openclaw/docs/.generated/plugin-sdk-api-baseline/agent-harness-runtime.json at 6aefb86ea8bab0d51ef743c43ed168c2126089f2 - openclaw - Gitea: Git with a cup of tea

ewilliams28/openclaw

mirror of https://github.com/openclaw/openclaw.git synced 2026-08-12 21:53:00 -06:00

Files

T

Peter Steinberger 6aefb86ea8 feat(gateway): view macOS Screen Sharing from the Desktop panel

Modern macOS only offers ARD account authentication for Screen Sharing,
so the host desktop source refused every Mac. The Gateway now performs
the ARD handshake itself against the loopback server and hands the
browser a plain RFB 003.008 no-auth handshake, so the operator's macOS
account password authenticates the desktop without ever reaching the
browser, the observe result, a URL, or a log.

- rfb-preauth: ARD (type 30) Diffie-Hellman with MD5-derived AES-128-ECB
  credentials, and VncAuth (type 2) bit-reversed DES, both under a single
  10s negotiation deadline; Apple's RFB 003.889 maps to 3.8
- observe-bridge: runs pre-auth before splicing and starts the view-only
  filter at clientInit, since the browser handshake is consumed here;
  worker tokens keep the original version start phase
- host-source: attaches ARD, requiring per-observation credentials that
  live only in the one-shot observer token and are dropped after use
- doctor: offers an explicitly confirmed sudo launchctl repair when
  Screen Sharing is off, and prints the System Settings path otherwise

Live-verified against this Mac's Screen Sharing: the DH exchange and
credential framing are accepted and the server returns SecurityResult.
The VncAuth DES vector is confirmed against OpenSSL independently.

2026-08-12 00:16:32 -07:00

2 lines

182 B

JSON

Generated

Raw Blame History

{"contentHash":"e228330edab112eacfa24979ad599be6cb051ffbf4bc1ac195b4c785e8582b82","entrypoint":"agent-harness-runtime","importSpecifier":"openclaw/plugin-sdk/agent-harness-runtime"}