enricobuehlerandClaude Fable 5 bb48225414 feat(host/windows): one-click update apply — verified installer download, intent/reconcile, POST /update/apply ...

The U1 leg of planning:host-update-from-web-console.md. The apply request carries no
version/url/channel (the zero-parameter invariant): the host installs exactly what its
Ed25519-verified manifest announced. Pipeline: staged download (resume + disk preflight)
→ manifest sha256 → Authenticode (valid signature, untrusted root tolerated while the
cert is self-signed; leaf sha256 pinned via the signed manifest, extracted from the SAME
WinVerifyTrust state) → intent record → detached CREATE_BREAKAWAY_FROM_JOB spawn of the
winget-blessed silent flags. The installer kills this process by design; boot-time
reconciliation reports the outcome (update.applied event / a durable failure with the
installer log path) across the restart. Session guard (force to override),
PUNKTFUNK_UPDATE_APPLY=0 kill switch, single-flight via job + fresh-intent detection.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-30 15:55:27 +02:00

..

libvpl-sys

chore(unsafe): the workspace adopts the drivers' unsafe discipline

2026-07-28 21:31:41 +02:00

pf-capture

feat(capture): stall attribution phases A.2+A.3 — micro-probes and DxgKrnl ETW name the class

2026-07-29 23:44:35 +02:00

pf-client-core

feat(core): every connect introduces the device by name

2026-07-29 21:32:50 +02:00

pf-clipboard

chore(unsafe): the workspace adopts the drivers' unsafe discipline

2026-07-28 21:31:41 +02:00

pf-console-ui

feat(client): the desktop clients wear the host's OS mark

2026-07-29 17:58:33 +02:00

pf-driver-proto

feat(vdisplay): stall attribution v1 — the driver testifies which leg lost the frames

2026-07-29 23:44:35 +02:00

pf-encode

feat(ffi): hand-mirrored C structs are now layout-checked at compile time

2026-07-29 08:48:42 +02:00

pf-ffvk

fix(client-core,ffvk): close the proof-lint hole in two of the three unguarded crates

2026-07-29 08:48:42 +02:00

pf-frame

fix(xcheck): mirror [workspace.lints] too — and the two things that hid behind it

2026-07-28 22:17:43 +02:00

pf-gpu

fix(small crates): the proof lint now covers every first-party crate but one

2026-07-29 08:48:42 +02:00

pf-host-config

chore(unsafe): the workspace adopts the drivers' unsafe discipline

2026-07-28 21:31:41 +02:00

pf-inject

feat(windows): the brand reads Punktfunk on every device Windows shows

2026-07-30 12:30:46 +02:00

pf-paths

chore(unsafe): the workspace adopts the drivers' unsafe discipline

2026-07-28 21:31:41 +02:00

pf-presenter

fix(presenter,core): close the last of the proof-lint hole — the Vulkan contract, stated once

2026-07-29 08:48:42 +02:00

pf-vdisplay

feat(windows): the brand reads Punktfunk on every device Windows shows

2026-07-30 12:30:46 +02:00

pf-win-display

feat(capture): stall attribution phases A.2+A.3 — micro-probes and DxgKrnl ETW name the class

2026-07-29 23:44:35 +02:00

pf-zerocopy

feat(ffi): hand-mirrored C structs are now layout-checked at compile time

2026-07-29 08:48:42 +02:00

punktfunk-core

feat(core/abr): the startup capacity probe's target is configurable

2026-07-30 14:24:57 +02:00

punktfunk-host

feat(host/windows): one-click update apply — verified installer download, intent/reconcile, POST /update/apply

2026-07-30 15:55:27 +02:00

punktfunk-tray

feat(tray): the Windows tray dresses for Windows 11 and announces connects

2026-07-29 21:32:50 +02:00

pyrowave-sys

chore(unsafe): the workspace adopts the drivers' unsafe discipline

2026-07-28 21:31:41 +02:00