One Hat Cyber Team

Edit File: fixesproto.txt

The XFIXES Extension
			    Version 6.1
			 Document Revision 1
			     2010-11-15
			    Keith Packard
			  keithp@keithp.com

1. Introduction

X applications have often needed to work around various shortcomings in the
core X window system.  This extension is designed to provide the minimal
server-side support necessary to eliminate problems caused by these
workarounds.

2. Acknowledgements

This extension is a direct result of requests made by application
developers, in particular,

+	Owen Taylor for describing the issues raised with the XEMBED
 	mechanisms and SaveSet processing and his initial extension
	to handle this issue, and for pointer barriers

+	Bill Haneman for the design for cursor image tracking.

+	Havoc Pennington

+	Fredrik Höglund for cursor names

+	Deron Johnson for cursor visibility

3. Basic Premise

Requests in this extension may seem to wander all over the map of X server
capabilities, but they are tied by a simple rule -- resolving issues raised
by application interaction with core protocol mechanisms that cannot be
adequately worked around on the client side of the wire.

4. Extension initialization

The client must negotiate the version of the extension before executing
extension requests.  Behavior of the server is undefined otherwise.

QueryVersion

client-major-version:		CARD32
	client-minor-version:		CARD32

major-version:			CARD32
	minor-version:			CARD32

The client sends the highest supported version to the server and
	the server sends the highest version it supports, but no higher than
	the requested version.  Major versions changes can introduce
	new requests, minor version changes introduce only adjustments to
	existing requests or backward compatible changes.  It is
	the clients responsibility to ensure that the server supports
	a version which is compatible with its expectations.

************* XFIXES VERSION 1 OR BETTER ***********

5. Save Set processing changes

Embedding one application within another provides a way of unifying
disparate documents and views within a single framework.  From the X
protocol perspective, this appears similar to nested window managers; the
embedding application "manages" the embedded windows much as a window
manager does for top-level windows.  To protect the embedded application
from embedding application failure, it is reasonable to use the core SaveSet
mechanism so that embedding application failure causes embedded windows to
be preserved instead of destroyed.

The core save set mechanism defines the target for each save set member
window as the nearest enclosing window not owned by the terminating client.
For embedding applications, this nearest window is usually the window
manager frame.  The problem here is that the window manager will not
generally expect to receive and correctly manage new windows appearing within
that window by the save set mechanism, and will instead destroy the frame
window in response to the client window destruction.  This causes the
embedded window to be destroyed.

An easy fix for this problem is to change the target of the save set member
to a window which won't be affected by the underlying window destruction.
XFIXES chooses the root window as the target.

Having embedded windows suddenly appear at the top level can confuse users,
so XFIXES also lets the client select whether the window should end up
unmapped after the save set processing instead of unconditionally making
them be mapped.

5.1 Requests

ChangeSaveSet

window:				Window
		mode:				{ Insert, Delete }
		target:				{ Nearest, Root }
		map:				{ Map, Unmap }

ChangeSaveSet is an extension of the core protocol ChangeSaveSet
	request.  As in that request, mode specifies whether the indicated
	window is inserted or deleted from the save-set.  Target specifies
	whether the window is reparented to the nearest non-client window as
	in the core protocol, or reparented to the root window.  Map
	specifies whether the window is mapped as in the core protocol or
	unmapped.

6. Selection Tracking

Applications wishing to monitor the contents of current selections must
poll for selection changes.  XFIXES improves this by providing an event
delivered whenever the selection ownership changes.

6.1 Types

SELECTIONEVENT			{ SetSelectionOwner,
					  SelectionWindowDestroy,
					  SelectionClientClose }

6.1 Events

SelectionNotify

subtype:			SELECTIONEVENT
	window:				Window
	owner:				Window
	selection:			Atom
	timestamp:			Timestamp
	selection-timestamp:		Timestamp

6.2 Requests

SelectSelectionInput

window:				Window
		selection:			Atom
		event-mask:			SETofSELECTIONEVENT

Selects for events to be delivered to window when various causes of
	ownership of selection occur.  Subtype indicates the cause of the
	selection ownership change.  Owner is set to the current selection
	owner, or None.  Timestamp indicates the time the event was
	generated while selection-timestamp indicates the timestamp used to
	own the selection.

7. Cursor Image Monitoring

Mirroring the screen contents is easily done with the core protocol or VNC
addons, except for the current cursor image.  There is no way using the core
protocol to discover which cursor image is currently displayed.  The
cursor image often contains significant semantic content about the user
interface.  XFIXES provides a simple mechanism to discover when the cursor
image changes and to fetch the current cursor image.

As the current cursor may or may not have any XID associated with it, there
is no stable name available.  Instead, XFIXES returns only the image of the
current cursor and provides a way to identify cursor images to avoid
refetching the image each time it changes to a previously seen cursor.

7.1 Types
	CURSOREVENT			{ DisplayCursor }

7.2 Events

CursorNotify

subtype:		CURSOREVENT
	window:			Window
	cursor-serial:		CARD32
	timestamp:		Timestamp
	name:			Atom		(Version 2 only)

7.3 Requests

SelectCursorInput

window:			Window
		event-mask:		SETofCURSOREVENT

This request directs cursor change events to the named window.
	Events will be delivered irrespective of the screen on which they
	occur.  Subtype indicates the cause of the cursor image change
	(there is only one subtype at present).  Cursor-serial is a number
	assigned to the cursor image which identifies the image.  Cursors
	with different serial numbers may have different images.  Timestamp
	is the time of the cursor change.

Servers supporting the X Input Extension Version 2.0 or higher only
	notify the clients of cursor change events for the ClientPointer, not
	of any other master pointer (see Section 4.4. in the XI2 protocol
	specification).

GetCursorImage

x:			INT16
		y:			INT16
		width:			CARD16
		height:			CARD16
		x-hot:			CARD16
		y-hot:			CARD16
		cursor-serial:		CARD32
		cursor-image:		LISTofCARD32

GetCursorImage returns the image of the current cursor.  X and y are
	the current cursor position.  Width and height are the size of the
	cursor image.  X-hot and y-hot mark the hotspot within the cursor
	image.  Cursor-serial provides the number assigned to this cursor
	image, this same serial number will be reported in a CursorNotify
	event if this cursor image is redisplayed in the future.

The cursor image itself is returned as a single image at 32 bits per
	pixel with 8 bits of alpha in the most significant 8 bits of the
	pixel followed by 8 bits each of red, green and finally 8 bits of
	blue in the least significant 8 bits.  The color components are
	pre-multiplied with the alpha component.
	
************* XFIXES VERSION 2 OR BETTER ***********

8. Region Objects

The core protocol doesn't expose regions as a primitive object and this
makes many operations more complicated than they really need to be.  Adding
region objects simplifies expose handling, the Shape extension and other
operations. These operations are also designed to support a separate
extension, the X Damage Extension.

8.1 Types

Region:				XID
	WINDOW_REGION_KIND:		{ Bounding, Clip }
	
8.2 Errors

Region				The specified region is invalid

8.3 Requests

CreateRegion

region:				REGION
		rects:				LISTofRECTANGLE

Creates a region initialized to the specified list of rectangles.
	The rectangles may be specified in any order, their union becomes
	the region.  The core protocol allows applications to specify an
	order for the rectangles, but it turns out to be just as hard to
	verify the rectangles are actually in that order as it is to simply
	ignore the ordering information and union them together.  Hence,
	this request dispenses with the ordering information.

Errors: IDChoice

CreateRegionFromBitmap

region:				REGION
		bitmap:				PIXMAP

Creates a region initialized to the set of 'one' pixels in bitmap
	(which must be depth 1, else Match error).

Errors: Pixmap, IDChoice, Match

CreateRegionFromWindow

window:				Window
		kind:				WINDOW_REGION_KIND
		region:				Region

Creates a region initialized to the specified window region.  See the
	Shape extension for the definition of Bounding and Clip regions.

Errors: Window, IDChoice, Value

CreateRegionFromGC

gc:				GContext
		region:				Region

Creates a region initialized from the clip list of the specified
	GContext.

Errors: GContext, IDChoice

CreateRegionFromPicture

picture:			Picture
		region:				Region

Creates a region initialized from the clip list of the specified
	Picture.

Errors: Picture, IDChoice

DestroyRegion

region:				Region

Destroys the specified region.

Errors: Region

SetRegion

region:				Region
		rects:				LISTofRECTANGLE

This replaces the current contents of region with the region formed
	by the union of rects.

CopyRegion
		source:				Region
		destination:			Region

This replaces the contents of destination with the contents of 
	source.

UnionRegion
IntersectRegion
SubtractRegion

source1:			Region
		source2:			Region
		destination:			Region
	
	Combines source1 and source2, placing the result in destination.
	Destination may be the same as either source1 or source2.

Errors: Region, Value
	
InvertRegion

source:				Region
		bounds:				RECTANGLE
		destination:			Region
	
	The source region is subtracted from the region specified by
	bounds.  The result is placed in destination, replacing its contents.

Errors: Region
	
TranslateRegion

region:				Region
		dx, dy:				INT16

The region is translated by dx, dy in place.

Errors: Region

RegionExtents

source:				Region
		destination:			Region

The extents of the source region are placed in the destination

FetchRegion

region:				Region
		->
		extents:			RECTANGLE
		rectangles:			LISTofRECTANGLE

The region is returned as a list of rectangles in YX-banded order.

Errors: Region

SetGCClipRegion

gc:				GCONTEXT
		clip-x-origin, clip-y-origin:	INT16
		region:				Region or None

This request changes clip-mask in gc to the specified region and
	sets the clip origin.  Output will be clipped to remain contained
	within the region.  The clip origin is interpreted relative to the
	origin of whatever destination drawable is specified in a graphics
	request.  The region is interpreted relative to the clip origin.
	Future changes to region have no effect on the gc clip-mask.

Errors: GContext, Region

SetWindowShapeRegion

dest:				Window
		destKind:			SHAPE_KIND
		xOff, yOff:			INT16
		region:				Region or None

This request sets the specified (by destKind) Shape extension region
	of the window to region, offset by xOff and yOff.   Future changes to
	region have no effect on the window shape.

Errors: Window, Value, Region

SetPictureClipRegion

picture:			Picture
		clip-x-origin, clip-y-origin:	INT16
		region:				Region or None

This request changes clip-mask in picture to the specified region
	and sets the clip origin.  Input and output will be clipped to
	remain contained within the region.  The clip origin is interpreted
	relative to the origin of the drawable associated with picture.  The
	region is interpreted relative to the clip origin.  Future changes
	to region have no effect on the picture clip-mask.

Errors: Picture, Region

9. Cursor Names

Attaching names to cursors permits some abstract semantic content to be
associated with specific cursor images.  Reflecting those names back to
applications allows that semantic content to be related to the user through
non-visual means.

9.1 Events

CursorNotify

subtype:		CURSOREVENT
		window:			Window
		cursor-serial:		CARD32
		timestamp:		Timestamp
		name:			Atom or None
	
	In Version 2 of the XFIXES protocol, this event adds the atom
	of any name associated with the current cursor (else None).

9.2 Requests

SetCursorName

cursor:			CURSOR
		name:			LISTofCARD8

This request interns name as an atom and sets that atom as the name
	of cursor.

Errors: Cursor

GetCursorName

cursor:			CURSOR
		->
		atom:			ATOM or None
		name:			LISTofCARD8

This request returns the name and atom of cursor.  If no name is
	set, atom is None and name is empty.

Errors: Cursor

GetCursorImageAndName

x:			INT16
		y:			INT16
		width:			CARD16
		height:			CARD16
		x-hot:			CARD16
		y-hot:			CARD16
		cursor-serial:		CARD32
		cursor-atom:		ATOM
		cursor-image:		LISTofCARD32
		cursor-name:		LISTofCARD8

This is similar to GetCursorImage except for including both
	the atom and name of the current cursor.

ChangeCursor

source, destination:	CURSOR

This request replaces all references to the destination with a
	reference to source.  Any existing uses of the destination cursor
	object will now show the source cursor image.

ChangeCursorByName

src:			CURSOR
		name:			LISTofCARD8

This request replaces the contents of all cursors with the specified
	name with the src cursor.

************* XFIXES VERSION 3 OR BETTER ***********

10. Region Expansion

This update provides another operation on the region objects defined in
Section 8 of this document.

10.1 Requests

ExpandRegion
		source:				REGION
		destination:			REGION
		left, right, top, bottom:	CARD16

Creates destination region containing the area specified by
	expanding each rectangle in the source region by the specified
	number of pixels to the left, right, top and bottom.

************* XFIXES VERSION 4 OR BETTER ***********

11. Cursor Visibility

Composite managers may want to render the cursor themselves instead of
relying on the X server sprite drawing, this provides a way for them to
do so without getting a double cursor image.

11.1 Requests

HideCursor

window:			WINDOW

A client sends this request to indicate that it wants the
	cursor image to be hidden (i.e. to not be displayed) when
	the sprite is on the same screen as the specified window.
	The sprite will be hidden if one or more clients have called
	HideCursor and not ShowCursor.

Note that even though cursor hiding causes the cursor image
	to be invisible, CursorNotify events will still be sent
	normally, as if the cursor image were visible.

When a client with outstanding cursor hiding requests
	terminates its connection these requests will be deleted.

Servers supporting the X Input Extension Version 2.0 or higher hide
	all visible cursors in response to a HideCursor request. If a master
	pointer is created while the cursors are hidden, this master pointer's
	cursor will be hidden as well.

ShowCursor

window:			WINDOW

A client sends this request to indicate that it wants the
	cursor image to be displayed when the sprite is on the same
	screen as the specified window. The sprite will be hidden
	if one or more clients have called HideCursor and not ShowCursor.

If the client has made no outstanding HideCursor requests
	a BadMatch error is generated.

Servers supporting the X Input Extension Version 2.0 or higher show
	all visible cursors in response to a ShowCursor request.

************* XFIXES VERSION 5 OR BETTER ***********

12. Pointer Barriers

Compositing managers and desktop environments may have UI elements in
particular screen locations such that for a single-headed display they
correspond to easy targets according to Fitt's Law, for example, the top
left corner.  For a multi-headed environment these corners should still be
semi-impermeable.  Pointer barriers allow the application to define
additional constraint on cursor motion so that these areas behave as
expected even in the face of multiple displays.

Absolute positioning devices like touchscreens do not obey pointer barriers.
There's no advantage to target acquisition to do so, since on a touchscreen
all points are in some sense equally large, whereas for a relative
positioning device the edges and corners are infinitely large.

WarpPointer and similar requests do not obey pointer barriers, for
essentially the same reason.

12.1 Types

BARRIER:	XID

BarrierDirections

BarrierPositiveX:	    1 << 0
		BarrierPositiveY:	    1 << 1
		BarrierNegativeX:	    1 << 2
		BarrierNegativeY:	    1 << 3

12.2 Errors

Barrier

12.3 Requests

CreatePointerBarrier

barrier:		    BARRIER
		window:			    Window
		x1, y2, x2, y2:		    INT16
		directions:		    CARD32
		devices:		    LISTofDEVICEID

Creates a pointer barrier along the line specified by the given
	coordinates on the screen associated with the given window.  The
	barrier has no spatial extent; it is simply a line along the left
	or top edge of the specified pixels.  Barrier coordinates are in
	screen space.

The coordinates must be axis aligned, either x1 == x2, or
	y1 == y2, but not both.  The varying coordinates may be specified
	in any order.  For x1 == x2, either y1 > y2 or y1 < y2 is valid.
	If the coordinates are not valid BadValue is generated.

Motion is allowed through the barrier in the directions specified:
	setting the BarrierPositiveX bit allows travel through the barrier
	in the positive X direction, etc.  Nonsensical values (forbidding Y
	axis travel through a vertical barrier, for example) and excess set
	bits are ignored.

If the server supports the X Input Extension version 2 or higher,
	the devices element names a set of master device to apply the
	barrier to.  If XIAllDevices or XIAllMasterDevices are given, the
	barrier applies to all master devices.  If a slave device is named,
	BadDevice is generated; this does not apply to slave devices named
	implicitly by XIAllDevices.  Naming a device multiple times is
	legal, and is treated as though it were named only once.  If a
	device is removed, the barrier continues to apply to the remaining
	devices, but will not apply to any future device with the same ID
	as the removed device.  Nothing special happens when all matching
	devices are removed; barriers must be explicitly destroyed.

Errors: IDChoice, Window, Value, Device

DestroyPointerBarrier

barrier:		    BARRIER

Destroys the named barrier.

Errors: Barrier

************* XFIXES VERSION 6 OR BETTER ***********

13. Disconnect mode

The X11 server is capable of terminating itself once all X11 clients are
gone.

Yet, in a typical user session, there are a number of X11 clients running
continuously (e.g. Xsettings daemon, IBus, etc.). Those always-running
clients will prevent the X11 server from terminating, because the actual
number of X11 clients will never drop to 0.

Disconnect mode allows the X11 clients themselves to specify that they
should not be accounted for when checking the remaining clients prior
to terminate the X11 server.

This can be particularly useful for Wayland compositors which are able to
start Xwayland on demand, as this allows Xwayland to terminate automatically
when the relevant X11 clients have quit.

13.1 Types

XFixesClientDisconnectFlags

XFixesClientDisconnectFlagDefault:	    0
		XFixesClientDisconnectFlagTerminate:	    1 << 0
		XFixesClientDisconnectFlagForceTerminate:   1 << 1

XFixesClientDisconnectFlagDefault is the default behavior for
	regular clients: the X11 server won't terminate as long as such
	clients are still connected and no other clients trigger
	termination.

XFixesClientDisconnectFlagTerminate indicates to the X11 server that
	it can ignore the client and terminate itself even though the client
	is still connected to the X11 server.

If XFixesClientDisconnectFlagForceTerminate is set at the time the
	client disconnects, the X11 server MUST terminate and/or reset without
	delivering further events to clients, even if other clients that have
	not set XFixesClientDisconnectFlagTerminate are still connected.
	Screen lockers SHOULD use this flag to ensure that the screen does not
	unlock if they exit, which would create a security vulnerability.
	Programs SHOULD NOT use this flag unless unexpected termination would
	create a security vulnerability or other severe problem.

Because XFixesClientDisconnectFlagForceTerminate allows the client to
	cause the server to terminate, it is subject to security checks to
	prevent unauthorized use.  Servers that support the X Access Control
	Extension (XACE) MUST deny attempts to set
	XFixesClientDisconnectFlagForceTerminate, unless the client has
	DixManageAccess to the server.  Servers that support the SECURITY
	extension MUST forbid untrusted clients from setting
	XFixesClientDisconnectFlagForceTerminate. Servers MAY refuse to allow
	clients to set this flag for other reasons. For instance, a server
	might only allow the flag to be set by local clients.  If the server
	refuses to allow the client to set this flag, an Access error results.

XFixesClientDisconnectFlagForceTerminate is only available in XFixes
	versions 6.1 and better.

13.2 Requests

SetClientDisconnectMode

disconnect-mode:	    CARD32

Sets the disconnect mode for the client.

The disconnect-mode is a bit mask of XFixesClientDisconnectFlags.

GetClientDisconnectMode

Gets the disconnect mode for the client.

disconnect-mode:	    CARD32

The disconnect-mode is a bit mask of XFixesClientDisconnectFlags.

99. Future compatibility

This extension is not expected to remain fixed.  Future changes will
strive to remain compatible if at all possible.  The X server will always
support version 1 of the extension protocol if requested by a client.

Additions to the protocol will always by marked by minor version number
changes so that applications will be able to detect what requests are
supported.