Frametop: a multi-screen desktop and universal 3D mouse for the Steam Frame

Several KDE Plasma screens floating in SteamVR, each a real monitor of any
resolution and shape, shown by our own compositor (ft-screens), with a
layout, wrist pinning, and visibility modes; a Bluetooth mouse that drives
all of SteamVR as a room-anchored 3D pointer (input relay, ft-pointer
helper, ft_pointer SteamVR driver); two settings apps; and Bluetooth LE
fixes. Installs on the headset with ./install.sh.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

session/remote-desktop.sh

@@ -0,0 +1,34 @@
+#!/bin/bash
+# Runs on the Frame host. Internal capture server for remote access: KRdp's
+# krdpserver (from the dev container) talks to the nested KWin directly
+# (--plasma, no desktop portal) and serves it over RDP on 127.0.0.1 only.
+# Nothing outside the Frame can reach it. vnc-bridge.sh connects to it and
+# re-serves the desktop over VNC. Started by frametop-session.sh when REMOTE=1.
+set -eu
+
+runtime=${1:?usage: remote-desktop.sh <nested XDG_RUNTIME_DIR>}
+# 3389 is taken by SteamOS's own xrdp (a separate X11 session, not the VR desktop).
+port=${RDP_PORT:-3390}
+creds=$HOME/.config/frametop-remote
+
+mkdir -p -m 0700 "$creds"
+if [ ! -s "$creds/password" ]; then
+  (umask 077; head -c 24 /dev/urandom | base64 | tr -d '/+=' | cut -c1-20 > "$creds/password")
+fi
+if [ ! -s "$creds/cert.pem" ]; then
+  (umask 077; openssl req -x509 -newkey rsa:2048 -nodes -days 3650 -subj /CN=steam-frame \
+    -keyout "$creds/key.pem" -out "$creds/cert.pem" 2>/dev/null)
+fi
+
+# Wait for the nested KWin to come up.
+for _ in $(seq 60); do
+  [ -S "$runtime/wayland-0" ] && break
+  sleep 1
+done
+
+# podman needs the real runtime dir. The nested one is passed only to krdpserver.
+export XDG_RUNTIME_DIR=/run/user/$(id -u)
+exec ~/.local/bin/distrobox enter dev -- env XDG_RUNTIME_DIR="$runtime" WAYLAND_DISPLAY=wayland-0 QT_QPA_PLATFORM=wayland \
+  krdpserver --plasma --address 127.0.0.1 --port "$port" \
+  -u steamos -p "$(cat "$creds/password")" \
+  --certificate "$creds/cert.pem" --certificate-key "$creds/key.pem"