[feat] enable Android MediaCodec decoding and simplify tests

apps/android/test/android/assets/tls/root.pem

@@ -0,0 +1,20 @@
+-----BEGIN CERTIFICATE-----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+-----END CERTIFICATE-----

apps/android/test/android/java/cn/crossdesk/mobile/AnnouncementInboxTest.java

@@ -0,0 +1,71 @@
+package cn.crossdesk.mobile;
+
+import androidx.test.platform.app.InstrumentationRegistry;
+import org.json.*;
+import org.junit.*;
+import java.io.File;
+import java.nio.file.Files;
+import java.util.*;
+import java.util.concurrent.FutureTask;
+import static org.junit.Assert.*;
+
+public class AnnouncementInboxTest {
+    private AnnouncementInbox inbox;
+    private File directory;
+    private final ArrayDeque<JSONObject> sent=new ArrayDeque<>();
+    private interface Checked { void run() throws Exception; }
+    private void main(Checked action)throws Exception {
+        FutureTask<Void> task=new FutureTask<>(()->{action.run();return null;});
+        InstrumentationRegistry.getInstrumentation().runOnMainSync(task);task.get();
+    }
+    @Before public void setup()throws Exception {
+        directory=Files.createTempDirectory(InstrumentationRegistry.getInstrumentation().getTargetContext().getCacheDir().toPath(),"announcements-").toFile();
+        main(()->{inbox=new AnnouncementInbox(directory);inbox.sender=(message,id)->sent.add(message);inbox.configure("Example.test.",9099,"123456789");inbox.setConnected(true);});
+    }
+    @After public void cleanup()throws Exception {
+        main(()->inbox.close());
+        try(var paths=Files.walk(directory.toPath())){for(var path:paths.sorted(Comparator.reverseOrder()).toList())Files.delete(path);}
+    }
+    private static JSONObject answer(JSONObject request,int count,long revision)throws Exception {
+        int offset=request.getInt("offset");boolean summary=request.getBoolean("summary_only");JSONArray items=new JSONArray();
+        for(int i=offset;i<Math.min(count,offset+(summary?200:20));i++){
+            JSONObject item=new JSONObject().put("id",i+1).put("revision",revision);
+            if(!summary)item.put("title",i==0?"欢迎使用 CrossDesk":"公告 "+(i+1)).put("body","安卓公告与 iOS 保持一致。\n\n访问 [CrossDesk 官网](https://crossdesk.cn) 了解更多。\n支持中文、换行与网页链接。").put("updated_at",1790812800L);
+            items.put(item);
+        }
+        return new JSONObject().put("type","announcements").put("request_id",request.getString("request_id"))
+            .put("summary_only",summary).put("offset",offset).put("total",count).put("catalog_revision",revision).put("items",items);
+    }
+    private void drain(int count,long revision)throws Exception {
+        int limit=100;while(!sent.isEmpty()){assertTrue("Request loop",limit-->0);inbox.receive(answer(sent.remove(),count,revision));}
+    }
+    @Test public void summariesCountAllUnreadAndBodiesPageInTwenties()throws Exception {main(()->{
+        JSONObject first=sent.remove();inbox.receive(answer(first,203,1));assertEquals(200,sent.peek().getInt("offset"));assertEquals(0,inbox.items.size());
+        inbox.receive(answer(sent.remove(),203,1));assertEquals(203,inbox.unread);assertFalse(sent.peek().getBoolean("summary_only"));
+        drain(203,1);assertEquals(20,inbox.items.size());assertEquals(203,inbox.total);assertFalse(inbox.loading);assertTrue(inbox.loaded);
+        inbox.loadMore();assertEquals(20,sent.peek().getInt("offset"));drain(203,1);assertEquals(40,inbox.items.size());
+    });}
+    @Test public void readAndDeletePersistPerRevisionAndScope()throws Exception {main(()->{
+        drain(3,1);inbox.markRead(inbox.items.get(0));inbox.dismiss(inbox.items.get(1));assertEquals(1,inbox.unread);assertEquals(2,inbox.total);
+        inbox.close();inbox=new AnnouncementInbox(directory);inbox.sender=(message,id)->sent.add(message);
+        inbox.configure("example.TEST",9099,"123456789");inbox.setConnected(true);drain(3,1);
+        assertEquals(2,inbox.items.size());assertTrue(inbox.items.get(0).read);assertEquals(1,inbox.unread);
+        inbox.refresh();drain(3,2);assertEquals(3,inbox.total);assertEquals(3,inbox.unread);assertEquals(3,inbox.items.size());
+        inbox.configure("other.test",9099,"123456789");drain(3,1);assertEquals(3,inbox.unread);
+        inbox.configure("example.test",9099,"different-device");drain(3,1);assertEquals(3,inbox.unread);
+        inbox.configure("example.test",9999,"123456789");drain(3,1);assertEquals(3,inbox.unread);
+        inbox.configure("example.test",9099,"123456789");drain(3,1);assertEquals(1,inbox.unread);
+    });}
+
+    @Test public void malformedResponseFailsWithoutLosingVisibleRowsAndCanRetry()throws Exception {main(()->{
+        drain(2,1);inbox.refresh();JSONObject invalid=answer(sent.remove(),2,1);invalid.put("total","2");inbox.receive(invalid);
+        assertTrue(inbox.failed);assertFalse(inbox.loading);assertEquals(2,inbox.items.size());
+        inbox.refresh();drain(2,2);assertFalse(inbox.failed);
+        inbox.refresh();JSONObject summary=answer(sent.remove(),2,3);summary.getJSONArray("items").getJSONObject(1).put("id",1);inbox.receive(summary);
+        assertTrue(inbox.failed);inbox.refresh();drain(2,3);assertFalse(inbox.failed);
+        inbox.refresh();inbox.receive(answer(sent.remove(),2,4));JSONObject body=answer(sent.remove(),2,4);
+        body.getJSONArray("items").getJSONObject(0).put("body","中".repeat(2667));inbox.receive(body);assertTrue(inbox.failed);assertEquals(0,inbox.items.size());
+        inbox.refresh();drain(2,4);assertFalse(inbox.failed);
+    });}
+
+}

apps/android/test/android/java/cn/crossdesk/mobile/ControllerTest.java

@@ -0,0 +1,88 @@
+package cn.crossdesk.mobile;
+
+import android.content.Context;
+import android.view.KeyEvent;
+import androidx.test.ext.junit.runners.AndroidJUnit4;
+import androidx.test.platform.app.InstrumentationRegistry;
+import org.json.JSONObject;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import java.lang.reflect.Field;
+import java.util.concurrent.ExecutorService;
+import java.util.concurrent.TimeUnit;
+import static org.junit.Assert.*;
+
+@RunWith(AndroidJUnit4.class)
+public class ControllerTest {
+
+    @Test public void repeatedNativeConnectedEventsNotifyAndInitializeOnlyOnce()throws Exception{
+        var instrumentation=InstrumentationRegistry.getInstrumentation();
+        var notifications=new java.util.concurrent.atomic.AtomicInteger();
+        NativeSession.Listener listener=new NativeSession.Listener(){
+            public void status(String value){}public void connected(){notifications.incrementAndGet();}public void ended(String reason){}
+            public void data(JSONObject value){}public void videoSize(int width,int height){}public void clipboard(String value){}public void statistics(RemoteNetworkStatistics.Snapshot value){}
+        };
+        NativeSession session=new NativeSession(instrumentation.getTargetContext(),"127.0.0.1",1,"123456789","test",listener);
+        Field workerField=NativeSession.class.getDeclaredField("RTC"),audioField=NativeSession.class.getDeclaredField("audio");workerField.setAccessible(true);audioField.setAccessible(true);
+        ExecutorService worker=(ExecutorService)workerField.get(null);
+        var event=NativeSession.class.getDeclaredMethod("onNativeEvent",int.class,byte[].class);event.setAccessible(true);
+        byte[] connected="{\"status\":1}".getBytes(java.nio.charset.StandardCharsets.UTF_8);
+        try{
+            // Exercise the Java native-callback path without starting a network peer.
+            event.invoke(session,2,connected);Object audio=worker.submit(()->audioField.get(session)).get(5,TimeUnit.SECONDS);
+            instrumentation.waitForIdleSync();assertEquals(1,notifications.get());assertNotNull(audio);
+            event.invoke(session,2,connected);event.invoke(session,2,connected);
+            assertSame("Duplicate readiness must not replace the audio player",audio,worker.submit(()->audioField.get(session)).get(5,TimeUnit.SECONDS));
+            instrumentation.waitForIdleSync();assertEquals("One desktop connection must notify the UI only once",1,notifications.get());
+        }finally{session.close();worker.submit(()->{}).get(5,TimeUnit.SECONDS);}
+    }
+    @Test public void keyboardSupportsDesktopVirtualKeys() {
+        assertEquals(0x41, KeyMap.windowsCode(KeyEvent.KEYCODE_A));
+        assertEquals(0x2E, KeyMap.windowsCode(KeyEvent.KEYCODE_FORWARD_DEL));
+        assertEquals(0x11, KeyMap.windowsCode(KeyEvent.KEYCODE_CTRL_LEFT));
+        assertEquals(0x5B, KeyMap.windowsCode(KeyEvent.KEYCODE_META_LEFT));
+        assertEquals(0xDB | 0x100, KeyMap.ascii('{'));
+        assertEquals(0x31 | 0x100, KeyMap.ascii('!'));
+        assertEquals(0, KeyMap.ascii('中'));
+    }
+
+    @Test public void credentialsRemainEncryptedAndServerScoped() throws Exception {
+        Context context = InstrumentationRegistry.getInstrumentation().getTargetContext();
+        SecretStore store = new SecretStore(context);
+        String scope = "instrumentation.invalid:9099";
+        try {
+            store.put(scope, "test-id@temporary-test-password");
+            assertEquals("test-id@temporary-test-password", store.get(scope));
+            assertEquals("", store.get("instrumentation.invalid:9100"));
+            String persisted = context.getSharedPreferences("identities", Context.MODE_PRIVATE).getString(scope, "");
+            assertFalse(persisted.contains("temporary-test-password"));
+        } finally {
+            context.getSharedPreferences("identities", Context.MODE_PRIVATE).edit().remove(scope).commit();
+        }
+    }
+
+    @Test public void nativePeerCanStartAndCancelRepeatedly() throws Exception {
+        Context context = InstrumentationRegistry.getInstrumentation().getTargetContext();
+        Field workerField = NativeSession.class.getDeclaredField("RTC"); workerField.setAccessible(true);
+        ExecutorService worker = (ExecutorService) workerField.get(null);
+        Field handleField = NativeSession.class.getDeclaredField("handle"); handleField.setAccessible(true);
+        NativeSession.Listener listener = new NativeSession.Listener() {
+            public void status(String value) { }
+            public void connected() { fail("Loopback port 1 must not establish a session"); }
+            public void ended(String reason) { }
+            public void data(JSONObject data) { }
+            public void videoSize(int width, int height) { }
+            public void clipboard(String value) { }
+            public void statistics(RemoteNetworkStatistics.Snapshot value) { }
+        };
+        for (int i = 0; i < 3; i++) {
+            NativeSession session = new NativeSession(context, "127.0.0.1", 1, "invalid", "test", listener);
+            session.start();
+            assertTrue(worker.submit(() -> handleField.getLong(session)).get(15, TimeUnit.SECONDS) != 0);
+            session.surface(null);
+            session.close(); session.close();
+            assertEquals(0L, (long) worker.submit(() -> handleField.getLong(session)).get(15, TimeUnit.SECONDS));
+        }
+    }
+
+}

apps/android/test/android/java/cn/crossdesk/mobile/NetworkStatisticsTest.java

@@ -0,0 +1,24 @@
+package cn.crossdesk.mobile;
+
+import org.json.JSONObject;
+import org.junit.Test;
+import static org.junit.Assert.*;
+
+public class NetworkStatisticsTest {
+    static JSONObject report(int mode,boolean srtp,double rtt)throws Exception{
+        return new JSONObject().put("mode",mode).put("srtp",srtp).put("rtt",rtt).put("video",traffic(8000000,0,.02)).put("audio",traffic(64000,0,.01)).put("data",traffic(2000,3000,.03)).put("total",traffic(8066000,3000,.06));
+    }
+    private static JSONObject traffic(long in,long out,double loss)throws Exception{return new JSONObject().put("inbound",in).put("outbound",out).put("loss",loss);}
+
+    @Test public void staleReportsAndRttExpireIndependently()throws Exception{
+        RemoteNetworkStatistics state=new RemoteNetworkStatistics();state.receive(new RemoteNetworkStatistics.Report(report(0,true,20)),10);state.receive(new RemoteNetworkStatistics.Report(report(0,true,100)),11);assertEquals(40,state.snapshot(11).rtt,.0001);
+        for(double invalid:new double[]{-1,2001})state.receive(new RemoteNetworkStatistics.Report(report(0,true,invalid)),12);
+        assertEquals(40,state.snapshot(13.99).rtt,.0001);assertTrue(Double.isNaN(state.snapshot(14).rtt));assertNotNull(state.snapshot(14).report);assertNull(state.snapshot(15).report);
+        state.receive(new RemoteNetworkStatistics.Report(report(0,true,0)),16);assertEquals(0,state.snapshot(16).rtt,0);
+    }
+    @Test public void submittedFramesAreCountedOnceAndIdleVideoExpires(){
+        RemoteNetworkStatistics state=new RemoteNetworkStatistics();state.frame(1,100,1920,1080,10);state.frame(1,100,1920,1080,10.1);state.frame(2,200,1920,1080,10.2);
+        assertEquals(2,state.snapshot(10.3).fps);assertEquals(150,state.snapshot(10.3).latency,.0001);assertEquals("1920 × 1080",state.snapshot(10.3).resolution());assertEquals(1,state.snapshot(11).fps);assertEquals(0,state.snapshot(11.3).fps);assertTrue(Double.isNaN(state.snapshot(11.3).latency));
+    }
+
+}

apps/android/test/android/java/cn/crossdesk/mobile/RemotePreviewStoreTest.java

@@ -0,0 +1,59 @@
+package cn.crossdesk.mobile;
+
+import android.content.*;
+import android.graphics.*;
+import androidx.test.platform.app.InstrumentationRegistry;
+import org.junit.*;
+import java.io.*;
+import java.nio.file.Files;
+import java.util.*;
+import java.util.concurrent.*;
+import static org.junit.Assert.*;
+
+public class RemotePreviewStoreTest {
+    private Context context;
+    private File root;
+    private SharedPreferences options,index;
+    private String prefix;
+    private RemotePreviewStore store;
+    @Before public void setup()throws Exception{
+        context=InstrumentationRegistry.getInstrumentation().getTargetContext();prefix="preview-test-"+UUID.randomUUID();
+        options=context.getSharedPreferences(prefix,0);index=context.getSharedPreferences(prefix+"-index",0);
+        root=Files.createTempDirectory(context.getCacheDir().toPath(),"previews-").toFile();
+        store=new RemotePreviewStore(new File(root,"images"),options,index);
+    }
+    @After public void cleanup()throws Exception{
+        store.clear();flush();store.io.shutdown();
+        try(var paths=Files.walk(root.toPath())){for(var path:paths.sorted(Comparator.reverseOrder()).toList())Files.delete(path);}
+        context.deleteSharedPreferences(prefix);context.deleteSharedPreferences(prefix+"-index");
+    }
+    private void flush()throws Exception{store.io.submit(()->{}).get(5,TimeUnit.SECONDS);InstrumentationRegistry.getInstrumentation().waitForIdleSync();}
+    private void enable(){options.edit().putBoolean("networkConsent",true).commit();store.setEnabled(true);}
+    private static Bitmap solid(int color){Bitmap image=Bitmap.createBitmap(640,360,Bitmap.Config.ARGB_8888);image.eraseColor(color);return image;}
+    private Bitmap load(String server,String id)throws Exception{
+        var result=new java.util.concurrent.atomic.AtomicReference<Bitmap>();var done=new CountDownLatch(1);
+        store.load(server,id,image->{result.set(image);done.countDown();});assertTrue(done.await(5,TimeUnit.SECONDS));return result.get();
+    }
+    @Test public void offByDefaultAndConsentCannotBeBypassed()throws Exception{
+        assertFalse(store.enabled());assertNull(store.begin("server","1"));store.setEnabled(true);flush();assertFalse(store.enabled());
+        options.edit().putBoolean("networkConsent",true).commit();assertFalse(store.enabled());
+        enable();assertNotNull(store.begin("server","1"));
+        options.edit().putBoolean("networkConsent",false).commit();store.enforceConsent();flush();
+        assertFalse(options.getBoolean(RemotePreviewStore.OPTION,true));assertNull(store.begin("server","1"));
+    }
+    @Test public void jpegPersistsAcrossStoreRecreationAndRemainsServerScoped()throws Exception{
+        enable();var capture=store.begin("server:1","123456789");store.save(capture,solid(Color.GREEN));flush();
+        assertTrue(new File(store.directory,capture.key+".jpg").isFile());
+        assertNull(load("server:2","123456789"));assertNull(load("server:1","other"));
+        store.io.shutdown();store=new RemotePreviewStore(store.directory,options,index);
+        Bitmap loaded=load("server:1","123456789");assertNotNull(loaded);assertEquals(640,loaded.getWidth());assertEquals(360,loaded.getHeight());assertTrue(Color.green(loaded.getPixel(320,180))>240);loaded.recycle();
+    }
+
+    @Test public void disablingDeletesFilesAndInvalidatesInFlightCapture()throws Exception{
+        enable();var capture=store.begin("server","1");store.save(capture,solid(Color.BLUE));flush();
+        store.setEnabled(false);store.save(capture,solid(Color.RED));flush();
+        assertFalse(store.enabled());assertFalse(store.directory.exists());assertTrue(index.getAll().isEmpty());assertNull(load("server","1"));
+        store.setEnabled(true);assertNull(load("server","1"));
+    }
+
+}

apps/android/test/android/java/cn/crossdesk/mobile/RemoteVersionCheckTest.java

@@ -0,0 +1,64 @@
+package cn.crossdesk.mobile;
+
+import androidx.test.ext.junit.runners.AndroidJUnit4;
+import org.json.JSONObject;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import java.nio.charset.StandardCharsets;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Consumer;
+import static org.junit.Assert.*;
+
+@RunWith(AndroidJUnit4.class)
+public class RemoteVersionCheckTest {
+    private static byte[] json(String value) { return value.getBytes(StandardCharsets.UTF_8); }
+    private static JSONObject host(Object version) {
+        try { return new JSONObject().put("app_version", version); }
+        catch (Exception error) { throw new AssertionError(error); }
+    }
+    private static final class Fetches implements RemoteVersionCheck.Fetcher {
+        final List<Consumer<byte[]>> replies = new ArrayList<>();
+        int cancellations;
+        public RemoteVersionCheck.Cancellation fetch(Consumer<byte[]> reply) {
+            replies.add(reply);
+            return () -> cancellations++;
+        }
+    }
+
+    @Test public void sharedNativeComparisonMatchesIosReleaseOrdering() {
+        byte[] release = json("{\"latest_version\":\"v1.5.3-20260928\",\"patch\":2}");
+        for (String version : new String[]{"1.5.2", "v1.5.3-20260928", "1.5.3-1-20260929", "1.5.3-20260928-1"}) {
+            assertTrue(NativeSession.nValidAppVersion(version));
+            assertTrue(version, NativeSession.nHasAppUpdate(version, release));
+        }
+        for (String version : new String[]{"1.5.3-2-20260927", "1.5.3-3-20260928", "1.6.0"})
+            assertFalse(version, NativeSession.nHasAppUpdate(version, release));
+        assertFalse(NativeSession.nHasAppUpdate("1.5.3-20260927", json("{\"version\":\"1.5.3-20261001\"}")));
+        assertTrue(NativeSession.nHasAppUpdate("1.5.3-9", json("{\"version\":\"1.5.3\",\"patch\":\"10\"}")));
+    }
+
+    @Test public void legacyVersionWaitsForConnectionAndNeverFetches() {
+        for (Object version : new Object[]{null, JSONObject.NULL, 123, "", " ", "unknown", "ios-native", "1..5", "1.5-"}) {
+            Fetches fetches = new Fetches(); int[] notices = {0};
+            RemoteVersionCheck check = new RemoteVersionCheck(fetches, () -> notices[0]++);
+            check.hostInfo(host(version)); assertEquals(0, notices[0]);
+            check.connected(); assertEquals(1, notices[0]);
+            check.hostInfo(host(version)); check.connected(); assertEquals(1, notices[0]);
+            assertTrue(fetches.replies.isEmpty()); check.reset();
+        }
+    }
+
+    @Test public void disconnectCancelsAndOldReplyCannotAffectANewPeer() {
+        Fetches fetches = new Fetches(); int[] notices = {0};
+        RemoteVersionCheck check = new RemoteVersionCheck(fetches, () -> notices[0]++);
+        check.hostInfo(host("1.0.0")); check.connected(); check.reset();
+        assertEquals(1, fetches.cancellations);
+        fetches.replies.get(0).accept(json("{\"version\":\"2.0.0\"}")); assertEquals(0, notices[0]);
+        check.connected(); check.hostInfo(host("3.0.0"));
+        fetches.replies.get(0).accept(json("{\"version\":\"2.0.0\"}"));
+        fetches.replies.get(1).accept(json("{\"version\":\"2.0.0\"}")); assertEquals(0, notices[0]);
+        check.reset(); assertEquals(1, fetches.cancellations);
+    }
+
+}

apps/android/test/android/java/cn/crossdesk/mobile/TlsTrustTest.java

@@ -0,0 +1,63 @@
+package cn.crossdesk.mobile;
+
+import android.content.Context;
+import androidx.test.ext.junit.runners.AndroidJUnit4;
+import androidx.test.platform.app.InstrumentationRegistry;
+import org.json.JSONObject;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import java.io.*;
+import java.lang.reflect.*;
+import java.net.InetAddress;
+import java.nio.file.Files;
+import java.security.KeyStore;
+import java.util.concurrent.*;
+import javax.net.ssl.*;
+import static org.junit.Assert.*;
+
+/** Exercises the actual MiniRTC TLS path inside an Android app process (AT_SECURE=1).
+ * The bundled PKCS12 keys are public test fixtures, only served on loopback. No
+ * websocket upgrade/login or external server is involved in these tests. */
+@RunWith(AndroidJUnit4.class)
+public class TlsTrustTest {
+    @Test public void explicitlyTrustedCertificateCompletesHandshake() throws Exception {
+        assertTrue("The app must load the supplied trust bundle despite AT_SECURE", handshake("valid",true));
+    }
+    @Test public void untrustedCertificateIsRejected() throws Exception {
+        assertFalse("A test CA absent from the system store must not be trusted",handshake("valid",false));
+    }
+    @Test public void certificateForAnotherHostIsRejected() throws Exception {
+        assertFalse("Trusting the CA must not bypass hostname verification",handshake("wrong-host",true));
+    }
+    private boolean handshake(String certificate,boolean trustFixture) throws Exception {
+        var instrumentation=InstrumentationRegistry.getInstrumentation();Context context=instrumentation.getTargetContext();
+        KeyStore keyStore=KeyStore.getInstance("PKCS12");char[] password="local-test-only".toCharArray();
+        try(InputStream input=instrumentation.getContext().getAssets().open("tls/"+certificate+".p12")){keyStore.load(input,password);}
+        KeyManagerFactory keys=KeyManagerFactory.getInstance(KeyManagerFactory.getDefaultAlgorithm());keys.init(keyStore,password);
+        SSLContext tls=SSLContext.getInstance("TLS");tls.init(keys.getKeyManagers(),null,null);
+        ExecutorService serverWorker=Executors.newSingleThreadExecutor();
+        NativeSession session=new NativeSession(context,"127.0.0.1",1,"unused","unused",new NativeSession.Listener(){
+            public void status(String value){} public void connected(){fail("Test server never opens a desktop session");}
+            public void ended(String value){} public void data(JSONObject value){}public void videoSize(int w,int h){}
+            public void clipboard(String value){}public void statistics(RemoteNetworkStatistics.Snapshot value){}
+        });
+        File roots=new File(context.getCacheDir(),"tls-test-roots.pem");
+        Field rtcField=NativeSession.class.getDeclaredField("RTC");rtcField.setAccessible(true);ExecutorService rtc=(ExecutorService)rtcField.get(null);
+        try(SSLServerSocket server=(SSLServerSocket)tls.getServerSocketFactory().createServerSocket(0,1,InetAddress.getByName("127.0.0.1"))){
+            server.setSoTimeout(10000);
+            if(trustFixture){try(InputStream input=instrumentation.getContext().getAssets().open("tls/root.pem")){Files.copy(input,roots.toPath(),java.nio.file.StandardCopyOption.REPLACE_EXISTING);}}
+            else{Method export=NativeSession.class.getDeclaredMethod("exportTrust");export.setAccessible(true);File systemRoots=(File)export.invoke(session);Files.copy(systemRoots.toPath(),roots.toPath(),java.nio.file.StandardCopyOption.REPLACE_EXISTING);}
+            Future<Boolean> request=serverWorker.submit(()->{
+                try(SSLSocket socket=(SSLSocket)server.accept()){
+                    socket.setSoTimeout(10000);socket.startHandshake();
+                    String first=new BufferedReader(new InputStreamReader(socket.getInputStream(),java.nio.charset.StandardCharsets.US_ASCII)).readLine();
+                    return first!=null&&first.startsWith("GET ");
+                }catch(SSLException expected){return false;}
+            });
+            Method create=NativeSession.class.getDeclaredMethod("nCreate",NativeSession.class,String.class,int.class,String.class,String.class,String.class);create.setAccessible(true);
+            Field handle=NativeSession.class.getDeclaredField("handle");handle.setAccessible(true);
+            rtc.submit(()->{try{long value=(long)create.invoke(null,session,"127.0.0.1",server.getLocalPort(),"",context.getCacheDir().getAbsolutePath(),roots.getAbsolutePath());handle.setLong(session,value);assertNotEquals(0L,value);}catch(ReflectiveOperationException error){throw new RuntimeException(error);}}).get(10,TimeUnit.SECONDS);
+            return request.get(15,TimeUnit.SECONDS);
+        }finally{session.close();rtc.submit(()->{}).get(10,TimeUnit.SECONDS);serverWorker.shutdownNow();roots.delete();}
+    }
+}

apps/android/test/android/java/cn/crossdesk/mobile/VideoSettingsTest.java

@@ -0,0 +1,22 @@
+package cn.crossdesk.mobile;
+
+import org.junit.Test;
+import static org.junit.Assert.*;
+
+public class VideoSettingsTest {
+    private final RemoteVideoSettings.Values first=new RemoteVideoSettings.Values(1,30,2),second=new RemoteVideoSettings.Values(0,60,1);
+    private void same(RemoteVideoSettings.Values expected,RemoteVideoSettings.Values actual){assertEquals(expected.quality,actual.quality);assertEquals(expected.frameRate,actual.frameRate);assertEquals(expected.preference,actual.preference);}
+
+    @Test public void acknowledgementCommitsAndRejectionRollsBack(){
+        RemoteVideoSettings state=new RemoteVideoSettings(1);state.setSupported(true);long id=state.begin(first);assertTrue(state.pending);same(new RemoteVideoSettings.Values(1,30,1),state.applied);
+        state.receive(first,id,true);same(first,state.selection);assertFalse(state.pending);assertFalse(state.failed);state.expire(id);assertFalse(state.failed);
+        id=state.begin(second);state.receive(second,id,false);same(first,state.selection);assertTrue(state.failed);state.begin(second);assertFalse(state.failed);
+    }
+
+    @Test public void timeoutLateReplyAndCapabilityLoss(){
+        RemoteVideoSettings state=new RemoteVideoSettings(1);state.setSupported(true);long id=state.begin(first);state.expire(id);assertTrue(state.failed);same(new RemoteVideoSettings.Values(1,30,1),state.selection);
+        state.receive(first,id,true);same(first,state.selection);assertFalse(state.failed);
+        id=state.begin(second);state.setSupported(false);state.receive(second,id,true);state.expire(id);same(first,state.selection);assertFalse(state.failed);assertFalse(state.pending);
+    }
+
+}