rustdesk/AGENTS.md

RustDesk Guide

Project Layout

Directory Structure

• src/ Rust app
• src/server/ audio / clipboard / input / video / network
• src/platform/ platform-specific code
• src/ui/ legacy Sciter UI (deprecated)
• flutter/ current UI
• libs/hbb_common/ shared with the server: rendezvous proto, sockets, Config core
• libs/base/ (crate base) client-only: option keys, message proto, file transfer, platform code
• libs/scrap/ screen capture
• libs/enigo/ input control
• libs/clipboard/ clipboard
• libs/base/src/config/keys.rs the single import path for all options

Key Components

• Remote Desktop Protocol: Custom protocol implemented in src/rendezvous_mediator.rs for communicating with rustdesk-server
• Screen Capture: Platform-specific screen capture in libs/scrap/
• Input Handling: Cross-platform input simulation in libs/enigo/
• Audio/Video Services: Real-time audio/video streaming in src/server/
• File Transfer: Secure file transfer implementation in libs/base/src/fs.rs

hbb_common is a git submodule shared with the server, so changing it costs a round-trip. Put client-only code in libs/base instead; it is a normal workspace member. base::config::keys re-exports the handful of keys hbb_common still reads, so callers get the whole set from that one path.

UI Architecture

• Legacy UI: Sciter-based (deprecated) - files in src/ui/
• Modern UI: Flutter-based - files in flutter/
  • Desktop: flutter/lib/desktop/
  • Mobile: flutter/lib/mobile/
  • Shared: flutter/lib/common/ and flutter/lib/models/

Rust Rules

• Avoid unwrap() / expect() in production code.

• Exceptions:

  • tests;
  • lock acquisition where failure means poisoning, not normal control flow.

• Otherwise prefer Result + ? or explicit handling.

• Do not ignore errors silently.

• Avoid unnecessary .clone().

• Prefer borrowing when practical.

• Do not add dependencies unless needed.

• Keep code simple and idiomatic.

Logging

• debug and above are written to the log file. A log call that can fire repeatedly (per packet, frame, input event, or loop iteration, or at a rate a peer controls) must not use debug or higher unthrottled.

• For such a site, pick one:

  • log::trace! when the event is expected and the line only helps while actively debugging;
  • hbb_common::throttled_log!(interval, level, ...) when it signals a fault that should still show up in a user's log. It keeps one line per interval with a count of the rest. Use hbb_common::log_throttle::LogThrottle directly only when the decision drives more than one log call.

Tokio Rules

• Assume a Tokio runtime already exists.
• Never create nested runtimes.
• Never call Runtime::block_on() inside Tokio / async code.
• Do not hide runtime creation inside helpers or libraries.
• Do not hold locks across .await.
• Prefer .await, tokio::spawn, channels.
• Use spawn_blocking or dedicated threads for blocking work.
• Do not use std::thread::sleep() in async code.

Editing Hygiene

• Change only what is required.
• Prefer the smallest valid diff.
• Do not refactor unrelated code.
• Do not make formatting-only changes.
• Keep naming/style consistent with nearby code.

Imports

• One use per crate. Everything a file takes from the same crate goes in a single braced block, not one statement per item:

  // no
  use base::fs;
  use base::message_proto::*;
  
  // yes
  use base::{fs, message_proto::*};
  

• The only reason to split is a #[cfg(...)] that does not apply to the whole block -- an attribute binds to one item, so a differently-gated import has to stand on its own. A pub use re-export likewise cannot join a plain use.

  #[cfg(not(feature = "flutter"))]
  use base::fs;
  use base::message_proto::*;
  

• When splitting an existing use because some of its items moved to another crate, fold each side into that crate's existing block rather than leaving a second statement behind.

Comments

• Avoid comments unless they explain a non-obvious reason, constraint, or workaround.
• Never restate what the code does; prefer clearer code instead.
• If the code is self-explanatory, add no comment.

Be minimally invasive

• Prefer purely additive changes: layer new (#[cfg]-gated) blocks or new functions around existing code instead of restructuring it. The ideal diff for a fix adds lines and modifies/deletes none.
• Do not extract or reshape existing code just to enable your new code; look for a mechanism that leaves existing lines untouched (e.g. hide/show an existing object instead of refactoring its construction into a helper for rebuilding).
• Accept a little duplication over a restructure. A new function that repeats a few lines of an existing one is a better diff than reshaping the original so both can share it.
• Put new logic in self-contained functions in the module it belongs to (platform-specific logic in src/platform/, with use inside the function body to avoid churning shared import blocks). Call sites in shared files (src/tray.rs, src/core_main.rs, src/server/connection.rs, …) should be thin one-line hooks.

Scope check before touching shared code

• Before changing a shared trait, a shared struct, or the signature of a widely used function, check whether the bug or feature is specific to one path. If it is, keep the change inside that path unless that is impossible, and say in the PR why it was.
• If an unrelated caller needs Default::default(), None, or another placeholder solely to satisfy a signature you changed, the diff is too broad: stop and redesign.
• The expected shape of a fix is a new function in the feature's own module, plus at most a new field or a thin hook in the shared code it needs. Feature-specific state belongs beside the feature's existing state, not in a new abstraction every caller has to learn.

Mandatory regression-surface check

Before considering any implementation complete, perform a minimization pass over the final diff.

• Inspect every modified existing file and every modified existing code path. Each must be strictly necessary for the requested change. Revert changes that are merely cleanup, refactoring, consistency improvements, or fixes for pre-existing issues.
• For new features, preserve the existing implementation path when the feature is disabled or unsupported whenever practical. feature off should run the old code, not a rewritten equivalent.
• Do not route existing behavior through a new abstraction merely to share code with the new feature. Prefer a parallel new function or a small amount of duplication over changing a proven existing path.
• Keep new implementation logic in new or feature-specific modules. Changes to shared/core files should normally be thin hooks, capability checks, or protocol plumbing.
• Do not fix unrelated pre-existing bugs in the same PR. Put them in a separate change unless they directly block correctness or security of the requested work.
• For submodule bumps, inspect the exact commit range and ensure unrelated changes are not being pulled into the parent PR.
• Before finalizing, explicitly report the regression surface: list the existing files and existing runtime paths whose behavior changed, and explain why each change is unavoidable.
• During review, treat an unnecessarily modified legacy path as a review finding even if tests pass and the rewritten behavior appears equivalent.

Corner cases raised in review

A refactor added to cover a corner case rarely converges. Each new counter, timestamp, cache or eviction/expiry rule interacts with state that existing code relies on, and the next review round finds the problems it introduced.

• A corner case is still worth fixing when the fix is easy and low-risk: a local change of a few lines that adds no state and changes no existing lookup, such as moving a check or refusing bad input earlier.
• When the only fix needs new state, a new lifecycle rule or a restructure, and the code already fails cleanly there or behaves as master does, document it as a known limit in the PR instead. Anything beyond the easy fix needs the maintainer's explicit go-ahead first.
• Before adding state that reorders, expires or reuses existing data, list every lookup that reads that data and check each one still holds.
• Prefer a clean failure, where the operation reports an error, over machinery that tries to make a rare case succeed.

Reviewing a PR

• Review only what the diff introduces. Verify ownership with gh pr diff before reporting a finding — if the offending lines are untouched context, it is a pre-existing problem, not this PR's.
• List pre-existing problems in a separate section at the end, or leave out the ones that are not fatal. Never mix them into the findings the author has to fix.
• Before re-reviewing, read the author's reply comments. Do not re-raise items they declined on scope grounds.
• State a finding's consequence exactly: distinguish "the value is lost" from "the shortcut is inert but the value still saves".

Localization (src/lang/*.rs)

Each file is a HashMap<key, translation>. Layout:

• template.rs is the master list of every key. Never edit it as part of translation work.
• en.rs holds only the keys whose English display text differs from the key itself.
• Every other file (de.rs, fr.rs, …) carries the full key set; an untranslated entry has an empty value: ("key", "").
• it.rs is maintained by hand by its translator. Never fill or change its entries; when adding new keys, append them to it with "" and leave the translation to the maintainer.

Finding the English source for a key

When filling an empty entry, determine the source English text with this rule:

• If key exists in en.rs with a non-empty value, that value is the source text (look it up in en.rs).
• Otherwise the key string itself is the source text (the key is already plain English).

Then translate that source into the file's target language (infer the language from the file's existing non-empty entries / filename).

Translation hygiene

• Only fill empty values. Never change keys, and never touch existing non-empty translations.
• Preserve placeholders ({}) and escape sequences (\n, \") exactly as in the source.
• Do not translate brand or technical tokens: RustDesk, Socks5, TLS, UAC, Wayland, X11, TCP, UDP, 2FA, RDP, D3D, etc.
• Copy URL values (e.g. doc_* keys) verbatim from en.rs.

Adding new keys (feature work)

• New English-text keys use sentence case, not Title Case: Use ID whitelisting, not Use ID Whitelisting. Acronyms (ID, IP, 2FA…) stay uppercase. Legacy Title-Case keys (e.g. Use IP Whitelisting) stay as-is — do not rename them.
• Since the key itself is the English display text, a sentence-case key usually needs no en.rs entry; add one only when the display text must differ from the key (e.g. *_tip keys).
• Append each new key to template.rs (with "") and to every src/lang/*.rs file (translated, or "" if unsure; always "" for it.rs), at the end of the list.