSource(android.view.InputDevice.SOURCE_TOUCHSCREEN);
+    if(!getUiAutomation().injectInputEvent(down,true)||!getUiAutomation().injectInputEvent(up,true))throw new Exception("Android rejected touch: "+selector);
+    down.recycle();up.recycle();
+    SystemClock.sleep(120);
+  }
+  void commitText(String text) throws Exception {
+    boolean[] committed={false};runOnMainSync(()->{
+      android.view.inputmethod.InputConnection input=activity.web.onCreateInputConnection(new android.view.inputmethod.EditorInfo());
+      if(input!=null){input.performContextMenuAction(android.R.id.selectAll);committed[0]=input.commitText(text,1);}
+    });
+    SystemClock.sleep(200);
+    if(!committed[0])throw new Exception("Android IME commit was rejected");
+    stage("android-ime-commit");
+  }
+  void menu(String id)throws Exception{tap("#menu-toggle");tap("#"+id);SystemClock.sleep(400);}
+  int decodedFrames()throws Exception{return new JSONObject(js("window.CanvasLink.stats")).optInt("framesDecoded");}
+  void waitVideoAfterTouch(int before)throws Exception{
+    for(int i=0;i<120;i++){if(decodedFrames()>before)return;SystemClock.sleep(100);}
+    throw new Exception("Decoded video did not advance after real remote touch");
+  }
+  String freshNativePoint()throws Exception{
+    java.io.File directory=activity.getExternalFilesDir(null);if(directory==null)throw new Exception("Owned external acceptance directory unavailable");
+    java.io.File target=new java.io.File(directory,"acceptance-target.json");stage("native-target-request");
+    for(int i=0;i<80&&!target.exists();i++)SystemClock.sleep(100);
+    if(!target.exists())throw new Exception("Fresh owned terminal target unavailable");
+    JSONObject p=new JSONObject(new String(java.nio.file.Files.readAllBytes(target.toPath()),java.nio.charset.StandardCharsets.UTF_8));target.delete();
+    return p.getDouble("x")+","+p.getDouble("y");
+  }
+  void waitTerminalKeyboard()throws Exception{
+    for(int i=0;i<60;i++){
+      boolean[] visible={false};runOnMainSync(()->{TerminalWebView view=(TerminalWebView)activity.web;visible[0]=view.terminalActive()&&(android.os.Build.VERSION.SDK_INT<30||view.getRootWindowInsets()!=null&&view.getRootWindowInsets().isVisible(android.view.WindowInsets.Type.ime()));});
+      if(visible[0]&&"true".equals(js("CanvasLinkInput.active()"))){SystemClock.sleep(400);return;}
+      SystemClock.sleep(100);
+    }
+    boolean[] nativeState={false,false};runOnMainSync(()->{nativeState[0]=((TerminalWebView)activity.web).terminalActive();nativeState[1]=activity.web.getRootWindowInsets()!=null&&activity.web.getRootWindowInsets().isVisible(android.view.WindowInsets.Type.ime());});
+    throw new Exception("Terminal keyboard inactive: native="+nativeState[0]+",visible="+nativeState[1]+",client="+js("JSON.stringify({active:CanvasLinkInput.active(),delivery:CanvasLinkClient.getState().delivery,notice:document.getElementById('stream-error').textContent,source:CanvasLinkClient.getState().source})"));
+  }
+  @Override public void onStart(){
+    Bundle result=new Bundle();
+    try{
+      stage("launch");
+      Intent intent=new Intent(getTargetContext(),MainActivity.class);intent.addFlags(Intent.FLAG_ACTIVITY_NEW_TASK);
+      getTargetContext().startActivity(intent);
+      for(int i=0;i<100&&MainActivity.active==null;i++)SystemClock.sleep(100);
+      activity=MainActivity.active;if(activity==null)throw new Exception("Activity launch timeout");stage("activity-ready");
+      for(int i=0;i<80&&!"true".equals(js("!!window.CanvasLink"));i++)SystemClock.sleep(100);
+      String host=arguments.getString("host"),pin=arguments.getString("pin");
+      boolean restoring="restore".equals(arguments.getString("mode"));
+      boolean discoveryFlow="true".equals(arguments.getString("discovery"));
+      if(!restoring){
+        if(pin==null)throw new Exception("pin argument required");
+        if(discoveryFlow){
+          String selected=null,port=arguments.getString("port");
+          for(int i=0;i<150&&selected==null;i++){
+            JSONArray computers=new JSONObject(js("window.CanvasLinkClient.getState()")).getJSONArray("computers");
+            for(int j=0;jc.id==="+JSONObject.quote(chosen)+")"));
+          tap("#computers button:nth-child("+(index+1)+")");SystemClock.sleep(400);
+          tap("#pin");SystemClock.sleep(200);commitText(pin);
+          if(!"true".equals(js("document.getElementById('pin').value.length===6")))throw new Exception("PIN IME input did not reach form; focused="+js("document.activeElement.id")+", length="+js("document.getElementById('pin').value.length"));
+          runOnMainSync(()->((android.view.inputmethod.InputMethodManager)activity.getSystemService(android.content.Context.INPUT_METHOD_SERVICE)).hideSoftInputFromWindow(activity.web.getWindowToken(),0));SystemClock.sleep(400);
+          tap("#connect");stage("discovery-and-code-form");result.putBoolean("discoveryForm",true);
+        }else{
+          if(host==null)throw new Exception("host required without discovery");
+          js("window.CanvasLink.connectForTest("+JSONObject.quote(host)+","+JSONObject.quote(pin)+")");
+        }
+      }
+      stage("connecting");
+      // A static owned window legitimately sends one initial image. Confirm
+      // subsequent live updates after an actual remote action, below.
+      int minimumFrames=("native".equals(arguments.getString("mode"))||"settings".equals(arguments.getString("mode")))?1:9;
+      JSONObject stats=null;
+      for(int i=0;i<200;i++){
+        SystemClock.sleep(200);
+        try{stats=new JSONObject(js("window.CanvasLink.stats"));}catch(Exception ignored){}
+        if(stats!=null&&stats.optInt("framesDecoded")>=minimumFrames&&"connected".equals(stats.optString("state")))break;
+      }
+      if(stats==null||stats.optInt("framesDecoded")=4){complete=true;break;}
+        }
+        if(!complete)throw new Exception("Host did not finish all native input events");
+        stage("native-text-and-enter-sent");
+        if("true".equals(arguments.getString("snapshot")))SystemClock.sleep(4000);
+        if("true".equals(arguments.getString("controls"))){
+          String encoded=arguments.getString("proofDir64");
+          if(encoded==null)throw new Exception("Owned control proof directory required");
+          String directory=new String(android.util.Base64.decode(encoded,android.util.Base64.DEFAULT),java.nio.charset.StandardCharsets.UTF_8);
+          new NativeControlChecks(this).run(directory,result);
+        }
+      }
+      if("settings".equals(arguments.getString("mode")))new SettingsTouchChecks(this).run(result);
+      if(isFixture){
+        menu("fit");
+        if(!"true".equals(js("getComputedStyle(document.getElementById('video')).transform.startsWith('matrix(2')")))throw new Exception("Zoom control failed");
+        menu("fit");menu("mode");
+        if(!"true".equals(js("document.getElementById('mode').getAttribute('aria-pressed')==='true'")))throw new Exception("Trackpad mode failed");
+        menu("mode");result.putBoolean("zoomAndModeControls",true);
+        tap("#viewport");stage("touch-sent");waitTerminalKeyboard();
+        commitText("Проверка CanvasLink 42");
+        SystemClock.sleep(600);tap("[data-key=Enter]");
+        stage("text-and-key-sent");
+        JSONObject fixture=null;
+        for(int i=0;i<40;i++){
+          js("window.CanvasLink.requestFixture()");SystemClock.sleep(150);
+          try{fixture=new JSONObject(js("window.CanvasLink.fixture"));}catch(Exception ignored){}
+          if(fixture!=null&&fixture.optInt("clicks")>0&&fixture.optString("text").contains("Проверка CanvasLink 42")&&fixture.optJSONArray("keys").toString().contains("Enter"))break;
+        }
+        if(fixture==null||fixture.optInt("clicks")<1||!fixture.optString("text").contains("Проверка CanvasLink 42")||!fixture.optJSONArray("keys").toString().contains("Enter"))throw new Exception("Fixture input roundtrip failed: clicks="+(fixture==null?-1:fixture.optInt("clicks"))+", text="+(fixture!=null&&fixture.optString("text").contains("Проверка CanvasLink 42"))+", Enter="+(fixture!=null&&fixture.optJSONArray("keys").toString().contains("Enter")));
+        result.putBoolean("touchRoundtrip",true);result.putBoolean("unicodeTextRoundtrip",true);result.putBoolean("enterRoundtrip",true);
+        if("true".equals(arguments.getString("ux")))new DeviceUxChecks(this,activity).run(result);
+      }
+      if("true".equals(arguments.getString("draftCheck")))throw new Exception("Removed composer draft flow; use direct-input UX acceptance");
+      result.putString("stats",js("window.CanvasLink.stats"));result.putBoolean("fixture",isFixture);result.putBoolean("restored",restoring);result.putString("status","PASS");
+      finish(Activity.RESULT_OK,result);
+    }catch(Exception e){result.putString("status","FAIL");result.putString("error",e.getMessage());finish(Activity.RESULT_CANCELED,result);}
+  }
+}
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/DeviceUxChecks.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/DeviceUxChecks.java
new file mode 100644
index 000000000..55bb43fe9
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/DeviceUxChecks.java
@@ -0,0 +1,89 @@
+package io.nexcore.canvaslink;
+
+import android.content.pm.ActivityInfo;
+import android.os.Bundle;
+import android.os.ParcelFileDescriptor;
+import android.os.SystemClock;
+import android.view.InputDevice;
+import android.view.KeyEvent;
+import android.view.MotionEvent;
+import android.view.inputmethod.InputConnection;
+import org.json.JSONObject;
+import java.io.FileInputStream;
+
+/** Additional adb-only checks on the owned fixture, never a user's terminal. */
+final class DeviceUxChecks {
+  final AcceptanceInstrumentation test; final MainActivity activity;
+  DeviceUxChecks(AcceptanceInstrumentation test,MainActivity activity){this.test=test;this.activity=activity;}
+  boolean value(String expression)throws Exception{return "true".equals(test.js(expression));}
+  void require(boolean ok,String message)throws Exception{if(!ok)throw new Exception(message);}
+  void until(String expression,int timeout,String failure)throws Exception{
+    long end=SystemClock.uptimeMillis()+timeout;
+    while(SystemClock.uptimeMillis(){const r=document.getElementById('viewport').getBoundingClientRect();return {x:r.x+r.width*"+x+",y:r.y+r.height*"+y+",d:devicePixelRatio}})()"));
+    int[] origin=new int[2];test.runOnMainSync(()->activity.web.getLocationOnScreen(origin));
+    return new float[]{(float)(r.getDouble("x")*r.getDouble("d"))+origin[0],(float)(r.getDouble("y")*r.getDouble("d"))+origin[1]};
+  }
+  void motion(long down,int action,float[][] coordinates)throws Exception{
+    MotionEvent.PointerProperties[] properties=new MotionEvent.PointerProperties[coordinates.length];
+    MotionEvent.PointerCoords[] points=new MotionEvent.PointerCoords[coordinates.length];
+    for(int i=0;i{const v=document.getElementById('viewport').getBoundingClientRect(),bar=document.getElementById('controls').getBoundingClientRect(),rows=[...document.querySelectorAll('#controls button')].map(e=>e.getBoundingClientRect().top);return Math.abs(v.width-innerWidth)<2&&Math.abs(v.height+56-innerHeight)<2&&bar.height===56&&new Set(rows).size===1&&!document.getElementById('compose');})()"),"Direct workspace geometry failed with real IME");
+  }
+  void rotate(int orientation)throws Exception{
+    test.runOnMainSync(()->activity.setRequestedOrientation(orientation));
+    until(orientation==ActivityInfo.SCREEN_ORIENTATION_PORTRAIT?"screen.height>screen.width":"screen.width>screen.height",6000,"Android orientation did not change");SystemClock.sleep(500);
+  }
+  void run(Bundle result)throws Exception{
+    test.stage("ux-gestures");test.menu("reset-view");
+    test.js("window.__gestureAudit=[];for(const type of ['pointerdown','pointerup','pointercancel','lostpointercapture','canvaslink:pointer'])document.addEventListener(type,e=>{const a=window.__gestureAudit;a.push({type,id:e.pointerId,target:e.target?.id,action:e.detail?.action});if(a.length>40)a.shift();},true)");
+    int before=clicks();drag(false,false);int observed=clicks();require(observed==before+1,"Direct drag press mismatch before="+before+", after="+observed+", state="+test.js("JSON.stringify({pending:CanvasLinkClient.getState().pending,ime:CanvasLinkInput.active(),focus:document.activeElement.id,mode:document.getElementById('mode').getAttribute('aria-pressed'),events:window.__gestureAudit})"));
+    before=clicks();drag(false,true);test.tap("#video","0.5,0.5");require(clicks()==before+2,"Cancellation left held button or duplicate tap");result.putBoolean("nativeDragAndCancel",true);
+    test.menu("mode");before=clicks();int acks=acked();drag(false,false);require(clicks()==before&&value("!document.getElementById('local-cursor').hidden"),"Trackpad movement clicked or had no cursor");until("CanvasLink.stats.ackedInputs>"+acks,4000,"Trackpad move missing");
+    before=clicks();drag(true,false);require(clicks()==before+1,"Hold-drag press count wrong");test.menu("reset-view");before=clicks();acks=acked();pair(false);require(clicks()==before,"Scroll created click");until("CanvasLink.stats.ackedInputs>"+acks,4000,"Native scroll missing");result.putBoolean("nativeTrackpadAndScroll",true);
+    test.menu("mode");before=clicks();pair(true);require(value("new DOMMatrix(getComputedStyle(document.getElementById('video')).transform).a>1.25"),"Pinch did not zoom");require(clicks()==before,"Pinch ghost click");test.menu("reset-view");result.putBoolean("nativePinchAndFit",true);
+    test.stage("ux-direct-ime");test.tap("#video","0.5,0.5");test.waitTerminalKeyboard();
+    int oldLength=fixture().getString("text").length();boolean[] accepted={false};
+    test.runOnMainSync(()->{InputConnection retired=activity.web.onCreateInputConnection(new android.view.inputmethod.EditorInfo());InputConnection input=activity.web.onCreateInputConnection(new android.view.inputmethod.EditorInfo());accepted[0]=input!=null&&!retired.commitText("STALE",1)&&input.setComposingText("日本🙂X",1)&&input.deleteSurroundingText(1,0)&&input.deleteSurroundingTextInCodePoints(1,0)&&((android.view.inputmethod.BaseInputConnection)input).getEditable().toString().equals("日本")&&input.commitText("日本語🙂",1)&&input.finishComposingText();if(input!=null){input.deleteSurroundingText(1,0);input.sendKeyEvent(new KeyEvent(KeyEvent.ACTION_DOWN,KeyEvent.KEYCODE_ENTER));input.sendKeyEvent(new KeyEvent(KeyEvent.ACTION_UP,KeyEvent.KEYCODE_ENTER));}});
+    require(accepted[0],"Native composition/commit failed");SystemClock.sleep(500);JSONObject remote=fixture();require(remote.getString("text").substring(oldLength).equals("日本語"),"Composition was duplicated or lost after emoji Backspace");require(remote.getJSONArray("keys").toString().contains("Backspace"),"Native deletion missing");result.putBoolean("directCompositionUnicodeDeleteEnter",true);
+    int unchanged=acked();test.runOnMainSync(()->((TerminalWebView)activity.web).paste(new String(new char[8001]).replace('\0','x')));until("document.getElementById('input-status').textContent.includes('8000')",4000,"Oversized paste feedback missing");require(value("CanvasLinkClient.getState().connection==='connected'&&CanvasLinkInput.active()"),"Oversized paste interrupted terminal connection");require(acked()==unchanged,"Oversized paste sent remote input");result.putBoolean("staleConnectionCodePointDeleteOversizedPaste",true);
+    int previous=activity.getRequestedOrientation();try{for(int orientation:new int[]{ActivityInfo.SCREEN_ORIENTATION_PORTRAIT,ActivityInfo.SCREEN_ORIENTATION_LANDSCAPE}){rotate(orientation);test.waitTerminalKeyboard();workspaceFits();}}finally{test.runOnMainSync(()->activity.setRequestedOrientation(previous));SystemClock.sleep(700);}result.putBoolean("singleRowRealImeBothOrientations",true);
+    shell("input keyevent KEYCODE_BACK");until("!CanvasLinkInput.active()",4000,"Android Back did not retire terminal input");test.tap("#video","0.5,0.5");test.waitTerminalKeyboard();result.putBoolean("keyboardBackDismissAndRetap",true);
+    test.stage("ux-background");int hostLength=fixture().getString("text").length();shell("input keyevent KEYCODE_HOME");until("document.hidden&&['suspended','reconnecting'].includes(CanvasLinkClient.getState().connection)",8000,"Background not suspended");shell("am start -n io.nexcore.canvaslink/.MainActivity");until("!document.hidden&&CanvasLinkClient.getState().connection==='connected'&&CanvasLink.stats.framesDecoded>8",30000,"Foreground video missing");require(fixture().getString("text").length()==hostLength,"Background replayed text");require(value("!CanvasLinkInput.active()"),"Old native input owner survived background");result.putBoolean("backgroundNoReplay",true);
+    test.stage("ux-wifi-loss");try{shell("svc wifi disable");until("CanvasLinkClient.getState().connection!=='connected'",20000,"Wi-Fi loss not detected");require(value("!CanvasLinkInput.active()"),"Offline IME not stopped");}finally{shell("svc wifi enable");}until("CanvasLinkClient.getState().connection==='connected'&&CanvasLink.stats.framesDecoded>8",40000,"Wi-Fi video recovery missing");require(fixture().getString("text").length()==hostLength,"Wi-Fi recovery replayed text");result.putBoolean("wifiLossRecoveryNoReplay",true);test.stage("ux-complete");
+  }
+}
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/GraphicsChecks.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/GraphicsChecks.java
new file mode 100644
index 000000000..a071f4b5b
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/GraphicsChecks.java
@@ -0,0 +1,37 @@
+package io.nexcore.canvaslink;
+
+import android.os.Bundle;
+import android.os.SystemClock;
+import org.json.JSONArray;
+
+/** ADB-only visual acceptance; all view controls use real Android touches. */
+final class GraphicsChecks {
+  final AcceptanceInstrumentation test;
+  GraphicsChecks(AcceptanceInstrumentation test){this.test=test;}
+  void until(String expression,String error)throws Exception{
+    long end=SystemClock.uptimeMillis()+12000;
+    while(SystemClock.uptimeMillis()f.family==='Onest'&&f.status==='loaded')","Bundled Onest font was not consumed by WebView");
+    until("document.getElementById('view-toggle-label').textContent==='Весь Canvas'&&!!CanvasLinkClient.getState().source?.terminalView","Initial terminal view did not follow source geometry");
+    if(!"false".equals(test.js("CanvasLinkInput.active()")))throw new Exception("Visual framing must not start terminal input");
+    until("(()=>{const s=CanvasLinkClient.getState().source.terminalView,e=document.getElementById('video'),r=e.getBoundingClientRect(),v=document.getElementById('viewport').getBoundingClientRect(),k=Math.min(r.width/e.videoWidth,r.height/e.videoHeight),left=r.left+(r.width-e.videoWidth*k)/2+s.rect.x*e.videoWidth*k,top=r.top+(r.height-e.videoHeight*k)/2+s.rect.y*e.videoHeight*k;return left>=v.left-2&&top>=v.top-2&&left+s.rect.width*e.videoWidth*k<=v.right+2&&top+s.rect.height*e.videoHeight*k<=v.bottom+2;})()","Initial framing cuts off the selected terminal");
+    result.putBoolean("automaticTerminalViewWithoutIme",true);result.putBoolean("bundledFontLoaded",true);
+    test.stage("graphics-terminal-view-ready");SystemClock.sleep(700);
+    int sent=Integer.parseInt(test.js("CanvasLink.stats.inputs||0"));
+    test.tap("#view-toggle");
+    until("document.getElementById('zoom-label').textContent==='100%'","Overview button did not restore Canvas");
+    SystemClock.sleep(1200);
+    if(!"100%".equals(new JSONArray("["+test.js("document.getElementById('zoom-label').textContent")+"]").getString(0)))throw new Exception("Source health overrode explicit overview");
+    test.stage("graphics-overview-ready");SystemClock.sleep(700);test.tap("#view-toggle");
+    until("document.getElementById('view-toggle-label').textContent==='Весь Canvas'","Terminal button did not restore framing");
+    if(!"false".equals(test.js("CanvasLinkInput.active()"))||Integer.parseInt(test.js("CanvasLink.stats.inputs||0"))!=sent)throw new Exception("Local view button sent remote input");
+    result.putBoolean("viewToggleTouchRoundtripWithoutRemoteInput",true);
+    String encoded=new JSONArray("["+test.js("(()=>{const v=document.getElementById('video'),c=document.createElement('canvas');c.width=v.videoWidth;c.height=v.videoHeight;c.getContext('2d').drawImage(v,0,0);return c.toDataURL('image/png').split(',')[1];})()")+"]").getString(0);
+    byte[] frame=android.util.Base64.decode(encoded,android.util.Base64.DEFAULT);
+    java.nio.file.Files.write(new java.io.File(MainActivity.active.getExternalFilesDir(null),"graphics-decoded-frame.png").toPath(),frame);
+    result.putBoolean("decodedVideoFrameSavedPrivately",true);test.stage("graphics-decoded-frame-ready");SystemClock.sleep(500);
+  }
+}
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/MainActivity.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/MainActivity.java
new file mode 100644
index 000000000..d27996404
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/MainActivity.java
@@ -0,0 +1,220 @@
+package io.nexcore.canvaslink;
+
+import android.app.Activity;
+import android.os.Bundle;
+import android.os.Build;
+import android.net.nsd.NsdManager;
+import android.net.nsd.NsdServiceInfo;
+import android.net.wifi.WifiManager;
+import android.webkit.*;
+import android.view.WindowManager;
+import android.util.Log;
+import org.json.*;
+import java.io.*;
+import java.net.*;
+import java.nio.charset.StandardCharsets;
+import java.security.SecureRandom;
+import java.util.*;
+import java.util.concurrent.*;
+import javax.crypto.*;
+import javax.crypto.spec.*;
+
+public final class MainActivity extends Activity {
+  static volatile MainActivity active;
+  WebView web;
+  private final ScheduledExecutorService network = Executors.newSingleThreadScheduledExecutor();
+  private final SecureRandom random = new SecureRandom();
+  private NsdManager nsd; private NsdManager.DiscoveryListener discovery;
+  private WifiManager.MulticastLock multicast;
+  private final Map found = new HashMap<>();
+  private final ArrayDeque resolving = new ArrayDeque<>();
+  private final android.os.Handler ui = new android.os.Handler(android.os.Looper.getMainLooper());
+  private boolean resolveBusy=false; private int discoveryEpoch=0;
+  private final ExecutorService storage=Executors.newSingleThreadExecutor();
+  private SessionVault drafts;
+  private String base, id; private byte[] key; private long sent=0, received=0;
+  private long reserved=0; private SessionVault vault;
+  private ScheduledFuture polling; private int errors=0; private long networkFailureAt=0;
+  volatile String acceptance = "", diagnostics = "{}";
+  @Override public void onCreate(Bundle saved) {
+    super.onCreate(saved);
+    getWindow().setStatusBarColor(0xff121814); getWindow().setNavigationBarColor(0xff121814);
+    web = new TerminalWebView(this); setContentView(web);
+    web.setBackgroundColor(0xff121814);
+    WebSettings s=web.getSettings(); s.setJavaScriptEnabled(true); s.setDomStorageEnabled(false);
+    s.setAllowFileAccess(false); s.setAllowContentAccess(false); s.setMixedContentMode(WebSettings.MIXED_CONTENT_NEVER_ALLOW);
+    s.setMediaPlaybackRequiresUserGesture(false); s.setSupportZoom(false);
+    web.setWebChromeClient(new WebChromeClient() {
+      @Override public boolean onConsoleMessage(ConsoleMessage m) {
+        if (m.messageLevel()==ConsoleMessage.MessageLevel.ERROR) Log.e("CanvasLink", "Web client error at line " + m.lineNumber());
+        return true;
+      }
+      @Override public void onPermissionRequest(PermissionRequest r) { r.deny(); }
+    });
+    web.setWebViewClient(new WebViewClient() {
+      @Override public WebResourceResponse shouldInterceptRequest(WebView view, WebResourceRequest request) {
+        android.net.Uri u=request.getUrl();
+        if (!"https".equals(u.getScheme()) || !"appassets.androidplatform.net".equals(u.getHost()) || !u.getPath().startsWith("/client/")) return blocked();
+        String file=u.getPath().substring(8);
+        if (!Arrays.asList("index.html","client.js","style.css","delivery.js","transport.js","gestures.js","direct-input.js","onest.ttf").contains(file)) return blocked();
+        try { return new WebResourceResponse(file.endsWith(".js")?"application/javascript":file.endsWith(".css")?"text/css":file.endsWith(".ttf")?"font/ttf":"text/html", "UTF-8", getAssets().open(file)); }
+        catch(Exception e) { return blocked(); }
+      }
+      @Override public boolean shouldOverrideUrlLoading(WebView view, WebResourceRequest request) { return true; }
+    });
+    web.addJavascriptInterface(new Bridge(), "Native");
+    web.loadUrl("https://appassets.androidplatform.net/client/index.html");
+    nsd=(NsdManager)getSystemService(NSD_SERVICE);
+    vault=new SessionVault(this);drafts=new SessionVault(this,"draft");
+    active=this;
+  }
+  private static WebResourceResponse blocked() { return new WebResourceResponse("text/plain","UTF-8",403,"Blocked",Collections.emptyMap(),new ByteArrayInputStream(new byte[0])); }
+  private void emit(String type, Object value) {
+    JSONObject event=new JSONObject(); try { event.put("type",type); event.put("value",value); }catch(JSONException ignored){}
+    runOnUiThread(() -> web.evaluateJavascript("window.CanvasLink&&window.CanvasLink.receive("+event.toString()+")",null));
+  }
+  private String localBase(String host) throws Exception {
+    if (!host.matches("[0-9.]+:[0-9]{1,5}")) throw new Exception("Нужен локальный IPv4-адрес и порт");
+    String[] hp=host.split(":"); String[] parts=hp[0].split("\\.");
+    if(parts.length!=4) throw new Exception("Неверный адрес");
+    int[] a=new int[4]; for(int i=0;i<4;i++){a[i]=Integer.parseInt(parts[i]); if(a[i]<0||a[i]>255)throw new Exception("Неверный адрес");}
+    boolean local=a[0]==10||a[0]==127||(a[0]==192&&a[1]==168)||(a[0]==172&&a[1]>=16&&a[1]<=31)||(a[0]==169&&a[1]==254);
+    int p=Integer.parseInt(hp[1]); if(!local||p<1024||p>65535) throw new Exception("Разрешена только локальная сеть");
+    return "http://"+hp[0]+":"+p;
+  }
+  private JSONObject post(String route, JSONObject payload) throws Exception {
+    HttpURLConnection c=(HttpURLConnection)new URL(base+route).openConnection();
+    c.setConnectTimeout(4000);c.setReadTimeout(5000);c.setInstanceFollowRedirects(false);
+    c.setRequestMethod("POST");c.setRequestProperty("Content-Type","application/json");c.setDoOutput(true);
+    byte[] bytes=payload.toString().getBytes(StandardCharsets.UTF_8);c.setFixedLengthStreamingMode(bytes.length);
+    try {
+      try(OutputStream out=c.getOutputStream()){out.write(bytes);}
+      if(c.getResponseCode()!=200) throw new Exception("Компьютер отклонил подключение. Проверьте код и срок его действия.");
+      try(InputStream in=c.getInputStream();ByteArrayOutputStream out=new ByteArrayOutputStream()){
+        byte[] buffer=new byte[4096];int n;while((n=in.read(buffer))!=-1){out.write(buffer,0,n);if(out.size()>150000)throw new Exception("Ответ слишком большой");}
+        return new JSONObject(out.toString("UTF-8"));
+      }
+    }finally{c.disconnect();}
+  }
+  private JSONObject exchange(JSONObject value) throws Exception {
+    if(id==null||key==null)throw new Exception("Нет сопряжения");
+    if(sent+1>=reserved)reserve();
+    long seq=++sent;byte[] iv=new byte[12];random.nextBytes(iv);
+    Cipher cipher=Cipher.getInstance("AES/GCM/NoPadding");
+    cipher.init(Cipher.ENCRYPT_MODE,new SecretKeySpec(key,"AES"),new GCMParameterSpec(128,iv));
+    cipher.updateAAD(Srp.utf8("CanvasLink/1/"+id+"/"+seq+"/request"));
+    JSONObject packet=new JSONObject().put("id",id).put("seq",seq).put("iv",Srp.hex(iv))
+      .put("data",android.util.Base64.encodeToString(cipher.doFinal(Srp.utf8(value.toString())),android.util.Base64.NO_WRAP));
+    JSONObject response=post("/channel",packet);
+    long next=response.getLong("seq");if(!id.equals(response.getString("id"))||next!=seq||next<=received)throw new SecurityException("Повторный или неподтверждённый ответ");
+    String nonce=response.getString("iv");if(!nonce.matches("[0-9a-f]{24}"))throw new SecurityException("Неверный пакет");
+    cipher.init(Cipher.DECRYPT_MODE,new SecretKeySpec(key,"AES"),new GCMParameterSpec(128,Srp.bytes(nonce)));
+    cipher.updateAAD(Srp.utf8("CanvasLink/1/"+id+"/"+next+"/response"));
+    byte[] plain=cipher.doFinal(android.util.Base64.decode(response.getString("data"),android.util.Base64.NO_WRAP));
+    received=next;return new JSONObject(new String(plain,StandardCharsets.UTF_8));
+  }
+  private void connect(String host,String pin){
+    network.execute(()->{try{
+      if(polling!=null)polling.cancel(false);id=null;key=null;
+      base=localBase(host);if(!pin.matches("[0-9]{6}"))throw new Exception("Введите шесть цифр");
+      Srp srp=new Srp();
+      JSONObject challenge=post("/pair/start",new JSONObject().put("A",srp.publicHex()).put("name",(Build.MANUFACTURER+" "+Build.MODEL)));
+      if(!Srp.USER.equals(challenge.getString("user")))throw new SecurityException("Неверный протокол");
+      Srp.Session result=srp.derive(pin,challenge.getString("salt"),challenge.getString("B"));
+      JSONObject finish=post("/pair/finish",new JSONObject().put("id",challenge.getString("id")).put("proof",Srp.hex(result.proof)));
+      result.verify(finish.getString("proof"));
+      String nextId=finish.getString("id");if(!nextId.matches("[0-9a-f]{32}"))throw new SecurityException("Неверный идентификатор");
+      id=nextId;key=result.channelKey;sent=0;received=0;reserved=0;errors=0;reserve();
+      emit("paired",new JSONObject().put("host",host));
+      runOnUiThread(()->getWindow().addFlags(WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON));
+      startPolling();
+    }catch(Exception e){emit("error",e.getMessage());}});
+  }
+  private void reserve() throws Exception {
+    reserved=sent+10000;
+    vault.save(new JSONObject().put("host",base.substring(7)).put("id",id).put("key",Srp.hex(key)).put("counter",reserved));
+  }
+  private void startPolling(){
+      if(polling!=null)polling.cancel(false);
+      networkFailureAt=0;errors=0;
+      polling=network.scheduleWithFixedDelay(()->{try{
+        JSONObject response=exchange(new JSONObject().put("type","poll"));boolean recovered=errors>0;errors=0;networkFailureAt=0;
+        if(recovered)emit("network-restored",true);
+        JSONArray messages=response.getJSONArray("messages");for(int i=0;i=60000){polling.cancel(false);vault.clear();id=null;key=null;emit("disconnected",true);emit("error","Соединение потеряно. Создайте новый код на компьютере.");}}},0,200,TimeUnit.MILLISECONDS);
+  }
+  public final class Bridge {
+    @JavascriptInterface public boolean saveDraft(String text){if(text.length()>8000)return false;try{synchronized(drafts){drafts.save(new JSONObject().put("text",text));}return true;}catch(Exception e){emit("error","Не удалось сохранить черновик");return false;}}
+    @JavascriptInterface public void loadDraft(){storage.execute(()->{try{JSONObject saved=drafts.load();emit("draft",saved==null?"":saved.optString("text"));}catch(Exception ignored){}});}
+    @JavascriptInterface public void showKeyboard(String token){runOnUiThread(()->((TerminalWebView)web).openTerminal(token));}
+    @JavascriptInterface public void terminalKey(String key,String modifiers){runOnUiThread(()->((TerminalWebView)web).key(key,modifiers));}
+    @JavascriptInterface public void paste(){runOnUiThread(()->{android.content.ClipboardManager clipboard=(android.content.ClipboardManager)getSystemService(CLIPBOARD_SERVICE);if(clipboard.hasPrimaryClip()&&clipboard.getPrimaryClip().getItemCount()>0){CharSequence value=clipboard.getPrimaryClip().getItemAt(0).coerceToText(MainActivity.this);((TerminalWebView)web).paste(value==null?"":value.toString());}else ((TerminalWebView)web).paste("");});}
+    @JavascriptInterface public void hideKeyboard(){runOnUiThread(()->((TerminalWebView)web).closeTerminal());}
+    @JavascriptInterface public void connect(String host,String pin){MainActivity.this.connect(host,pin);}
+    @JavascriptInterface public void signal(String json){
+      if(json.length()>90000)return;
+      network.execute(()->{try{exchange(new JSONObject().put("type","signal").put("message",new JSONObject(json)));}catch(Exception e){emit("error",e.getMessage());}});
+    }
+    @JavascriptInterface public void discover(){runOnUiThread(()->startDiscovery());}
+    @JavascriptInterface public void restore(){network.execute(()->{try{
+      JSONObject saved=vault.load();if(saved==null)return;
+      base=localBase(saved.getString("host"));id=saved.getString("id");key=Srp.bytes(saved.getString("key"));
+      if(!id.matches("[0-9a-f]{32}")||key.length!=32)throw new Exception("Invalid saved pairing");
+      sent=saved.getLong("counter");received=0;reserve();
+      exchange(new JSONObject().put("type","signal").put("message",new JSONObject().put("type","ping")));
+      emit("paired",new JSONObject().put("host",saved.getString("host")));startPolling();
+      runOnUiThread(()->getWindow().addFlags(WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON));
+    }catch(Exception e){vault.clear();id=null;key=null;emit("network","Введите новый код подключения на компьютере.");}});}
+    @JavascriptInterface public void disconnect(){network.execute(()->{try{exchange(new JSONObject().put("type","revoke"));}catch(Exception ignored){} if(polling!=null)polling.cancel(false);id=null;key=null;vault.clear();emit("disconnected",true);});runOnUiThread(()->getWindow().clearFlags(WindowManager.LayoutParams.FLAG_KEEP_SCREEN_ON));}
+    @JavascriptInterface public void diagnostics(String json){if(json.length()<2000){diagnostics=json;Log.i("CanvasLink", "STATS "+json);}}
+    @JavascriptInterface public void acceptance(String json){if(json.length()<2000)acceptance=json;}
+  }
+  private void resolveNext(final int epoch){
+    if(epoch!=discoveryEpoch||resolveBusy||resolving.isEmpty())return;
+    final NsdServiceInfo service=resolving.remove();resolveBusy=true;
+    nsd.resolveService(service,new NsdManager.ResolveListener(){
+      public void onResolveFailed(NsdServiceInfo s,int c){ui.post(()->{if(epoch!=discoveryEpoch)return;resolveBusy=false;emit("discovery","resolving-failed");ui.postDelayed(()->resolveNext(epoch),500);});}
+      public void onServiceResolved(NsdServiceInfo s){ui.post(()->{
+        if(epoch!=discoveryEpoch)return;resolveBusy=false;
+        try{
+          String address=s.getHost().getHostAddress()+":"+s.getPort();
+          // Host advertises a private IPv4 hint for API26-32 resolvers that
+          // return only one IPv6 address. This is discovery, never authority:
+          // localBase and the existing SRP proof remain mandatory.
+          byte[] hint=s.getAttributes().get("ipv4");
+          if(!(s.getHost() instanceof Inet4Address)&&hint!=null)address=new String(hint,StandardCharsets.UTF_8)+":"+s.getPort();
+          localBase(address);found.put(s.getServiceName(),address);
+          emit("discovered",new JSONObject().put("id",s.getServiceName()).put("name",s.getServiceName()).put("host",address));
+        }catch(Exception e){emit("discovery","unsupported-address");}
+        resolveNext(epoch);
+      });}
+    });
+  }
+  private void startDiscovery(){
+    if(discovery!=null){
+      try{nsd.stopServiceDiscovery(discovery);}catch(Exception ignored){}
+      discovery=null;discoveryEpoch++;resolving.clear();resolveBusy=false;
+      for(String name:found.keySet())emit("lost",name);found.clear();
+      ui.postDelayed(()->startDiscovery(),500);return;
+    }
+    final int epoch=++discoveryEpoch;
+    WifiManager wifi=(WifiManager)getApplicationContext().getSystemService(WIFI_SERVICE);
+    if(multicast==null){multicast=wifi.createMulticastLock("CanvasLink discovery");multicast.setReferenceCounted(false);}
+    if(!multicast.isHeld())multicast.acquire();
+    discovery=new NsdManager.DiscoveryListener(){
+      public void onDiscoveryStarted(String t){if(epoch==discoveryEpoch)emit("discovery","searching");}
+      public void onDiscoveryStopped(String t){}
+      public void onStartDiscoveryFailed(String t,int c){ui.post(()->{if(epoch!=discoveryEpoch)return;discovery=null;emit("discovery","unavailable");if(multicast.isHeld())multicast.release();});}
+      public void onStopDiscoveryFailed(String t,int c){}
+      public void onServiceLost(NsdServiceInfo service){ui.post(()->{if(epoch!=discoveryEpoch)return;found.remove(service.getServiceName());resolving.removeIf(s->s.getServiceName().equals(service.getServiceName()));emit("lost",service.getServiceName());});}
+      public void onServiceFound(NsdServiceInfo service){ui.post(()->{if(epoch!=discoveryEpoch||!service.getServiceName().startsWith("CanvasLink "))return;resolving.add(service);resolveNext(epoch);});}
+    };
+    try{nsd.discoverServices("_canvaslink._tcp.",NsdManager.PROTOCOL_DNS_SD,discovery);}catch(Exception e){discovery=null;emit("discovery","unavailable");}
+  }
+  @Override protected void onDestroy(){
+    if(active==this)active=null;
+    if(discovery!=null)try{nsd.stopServiceDiscovery(discovery);}catch(Exception ignored){}
+    if(multicast!=null&&multicast.isHeld())multicast.release();
+    discoveryEpoch++;ui.removeCallbacksAndMessages(null);storage.shutdown();network.shutdownNow();web.destroy();super.onDestroy();
+  }
+}
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/NativeControlChecks.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/NativeControlChecks.java
new file mode 100644
index 000000000..9565b1eac
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/NativeControlChecks.java
@@ -0,0 +1,96 @@
+package io.nexcore.canvaslink;
+
+import android.os.Bundle;
+import android.os.SystemClock;
+
+/** ADB-only controls against the controller's disposable CanvasTTY terminal. */
+final class NativeControlChecks {
+  final AcceptanceInstrumentation test;
+  NativeControlChecks(AcceptanceInstrumentation test){this.test=test;}
+  void until(String expression,String error)throws Exception{
+    long end=SystemClock.uptimeMillis()+10000;
+    while(SystemClock.uptimeMillis()"+before,"Control was not acknowledged: "+key);
+    test.waitTerminalKeyboard();
+  }
+  void text(String value)throws Exception{
+    if(!"true".equals(test.js("CanvasLinkInput.active()")))throw new Exception("Direct IME must remain active during terminal editing");
+    int before=Integer.parseInt(test.js("CanvasLink.stats.ackedInputs"));test.commitText(value);
+    until("CanvasLink.stats.ackedInputs>"+before+"&&CanvasLinkClient.getState().pending===0","Direct text was not acknowledged");
+  }
+  String quote(String text){return "'"+text.replace("'","'\\''")+"'";}
+  void cursorVisible()throws Exception{
+    until("(()=>{const c=CanvasLinkClient.getState().source?.caret;if(!c)return false;const e=document.getElementById('video'),r=e.getBoundingClientRect(),v=document.getElementById('viewport').getBoundingClientRect(),k=Math.min(r.width/e.videoWidth,r.height/e.videoHeight),x=r.left+(r.width-e.videoWidth*k)/2+(c.x+c.width/2)*e.videoWidth*k,y=r.top+(r.height-e.videoHeight*k)/2+(c.y+c.height/2)*e.videoHeight*k;return x>v.left&&xv.top+8&&yMainActivity.active.setRequestedOrientation(orientation));
+      until(orientation==android.content.pm.ActivityInfo.SCREEN_ORIENTATION_PORTRAIT?"screen.height>screen.width":"screen.width>screen.height","Native orientation not applied");test.waitTerminalKeyboard();cursorVisible();
+      until("(()=>{const v=document.getElementById('viewport').getBoundingClientRect(),b=document.getElementById('controls').getBoundingClientRect();return Math.abs(v.height+56-innerHeight)<2&&b.height===56&&new Set([...document.querySelectorAll('#controls button')].map(e=>e.getBoundingClientRect().top)).size===1;})()","Native IME workspace geometry failed");
+      test.stage(orientation==android.content.pm.ActivityInfo.SCREEN_ORIENTATION_PORTRAIT?"native-real-portrait-ready":"native-real-landscape-ready");android.os.SystemClock.sleep(900);
+    }}finally{test.runOnMainSync(()->MainActivity.active.setRequestedOrientation(previous));}
+    result.putBoolean("actualCursorAndSingleRowWithRealImeBothOrientations",true);
+  }
+  void run(String directory,Bundle result)throws Exception{
+    if(directory==null||!directory.startsWith("/")||directory.indexOf('\n')>=0)throw new Exception("Owned proof directory required");
+    cursorVisible();orientations(result);
+    test.stage("native-five-real-retaps");
+    for(int i=0;i<5;i++){test.menu("reset-view");test.tap("#video",test.freshNativePoint());test.waitTerminalKeyboard();cursorVisible();}
+    result.putInt("realTerminalRetaps",5);
+    test.stage("native-control-cancel-and-history");
+    text("touch "+quote(directory+"/must-not-exist"));key("c");key("Escape");key("ArrowUp");key("ArrowDown");key("c");
+    test.stage("native-control-editing");
+    text("printf '%s\\n' > "+quote(directory+"/controls-edit.txt")+" 'OKX'");
+    key("ArrowLeft");key("Backspace");key("ArrowRight");key("Enter");
+    test.stage("native-control-tab");
+    text("cd "+quote(directory)+"; : > canvaslink-tab-proof.txt");key("Enter");
+    text("printf '%s\\n' 'TAB' > canvaslink-tab-pro");key("Tab");key("Enter");
+    test.stage("native-control-no-duplicate-enter");
+    for(int i=1;i<=5;i++){text("printf '%s\\n' '"+i+"' >> "+quote(directory+"/controls-once.txt"));key("Enter");}
+    test.stage("native-direct-composition-paste");
+    text("printf '%s\\n' '");
+    final android.content.ClipData[] oldClip={null};
+    boolean[] direct={false},clipboardChanged={false};try{test.runOnMainSync(()->{
+      android.view.inputmethod.InputConnection input=MainActivity.active.web.onCreateInputConnection(new android.view.inputmethod.EditorInfo());
+      direct[0]=input!=null&&input.setComposingText("日本X",1)&&input.deleteSurroundingText(1,0)&&input.commitText("日本語🙂X",1)&&input.finishComposingText()&&input.deleteSurroundingText(1,0);
+      android.content.ClipboardManager clipboard=(android.content.ClipboardManager)MainActivity.active.getSystemService(android.content.Context.CLIPBOARD_SERVICE);
+      oldClip[0]=clipboard.getPrimaryClip();
+      clipboard.setPrimaryClip(android.content.ClipData.newPlainText("CanvasLink acceptance"," · ёЖ"));
+      clipboardChanged[0]=true;
+    });
+    if(!direct[0])throw new Exception("Native direct composing input failed");
+    until("CanvasLinkClient.getState().pending===0","Composition did not finish");test.tap("#paste");
+    until("CanvasLinkClient.getState().pending===0","Clipboard input did not finish");
+    test.runOnMainSync(()->((android.content.ClipboardManager)MainActivity.active.getSystemService(android.content.Context.CLIPBOARD_SERVICE)).setPrimaryClip(android.content.ClipData.newPlainText("CanvasLink acceptance","a")));
+    test.tap("#ctrl");test.tap("#paste");until("CanvasLinkClient.getState().pending===0","Literal one-letter paste did not finish");
+    }finally{if(clipboardChanged[0])test.runOnMainSync(()->{android.content.ClipboardManager c=(android.content.ClipboardManager)MainActivity.active.getSystemService(android.content.Context.CLIPBOARD_SERVICE);if(oldClip[0]!=null)c.setPrimaryClip(oldClip[0]);else if(android.os.Build.VERSION.SDK_INT>=28)c.clearPrimaryClip();});}
+    result.putBoolean("literalClipboardWithLatchedCtrl",true);
+    text("' > "+quote(directory+"/controls-direct.txt"));
+    test.runOnMainSync(()->MainActivity.active.web.onCreateInputConnection(new android.view.inputmethod.EditorInfo()).performEditorAction(android.view.inputmethod.EditorInfo.IME_ACTION_NONE));
+    until("CanvasLinkClient.getState().pending===0","Native IME Enter did not finish");
+    result.putBoolean("directCompositionUnicodeBackspaceClipboardImeEnter",true);
+    test.stage("native-physical-ime-key");text("printf '%s\\n' '");
+    test.runOnMainSync(()->((android.view.inputmethod.InputMethodManager)MainActivity.active.getSystemService(android.content.Context.INPUT_METHOD_SERVICE)).restartInput(MainActivity.active.web));
+    test.waitTerminalKeyboard();test.stage("native-physical-ime-key-ready");android.os.SystemClock.sleep(800);
+    android.accessibilityservice.AccessibilityServiceInfo info=test.getUiAutomation().getServiceInfo();info.flags|=android.accessibilityservice.AccessibilityServiceInfo.FLAG_RETRIEVE_INTERACTIVE_WINDOWS;test.getUiAutomation().setServiceInfo(info);
+    android.graphics.Rect keyRect=null;StringBuilder labels=new StringBuilder();
+    for(android.view.accessibility.AccessibilityWindowInfo window:test.getUiAutomation().getWindows())if(window.getType()==android.view.accessibility.AccessibilityWindowInfo.TYPE_INPUT_METHOD){keyRect=findImeKey(window.getRoot(),"a",labels);if(keyRect!=null)break;}
+    if(keyRect==null){result.putString("imeKeyLabels",labels.toString());throw new Exception("Real keyboard letter a not exposed; inspect IME-only labels");}
+    long at=android.os.SystemClock.uptimeMillis();for(int action:new int[]{android.view.MotionEvent.ACTION_DOWN,android.view.MotionEvent.ACTION_UP}){android.view.MotionEvent e=android.view.MotionEvent.obtain(at,android.os.SystemClock.uptimeMillis(),action,keyRect.centerX(),keyRect.centerY(),0);e.setSource(android.view.InputDevice.SOURCE_TOUCHSCREEN);if(!test.getUiAutomation().injectInputEvent(e,true))throw new Exception("IME key touch rejected");e.recycle();android.os.SystemClock.sleep(80);}
+    android.os.SystemClock.sleep(400);text("' > "+quote(directory+"/controls-ime-key.txt"));key("Enter");result.putBoolean("physicalKeyboardKeyTouched",true);
+    result.putBoolean("nativeToolbarControlsAcknowledged",true);
+    result.putInt("nativeSingleEnterCommands",5);
+  }
+  android.graphics.Rect findImeKey(android.view.accessibility.AccessibilityNodeInfo node,String wanted,StringBuilder labels){
+    if(node==null)return null;String text=node.getText()==null?"":node.getText().toString(),desc=node.getContentDescription()==null?"":node.getContentDescription().toString();
+    if(labels.length()<1500&&(!text.isEmpty()||!desc.isEmpty()))labels.append('[').append(text).append('|').append(desc).append(']');
+    android.graphics.Rect r=new android.graphics.Rect();node.getBoundsInScreen(r);if(node.isVisibleToUser()&&!r.isEmpty()&&(wanted.equalsIgnoreCase(text)||wanted.equalsIgnoreCase(desc)))return r;
+    for(int i=0;i WebRTC -> ordinary compiled CanvasTTY Settings. */
+final class SettingsTouchChecks {
+ final AcceptanceInstrumentation test;
+ final DeviceUxChecks gestures;
+ SettingsTouchChecks(AcceptanceInstrumentation test){this.test=test;gestures=new DeviceUxChecks(test,MainActivity.active);}
+ JSONObject probe()throws Exception{
+  java.io.File file=new java.io.File(MainActivity.active.getExternalFilesDir(null),"acceptance-settings.json");
+  file.delete();test.stage("remote-settings-request");
+  for(int i=0;i<80&&!file.exists();i++)SystemClock.sleep(100);
+  if(!file.exists())throw new Exception("Read-only Settings geometry unavailable");
+  JSONObject value=new JSONObject(new String(java.nio.file.Files.readAllBytes(file.toPath()),java.nio.charset.StandardCharsets.UTF_8));file.delete();return value;
+ }
+ JSONObject rect(JSONObject p,String name)throws Exception{
+  JSONObject item=name.startsWith("settings-tab-")?p.getJSONObject("tabs").optJSONObject(name):p.getJSONObject("controls").optJSONObject(name);
+  if(item==null||item.isNull("rect"))throw new Exception("Settings target not visible: "+name);
+  JSONObject r=item.getJSONObject("rect");if(!r.optBoolean("hit"))throw new Exception("Settings target covered: "+name);return r;
+ }
+ void tap(JSONObject p,String name)throws Exception{JSONObject r=rect(p,name);test.tap("#video",(r.getDouble("x")+r.getDouble("width")/2)+","+(r.getDouble("y")+r.getDouble("height")/2));SystemClock.sleep(500);}
+ float[] point(double x,double y)throws Exception{
+  JSONObject r=new JSONObject(test.js("(()=>{const e=document.getElementById('video'),r=e.getBoundingClientRect(),k=Math.min(r.width/e.videoWidth,r.height/e.videoHeight);return {x:r.x+(r.width-e.videoWidth*k)/2+e.videoWidth*k*"+x+",y:r.y+(r.height-e.videoHeight*k)/2+e.videoHeight*k*"+y+",d:devicePixelRatio}})()"));
+  int[] origin=new int[2];test.runOnMainSync(()->MainActivity.active.web.getLocationOnScreen(origin));return new float[]{(float)(r.getDouble("x")*r.getDouble("d"))+origin[0],(float)(r.getDouble("y")*r.getDouble("d"))+origin[1]};
+ }
+ void swipe(JSONObject r,double direction)throws Exception{
+  double x=r.getDouble("x")+r.getDouble("width")*.9,y=r.getDouble("y"),h=r.getDouble("height");
+  float[] a=point(x,y+h*(direction>0?.75:.25)),b=point(x,y+h*(direction>0?.25:.75));
+  long down=SystemClock.uptimeMillis();gestures.motion(down,MotionEvent.ACTION_DOWN,new float[][]{a});
+  for(int i=1;i<=16;i++){SystemClock.sleep(25);float f=i/16f;gestures.motion(down,MotionEvent.ACTION_MOVE,new float[][]{{a[0]+(b[0]-a[0])*f,a[1]+(b[1]-a[1])*f}});}
+  gestures.motion(down,MotionEvent.ACTION_UP,new float[][]{b});SystemClock.sleep(600);
+ }
+ JSONObject reveal(JSONObject p,String name)throws Exception{
+  for(int i=0;i<28;i++){JSONObject c=p.getJSONObject("controls").optJSONObject(name);if(c!=null&&!c.isNull("rect")&&c.getJSONObject("rect").optBoolean("hit"))return p;
+   JSONObject scroll=p.getJSONObject("scroll");if(scroll.getDouble("top")+scroll.getDouble("height")>=scroll.getDouble("total")-2)break;
+   swipe(rect(p,"content"),1);p=probe();
+  }throw new Exception("Cannot reveal Settings control: "+name);
+ }
+ void noKeyboard(String context)throws Exception{
+  boolean[] visible={false};test.runOnMainSync(()->visible[0]=MainActivity.active.web.getRootWindowInsets()!=null&&MainActivity.active.web.getRootWindowInsets().isVisible(android.view.WindowInsets.Type.ime()));
+  if(visible[0]||!"false".equals(test.js("CanvasLinkInput.active()")))throw new Exception("Non-text Settings control opened IME: "+context);
+  if(!"true".equals(test.js("document.getElementById('zoom-label').textContent==='100%'")))throw new Exception("Non-text Settings control changed Canvas zoom: "+context);
+ }
+ void dragRange(JSONObject r)throws Exception{
+  float[] a=point(r.getDouble("x")+r.getDouble("width")*.3,r.getDouble("y")+r.getDouble("height")/2),b=point(r.getDouble("x")+r.getDouble("width")*.65,r.getDouble("y")+r.getDouble("height")/2);
+  long down=SystemClock.uptimeMillis();gestures.motion(down,MotionEvent.ACTION_DOWN,new float[][]{a});for(int i=1;i<=12;i++){SystemClock.sleep(25);float f=i/12f;gestures.motion(down,MotionEvent.ACTION_MOVE,new float[][]{{a[0]+(b[0]-a[0])*f,a[1]+(b[1]-a[1])*f}});}gestures.motion(down,MotionEvent.ACTION_UP,new float[][]{b});SystemClock.sleep(400);
+ }
+ void run(Bundle result)throws Exception{
+  test.stage("settings-touch-open");test.menu("reset-view");JSONObject p=probe();int framesBeforeTouch=test.decodedFrames();tap(p,"open");p=probe();
+  if(!p.optBoolean("open"))throw new Exception("Touch did not open Settings");result.putBoolean("remoteSettingsOpened",true);noKeyboard("open");
+  test.waitVideoAfterTouch(framesBeforeTouch);result.putBoolean("remoteSettingsVideoRespondedToTouch",true);
+  tap(p,"settings-tab-general");p=probe();boolean wasOn=p.getJSONObject("controls").getJSONObject("toggleOn").getBoolean("selected");
+  tap(p,wasOn?"toggleOff":"toggleOn");p=probe();if(p.getJSONObject("controls").getJSONObject("toggleOn").getBoolean("selected")==wasOn)throw new Exception("Touch toggle did not change");noKeyboard("toggle");
+  tap(p,wasOn?"toggleOn":"toggleOff");result.putBoolean("remoteToggleChangedAndRestored",true);
+  tap(probe(),"settings-tab-appearance");p=probe();if(!"settings-panel-appearance".equals(p.optString("tab")))throw new Exception("Touch did not select Appearance");
+  double before=p.getJSONObject("scroll").getDouble("top");swipe(rect(p,"content"),1);p=probe();
+  if(p.getJSONObject("scroll").getDouble("top")<=before+20)throw new Exception("One-finger Settings swipe did not scroll remote content");
+  result.putBoolean("remoteSettingsOneFingerScroll",true);noKeyboard("scroll");
+  for(int i=0;i<12&&(p.getJSONObject("controls").optJSONObject("range")==null||p.getJSONObject("controls").getJSONObject("range").isNull("rect"));i++){swipe(rect(p,"content"),1);p=probe();}
+  double oldRange=p.getJSONObject("controls").getJSONObject("range").getDouble("value");
+  tap(p,"range");noKeyboard("range");p=probe();double beforeDrag=p.getJSONObject("controls").getJSONObject("range").getDouble("value");JSONObject slider=rect(p,"range");
+  String fresh="(()=>{const p="+slider.toString()+",x=p.x+p.width/2,y=p.y+p.height/2;return CanvasLinkClient.getState().source.dragRects.some(r=>x>=r.x&&x<=r.x+r.width&&y>=r.y&&y<=r.y+r.height)})()";
+  if(!"true".equals(test.js(fresh)))throw new Exception("Slider geometry stayed stale after UI resize");
+  dragRange(slider);p=probe();double selected=p.getJSONObject("controls").getJSONObject("range").getDouble("value");if(Math.abs(selected-beforeDrag)<.001)throw new Exception("Actual range drag did not change value");result.putBoolean("remoteRangeTouchDrag",true);noKeyboard("range drag");
+  test.tap("[data-key=ArrowRight]");SystemClock.sleep(300);p=probe();double next=p.getJSONObject("controls").getJSONObject("range").getDouble("value");
+  if(next<=selected)throw new Exception("Range ArrowRight failed without IME");
+  for(int i=0;i<60&&Math.abs(next-oldRange)>.001;i++){test.tap(next>oldRange?"[data-key=ArrowLeft]":"[data-key=ArrowRight]");SystemClock.sleep(120);p=probe();next=p.getJSONObject("controls").getJSONObject("range").getDouble("value");}
+  if(Math.abs(next-oldRange)>.001)throw new Exception("Range could not be restored");
+  result.putBoolean("remoteRangeNoKeyboard",true);result.putBoolean("remoteRangeScreenKeysChangedAndRestored",true);
+  test.stage("settings-text-and-select");tap(probe(),"settings-tab-agents");p=reveal(probe(),"preset");tap(p,"preset");p=reveal(probe(),"text");
+  JSONObject textRect=rect(p,"text");test.tap("#video",(textRect.getDouble("x")+textRect.getDouble("width")*.96)+","+(textRect.getDouble("y")+textRect.getDouble("height")/2));test.waitTerminalKeyboard();test.stage("settings-text-ime-ready");SystemClock.sleep(800);
+  JSONObject legibility=new JSONObject(test.js("(()=>{const e=document.getElementById('video'),r=e.getBoundingClientRect(),k=Math.min(r.width/e.videoWidth,r.height/e.videoHeight);return {font:"+p.getJSONObject("controls").getJSONObject("text").getDouble("fontSize")+"*e.videoWidth/(CanvasLinkClient.getState().source.viewport?.width||e.videoWidth)*k,scale:new DOMMatrix(getComputedStyle(e).transform).a}})()"));if(legibility.getDouble("font")<11.5||legibility.getDouble("scale")>4.01)throw new Exception("Settings field too small or excessively zoomed with real IME");
+  test.commitText(" · CL touch");SystemClock.sleep(400);p=probe();if(!p.getJSONObject("controls").getJSONObject("text").optBoolean("testMarker"))throw new Exception("Text field did not receive direct IME commit");
+  test.tap("#keyboard-toggle");SystemClock.sleep(400);noKeyboard("text edit ended");result.putBoolean("remoteTextReadableWithImeAndOverviewRestored",true);p=probe();tap(p,"save");SystemClock.sleep(500);
+  tap(probe(),"settings-tab-general");tap(probe(),"settings-tab-agents");p=reveal(probe(),"text");if(!p.getJSONObject("controls").getJSONObject("text").optBoolean("testMarker"))throw new Exception("Settings text did not persist across tab reopen");result.putBoolean("remoteTextDirectImeSavedAndReopened",true);
+  p=reveal(p,"select");int prior=p.getJSONObject("controls").getJSONObject("select").getInt("index");tap(p,"select");noKeyboard("select");test.stage("settings-select-open");SystemClock.sleep(800);
+  p=probe();int choice=prior==0?1:0;tap(p,"option-"+choice);p=probe();
+  if(p.getJSONObject("controls").getJSONObject("select").getInt("index")!=choice)throw new Exception("Select did not change through actual option touch");result.putBoolean("remoteSelectOptionTouch",true);
+  tap(p,"select");test.tap("[data-key=ArrowDown]");test.tap("[data-key=Enter]");SystemClock.sleep(400);p=probe();
+  int keyboardChoice=p.getJSONObject("controls").getJSONObject("select").getInt("index");if(keyboardChoice==choice)throw new Exception("Select did not change through screen keys");result.putBoolean("remoteSelectScreenKeys",true);
+  tap(p,"select");test.tap("[data-key=ArrowUp]");test.tap("[data-key=Escape]");p=probe();if(p.getJSONObject("controls").getJSONObject("select").getInt("index")!=keyboardChoice||p.getJSONObject("controls").has("option-0"))throw new Exception("Select Escape did not dismiss without applying");result.putBoolean("remoteSelectEscape",true);noKeyboard("select options");
+  tap(p,"save");tap(probe(),"settings-tab-general");tap(probe(),"settings-tab-agents");p=reveal(probe(),"select");if(p.getJSONObject("controls").getJSONObject("select").getInt("index")!=keyboardChoice)throw new Exception("Select value did not persist");result.putBoolean("remoteSelectSavedAndReopened",true);
+  tap(p,"remove");SystemClock.sleep(400);
+  tap(probe(),"close");if(probe().optBoolean("open"))throw new Exception("Touch did not close Settings");result.putBoolean("remoteSettingsClosed",true);
+ }
+}
diff --git a/integrations/canvaslink/android/src/io/nexcore/canvaslink/Srp.java b/integrations/canvaslink/android/src/io/nexcore/canvaslink/Srp.java
new file mode 100644
index 000000000..0c4c92cf1
--- /dev/null
+++ b/integrations/canvaslink/android/src/io/nexcore/canvaslink/Srp.java
@@ -0,0 +1,61 @@
+package io.nexcore.canvaslink;
+
+import java.math.BigInteger;
+import java.nio.charset.StandardCharsets;
+import java.security.MessageDigest;
+import java.security.SecureRandom;
+import java.util.Arrays;
+
+/** SRP-6a/SHA-256 interoperability with secure-remote-password 0.3.1.
+ * Fixed RFC 5054 2048-bit group. PIN is never sent to the network. */
+public final class Srp {
+  static final String PRIME = "AC6BDB41324A9A9BF166DE5E1389582FAF72B6651987EE07FC319294"
+    + "3DB56050A37329CBB4A099ED8193E0757767A13DD52312AB4B03310D"
+    + "CD7F48A9DA04FD50E8083969EDB767B0CF6095179A163AB3661A05FB"
+    + "D5FAAAE82918A9962F0B93B855F97993EC975EEAA80D740ADBF4FF74"
+    + "7359D041D5C33EA71D281E446B14773BCA97B43A23FB801676BD207A"
+    + "436C6481F1D2B9078717461A5B9D32E688F87748544523B524B0D57D"
+    + "5EA77A2775D2ECFA032CFBDBF52FB3786160279004E57AE6AF874E73"
+    + "03CE53299CCC041C7BC308D82A5698F3A8D0C38271AE35F8E9DBFBB6"
+    + "94B5C803D89F7AE435DE236D525F54759B65E372FCD68EF20FA7111F9E4AFF73";
+  static final BigInteger N = new BigInteger(PRIME, 16), G = BigInteger.valueOf(2);
+  static final String USER = "CanvasLink/v1";
+  final BigInteger secret, publicValue;
+  public Srp() { byte[] a = new byte[32]; new SecureRandom().nextBytes(a); secret = new BigInteger(1, a); publicValue = G.modPow(secret, N); }
+  Srp(String fixedSecret) { secret = new BigInteger(fixedSecret, 16); publicValue = G.modPow(secret, N); }
+  public String publicHex() { return hex(pad(publicValue, 256)); }
+  public static byte[] utf8(String value) { return value.getBytes(StandardCharsets.UTF_8); }
+  public static byte[] hash(byte[]... values) {
+    try { MessageDigest d = MessageDigest.getInstance("SHA-256"); for (byte[] v : values) d.update(v); return d.digest(); }
+    catch (Exception e) { throw new IllegalStateException(e); }
+  }
+  public static String hex(byte[] value) { StringBuilder s = new StringBuilder(); for (byte b : value) s.append(String.format(java.util.Locale.ROOT, "%02x", b & 255)); return s.toString(); }
+  public static byte[] bytes(String value) {
+    if (value == null || !value.matches("[0-9a-fA-F]+") || value.length() % 2 != 0) throw new IllegalArgumentException("Invalid hex");
+    byte[] out = new byte[value.length() / 2]; for (int i = 0; i < out.length; i++) out[i] = (byte) Integer.parseInt(value.substring(i*2, i*2+2), 16); return out;
+  }
+  static byte[] pad(BigInteger value, int length) {
+    byte[] raw = value.toByteArray(), out = new byte[length];
+    int count = Math.min(length, raw.length); System.arraycopy(raw, raw.length-count, out, length-count, count); return out;
+  }
+  public Session derive(String pin, String saltHex, String serverHex) {
+    if (!pin.matches("[0-9]{6}") || !saltHex.matches("[0-9a-f]{64}") || !serverHex.matches("[0-9a-f]{512}")) throw new IllegalArgumentException("Invalid SRP challenge");
+    byte[] salt = bytes(saltHex), a = pad(publicValue, 256), b = bytes(serverHex), n = bytes(PRIME), g = {2};
+    BigInteger B = new BigInteger(1, b);
+    if (B.mod(N).equals(BigInteger.ZERO)) throw new IllegalArgumentException("Invalid server ephemeral");
+    BigInteger k = new BigInteger(1, hash(n, g));
+    BigInteger x = new BigInteger(1, hash(salt, hash(utf8(USER + ":" + pin))));
+    BigInteger u = new BigInteger(1, hash(a, b));
+    if (u.equals(BigInteger.ZERO)) throw new IllegalArgumentException("Invalid scrambling parameter");
+    BigInteger S = B.subtract(k.multiply(G.modPow(x, N))).mod(N).modPow(secret.add(u.multiply(x)), N);
+    byte[] K = hash(pad(S, 256)), xor = hash(n), hg = hash(g);
+    for (int i=0; ishowTerminal(next),150);postDelayed(()->showTerminal(next),350);
+  }
+  private void showTerminal(String owner){if(owner.equals(token)&&!owner.isEmpty()){requestFocus();ime().showSoftInput(this,InputMethodManager.SHOW_IMPLICIT);}}
+  void closeTerminal(){token="";connection=null;ime().hideSoftInputFromWindow(getWindowToken(),0);ime().restartInput(this);}
+  boolean terminalActive(){return !token.isEmpty();}
+  @Override public boolean onTouchEvent(MotionEvent event){
+    String owner=token;boolean handled=super.onTouchEvent(event);
+    // Blink dismisses its DOM keyboard when a toolbar button is touched. Our
+    // terminal input connection still owns focus, so keep the terminal IME up.
+    // Menu/explicit hide invalidates owner before this delayed callback runs.
+    if(event.getActionMasked()==MotionEvent.ACTION_UP&&!owner.isEmpty())postDelayed(()->showTerminal(owner),150);
+    return handled;
+  }
+  private void event(JSONObject value){
+    if(token.isEmpty())return;
+    try{value.put("token",token);}catch(JSONException ignored){}
+    evaluateJavascript("window.CanvasLinkInput&&window.CanvasLinkInput.receive("+value.toString()+")",null);
+  }
+  private void text(String value){if(value.isEmpty())return;try{event(new JSONObject().put("type","text").put("text",value));}catch(JSONException ignored){}}
+  void key(String key,String modifiers){
+    if(connection!=null)connection.finishComposingText();
+    try{event(new JSONObject().put("type","key").put("key",key).put("modifiers",new JSONArray(modifiers)));}catch(JSONException ignored){}
+  }
+  void paste(String value){
+    if(value.isEmpty()){try{event(new JSONObject().put("type","notice").put("text","Буфер обмена пуст"));}catch(JSONException ignored){}return;}
+    if(value.length()>8000){try{event(new JSONObject().put("type","notice").put("text","В буфере больше 8000 символов"));}catch(JSONException ignored){}return;}
+    if(connection!=null)connection.finishComposingText();
+    try{event(new JSONObject().put("type","paste").put("text",value));}catch(JSONException ignored){}
+  }
+  @Override public boolean onCheckIsTextEditor(){return terminalActive()||super.onCheckIsTextEditor();}
+  @Override public InputConnection onCreateInputConnection(EditorInfo out){
+    if(!terminalActive())return super.onCreateInputConnection(out);
+    out.inputType=InputType.TYPE_CLASS_TEXT|InputType.TYPE_TEXT_VARIATION_VISIBLE_PASSWORD|InputType.TYPE_TEXT_FLAG_NO_SUGGESTIONS|InputType.TYPE_TEXT_FLAG_MULTI_LINE;
+    out.imeOptions=EditorInfo.IME_FLAG_NO_EXTRACT_UI|EditorInfo.IME_FLAG_NO_FULLSCREEN|EditorInfo.IME_FLAG_NO_PERSONALIZED_LEARNING|EditorInfo.IME_ACTION_NONE;
+    out.initialSelStart=out.initialSelEnd=0;
+    return connection=new TerminalConnection(token);
+  }
+  private boolean hardware(KeyEvent e){
+    if(!terminalActive()||e.getKeyCode()==KeyEvent.KEYCODE_BACK)return false;
+    String k=null;
+    switch(e.getKeyCode()){
+      case KeyEvent.KEYCODE_ENTER:k="Enter";break;case KeyEvent.KEYCODE_DEL:k="Backspace";break;
+      case KeyEvent.KEYCODE_FORWARD_DEL:k="Delete";break;case KeyEvent.KEYCODE_TAB:k="Tab";break;
+      case KeyEvent.KEYCODE_ESCAPE:k="Escape";break;case KeyEvent.KEYCODE_DPAD_LEFT:k="ArrowLeft";break;
+      case KeyEvent.KEYCODE_DPAD_RIGHT:k="ArrowRight";break;case KeyEvent.KEYCODE_DPAD_UP:k="ArrowUp";break;
+      case KeyEvent.KEYCODE_DPAD_DOWN:k="ArrowDown";break;case KeyEvent.KEYCODE_MOVE_HOME:k="Home";break;
+      case KeyEvent.KEYCODE_MOVE_END:k="End";break;case KeyEvent.KEYCODE_PAGE_UP:k="PageUp";break;
+      case KeyEvent.KEYCODE_PAGE_DOWN:k="PageDown";break;
+    }
+    int code=e.getUnicodeChar();
+    if(k==null&&code==0)return false;
+    if(e.getAction()!=KeyEvent.ACTION_DOWN)return true;
+    JSONArray mods=new JSONArray();if(e.isCtrlPressed())mods.put("control");if(e.isAltPressed())mods.put("alt");if(e.isShiftPressed())mods.put("shift");if(e.isMetaPressed())mods.put("meta");
+    if(k!=null)key(k,mods.toString());
+    else if(e.isCtrlPressed()||e.isMetaPressed()){
+      int base=e.getUnicodeChar(0);if(base>0)key(new String(Character.toChars(base)).toLowerCase(java.util.Locale.ROOT),mods.toString());
+    }else if(code>0&&code<=Character.MAX_CODE_POINT){if(connection!=null)connection.finishComposingText();text(new String(Character.toChars(code)));}
+    return true;
+  }
+  @Override public boolean dispatchKeyEvent(KeyEvent e){return hardware(e)||super.dispatchKeyEvent(e);}
+  @Override public boolean onKeyPreIme(int code,KeyEvent event){
+    if(code==KeyEvent.KEYCODE_BACK&&terminalActive()){
+      if(event.getAction()==KeyEvent.ACTION_UP){closeTerminal();evaluateJavascript("window.CanvasLinkInput&&window.CanvasLinkInput.stop()",null);}
+      return true;
+    }
+    return super.onKeyPreIme(code,event);
+  }
+  private final class TerminalConnection extends BaseInputConnection {
+    final String owner;final Editable composing=new SpannableStringBuilder();
+    TerminalConnection(String owner){super(TerminalWebView.this,true);this.owner=owner;Selection.setSelection(composing,0);}
+    private boolean valid(){return connection==this&&owner.equals(token)&&!token.isEmpty();}
+    @Override public Editable getEditable(){return composing;}
+    private void preedit(){try{event(new JSONObject().put("type","composition").put("text",composing.toString()));}catch(JSONException ignored){}ime().updateSelection(TerminalWebView.this,Selection.getSelectionStart(composing),Selection.getSelectionEnd(composing),getComposingSpanStart(composing),getComposingSpanEnd(composing));}
+    private void clear(){composing.clear();Selection.setSelection(composing,0);preedit();}
+    @Override public boolean setComposingText(CharSequence value,int cursor){if(!valid())return false;super.setComposingText(value,cursor);preedit();return true;}
+    @Override public boolean commitText(CharSequence value,int cursor){if(!valid())return false;String committed=value.toString();clear();if("\n".equals(committed))key("Enter","[]");else text(committed);return true;}
+    @Override public boolean finishComposingText(){if(!valid())return false;String value=composing.toString();super.finishComposingText();clear();text(value);return true;}
+    @Override public boolean deleteSurroundingText(int before,int after){
+      if(!valid()||before<0||after<0||before>8000||after>8000)return false;
+      if(composing.length()>0){int cursor=Math.max(0,Selection.getSelectionEnd(composing));int from=Math.max(0,cursor-before),to=Math.min(composing.length(),cursor+after);composing.delete(from,to);Selection.setSelection(composing,from);preedit();return true;}
+      for(int i=0;i8000||after>8000)return false;
+      if(composing.length()==0)return deleteSurroundingText(before,after);
+      int cursor=Math.max(0,Selection.getSelectionEnd(composing));
+      int left=Character.codePointCount(composing,0,cursor),right=Character.codePointCount(composing,cursor,composing.length());
+      int from=Character.offsetByCodePoints(composing,cursor,-Math.min(before,left)),to=Character.offsetByCodePoints(composing,cursor,Math.min(after,right));
+      composing.delete(from,to);Selection.setSelection(composing,from);preedit();return true;
+    }
+    @Override public boolean sendKeyEvent(KeyEvent event){return valid()&&hardware(event);}
+    @Override public boolean performEditorAction(int action){if(!valid())return false;key("Enter","[]");return true;}
+    @Override public boolean performContextMenuAction(int action){
+      if(!valid()||action!=android.R.id.paste)return false;
+      android.content.ClipboardManager clipboard=(android.content.ClipboardManager)getContext().getSystemService(Context.CLIPBOARD_SERVICE);
+      if(clipboard.hasPrimaryClip()&&clipboard.getPrimaryClip().getItemCount()>0){CharSequence value=clipboard.getPrimaryClip().getItemAt(0).coerceToText(getContext());if(value!=null)paste(value.toString());}return true;
+    }
+  }
+}
diff --git a/integrations/canvaslink/design/canvaslink-icon.svg b/integrations/canvaslink/design/canvaslink-icon.svg
new file mode 100644
index 000000000..b9f3ffcb1
--- /dev/null
+++ b/integrations/canvaslink/design/canvaslink-icon.svg
@@ -0,0 +1,10 @@
+
+
+
+
+  CanvasLink — linked windows
+  A wide remote window and a square touch surface interlock through two open rails. Critical geometry stays within the central 66dp adaptive safe circle.
+  
+  
+  
+
diff --git a/integrations/canvaslink/host/discovery.cjs b/integrations/canvaslink/host/discovery.cjs
new file mode 100644
index 000000000..16a46e18f
--- /dev/null
+++ b/integrations/canvaslink/host/discovery.cjs
@@ -0,0 +1,12 @@
+const {spawn}=require('node:child_process');
+// macOS mDNSResponder owns multicast publication. UDP-only JS Bonjour can
+// report "up" while its records remain invisible to native DNS-SD browsers.
+function publish({name,port,ipv4,embedded=false}){
+ if(process.platform==='darwin'){
+   const child=spawn('/usr/bin/dns-sd',['-R',name,'_canvaslink._tcp','local.',String(port),'v=2','ipv4='+ipv4,'host='+(embedded?'canvastty':'standalone')],{stdio:'ignore'});
+   child.on('error',()=>{});
+   return {destroy(){child.kill('SIGTERM');}};
+ }
+ const {Bonjour}=require('bonjour-service'),bonjour=new Bonjour();bonjour.publish({name,type:'canvaslink',port,txt:{v:'2',ipv4,host:embedded?'canvastty':'standalone'}});return bonjour;
+}
+module.exports={publish};
diff --git a/integrations/canvaslink/host/display-scale.cjs b/integrations/canvaslink/host/display-scale.cjs
new file mode 100644
index 000000000..49dc23ee0
--- /dev/null
+++ b/integrations/canvaslink/host/display-scale.cjs
@@ -0,0 +1,13 @@
+// Optional high-density startup; the desktop must opt in explicitly.
+// Never change density or restart the default desktop process.
+function configureRenderScale(app,argv=process.argv){
+ if(app.isReady())throw Error('render-scale-requires-startup');
+ const scale=argv.find(arg=>arg.startsWith('--force-device-scale-factor='));
+ if(scale){if(!['--force-device-scale-factor=1','--force-device-scale-factor=2'].includes(scale))throw Error('invalid-render-scale');return;}
+ // Electron 43/macOS reads this switch before JavaScript: appendSwitch at the
+ // top of main still leaves DPR=1. A normal preview launch restarts once with
+ // the process-start switch. The owned acceptance launcher already passes it.
+ app.relaunch({args:[...argv.slice(1),'--force-device-scale-factor=2']});
+ app.exit(0);
+}
+module.exports={configureRenderScale};
diff --git a/integrations/canvaslink/host/embedded.cjs b/integrations/canvaslink/host/embedded.cjs
new file mode 100644
index 000000000..de0b0f449
--- /dev/null
+++ b/integrations/canvaslink/host/embedded.cjs
@@ -0,0 +1,138 @@
+// CanvasTTY main-process integration. No global input or desktop capture.
+const {app,BrowserWindow,ipcMain,session,nativeImage}=require('electron');
+const http=require('node:http'),os=require('node:os'),path=require('node:path'),fs=require('node:fs');
+const {publish}=require('./discovery.cjs');
+const {Pairing,privateAddress}=require('./security.cjs');
+const {InputQueue}=require('./input-queue.cjs');
+const {focusOwnedWindow}=require('./owned-focus.cjs');
+const {OwnedPointer}=require('./owned-pointer.cjs');
+const {installSettingsHost}=require('./settings-host.cjs');
+const {validateInput}=require('./native-input.cjs');
+const {selectPointerScript,closeSelectScript}=require('./remote-select.cjs');
+const {createSnapshot}=require('./snapshot.cjs');
+function install({getWindow,glasses}={}){
+ let target,panel,server,bonjour,pairing,port,frameTimer,healthTimer,enabled=false;
+ const queues=new Map(),epochs=new Map(),pointer=new OwnedPointer();let bound=false,captureMode='tab',captureError='',captureQuality=null,frameSequence=0,pendingFrame=0,healthBusy=false,selectPointer=false,sourceSurface='canvas',lastHealth=0;let report={phase:'disabled'},lastFrame=0,startFallback=()=>{};
+ const runtime=()=>path.join(app.getPath('userData'),'canvaslink');
+ const option=name=>{const i=process.argv.indexOf(name);return i<0?undefined:process.argv[i+1];};
+ const closeRemoteSelect=()=>{selectPointer=false;if(target&&!target.isDestroyed())target.webContents.executeJavaScript(closeSelectScript).catch(()=>{});};
+ const ownWindow=()=>getWindow?.()||BrowserWindow.getAllWindows().find(w=>!w.getParentWindow()&&/\/renderer\/index\.html/.test(w.webContents.getURL()));
+ const settingsSnapshot=()=>({enabled,phase:enabled?report.phase:'disabled',pin:enabled?pairing.pin:'',expires:enabled?pairing.expires:0,devices:enabled?[...pairing.sessions.values()].filter(s=>s.expires>Date.now()).map(s=>({name:s.name})):[]});
+ installSettingsHost({ipcMain,getWindow:ownWindow,snapshot:settingsSnapshot,command:async action=>{
+  if(action==='enable')await open();
+  else if(action==='disable')disable();
+  else{if(!enabled)throw Error('canvaslink-disabled');pairing.rotate();report={phase:'waiting',inputs:0,error:''};events({type:'state'});}
+  return settingsSnapshot();
+ }});
+ const addresses=()=>Object.values(os.networkInterfaces()).flat().filter(i=>i.family==='IPv4'&&!i.internal&&privateAddress(i.address)).map(i=>i.address);
+ const events=value=>{if(panel&&!panel.isDestroyed())panel.webContents.send('link:event',value);};
+ const source=()=>({id:'embedded:'+target.id,name:target.getTitle(),pid:process.pid});
+ const state=()=>{const [width,height]=target.getContentSize();return {pin:pairing.pin,expires:pairing.expires,addresses:addresses(),port,fixture:false,embedded:true,nativeCapture:true,captureMode,glassesSupported:!!glasses,width,height,source:target.getTitle(),connected:[...pairing.sessions.values()].map(s=>({id:s.id,name:s.name})),report};};
+ const trusted=event=>{if(!panel||event.sender!==panel.webContents||event.senderFrame!==panel.webContents.mainFrame)throw Error('untrusted-renderer');};
+ const authorized=id=>enabled&&pairing?.sessions.has(id)&&pairing.sessions.get(id).expires>Date.now()&&target&&!target.isDestroyed();
+ function safeSignal(message){if(!message||!['offer','answer','disconnect','ping'].includes(message.type))throw Error('invalid-signal');if(['offer','answer'].includes(message.type)&&(typeof message.sdp!=='string'||message.sdp.length>80000))throw Error('invalid-sdp');return message;}
+ function stopFrames(){clearInterval(healthTimer);clearInterval(frameTimer);frameTimer=null;try{if(target&&!target.isDestroyed())target.webContents.endFrameSubscription();}catch{}}
+ const {focusScript}=require('./focus.cjs');
+ async function apply(input,active){
+   validateInput(input);if(!target||target.isDestroyed())throw Error('window-closed');
+   if(target.isMinimized())throw Error('window-minimized');
+   // Electron routes these events solely to its own renderer. Never use CGEvent
+   // or system keystrokes, and never inject into another app's focused window.
+   // The pairing child must not retain key-window focus over its parent.
+   if(panel&&!panel.isDestroyed()&&panel.isVisible())panel.hide();
+   await focusOwnedWindow({app,target,active});
+   if(!target.isFocused())throw Error('canvas-focus-required');
+   const wc=target.webContents,[width,height]=target.getContentSize();
+   const point={x:Math.min(width-1,Math.round(input.x*width)),y:Math.min(height-1,Math.round(input.y*height))};
+   if(input.type==='text'){const focus=await wc.executeJavaScript(focusScript);if(!active())throw Error('session-ended');if(!focus.editable)throw Error('text-target-required');await wc.insertText(input.text);return;}
+   if(input.type==='pointer'){
+     if(input.action==='down')selectPointer=input.button!==2&&await wc.executeJavaScript(selectPointerScript(point.x,point.y));
+     if(!active()){await wc.executeJavaScript(closeSelectScript);throw Error('session-ended');}
+     if(!selectPointer)pointer.send(wc,{...point,type:{down:'mouseDown',up:'mouseUp',move:'mouseMove'}[input.action],button:input.button===2?'right':'left',clickCount:1,modifiers:input.drag?['leftButtonDown']:[]});if(input.action==='up'){
+     selectPointer=false;
+     // Input dispatch is asynchronous. Read focus after the renderer has handled
+     // the click and settled its layout, rather than acknowledging old focus.
+     const focus=await wc.executeJavaScript(`new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(()=>resolve(${focusScript}))))`);
+     sourceSurface=focus.surface;if(!active())throw Error('session-ended');return {focus};}return;}
+   if(input.type==='scroll'){wc.sendInputEvent({...point,type:'mouseWheel',deltaX:-input.dx,deltaY:-input.dy,canScroll:true});return;}
+   const keyCode={Enter:'Return',ArrowLeft:'Left',ArrowRight:'Right',ArrowUp:'Up',ArrowDown:'Down'}[input.key]||input.key;
+   wc.sendInputEvent({type:'keyDown',keyCode,modifiers:input.modifiers});wc.sendInputEvent({type:'keyUp',keyCode,modifiers:input.modifiers});
+ }
+ function reply(res,status,body){res.writeHead(status,{'Content-Type':'application/json','Cache-Control':'no-store','X-Content-Type-Options':'nosniff'});res.end(JSON.stringify(body));}
+ async function serve(req,res){
+   if(!enabled||!privateAddress(req.socket.remoteAddress)||req.headers.origin||req.method!=='POST'||!['/pair/start','/pair/finish','/channel'].includes(req.url)){reply(res,403,{error:'forbidden'});return;}
+   if(!/^application\/json(?:;|$)/i.test(req.headers['content-type']||'')){reply(res,415,{error:'json-required'});return;}
+   try{let size=0,chunks=[];for await(const chunk of req){size+=chunk.length;if(size>131072)throw Error('too-large');chunks.push(chunk);}const body=JSON.parse(Buffer.concat(chunks).toString());let result;
+     if(req.url==='/pair/start')result=pairing.start(body,req.socket.remoteAddress);
+     else if(req.url==='/pair/finish')result=pairing.finish(body,req.socket.remoteAddress);
+     else result=pairing.receive(body,req.socket.remoteAddress,(s,message)=>{
+       if(message.type==='poll')return {messages:s.queue.splice(0),source:target.getTitle()};
+       if(message.type==='signal'){events({type:'signal',id:s.id,message:safeSignal(message.message)});return {ok:true};}
+       if(message.type==='revoke'){pairing.rotate();events({type:'state'});return {ok:true};}throw Error('unsupported-operation');
+     });reply(res,200,result);
+   }catch{if(!res.headersSent)reply(res,403,{error:'request-rejected'});}
+ }
+ function bindIPC(){
+   if(bound)return;bound=true;
+   ipcMain.handle('link:input-session',(event,id,token)=>{trusted(event);if(token===null){epochs.delete(id);pointer.release();selectPointer=false;target?.webContents.executeJavaScript(closeSelectScript).catch(()=>{});}else{if(!authorized(id))throw Error('not-authorized');pointer.release();epochs.set(id,token);queues.delete(id);}return true;});
+   ipcMain.handle('link:capture-fallback',(event,reason)=>{trusted(event);captureMode='snapshot-fallback';captureError=String(reason||'').replace(/[^A-Za-z]/g,'').slice(0,60);startFallback();return true;});
+   ipcMain.on('link:frame-consumed',(event,sequence)=>{trusted(event);if(sequence===pendingFrame)pendingFrame=0;});
+   ipcMain.handle('link:glasses',async(event,command)=>{trusted(event);if(!glasses||!['state','begin-pairing','cancel-pairing'].includes(command))throw Error('unsupported-glasses-command');return command==='state'?glasses.state():glasses.command({type:command});});
+   ipcMain.handle('link:state',event=>{trusted(event);return state();});
+   ipcMain.handle('link:permissions',event=>{trusted(event);return {platform:process.platform,embedded:true};});
+   ipcMain.handle('link:settings',event=>{trusted(event);throw Error('not-required-for-owned-window');});
+   ipcMain.handle('link:sources',event=>{trusted(event);return [source()];});
+   ipcMain.handle('link:select',(event,id)=>{trusted(event);if(id!==source().id)throw Error('invalid-source');return state();});
+   ipcMain.handle('link:rotate',event=>{trusted(event);pairing.rotate();return state();});
+   ipcMain.handle('link:signal',(event,id,message)=>{trusted(event);if(!authorized(id))throw Error('not-authorized');pairing.queue(id,safeSignal(message));});
+   ipcMain.handle('link:input',(event,id,input)=>{
+     trusted(event);if(!authorized(id))throw Error('not-authorized');if(typeof input?.id!=='string'||!/^[A-Za-z0-9-]{1,80}$/.test(input.id))throw Error('invalid-input-id');
+     let q=queues.get(id);if(!q){const active=()=>authorized(id)&&epochs.get(id)===input.epoch;q=new InputQueue({active,apply:value=>apply(value,active),reply:result=>{const resolve=q.waiters.get(result.id);if(resolve){q.waiters.delete(result.id);resolve(result);}}});q.waiters=new Map();queues.set(id,q);}
+     if(q.waiters.has(input.id))throw Error('input-in-progress');return new Promise(resolve=>{q.waiters.set(input.id,resolve);q.receive(input);});
+   });
+   ipcMain.on('link:report',(event,value)=>{
+     if(!panel||panel.isDestroyed())return;
+     trusted(event);if(!value||typeof value.phase!=='string')return;
+     report={phase:value.phase.slice(0,80),inputs:Number(value.inputs)||0,error:String(value.error||'').slice(0,200)};
+   });
+ }
+ async function open(){
+   if(enabled)return;
+   target=ownWindow();
+   if(!target||target.isDestroyed())throw Error('canvas-window-unavailable');
+   fs.mkdirSync(runtime(),{recursive:true,mode:0o700});
+   pairing=new Pairing({onPair:s=>{events({type:'paired',id:s.id});},onRevoke:id=>{epochs.delete(id);queues.delete(id);pointer.release();closeRemoteSelect();events({type:'revoke',id});}});
+   server=http.createServer(serve);server.requestTimeout=10000;server.headersTimeout=5000;server.maxConnections=32;
+   try{await new Promise((resolve,reject)=>{server.once('error',reject);server.listen(Number(option('--canvaslink-port')||3499),'0.0.0.0',resolve);});}catch(error){server.close();throw error;}
+   try{
+   port=server.address().port;enabled=true;captureMode='tab';captureError='';lastFrame=0;pendingFrame=0;bindIPC();
+   const captureSession=session.fromPartition('canvaslink-owned-capture');
+   panel=new BrowserWindow({width:600,height:700,show:false,parent:target,title:'CanvasTTY · Телефон / планшет',webPreferences:{session:captureSession,preload:path.join(__dirname,'preload.cjs'),contextIsolation:true,sandbox:true,nodeIntegration:false,backgroundThrottling:false}});
+   // Older Electron reports display capture as media with an empty mediaTypes
+   // array. Actual camera/microphone requests remain denied in this own session.
+   captureSession.setPermissionCheckHandler((contents,permission)=>contents===panel?.webContents&&permission==='display-capture');
+   captureSession.setPermissionRequestHandler((contents,permission,callback,details)=>callback(contents===panel?.webContents&&(permission==='display-capture'||permission==='media'&&Array.isArray(details.mediaTypes)&&details.mediaTypes.length===0)));
+   captureSession.setDisplayMediaRequestHandler((request,callback)=>{try{if(!enabled||request.frame!==panel.webContents.mainFrame||target.isDestroyed())return callback({});callback({video:target.webContents.mainFrame});}catch{callback({});}});
+   panel.webContents.setWindowOpenHandler(()=>({action:'deny'}));panel.webContents.on('will-navigate',e=>e.preventDefault());
+   panel.on('close',event=>{if(enabled){event.preventDefault();panel.hide();}});
+   bonjour=publish({name:`CanvasLink ${os.hostname().split('.')[0]}`,port,ipv4:addresses()[0]||'',embedded:true});
+   await panel.loadFile(path.join(__dirname,'index.html'));
+   startFallback=()=>{if(frameTimer)return;let busy=false;
+   const frame=image=>{
+     const now=Date.now();if(!enabled||!pairing.sessions.size||pendingFrame||now-lastFrame<100||image.isEmpty())return;lastFrame=now;
+     const encoded=createSnapshot(image,nativeImage);if(!encoded)return;
+     captureQuality={format:encoded.format,width:encoded.width,height:encoded.height,nativeScale:encoded.scaleFactor,bytes:encoded.pixels.length,encodeMs:Date.now()-now};
+     pendingFrame=++frameSequence;events({type:'frame',sequence:pendingFrame,width:encoded.width,height:encoded.height,pixels:encoded.pixels});
+   };
+   target.webContents.beginFrameSubscription(false,frame);
+   frameTimer=setInterval(async()=>{if(busy||pendingFrame||!pairing.sessions.size||Date.now()-lastFrame<100||target.isDestroyed())return;busy=true;try{frame(await target.webContents.capturePage(undefined,{stayHidden:true,stayAwake:false}));}catch{}finally{busy=false;}},100);
+   };
+   healthTimer=setInterval(async()=>{pairing.expire();if(healthBusy||!pairing.sessions.size||target.isDestroyed()||sourceSurface!=='settings'&&Date.now()-lastHealth<1000)return;healthBusy=true;lastHealth=Date.now();try{const focus=await target.webContents.executeJavaScript(focusScript);sourceSurface=focus.surface;events({type:'health',value:{capture:captureMode==='tab'?(target.webContents.isBeingCaptured()?'active':'stalled'):(Date.now()-lastFrame<3000?'active':'stalled'),windowFocused:target.isFocused(),target:focus.kind,surface:focus.surface,viewport:focus.viewport,terminalView:focus.terminalView,dragRects:focus.dragRects,rect:focus.rect,caret:focus.caret}});}catch{}finally{healthBusy=false;}},200);
+   target.removeListener('closed',disable);target.once('closed',disable);
+   }catch(error){disable();throw error;}
+ }
+ function disable(){enabled=false;pairing?.rotate();pointer.release();closeRemoteSelect();stopFrames();bonjour?.destroy();server?.close();if(panel&&!panel.isDestroyed())panel.destroy();queues.clear();epochs.clear();}
+ app.on('before-quit',()=>{disable();});
+ return {open,disable};
+}
+module.exports={install};
diff --git a/integrations/canvaslink/host/focus.cjs b/integrations/canvaslink/host/focus.cjs
new file mode 100644
index 000000000..5dda9e91b
--- /dev/null
+++ b/integrations/canvaslink/host/focus.cjs
@@ -0,0 +1,18 @@
+// Geometry only; no field values or surrounding text cross the input channel.
+function readFocus(){
+ const e=document.activeElement,panel=document.querySelector('.settings-panel--open');
+ const editable=!!e&&!e.disabled&&!e.readOnly&&(e.tagName==='TEXTAREA'||e.tagName==='INPUT'&&['text','search','email','url','tel','password','number'].includes(e.type)||e.isContentEditable);
+ const kind=e?.classList.contains('xterm-helper-textarea')?'terminal':editable?'text-field':e?.matches('input,select,button,[role=button],[role=slider]')?'control':'canvas';
+ const node=kind==='terminal'?e.closest('.xterm')?.querySelector('.xterm-screen'):editable?e:null;
+ const r=node?.getBoundingClientRect(),c=kind==='terminal'?e.getBoundingClientRect():null;
+ const normalized=b=>b&&b.width>0&&b.height>0?{x:b.x/innerWidth,y:b.y/innerHeight,width:b.width/innerWidth,height:b.height/innerHeight}:null;
+ const clipped=e=>{const r=e.getBoundingClientRect();let x=Math.max(0,r.left),y=Math.max(0,r.top),right=Math.min(innerWidth,r.right),bottom=Math.min(innerHeight,r.bottom);for(let p=e.parentElement;p;p=p.parentElement){const s=getComputedStyle(p);if(/hidden|auto|scroll|clip/.test(s.overflow+s.overflowX+s.overflowY)){const b=p.getBoundingClientRect();x=Math.max(x,b.left);y=Math.max(y,b.top);right=Math.min(right,b.right);bottom=Math.min(bottom,b.bottom);}}return normalized({x,y,width:right-x,height:bottom-y});};
+ const dragRects=panel?[...panel.querySelectorAll('input[type=range]')].filter(e=>!e.disabled).map(clipped).filter(Boolean):[];
+ const screens=panel?[]:[...document.querySelectorAll('.xterm-screen')].filter(node=>clipped(node));
+ const selected=screens.filter(node=>node.closest('.terminal-card--selected'));
+ const candidate=selected.length===1?selected[0]:screens.length===1?screens[0]:null;
+ const terminalView=candidate?{rect:clipped(candidate),viewport:{width:innerWidth,height:innerHeight}}:null;
+ const context=kind==='text-field'?e.closest('.api-profile-row,.provider-secret,.setting-group'):null;
+ return {editable,kind,terminalView,surface:panel?'settings':'canvas',viewport:{width:innerWidth,height:innerHeight},dragRects,rect:normalized(r),contextRect:context?clipped(context):null,fontSize:editable?parseFloat(getComputedStyle(e).fontSize)||14:null,caret:r&&c&&c.x>=r.x-2&&c.y>=r.y-2&&c.right<=r.right+2&&c.bottom<=r.bottom+2?normalized(c):null};
+}
+module.exports={focusScript:'('+readFocus.toString()+')()'};
diff --git a/integrations/canvaslink/host/frames.js b/integrations/canvaslink/host/frames.js
new file mode 100644
index 000000000..de05b4467
--- /dev/null
+++ b/integrations/canvaslink/host/frames.js
@@ -0,0 +1,11 @@
+// NativeImage pixels are BGRA with premultiplied alpha; ImageData expects RGBA.
+// The main process waits for frameConsumed before sending another full frame.
+(function(root){
+ function rgba(pixels,width,height){
+  if(!ArrayBuffer.isView(pixels)||pixels.byteLength!==width*height*4||width<1||height<1||width>2560||height>1600)throw Error('invalid-bitmap-frame');
+  const data=new Uint8ClampedArray(pixels);
+  for(let i=0;i
+
+CanvasLink
+
+

+
C↗
CanvasLink
Рабочее окно. На расстоянии касания.
LOCAL / 01

+
01 — ПОДКЛЮЧЕНИЕ ANDROID
··· ···
Подготовка…

+
02 — ОКНО ДЛЯ ПЕРЕДАЧИ
На macOS при первом запуске потребуется разрешение на запись экрана. Передаётся выбранное окно CanvasTTY.

+
03 — ПРЯМОЕ СОЕДИНЕНИЕ
Откройте CanvasLink на Android, выберите компьютер и введите код. Оба устройства должны быть в одной локальной сети.

+
Ожидание планшета

+
+
+
CANVASTTY → ANDROIDЛокально · Без облака

+

diff --git a/integrations/canvaslink/host/input-queue.cjs b/integrations/canvaslink/host/input-queue.cjs
new file mode 100644
index 000000000..959aeebdd
--- /dev/null
+++ b/integrations/canvaslink/host/input-queue.cjs
@@ -0,0 +1,23 @@
+const {validateInput}=require('./native-input.cjs');
+// One peer owns one ordered queue. Keep IDs for the whole peer lifetime: an old
+// text/Enter request can never execute twice, even after its ACK was lost.
+class InputQueue {
+  constructor({apply,active,reply,limit=64,maxIds=256}){Object.assign(this,{apply,active,reply,limit,maxIds});this.tail=Promise.resolve();this.ids=new Map();this.pending=0;this.highWater=0;}
+  receive(value){
+    const id=value?.id;
+    if(typeof id!=='string'||!/^[A-Za-z0-9-]{1,80}$/.test(id))return;
+    const previous=this.ids.get(id);if(previous){if(previous.result)this.reply(previous.result);return;}
+    const respond=result=>{this.reply(result);};
+    if(!Number.isSafeInteger(value.seq)||value.seq<=this.highWater){respond({type:'input-error',id,error:'input-expired'});return;}
+    if(!this.active()||this.pending>=this.limit){respond({type:'input-error',id,error:'input-busy'});return;}
+    try{validateInput(value);}catch(error){respond({type:'input-error',id,error:error.message});return;}
+    this.highWater=value.seq;const entry={};this.ids.set(id,entry);this.pending++;
+    for(const [oldId,old] of this.ids){if(this.ids.size<=this.maxIds)break;if(old.result)this.ids.delete(oldId);}
+    this.tail=this.tail.catch(()=>{}).then(async()=>{
+      try{if(!this.active())throw Error('session-ended');const result=await this.apply(value);entry.result={type:'input-ok',id,...(result?.focus?{focus:result.focus}:{})};}
+      catch(error){entry.result={type:'input-error',id,error:error.message||'input-rejected'};}
+      finally{this.pending--;if(this.active())respond(entry.result);}
+    });
+  }
+}
+module.exports={InputQueue};
diff --git a/integrations/canvaslink/host/native-input.cjs b/integrations/canvaslink/host/native-input.cjs
new file mode 100644
index 000000000..49bbccc16
--- /dev/null
+++ b/integrations/canvaslink/host/native-input.cjs
@@ -0,0 +1,11 @@
+const KEYS = new Set(['Enter', 'Tab', 'Escape', 'Backspace', 'Delete', 'ArrowLeft', 'ArrowRight', 'ArrowUp', 'ArrowDown', 'Home', 'End', 'PageUp', 'PageDown', 'c', 'a', 'v', 'z', 'd', 'l']);
+function validateInput(e) {
+  if (!e || !['pointer', 'scroll', 'key', 'text'].includes(e.type)) throw Error('invalid-input');
+  if (['pointer', 'scroll'].includes(e.type) && (![e.x, e.y].every(n => Number.isFinite(n) && n >= 0 && n <= 1))) throw Error('invalid-coordinates');
+  if (e.type === 'pointer' && !['down', 'up', 'move'].includes(e.action)) throw Error('invalid-pointer');
+  if (e.type === 'pointer' && ![0, 2].includes(e.button)) throw Error('invalid-button');
+  if (e.type === 'scroll' && (![e.dx, e.dy].every(n => Number.isFinite(n) && Math.abs(n) <= 2000))) throw Error('invalid-scroll');
+  if (e.type === 'text' && (typeof e.text !== 'string' || !e.text.length || e.text.length > 8000)) throw Error('invalid-text');
+  if (e.type === 'key' && (!Array.isArray(e.modifiers) || !(KEYS.has(e.key)||(/^[a-z]$/.test(e.key)&&e.modifiers.some(m=>m==='control'||m==='meta'))) || e.modifiers.length > 4 || e.modifiers.some(m => !['control', 'shift', 'alt', 'meta'].includes(m)))) throw Error('invalid-key');
+}
+module.exports = { validateInput };
diff --git a/integrations/canvaslink/host/owned-focus.cjs b/integrations/canvaslink/host/owned-focus.cjs
new file mode 100644
index 000000000..358f1a5a5
--- /dev/null
+++ b/integrations/canvaslink/host/owned-focus.cjs
@@ -0,0 +1,18 @@
+// Activation is asynchronous on macOS. Wait only for our own window; never send
+// system keys or continue a revoked input after waiting for activation.
+async function focusOwnedWindow({app,target,active,timeout=1000,now=Date.now,wait=ms=>new Promise(resolve=>setTimeout(resolve,ms))}){
+ const check=()=>{if(!active())throw Error('session-ended');if(target.isDestroyed())throw Error('window-closed');if(target.isMinimized())throw Error('window-minimized');};
+ check();
+ const request=()=>{app.focus({steal:true});target.show();target.focus();};
+ if(!target.isFocused())request();
+ const deadline=now()+timeout;let retryAt=now()+100;
+ while(!target.isFocused()){
+  check();if(now()>=deadline)throw Error('canvas-focus-required');
+  // Hiding the pairing child may asynchronously resign the app's key window
+  // after the first activation request. Reassert only this own window, bounded.
+  if(now()>=retryAt){request();retryAt=now()+100;}
+  await wait(20);
+ }
+ check();target.webContents.focus();
+}
+module.exports={focusOwnedWindow};
diff --git a/integrations/canvaslink/host/owned-pointer.cjs b/integrations/canvaslink/host/owned-pointer.cjs
new file mode 100644
index 000000000..f469c481f
--- /dev/null
+++ b/integrations/canvaslink/host/owned-pointer.cjs
@@ -0,0 +1,19 @@
+// Only the owned renderer receives events; cancellation never activates a window.
+class OwnedPointer {
+  constructor(){this.held=new Map();}
+  send(contents,event){
+    contents.sendInputEvent(event);
+    if(event.type==='mouseDown')this.held.set(event.button,{contents,event});
+    else if(event.type==='mouseUp')this.held.delete(event.button);
+    else if(event.type==='mouseMove')for(const state of this.held.values()){
+      if(state.contents===contents)state.event={...state.event,x:event.x,y:event.y};
+    }
+  }
+  release(){
+    const held=[...this.held.values()];this.held.clear();
+    for(const {contents,event} of held){
+      try{if(!contents.isDestroyed())contents.sendInputEvent({...event,type:'mouseUp',modifiers:[],clickCount:1});}catch{}
+    }
+  }
+}
+module.exports={OwnedPointer};
diff --git a/integrations/canvaslink/host/preload.cjs b/integrations/canvaslink/host/preload.cjs
new file mode 100644
index 000000000..a96acbd9e
--- /dev/null
+++ b/integrations/canvaslink/host/preload.cjs
@@ -0,0 +1,17 @@
+const { contextBridge, ipcRenderer } = require('electron');
+contextBridge.exposeInMainWorld('host', {
+  frameConsumed:sequence=>ipcRenderer.send('link:frame-consumed',sequence),
+  captureFallback:reason=>ipcRenderer.invoke('link:capture-fallback',reason),
+  glasses: command => ipcRenderer.invoke('link:glasses',command),
+  state: () => ipcRenderer.invoke('link:state'),
+  permissions: () => ipcRenderer.invoke('link:permissions'),
+  settings: kind => ipcRenderer.invoke('link:settings',kind),
+  sources: () => ipcRenderer.invoke('link:sources'),
+  select: id => ipcRenderer.invoke('link:select', id),
+  rotate: () => ipcRenderer.invoke('link:rotate'),
+  signal: (id, message) => ipcRenderer.invoke('link:signal', id, message),
+  inputSession: (id, token) => ipcRenderer.invoke('link:input-session',id,token),
+  input: (id, event) => ipcRenderer.invoke('link:input', id, event),
+  report: report => ipcRenderer.send('link:report', report),
+  onEvent: fn => { const listener = (_event, value) => fn(value); ipcRenderer.on('link:event', listener); return () => ipcRenderer.removeListener('link:event', listener); }
+});
diff --git a/integrations/canvaslink/host/remote-select.cjs b/integrations/canvaslink/host/remote-select.cjs
new file mode 100644
index 000000000..ce5737428
--- /dev/null
+++ b/integrations/canvaslink/host/remote-select.cjs
@@ -0,0 +1,30 @@
+// Native OS select popups are outside an owned WebContents stream. Open a
+// renderer-local list only for an authenticated remote pointer on a select.
+function selectAtPoint(x,y){
+ const select=document.elementFromPoint(x,y)?.closest('select');
+ if(!select||select.disabled||select.multiple||select.size>1)return false;
+ window.__canvasLinkSelect?.close();
+ const box=document.createElement('div'),r=select.getBoundingClientRect(),style=getComputedStyle(select);
+ box.setAttribute('role','listbox');box.setAttribute('aria-label',select.getAttribute('aria-label')||select.labels?.[0]?.textContent||'Выбор значения');
+ box.dataset.canvaslinkSelect='';
+ Object.assign(box.style,{position:'fixed',zIndex:'2147483646',boxSizing:'border-box',width:Math.min(innerWidth-16,Math.max(220,r.width))+'px',maxHeight:Math.min(320,innerHeight-16)+'px',overflowY:'auto',padding:'6px',border:'1px solid #626773',borderRadius:'10px',background:'#20232b',color:'#f3f4f6',boxShadow:'0 8px 32px #0008',font:style.font});
+ const entries=[...select.options].map((option,index)=>({option,index,disabled:option.disabled||option.parentElement?.tagName==='OPTGROUP'&&option.parentElement.disabled}));
+ let current=select.selectedIndex,closed=false;
+ const close=(restore=true)=>{if(closed)return;closed=true;box.remove();document.removeEventListener('pointerdown',outside,true);document.removeEventListener('keydown',keys,true);window.removeEventListener('resize',dismiss);if(window.__canvasLinkSelect?.box===box)delete window.__canvasLinkSelect;if(restore&&select.isConnected)select.focus({preventScroll:true});};
+ const dismiss=()=>close(false);
+ const choose=index=>{if(entries[index]?.disabled)return;select.selectedIndex=index;select.dispatchEvent(new Event('input',{bubbles:true}));select.dispatchEvent(new Event('change',{bubbles:true}));close();};
+ const paint=()=>{for(const button of box.children){const active=Number(button.dataset.index)===current;button.setAttribute('aria-selected',String(active));button.style.background=active?'#485660':'transparent';}box.querySelector('[aria-selected=true]')?.scrollIntoView({block:'nearest'});};
+ const outside=event=>{if(!box.contains(event.target))close(false);};
+ const keys=event=>{
+  if(!['ArrowDown','ArrowUp','Home','End','Enter','Escape','Tab'].includes(event.key))return;
+  if(event.key==='Tab'){close();return;}
+  event.preventDefault();event.stopImmediatePropagation();
+  if(event.key==='Escape'){close();return;}if(event.key==='Enter'){choose(current);return;}
+  const available=entries.filter(e=>!e.disabled).map(e=>e.index);if(!available.length)return;
+  const at=available.indexOf(current);current=event.key==='Home'?available[0]:event.key==='End'?available.at(-1):available[Math.max(0,Math.min(available.length-1,at+(event.key==='ArrowDown'?1:-1)))];paint();
+ };
+ for(const entry of entries){const button=document.createElement('button');button.type='button';button.setAttribute('role','option');button.dataset.index=String(entry.index);button.textContent=entry.option.label;button.disabled=entry.disabled;Object.assign(button.style,{display:'block',width:'100%',minHeight:'40px',padding:'9px 12px',border:'0',borderRadius:'6px',textAlign:'left',color:entry.disabled?'#858a94':'inherit',font:'inherit',cursor:entry.disabled?'default':'pointer',whiteSpace:'normal'});button.addEventListener('click',()=>choose(entry.index));box.append(button);}
+ document.body.append(box);const b=box.getBoundingClientRect();box.style.left=Math.max(8,Math.min(r.left,innerWidth-b.width-8))+'px';box.style.top=Math.max(8,r.bottom+b.height+8<=innerHeight?r.bottom+4:r.top-b.height-4)+'px';
+ document.addEventListener('pointerdown',outside,true);document.addEventListener('keydown',keys,true);window.addEventListener('resize',dismiss);window.__canvasLinkSelect={box,close};select.focus({preventScroll:true});paint();return true;
+}
+module.exports={selectPointerScript:(x,y)=>'('+selectAtPoint.toString()+')('+JSON.stringify(x)+','+JSON.stringify(y)+')',closeSelectScript:'window.__canvasLinkSelect?.close(false)'};
diff --git a/integrations/canvaslink/host/renderer.js b/integrations/canvaslink/host/renderer.js
new file mode 100644
index 000000000..e599fcb66
--- /dev/null
+++ b/integrations/canvaslink/host/renderer.js
@@ -0,0 +1,167 @@
+const $ = id => document.getElementById(id);
+let state, stream, peer, channel, activeId, inputs = 0, generation = 0, firstFrameTimer;
+let fixtureText = '', fixtureClicks = 0, fixtureKeys = [], fixturePointer = { x: .5, y: .5 };
+function report(phase, error = '') { window.host.report({ phase, inputs, error }); }
+async function refreshState() {
+  state = await window.host.state();
+  if(state.embedded){$('source-section').hidden=true;$('mac-permissions').hidden=true;$('device-tabs').hidden=!state.glassesSupported;}
+  $('pin').textContent = state.pin ? state.pin.slice(0, 3) + ' ' + state.pin.slice(3) : 'СВЯЗАНО';
+  $('addresses').textContent = state.addresses.map(ip => `${ip}:${state.port}`).join('\n') || 'Нет локального IPv4-адреса';
+  $('status').textContent = state.connected.length ? `Подключено: ${state.connected[0].name} · ${state.source || 'выберите окно'}` : 'Ожидание планшета';
+}
+function closePeer() {
+  clearTimeout(firstFrameTimer);
+  if(activeId)window.host.inputSession(activeId,null).catch(()=>{});
+  generation++; activeId = null; channel?.close(); peer?.close(); stream?.getTracks().forEach(t => t.stop());
+  channel = null; peer = null; stream = null;
+}
+const iceReady = pc => new Promise((resolve, reject) => {
+  if (pc.iceGatheringState === 'complete') return resolve();
+  const timer = setTimeout(() => { pc.removeEventListener('icegatheringstatechange', listener); reject(Error('Не удалось подготовить локальное соединение')); }, 12000);
+  function listener() { if (pc.iceGatheringState === 'complete') { clearTimeout(timer); pc.removeEventListener('icegatheringstatechange', listener); resolve(); } }
+  pc.addEventListener('icegatheringstatechange', listener);
+});
+async function start(id) {
+  closePeer(); activeId = id;
+  const token=generation;
+  let captured;
+  const current=()=>token===generation&&activeId===id;
+  $('error').textContent = '';
+  try {
+    if (!state.source) return;
+    if (state.embedded) {
+      try{if(['jpeg-fallback','snapshot-fallback'].includes(state.captureMode))throw Error('SnapshotCapture');captured=await navigator.mediaDevices.getDisplayMedia({video:{width:{max:2560},height:{max:1600},frameRate:{ideal:30,max:30}},audio:false});}
+      catch(error){if(!current())return;const canvas=$('fixture');canvas.width=state.width;canvas.height=state.height;captured=canvas.captureStream(30);await window.host.captureFallback(error.name);}
+    } else if (state.fixture) captured = $('fixture').captureStream(30);
+    else captured = await navigator.mediaDevices.getDisplayMedia({ video: { frameRate: 30 }, audio: false });
+    if (!current()) { captured.getTracks().forEach(t => t.stop()); return; }
+    stream=captured;
+    const pc = peer = new RTCPeerConnection({ iceServers: [] });
+    const track = stream.getVideoTracks()[0]; track.contentHint = 'detail';
+    const sender = pc.addTrack(track, stream);
+    const codecs = RTCRtpSender.getCapabilities('video')?.codecs || [];
+    const h264 = codecs.filter(c => c.mimeType.toLowerCase() === 'video/h264');
+    const transceiver = pc.getTransceivers()[0];
+    if (h264.length) transceiver.setCodecPreferences([...h264, ...codecs.filter(c => !h264.includes(c))]);
+    const dc = channel = pc.createDataChannel('input', { ordered: true });let receivedVideoFrames;
+    await window.host.inputSession(id,String(token));
+    if(!current())return;
+    dc.onmessage = message => {
+      if (typeof message.data !== 'string' || message.data.length > 40000 || !current()) return;
+      let value; try { value = JSON.parse(message.data); } catch { return; }
+      if (value.type === 'ping') { if(Number.isSafeInteger(value.videoFrames)&&value.videoFrames>=0)receivedVideoFrames=value.videoFrames;if (dc.readyState === 'open') dc.send(JSON.stringify({ type: 'pong', at: value.at })); return; }
+      if (value.type === 'stats') { if (state.fixture && dc.readyState === 'open') dc.send(JSON.stringify({ type: 'fixture-state', ...(typeof value.requestId==='string'&&value.requestId.length<=80?{requestId:value.requestId}:{}), clicks: fixtureClicks, text: fixtureText, keys: fixtureKeys })); return; }
+      if(typeof value.id!=='string')return;
+      // Main owns validation, deduplication and cancellation of queued events.
+      window.host.input(id, {...value,epoch:String(token)}).then(result=>{
+        if(token!==generation||activeId!==id)return;
+        if(result.type==='input-ok'){inputs++;report('streaming');}
+        else{$('error').textContent=result.error;report('input-error',result.error);}
+        if(dc.readyState==='open')dc.send(JSON.stringify(result));
+      }).catch(error=>{if(token===generation&&dc.readyState==='open')dc.send(JSON.stringify({type:'input-error',id:value.id,error:error.message}));});
+    };
+    dc.onopen = () => {
+      if(!current())return; $('status').textContent = 'Видео и управление подключены'; report('streaming');
+      // Some owned-tab captures produce no initial frame when the window is
+      // unchanged or occluded. A connected data channel alone is not video.
+      if(state.embedded)firstFrameTimer=setTimeout(async()=>{
+        let fallback;
+        try{
+          if(!current())return;
+          const stats=await pc.getStats();let sent=0;
+          stats.forEach(s=>{if(s.type==='outbound-rtp'&&(s.kind==='video'||s.mediaType==='video'))sent+=s.framesEncoded||s.framesSent||0;});
+          if((sent&&receivedVideoFrames!==0)||!current())return;
+          const canvas=$('fixture');canvas.width=state.width;canvas.height=state.height;
+          fallback=canvas.captureStream(10);
+          await window.host.captureFallback('NoInitialVideo');
+          if(!current()){fallback.getTracks().forEach(t=>t.stop());return;}
+          const replacement=fallback.getVideoTracks()[0];replacement.contentHint='detail';
+          await sender.replaceTrack(replacement);
+          if(!current()){fallback.getTracks().forEach(t=>t.stop());return;}
+          const previous=stream;stream=fallback;
+          previous.getTracks().forEach(t=>{t.onended=null;t.stop();});
+          replacement.onended=()=>{if(current()){window.host.signal(id,{type:'disconnect'});closePeer();report('capture-ended');}};
+        }catch(error){fallback?.getTracks().forEach(t=>t.stop());if(current()){closePeer();report('capture-error',error.message);}}
+      },5000);
+    };
+    dc.onclose = () => { if(token===generation&&activeId===id){closePeer();report('disconnected');} };
+    pc.onconnectionstatechange = () => { if (['failed', 'disconnected'].includes(pc.connectionState)&&token===generation&&activeId===id) { const phase=pc.connectionState; $('status').textContent = 'Соединение прервано — переподключение с планшета'; closePeer();report(phase); } };
+    track.onended = () => { if (current()) { window.host.signal(id, { type: 'disconnect' }); closePeer(); report('capture-ended'); } };
+    await pc.setLocalDescription(await pc.createOffer());
+    if(!current())return;
+    await iceReady(pc);
+    if(!current())return;
+    await window.host.signal(id, { type: 'offer', sdp: pc.localDescription.sdp });
+    if(!current())return;
+    const params = sender.getParameters();
+    if (params.encodings?.length) { params.encodings[0].maxBitrate = 18000000; params.degradationPreference='maintain-resolution'; await sender.setParameters(params); }
+    if(current())report('offered');
+  } catch (error) { if(!current()){captured?.getTracks().forEach(t=>t.stop());return;} $('error').textContent = error.message; report('capture-error', error.message); closePeer(); }
+}
+$('refresh').onclick = async () => {
+  try {
+    $('error').textContent = ''; const sources = await window.host.sources(); $('source').replaceChildren();
+    for (const s of sources) { const option = document.createElement('option'); option.value = s.id; option.textContent = s.name; $('source').append(option); }
+    if (!sources.length) throw Error('Окно CanvasTTY не найдено. Проверьте разрешение на запись экрана.');
+    await window.host.select(sources[0].id); await refreshState();
+  } catch (error) { $('error').textContent = error.message; }
+};
+$('source').onchange = async () => { await window.host.select($('source').value); await refreshState(); };
+$('rotate').onclick = async () => { closePeer(); await window.host.rotate(); await refreshState(); report('waiting'); };
+$('screen-settings').onclick=()=>window.host.settings('screen');
+$('input-settings').onclick=()=>window.host.settings('input');
+window.host.permissions().then(p=>{if(p.platform==='darwin'&&!p.embedded){$('mac-permissions').hidden=false;$('permission-status').textContent=`Экран: ${p.screen==='granted'?'доступ есть':'нужен доступ'}. Управление: ${p.inputAccess?'доступ есть':'нужен доступ'}.`;}}).catch(()=>{});
+window.host.onEvent(async event => {
+  if(event.type==='show-glasses'){$('glasses-tab').click();return;}
+  if(event.type==='health'){if(channel?.readyState==='open')channel.send(JSON.stringify({type:'source-state',...event.value}));return;}
+  if(event.type==='frame'){
+    if(event.pixels){try{if(state?.embedded&&activeId){const c=$('fixture');if(c.width!==event.width||c.height!==event.height){c.width=event.width;c.height=event.height;}context.putImageData(new ImageData(window.CanvasLinkFrames.rgba(event.pixels,c.width,c.height),c.width,c.height),0,0);}}finally{window.host.frameConsumed(event.sequence);}return;}
+    return;
+  }
+  if (event.type === 'fixture-input') {
+    const e = event.input;
+    if (e.type === 'text') fixtureText += e.text;
+    if (e.type === 'key') { fixtureKeys.push(e.key); if (e.key === 'Backspace') fixtureText = [...fixtureText].slice(0, -1).join(''); }
+    if (e.type === 'pointer') { fixturePointer = e; if (e.action === 'down') fixtureClicks++; }
+    return;
+  }
+  // Revocation must stop media and input before a fallible asynchronous UI read.
+  if (event.type === 'revoke') {
+    if (activeId === event.id) { closePeer(); report('waiting'); }
+    try { await refreshState(); } catch (error) { $('error').textContent = error.message; }
+    return;
+  }
+  await refreshState();
+  if (event.type === 'paired' || event.type === 'source') {
+    if (state.connected[0] && state.source) await start(state.connected[0].id);
+  }
+  if (event.type === 'signal') {
+    if (event.message.type === 'answer' && peer && activeId === event.id) await peer.setRemoteDescription(event.message);
+    if (event.message.type === 'ping') await start(event.id);
+    if (event.message.type === 'disconnect' && activeId === event.id) closePeer();
+  }
+});
+setInterval(() => { if (state) $('expiry').textContent = state.pin ? `Действует ещё ${Math.max(0, Math.ceil((state.expires - Date.now()) / 1000))} с` : 'Код использован · связь зашифрована'; }, 1000);
+const context = $('fixture').getContext('2d');
+setInterval(() => {
+  if (!state?.fixture) return;
+  const c = context; c.fillStyle = '#101a14'; c.fillRect(0, 0, 1280, 800);
+  c.fillStyle = '#d6ef88'; c.font = 'bold 42px monospace'; c.fillText('CanvasLink / live acceptance', 50, 80);
+  c.fillStyle = '#a8b6ac'; c.font = '24px monospace'; c.fillText('Android ↔ Mac · WebRTC · LAN', 50, 128);
+  c.fillStyle = '#eaf1e5'; c.font = '28px monospace';
+  c.fillText(`Clicks: ${fixtureClicks}    Keys: ${fixtureKeys.join(' ').slice(-60)}`, 50, 230);
+  c.fillText('Text:', 50, 310);
+  fixtureText.match(/.{1,65}/gu)?.slice(-6).forEach((l, i) => c.fillText(l, 50, 360 + i * 36));
+  c.fillStyle = '#d6ef88'; c.beginPath(); c.arc(60 + (Date.now() % 5000) / 5, 700, 14, 0, Math.PI * 2); c.fill();
+  c.strokeStyle = '#ed9272'; c.strokeRect(fixturePointer.x * 1280 - 12, fixturePointer.y * 800 - 12, 24, 24);
+  c.fillStyle = '#798d80'; c.font = '18px monospace'; c.fillText(new Date().toISOString(), 50, 770);
+}, 33);
+refreshState().then(async () => { if (state.fixture||state.embedded) await $('refresh').onclick(); report('waiting'); });
+
+async function glasses(command){
+ try{const s=await window.host.glasses(command);$('glasses-code').textContent=s.pairing?.code||'';$('glasses-status').textContent=s.pairing?'Код для очков действует 2 минуты. Подтверждение устройства — в настройках Even G2.':'Используются существующие настройки и разрешения Even G2.';}
+ catch{$('glasses-status').textContent='Сначала включите Even G2 и выберите доступные сессии в настройках CanvasTTY.';}
+}
+$('glasses-tab').onclick=()=>{$('phone-panel').hidden=true;$('glasses-panel').hidden=false;glasses('state');};
+$('phone-tab').onclick=()=>{$('phone-panel').hidden=false;$('glasses-panel').hidden=true;};
+$('glasses-begin').onclick=()=>glasses('begin-pairing');$('glasses-cancel').onclick=()=>glasses('cancel-pairing');
diff --git a/integrations/canvaslink/host/security.cjs b/integrations/canvaslink/host/security.cjs
new file mode 100644
index 000000000..7ca4f562c
--- /dev/null
+++ b/integrations/canvaslink/host/security.cjs
@@ -0,0 +1,98 @@
+const crypto = require('node:crypto');
+const srp = require('secure-remote-password/server');
+const client = require('secure-remote-password/client');
+
+const USER = 'CanvasLink/v1';
+const hex = n => crypto.randomBytes(n).toString('hex');
+function privateAddress(ip) {
+  ip = String(ip || '').replace(/^::ffff:/, '');
+  if (ip === '::1') return true;
+  if (!/^\d+\.\d+\.\d+\.\d+$/.test(ip)) return false;
+  const a = ip.split('.').map(Number);
+  return a.every(v => v >= 0 && v <= 255) &&
+    (a[0] === 127 || a[0] === 10 || (a[0] === 192 && a[1] === 168) ||
+      (a[0] === 172 && a[1] >= 16 && a[1] <= 31) || (a[0] === 169 && a[1] === 254));
+}
+function seal(key, id, seq, direction, value) {
+  const iv = crypto.randomBytes(12);
+  const cipher = crypto.createCipheriv('aes-256-gcm', key, iv);
+  cipher.setAAD(Buffer.from(`CanvasLink/1/${id}/${seq}/${direction}`));
+  const data = Buffer.concat([cipher.update(JSON.stringify(value)), cipher.final(), cipher.getAuthTag()]);
+  return { id, seq, iv: iv.toString('hex'), data: data.toString('base64') };
+}
+function open(key, id, packet, direction) {
+  if (!packet || packet.id !== id || !Number.isSafeInteger(packet.seq) || packet.seq < 1 ||
+      !/^[0-9a-f]{24}$/.test(packet.iv) || typeof packet.data !== 'string' || packet.data.length > 131072 ||
+      !/^[A-Za-z0-9+/]+={0,2}$/.test(packet.data)) throw Error('invalid-packet');
+  const data = Buffer.from(packet.data, 'base64');
+  if (data.length < 17) throw Error('invalid-packet');
+  const cipher = crypto.createDecipheriv('aes-256-gcm', key, Buffer.from(packet.iv, 'hex'));
+  cipher.setAAD(Buffer.from(`CanvasLink/1/${id}/${packet.seq}/${direction}`));
+  cipher.setAuthTag(data.subarray(-16));
+  return JSON.parse(Buffer.concat([cipher.update(data.subarray(0, -16)), cipher.final()]).toString());
+}
+class Pairing {
+  constructor({ now = Date.now, onPair = () => {}, onRevoke = () => {} } = {}) {
+    this.now = now; this.onPair = onPair; this.onRevoke = onRevoke;
+    this.sessions = new Map(); this.rotate();
+  }
+  rotate() {
+    const revoked = [...this.sessions.keys()];
+    this.sessions.clear();
+    for (const id of revoked) this.onRevoke(id);
+    this.pending = new Map(); this.attempts = 0; this.starts = 0;
+    this.pin = String(crypto.randomInt(0, 1000000)).padStart(6, '0');
+    this.expires = this.now() + 120000;
+    this.salt = client.generateSalt();
+    this.verifier = client.deriveVerifier(client.derivePrivateKey(this.salt, USER, this.pin));
+  }
+  expire() {
+    const now = this.now();
+    for (const [id, session] of this.sessions) {
+      if (session.expires > now) continue;
+      this.sessions.delete(id); this.onRevoke(id);
+    }
+    for (const [id, pending] of this.pending) if (pending.until <= now) this.pending.delete(id);
+  }
+  start(body, address) {
+    if (this.now() >= this.expires || this.attempts >= 5 || this.starts >= 30) throw Error('pairing-closed');
+    if (!body || !/^[0-9a-f]{512}$/.test(body.A) || typeof body.name !== 'string' || body.name.length > 80)
+      throw Error('invalid-pairing');
+    if (BigInt('0x' + body.A) === 0n) throw Error('invalid-pairing');
+    this.starts++;
+    const id = hex(16), ephemeral = srp.generateEphemeral(this.verifier);
+    this.pending.set(id, { ...ephemeral, A: body.A, name: body.name.replace(/[\x00-\x1f]/g, ''), address, until: this.now() + 30000 });
+    return { id, salt: this.salt, B: ephemeral.public, user: USER };
+  }
+  finish(body, address) {
+    const p = this.pending.get(body?.id);
+    if (p) this.pending.delete(body.id);
+    if (!p || p.address !== address || this.now() >= p.until || this.now() >= this.expires || this.attempts >= 5)
+      throw Error('pairing-closed');
+    this.attempts++;
+    if (!/^[0-9a-f]{64}$/.test(body.proof)) throw Error('invalid-proof');
+    const result = srp.deriveSession(p.secret, p.A, this.salt, USER, this.verifier, body.proof);
+    const key = crypto.createHash('sha256').update(Buffer.from(result.key, 'hex')).update('CanvasLink/channel/1').digest();
+    const id = hex(16);
+    this.expires = 0; this.pending.clear(); this.pin = '';
+    const session = { id, key, name: p.name, address, incoming: 0, outgoing: 0, expires: this.now() + 12 * 3600000, queue: [] };
+    this.sessions.set(id, session); this.onPair(session);
+    return { id, proof: result.proof };
+  }
+  receive(packet, address, handle) {
+    this.expire();
+    const session = this.sessions.get(packet?.id);
+    if (!session || session.expires <= this.now() || session.address !== address || packet.seq <= session.incoming)
+      throw Error('unauthorized');
+    const value = open(session.key, session.id, packet, 'request');
+    session.incoming = packet.seq; // Authenticated requests are consumed once, including rejected operations.
+    const result = handle(session, value);
+    return seal(session.key, session.id, packet.seq, 'response', result);
+  }
+  queue(id, message) {
+    this.expire();
+    const session = this.sessions.get(id);
+    if (session && session.queue.length < 16) session.queue.push(message);
+  }
+}
+module.exports = { USER, hex, privateAddress, seal, open, Pairing };
diff --git a/integrations/canvaslink/host/settings-host.cjs b/integrations/canvaslink/host/settings-host.cjs
new file mode 100644
index 000000000..2a574855f
--- /dev/null
+++ b/integrations/canvaslink/host/settings-host.cjs
@@ -0,0 +1,11 @@
+// The desktop settings API is available only to the owning CanvasTTY main frame.
+function installSettingsHost({ipcMain,getWindow,snapshot,command}){
+ const trusted=event=>{const target=getWindow();if(!target||target.isDestroyed()||event.sender!==target.webContents||event.senderFrame!==target.webContents.mainFrame)throw Error('untrusted-settings-renderer');};
+ let pending=Promise.resolve();
+ ipcMain.handle('canvaslink-settings:state',event=>{trusted(event);return snapshot();});
+ ipcMain.handle('canvaslink-settings:command',(event,action)=>{
+  trusted(event);if(!['enable','disable','new-code','revoke'].includes(action))throw Error('invalid-settings-command');
+  const work=pending.then(()=>{trusted(event);return command(action);});pending=work.catch(()=>{});return work;
+ });
+}
+module.exports={installSettingsHost};
diff --git a/integrations/canvaslink/host/settings.css b/integrations/canvaslink/host/settings.css
new file mode 100644
index 000000000..59d6dd33c
--- /dev/null
+++ b/integrations/canvaslink/host/settings.css
@@ -0,0 +1,9 @@
+.canvaslink-settings{max-width:54rem;color:var(--text);line-height:1.5}
+.canvaslink-settings__intro{padding:.3rem 0 1.6rem}.canvaslink-settings__eyebrow{font:600 .7rem var(--font-mono,monospace);letter-spacing:.1em;color:var(--primary)}
+.canvaslink-settings h3{font-size:1.05em;margin:0 0 .4rem}.canvaslink-settings__intro h3{font-size:1.55em;letter-spacing:-.025em}.canvaslink-settings p{margin:.4rem 0;color:var(--text-muted-on-dark)}
+.canvaslink-settings__card{padding:1.4rem;margin-bottom:1rem;border:1px solid color-mix(in srgb,var(--text) 13%,transparent);border-radius:1rem;background:color-mix(in srgb,var(--surface-soft) 65%,var(--surface))}
+.canvaslink-settings__row{display:flex;gap:1.2rem;align-items:center;justify-content:space-between}.canvaslink-settings__status{font-size:.85em}.canvaslink-settings__connection{margin-top:1.2rem;border-top:1px solid color-mix(in srgb,var(--text) 10%,transparent);padding-top:.8rem}
+.canvaslink-settings ol{padding-left:1.3rem;font-size:.9em;color:var(--text-muted-on-dark)}.canvaslink-settings li+li{margin-top:.45rem}.canvaslink-settings__code-block{display:flex;flex-direction:column;align-items:flex-start;gap:.35rem;margin:1.2rem 0}.canvaslink-settings__code-block>span,.canvaslink-settings small{font-size:.8em;color:var(--text-muted-on-dark)}
+.canvaslink-settings__code{font:600 clamp(1.8rem,4vw,2.8rem)/1.3 var(--font-mono,monospace);letter-spacing:.14em;color:var(--text);font-variant-numeric:tabular-nums}.canvaslink-settings__button{min-height:48px;padding:.65rem 1rem;border:1px solid color-mix(in srgb,var(--text) 25%,transparent);border-radius:.65rem;color:var(--text);background:transparent;font:inherit;font-size:.85em;cursor:pointer}.canvaslink-settings__button:hover{background:color-mix(in srgb,var(--text) 8%,transparent)}.canvaslink-settings__button--primary{border-color:var(--primary);background:var(--primary);color:var(--text-dark)}.canvaslink-settings__button--primary:hover{background:var(--primary-hover)}.canvaslink-settings__button:focus-visible{outline:2px solid var(--primary);outline-offset:3px}.canvaslink-settings__button:disabled{opacity:.55;cursor:wait}
+.canvaslink-settings__card--quiet p{font-size:.85em}.canvaslink-settings__note{font-size:.9em}.canvaslink-settings__devices h4{margin:.8rem 0 .4rem}.canvaslink-settings__error{color:var(--danger)!important}
+@media(max-width:760px){.canvaslink-settings__row{align-items:flex-start;flex-direction:column}.canvaslink-settings__card{padding:1rem}}
diff --git a/integrations/canvaslink/host/snapshot.cjs b/integrations/canvaslink/host/snapshot.cjs
new file mode 100644
index 000000000..3183c06b8
--- /dev/null
+++ b/integrations/canvaslink/host/snapshot.cjs
@@ -0,0 +1,20 @@
+// Transfer bounded BGRA pixels inside Electron. Only WebRTC performs lossy
+// encoding; do not spend CPU encoding/decoding JPEG or PNG on the same Mac.
+function createSnapshot(image,nativeImage,{maxWidth=2560,maxHeight=1600}={}){
+ if(image.isEmpty())return null;
+ const scaleFactor=Math.max(1,...image.getScaleFactors().filter(s=>Number.isFinite(s)&&s>0));
+ let pixels=image.toBitmap({scaleFactor}),size=image.getSize(scaleFactor);
+ if(pixels.length!==size.width*size.height*4){
+  size={width:Math.round(size.width*scaleFactor),height:Math.round(size.height*scaleFactor)};
+  if(pixels.length!==size.width*size.height*4)throw Error('invalid-snapshot-size');
+ }
+ const factor=Math.min(1,maxWidth/size.width,maxHeight/size.height);
+ if(factor<1){
+  const normalized=nativeImage.createFromBitmap(pixels,{...size,scaleFactor:1});
+  size={width:Math.max(1,Math.floor(size.width*factor)),height:Math.max(1,Math.floor(size.height*factor))};
+  pixels=normalized.resize({...size,quality:'best'}).toBitmap({scaleFactor:1});
+  if(pixels.length!==size.width*size.height*4)throw Error('invalid-resized-snapshot');
+ }
+ return {pixels,...size,scaleFactor,format:'bgra'};
+}
+module.exports={createSnapshot};
diff --git a/integrations/canvaslink/host/style.css b/integrations/canvaslink/host/style.css
new file mode 100644
index 000000000..ad166cf86
--- /dev/null
+++ b/integrations/canvaslink/host/style.css
@@ -0,0 +1 @@
+:root{color-scheme:dark;--bg:#121814;--panel:#1d2720;--line:#37463a;--ink:#eaf1e5;--muted:#a0afa2;--accent:#d6ef88}*{box-sizing:border-box}body{margin:0;background:var(--bg);color:var(--ink);font:15px -apple-system,BlinkMacSystemFont,sans-serif}main{padding:32px;max-width:720px;margin:auto}header{display:flex;gap:14px;align-items:center;margin-bottom:32px}.mark{width:52px;height:52px;background:var(--accent);color:var(--bg);display:grid;place-items:center;font:700 30px Georgia;position:relative}.mark span{font:18px monospace;position:absolute;right:3px;top:2px}h1{font-size:25px;font-weight:550;letter-spacing:-1px;margin:0}header p{font-size:12px;color:var(--muted);margin:5px 0}.tag{margin-left:auto;font:10px monospace;color:var(--muted)}section{border-top:1px solid var(--line);padding:20px 0}.eyebrow{font:10px monospace;letter-spacing:1.6px;color:var(--muted);margin-bottom:16px}.pair{background:var(--panel);padding:22px;border:1px solid var(--line)}#pin{font:56px ui-monospace,Menlo,monospace;letter-spacing:8px;color:var(--accent);margin:16px 0}.pair-foot{display:flex;align-items:center;justify-content:space-between;font-size:12px;color:var(--muted)}button,select{font:inherit;color:var(--ink);background:transparent;border:1px solid var(--line);border-radius:4px;min-height:42px;padding:8px 12px}button{cursor:pointer}button:hover{border-color:var(--accent);color:var(--accent)}button:focus-visible,select:focus-visible{outline:2px solid var(--accent);outline-offset:3px}.row{display:flex;gap:10px}select{min-width:0;flex:1}.hint{color:var(--muted);font-size:12px;line-height:1.6;margin-bottom:0}.mono{font:14px ui-monospace,Menlo,monospace;line-height:1.7}#status{padding:14px;background:var(--panel);border-left:3px solid var(--accent);font-size:13px}#error{color:#ffb4a2;font-size:12px;line-height:1.6;white-space:pre-wrap;margin-top:10px}footer{display:flex;justify-content:space-between;margin-top:24px;font:10px monospace;color:var(--muted)}
diff --git a/integrations/canvaslink/package.json b/integrations/canvaslink/package.json
new file mode 100644
index 000000000..ff865c64c
--- /dev/null
+++ b/integrations/canvaslink/package.json
@@ -0,0 +1,19 @@
+{
+  "name": "@canvastty/canvaslink",
+  "version": "0.3.0-alpha.1",
+  "private": true,
+  "type": "commonjs",
+  "license": "MIT",
+  "scripts": {
+    "test": "node --test tests/*.test.cjs",
+    "build:android": "node scripts/build-android.cjs"
+  },
+  "dependencies": {
+    "bonjour-service": "1.3.0",
+    "secure-remote-password": "0.3.1"
+  },
+  "devDependencies": {
+    "playwright": "1.64.0",
+    "sharp": "0.35.5"
+  }
+}
diff --git a/integrations/canvaslink/scripts/build-android.cjs b/integrations/canvaslink/scripts/build-android.cjs
new file mode 100644
index 000000000..624dc4ef0
--- /dev/null
+++ b/integrations/canvaslink/scripts/build-android.cjs
@@ -0,0 +1,40 @@
+// SDK-only debug build. No Gradle downloads, release keys or device installation.
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+const root = path.resolve(__dirname, '..');
+const sdk = process.env.ANDROID_SDK_ROOT || process.env.ANDROID_HOME;
+if (!sdk) throw Error('Set ANDROID_SDK_ROOT or ANDROID_HOME to an Android SDK with platform 35 and build-tools 35.0.0.');
+const jdk = process.env.JAVA_HOME;
+const javaTool = name => jdk ? path.join(jdk, 'bin', name + (process.platform === 'win32' ? '.exe' : '')) : name;
+const tools = path.join(sdk, 'build-tools', '35.0.0');
+const androidTool = name => path.join(tools, name + (process.platform === 'win32' ? (['d8', 'apksigner'].includes(name) ? '.bat' : '.exe') : ''));
+const platform = path.join(sdk, 'platforms', 'android-35', 'android.jar');
+if (!fs.existsSync(platform)) throw Error('Missing Android SDK platform 35. See docs/canvaslink.md.');
+const build = path.join(root, 'build', 'android'), dist = path.join(root, 'dist'), runtime = path.join(root, '.runtime');
+fs.rmSync(build, { recursive: true, force: true });
+for (const dir of [build, dist, runtime, path.join(build, 'classes'), path.join(build, 'dex')]) fs.mkdirSync(dir, { recursive: true, mode: 0o700 });
+function run(binary, args) {
+  const result = spawnSync(binary, args, { stdio: 'inherit', shell: process.platform === 'win32' && binary.endsWith('.bat') });
+  if (result.error) throw result.error;
+  if (result.status !== 0) throw Error(`${path.basename(binary)} exited ${result.status}`);
+}
+// Device acceptance instrumentation remains source-only and is never shipped.
+const files = ['MainActivity', 'TerminalWebView', 'Srp', 'SessionVault'].map(name => path.join(root, 'android', 'src', 'io', 'nexcore', 'canvaslink', name + '.java'));
+run(javaTool('javac'), ['--release', '8', '-cp', platform, '-d', path.join(build, 'classes'), ...files]);
+run(javaTool('jar'), ['cf', path.join(build, 'classes.jar'), '-C', path.join(build, 'classes'), '.']);
+run(androidTool('d8'), ['--release', '--min-api', '26', '--lib', platform, '--output', path.join(build, 'dex'), path.join(build, 'classes.jar')]);
+const compiled = path.join(build, 'resources.zip');
+run(androidTool('aapt2'), ['compile', '--dir', path.join(root, 'android', 'res'), '-o', compiled]);
+run(androidTool('aapt2'), ['link', '-o', path.join(build, 'base.apk'), '--manifest', path.join(root, 'android', 'AndroidManifest.xml'), '-I', platform, '-A', path.join(root, 'android', 'assets'), compiled]);
+run(javaTool('jar'), ['uf', path.join(build, 'base.apk'), '-C', path.join(build, 'dex'), 'classes.dex']);
+run(androidTool('zipalign'), ['-f', '-p', '4', path.join(build, 'base.apk'), path.join(build, 'aligned.apk')]);
+const keystore = path.join(runtime, 'debug.keystore');
+if (!fs.existsSync(keystore)) {
+  run(javaTool('keytool'), ['-genkeypair', '-keystore', keystore, '-alias', 'canvaslink-debug', '-storepass', 'android', '-keypass', 'android', '-keyalg', 'RSA', '-keysize', '2048', '-validity', '3650', '-dname', 'CN=CanvasLink Local Development']);
+  fs.chmodSync(keystore, 0o600);
+}
+const apk = path.join(dist, 'CanvasLink-debug.apk');
+run(androidTool('apksigner'), ['sign', '--ks', keystore, '--ks-key-alias', 'canvaslink-debug', '--ks-pass', 'pass:android', '--key-pass', 'pass:android', '--out', apk, path.join(build, 'aligned.apk')]);
+run(androidTool('apksigner'), ['verify', '--verbose', apk]);
+console.log(`Built ${path.relative(root, apk)} (local development signature; not a release build)`);
diff --git a/integrations/canvaslink/scripts/ui-test-harness.cjs b/integrations/canvaslink/scripts/ui-test-harness.cjs
new file mode 100644
index 000000000..cd8c8387b
--- /dev/null
+++ b/integrations/canvaslink/scripts/ui-test-harness.cjs
@@ -0,0 +1,32 @@
+'use strict';
+const fs=require('node:fs');const path=require('node:path');
+const {chromium}=require(process.env.CANVASLINK_PLAYWRIGHT || 'playwright');
+const root=path.resolve(__dirname,'..');
+function fixtureTransport(){
+ const state={version:2,connection:'idle',discovery:'ready',computers:[{id:'test-computer',name:'CanvasLink Тестовый компьютер',host:'127.0.0.1:3499'}],computer:'',error:'',pending:0,delivery:null,draft:'',stats:{width:1280,height:800,framesDecoded:2,framesPerSecond:0,rtt:0},source:{capture:'active',windowFocused:true,target:'terminal'}};
+ const listeners=new Set(),calls=[];let behavior={saveDraft:true,deferText:false,focus:null};let pendingText;let nativeToken='';window.Native={showKeyboard(token){nativeToken=token;calls.push({type:'show-keyboard'});},terminalKey(key,modifiers){CanvasLinkInput.receive({token:nativeToken,type:'key',key,modifiers:JSON.parse(modifiers)});},paste(){CanvasLinkInput.receive({token:nativeToken,type:'paste',text:behavior.clipboard||''});}};
+ const snapshot=()=>JSON.parse(JSON.stringify(state));const emit=patch=>{Object.assign(state,patch);listeners.forEach(fn=>fn(snapshot()));};
+ const ensure=()=>{if(state.connection!=='connected')throw Error('not-connected');};
+ window.__uiFixture={calls,emit,ime:value=>CanvasLinkInput.receive({...value,token:nativeToken}),configure:patch=>Object.assign(behavior,patch),resolveText(status='processed'){if(!pendingText)throw Error('No pending send');const id='fixture-text';emit({pending:0,delivery:{id,kind:'text',status}});pendingText.resolve({id,status});pendingText=null;},rejectText(message='delivery-uncertain'){emit({pending:0,delivery:{id:'fixture-text',kind:'text',status:'uncertain'}});pendingText?.reject(Error(message));pendingText=null;}};
+ const api=window.CanvasLinkClient={version:2,getState:snapshot,subscribe(fn){listeners.add(fn);fn(snapshot());return()=>listeners.delete(fn);},attachVideo(video){
+  const canvas=document.createElement('canvas');canvas.width=1280;canvas.height=800;const c=canvas.getContext('2d');
+  c.fillStyle='#161d18';c.fillRect(0,0,1280,800);c.fillStyle='#202a22';c.fillRect(0,0,190,800);c.fillStyle='#d6ef88';c.font='bold 23px sans-serif';c.fillText('CanvasTTY',28,54);c.fillStyle='#aab6a5';c.font='18px sans-serif';c.fillText('Тестовая сцена',28,117);c.fillText('Интерфейс',28,162);c.fillText('Жесты',28,206);
+  c.strokeStyle='#3e4b3f';c.lineWidth=2;c.strokeRect(235,105,990,570);c.fillStyle='#edf1e6';c.font='32px sans-serif';c.fillText('Рабочее пространство',273,165);c.fillStyle='#aab6a5';c.font='22px sans-serif';c.fillText('Собственная сцена для проверки интерфейса',273,220);c.font='18px sans-serif';c.fillText('Нет подключения к компьютеру. Нет реального терминала.',273,264);
+  c.fillStyle='#28352a';for(let i=0;i<3;i++)c.fillRect(273+i*300,320,270,210);c.fillStyle='#d6ef88';c.font='20px sans-serif';c.fillText('Касание',297,365);c.fillText('Масштаб',597,365);c.fillText('Ввод',897,365);c.fillStyle='#879682';c.font='15px sans-serif';c.fillText('UI FIXTURE · НЕ СНИМОК ПОДКЛЮЧЁННОГО КОМПЬЮТЕРА',273,720);
+  video.srcObject=canvas.captureStream(2);video.play().catch(()=>{});
+ },discover(){calls.push({type:'discover'});emit({discovery:'searching'});},connect(options){calls.push({type:'connect',computerId:options.computerId,manual:Boolean(options.host),codeLength:options.code?.length});if(!/^\d{6}$/.test(options.code||'')){emit({error:'invalid-code'});return false;}emit({connection:'pairing',error:''});return true;},setDraft(text){calls.push({type:'draft',text});state.draft=String(text).slice(0,8000);return behavior.saveDraft;},sendText(text){calls.push({type:'text',text});try{ensure();}catch(error){return Promise.reject(error);}emit({pending:1,delivery:{id:'fixture-text',kind:'text',status:'pending'}});if(behavior.deferText)return new Promise((resolve,reject)=>{pendingText={resolve,reject};});emit({pending:0,delivery:{id:'fixture-text',kind:'text',status:'processed'}});return Promise.resolve({id:'fixture-text',status:'processed'});},sendKey(key,modifiers=[]){calls.push({type:'key',key,modifiers});try{ensure();return Promise.resolve({id:'fixture-key',status:'processed'});}catch(error){return Promise.reject(error);}},sendInput(input){calls.push({type:'input',input});if(input.type==='text')return api.sendText(input.text);try{ensure();return Promise.resolve({id:'fixture-input',status:'processed',...(input.action==='up'&&behavior.focus?{focus:behavior.focus}:{})});}catch(error){return Promise.reject(error);}},hideKeyboard(){calls.push({type:'hide-keyboard'});},resume(){calls.push({type:'resume'});},disconnect(){calls.push({type:'disconnect'});emit({connection:'idle'});}};
+}
+async function openUI({width=1024,height=768,touch=false,connected=false}={}){
+ const browser=await chromium.launch({headless:true});const context=await browser.newContext({viewport:{width,height},isMobile:touch,hasTouch:touch});
+ const errors=[];const page=await context.newPage();page.setDefaultTimeout(7000);page.on('pageerror',e=>errors.push(e.message));page.on('console',event=>{if(event.type()==='error')errors.push(event.text());});
+ await page.route('https://appassets.androidplatform.net/client/**',route=>{
+  const file=new URL(route.request().url()).pathname.split('/').pop();
+  if(file==='transport.js')return route.fulfill({contentType:'application/javascript',body:'('+fixtureTransport.toString()+')();'});
+  if(!['index.html','style.css','client.js','gestures.js','delivery.js','direct-input.js','onest.ttf'].includes(file))return route.abort();
+  return route.fulfill({contentType:file.endsWith('.js')?'application/javascript':file.endsWith('.css')?'text/css':file.endsWith('.ttf')?'font/ttf':'text/html',body:fs.readFileSync(path.join(root,'android/assets',file))});
+ });
+ await page.goto('https://appassets.androidplatform.net/client/index.html');
+ if(connected)await page.evaluate(()=>__uiFixture.emit({connection:'connected'}));
+ return {browser,context,page,errors};
+}
+module.exports={openUI,root};
diff --git a/integrations/canvaslink/tests/control-delivery.test.cjs b/integrations/canvaslink/tests/control-delivery.test.cjs
new file mode 100644
index 000000000..42a8e4dc9
--- /dev/null
+++ b/integrations/canvaslink/tests/control-delivery.test.cjs
@@ -0,0 +1,107 @@
+const {test}=require('node:test');
+const assert=require('node:assert/strict');
+const {InputQueue}=require('../host/input-queue.cjs');
+const {Delivery}=require('../android/assets/delivery.js');
+const input=(seq,extra={})=>({id:`input-${seq}`,seq,type:'key',key:'Enter',modifiers:[],...extra});
+const deferred=()=>{let resolve;return {promise:new Promise(r=>resolve=r),release:()=>resolve()};};
+
+test('an in-flight duplicate with a different payload cannot execute twice',async()=>{
+  const gate=deferred(),applied=[],replies=[];
+  const q=new InputQueue({active:()=>true,apply:async e=>{applied.push(e.text);await gate.promise;},reply:e=>replies.push(e)});
+  q.receive(input(1,{type:'text',text:'original'}));
+  q.receive(input(2,{id:'input-1',type:'text',text:'changed'}));
+  gate.release();await q.tail;
+  q.receive(input(3,{id:'input-1',type:'text',text:'third'}));
+  assert.deepEqual(applied,['original']);assert.equal(replies.length,2);
+  assert(replies.every(e=>e.type==='input-ok'&&e.id==='input-1'));
+});
+
+test('queue saturation rejects explicitly and accepts fresh input after draining',async()=>{
+  const gate=deferred(),applied=[],replies=[];
+  const q=new InputQueue({limit:2,active:()=>true,apply:async e=>{applied.push(e.id);await gate.promise;},reply:e=>replies.push(e)});
+  q.receive(input(1));q.receive(input(2));q.receive(input(3));
+  assert.deepEqual(replies,[{type:'input-error',id:'input-3',error:'input-busy'}]);
+  gate.release();await q.tail;q.receive(input(4));await q.tail;
+  assert.deepEqual(applied,['input-1','input-2','input-4']);assert.equal(q.pending,0);
+});
+
+test('invalid payload and unsafe sequence cannot consume a future valid sequence',async()=>{
+  const applied=[],replies=[];
+  const q=new InputQueue({active:()=>true,apply:async e=>applied.push(e.seq),reply:e=>replies.push(e)});
+  q.receive(input(9,{type:'text',text:''}));q.receive(input(Number.MAX_SAFE_INTEGER+1));
+  q.receive(input(1));q.receive(input(3));q.receive(input(2));await q.tail;
+  assert.deepEqual(applied,[1,3]);
+  assert.deepEqual(replies.filter(e=>e.type==='input-error').map(e=>e.error),['invalid-text','input-expired','input-expired']);
+});
+
+test('a failed operation does not poison the ordered queue or replay on duplicate',async()=>{
+  const applied=[],replies=[];
+  const q=new InputQueue({active:()=>true,apply:async e=>{applied.push(e.seq);if(e.seq===1)throw Error('text-target-required');},reply:e=>replies.push(e)});
+  q.receive(input(1));q.receive(input(2));await q.tail;q.receive(input(1));
+  assert.deepEqual(applied,[1,2]);assert.equal(replies.at(-1).error,'text-target-required');assert.equal(q.pending,0);
+});
+
+test('revocation drains queued work without sending stale ACKs into a new peer',async()=>{
+  let active=true;const gate=deferred(),applied=[],replies=[];
+  const q=new InputQueue({active:()=>active,apply:async e=>{applied.push(e.seq);await gate.promise;},reply:e=>replies.push(e)});
+  q.receive(input(1));q.receive(input(2));await Promise.resolve();await Promise.resolve();
+  active=false;gate.release();await q.tail;
+  assert.deepEqual(applied,[1]);assert.deepEqual(replies,[]);assert.equal(q.pending,0);
+});
+
+test('500 ordered operations and duplicate retries execute once beyond the ID cache',async()=>{
+  const applied=[],replies=[];
+  const q=new InputQueue({maxIds:8,active:()=>true,apply:async e=>applied.push(e.seq),reply:e=>replies.push(e)});
+  for(let n=1;n<=500;n++){q.receive(input(n));q.receive(input(n));await q.tail;}
+  for(let n=1;n<=500;n++)q.receive(input(n));await q.tail;
+  assert.deepEqual(applied,Array.from({length:500},(_,i)=>i+1));assert.equal(q.pending,0);assert(q.ids.size<=8);
+  assert.equal(replies.filter(e=>e.error==='input-expired').length,492);
+});
+
+test('send exception is not-sent, clears its timer and never retries',async()=>{
+  let sends=0,clears=0;
+  const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send(){sends++;throw Error('closed');}}),id:()=> 'send-failed',setTimer:()=>42,clearTimer:t=>{assert.equal(t,42);clears++;}});
+  await assert.rejects(d.send({type:'key',key:'Enter',modifiers:[]}),/not-sent/);
+  assert.equal(sends,1);assert.equal(clears,1);assert.equal(d.pending.size,0);assert.equal(d.sent,0);
+});
+
+test('64 pending operations enforce backpressure; one ACK frees one slot',async()=>{
+  let id=0;const messages=[];
+  const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send:v=>messages.push(JSON.parse(v))}),id:()=>`pending-${++id}`,setTimer:()=>0,clearTimer(){}});
+  const operations=Array.from({length:64},()=>d.send({type:'key',key:'Enter',modifiers:[]}).catch(e=>e.message));
+  await assert.rejects(d.send({type:'text',text:'must stay local'}),/input-busy/);
+  d.receive({type:'input-ok',id:'pending-1'});
+  const last=d.send({type:'key',key:'Escape',modifiers:[]}).catch(e=>e.message);
+  assert.equal(messages.length,65);assert.equal(messages.at(-1).seq,65);
+  d.close();await Promise.all([...operations,last]);assert.equal(d.pending.size,0);
+});
+
+test('late, duplicate and malformed ACKs cannot turn uncertainty into success',async()=>{
+  const changes=[];let expire;
+  const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send(){}}),id:()=> 'late',onChange:e=>changes.push(e),setTimer:fn=>{expire=fn;return 1;},clearTimer(){}});
+  const operation=d.send({type:'text',text:'draft'});expire();await assert.rejects(operation,/delivery-uncertain/);
+  for(const ack of [null,{}, {type:'input-ok',id:'late'},{type:'input-error',id:'late',error:'rejected'}])assert.equal(d.receive(ack),false);
+  assert.deepEqual(changes.map(e=>e.status),['pending','uncertain']);assert.equal(d.acked,0);
+});
+
+test('host rejection is explicit and does not retry text or Enter',async()=>{
+  const sent=[];let id=0;
+  const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send:v=>sent.push(JSON.parse(v))}),id:()=>`rejected-${++id}`,setTimer:()=>0,clearTimer(){}});
+  for(const payload of [{type:'text',text:'draft'},{type:'key',key:'Enter',modifiers:[]}]){
+    const operation=d.send(payload);d.receive({type:'input-error',id:`rejected-${id}`,error:'canvas-focus-required'});
+    await assert.rejects(operation,/canvas-focus-required/);
+  }
+  assert.equal(sent.length,2);assert.equal(d.pending.size,0);assert.equal(d.acked,0);
+});
+
+test('Focus metadata belongs to the acknowledged click and remains immutable on duplicate replay',async()=>{
+ const replies=[];let call=0;
+ const q=new InputQueue({active:()=>true,apply:async()=>{call++;return{focus:{editable:true,kind:'terminal',rect:{x:.1,y:.2,width:.5,height:.6}}};},reply:e=>replies.push(e)});
+ const click=input(1,{type:'pointer',action:'up',button:0,x:.5,y:.5});q.receive(click);await q.tail;q.receive(click);
+ assert.equal(call,1);assert.deepEqual(replies[0].focus,{editable:true,kind:'terminal',rect:{x:.1,y:.2,width:.5,height:.6}});assert.deepEqual(replies[1],replies[0]);
+});
+test('Delivery returns focus only from its own processed ACK, ignoring unrelated source-state',async()=>{
+ const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send(){}}),id:()=> 'tap-focus',setTimer:()=>0,clearTimer(){}});
+ const result=d.send({type:'pointer',action:'up',button:0,x:.5,y:.5});assert.equal(d.receive({type:'source-state',focus:{editable:true}}),false);
+ d.receive({type:'input-ok',id:'tap-focus',focus:{editable:false,kind:'canvas'}});assert.equal((await result).focus.editable,false);
+});
diff --git a/integrations/canvaslink/tests/delivery.test.cjs b/integrations/canvaslink/tests/delivery.test.cjs
new file mode 100644
index 000000000..8cc910304
--- /dev/null
+++ b/integrations/canvaslink/tests/delivery.test.cjs
@@ -0,0 +1,8 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const {Delivery}=require('../android/assets/delivery.js');
+const {InputQueue}=require('../host/input-queue.cjs');
+test('offline and backpressure reject explicitly, without sending text',async()=>{let channel;const d=new Delivery({channel:()=>channel});await assert.rejects(d.send({type:'text',text:'x'}),/not-connected/);channel={readyState:'open',bufferedAmount:70000,send(){throw Error('must not send');}};await assert.rejects(d.send({type:'text',text:'x'}),/input-busy/);assert.equal(d.pending.size,0);});
+test('only matching ACK completes text and close marks uncertain without replay',async()=>{const messages=[],changes=[];let seq=0;const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send:v=>messages.push(JSON.parse(v))}),onChange:e=>changes.push(e),id:()=>String(++seq)});const sent=d.send({type:'text',text:'Промпт'});assert.equal(d.receive({type:'input-ok',id:'foreign'}),false);assert.equal(d.pending.size,1);d.receive({type:'input-ok',id:'1'});assert.equal((await sent).status,'processed');const next=d.send({type:'key',key:'Enter',modifiers:[]});d.close();await assert.rejects(next,/delivery-uncertain/);assert.equal(messages.length,2);assert.equal(changes.at(-1).status,'uncertain');});
+test('ACK timeout retains uncertainty; no automatic retry',async()=>{let expire;const d=new Delivery({channel:()=>({readyState:'open',bufferedAmount:0,send(){}}),id:()=> 'x',setTimer:fn=>{expire=fn;return 1;},clearTimer(){}});const p=d.send({type:'text',text:'x'});expire();await assert.rejects(p,/delivery-uncertain/);assert.equal(d.sent,1);});
+test('ordered input executes once, rejects expired IDs after bounded cache',async()=>{const applied=[],replies=[];const q=new InputQueue({apply:async v=>applied.push(v.id),active:()=>true,reply:r=>replies.push(r),maxIds:1});const input=n=>({id:String(n),seq:n,type:'key',key:'Enter',modifiers:[]});q.receive(input(1));q.receive(input(1));await q.tail;q.receive(input(2));await q.tail;q.receive(input(3));await q.tail;q.receive(input(1));await q.tail;assert.deepEqual(applied,['1','2','3']);assert.equal(replies.at(-1).error,'input-expired');});
+test('revoking a peer cancels queued text before application',async()=>{let active=true,release;const applied=[];const gate=new Promise(r=>release=r);const q=new InputQueue({active:()=>active,apply:async v=>{applied.push(v.id);await gate;},reply(){}});q.receive({id:'a',seq:1,type:'text',text:'a'});q.receive({id:'b',seq:2,type:'text',text:'b'});await Promise.resolve();await Promise.resolve();active=false;release();await q.tail;assert.deepEqual(applied,['a']);});
diff --git a/integrations/canvaslink/tests/embedded-lifecycle.test.cjs b/integrations/canvaslink/tests/embedded-lifecycle.test.cjs
new file mode 100644
index 000000000..3dc8e3f98
--- /dev/null
+++ b/integrations/canvaslink/tests/embedded-lifecycle.test.cjs
@@ -0,0 +1,110 @@
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const vm = require('node:vm');
+const { createRequire } = require('node:module');
+const { EventEmitter } = require('node:events');
+const { Readable } = require('node:stream');
+const crypto = require('node:crypto');
+const srp = require('secure-remote-password/client');
+const { seal, open, USER } = require('../host/security.cjs');
+const file = path.join(__dirname, '../host/embedded.cjs');
+function fixture({ failLoad = false } = {}) {
+  const counters = { listeners: 0, discovery: 0, panels: 0, close: 0, destroy: 0 };
+  const handlers = new Map(), timers = new Set(), app = new EventEmitter();
+  app.getPath = () => '/unused-test-runtime';
+  const target = new EventEmitter(); target.isDestroyed = () => false;
+  target.webContents = { mainFrame: {}, executeJavaScript: async () => {}, endFrameSubscription() {} };
+  target.getContentSize = () => [1000, 700]; target.getTitle = () => 'Owned fixture';
+  let panel, captureHandler, pairing, serve;
+  const events = [];
+  class Panel extends EventEmitter {
+    constructor() { super(); counters.panels++; panel = this; this.webContents = new EventEmitter(); this.webContents.mainFrame = {}; this.webContents.setWindowOpenHandler = () => {}; this.webContents.send = (channel, value) => events.push(value); }
+    isDestroyed() { return !!this.destroyed; }
+    destroy() { this.destroyed = true; counters.destroy++; }
+    hide() {}
+    async loadFile() { if (failLoad) throw Error('fixture-load-failed'); }
+  }
+  const captureSession = { setPermissionCheckHandler(fn) { this.check = fn; }, setPermissionRequestHandler() {}, setDisplayMediaRequestHandler(fn) { captureHandler = fn; } };
+  const electron = { app, BrowserWindow: Panel, nativeImage: {}, session: { fromPartition: () => captureSession }, ipcMain: { handle: (key, fn) => handlers.set(key, fn), on: (key, fn) => handlers.set(key, fn) } };
+  const localRequire = createRequire(file);
+  const replacements = {
+    electron,
+    'node:fs': { mkdirSync() {} },
+    'node:http': { createServer(handler) { serve=handler;return { requestTimeout: 0, once() {}, listen(port, host, done) { counters.listeners++; done(); }, address: () => ({ port: 3499 }), close() { counters.close++; } }; } },
+    './discovery.cjs': { publish() { counters.discovery++; return { destroy() {} }; } },
+    './security.cjs': { ...localRequire('./security.cjs'), Pairing: class extends localRequire('./security.cjs').Pairing { constructor(options) { super(options); pairing = this; } } }
+  };
+  const context = { require: name => Object.hasOwn(replacements, name) ? replacements[name] : localRequire(name), module: { exports: {} }, __dirname: path.dirname(file), process, Buffer, setInterval(fn) { const token = { fn }; timers.add(token); return token; }, clearInterval(token) { timers.delete(token); } };
+  vm.runInNewContext(fs.readFileSync(file, 'utf8'), context);
+  context.module.exports.install({ getWindow: () => target });
+  const event = { sender: target.webContents, senderFrame: target.webContents.mainFrame };
+  const request=async ({route='/channel',method='POST',address='192.168.2.23',headers={},body={}}={})=>{
+    const req=Readable.from([Buffer.from(typeof body==='string'?body:JSON.stringify(body))]);
+    Object.assign(req,{method,url:route,socket:{remoteAddress:address},headers:{'content-type':'application/json',...headers}});
+    const result={};await serve(req,{headersSent:false,writeHead(status,headers){result.status=status;result.headers=headers;},end(body){result.body=JSON.parse(body);}});return result;
+  };
+  return { counters, handlers, event, target, timers, captureSession, events, request, get pairing() { return pairing; }, get panel() { return panel; }, capture: request => { let result; captureHandler(request, value => result = value); return result; }, state: () => handlers.get('canvaslink-settings:state')(event), command: action => handlers.get('canvaslink-settings:command')(event, action) };
+}
+test('Installing CanvasLink is inert until an owning settings command enables access', async () => {
+  const f = fixture();
+  assert.equal(f.state().enabled, false); assert.equal(f.state().pin, '');
+  assert.deepEqual(f.counters, { listeners: 0, discovery: 0, panels: 0, close: 0, destroy: 0 });
+  assert.equal(f.timers.size, 0);
+  await f.command('enable'); assert.equal(f.state().enabled, true);
+  assert.equal(f.counters.listeners, 1); assert.equal(f.counters.panels, 1);
+  await f.command('enable'); assert.equal(f.counters.listeners, 1);
+  await f.command('disable'); assert.equal(f.state().enabled, false); assert.equal(f.timers.size, 0); assert.equal(f.panel.destroyed, true);
+});
+test('Capture grants only the owned CanvasTTY main frame and stops after disable', async () => {
+  const f = fixture(); await f.command('enable');
+  assert.equal(f.capture({ frame: f.panel.webContents.mainFrame }).video, f.target.webContents.mainFrame);
+  assert.equal(f.capture({ frame: {} }).video, undefined);
+  assert.equal(f.captureSession.check({}, 'display-capture'), false);
+  assert.equal(f.captureSession.check(f.panel.webContents, 'display-capture'), true);
+  assert.equal(f.captureSession.check(f.panel.webContents, 'media'), false);
+  await f.command('disable'); assert.equal(f.capture({ frame: f.panel.webContents.mainFrame }).video, undefined);
+});
+test('A failed capture-worker load closes the listener and allows a clean retry', async () => {
+  const f = fixture({ failLoad: true });
+  await assert.rejects(f.command('enable'), /fixture-load-failed/);
+  assert.equal(f.state().enabled, false); assert.equal(f.counters.close, 1); assert.equal(f.timers.size, 0); assert.equal(f.panel.destroyed, true);
+  await assert.rejects(f.command('enable'), /fixture-load-failed/);
+  assert.equal(f.counters.listeners, 2); assert.equal(f.counters.close, 2);
+});
+test('The host revokes an expired video session even when the client sends nothing', async () => {
+  const f=fixture();await f.command('enable');
+  f.pairing.sessions.set('expired',{id:'expired',name:'Silent peer',expires:0,queue:[]});
+  for(const timer of f.timers)await timer.fn();
+  assert.equal(f.pairing.sessions.has('expired'),false);
+  assert.equal(f.events.filter(e=>e.type==='revoke'&&e.id==='expired').length,1);
+  for(const timer of f.timers)await timer.fn();
+  assert.equal(f.events.filter(e=>e.type==='revoke').length,1);
+  await f.command('disable');
+});
+test('The HTTP boundary rejects browser origins, public peers, unsupported routes and oversized bodies',async()=>{
+  const f=fixture();await f.command('enable');
+  for(const options of [{address:'8.8.8.8'},{headers:{origin:'https://attacker.invalid'}},{headers:{origin:'null'}},{method:'GET'},{route:'/exec'},{body:'{'},{body:' '.repeat(131073)}]){
+    const response=await f.request(options);assert.equal(response.status,403,JSON.stringify(options).slice(0,150));
+    assert.equal(response.headers['Cache-Control'],'no-store');
+  }
+  assert.equal((await f.request({headers:{'content-type':'text/plain'}})).status,415);
+  assert.equal(f.events.length,0);assert.equal(f.pairing.sessions.size,0);await f.command('disable');
+});
+test('Only mutually authenticated, fresh and address-bound HTTP signals reach the renderer',async()=>{
+  const f=fixture();await f.command('enable');
+  const a=srp.generateEphemeral(),challenge=(await f.request({route:'/pair/start',body:{A:a.public,name:'Synthetic security test'}})).body;
+  const session=srp.deriveSession(a.secret,challenge.B,challenge.salt,USER,srp.derivePrivateKey(challenge.salt,USER,f.pairing.pin));
+  const finish=await f.request({route:'/pair/finish',body:{id:challenge.id,proof:session.proof}});assert.equal(finish.status,200);srp.verifySession(a.public,session,finish.body.proof);
+  const id=finish.body.id,key=crypto.createHash('sha256').update(Buffer.from(session.key,'hex')).update('CanvasLink/channel/1').digest();
+  const signal=seq=>seal(key,id,seq,'request',{type:'signal',message:{type:'ping'}});
+  const first=signal(1);assert.equal((await f.request({body:first,address:'192.168.2.24'})).status,403);
+  const response=await f.request({body:first});assert.equal(response.status,200);assert.deepEqual(open(key,id,response.body,'response'),{ok:true});
+  assert.equal((await f.request({body:first})).status,403);
+  assert.equal((await f.request({body:{...signal(2),data:Buffer.alloc(32).toString('base64')}})).status,403);
+  assert.equal((await f.request({body:seal(key,id,2,'request',{type:'signal',message:{type:'exec',command:'must-not-run'}})})).status,403);
+  assert.equal(f.events.filter(e=>e.type==='signal').length,1);
+  await f.command('revoke');assert.equal((await f.request({body:signal(3)})).status,403);
+  assert.equal(f.events.filter(e=>e.type==='signal').length,1);await f.command('disable');
+});
diff --git a/integrations/canvaslink/tests/frontend.test.cjs b/integrations/canvaslink/tests/frontend.test.cjs
new file mode 100644
index 000000000..4a756f9c1
--- /dev/null
+++ b/integrations/canvaslink/tests/frontend.test.cjs
@@ -0,0 +1,55 @@
+const {test}=require('node:test');const assert=require('node:assert/strict');const {openUI}=require('../scripts/ui-test-harness.cjs');
+const focus={editable:true,kind:'terminal',rect:{x:.2,y:.2,width:.6,height:.6}};
+async function typing(t,options={}){const ui=await openUI({connected:true,touch:true,...options});t.after(async()=>{await ui.browser.close();assert.deepEqual(ui.errors,[]);});await ui.page.evaluate(focus=>__uiFixture.configure({focus}),options.focus||focus);await ui.page.locator('#viewport').click();await ui.page.waitForFunction(()=>__uiFixture.calls.some(c=>c.type==='show-keyboard'));return ui;}
+const commands=page=>page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='input'&&['key','text'].includes(c.input.type)).map(c=>c.input));
+test('Tap opens direct native input only after processed pointer-up confirms editable target',async t=>{const {page}=await typing(t);assert.equal(await page.locator('#compose,#text,#send').count(),0);assert.match(await page.locator('#target-status').textContent(),/Ввод.*Терминал/);assert.ok(await page.locator('.session-badge').evaluate(e=>Number(getComputedStyle(e).opacity)>.5));await page.evaluate(()=>__uiFixture.ime({type:'text',text:'Привет 🙂'}));assert.deepEqual(await commands(page),[{type:'text',text:'Привет 🙂'}]);});
+test('A canvas tap never opens a keyboard from stale polled source.target',async t=>{const ui=await openUI({connected:true});t.after(()=>ui.browser.close());await ui.page.locator('#viewport').click();assert.equal(await ui.page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='show-keyboard').length),0);});
+test('Composition is displayed locally; one commit is sent and Enter follows it directly',async t=>{const {page}=await typing(t);await page.evaluate(()=>{__uiFixture.ime({type:'composition',text:'日本'});});assert.equal(await page.locator('#preedit').textContent(),'日本');assert.deepEqual(await commands(page),[]);await page.evaluate(()=>{__uiFixture.ime({type:'text',text:'日本語'});__uiFixture.ime({type:'composition',text:''});__uiFixture.ime({type:'key',key:'Enter',modifiers:[]});});assert.deepEqual(await commands(page),[{type:'text',text:'日本語'},{type:'key',key:'Enter',modifiers:[]}]);});
+test('Native delete, arrows and Enter preserve order without a second editor',async t=>{const {page}=await typing(t);await page.evaluate(()=>{__uiFixture.ime({type:'text',text:'ab'});for(const key of ['Backspace','ArrowLeft','Enter'])__uiFixture.ime({type:'key',key,modifiers:[]});});assert.deepEqual((await commands(page)).map(v=>v.key||v.text),['ab','Backspace','ArrowLeft','Enter']);});
+test('Uncertain delivery stops IME and reconnect never replays committed input or Enter',async t=>{const {page}=await typing(t);await page.evaluate(()=>{__uiFixture.configure({deferText:true});__uiFixture.ime({type:'text',text:'uncertain'});__uiFixture.rejectText();});await page.waitForFunction(()=>!CanvasLinkInput.active());await page.evaluate(()=>{__uiFixture.emit({connection:'reconnecting'});__uiFixture.emit({connection:'connected'});__uiFixture.ime({type:'key',key:'Enter',modifiers:[]});});assert.deepEqual(await commands(page),[{type:'text',text:'uncertain'}]);assert.match(await page.locator('#input-status').textContent(),/подтвержд|Проверьте/);});
+test('Ctrl is one-shot and Paste sends Android clipboard as text with no implicit Enter',async t=>{const {page}=await typing(t);await page.locator('#ctrl').click();await page.evaluate(()=>__uiFixture.ime({type:'text',text:'c'}));assert.equal(await page.locator('#ctrl').getAttribute('aria-pressed'),'false');await page.evaluate(()=>__uiFixture.configure({clipboard:'текст 🙂'}));await page.locator('#paste').click();assert.deepEqual(await commands(page),[{type:'key',key:'c',modifiers:['control']},{type:'text',text:'текст 🙂'}]);});
+test('A late native callback from the old keyboard token is ignored after a new target tap',async t=>{const {page}=await typing(t);await page.evaluate(()=>{const f=Native.showKeyboard;Native.showKeyboard=t=>{window.__lastToken=t;f(t);};CanvasLinkInput.open({editable:true,kind:'terminal'});window.__oldToken=__lastToken;CanvasLinkInput.open({editable:true,kind:'terminal'});CanvasLinkInput.receive({token:__oldToken,type:'text',text:'old'});});assert.deepEqual(await commands(page),[]);});
+test('One computer is automatic; IP is secondary; pairing hint names actual native Settings',async t=>{const {browser,page}=await openUI();t.after(()=>browser.close());assert.equal(await page.locator('#computers button').getAttribute('aria-pressed'),'true');assert.equal(await page.locator('#manual').evaluate(e=>e.open),false);assert.match(await page.locator('#pin-hint').textContent(),/Настройки.*CanvasLink/);await page.locator('#pin').fill('1'.repeat(6));await page.locator('#connect').click();assert.equal(await page.locator('#pin').inputValue(),'');});
+test('Only a single 56px bind row reserves workspace space across keyboard sizes',async t=>{for(const [width,height] of [[390,844],[844,390],[844,240],[1280,800],[768,1024],[320,320]]){const {browser,page}=await openUI({connected:true,width,height});try{const g=await page.evaluate(()=>{const r=document.getElementById('viewport').getBoundingClientRect(),b=document.getElementById('controls').getBoundingClientRect();const rows=[...document.getElementById('controls').querySelectorAll('button')].map(e=>e.getBoundingClientRect().top);return{r:{width:r.width,height:r.height},b:{top:b.top,height:b.height},rows,overflow:document.documentElement.scrollWidth>innerWidth};});assert.equal(g.r.width,width);assert.equal(g.r.height,height-56);assert.equal(g.b.height,56);assert.equal(new Set(g.rows).size,1);assert.equal(g.overflow,false);}finally{await browser.close();}}});
+test('Selected terminal keeps usable width and focus when IME shrinks the viewport',async t=>{const {page}=await typing(t,{width:1024,height:768});await page.setViewportSize({width:1024,height:360});await page.waitForTimeout(50);const g=await page.evaluate(()=>{const r=document.getElementById('video').getBoundingClientRect(),v=document.getElementById('viewport').getBoundingClientRect(),k=Math.min(r.width/1280,r.height/800);return {terminalWidth:1280*k*.6,viewportWidth:v.width,viewportHeight:v.height};});assert.ok(g.terminalWidth>=g.viewportWidth*.9);assert.equal(g.viewportHeight,304);});
+test('Diagnostics is a sheet off the working canvas, RTT explicitly ms',async t=>{const {page}=await typing(t);assert.equal(await page.locator('#metrics').isVisible(),false);await page.evaluate(()=>__uiFixture.emit({stats:{rtt:17.4,framesDecoded:20}}));await page.locator('#menu-toggle').click();await page.locator('#diagnostics-toggle').click();assert.match(await page.locator('#metrics').textContent(),/RTT канала\s+17 мс/);});
+
+test('An empty terminal cursor and a moving bottom cursor stay visible with the IME',async t=>{
+ const selected={...focus,caret:{x:.25,y:.22,width:.012,height:.025}};
+ const {page}=await typing(t,{width:1024,height:768,focus:selected});
+ const visible=()=>page.evaluate(()=>{const c=CanvasLinkClient.getState().source?.caret||window.__caret;const r=document.getElementById('video').getBoundingClientRect(),v=document.getElementById('viewport').getBoundingClientRect(),k=Math.min(r.width/1280,r.height/800),y=r.top+(r.height-800*k)/2+(c.y+c.height/2)*800*k;return y>v.top+8&&ywindow.__caret=c,selected.caret);
+ for(const [width,height] of [[1024,360],[390,310],[1024,768]]){await page.setViewportSize({width,height});await page.waitForTimeout(70);assert.ok(await visible(),'top cursor must stay visible after IME or rotation');}
+ await page.evaluate(focus=>__uiFixture.emit({source:{target:'terminal',rect:focus.rect,caret:{x:.65,y:.77,width:.012,height:.025}}}),selected);
+ await page.waitForTimeout(30);assert.ok(await visible(),'health must follow the active selected cursor');
+});
+test('Cursor following never overrides a manual view or opens a new keyboard',async t=>{
+ const {page}=await typing(t);await page.locator('#menu-toggle').click();await page.locator('#reset-view').click();
+ const before=await page.locator('#video').evaluate(e=>getComputedStyle(e).transform);
+ await page.evaluate(focus=>__uiFixture.emit({source:{target:'terminal',rect:focus.rect,caret:{x:.2,y:.21,width:.01,height:.02}}}),focus);
+ assert.equal(await page.locator('#video').evaluate(e=>getComputedStyle(e).transform),before);assert.equal(await page.evaluate(()=>CanvasLinkInput.active()),false);
+});
+
+test('Explicit paste is literal even when one-shot Ctrl was latched',async t=>{const {page}=await typing(t);await page.locator('#ctrl').click();await page.evaluate(()=>__uiFixture.configure({clipboard:'a'}));await page.locator('#paste').click();assert.deepEqual(await commands(page),[{type:'text',text:'a'}]);assert.equal(await page.locator('#ctrl').getAttribute('aria-pressed'),'false');});
+test('One-shot Ctrl cannot leak through a Unicode commit or native key into the next letter',async t=>{
+ const {page}=await typing(t);
+ for(const text of ['Ж','🙂','word']){
+  await page.locator('#ctrl').click();await page.evaluate(text=>{__uiFixture.ime({type:'text',text});__uiFixture.ime({type:'text',text:'c'});},text);
+  assert.equal(await page.locator('#ctrl').getAttribute('aria-pressed'),'false');
+ }
+ await page.locator('#ctrl').click();await page.evaluate(()=>{__uiFixture.ime({type:'key',key:'ArrowLeft',modifiers:[]});__uiFixture.ime({type:'text',text:'c'});});
+ assert.deepEqual(await commands(page),['Ж','c','🙂','c','word','c'].map(text=>({type:'text',text})).concat([{type:'key',key:'ArrowLeft',modifiers:['control']},{type:'text',text:'c'}]));
+});
+
+test('Initial terminal framing is visual only and overview stays under user control',async t=>{
+ const ui=await openUI({connected:true,width:1024,height:768,touch:true});t.after(()=>ui.browser.close());
+ const source={target:'canvas',surface:'canvas',terminalView:{rect:{x:.3,y:.2,width:.5,height:.5},viewport:{width:1440,height:900}}};
+ await ui.page.evaluate(source=>__uiFixture.emit({source}),source);
+ assert.equal(await ui.page.evaluate(()=>CanvasLinkInput.active()),false);
+ assert.equal(await ui.page.locator('#view-toggle-label').textContent(),'Весь Canvas');
+ assert.notEqual(await ui.page.locator('#video').evaluate(e=>getComputedStyle(e).transform),'matrix(1, 0, 0, 1, 0, 0)');
+ await ui.page.locator('#view-toggle').click();await ui.page.evaluate(source=>__uiFixture.emit({source}),source);
+ assert.equal(await ui.page.locator('#video').evaluate(e=>getComputedStyle(e).transform),'matrix(1, 0, 0, 1, 0, 0)');
+ await ui.page.locator('#view-toggle').click();assert.equal(await ui.page.evaluate(()=>CanvasLinkInput.active()),false);
+ assert.equal(await ui.page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='show-keyboard').length),0);
+});
diff --git a/integrations/canvaslink/tests/gestures-ui.test.cjs b/integrations/canvaslink/tests/gestures-ui.test.cjs
new file mode 100644
index 000000000..9896caeec
--- /dev/null
+++ b/integrations/canvaslink/tests/gestures-ui.test.cjs
@@ -0,0 +1,322 @@
+'use strict';
+const {test}=require('node:test');
+const assert=require('node:assert/strict');
+const {openUI}=require('../scripts/ui-test-harness.cjs');
+
+async function fixture(t,options={}) {
+ const ui=await openUI({width:1024,height:900,touch:true,connected:true,...options});
+ t.after(async()=>{const unhandled=await ui.page.evaluate(()=>window.__unhandled||[]);await ui.browser.close();assert.deepEqual(ui.errors,[],'browser page/console errors');assert.deepEqual(unhandled,[],'unhandled API promises');});
+ await ui.page.waitForFunction(()=>document.querySelector('#video').videoWidth===1280);
+ await ui.page.evaluate(()=>{
+  window.__gestureEvents=[];window.__viewEvents=[];window.__unhandled=[];
+  window.addEventListener('canvaslink:pointer',e=>__gestureEvents.push(e.detail));
+  window.addEventListener('canvaslink:view',e=>__viewEvents.push(e.detail));
+  window.addEventListener('unhandledrejection',e=>__unhandled.push(String(e.reason)));
+ });
+ return ui;
+}
+test('fit/mode/reset preserve instrumentation, labels, icons and publish view state',async t=>{
+ const {page}=await fixture(t);
+ await page.evaluate(()=>{
+  for(const [button,id,label]of [['fit','zoom-label','По размеру'],['mode','mode-label','Касание']]){
+   if(!document.getElementById(id))document.getElementById(button).innerHTML=''+label+'';
+  }
+  if(!document.getElementById('reset-view')){const b=document.createElement('button');b.id='reset-view';b.textContent='По размеру';document.querySelector('#controls').append(b);}
+  if(!document.getElementById('gesture-hint')){const p=document.createElement('p');p.id='gesture-hint';document.querySelector('#controls').append(p);}
+ });
+ await clear(page);await menu(page,'fit');
+ const fit=await page.evaluate(()=>({matrix:getComputedStyle(document.getElementById('video')).transform,label:document.getElementById('zoom-label').textContent,view:__viewEvents.at(-1)}));
+ assert.match(fit.matrix,/matrix\(2, 0, 0, 2,/);assert.match(fit.label,/200|2/);
+ assert.deepEqual(fit.view,{scale:2,offset:{x:0,y:0},trackpad:false});
+ await menu(page,'mode');
+ assert.equal(await page.locator('#mode').getAttribute('aria-pressed'),'true');
+ assert.equal(await page.locator('#mode-label').textContent(),'Тачпад');
+ assert.equal(await page.locator('#mode-label').count(),1,'mode label is preserved');
+ assert.match(await page.locator('#gesture-hint').textContent(),/дв[ау]|2|пальц/i);
+ await menu(page,'reset-view');
+ assert.deepEqual(await page.evaluate(()=>__viewEvents.at(-1)),{scale:1,offset:{x:0,y:0},trackpad:true});
+ await menu(page,'mode');assert.equal(await page.locator('#mode-label').textContent(),'Касание');
+});
+
+test('direct drag releases exactly once on viewport capture loss but ignores bubbled video loss',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await clear(page);
+ await page.mouse.move(a.x-40,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);
+ await page.evaluate(()=>document.querySelector('#video').dispatchEvent(new PointerEvent('lostpointercapture',{pointerId:1,bubbles:true})));
+ assert.equal((await inputs(page)).filter(c=>c.input?.action==='up').length,0,'child capture transfer is not cancellation');
+ await page.evaluate(()=>document.querySelector('#viewport').releasePointerCapture(1));
+ await page.mouse.move(a.x+45,a.y);
+ assert.equal((await inputs(page)).filter(c=>c.input?.action==='up').length,1,'capture loss releases before physical pointerup');
+ await page.mouse.up();
+ const values=(await inputs(page)).map(c=>c.input);
+ assert.equal(values.filter(c=>c.action==='down').length,1);assert.equal(values.filter(c=>c.action==='up').length,1,'capture loss releases remote down');
+ assert.equal(values.at(-1).action,'up','nothing follows the release');
+ assert.deepEqual(await page.evaluate(()=>__gestureEvents.map(e=>({x:e.x,y:e.y,action:e.action,trackpad:e.trackpad}))),values.map(e=>({x:e.x,y:e.y,action:e.action,trackpad:false})));
+});
+
+test('blur ends a drag and a connection interruption cannot replay its tail',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await clear(page);
+ await page.mouse.move(a.x-40,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);
+ await page.evaluate(()=>window.dispatchEvent(new Event('blur')));
+ assert.deepEqual((await inputs(page)).filter(c=>c.input?.action!=='move').map(c=>c.input.action),['down','up']);
+ await page.mouse.up();await clear(page);
+ await page.mouse.move(a.x-40,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);
+ await page.evaluate(()=>__uiFixture.emit({connection:'reconnecting'}));await clear(page);
+ await page.evaluate(()=>__uiFixture.emit({connection:'connected'}));
+ await page.mouse.move(a.x+60,a.y);await page.mouse.up();
+ assert.deepEqual(await inputs(page),[],'interrupted gesture is discarded, not resumed');
+});
+
+test('editing suppresses pointer/wheel input and workspace touch restores safe keyboard ownership',async t=>{
+ const {page}=await fixture(t);const a=await area(page);
+ await page.evaluate(()=>{const e=document.createElement('input');e.id='local-test-editor';document.body.append(e);e.focus();});await clear(page);
+ await page.touchscreen.tap(a.x,a.y);await page.mouse.move(a.x,a.y);await page.mouse.wheel(1,20);
+ assert.deepEqual(await inputs(page),[],'no remote gestures while editing a prompt');
+ await page.evaluate(()=>document.getElementById('local-test-editor').remove());await page.touchscreen.tap(a.x,a.y);await clear(page);
+ assert.equal(await page.evaluate(()=>document.activeElement.id),'viewport','workspace takes explicit keyboard focus');
+ await page.keyboard.down('Enter');await page.keyboard.down('Enter');await page.keyboard.up('Enter');
+ const keys=await inputs(page);assert.deepEqual(keys,[{type:'key',key:'Enter',modifiers:[]}],'hardware autorepeat never repeats Enter');
+});
+
+test('trackpad two-finger pinch zooms locally without scrolling or a ghost tap',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);await menu(page,'mode');await clear(page);
+ const touch=await touchSession(context,page);
+ await touch('touchStart',[[0,a.x-50,a.y],[1,a.x+50,a.y]]);
+ await touch('touchMove',[[0,a.x-90,a.y],[1,a.x+90,a.y]]);
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ await touch('touchEnd',[[1,a.x+90,a.y]]);await touch('touchEnd',[]);
+ assert.deepEqual(await inputs(page),[],'pinch is local-only and never clicks');
+ const view=await page.evaluate(()=>__viewEvents.at(-1));assert.ok(view&&view.scale>1.6&&view.scale<2,'trackpad pinch zooms');
+ await page.touchscreen.tap(a.x,a.y);
+ assert.deepEqual((await inputs(page)).map(c=>c.input.action),['down','up'],'next independent tap still works');
+});
+
+test('direct pinch keeps the off-centre content anchor and clamps local pan bounds',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);const x=a.x+80,y=a.y;
+ const touch=await touchSession(context,page);await clear(page);
+ await page.touchscreen.tap(x,y);const before=(await inputs(page))[0].input;await clear(page);
+ await touch('touchStart',[[0,x-50,y],[1,x+50,y]]);
+ await touch('touchMove',[[0,x-100,y],[1,x+100,y]]);
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ await touch('touchEnd',[]);
+ const view=await page.evaluate(()=>__viewEvents.at(-1));
+ assert.ok(Math.abs(view.scale-2)<.02);assert.ok(Math.abs(view.offset.x+80)<2,'anchor compensation');
+ assert.deepEqual(await inputs(page),[],'direct pinch is local-only');
+ await page.touchscreen.tap(x,y);const after=(await inputs(page))[0].input;
+ assert.ok(Math.abs(before.x-after.x)<.003&&Math.abs(before.y-after.y)<.003,'same content remains under the pinch centre');
+ await menu(page,'fit');await clear(page);
+ await touch('touchStart',[[0,a.x-50,y],[1,a.x+50,y]]);
+ await touch('touchMove',[[0,a.x-20,y+30],[1,a.x+80,y+30]]);
+ await touch('touchEnd',[]);
+ assert.deepEqual(await page.evaluate(()=>__viewEvents.at(-1)?.offset),{x:0,y:0},'fit cannot be panned outside the viewport');
+});
+
+test('trackpad motion returning to its origin is not mistaken for a tap',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);await menu(page,'mode');await clear(page);
+ const touch=await touchSession(context,page);
+ await touch('touchStart',[[0,a.x,a.y]]);await touch('touchMove',[[0,a.x+70,a.y]]);await touch('touchMove',[[0,a.x,a.y]]);await touch('touchEnd',[]);
+ const values=(await inputs(page)).map(c=>c.input);
+ assert.ok(values.length>0);assert.ok(values.every(e=>e.action==='move'),'movement never becomes a click on release');
+});
+
+test('trackpad long-press drag releases once on touchcancel and cannot fire after a second finger',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);await menu(page,'mode');await clear(page);const touch=await touchSession(context,page);
+ await touch('touchStart',[[0,a.x,a.y]]);
+ await page.waitForFunction(()=>__uiFixture.calls.some(c=>c.input?.action==='down'),{},{timeout:1500});
+ await touch('touchMove',[[0,a.x+40,a.y+20]]);await touch('touchCancel',[]);
+ assert.deepEqual((await inputs(page)).filter(c=>c.input.action!=='move').map(c=>c.input.action),['down','up']);
+ assert.ok((await inputs(page)).some(c=>c.input.action==='move'&&c.input.drag===true),'held cursor moves as a drag');
+ await clear(page);await touch('touchStart',[[0,a.x-30,a.y]]);
+ await touch('touchStart',[[0,a.x-30,a.y],[1,a.x+30,a.y]]);await touch('touchEnd',[]);
+ await page.waitForTimeout(550);assert.deepEqual(await inputs(page),[],'no delayed long-press after multitouch');
+});
+
+test('editing and mode switches safely release an existing down before discarding its tail',async t=>{
+ const {page}=await fixture(t);let a=await area(page);await page.evaluate(()=>{const e=document.createElement('input');e.id='local-test-editor';document.body.append(e);});await page.locator('#viewport').focus();a=await area(page);await clear(page);
+ await page.mouse.move(a.x-40,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);
+ await page.locator('#local-test-editor').focus();
+ assert.deepEqual((await inputs(page)).filter(c=>c.input.action!=='move').map(c=>c.input.action),['down','up'],'editor focus releases held remote button');
+ await page.mouse.up();await page.locator('#viewport').focus();await clear(page);
+ await page.mouse.move(a.x-40,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);
+ await page.evaluate(()=>document.querySelector('#mode').click());
+ assert.deepEqual((await inputs(page)).filter(c=>c.input.action!=='move').map(c=>c.input.action),['down','up'],'switching mode releases with the original mode');
+ await clear(page);await page.mouse.move(a.x+70,a.y);await page.mouse.up();assert.deepEqual(await inputs(page),[]);
+});
+
+test('Ctrl-wheel pinch zooms locally at the pointer instead of sending remote scroll',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await clear(page);
+ await page.mouse.move(a.x+60,a.y);await page.keyboard.down('Control');await page.mouse.wheel(0,-150);await page.keyboard.up('Control');
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ assert.deepEqual(await inputs(page),[],'browser trackpad pinch must not scroll the remote terminal');
+ const v=await page.evaluate(()=>__viewEvents.at(-1));assert.ok(v?.scale>1);assert.ok(v.offset.x<0,'zoom anchor follows the wheel pointer');
+});
+
+test('scroll deltas normalize wheel units and clamp the v2 payload',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await clear(page);
+ await page.mouse.move(a.x,a.y);await page.mouse.wheel(9999,-9999);
+ await page.waitForFunction(()=>__uiFixture.calls.some(c=>c.input?.type==='scroll'));
+ assert.deepEqual((await inputs(page))[0].input,{type:'scroll',x:.5,y:.5,dx:2000,dy:-2000});
+ await clear(page);
+ await page.evaluate(()=>document.querySelector('#viewport').dispatchEvent(new WheelEvent('wheel',{clientX:500,clientY:300,deltaMode:1,deltaX:1,deltaY:2,bubbles:true,cancelable:true})));
+ const line=(await inputs(page))[0].input;assert.equal(line.dx,16);assert.equal(line.dy,32);
+});
+
+test('two-finger trackpad translation scrolls once per centroid change and never clicks',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);await menu(page,'mode');await clear(page);const touch=await touchSession(context,page);
+ await touch('touchStart',[[0,a.x-50,a.y],[1,a.x+50,a.y]]);
+ await touch('touchMove',[[0,a.x-30,a.y+30],[1,a.x+70,a.y+30]]);
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ await touch('touchEnd',[[1,a.x+70,a.y+30]]);await touch('touchMove',[[1,a.x+80,a.y+40]]);await touch('touchEnd',[]);
+ assert.deepEqual((await inputs(page)).map(c=>c.input),[{type:'scroll',x:.5,y:.5,dx:-20,dy:-30}]);
+ assert.deepEqual(await page.evaluate(()=>__viewEvents),[],'translation does not change local zoom');
+});
+
+test('Settings swipe scrolls under the finger while slider movement stays a drag',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page),touch=await touchSession(context,page);
+ await page.evaluate(()=>__uiFixture.emit({source:{target:'control',surface:'settings',dragRects:[]}}));await clear(page);
+ await touch('touchStart',[[0,a.x,a.y+40]]);await touch('touchMove',[[0,a.x,a.y-40]]);await touch('touchEnd',[]);
+ const scroll=(await inputs(page)).map(c=>c.input);assert.ok(scroll.length>0);assert.ok(scroll.every(c=>c.type==='scroll'));assert.ok(scroll[0].dy>0);
+ await page.evaluate(()=>__uiFixture.emit({source:{target:'control',surface:'settings',dragRects:[{x:0,y:0,width:1,height:1}]}}));await clear(page);
+ await touch('touchStart',[[0,a.x-40,a.y]]);await touch('touchMove',[[0,a.x+40,a.y]]);await touch('touchEnd',[]);
+ const slider=(await inputs(page)).map(c=>c.input);assert.deepEqual(slider.filter(c=>c.action!=='move').map(c=>c.action),['down','up']);assert.ok(slider.every(c=>c.type==='pointer'));
+});
+test('Settings scrolling uses remote CSS units rather than high density video pixels',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page),touch=await touchSession(context,page);
+ async function swipe(width){
+  await page.evaluate(width=>__uiFixture.emit({source:{target:'control',surface:'settings',viewport:{width,height:800},dragRects:[]}}),width);await clear(page);
+  await touch('touchStart',[[0,a.x,a.y+40]]);await touch('touchMove',[[0,a.x,a.y-40]]);await touch('touchEnd',[]);
+  return (await inputs(page)).filter(c=>c.input.type==='scroll').reduce((sum,c)=>sum+c.input.dy,0);
+ }
+ const normal=await swipe(1280),dense=await swipe(640);assert.ok(normal>0);assert.ok(Math.abs(dense*2-normal)<.001);
+});
+
+test('pointer geometry uses contained video content at fit and zoom across portrait/landscape',async t=>{
+ const {page}=await fixture(t,{width:390,height:844});
+ for(const size of [{width:390,height:844},{width:844,height:390},{width:1280,height:800}]){
+  await page.setViewportSize(size);
+  await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+  for(let zoom=0;zoom<2;zoom++){
+   if(zoom)await menu(page,'fit');
+   const g=await page.evaluate(()=>{const v=document.querySelector('#video'),r=v.getBoundingClientRect(),p=document.querySelector('#viewport').getBoundingClientRect(),f=Math.min(r.width/v.videoWidth,r.height/v.videoHeight);return {left:r.left+(r.width-v.videoWidth*f)/2,top:r.top+(r.height-v.videoHeight*f)/2,width:v.videoWidth*f,height:v.videoHeight*f,p:{left:p.left,top:p.top,width:p.width,height:p.height}};});
+   const at={x:g.left+g.width*.6,y:g.top+g.height*.55};assert.ok(at.xc.input);assert.deepEqual(values.map(e=>e.action),['down','up'],JSON.stringify({size,zoom,at,g,dom:await page.evaluate(({x,y})=>({at:document.elementFromPoint(x,y)?.outerHTML,active:document.activeElement.id,innerWidth,innerHeight}),at)}));
+   for(const e of values){assert.ok(Math.abs(e.x-.6)<.006&&Math.abs(e.y-.55)<.006,'coordinates map to actual object-fit content');assert.equal(e.button,0);}
+   if(zoom)await menu(page,'fit');
+  }
+ }
+});
+
+test('direct touch drag emits one down/move/up chain and cancel has no tap',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);const touch=await touchSession(context,page);await clear(page);
+ await touch('touchStart',[[0,a.x-40,a.y]]);await touch('touchMove',[[0,a.x,a.y]]);await touch('touchMove',[[0,a.x+40,a.y+20]]);await touch('touchEnd',[]);
+ let values=(await inputs(page)).map(c=>c.input);assert.deepEqual(values.map(e=>e.action),['down','move','move','up']);assert.ok(values.every(e=>e.x>=0&&e.x<=1&&e.y>=0&&e.y<=1));
+ await clear(page);await touch('touchStart',[[0,a.x,a.y]]);await touch('touchCancel',[]);assert.deepEqual(await inputs(page),[]);
+});
+
+test('sync throws and rejected API promises are consumed without input replay',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await clear(page);
+ await page.evaluate(()=>{CanvasLinkClient.sendInput=()=>Promise.reject(Error('fixture rejection'));CanvasLinkClient.sendText=()=>Promise.reject(Error('fixture rejection'));CanvasLinkClient.sendKey=()=>{throw Error('fixture sync error');};});
+ await page.touchscreen.tap(a.x,a.y);await page.keyboard.press('a');await page.keyboard.press('Enter');
+ await page.evaluate(()=>{CanvasLinkClient.sendInput=()=>{throw Error('fixture sync error');};});
+ await page.touchscreen.tap(a.x,a.y);await page.waitForTimeout(100);
+ assert.deepEqual(await page.evaluate(()=>__unhandled),[]);assert.deepEqual(await inputs(page),[]);
+});
+
+test('capture acquisition failure cancels input without a browser exception',async t=>{
+ const {page,errors}=await fixture(t);const a=await area(page);await clear(page);
+ await page.evaluate(()=>document.querySelector('#viewport').setPointerCapture=()=>{throw new DOMException('Fixture capture race','NotFoundError');});
+ await page.mouse.move(a.x,a.y);await page.mouse.down();await page.mouse.move(a.x+40,a.y);await page.mouse.up();
+ assert.deepEqual(await inputs(page),[]);assert.deepEqual(errors,[],'capture race is handled');
+});
+
+test('a third finger suppresses the whole multitouch sequence until every contact ends',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);const touch=await touchSession(context,page);await clear(page);
+ await touch('touchStart',[[0,a.x-50,a.y],[1,a.x+50,a.y]]);
+ await touch('touchStart',[[0,a.x-50,a.y],[1,a.x+50,a.y],[2,a.x,a.y+50]]);
+ await touch('touchEnd',[[0,a.x-50,a.y],[1,a.x+50,a.y]]);
+ await touch('touchMove',[[0,a.x-90,a.y],[1,a.x+90,a.y]]);
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ await touch('touchEnd',[]);
+ assert.deepEqual(await inputs(page),[]);assert.deepEqual(await page.evaluate(()=>__viewEvents),[],'no resumed pair or zoom jump after third contact');
+ await page.touchscreen.tap(a.x,a.y);assert.deepEqual((await inputs(page)).map(c=>c.input.action),['down','up']);
+});
+
+test('an open HTML dialog owns Escape and hardware keys instead of the terminal',async t=>{
+ const {page}=await fixture(t);await clear(page);
+ const prevented=await page.evaluate(()=>{
+  document.querySelector('#diagnostics').show();const v=document.querySelector('#viewport');v.focus();
+  const e=new KeyboardEvent('keydown',{key:'Escape',bubbles:true,cancelable:true});v.dispatchEvent(e);return e.defaultPrevented;
+ });
+ assert.equal(prevented,false,'gesture layer must not cancel dialog Escape');assert.deepEqual(await inputs(page),[]);
+ await page.evaluate(()=>document.querySelector('#diagnostics').close());
+ for(const [button,dialog]of [['#diagnostics-toggle','#diagnostics'],['#disconnect','#disconnect-dialog']]){
+  await page.locator('#menu-toggle').click();await page.locator(button).click();await page.waitForFunction(selector=>document.querySelector(selector).open,dialog);
+  await page.keyboard.press('Escape');await page.waitForFunction(selector=>!document.querySelector(selector).open,dialog);
+ }
+ assert.deepEqual(await inputs(page),[],'real native dialog Escape does not send a remote key');
+});
+
+test('zoom stays bounded and survives composer/viewport resize without resetting the view',async t=>{
+ const {page}=await fixture(t);const a=await area(page);await menu(page,'fit');
+ const before=await page.locator('#video').evaluate(el=>el.style.transform);
+ await page.setViewportSize({width:1024,height:650});
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ assert.equal(await page.locator('#video').evaluate(el=>el.style.transform),before,'keyboard/layout changes preserve the user view');
+ const v=await area(page);await clear(page);
+ await page.mouse.move(v.x,v.y);await page.keyboard.down('Control');await page.mouse.wheel(0,-99999);
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ assert.equal(await page.evaluate(()=>__viewEvents.at(-1).scale),8);
+ await page.mouse.wheel(0,99999);await page.keyboard.up('Control');
+ await page.evaluate(()=>new Promise(resolve=>requestAnimationFrame(()=>requestAnimationFrame(resolve))));
+ assert.equal(await page.evaluate(()=>__viewEvents.at(-1).scale),1);assert.deepEqual(await inputs(page),[]);
+});
+
+test('trackpad cursor starts at the last direct tap and relative movement stays normalized',async t=>{
+ const {page,context}=await fixture(t);const a=await area(page);await page.touchscreen.tap(a.x+40,a.y);const start=(await inputs(page))[0].input;
+ await menu(page,'mode');await clear(page);const touch=await touchSession(context,page);
+ await touch('touchStart',[[0,a.x,a.y]]);await touch('touchMove',[[0,a.x+50,a.y+20]]);await touch('touchEnd',[]);
+ const values=(await inputs(page)).map(c=>c.input);assert.ok(values.length>0&&values.every(v=>v.action==='move'));
+ assert.ok(Math.abs(values.at(-1).x-(start.x+50/a.width))<.005,'relative movement has no cursor jump');
+ assert.ok(values.every(v=>v.x>=0&&v.x<=1&&v.y>=0&&v.y<=1));
+});
+
+const inputs=page=>page.evaluate(()=>__uiFixture.calls.filter(c=>['input','key','text'].includes(c.type)));
+const clear=page=>page.evaluate(()=>{__uiFixture.calls.length=0;__gestureEvents.length=0;__viewEvents.length=0;});
+async function area(page){const b=await page.locator('#viewport').boundingBox();assert.ok(b&&b.width>0&&b.height>0,'visible viewport');return {x:b.x+b.width/2,y:b.y+b.height/2,width:b.width,height:b.height,left:b.x,top:b.y};}
+async function touchSession(context,page){
+ const cdp=await context.newCDPSession(page);
+ return async(type,points)=>cdp.send('Input.dispatchTouchEvent',{type,touchPoints:points.map(([id,x,y])=>({id,x,y,radiusX:2,radiusY:2,force:1}))});
+}
+
+test('connection boundary blocks gestures and never replays them on reconnect',async t=>{
+ const {page}=await fixture(t);const a=await area(page);
+ await page.evaluate(()=>__uiFixture.emit({connection:'reconnecting'}));await clear(page);
+ await page.touchscreen.tap(a.x,a.y);await page.mouse.move(a.x,a.y);await page.mouse.wheel(30,80);
+ await page.evaluate(()=>__uiFixture.emit({connection:'suspended'}));
+ await page.touchscreen.tap(a.x,a.y);
+ await page.evaluate(()=>__uiFixture.emit({connection:'connected'}));
+ assert.deepEqual(await inputs(page),[],'no offline call or delayed replay');
+});
+
+test('hardware keys leave native button activation and editor/IME handling intact',async t=>{
+ const {page}=await fixture(t);await clear(page);
+ await page.locator('#menu-toggle').click();await page.locator('#mode').focus();await page.keyboard.press('Enter');
+ assert.equal(await page.locator('#mode').getAttribute('aria-pressed'),'true','Enter activates the UI button');
+ assert.deepEqual(await inputs(page),[],'UI activation is not remote Enter');
+ await page.evaluate(()=>{const e=document.createElement('input');e.id='local-test-editor';document.body.append(e);e.focus();});
+ await page.keyboard.type('safe');await page.keyboard.press('Enter');
+ assert.deepEqual(await inputs(page),[],'composer owns hardware input');
+ await page.evaluate(()=>{
+  const host=document.createElement('div');host.innerHTML='
edit
';
+  document.body.append(host);
+  for(const selector of ['#test-select','#test-edit span']){
+   document.querySelector(selector).dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',bubbles:true,cancelable:true}));
+  }
+  const v=document.querySelector('#viewport');v.tabIndex=0;v.focus();
+  v.dispatchEvent(new KeyboardEvent('keydown',{key:'Enter',isComposing:true,bubbles:true,cancelable:true}));
+  v.dispatchEvent(new KeyboardEvent('keydown',{key:'a',keyCode:229,bubbles:true,cancelable:true}));
+ });
+ assert.deepEqual(await inputs(page),[],'select, contenteditable and IME are never intercepted');
+});
+
+async function menu(page,id){await page.locator('#menu-toggle').click();await page.locator('#'+id).click();}
diff --git a/integrations/canvaslink/tests/graphics-quality.test.cjs b/integrations/canvaslink/tests/graphics-quality.test.cjs
new file mode 100644
index 000000000..36f0791f9
--- /dev/null
+++ b/integrations/canvaslink/tests/graphics-quality.test.cjs
@@ -0,0 +1,29 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const {createSnapshot}=require('../host/snapshot.cjs'),{rgba}=require('../host/frames.js');
+test('High density is configured at startup without changing CSS zoom or accepting unbounded factors',()=>{
+ const {configureRenderScale}=require('../host/display-scale.cjs');let actual,exited=false;
+ const app={isReady:()=>false,relaunch:options=>actual=options,exit:code=>{assert.equal(code,0);exited=true;}};
+ configureRenderScale(app,['preview','--private-profile']);assert.deepEqual(actual,{args:['--private-profile','--force-device-scale-factor=2']});assert(exited);
+ for(const scale of [1,2])configureRenderScale({...app,relaunch(){throw Error('Relaunch loop');}},['preview','--force-device-scale-factor='+scale]);
+ assert.throws(()=>configureRenderScale({...app,isReady:()=>true}),/requires-startup/);
+ for(const scale of [0,1.5,3,Infinity])assert.throws(()=>configureRenderScale(app,['preview','--force-device-scale-factor='+scale]),/invalid-render-scale/);
+});
+test('Raw snapshots preserve Retina pixels without JPEG or PNG encoding',()=>{
+ const image={isEmpty:()=>false,getScaleFactors:()=>[1,2],getSize:()=>({width:8,height:5}),toBitmap:options=>{assert.equal(options.scaleFactor,2);return Buffer.alloc(16*10*4);},toJPEG(){throw Error('Lossy intermediate');},toPNG(){throw Error('Unnecessary compression');}};
+ const value=createSnapshot(image,{createFromBitmap(){throw Error('Unnecessary resize');}});
+ assert.equal(value.width,16);assert.equal(value.height,10);assert.equal(value.format,'bgra');
+});
+test('Capture bounds apply to physical pixels, including high DPI',()=>{
+ const image={isEmpty:()=>false,getScaleFactors:()=>[2],getSize:()=>({width:8,height:5}),toBitmap:()=>Buffer.alloc(16*10*4)};
+ const value=createSnapshot(image,{createFromBitmap(pixels,options){assert.equal(options.scaleFactor,1);assert.equal(options.width,16);assert.equal(options.height,10);return {resize(size){assert.equal(size.width,8);assert.equal(size.height,5);return {toBitmap:()=>Buffer.alloc(8*5*4)};}};}},{maxWidth:8,maxHeight:5});
+ assert.equal(value.width,8);assert.equal(value.height,5);
+});
+test('Raw conversion preserves red/blue order and restores premultiplied alpha',()=>{
+ const original=Uint8Array.from([0,0,255,255,255,0,0,255,10,20,40,128]);
+ assert.deepEqual([...rgba(original,3,1)],[255,0,0,255,0,0,255,255,80,40,20,128]);assert.equal(original[0],0);
+});
+test('Malformed and unbounded pixel frames are rejected before canvas allocation',()=>{
+ assert.throws(()=>rgba(new Uint8Array(4),2560,1600),/invalid-bitmap/);
+ assert.throws(()=>rgba(new Uint8Array(0),0,0),/invalid-bitmap/);
+ assert.throws(()=>rgba(new Uint8Array(2561*4),2561,1),/invalid-bitmap/);
+});
diff --git a/integrations/canvaslink/tests/host-peer.test.cjs b/integrations/canvaslink/tests/host-peer.test.cjs
new file mode 100644
index 000000000..70a6e56a1
--- /dev/null
+++ b/integrations/canvaslink/tests/host-peer.test.cjs
@@ -0,0 +1,76 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const fs=require('node:fs'),path=require('node:path'),vm=require('node:vm');
+const source=fs.readFileSync(path.join(__dirname,'../host/renderer.js'),'utf8');
+const tick=()=>new Promise(resolve=>setImmediate(resolve));
+async function host(){
+ const elements=new Map(),captures=[],peers=[],signals=[],sessions=[],timers=[],fallbacks=[];
+ const stream=()=>{const track={stopped:false,stop(){this.stopped=true;}};return {track,getVideoTracks:()=>[track],getTracks:()=>[track]};};
+ const element=id=>{if(!elements.has(id))elements.set(id,{hidden:false,textContent:'',replaceChildren(){},append(){},getContext:()=>({}),captureStream:()=>{const s=stream();fallbacks.push(s);return s;}});return elements.get(id);};
+ class Peer{
+  constructor(){peers.push(this);this.iceGatheringState='complete';this.connectionState='new';}
+  addTrack(track){this.track=track;return {getParameters:()=>({encodings:[]}),replaceTrack:async value=>{this.track=value;}};}
+  async getStats(){return new Map([['video',{type:'outbound-rtp',kind:'video',framesEncoded:this.frames||0}]]);}
+  getTransceivers(){return [{setCodecPreferences(){}}];}
+  createDataChannel(){return this.channel={readyState:'connecting',close(){this.readyState='closed';},send(){}};}
+  async createOffer(){return {type:'offer',sdp:'owned-test-offer'};}
+  async setLocalDescription(value){this.localDescription=value;}
+  close(){this.closed=true;}
+ }
+ let event;
+ const context={window:{CanvasLinkFrames:require('../host/frames.js'),host:{state:async()=>({embedded:true,source:'Owned target',addresses:[],connected:[],width:100,height:100}),permissions:async()=>({platform:'linux'}),sources:async()=>[{id:'owned',name:'Owned target'}],select:async()=>{},onEvent:handler=>event=handler,report(){},captureFallback:async()=>{},inputSession:async(...args)=>sessions.push(args),signal:async(...args)=>signals.push(args)}},document:{getElementById:element,createElement:()=>({})},navigator:{mediaDevices:{getDisplayMedia:()=>new Promise((resolve,reject)=>captures.push({resolve,reject}))}},RTCPeerConnection:Peer,RTCRtpSender:{getCapabilities:()=>({codecs:[]})},setInterval(){},setTimeout:fn=>{const t={fn};timers.push(t);return t;},clearTimeout:t=>{if(t)t.cancelled=true;}};
+ vm.runInNewContext(source,context);await tick();
+ return {event,captures,peers,signals,sessions,stream,timers,fallbacks,bridge:context.window.host};
+}
+test('Overlapping reconnect capture resolves only the newest generation',async()=>{
+ const h=await host(),first=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const second=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ assert.equal(h.captures.length,2);const old=h.stream(),current=h.stream();
+ h.captures[1].resolve(current);await second;h.captures[0].resolve(old);await first;
+ assert.equal(h.peers.length,1,'a stale capture created a second peer');
+ assert.equal(h.peers[0].track,current.track);assert.equal(old.track.stopped,true);assert.equal(current.track.stopped,false);
+ assert.equal(h.signals.length,1);
+});
+test('A delayed ended event from the old track cannot close the new peer',async()=>{
+ const h=await host();let run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const old=h.stream();h.captures[0].resolve(old);await run;
+ run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const current=h.stream();h.captures[1].resolve(current);await run;
+ old.track.onended();assert.equal(current.track.stopped,false);assert.equal(h.peers[1].closed,undefined);
+ assert.equal(h.signals.filter(([,value])=>value.type==='disconnect').length,0);
+});
+test('A connected tab with no first frame switches to owned snapshot capture',async()=>{
+ const h=await host(),run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const capture=h.stream();h.captures[0].resolve(capture);await run;
+ const p=h.peers[0];p.channel.onopen();await h.timers[0].fn();
+ assert.equal(h.fallbacks.length,1);assert.equal(p.track,h.fallbacks[0].track);
+ assert.equal(capture.track.stopped,true);assert.equal(p.track.stopped,false);
+});
+test('A tab that already encoded video keeps its original capture',async()=>{
+ const h=await host(),run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const capture=h.stream();h.captures[0].resolve(capture);await run;
+ const p=h.peers[0];p.frames=1;p.channel.onopen();await h.timers[0].fn();
+ assert.equal(h.fallbacks.length,0);assert.equal(p.track,capture.track);assert.equal(capture.track.stopped,false);
+});
+test('Zero decoded-frame feedback recovers even when the sender encoded frames',async()=>{
+ const h=await host(),run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const capture=h.stream();h.captures[0].resolve(capture);await run;
+ const p=h.peers[0];p.frames=8;p.channel.readyState='open';p.channel.onopen();
+ p.channel.onmessage({data:JSON.stringify({type:'ping',at:1,videoFrames:0})});await h.timers[0].fn();
+ assert.equal(h.fallbacks.length,1);assert.equal(capture.track.stopped,true);
+});
+test('An old initial-frame watchdog cannot replace a reconnected capture',async()=>{
+ const h=await host();let run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();h.captures[0].resolve(h.stream());await run;
+ let resolve;h.peers[0].getStats=()=>new Promise(r=>resolve=r);h.peers[0].channel.onopen();const waiting=h.timers[0].fn();
+ run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();const capture=h.stream();h.captures[1].resolve(capture);await run;
+ resolve(new Map());await waiting;
+ assert.equal(h.timers[0].cancelled,true);assert.equal(h.fallbacks.length,0);assert.equal(h.peers[1].track,capture.track);
+});
+test('Revocation stops tracks and control before any settings refresh, even if refresh fails',async()=>{
+ const h=await host(),run=h.event({type:'signal',id:'device',message:{type:'ping'}});await tick();
+ const capture=h.stream();h.captures[0].resolve(capture);await run;
+ let refresh;h.bridge.state=()=>new Promise((resolve,reject)=>refresh={reject});
+ const revoke=h.event({type:'revoke',id:'device'}).catch(error=>error);
+ assert.equal(capture.track.stopped,true,'revocation waited for UI state');assert.equal(h.peers[0].closed,true);
+ assert.equal(h.sessions.at(-1)[1],null);
+ refresh.reject(Error('state-unavailable'));await revoke;
+});
diff --git a/integrations/canvaslink/tests/icon.test.cjs b/integrations/canvaslink/tests/icon.test.cjs
new file mode 100644
index 000000000..c135e1dd7
--- /dev/null
+++ b/integrations/canvaslink/tests/icon.test.cjs
@@ -0,0 +1,162 @@
+'use strict';
+
+const test = require('node:test');
+const assert = require('node:assert/strict');
+const fs = require('node:fs');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+const root = path.resolve(__dirname, '..');
+const sharp = require(process.env.CANVASLINK_SHARP || 'sharp');
+const read = file => fs.readFileSync(path.join(root, file), 'utf8');
+const exists = file => fs.existsSync(path.join(root, file));
+const ns = 'http://schemas.android.com/apk/res/android';
+
+function xml(text) {
+  const parsed = spawnSync('python3', ['-c',
+    'import sys,json,xml.etree.ElementTree as E\nr=E.fromstring(sys.stdin.read())\nprint(json.dumps([{"tag":e.tag,"attrs":e.attrib,"text":e.text} for e in r.iter()]))'],
+  { input: text, encoding: 'utf8' });
+  assert.equal(parsed.status, 0, `XML must be well formed: ${parsed.stderr}`);
+  return JSON.parse(parsed.stdout);
+}
+
+function source() {
+  assert.ok(exists('design/canvaslink-icon.svg'), 'Original CanvasLink SVG is missing');
+  const text = read('design/canvaslink-icon.svg');
+  const nodes = xml(text);
+  return { text, nodes, paths: nodes.filter(node => node.tag.endsWith('}path')) };
+}
+
+function foregroundSvg(paths) {
+  return `${paths.map(p => ``).join('')}`;
+}
+
+// Source geometry is checked independently of Android conversion and launcher masks.
+test('icon: original two-window mark uses the UI palette and stays inside the 66dp safe circle', async () => {
+  const { text, nodes, paths } = source();
+  assert.match(text, /SPDX-License-Identifier: MIT/);
+  assert.match(text, /Original geometry created for CanvasLink/);
+  assert.deepEqual(nodes[0].attrs.viewBox, '0 0 108 108');
+  assert.deepEqual(paths.map(p => p.attrs.id), ['desktop-window', 'touch-window']);
+  assert.deepEqual(paths.map(p => p.attrs.fill.toLowerCase()), ['#edf1e6', '#d6ef88']);
+  const background = nodes.find(n => n.tag.endsWith('}rect'));
+  assert.equal(background.attrs.fill.toLowerCase(), '#121814');
+  assert.equal(background.attrs.width, '108');
+  assert.equal(background.attrs.height, '108');
+  assert.ok(!/<(?:text|image|use|filter|linearGradient|radialGradient)\b|\b(?:stroke|transform)=/i.test(text), 'No fonts, imported art, effects or ambiguous stroked bounds');
+  const { data, info } = await sharp(Buffer.from(foregroundSvg(paths)), { density: 720 }).ensureAlpha().raw().toBuffer({ resolveWithObject: true });
+  let minX = Infinity, minY = Infinity, maxX = -Infinity, maxY = -Infinity, maxRadius = 0, ink = 0;
+  const scale = info.width / 108;
+  for (let y = 0; y < info.height; y++) for (let x = 0; x < info.width; x++) {
+    if (data[(y * info.width + x) * 4 + 3] < 128) continue;
+    const px = (x + .5) / scale, py = (y + .5) / scale;
+    minX = Math.min(minX, px); maxX = Math.max(maxX, px);
+    minY = Math.min(minY, py); maxY = Math.max(maxY, py);
+    maxRadius = Math.max(maxRadius, Math.hypot(px - 54, py - 54));
+    ink++;
+  }
+  assert.ok(ink > 0, 'Foreground must not be empty');
+  assert.ok(maxRadius <= 33, `Critical mark exceeds 66dp safe circle: radius ${maxRadius}`);
+  assert.ok(maxX - minX >= 46 && maxX - minX <= 54, 'Two-window silhouette needs a strong, centered width');
+  assert.ok(maxY - minY >= 44 && maxY - minY <= 50, 'Two-window silhouette needs a strong, centered height');
+  assert.ok(Math.abs((minX + maxX) / 2 - 54) < 1, 'Horizontal optical center');
+  assert.ok(Math.abs((minY + maxY) / 2 - 54) < 1, 'Vertical optical center');
+});
+
+test('icon: API26 adaptive resources reproduce the source without changing existing identifiers or colors', () => {
+  const { paths } = source();
+  const foreground = xml(read('android/res/drawable/ic_launcher_foreground.xml'));
+  const attr = key => `{${ns}}${key}`;
+  assert.equal(foreground[0].tag, 'vector');
+  for (const dimension of ['width', 'height']) assert.equal(foreground[0].attrs[attr(dimension)], '108dp');
+  for (const dimension of ['viewportWidth', 'viewportHeight']) assert.equal(foreground[0].attrs[attr(dimension)], '108');
+  const vectorPaths = foreground.filter(n => n.tag === 'path');
+  assert.equal(vectorPaths.length, 2, 'Adaptive foreground must contain both linked window rails');
+  vectorPaths.forEach((p, index) => {
+    assert.equal(p.attrs[attr('pathData')], paths[index].attrs.d, 'Android and SVG geometry must be identical');
+    assert.equal(p.attrs[attr('fillColor')].toLowerCase(), paths[index].attrs.fill.toLowerCase());
+    assert.ok(!p.attrs[attr('strokeWidth')], 'Use unambiguous filled contours');
+  });
+  const adaptive = xml(read('android/res/mipmap-anydpi-v26/ic_launcher.xml'));
+  assert.equal(adaptive[0].tag, 'adaptive-icon');
+  assert.equal(adaptive.find(n => n.tag === 'background').attrs[attr('drawable')], '@color/icon_background');
+  assert.equal(adaptive.find(n => n.tag === 'foreground').attrs[attr('drawable')], '@drawable/ic_launcher_foreground');
+  assert.ok(!adaptive.some(n => n.tag === 'monochrome'), 'API26 resource must not depend on API33 tags');
+  const colors = xml(read('android/res/values/colors.xml'));
+  assert.equal(colors.find(n => n.attrs.name === 'icon_background').text.trim(), '#121814');
+  const manifest = xml(read('android/AndroidManifest.xml'));
+  const app = manifest.find(n => n.tag === 'application');
+  assert.equal(app.attrs[attr('icon')], '@mipmap/ic_launcher');
+  assert.equal(app.attrs[attr('roundIcon')], '@mipmap/ic_launcher');
+
+});
+
+test('icon: API33 themed icon uses the same safe silhouette without a filled background', () => {
+  assert.ok(exists('android/res/mipmap-anydpi-v33/ic_launcher.xml'), 'API33 adaptive icon with monochrome layer is missing');
+  assert.ok(exists('android/res/drawable/ic_launcher_monochrome.xml'), 'Themed foreground vector is missing');
+  const attr = key => `{${ns}}${key}`;
+  const adaptive = xml(read('android/res/mipmap-anydpi-v33/ic_launcher.xml'));
+  assert.equal(adaptive[0].tag, 'adaptive-icon');
+  assert.equal(adaptive.find(n => n.tag === 'background').attrs[attr('drawable')], '@color/icon_background');
+  assert.equal(adaptive.find(n => n.tag === 'foreground').attrs[attr('drawable')], '@drawable/ic_launcher_foreground');
+  assert.equal(adaptive.find(n => n.tag === 'monochrome').attrs[attr('drawable')], '@drawable/ic_launcher_monochrome');
+  const monochrome = xml(read('android/res/drawable/ic_launcher_monochrome.xml'));
+  assert.equal(monochrome[0].tag, 'vector');
+  assert.equal(monochrome[0].attrs[attr('viewportWidth')], '108');
+  assert.equal(monochrome[0].attrs[attr('viewportHeight')], '108');
+  const rails = monochrome.filter(n => n.tag === 'path');
+  assert.equal(rails.length, 2, 'Themed icon must not add a solid-background path');
+  rails.forEach((rail, index) => {
+    assert.equal(rail.attrs[attr('pathData')], source().paths[index].attrs.d);
+    assert.equal(rail.attrs[attr('fillColor')].toLowerCase(), '#ffffff');
+  });
+});
+
+test('icon: production-vector previews preserve every rail under square, circle and squircle masks at 24–512px', async () => {
+  assert.ok(exists('verification/icon-preview.cjs'), 'Reproducible Android-vector preview renderer is missing');
+  const rendered = spawnSync(process.execPath, ['verification/icon-preview.cjs'], { cwd: root, encoding: 'utf8' });
+  assert.equal(rendered.status, 0, rendered.stderr);
+  const manifest = JSON.parse(read('verification/icon-previews.json'));
+  assert.deepEqual(manifest.adaptiveViewport, { x: 18, y: 18, size: 72, layerSize: 108 });
+  assert.equal(manifest.geometrySource, 'android/res/drawable/ic_launcher_foreground.xml');
+  const expected = [24, 32, 48, 64, 128, 512].flatMap(size => ['square', 'circle', 'squircle'].map(mask => `${mask}-${size}`));
+  assert.deepEqual(manifest.previews.map(p => `${p.mask}-${p.width}`), expected);
+  const crypto = require('node:crypto');
+  for (const preview of manifest.previews) {
+    const bytes = fs.readFileSync(path.join(root, preview.file));
+    assert.equal(crypto.createHash('sha256').update(bytes).digest('hex'), preview.sha256, preview.file);
+    const metadata = await sharp(bytes).metadata();
+    assert.equal(metadata.width, preview.width);
+    assert.equal(metadata.height, preview.width);
+    const { data, info } = await sharp(bytes).ensureAlpha().raw().toBuffer({ resolveWithObject: true });
+    const pixel = (x, y) => [...data.subarray((y * info.width + x) * 4, (y * info.width + x) * 4 + 4)];
+    assert.equal(pixel(0, 0)[3], preview.mask === 'square' ? 255 : 0);
+    assert.equal(pixel(Math.floor(info.width / 2), Math.floor(info.width / 2))[3], 255);
+    if (preview.width >= 128) {
+      const diagonalAlpha = pixel(Math.floor(info.width * .1), Math.floor(info.width * .1))[3];
+      assert.equal(diagonalAlpha, preview.mask === 'circle' ? 0 : 255, 'Mask must match circle vs exponent-4 squircle');
+    }
+    if (preview.width === 24) {
+      let cream = 0, lime = 0;
+      for (let i = 0; i < data.length; i += 4) {
+        if (data[i] > 200 && data[i + 1] > 200 && data[i + 2] > 190 && data[i + 3] > 200) cream++;
+        if (data[i] > 170 && data[i + 1] > 200 && data[i + 2] < 170 && data[i + 3] > 200) lime++;
+      }
+      assert.ok(cream >= 15 && lime >= 15, `Both rails must remain visible at 24px: cream=${cream}, lime=${lime}`);
+    }
+  }
+  const raw = async mask => sharp(path.join(root, `verification/icon-${mask}-512.png`)).ensureAlpha().raw().toBuffer();
+  const square = await raw('square');
+  for (const mask of ['circle', 'squircle']) {
+    const masked = await raw(mask);
+    let checked = 0;
+    for (let i = 0; i < square.length; i += 4) {
+      if (square[i] === 18 && square[i + 1] === 24 && square[i + 2] === 20) continue;
+      assert.deepEqual(masked.subarray(i, i + 4), square.subarray(i, i + 4), `${mask} must not clip any foreground pixel`);
+      checked++;
+    }
+    assert.ok(checked > 1000);
+  }
+  const sheet = await sharp(path.join(root, 'verification/icon-contact-sheet.png')).metadata();
+  assert.equal(sheet.width, 1320);
+  assert.equal(sheet.height, 1080);
+});
diff --git a/integrations/canvaslink/tests/owned-focus.test.cjs b/integrations/canvaslink/tests/owned-focus.test.cjs
new file mode 100644
index 000000000..789291011
--- /dev/null
+++ b/integrations/canvaslink/tests/owned-focus.test.cjs
@@ -0,0 +1,7 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const {focusOwnedWindow}=require('../host/owned-focus.cjs');
+function fixture(){let tick=0,focused=false,active=true,requests=0,renderer=0;return {app:{focus(){requests++;}},target:{isDestroyed:()=>false,isMinimized:()=>false,isFocused:()=>focused,show(){},focus(){},webContents:{focus(){renderer++;}}},active:()=>active,now:()=>tick,wait:async ms=>{tick+=ms;if(tick>=60)focused=true;},revoke(){active=false;},get requests(){return requests;},get renderer(){return renderer;}};}
+test('Own window activation can settle asynchronously before renderer input is focused',async()=>{const f=fixture();await focusOwnedWindow(f);assert.equal(f.requests,1);assert.equal(f.renderer,1);});
+test('Revocation while awaiting activation cannot focus the input renderer',async()=>{const f=fixture();f.wait=async()=>{f.revoke();};await assert.rejects(focusOwnedWindow(f),/session-ended/);assert.equal(f.renderer,0);});
+test('An unactivatable own window fails within the bounded wait',async()=>{const f=fixture();let tick=0;f.now=()=>tick;f.wait=async ms=>{tick+=ms;};await assert.rejects(focusOwnedWindow({...f,timeout:40}),/canvas-focus-required/);assert.equal(f.renderer,0);assert.equal(f.requests,1);});
+test('A child-window resignation can be followed by another bounded own activation',async()=>{const f=fixture();let tick=0;f.now=()=>tick;f.target.isFocused=()=>f.requests>=2;f.wait=async ms=>{tick+=ms;};await focusOwnedWindow(f);assert.equal(f.requests,2);assert.equal(f.renderer,1);});
diff --git a/integrations/canvaslink/tests/owned-pointer.test.cjs b/integrations/canvaslink/tests/owned-pointer.test.cjs
new file mode 100644
index 000000000..f7595688a
--- /dev/null
+++ b/integrations/canvaslink/tests/owned-pointer.test.cjs
@@ -0,0 +1,16 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const {OwnedPointer}=require('../host/owned-pointer.cjs');
+test('revocation releases both held buttons at their latest owned-renderer position',()=>{
+ const events=[],contents={isDestroyed:()=>false,sendInputEvent:e=>events.push(e)},p=new OwnedPointer();
+ p.send(contents,{type:'mouseDown',button:'left',x:1,y:2});p.send(contents,{type:'mouseDown',button:'right',x:1,y:2});
+ p.send(contents,{type:'mouseMove',button:'left',x:8,y:9,modifiers:['leftButtonDown']});p.release();p.release();
+ assert.deepEqual(events.slice(3).map(e=>[e.type,e.button,e.x,e.y,e.modifiers]),[['mouseUp','left',8,9,[]],['mouseUp','right',8,9,[]]]);
+});
+test('a released or destroyed target cannot receive a duplicate cancellation event',()=>{
+ const events=[];let destroyed=false;const contents={isDestroyed:()=>destroyed,sendInputEvent:e=>events.push(e)},p=new OwnedPointer();
+ p.send(contents,{type:'mouseDown',button:'left'});p.send(contents,{type:'mouseUp',button:'left'});p.release();assert.equal(events.length,2);
+ p.send(contents,{type:'mouseDown',button:'right'});destroyed=true;p.release();assert.equal(events.length,3);assert.equal(p.held.size,0);
+});
+test('failed mouseDown is never recorded as an applied press',()=>{
+ const p=new OwnedPointer();assert.throws(()=>p.send({sendInputEvent(){throw Error('closed');}},{type:'mouseDown',button:'left'}));assert.equal(p.held.size,0);
+});
diff --git a/integrations/canvaslink/tests/remote-select.test.cjs b/integrations/canvaslink/tests/remote-select.test.cjs
new file mode 100644
index 000000000..f316213f7
--- /dev/null
+++ b/integrations/canvaslink/tests/remote-select.test.cjs
@@ -0,0 +1,8 @@
+const {test}=require('node:test');
+const assert=require('node:assert/strict');
+const {openUI}=require('../scripts/ui-test-harness.cjs');
+const {selectPointerScript,closeSelectScript}=require('../host/remote-select.cjs');
+async function fixture(t){const ui=await openUI();t.after(()=>ui.browser.close());await ui.page.setContent('');await ui.page.evaluate(()=>{window.changes=0;document.querySelector('select').addEventListener('change',()=>changes++);});return ui;}
+test('Remote select renders options in the captured page and actual clicks dispatch change',async t=>{const ui=await fixture(t);assert.equal(await ui.page.evaluate(selectPointerScript(50,40)),true);assert.equal(await ui.page.getByRole('listbox').getByRole('option',{name:'B',exact:true}).isDisabled(),true);assert.equal(await ui.page.getByRole('listbox').locator('button').nth(2).isDisabled(),true);await ui.page.getByRole('listbox').getByRole('option',{name:'',exact:true}).click();assert.equal(await ui.page.locator('select').inputValue(),'');assert.equal(await ui.page.evaluate(()=>changes),1);assert.equal(await ui.page.getByRole('listbox').count(),0);});
+test('Remote select keys skip disabled options; Escape, outside tap and disconnect dismiss safely',async t=>{const ui=await fixture(t);await ui.page.evaluate(selectPointerScript(50,40));await ui.page.keyboard.press('ArrowDown');await ui.page.keyboard.press('Enter');assert.equal(await ui.page.locator('select').inputValue(),'');await ui.page.evaluate(selectPointerScript(50,40));await ui.page.keyboard.press('ArrowUp');await ui.page.keyboard.press('Escape');assert.equal(await ui.page.locator('select').inputValue(),'');await ui.page.evaluate(selectPointerScript(50,40));await ui.page.locator('#outside').click();assert.equal(await ui.page.getByRole('listbox').count(),0);await ui.page.evaluate(selectPointerScript(50,40));await ui.page.evaluate(closeSelectScript);assert.equal(await ui.page.getByRole('listbox').count(),0);assert.equal(await ui.page.evaluate(()=>changes),1);});
+test('Ordinary pointers and disabled selects retain normal browser handling',async t=>{const ui=await fixture(t);assert.equal(await ui.page.evaluate(selectPointerScript(600,400)),false);await ui.page.locator('select').evaluate(e=>e.disabled=true);assert.equal(await ui.page.evaluate(selectPointerScript(50,40)),false);});
diff --git a/integrations/canvaslink/tests/security.test.cjs b/integrations/canvaslink/tests/security.test.cjs
new file mode 100644
index 000000000..2007e7932
--- /dev/null
+++ b/integrations/canvaslink/tests/security.test.cjs
@@ -0,0 +1,71 @@
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+const srp = require('secure-remote-password/client');
+const crypto = require('node:crypto');
+const { Pairing, seal, open, USER, privateAddress } = require('../host/security.cjs');
+const { validateInput } = require('../host/native-input.cjs');
+function authenticate(p, pin=p.pin) {
+  const a=srp.generateEphemeral(); const start=p.start({A:a.public,name:'Synthetic Android'},'192.168.2.23');
+  const client=srp.deriveSession(a.secret,start.B,start.salt,USER,srp.derivePrivateKey(start.salt,USER,pin));
+  const finish=p.finish({id:start.id,proof:client.proof},'192.168.2.23');srp.verifySession(a.public,client,finish.proof);
+  const key=crypto.createHash('sha256').update(Buffer.from(client.key,'hex')).update('CanvasLink/channel/1').digest();
+  return {id:finish.id,key};
+}
+test('SRP mutual authentication, encrypted request/reply, one use PIN',()=>{
+  const p=new Pairing(),pin=p.pin,c=authenticate(p);
+  assert.equal(p.pin,'');assert.throws(()=>authenticate(p,pin));
+  const packet=seal(c.key,c.id,1,'request',{type:'poll'});
+  const response=p.receive(packet,'192.168.2.23',()=>({ok:true}));
+  assert.deepEqual(open(c.key,c.id,response,'response'),{ok:true});
+  assert.throws(()=>p.receive(packet,'192.168.2.23',()=>({ok:true})),/unauthorized/);
+});
+test('wrong PIN, expiration, host revocation and address changes fail closed',()=>{
+  let now=1000;const p=new Pairing({now:()=>now});
+  assert.throws(()=>authenticate(p,p.pin==='000000'?'000001':'000000'));
+  now+=120001;assert.throws(()=>authenticate(p));
+  p.rotate();const c=authenticate(p),packet=seal(c.key,c.id,1,'request',{type:'poll'});
+  assert.throws(()=>p.receive(packet,'192.168.2.99',()=>({ok:true})));
+  p.rotate();assert.throws(()=>p.receive(packet,'192.168.2.23',()=>({ok:true})));
+});
+test('tampering, reflection and untrusted input do not become actions',()=>{
+  const p=new Pairing(),c=authenticate(p),packet=seal(c.key,c.id,1,'request',{type:'poll'});
+  let calls=0;const corrupt={...packet,data:Buffer.alloc(80).toString('base64')};
+  assert.throws(()=>p.receive(corrupt,'192.168.2.23',()=>{calls++;}));assert.equal(calls,0);
+  assert.throws(()=>open(c.key,c.id,packet,'response'));
+  for(const input of [{type:'exec',command:'sh'},{type:'text',text:'x'.repeat(8001)},{type:'pointer',x:2,y:0,button:0,action:'down'},{type:'key',key:'unknown',modifiers:[]}])assert.throws(()=>validateInput(input));
+  validateInput({type:'text',text:'Проверка'});
+});
+test('only private IPv4 and loopback peers are accepted',()=>{
+  for(const a of ['127.0.0.1','::1','::ffff:192.168.2.23','10.1.2.3','172.31.2.3'])assert.equal(privateAddress(a),true);
+  for(const a of ['8.8.8.8','192.168.999.1','example.com','172.32.2.3',''])assert.equal(privateAddress(a),false);
+});
+test('pairing attempts are globally bounded, not reset by a new peer address',()=>{
+  const p=new Pairing();for(let i=0;i<5;i++)assert.throws(()=>authenticate(p,p.pin==='000000'?'000001':'000000'));
+  assert.throws(()=>authenticate(p),/pairing-closed/);
+  p.rotate();const ephemeral=srp.generateEphemeral();for(let i=0;i<30;i++)p.start({A:ephemeral.public,name:'Synthetic'},'192.168.2.'+(i+1));
+  assert.throws(()=>p.start({A:ephemeral.public,name:'Synthetic'},'192.168.2.99'),/pairing-closed/);
+});
+test('counter gaps after Android crash are accepted; old replies and expired sessions are not',()=>{
+  let now=1000;const p=new Pairing({now:()=>now}),c=authenticate(p);
+  const packet=seal(c.key,c.id,10001,'request',{type:'poll'});
+  const response=p.receive(packet,'192.168.2.23',()=>({ok:true}));assert.equal(response.seq,10001);
+  assert.throws(()=>p.receive(seal(c.key,c.id,2,'request',{}),'192.168.2.23',()=>({})),/unauthorized/);
+  now+=12*3600000;
+  assert.throws(()=>p.receive(seal(c.key,c.id,10002,'request',{}),'192.168.2.23',()=>({})),/unauthorized/);
+});
+test('Expired sessions revoke live access once, including without a client request',()=>{
+  let now=1000;const revoked=[];
+  const p=new Pairing({now:()=>now,onRevoke:id=>{assert.equal(p.sessions.has(id),false);revoked.push(id);}}),c=authenticate(p);
+  now+=12*3600000-1;p.expire();assert.deepEqual(revoked,[]);
+  now++;p.expire();p.expire();p.rotate();
+  assert.deepEqual(revoked,[c.id]);assert.equal(p.sessions.size,0);
+});
+test('Neither requests nor queued signals retain expired sessions',()=>{
+  for(const operation of ['request','queue']){
+    let now=1000;const revoked=[],p=new Pairing({now:()=>now,onRevoke:id=>revoked.push(id)}),c=authenticate(p);
+    now+=12*3600000;
+    if(operation==='request')assert.throws(()=>p.receive(seal(c.key,c.id,1,'request',{}),'192.168.2.23',()=>assert.fail('expired operation executed')),/unauthorized/);
+    else p.queue(c.id,{type:'offer',sdp:'expired'});
+    assert.deepEqual(revoked,[c.id]);assert.equal(p.sessions.size,0);
+  }
+});
diff --git a/integrations/canvaslink/tests/settings-host.test.cjs b/integrations/canvaslink/tests/settings-host.test.cjs
new file mode 100644
index 000000000..20a06e076
--- /dev/null
+++ b/integrations/canvaslink/tests/settings-host.test.cjs
@@ -0,0 +1,26 @@
+const {test}=require('node:test'),assert=require('node:assert/strict');
+const {installSettingsHost}=require('../host/settings-host.cjs');
+function fixture(command=async action=>action){
+ const handlers=new Map(),mainFrame={},contents={mainFrame},target={webContents:contents,isDestroyed:()=>false};
+ installSettingsHost({ipcMain:{handle:(name,handler)=>handlers.set(name,handler)},getWindow:()=>target,snapshot:()=>({enabled:false}),command});
+ return {handlers,target,event:{sender:contents,senderFrame:mainFrame}};
+}
+test('Settings state and commands reject other renderers, child frames and unknown actions',()=>{
+ const f=fixture();for(const channel of ['canvaslink-settings:state','canvaslink-settings:command']){
+  for(const event of [{sender:{},senderFrame:f.event.senderFrame},{sender:f.event.sender,senderFrame:{}}])assert.throws(()=>f.handlers.get(channel)(event,'enable'),/untrusted-settings-renderer/);
+ }
+ assert.throws(()=>f.handlers.get('canvaslink-settings:command')(f.event,'shell'),/invalid-settings-command/);
+ assert.deepEqual(f.handlers.get('canvaslink-settings:state')(f.event),{enabled:false});
+});
+test('Settings operations are serialized and a failed enable does not block later commands',async()=>{
+ const order=[];let release;const gate=new Promise(resolve=>release=resolve);
+ const f=fixture(async action=>{order.push(action);if(action==='enable'){await gate;throw Error('bind failed');}return action;});
+ const command=f.handlers.get('canvaslink-settings:command');const first=command(f.event,'enable'),second=command(f.event,'disable');
+ await new Promise(resolve=>setImmediate(resolve));assert.deepEqual(order,['enable']);release();await assert.rejects(first,/bind failed/);assert.equal(await second,'disable');assert.deepEqual(order,['enable','disable']);
+});
+test('A queued settings operation cannot execute after its owning window closes',async()=>{
+ let release;const gate=new Promise(resolve=>release=resolve),order=[];
+ const f=fixture(async action=>{order.push(action);if(action==='enable')await gate;});const command=f.handlers.get('canvaslink-settings:command');
+ const first=command(f.event,'enable'),second=command(f.event,'disable');await new Promise(resolve=>setImmediate(resolve));
+ f.target.isDestroyed=()=>true;release();await first;await assert.rejects(second,/untrusted-settings-renderer/);assert.deepEqual(order,['enable']);
+});
diff --git a/integrations/canvaslink/tests/settings-touch.test.cjs b/integrations/canvaslink/tests/settings-touch.test.cjs
new file mode 100644
index 000000000..99dd465b0
--- /dev/null
+++ b/integrations/canvaslink/tests/settings-touch.test.cjs
@@ -0,0 +1,39 @@
+const {test}=require('node:test');
+const assert=require('node:assert/strict');
+const {openUI}=require('../scripts/ui-test-harness.cjs');
+const {focusScript}=require('../host/focus.cjs');
+test('Only actual text inputs are editable; Settings controls do not summon a text editor',async t=>{
+ const ui=await openUI();t.after(()=>ui.browser.close());
+ await ui.page.setContent('
x
');
+ for(const [id,editable]of Object.entries({range:false,check:false,color:false,file:false,select:false,button:false,text:true,password:true,area:true,readonly:false,rich:true})){
+  await ui.page.locator('#'+id).focus();const value=await ui.page.evaluate(focusScript);assert.equal(value.editable,editable,id);assert.equal(value.surface,'settings');assert.ok(value.dragRects.length===1);
+ }
+});
+test('Screen arrows, Enter, Esc and Ctrl work after selecting a nontext control',async t=>{
+ const ui=await openUI({connected:true,touch:true,width:390,height:844});t.after(()=>ui.browser.close());
+ await ui.page.evaluate(()=>__uiFixture.configure({focus:{kind:'control',editable:false,surface:'settings'}}));await ui.page.locator('#viewport').click();
+ assert.equal(await ui.page.evaluate(()=>CanvasLinkInput.active()),false);
+ for(const key of ['ArrowDown','Enter','Escape'])await ui.page.locator('[data-key='+key+']').click();
+ await ui.page.locator('#ctrl').click();await ui.page.locator('[data-key=c]').click();
+ const keys=await ui.page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='input'&&c.input.type==='key').map(c=>c.input));
+ assert.deepEqual(keys.map(c=>c.key),['ArrowDown','Enter','Escape','c']);assert.deepEqual(keys[3].modifiers,['control']);
+ assert.equal(await ui.page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='show-keyboard').length),0);
+});
+test('Ctrl+V remains visible without horizontal scrolling on a narrow phone',async t=>{
+ const ui=await openUI({connected:true,width:320,height:640});t.after(()=>ui.browser.close());
+ const r=await ui.page.locator('#paste').boundingBox();assert.ok(r.x>=0&&r.x+r.width<=320);assert.equal(await ui.page.locator('#paste').textContent(),'Ctrl+V');
+ await ui.page.locator('#paste').click();assert.match(await ui.page.locator('#input-status').textContent(),/коснитесь.*поля/);assert.equal(await ui.page.evaluate(()=>__uiFixture.calls.filter(c=>c.type==='input').length),0);
+});
+test('A Settings text field preserves context instead of terminal-style zoom',async t=>{
+ const ui=await openUI({connected:true,touch:true});t.after(()=>ui.browser.close());
+ await ui.page.evaluate(()=>__uiFixture.configure({focus:{editable:true,kind:'text-field',surface:'settings',rect:{x:.7,y:.5,width:.08,height:.03}}}));
+ await ui.page.locator('#viewport').click();const zoom=parseInt(await ui.page.locator('#zoom-label').textContent());assert.ok(zoom>=100&&zoom<=400);assert.equal(await ui.page.evaluate(()=>CanvasLinkInput.active()),true);
+});
+test('Text fields remain readable with IME and restore overview when editing ends',async t=>{
+ const ui=await openUI({connected:true,touch:true,width:1280,height:800});t.after(()=>ui.browser.close());
+ await ui.page.evaluate(()=>__uiFixture.configure({focus:{editable:true,kind:'text-field',surface:'settings',fontSize:12,rect:{x:.35,y:.68,width:.21,height:.033},contextRect:{x:.34,y:.67,width:.45,height:.14}}}));
+ await ui.page.locator('#viewport').click();await ui.page.setViewportSize({width:1280,height:320});await ui.page.waitForTimeout(100);
+ const geometry=await ui.page.evaluate(()=>{const v=document.getElementById('video'),r=v.getBoundingClientRect();return {font:12*Math.min(r.width/v.videoWidth,r.height/v.videoHeight),scale:new DOMMatrix(getComputedStyle(v).transform).a};});
+ assert.ok(geometry.font>=12,JSON.stringify(geometry));assert.ok(geometry.scale<=4);
+ await ui.page.evaluate(()=>CanvasLinkInput.stop());assert.equal(await ui.page.locator('#zoom-label').textContent(),'100%');
+});
diff --git a/integrations/canvaslink/tests/transport-recovery.test.cjs b/integrations/canvaslink/tests/transport-recovery.test.cjs
new file mode 100644
index 000000000..76d91cff0
--- /dev/null
+++ b/integrations/canvaslink/tests/transport-recovery.test.cjs
@@ -0,0 +1,78 @@
+const {test}=require('node:test'),assert=require('node:assert/strict'),vm=require('node:vm'),fs=require('node:fs'),path=require('node:path');
+const source=fs.readFileSync(path.join(__dirname,'../android/assets/transport.js'),'utf8');
+function client({remoteDescription}={}){
+ const signals=[],sent=[],peers=[],intervals=[],events=new Map(),frames=new Map();let frameId=0;
+ class Peer{
+  constructor(){peers.push(this);this.connectionState='new';this.iceGatheringState='complete';}
+  async setRemoteDescription(value){if(remoteDescription)await remoteDescription(value);} async createAnswer(){return {type:'answer',sdp:'local'};} async setLocalDescription(value){this.localDescription=value;} close(){this.closed=true;}
+ }
+ const context={window:{},document:{hidden:false,addEventListener:(type,handler)=>events.set(type,handler)},Native:{signal:json=>signals.push(JSON.parse(json)),disconnect(){},diagnostics(){},discover(){},restore(){},loadDraft(){}},CanvasLinkDelivery:{Delivery:class{close(){}send(value){sent.push(value);return Promise.resolve();}receive(){}}},RTCPeerConnection:Peer,setInterval:fn=>intervals.push(fn),setTimeout(){},requestAnimationFrame:fn=>{frames.set(++frameId,fn);return frameId;},cancelAnimationFrame:id=>frames.delete(id),performance:{now:()=>1}};
+ vm.runInNewContext(source,context);return {...context,signals,sent,peers,intervals,events,frames,receive:context.window.CanvasLink.receive,api:context.window.CanvasLinkClient};
+}
+test('Successful encrypted polling after an outage retries signalling without replaying input',()=>{
+ const c=client();c.receive({type:'paired',value:{host:'192.168.2.22:3497'}});c.receive({type:'network',value:'offline'});
+ c.receive({type:'network-restored',value:true});assert.deepEqual(c.signals,[{type:'ping'}]);assert.deepEqual(c.sent,[]);
+});
+test('Network recovery cannot resume an unpaired or background client',()=>{
+ const c=client();c.receive({type:'network-restored',value:true});c.receive({type:'paired',value:{host:'local'}});c.document.hidden=true;c.receive({type:'network-restored',value:true});assert.deepEqual(c.signals,[]);
+});
+test('An existing open data channel that recovers clears reconnecting status',async()=>{
+ const c=client();c.receive({type:'paired',value:{host:'local'}});c.receive({type:'signal',value:{type:'offer',sdp:'remote'}});await new Promise(resolve=>setImmediate(resolve));
+ const p=c.peers[0],channel={readyState:'open'};p.ondatachannel({channel});channel.onopen();c.receive({type:'network',value:'offline'});assert.equal(c.api.getState().connection,'reconnecting');
+ p.connectionState='connected';p.onconnectionstatechange();assert.equal(c.api.getState().connection,'connected');assert.equal(c.api.getState().error,'');
+});
+test('Closing a peer clears its video counters and target status before reconnect',async()=>{
+ const c=client();c.receive({type:'paired',value:{host:'local'}});c.receive({type:'signal',value:{type:'offer',sdp:'remote'}});await new Promise(resolve=>setImmediate(resolve));
+ const peer=c.peers[0],channel={readyState:'open',send(){}};peer.ondatachannel({channel});channel.onopen();
+ channel.onmessage({data:JSON.stringify({type:'source-state',capture:'active',windowFocused:true,target:'terminal'})});
+ peer.getStats=async()=>new Map([['video',{type:'inbound-rtp',kind:'video',framesDecoded:17}]]);await c.intervals[0]();
+ assert.equal(c.api.getState().stats.framesDecoded,17);assert.equal(c.api.getState().source.target,'terminal');
+ c.receive({type:'signal',value:{type:'disconnect'}});
+ assert.equal(c.api.getState().source,null);assert.equal(Object.keys(c.api.getState().stats).length,0);
+ assert.equal(Object.keys(c.window.CanvasLink.stats).length,0);
+});
+test('Video feedback reports zero before decoding and the current peer frame count after decoding',async()=>{
+ const c=client();c.receive({type:'paired',value:{host:'local'}});c.receive({type:'signal',value:{type:'offer',sdp:'remote'}});await new Promise(resolve=>setImmediate(resolve));
+ const packets=[],p=c.peers[0],channel={readyState:'open',bufferedAmount:0,send:s=>packets.push(JSON.parse(s))};p.ondatachannel({channel});channel.onopen();
+ p.getStats=async()=>new Map([['v',{type:'inbound-rtp',kind:'video',framesDecoded:7}]]);
+ await c.intervals[0]();await c.intervals[0]();assert.equal(packets[0].videoFrames,0);assert.equal(packets[1].videoFrames,7);
+ c.receive({type:'signal',value:{type:'offer',sdp:'new'}});await new Promise(resolve=>setImmediate(resolve));
+ const fresh=c.peers[1];fresh.ondatachannel({channel});fresh.getStats=async()=>new Map();await c.intervals[0]();assert.equal(packets.at(-1).videoFrames,0);
+});
+test('Late offers cannot reopen an unpaired, explicitly disconnected or hidden client',async()=>{
+ for(const status of ['unpaired','disconnected','hidden']){
+  const c=client();if(status!=='unpaired')c.receive({type:'paired',value:{host:'local'}});
+  if(status==='disconnected')c.api.disconnect();
+  if(status==='hidden'){c.document.hidden=true;c.events.get('visibilitychange')();}
+  const before=c.api.getState().connection;
+  c.receive({type:'signal',value:{type:'offer',sdp:'late'}});await new Promise(resolve=>setImmediate(resolve));
+  assert.equal(c.peers.length,0,status);assert.equal(c.api.getState().connection,before);
+  c.receive({type:'signal',value:{type:'disconnect'}});assert.equal(c.api.getState().connection,before);
+ }
+});
+test('A rejected old negotiation cannot replace the new connected peer status',async()=>{
+ let rejectOld;const c=client({remoteDescription:value=>value.sdp==='old'?new Promise((resolve,reject)=>rejectOld=reject):undefined});
+ c.receive({type:'paired',value:{host:'local'}});c.receive({type:'signal',value:{type:'offer',sdp:'old'}});
+ c.receive({type:'signal',value:{type:'offer',sdp:'new'}});await new Promise(resolve=>setImmediate(resolve));
+ const fresh=c.peers[1],channel={readyState:'open'};fresh.ondatachannel({channel});channel.onopen();
+ rejectOld(Error('old-peer-closed'));await new Promise(resolve=>setImmediate(resolve));
+ assert.equal(c.api.getState().connection,'connected');assert.equal(c.api.getState().error,'');assert.equal(fresh.closed,undefined);
+ assert.equal(c.signals.filter(value=>value.type==='answer').length,1);
+});
+test('Closing a session discards buffered pointer motion before any new peer',()=>{
+ const c=client();c.receive({type:'paired',value:{host:'local'}});
+ c.api.sendInput({type:'pointer',action:'move',x:.5,y:.5,button:0});assert.equal(c.frames.size,1);
+ c.api.disconnect();for(const fn of c.frames.values())fn();
+ assert.deepEqual(c.sent,[]);assert.equal(c.frames.size,0);
+});
+test('A delayed native pairing callback cannot undo explicit disconnect',async()=>{
+ const c=client();c.api.disconnect();
+ c.receive({type:'paired',value:{host:'old-host'}});c.receive({type:'signal',value:{type:'offer',sdp:'old'}});
+ await new Promise(resolve=>setImmediate(resolve));assert.equal(c.peers.length,0);assert.equal(c.api.getState().connection,'idle');
+});
+test('A negotiation completing after disconnect sends no answer',async()=>{
+ let resolveOld;const c=client({remoteDescription:()=>new Promise(resolve=>resolveOld=resolve)});
+ c.receive({type:'paired',value:{host:'local'}});c.receive({type:'signal',value:{type:'offer',sdp:'old'}});
+ c.api.disconnect();resolveOld();await new Promise(resolve=>setImmediate(resolve));
+ assert.deepEqual(c.signals,[]);assert.equal(c.api.getState().connection,'idle');
+});
diff --git a/integrations/canvaslink/verification/icon-preview.cjs b/integrations/canvaslink/verification/icon-preview.cjs
new file mode 100644
index 000000000..ba5aa6f52
--- /dev/null
+++ b/integrations/canvaslink/verification/icon-preview.cjs
@@ -0,0 +1,128 @@
+'use strict';
+// SPDX-License-Identifier: MIT
+// Offline renderer. Uses only the supplied installed sharp; does not start a browser or device.
+const fs = require('node:fs');
+const path = require('node:path');
+const crypto = require('node:crypto');
+const { spawnSync } = require('node:child_process');
+const sharp = require(process.env.CANVASLINK_SHARP || 'sharp');
+const root = path.resolve(__dirname, '..');
+const out = __dirname;
+const geometrySource = 'android/res/drawable/ic_launcher_foreground.xml';
+const read = file => fs.readFileSync(path.join(root, file), 'utf8');
+const sha256 = bytes => crypto.createHash('sha256').update(bytes).digest('hex');
+
+function parse(text) {
+  const result = spawnSync('python3', ['-c',
+    'import sys,json,xml.etree.ElementTree as E\nr=E.fromstring(sys.stdin.read())\nprint(json.dumps([{"tag":e.tag,"attrs":e.attrib,"text":e.text} for e in r.iter()]))'],
+  { input: text, encoding: 'utf8' });
+  if (result.status !== 0) throw new Error(result.stderr);
+  return JSON.parse(result.stdout);
+}
+
+const android = name => `{http://schemas.android.com/apk/res/android}${name}`;
+const rails = parse(read(geometrySource)).filter(n => n.tag === 'path').map(n => ({
+  fill: n.attrs[android('fillColor')], d: n.attrs[android('pathData')]
+}));
+const background = parse(read('android/res/values/colors.xml')).find(n => n.attrs.name === 'icon_background').text.trim();
+const pathTags = (tint = null) => rails.map(p => ``).join('');
+
+function maskShape(mask) {
+  if (mask === 'circle') return '';
+  if (mask === 'square') return '';
+  if (mask !== 'squircle') throw new Error(`Unknown mask: ${mask}`);
+  const points = [];
+  for (let i = 0; i <= 256; i++) {
+    const t = i / 256 * Math.PI * 2, c = Math.cos(t), s = Math.sin(t);
+    const x = 54 + 36 * Math.sign(c) * Math.sqrt(Math.abs(c));
+    const y = 54 + 36 * Math.sign(s) * Math.sqrt(Math.abs(s));
+    points.push(`${i ? 'L' : 'M'}${x.toFixed(6)} ${y.toFixed(6)}`);
+  }
+  return ``;
+}
+
+function maskedSvg(size, mask, tint = null, bg = background) {
+  return Buffer.from(`${maskShape(mask)}${pathTags(tint)}`);
+}
+
+async function safeZoneMetrics() {
+  const image = Buffer.from(`${pathTags()}`);
+  const { data, info } = await sharp(image).ensureAlpha().raw().toBuffer({ resolveWithObject: true });
+  let radius = 0, minX = 108, minY = 108, maxX = 0, maxY = 0;
+  for (let y = 0; y < info.height; y++) for (let x = 0; x < info.width; x++) {
+    if (data[(y * info.width + x) * 4 + 3] < 128) continue;
+    const px = (x + .5) / 10, py = (y + .5) / 10;
+    radius = Math.max(radius, Math.hypot(px - 54, py - 54));
+    minX = Math.min(minX, px); maxX = Math.max(maxX, px);
+    minY = Math.min(minY, py); maxY = Math.max(maxY, py);
+  }
+  return { samplePixelsPerDp: 10, alphaThreshold: 128, maxRadiusDp: +radius.toFixed(4), safeRadiusDp: 33,
+    boundsDp: { minX, minY, maxX, maxY } };
+}
+
+async function main() {
+  const previews = [];
+  const images = new Map();
+  for (const size of [24, 32, 48, 64, 128, 512]) for (const mask of ['square', 'circle', 'squircle']) {
+    const png = await sharp(maskedSvg(size, mask)).png().toBuffer();
+    const file = `verification/icon-${mask}-${size}.png`;
+    fs.writeFileSync(path.join(root, file), png);
+    images.set(`${mask}-${size}`, png);
+    previews.push({ file, mask, width: size, height: size, sha256: sha256(png) });
+  }
+  const themed = await sharp(maskedSvg(128, 'circle', '#213216', '#d6ef88')).png().toBuffer();
+  fs.writeFileSync(path.join(out, 'icon-monochrome-128.png'), themed);
+  const sourcePreview = await sharp(path.join(root, 'design/canvaslink-icon.svg')).resize(512, 512).png().toBuffer();
+  fs.writeFileSync(path.join(out, 'icon-source-square-512.png'), sourcePreview);
+  const safeSvg = Buffer.from(`${pathTags()}`);
+  const safeZone = await sharp(safeSvg).png().toBuffer();
+  fs.writeFileSync(path.join(out, 'icon-safe-zone.png'), safeZone);
+
+  const labels = [];
+  const overlays = [];
+  const text = (x, y, value, size = 16, color = '#95a592', weight = 400) => `${value}`;
+  labels.push(text(60, 65, 'CanvasLink', 36, '#edf1e6', 600));
+  labels.push(text(60, 101, 'LINKED WINDOWS / ORIGINAL VECTOR MARK', 13, '#a9bc9c', 500));
+  for (const [index, mask] of ['square', 'circle', 'squircle'].entries()) {
+    const left = 60 + index * 416;
+    labels.push(text(left, 145, `${String(index + 1).padStart(2, '0')} / ${mask.toUpperCase()}`, 13, '#d6ef88', 600));
+    overlays.push({ input: await sharp(images.get(`${mask}-512`)).resize(320, 320).toBuffer(), left: left + 16, top: 170 });
+    labels.push(text(left, 530, mask === 'square' ? 'Remote window + touch surface' : mask === 'circle' ? 'Circle mask / no critical clipping' : 'Exponent-4 squircle / no clipping', 15, '#edf1e6'));
+    labels.push(text(left, 621, 'SMALL-SIZE CHECK / 1x', 12, '#a9bc9c', 500));
+    for (const [i, size] of [24, 32, 48, 64].entries()) {
+      const center = left + [36, 104, 188, 292][i];
+      overlays.push({ input: images.get(`${mask}-${size}`), left: center - size / 2, top: 688 - size / 2 });
+      labels.push(text(center - 9, 750, String(size), 13));
+    }
+  }
+  labels.push('');
+  overlays.push({ input: themed, left: 60, top: 844 });
+  labels.push(text(216, 878, 'API 33+ / THEMED SILHOUETTE', 13, '#d6ef88', 600));
+  labels.push(text(216, 910, 'Same geometry; launcher chooses the tint.', 16, '#edf1e6'));
+  labels.push(text(216, 940, 'Example colors, not a device capture.', 13));
+  overlays.push({ input: safeZone, left: 1044, top: 819 });
+  labels.push(text(696, 873, '108dp layer / 72dp viewport', 16, '#edf1e6'));
+  labels.push(text(696, 905, '66dp critical safe circle', 16, '#d6ef88'));
+  labels.push(text(696, 937, 'Filled rails / no text / no effects', 13));
+  labels.push(text(60, 1039, 'OFFLINE ANDROID-VECTOR RENDERS / 24–512px / NO DEVICE INSTALL', 12));
+  const sheetSvg = Buffer.from(`${labels.join('')}`);
+  const sheet = await sharp(sheetSvg).composite(overlays).png().toBuffer();
+  fs.writeFileSync(path.join(out, 'icon-contact-sheet.png'), sheet);
+  const manifest = {
+    geometrySource,
+    sourceSvg: 'design/canvaslink-icon.svg',
+    sourceSha256: sha256(fs.readFileSync(path.join(root, 'design/canvaslink-icon.svg'))),
+    vectorSha256: sha256(fs.readFileSync(path.join(root, geometrySource))),
+    adaptiveViewport: { x: 18, y: 18, size: 72, layerSize: 108 },
+    safeZone: await safeZoneMetrics(),
+    maskNote: 'Circle and exponent-4 superellipse are geometric preview masks, not OEM launcher captures.',
+    license: 'MIT; original project-specific geometry, no third-party artwork or fonts embedded.',
+    renderer: { sharp: sharp.versions.sharp, librsvg: sharp.versions.rsvg },
+    previews,
+    contactSheet: { file: 'verification/icon-contact-sheet.png', width: 1320, height: 1080, sha256: sha256(sheet) }
+  };
+  fs.writeFileSync(path.join(out, 'icon-previews.json'), JSON.stringify(manifest, null, 2) + '\n');
+  console.log(JSON.stringify({ previews: previews.length, sheet: manifest.contactSheet.file, safeZone: manifest.safeZone }));
+}
+
+main().catch(error => { console.error(error.message); process.exitCode = 1; });
diff --git a/package-lock.json b/package-lock.json
index d8b21c057..5a4575779 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -10,10 +10,12 @@
       "hasInstallScript": true,
       "license": "MIT",
       "workspaces": [
-        "integrations/even-g2"
+        "integrations/even-g2",
+        "integrations/canvaslink"
       ],
       "dependencies": {
         "@xterm/headless": "6.0.0",
+        "bonjour-service": "1.3.0",
         "electron-updater": "6.8.9",
         "hast-util-to-jsx-runtime": "2.3.6",
         "lowlight": "3.3.0",
@@ -48,6 +50,19 @@
         "vite": "7.3.6"
       }
     },
+    "integrations/canvaslink": {
+      "name": "@canvastty/canvaslink",
+      "version": "0.3.0-alpha.1",
+      "license": "MIT",
+      "dependencies": {
+        "bonjour-service": "1.3.0",
+        "secure-remote-password": "0.3.1"
+      },
+      "devDependencies": {
+        "playwright": "1.64.0",
+        "sharp": "0.35.5"
+      }
+    },
     "integrations/even-g2": {
       "name": "canvastty-even-g2",
       "version": "0.5.6",
@@ -527,6 +542,10 @@
         "node": ">=6.9.0"
       }
     },
+    "node_modules/@canvastty/canvaslink": {
+      "resolved": "integrations/canvaslink",
+      "link": true
+    },
     "node_modules/@electron-internal/extract-zip": {
       "version": "1.0.5",
       "resolved": "https://registry.npmjs.org/@electron-internal/extract-zip/-/extract-zip-1.0.5.tgz",
@@ -844,6 +863,17 @@
         "node": ">=14.14"
       }
     },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.11.3",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.11.3.tgz",
+      "integrity": "sha512-Xz4Tpyki7XyrpbUK1jR1AhdAdaXyhhY4lZ3neLodmhpuWfy2PAQN5B46sAiU4liOXGLkHypn/qU+jvfWSCYYLA==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
     "node_modules/@esbuild/aix-ppc64": {
       "version": "0.25.12",
       "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.25.12.tgz",
@@ -1313,6 +1343,533 @@
         "url": "https://github.com/sponsors/ayuhito"
       }
     },
+    "node_modules/@img/colour": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.1.0.tgz",
+      "integrity": "sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.35.5.tgz",
+      "integrity": "sha512-QRUlFQ0WxvdWyqqG/WtI3iupfD5rBzmCHXSdPsY91sAtVtTo7Q4cb6zOccZ3gqEqkr0f1As1ehLqmEpDsRf+lg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-darwin-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.35.5.tgz",
+      "integrity": "sha512-+BR255RhDlpygUpOc/Jdt1nT6DQ3XG/ERo5wbcdOf5Q320dKtPCKPLR1LJs9VGXRaMa8l1uUa0tkCNOXiAxZUw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-freebsd-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-freebsd-wasm32/-/sharp-freebsd-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Y/z91nEZ4uIBX5X3nfTovjU9lHNKFYbL2lpHCLVNmXQK03VIZvXBBt0KxbPGp2SdGSF+2mQU4e+hQaWOt86iAw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.3.4.tgz",
+      "integrity": "sha512-5R89nBYiRdUlSWJxPhO+GVtaXzXSxKnRu/xqMn3KTA3L9EB9Oy/P+Nn2f2vlhPuUdy/Zusb2DarbyTpGCfEDuw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.3.4.tgz",
+      "integrity": "sha512-iR2OKH80yi0U+dUplyh3/xdpFvps6YkCwsXenIJxqxR1v9o+xtKTGbS9H7cps+2Vxjc8B1j96p75NmTGjIhtpQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.3.4.tgz",
+      "integrity": "sha512-LmRtTsOHuvM2+wlO2Db37dx5MiZhB0FvSunciw48YjdOkZz9KAiRbm8ujeMOA1INqmei5NapFxYEK1D1ZSidmw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.3.4.tgz",
+      "integrity": "sha512-Y3dgX/6lE2QhQb+Gxy0WZxfg9MEm/JBjamZpS2IklP7xIQoKN4hzAm7KcMVGtaVDt3neE9OKBC7vAfonA/Lr1A==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-ppc64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.3.4.tgz",
+      "integrity": "sha512-Le6boB8Tai0Nis+gIxIpKx68UDVVIqdR8Tin5Yf1z2LJJQLDJvCDRqRu+jC2qCoD+eIomonmOwB4smBRxfVpYQ==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-riscv64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.3.4.tgz",
+      "integrity": "sha512-aHkkIEHPRdQEegJN20MLmGtxYD9R2wQr3Cwpddnu5+YKMt6Uzax7S9h5gpZTo8wyrGuZSlfQ63OevL5mTyOC7Q==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-s390x": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.3.4.tgz",
+      "integrity": "sha512-ra/mB6MikESDUO7Yg+Mi95bFBb9GsObURuhnOv3OqknjGe9sZrG8tCe9q0xSIGrtLgvgw0gKnFWcK4blSgQOuQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.3.4.tgz",
+      "integrity": "sha512-GJ//SSXbnwSDes02umB3nDJLFcQzw8a18V8fyhqr6tV515tOEMdImjjxj1AoafMRz56F3PHgftnj1QEKSU1zkw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.3.4.tgz",
+      "integrity": "sha512-hvulFwtjUcagsis6BBxHwGFwWoNZjgYmULGVrZcyfNbjA8hKILbRxGg15/7w5HDyXHXUos/j6baAWqnCyQ2DWA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.3.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.3.4.tgz",
+      "integrity": "sha512-6zXKeE/p39I1AmA3cJG35eyBGNqNddLnUXjhwBnsGjFPWqf5VKkDBEqaEkPDoTEtkxwi2vv8Tcr2mDyP4So7Fg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.35.5.tgz",
+      "integrity": "sha512-LEaXK2WdXVK5ykcw0buWyPMsmLLL2vpHLD6yrNSW+JGEL3BZPA4tpKN6iaMc4AxTTAoaX/sU1rOL51lcIz48ZQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.35.5.tgz",
+      "integrity": "sha512-LYVx5JTsOM2CBzmxreh+nl64/3H6Xb09iSLknqH47z2T2DFFxDeFLP5y4dJwe6H7uGQlHPyEEtIqyo3DYsRwdQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-ppc64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.35.5.tgz",
+      "integrity": "sha512-QVxAAq8evVRI9ia2vqgwrmWucn5Dfv+JdWzj75pD8omHLPSP7f8p20O8jxzjCcuCEQEOtYOZUmX1hkiZ0kdevA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-ppc64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-riscv64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.35.5.tgz",
+      "integrity": "sha512-LtdreXguaavKODPIfzJ4kffx7UNt1omwtK0rch4EBbbSTXPnxWmYSayXdLJw0fJzQ97kHt1gL/yh4tvU+nCyRQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-riscv64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-s390x": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.35.5.tgz",
+      "integrity": "sha512-UZasTOFiYzotTsGOCu42BfUzP6Tu6Do/947iRm1RsLKvlllxwGcn4RN27LibGWceix4Y+Pmw3jsnTcCQIgWjqA==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-s390x": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.35.5.tgz",
+      "integrity": "sha512-SxFtLTeJInhAA9Q836kux2vZNeOBQEx658qvbboZScr0wIARym3IcGmW7KpVD5sbVg0Ojy+udFQdayYIZyoNog==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.35.5.tgz",
+      "integrity": "sha512-9HbMclmI1zlNkFRs3z9/eBtDjfD0sGlrX1z6b1qwmiFY5ElDLh4BC0LPBdVp7z1DXFiKlIcznf+ZlsuZzLxQqg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.35.5.tgz",
+      "integrity": "sha512-4KOphqB035HrVdqLZfCgMzzERrQkkzOwRhl4OAkRO1YCldbaFjySXMaK534Mo0V+LndnlJk+sbUyLeU0ULyD1A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4"
+      }
+    },
+    "node_modules/@img/sharp-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.35.5.tgz",
+      "integrity": "sha512-Ptsga1su4tQx+LLF1ECS9U6nz5kmrXKo6XVbtR48Ke3ZRxxgaWBu7IDtEe1quo8hiupwm6WFqxVlXaSf7IINGQ==",
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/runtime": "^1.11.3"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-webcontainers-wasm32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-webcontainers-wasm32/-/sharp-webcontainers-wasm32-0.35.5.tgz",
+      "integrity": "sha512-hfhF/FmoQyTUkA0bIKFOtw536BQSeBMe6BF6QyWlrPxT754+TFLaZ7sKKTfvvM0yJgKgaYTwnFCIZ/GuDw5SUA==",
+      "cpu": [
+        "wasm32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "dependencies": {
+        "@img/sharp-wasm32": "0.35.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-arm64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.35.5.tgz",
+      "integrity": "sha512-X4t7g+7ZA5DKblCBEXGjUqqemj4vczING/5viFwAL8h4N3qYeyjwdCvRLHi4EdOUI+2Z7UFlp1VM+p/AuEtm6Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-ia32": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.35.5.tgz",
+      "integrity": "sha512-5Zm82LoBc43nhwNybZlG7Y1KO//Zhsn306fQl29ZOuStHLGTo3BWL83q3cznX0poxSAMuYL1On/BHBxkBeKr6A==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-x64": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.35.5.tgz",
+      "integrity": "sha512-x76eH0vEiHlcMQu8Y8IenntaACtddpT6W0wmXtWrnKcnKI7ME5DdgqhAD6SEWOEl1v2zDvkZDhFA9KnURwpfqg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
     "node_modules/@inquirer/ansi": {
       "version": "2.0.8",
       "resolved": "https://registry.npmjs.org/@inquirer/ansi/-/ansi-2.0.8.tgz",
@@ -2133,6 +2690,12 @@
         "@jridgewell/sourcemap-codec": "^1.4.14"
       }
     },
+    "node_modules/@leichtgewicht/ip-codec": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@leichtgewicht/ip-codec/-/ip-codec-2.0.5.tgz",
+      "integrity": "sha512-Vo+PSpZG2/fmgmiNzYK9qWRh8h/CHrwD0mo1h1DzL4yzHNSfWYujGTYsWGreD000gcgmZ7K4Ys6Tx9TxtsKdDw==",
+      "license": "MIT"
+    },
     "node_modules/@malept/cross-spawn-promise": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/@malept/cross-spawn-promise/-/cross-spawn-promise-2.0.0.tgz",
@@ -3907,6 +4470,16 @@
       "integrity": "sha512-XpNj6GDQzdfW+r2Wnn7xiSAd7TM3jzkxGXBGTtWKuSXv1xUV+azxAm8jdWZN06QTQk+2N2XB9jRDkvbmQmcRtg==",
       "license": "MIT"
     },
+    "node_modules/bonjour-service": {
+      "version": "1.3.0",
+      "resolved": "https://registry.npmjs.org/bonjour-service/-/bonjour-service-1.3.0.tgz",
+      "integrity": "sha512-3YuAUiSkWykd+2Azjgyxei8OWf8thdn8AITIog2M4UICzoqfjlqr64WIjEXZllf/W6vK1goqleSR6brGomxQqA==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "multicast-dns": "^7.2.5"
+      }
+    },
     "node_modules/boolean": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/boolean/-/boolean-3.2.0.tgz",
@@ -4689,6 +5262,18 @@
         "js-yaml": "^4.1.0"
       }
     },
+    "node_modules/dns-packet": {
+      "version": "5.6.1",
+      "resolved": "https://registry.npmjs.org/dns-packet/-/dns-packet-5.6.1.tgz",
+      "integrity": "sha512-l4gcSouhcgIKRvyy99RNVOgxXiicE+2jZoNmaNmZ6JXiGajBOJAesk1OBlJuM5k2c+eudGdLxDqXuPCKIj6kpw==",
+      "license": "MIT",
+      "dependencies": {
+        "@leichtgewicht/ip-codec": "^2.0.1"
+      },
+      "engines": {
+        "node": ">=6"
+      }
+    },
     "node_modules/dotenv": {
       "version": "16.6.1",
       "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.6.1.tgz",
@@ -5169,7 +5754,6 @@
       "version": "3.1.3",
       "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
       "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
-      "dev": true,
       "license": "MIT"
     },
     "node_modules/fast-string-truncated-width": {
@@ -7651,6 +8235,19 @@
       "integrity": "sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==",
       "license": "MIT"
     },
+    "node_modules/multicast-dns": {
+      "version": "7.2.5",
+      "resolved": "https://registry.npmjs.org/multicast-dns/-/multicast-dns-7.2.5.tgz",
+      "integrity": "sha512-2eznPJP8z2BFLX50tf0LuODrpINqP1RVIm/CObbTcBRITQgmC/TjcREF1NeTBzIcR5XO/ukWo+YHOjBbFwIupg==",
+      "license": "MIT",
+      "dependencies": {
+        "dns-packet": "^5.2.2",
+        "thunky": "^1.0.2"
+      },
+      "bin": {
+        "multicast-dns": "cli.js"
+      }
+    },
     "node_modules/mute-stream": {
       "version": "3.0.0",
       "resolved": "https://registry.npmjs.org/mute-stream/-/mute-stream-3.0.0.tgz",
@@ -8163,6 +8760,35 @@
         "url": "https://paulmillr.com/funding/"
       }
     },
+    "node_modules/playwright": {
+      "version": "1.64.0",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.64.0.tgz",
+      "integrity": "sha512-kVzTnYFYEyQ9RGzBjNCd2+yEqWmVbxl3AHPynv3qQ6JTjv4a+kwRcnqQwIpuP3NnrnIrE/Q6wWAIAvMfIE2/Yg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "playwright-core": "1.64.0"
+      },
+      "bin": {
+        "playwright": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
+    "node_modules/playwright-core": {
+      "version": "1.64.0",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.64.0.tgz",
+      "integrity": "sha512-T9r+MZkTECl2+oUcZ26YgZzTrYidTsIhYYkJix+6iDOymOb1FB2RLLSOxRGnZGv5DStt+aduIVbt+E8WygXYpg==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "playwright-core": "cli.js"
+      },
+      "engines": {
+        "node": ">=20"
+      }
+    },
     "node_modules/plist": {
       "version": "3.1.0",
       "resolved": "https://registry.npmjs.org/plist/-/plist-3.1.0.tgz",
@@ -8885,6 +9511,69 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/sharp": {
+      "version": "0.35.5",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.35.5.tgz",
+      "integrity": "sha512-Ywn4OnzGukp7CDMrp08RQ50YKmuwG47brZgIVPTvBaaAfQlRlygrRqSrxdCiL9M+LlzLBiJ68IR1QqvzHyjC7g==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@img/colour": "^1.1.0",
+        "detect-libc": "^2.1.2",
+        "semver": "^7.8.5"
+      },
+      "engines": {
+        "node": ">=20.9.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "0.35.5",
+        "@img/sharp-darwin-x64": "0.35.5",
+        "@img/sharp-freebsd-wasm32": "0.35.5",
+        "@img/sharp-libvips-darwin-arm64": "1.3.4",
+        "@img/sharp-libvips-darwin-x64": "1.3.4",
+        "@img/sharp-libvips-linux-arm": "1.3.4",
+        "@img/sharp-libvips-linux-arm64": "1.3.4",
+        "@img/sharp-libvips-linux-ppc64": "1.3.4",
+        "@img/sharp-libvips-linux-riscv64": "1.3.4",
+        "@img/sharp-libvips-linux-s390x": "1.3.4",
+        "@img/sharp-libvips-linux-x64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.3.4",
+        "@img/sharp-libvips-linuxmusl-x64": "1.3.4",
+        "@img/sharp-linux-arm": "0.35.5",
+        "@img/sharp-linux-arm64": "0.35.5",
+        "@img/sharp-linux-ppc64": "0.35.5",
+        "@img/sharp-linux-riscv64": "0.35.5",
+        "@img/sharp-linux-s390x": "0.35.5",
+        "@img/sharp-linux-x64": "0.35.5",
+        "@img/sharp-linuxmusl-arm64": "0.35.5",
+        "@img/sharp-linuxmusl-x64": "0.35.5",
+        "@img/sharp-webcontainers-wasm32": "0.35.5",
+        "@img/sharp-win32-arm64": "0.35.5",
+        "@img/sharp-win32-ia32": "0.35.5",
+        "@img/sharp-win32-x64": "0.35.5"
+      },
+      "peerDependenciesMeta": {
+        "@types/node": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/sharp/node_modules/semver": {
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/shebang-command": {
       "version": "2.0.0",
       "resolved": "https://registry.npmjs.org/shebang-command/-/shebang-command-2.0.0.tgz",
@@ -9158,6 +9847,12 @@
         "fs-extra": "^10.0.0"
       }
     },
+    "node_modules/thunky": {
+      "version": "1.1.0",
+      "resolved": "https://registry.npmjs.org/thunky/-/thunky-1.1.0.tgz",
+      "integrity": "sha512-eHY7nBftgThBqOyHGVN+l8gF0BucP09fMo0oO/Lb0w1OF80dJv+lDVpXG60WMQvkcxAkNybKsrEIE3ZtKGmPrA==",
+      "license": "MIT"
+    },
     "node_modules/tiny-async-pool": {
       "version": "1.3.0",
       "resolved": "https://registry.npmjs.org/tiny-async-pool/-/tiny-async-pool-1.3.0.tgz",
diff --git a/package.json b/package.json
index 524b53037..a491f565a 100644
--- a/package.json
+++ b/package.json
@@ -46,10 +46,13 @@
     "build:helpers": "node scripts/build-native-helpers.mjs",
     "pack:even": "npm run pack --workspace integrations/even-g2",
     "smoke:terminal-hidden": "node scripts/smoke-hidden-terminal-electron.mjs",
-    "bench:terminal-hidden-renderer": "node scripts/smoke-hidden-terminal-electron.mjs --benchmark"
+    "bench:terminal-hidden-renderer": "node scripts/smoke-hidden-terminal-electron.mjs --benchmark",
+    "test:canvaslink": "npm test --workspace @canvastty/canvaslink",
+    "build:canvaslink:android": "npm run build:android --workspace @canvastty/canvaslink"
   },
   "dependencies": {
     "@xterm/headless": "6.0.0",
+    "bonjour-service": "1.3.0",
     "electron-updater": "6.8.9",
     "hast-util-to-jsx-runtime": "2.3.6",
     "lowlight": "3.3.0",
@@ -92,6 +95,7 @@
     "node-pty@1.1.0": true
   },
   "workspaces": [
-    "integrations/even-g2"
+    "integrations/even-g2",
+    "integrations/canvaslink"
   ]
 }
diff --git a/scripts/smoke-canvaslink.mjs b/scripts/smoke-canvaslink.mjs
new file mode 100644
index 000000000..89d39899d
--- /dev/null
+++ b/scripts/smoke-canvaslink.mjs
@@ -0,0 +1,68 @@
+// Real Electron + built preload/host wiring, using hidden disposable windows.
+import assert from 'node:assert/strict';
+import { spawn, spawnSync } from 'node:child_process';
+import { mkdtemp, readFile, rm, writeFile } from 'node:fs/promises';
+import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { join, resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import { electronSmokeLaunchBlockReason } from './lib/electron-smoke-launch-guard.mjs';
+const require = createRequire(import.meta.url), electron = require('electron');
+const root = resolve(fileURLToPath(new URL('..', import.meta.url)));
+if (typeof electron === 'string') {
+  const reason = electronSmokeLaunchBlockReason(process.platform, process.env);
+  if (reason) throw Error(reason);
+  const profile = await mkdtemp(join(process.platform === 'win32' ? tmpdir() : '/tmp', 'ct-link-'));
+  const env = Object.fromEntries(Object.entries(process.env).filter(([name]) => !name.startsWith('CANVASTTY_') && !['ELECTRON_RUN_AS_NODE', 'ELECTRON_RENDERER_URL'].includes(name)));
+  const log = join(profile, 'electron.log');
+  const ownedPids = () => process.platform !== 'darwin' ? [] : spawnSync('/bin/ps', ['-axo', 'pid=,comm='], { encoding: 'utf8' }).stdout.split('\n').flatMap(line => { const match = line.match(/^\s*(\d+)\s+(.*)$/); return match && match[2] === electron ? [Number(match[1])] : []; });
+  const before = new Set(ownedPids());
+  const args = [fileURLToPath(import.meta.url), `--user-data-dir=${profile}`, '--canvaslink-port', '0'];
+  if (process.platform === 'linux' && process.env.CI === 'true') args.push('--no-sandbox');
+  try {
+    const child = process.platform === 'darwin'
+      ? spawn('/usr/bin/open', ['-n', '-W', '-g', '-j', resolve(electron, '../../..'), '--stdout', log, '--stderr', log, '--args', ...args], { env, stdio: ['ignore', 'pipe', 'pipe'] })
+      : spawn(electron, args, { env, stdio: ['ignore', 'pipe', 'pipe'] });
+    let output = ''; child.stdout.on('data', chunk => output += chunk);
+    child.stderr.on('data', chunk => { output += chunk; });
+    const timer = setTimeout(() => child.kill('SIGTERM'), 30000);
+    const code = await new Promise((done, reject) => { child.on('error', reject); child.on('exit', done); });
+    clearTimeout(timer);
+    if (process.platform === 'darwin') output += await readFile(log, 'utf8').catch(() => '');
+    if (code !== 0 || !output.includes('CANVASTTY_CANVASLINK_SMOKE_OK')) throw Error(`Electron exit=${code}; output: ${output.slice(-5000) || '(no output before timeout)'}`);
+    console.log('CANVASTTY_CANVASLINK_SMOKE_OK (real built preload, IPC, enable/revoke/disable, untrusted-window rejection)');
+  } finally {
+    for (const pid of ownedPids()) if (!before.has(pid)) { try { process.kill(pid, 'SIGTERM'); } catch {} }
+    await rm(profile, { recursive: true, force: true });
+  }
+} else {
+  const { app, BrowserWindow } = electron;
+  app.setName('CanvasTTY CanvasLink isolated smoke');
+  const profileArg = process.argv.find(arg => arg.startsWith('--user-data-dir='));
+  assert.ok(profileArg); app.setPath('userData', profileArg.split('=').slice(1).join('='));
+  app.on('window-all-closed', () => {});
+  let owned;
+  const { install } = require(join(root, 'out/main/canvaslink/host/embedded.cjs'));
+  install({ getWindow: () => owned });
+  try {
+    await app.whenReady(); app.dock?.hide();
+    const page = join(app.getPath('userData'), 'fixture.html');
+    await writeFile(page, 'CanvasLink isolated fixture');
+    const create = () => new BrowserWindow({ show: false, webPreferences: { preload: join(root, 'out/preload/index.cjs'), contextIsolation: true, sandbox: true, nodeIntegration: false } });
+    owned = create(); await owned.loadFile(page);
+    const call = script => owned.webContents.executeJavaScript(script);
+    assert.equal((await call('window.canvasTTY.canvasLink.state()')).enabled, false);
+    let state = await call('window.canvasTTY.canvasLink.command("enable")');
+    assert.equal(state.enabled, true); assert.match(state.pin, /^\d{6}$/);
+    const stranger = create(); await stranger.loadFile(page);
+    const rejected = await stranger.webContents.executeJavaScript('window.canvasTTY.canvasLink.command("disable").then(()=>false,()=>true)');
+    assert.equal(rejected, true); stranger.destroy();
+    state = await call('window.canvasTTY.canvasLink.command("revoke")');
+    assert.equal(state.enabled, true); assert.equal(state.devices.length, 0);
+    state = await call('window.canvasTTY.canvasLink.command("disable")');
+    assert.equal(state.enabled, false); assert.equal(state.pin, '');
+    assert.equal(await call('window.canvasTTY.canvasLink.command("new-code").then(()=>false,()=>true)'), true);
+    console.log('CANVASTTY_CANVASLINK_SMOKE_OK');
+    owned.destroy(); app.quit();
+  } catch (error) { console.error(error); app.exit(1); }
+}
diff --git a/src/main/index.ts b/src/main/index.ts
index b9832dcee..9df9e089e 100644
--- a/src/main/index.ts
+++ b/src/main/index.ts
@@ -101,6 +101,9 @@ import { mainWindowChromeOptions } from "./windowChrome";
 import { markMainBoot, mainBootMarks } from "./bootMarks";
 import { attachEditContextMenu } from "./editContextMenu";
 import { macApplicationMenuTemplate } from "./macApplicationMenu";
+import { configureCanvasLinkStartup, installCanvasLink } from "./services/canvasLink";
+
+configureCanvasLinkStartup(app);
 
 if (process.env.CANVASTTY_USER_DATA_DIR) {
   if (!isAbsolute(process.env.CANVASTTY_USER_DATA_DIR)) throw new Error("CANVASTTY_USER_DATA_DIR must be absolute");
@@ -1210,6 +1213,7 @@ function attentionStatusLabel(status: "needs_approval" | "failed", locale: Local
 }
 
 if (hasSingleInstanceLock) {
+  installCanvasLink(() => mainWindow);
   void app.whenReady()
     .then(() => {
       markMainBoot("appReady");
diff --git a/src/main/services/canvasLink.ts b/src/main/services/canvasLink.ts
new file mode 100644
index 000000000..922156702
--- /dev/null
+++ b/src/main/services/canvasLink.ts
@@ -0,0 +1,19 @@
+import { createRequire } from "node:module";
+import type { App, BrowserWindow } from "electron";
+
+// Static CJS/HTML assets are copied by electron.vite.config.ts into out/main.
+// Keeping these relative to the bundle works in dev and inside app.asar.
+const require = createRequire(import.meta.url);
+
+export function configureCanvasLinkStartup(app: App): void {
+  if (!process.argv.includes("--canvaslink-high-density")) return;
+  const { configureRenderScale } = require("./canvaslink/host/display-scale.cjs");
+  configureRenderScale(app);
+}
+
+export function installCanvasLink(getWindow: () => BrowserWindow | null): void {
+  const { install } = require("./canvaslink/host/embedded.cjs");
+  // Registers the owning-frame-only settings IPC. No listener, capture or
+  // discovery starts until the user explicitly enables CanvasLink in Settings.
+  install({ getWindow });
+}
diff --git a/src/preload/index.ts b/src/preload/index.ts
index 32f38cf65..49843cd41 100644
--- a/src/preload/index.ts
+++ b/src/preload/index.ts
@@ -65,6 +65,10 @@ ipcRenderer.on(IPC.windowOpenUpdates, () => {
 });
 
 const api: CanvasTTYApi = {
+  canvasLink: {
+    state: () => ipcRenderer.invoke("canvaslink-settings:state"),
+    command: (action) => ipcRenderer.invoke("canvaslink-settings:command", action)
+  },
   mascots: {
     list: () => ipcRenderer.invoke(IPC.mascotsList),
     start: (image) => ipcRenderer.invoke(IPC.mascotsStart, image),
diff --git a/src/renderer/src/features/settings/CanvasLinkSettings.css b/src/renderer/src/features/settings/CanvasLinkSettings.css
new file mode 100644
index 000000000..982d321ce
--- /dev/null
+++ b/src/renderer/src/features/settings/CanvasLinkSettings.css
@@ -0,0 +1,10 @@
+.canvaslink-settings{max-width:54rem;color:var(--text);line-height:1.5}
+.canvaslink-settings__intro{padding:.3rem 0 1.6rem}.canvaslink-settings__eyebrow{font:600 .7rem var(--font-mono,monospace);letter-spacing:.1em;color:var(--primary)}
+.canvaslink-settings h3{font-size:1.05em;margin:0 0 .4rem}.canvaslink-settings__intro h3{font-size:1.55em;letter-spacing:-.025em}.canvaslink-settings p{margin:.4rem 0;color:var(--text-muted-on-dark)}
+.canvaslink-settings__card{padding:1.4rem;margin-bottom:1rem;border:1px solid color-mix(in srgb,var(--text) 13%,transparent);border-radius:1rem;background:color-mix(in srgb,var(--surface-soft) 65%,var(--surface))}
+.canvaslink-settings__row{display:flex;gap:1.2rem;align-items:center;justify-content:space-between}.canvaslink-settings__status{font-size:.85em}.canvaslink-settings__connection{margin-top:1.2rem;border-top:1px solid color-mix(in srgb,var(--text) 10%,transparent);padding-top:.8rem}
+.canvaslink-settings ol{padding-left:1.3rem;font-size:.9em;color:var(--text-muted-on-dark)}.canvaslink-settings li+li{margin-top:.45rem}.canvaslink-settings__code-block{display:flex;flex-direction:column;align-items:flex-start;gap:.35rem;margin:1.2rem 0}.canvaslink-settings__code-block>span,.canvaslink-settings small{font-size:.8em;color:var(--text-muted-on-dark)}
+.canvaslink-settings__code{font:600 clamp(1.8rem,4vw,2.8rem)/1.3 var(--font-mono,monospace);letter-spacing:.14em;color:var(--text);font-variant-numeric:tabular-nums}.canvaslink-settings__button{min-height:48px;padding:.65rem 1rem;border:1px solid color-mix(in srgb,var(--text) 25%,transparent);border-radius:.65rem;color:var(--text);background:transparent;font:inherit;font-size:.85em;cursor:pointer}.canvaslink-settings__button:hover{background:color-mix(in srgb,var(--text) 8%,transparent)}.canvaslink-settings__button--primary{border-color:var(--primary);background:var(--primary);color:var(--text-dark)}.canvaslink-settings__button--primary:hover{background:var(--primary-hover)}.canvaslink-settings__button:focus-visible{outline:2px solid var(--primary);outline-offset:3px}.canvaslink-settings__button:disabled{opacity:.55;cursor:wait}
+.canvaslink-settings__card--quiet p{font-size:.85em}.canvaslink-settings__note{font-size:.9em}.canvaslink-settings__devices h4{margin:.8rem 0 .4rem}.canvaslink-settings__error{color:var(--danger)!important}
+.canvaslink-settings__install-actions{display:flex;flex-wrap:wrap;gap:.6rem;margin:.9rem 0}
+@media(max-width:760px){.canvaslink-settings__row{align-items:flex-start;flex-direction:column}.canvaslink-settings__card{padding:1rem}}
diff --git a/src/renderer/src/features/settings/CanvasLinkSettings.tsx b/src/renderer/src/features/settings/CanvasLinkSettings.tsx
new file mode 100644
index 000000000..1caa5e0c2
--- /dev/null
+++ b/src/renderer/src/features/settings/CanvasLinkSettings.tsx
@@ -0,0 +1,107 @@
+import { useEffect, useRef, useState } from "react";
+import type { LocaleId } from "../../../../shared/contracts";
+import type { CanvasLinkCommand, CanvasLinkState } from "../../../../shared/canvasLink";
+import { CANVASLINK_ANDROID_RELEASE, canvasLinkInstallPrompt } from "../../../../shared/canvasLinkInstall";
+import "./CanvasLinkSettings.css";
+
+export function CanvasLinkSettings({ locale, open }: { locale: LocaleId; open: boolean }) {
+  const [state, setState] = useState(null);
+  const [busy, setBusy] = useState(false);
+  const [error, setError] = useState("");
+  const [promptCopied, setPromptCopied] = useState(false);
+  const revision = useRef(0);
+  const text = (ru: string, en: string) => locale === "ru" ? ru : en;
+
+  function copyInstallPrompt() {
+    try {
+      window.canvasTTY.clipboard.writeText(canvasLinkInstallPrompt(locale));
+      setPromptCopied(true);
+    } catch {
+      setPromptCopied(false);
+      setError(text("Не удалось скопировать промпт. Откройте инструкцию.", "Could not copy the prompt. Open the installation guide."));
+    }
+  }
+
+  useEffect(() => {
+    if (!open) return;
+    let active = true;
+    let timer: ReturnType;
+    async function poll() {
+      const current = revision.current;
+      try {
+        const next = await window.canvasTTY.canvasLink.state();
+        if (active && current === revision.current) setState(next);
+      } catch {
+        if (active) setError(locale === "ru" ? "Не удалось получить состояние подключения." : "Could not read connection status.");
+      } finally {
+        if (active) timer = setTimeout(poll, 1000);
+      }
+    }
+    void poll();
+    return () => { active = false; clearTimeout(timer); };
+  }, [open, locale]);
+
+  async function run(action: CanvasLinkCommand) {
+    revision.current++;
+    setBusy(true);
+    setError("");
+    try { setState(await window.canvasTTY.canvasLink.command(action)); }
+    catch { setError(text("Действие не выполнено. Попробуйте ещё раз.", "The action failed. Try again.")); }
+    finally { revision.current++; setBusy(false); }
+  }
+  const button = (label: string, action: CanvasLinkCommand, primary = false) => (
+    
+  );
+  const enabled = !!state?.enabled;
+  const devices = state?.devices ?? [];
+  const seconds = Math.max(0, Math.ceil(((state?.expires ?? 0) - Date.now()) / 1000));
+  const status = !enabled ? text("Выключено", "Off") : devices.length
+    ? state?.phase === "streaming" ? text("Подключено · видео и управление", "Connected · video and control")
+      : text("Устройство связано · подключение", "Device paired · connecting")
+    : text("Ожидает подключения", "Waiting for connection");
+
+  return 

+    

+      
{text("ТЕЛЕФОН И ПЛАНШЕТ", "PHONE AND TABLET")}

+      
{text("Ваш CanvasTTY на Android", "Your CanvasTTY on Android")}

+      
{text("Работайте в этом окне с планшета или телефона. Оба устройства должны быть в одной локальной сети.", "Use this window from your tablet or phone. Both devices must be on the same local network.")}

+    

+    

+      
{text("Установить на Android", "Install on Android")}

+      
{text("Подключите телефон или планшет по USB, включите USB-отладку и подтвердите запрос на Android. Скопируйте промпт своему агенту — он проверит APK и установит приложение. После установки USB не нужен.", "Connect your phone or tablet over USB, enable USB debugging and approve the Android prompt. Copy the prompt to your agent: it will verify the APK and install the app. USB is not needed after installation.")}

+      

+        
+        
+      

+      {promptCopied && 
{text("Промпт скопирован. Вставьте его в чат с агентом на этом компьютере.", "Prompt copied. Paste it into your agent chat on this computer.")}
}
+      
{text(`Android 8+ · ${CANVASLINK_ANDROID_RELEASE.version} · экспериментальная версия`, `Android 8+ · ${CANVASLINK_ANDROID_RELEASE.version} · experimental version`)}

+    

+    

+      

+        
{text("Доступ с Android", "Android access")}
{status}

+        {state && (enabled ? button(text("Выключить доступ", "Turn off access"), "disable") : button(text("Включить доступ", "Enable access"), "enable", true))}
+      

+      {!state && 
{text("Проверяем состояние…", "Checking status…")}
}
+      {enabled && 

+        
  1. {text("Откройте CanvasLink на Android.", "Open CanvasLink on Android.")}
    2. 
+          
  2. {text("Выберите этот компьютер и введите код. IP-адрес вводить не нужно.", "Select this computer and enter the code. No IP address is needed.")}

+        {state?.pin && seconds > 0 ? 

+          {text("Одноразовый код", "One-time code")}
+          {state.pin.slice(0, 3)} {state.pin.slice(3)}
+          {text(`Действует ещё ${seconds} с`, `Valid for ${seconds} s`)}
+        
 : 
{devices.length ? text("Устройство связано. Код больше не нужен до завершения сессии.", "Device paired. No code is needed until this session ends.") : text("Срок действия кода истёк. Получите новый код.", "The code expired. Get a new code.")}
}
+        {!devices.length && button(text("Новый код", "New code"), "new-code")}
+        {devices.length > 0 && 
{text("Связанное устройство", "Paired device")}

+          {devices.map((device, index) => 
{device.name || "Android"}
)}
+          {button(text("Забыть устройство", "Forget device"), "revoke")}
}
+      
}
+    

+    

+      
{text("Управление с планшета", "Tablet controls")}

+      
{text("Коснитесь терминала, чтобы открыть клавиатуру. Ввод передаётся напрямую; Enter запускает команду. При потере связи ввод автоматически не повторяется. Доступ распространяется на всё это окно CanvasTTY.", "Tap a terminal to open the keyboard. Input is sent directly; Enter runs the command. Input is never automatically replayed after a disconnect. Access covers this entire CanvasTTY window.")}

+      
{text("Очки Even G2 подключаются отдельно — в разделе «Внешние интеграции». Коды и доступы независимы.", "Even G2 glasses connect separately under External integrations. Their codes and access are independent.")}

+    

+    {error && 
{error}
}
+  
;
+}
diff --git a/src/renderer/src/features/settings/SettingsPanel.tsx b/src/renderer/src/features/settings/SettingsPanel.tsx
index db4619189..d9b73f777 100644
--- a/src/renderer/src/features/settings/SettingsPanel.tsx
+++ b/src/renderer/src/features/settings/SettingsPanel.tsx
@@ -1,3 +1,4 @@
+import { CanvasLinkSettings } from "./CanvasLinkSettings";
 import { EvenG2Controls } from "./EvenG2Controls";
 import { useEffect, useLayoutEffect, useRef, useState } from "react";
 import type {
@@ -121,7 +122,7 @@ import {
 } from "../../../../shared/autoMode";
 import { MascotsSettings } from "./MascotsSettings";
 
-type SettingsSection = "general" | "keyboardShortcuts" | "appearance" | "agents" | "controls" | "externalIntegrations" | "browser" | "plugins" | "mascots" | "updates" | "about";
+type SettingsSection = "general" | "keyboardShortcuts" | "appearance" | "agents" | "controls" | "externalIntegrations" | "canvasLink" | "browser" | "plugins" | "mascots" | "updates" | "about";
 
 const SHORTCUT_LABELS = {
   home: "homeShortcut", renameWindow: "renameWindow", toggleFullscreen: "toggleFullscreen",
@@ -143,6 +144,7 @@ const SETTINGS_SECTIONS: ReadonlyArray<{
   { id: "agents", icon: "terminal" },
   { id: "controls", icon: "sliders-horizontal" },
   { id: "externalIntegrations", icon: "blocks" },
+  { id: "canvasLink", icon: "app-window" },
   { id: "browser", icon: "browser" },
   { id: "plugins", icon: "blocks" },
   { id: "mascots", icon: "image-plus" },
@@ -1157,6 +1159,8 @@ export function SettingsPanel({
             
           )}
 
+          {section === "canvasLink" && }
+
           {section === "externalIntegrations" && (
             
           )}
diff --git a/src/renderer/src/lib/i18n.ts b/src/renderer/src/lib/i18n.ts
index b1a05d81e..d440fd8c3 100644
--- a/src/renderer/src/lib/i18n.ts
+++ b/src/renderer/src/lib/i18n.ts
@@ -189,6 +189,7 @@ const ru = {
   pluginHooksInstallWarning: "Установка не включает их автоматически. После проверки кода их можно отдельно включить в Настройки → Агенты → Хуки; они выполняются с правами вашей учётной записи.",
   controls: "Управление",
   externalIntegrations: "Внешние интеграции",
+  canvasLink: "CanvasLink",
   plugins: "Плагины",
   mascots: "Маскоты",
   installPlugin: "Установить плагин",
@@ -1221,6 +1222,7 @@ const en: Record = {
   pluginHooksInstallWarning: "Installation does not enable them automatically. After reviewing the code, enable them separately in Settings → Agents → Hooks; they run with your user account privileges.",
   controls: "Controls",
   externalIntegrations: "External integrations",
+  canvasLink: "CanvasLink",
   plugins: "Plugins",
   mascots: "Mascots",
   installPlugin: "Install plugin",
diff --git a/src/shared/canvasLink.ts b/src/shared/canvasLink.ts
new file mode 100644
index 000000000..48da2c505
--- /dev/null
+++ b/src/shared/canvasLink.ts
@@ -0,0 +1,14 @@
+export interface CanvasLinkState {
+  enabled: boolean;
+  phase: string;
+  pin: string;
+  expires: number;
+  devices: Array<{ name: string }>;
+}
+
+export type CanvasLinkCommand = "enable" | "disable" | "new-code" | "revoke";
+
+export interface CanvasLinkApi {
+  state(): Promise;
+  command(action: CanvasLinkCommand): Promise;
+}
diff --git a/src/shared/canvasLinkInstall.ts b/src/shared/canvasLinkInstall.ts
new file mode 100644
index 000000000..34cb7509d
--- /dev/null
+++ b/src/shared/canvasLinkInstall.ts
@@ -0,0 +1,20 @@
+import type { LocaleId } from "./contracts";
+
+// Pinned public alpha artifact. Never add pairing codes or runtime state here.
+export const CANVASLINK_ANDROID_RELEASE = {
+  version: "0.3.0-alpha.1",
+  versionCode: 3,
+  applicationId: "io.nexcore.canvaslink",
+  url: "https://github.com/teo-nex/CanvasLink/releases/download/v0.3.0-alpha.1/CanvasLink-0.3.0-alpha.1.apk",
+  sha256: "0534857896b2e22d7e832a8aaa6146b3fc6acb19f3df857cc9d3e8c1caf5a760",
+  signerCertificateSha256: "0235b1aee591e4f0e24e59484927ead112889521a1b92e40959076d03635b3cb",
+  guideUrl: "https://github.com/teo-nex/CanvasLink#installation",
+  guideRuUrl: "https://github.com/teo-nex/CanvasLink/blob/main/README.ru.md#установка",
+} as const;
+
+export function canvasLinkInstallPrompt(locale: LocaleId): string {
+  const release = CANVASLINK_ANDROID_RELEASE;
+  const artifact = `CanvasLink ${release.version}; Android 8+; ${release.applicationId}; versionCode ${release.versionCode}\nAPK: ${release.url}\nSHA-256: ${release.sha256}\nSigning certificate SHA-256: ${release.signerCertificateSha256}`;
+  if (locale === "ru") return `Установи CanvasLink на мой Android по USB с этого компьютера. Это экспериментальная alpha; компьютер должен запускать сборку CanvasTTY с Settings → CanvasLink (PR: https://github.com/howdeploy/CanvasTTY/pull/166).\n\n${artifact}\n\nИспользуй ADB. Если его нет, установи Google Android SDK Platform-Tools только из официального источника: https://developer.android.com/tools/releases/platform-tools. Выполни adb devices -l. Если устройств несколько, сначала уточни нужное; во всех командах указывай adb -s SERIAL. Если статус unauthorized, попроси меня подтвердить RSA-запрос на Android; не обходи его. USB-отладку включает владелец устройства.\n\nСкачай именно указанный APK и до установки проверь SHA-256. При несовпадении остановись. Если доступен apksigner, также проверь подпись и отпечаток сертификата. Установи через adb -s SERIAL install -r PATH_TO_APK, сохраняя данные. При несовместимой подписи или запрете понижения версии остановись и объясни причину. Не удаляй старое приложение, не очищай данные и не используй обходные флаги.\n\nПосле успешной установки открой adb -s SERIAL shell am start -n io.nexcore.canvaslink/.MainActivity. Проверь, что приложение запустилось. Для работы нужны одна локальная сеть и включённый доступ в Settings → CanvasLink на компьютере; затем компьютер выбирается в Android и вводится одноразовый код. USB нужен только для установки. Не меняй firewall и не открывай порты в Интернет, не перезапускай CanvasTTY с активными терминалами. Не отправляй код подключения или содержимое терминалов в чат. Сообщи результат установки и оставшиеся ручные шаги.\n\nИнструкция: ${release.guideRuUrl}`;
+  return `Install CanvasLink on my Android over USB from this computer. This is an experimental alpha; the computer must run a CanvasTTY build with Settings → CanvasLink (PR: https://github.com/howdeploy/CanvasTTY/pull/166).\n\n${artifact}\n\nUse ADB. If missing, install Google Android SDK Platform-Tools only from the official source: https://developer.android.com/tools/releases/platform-tools. Run adb devices -l. If multiple devices are present, ask which one to use; specify adb -s SERIAL in every device command. For unauthorized status, ask me to approve the RSA dialog on Android; do not bypass it. The device owner enables USB debugging.\n\nDownload the exact APK above and verify its SHA-256 before installing. Stop on mismatch. If apksigner is available, also verify the signature and certificate fingerprint. Install with adb -s SERIAL install -r PATH_TO_APK, preserving data. Stop and explain incompatible signatures or version downgrade errors. Do not uninstall the existing app, clear data, or use bypass flags.\n\nAfter successful installation, launch adb -s SERIAL shell am start -n io.nexcore.canvaslink/.MainActivity and verify that the app started. Use the same local network and enable access under Settings → CanvasLink on the computer; select the computer in Android and enter the one-time code. USB is only needed for installation. Do not change the firewall, expose ports to the Internet, or restart CanvasTTY with active terminals. Do not send pairing codes or terminal contents to chat. Report installation results and remaining manual steps.\n\nGuide: ${release.guideUrl}`;
+}
diff --git a/src/shared/contracts.ts b/src/shared/contracts.ts
index e406aa1c2..414ca0d72 100644
--- a/src/shared/contracts.ts
+++ b/src/shared/contracts.ts
@@ -1877,6 +1877,7 @@ export interface CanvasTTYApi {
     onStatus(listener: (status: UpdateStatus) => void): () => void;
   };
   evenG2: import('./evenG2.ts').EvenG2Api;
+  canvasLink: import('./canvasLink.ts').CanvasLinkApi;
   appVersion(): Promise;
   clipboard: {
     readText(): Promise;
diff --git a/tests/canvaslink-install.test.mjs b/tests/canvaslink-install.test.mjs
new file mode 100644
index 000000000..39f25312d
--- /dev/null
+++ b/tests/canvaslink-install.test.mjs
@@ -0,0 +1,58 @@
+import assert from "node:assert/strict";
+import test from "node:test";
+import { importWithFakeReact, findAll, tick } from "./helpers/fake-react.mjs";
+import { CANVASLINK_ANDROID_RELEASE, canvasLinkInstallPrompt } from "../src/shared/canvasLinkInstall.ts";
+
+const ui = await importWithFakeReact("src/renderer/src/features/settings/CanvasLinkSettings.tsx", "CanvasLinkSettings");
+const content = (tree) => findAll(tree, (node) => typeof node.props?.children === "string")
+  .map((node) => node.props.children).join("\n");
+const button = (tree, label) => findAll(tree, (node) => node.type === "button" && node.props.children === label)[0];
+
+for (const locale of ["ru", "en"]) test(`Android onboarding copies a pinned prompt without session data or host changes (${locale})`, async () => {
+  const previousWindow = globalThis.window;
+  const copied = [], opened = [], commands = [];
+  const pairingCode = "987654";
+  globalThis.window = { canvasTTY: {
+    canvasLink: {
+      state: async () => ({ enabled: true, phase: "streaming", pin: pairingCode,
+        expires: Date.now() + 120000, devices: [{ name: "Private test tablet" }] }),
+      command: async (action) => { commands.push(action); throw Error("unexpected host mutation"); },
+    },
+    clipboard: { writeText: (value) => copied.push(value) },
+    external: { openUrl: async (value) => { opened.push(value); } },
+  } };
+  ui.__reset();
+  const render = () => ui.__render(ui.CanvasLinkSettings, { locale, open: true });
+  try {
+    render(); await tick(); ui.__flush();
+    let tree = render();
+    button(tree, locale === "ru" ? "Скопировать промпт агенту" : "Copy prompt for agent").props.onClick();
+    ui.__flush(); tree = render();
+    assert.deepEqual(copied, [canvasLinkInstallPrompt(locale)]);
+    assert.match(content(tree), locale === "ru" ? /Промпт скопирован/ : /Prompt copied/);
+    assert.ok(copied[0].includes(CANVASLINK_ANDROID_RELEASE.url));
+    assert.ok(copied[0].includes(CANVASLINK_ANDROID_RELEASE.sha256));
+    assert.ok(!copied[0].includes(pairingCode));
+    assert.ok(!copied[0].includes("Private test tablet"));
+    assert.match(copied[0], /adb -s SERIAL install -r PATH_TO_APK/);
+    assert.match(copied[0], /unauthorized/);
+    button(tree, locale === "ru" ? "Инструкция и APK" : "Guide and APK").props.onClick();
+    assert.deepEqual(opened, [locale === "ru" ? CANVASLINK_ANDROID_RELEASE.guideRuUrl : CANVASLINK_ANDROID_RELEASE.guideUrl]);
+    assert.deepEqual(commands, []);
+  } finally { ui.__unmount(); globalThis.window = previousWindow; }
+});
+
+test("clipboard failure offers the guide without changing Android access", () => {
+  const previousWindow = globalThis.window;
+  globalThis.window = { canvasTTY: { clipboard: { writeText() { throw Error("clipboard unavailable"); } } } };
+  ui.__reset();
+  try {
+    const props = { locale: "en", open: false };
+    const tree = ui.__render(ui.CanvasLinkSettings, props);
+    button(tree, "Copy prompt for agent").props.onClick();
+    ui.__flush();
+    const next = ui.__render(ui.CanvasLinkSettings, props);
+    assert.match(content(next), /Could not copy the prompt. Open the installation guide/);
+    assert.doesNotMatch(content(next), /Prompt copied/);
+  } finally { ui.__unmount(); globalThis.window = previousWindow; }
+});