bump selkies for input passing support and SDL2 gamepad interposer support

Author: thelamer

Dockerfile

@@ -16,7 +16,7 @@ RUN \
     https://github.com/selkies-project/selkies.git \
     /src && \
   cd /src && \
-  git checkout -f db030a319f6e60994ec1be23217506ddab56ac5f
+  git checkout -f d70c9155e0df97ac1e6ac7a4cce04e4b04840286
 
 RUN \
   echo "**** build shared core library ****" && \
@@ -190,7 +190,7 @@ RUN \
     | awk '/tag_name/{print $4;exit}' FS='[""]') && \
   curl -o \
     /tmp/selkies.tar.gz -L \
-    "https://github.com/selkies-project/selkies/archive/db030a319f6e60994ec1be23217506ddab56ac5f.tar.gz" && \
+    "https://github.com/selkies-project/selkies/archive/d70c9155e0df97ac1e6ac7a4cce04e4b04840286.tar.gz" && \
   cd /tmp && \
   tar xf selkies.tar.gz && \
   cd selkies-* && \

Dockerfile.aarch64

@@ -16,7 +16,7 @@ RUN \
     https://github.com/selkies-project/selkies.git \
     /src && \
   cd /src && \
-  git checkout -f db030a319f6e60994ec1be23217506ddab56ac5f
+  git checkout -f d70c9155e0df97ac1e6ac7a4cce04e4b04840286
 
 RUN \
   echo "**** build shared core library ****" && \
@@ -188,7 +188,7 @@ RUN \
     | awk '/tag_name/{print $4;exit}' FS='[""]') && \
   curl -o \
     /tmp/selkies.tar.gz -L \
-    "https://github.com/selkies-project/selkies/archive/db030a319f6e60994ec1be23217506ddab56ac5f.tar.gz" && \
+    "https://github.com/selkies-project/selkies/archive/d70c9155e0df97ac1e6ac7a4cce04e4b04840286.tar.gz" && \
   cd /tmp && \
   tar xf selkies.tar.gz && \
   cd selkies-* && \

Jenkinsfile

@@ -838,6 +838,8 @@ pipeline {
                 -e WEB_PATH=\"${CI_WEBPATH}\" \
                 -e NODE_NAME=\"${NODE_NAME}\" \
                 -e SYFT_IMAGE_TAG=\"${CI_SYFT_IMAGE_TAG:-${SYFT_IMAGE_TAG}}\" \
+                -e COMMIT_SHA=\"${COMMIT_SHA}\" \
+                -e BUILD_NUMBER=\"${BUILD_NUMBER}\" \
                 -t ghcr.io/linuxserver/ci:${CITEST_IMAGETAG} \
                 python3 test_build.py'''
         }

README.md

@@ -223,26 +223,27 @@ When secure mode is enabled (`SELKIES_MASTER_TOKEN` is set), the server runs a c
 
 **Permissions Object Fields:**
 *   `"role"`: (String, required) Can be one of the following:
-    *   `"controller"`: Full access. Can send keyboard, mouse, and all other input events.
-    *   `"viewer"`: Restricted access. Primarily for viewing the stream. Can be granted specific input rights via the `slot` property.
-*   `"slot"`: (Integer or `null`, required) Assigns an input slot, for gamepads.
-    *   `null`: No specific input slot. A viewer with a `null` slot has no input capabilities.
-    *   `1`: Grants the `viewer` control over the **Player 1** gamepad *only*.
-    *   `2`: Grants the `viewer` control over the **Player 2** gamepad *only*.
-    *   `3`: Grants the `viewer` control over the **Player 3** gamepad *only*.
-    *   `4`: Grants the `viewer` control over the **Player 4** gamepad *only*.
-
-**Behavior:** When a valid request is received, the server replaces its entire set of active tokens with the new set provided in the payload. It then runs a reconciliation process: any connected client whose token is now invalid or has changed permissions will be disconnected and users input capabilities will be modified live.
+    *   `"controller"`: Full access. Can send keyboard, mouse, and all other input events (unless overridden by `mk_control`).
+    *   `"viewer"`: Restricted access. Primarily for viewing the stream. Can be granted specific input rights via the `slot` or `mk_control` properties.
+*   `"slot"`: (Integer or `null`, required) Assigns an input slot, primarily for gamepads.
+    *   `null`: No specific input slot.
+    *   `1` - `4`: Grants the user control over the specific virtual gamepad slot (Player 1 through Player 4).
+*   `"mk_control"`: (Boolean, optional) Exclusive override for Mouse & Keyboard input.
+    *   If `true` on **any** active token in the set, only that specific client processes mouse and keyboard events.
+    *   If `false` or omitted on **all** active tokens, mouse and keyboard access defaults to clients with the `"controller"` role.
+
+**Behavior:** When a valid request is received, the server replaces its entire set of active tokens with the new set provided in the payload. It then runs a reconciliation process:
+1.  Clients with tokens not present in the new set are disconnected.
+2.  Clients with tokens that remain valid but have changed permissions (`role`, `slot`, or `mk_control`) receive an immediate state update without disconnection.
 
 **Example `curl` Command:**
 ```bash
 curl -X POST http://localhost:8083/tokens \
 -H "Authorization: Bearer my-secret-master-token" \
 -H "Content-Type: application/json" \
 -d '{
-  "user-token-1": {"role": "controller", "slot": null},
-  "user-token-2": {"role": "viewer", "slot": 1},
-  "user-token-3": {"role": "viewer", "slot": null}
+  "token-1": {"role": "controller", "slot": null, "mk_control": false},
+  "token-2": {"role": "viewer", "slot": 1, "mk_control": true}
 }'
 ```
 

readme-vars.yml

@@ -227,29 +227,30 @@ full_custom_readme: |
 
   **Permissions Object Fields:**
   *   `"role"`: (String, required) Can be one of the following:
-      *   `"controller"`: Full access. Can send keyboard, mouse, and all other input events.
-      *   `"viewer"`: Restricted access. Primarily for viewing the stream. Can be granted specific input rights via the `slot` property.
-  *   `"slot"`: (Integer or `null`, required) Assigns an input slot, for gamepads.
-      *   `null`: No specific input slot. A viewer with a `null` slot has no input capabilities.
-      *   `1`: Grants the `viewer` control over the **Player 1** gamepad *only*.
-      *   `2`: Grants the `viewer` control over the **Player 2** gamepad *only*.
-      *   `3`: Grants the `viewer` control over the **Player 3** gamepad *only*.
-      *   `4`: Grants the `viewer` control over the **Player 4** gamepad *only*.
-
-  **Behavior:** When a valid request is received, the server replaces its entire set of active tokens with the new set provided in the payload. It then runs a reconciliation process: any connected client whose token is now invalid or has changed permissions will be disconnected and users input capabilities will be modified live.
+      *   `"controller"`: Full access. Can send keyboard, mouse, and all other input events (unless overridden by `mk_control`).
+      *   `"viewer"`: Restricted access. Primarily for viewing the stream. Can be granted specific input rights via the `slot` or `mk_control` properties.
+  *   `"slot"`: (Integer or `null`, required) Assigns an input slot, primarily for gamepads.
+      *   `null`: No specific input slot.
+      *   `1` - `4`: Grants the user control over the specific virtual gamepad slot (Player 1 through Player 4).
+  *   `"mk_control"`: (Boolean, optional) Exclusive override for Mouse & Keyboard input.
+      *   If `true` on **any** active token in the set, only that specific client processes mouse and keyboard events.
+      *   If `false` or omitted on **all** active tokens, mouse and keyboard access defaults to clients with the `"controller"` role.
+
+  **Behavior:** When a valid request is received, the server replaces its entire set of active tokens with the new set provided in the payload. It then runs a reconciliation process:
+  1.  Clients with tokens not present in the new set are disconnected.
+  2.  Clients with tokens that remain valid but have changed permissions (`role`, `slot`, or `mk_control`) receive an immediate state update without disconnection.
 
   **Example `curl` Command:**
   ```bash
   curl -X POST http://localhost:8083/tokens \
   -H "Authorization: Bearer my-secret-master-token" \
   -H "Content-Type: application/json" \
   -d '{
-    "user-token-1": {"role": "controller", "slot": null},
-    "user-token-2": {"role": "viewer", "slot": 1},
-    "user-token-3": {"role": "viewer", "slot": null}
+    "token-1": {"role": "controller", "slot": null, "mk_control": false},
+    "token-2": {"role": "viewer", "slot": 1, "mk_control": true}
   }'
   ```
-  
+ 
   Clients in this mode must connect with a valid token (`?token=...`) to establish a WebSocket connection.
 
   ### DRI3 GPU Acceleration