AGENTS.md@packages/remote-desktop git:20260819.2b42e2dA

Immutable. This exact content never changes and is served at /api/v1/blob/832b4ff28aa00f5e.

# Remote Desktop Agent Guide

This package owns the platform-neutral WebRTC signaling, browser peer orchestration, and remote input DataChannel contract.

- It must not import Electron, Android, Cloudflare, Node native APIs, or chat/session protocol modules.
- Screen media and input injection are host-provided adapters. Never implement OS permission bypasses here.
- Validate every signaling and input message at the first boundary. Reject unknown fields that could expand authority.
- Logs and diagnostics may contain session IDs, state, dimensions, codec names, counts, and timing only. Never log SDP, ICE candidates, key text, clipboard data, or captured pixels.
- A remote-control grant is scoped to one peer session and must be explicitly revocable by the host.
- WebRTC E2E must verify nonblank moving pixels and a real DataChannel input round trip in Chromium.