ef39050dbc
windows-drivers / probe-and-proto (push) Successful in 47s
ci / web (push) Successful in 58s
apple / swift (push) Successful in 1m13s
decky / build-publish (push) Successful in 16s
ci / docs-site (push) Successful in 1m19s
docker / build-push (--build-arg FEDORA_VERSION=44, ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora44-rpm) (push) Successful in 12s
docker / build-push (ci, ci/fedora-rpm.Dockerfile, punktfunk-fedora-rpm) (push) Successful in 9s
docker / build-push (ci, ci/rust-ci.Dockerfile, punktfunk-rust-ci) (push) Successful in 8s
docker / build-push (., web/Dockerfile, punktfunk-web) (push) Successful in 43s
windows-drivers / driver-build (push) Successful in 1m45s
docker / build-push (docs-site, docs-site/Dockerfile, punktfunk-docs) (push) Successful in 55s
ci / bench (push) Successful in 7m18s
flatpak / build-publish (push) Successful in 6m18s
docker / deploy-docs (push) Successful in 25s
windows-host / package (push) Successful in 8m31s
release / apple (push) Successful in 11m41s
android / android (push) Successful in 13m4s
windows-msix / package (arm64, C:\Users\Public\ffmpeg-arm64, --no-default-features, aarch64-pc-windows-msvc, C:\t-a64) (push) Successful in 1m57s
windows-msix / package (x64, C:\Users\Public\ffmpeg, , x86_64-pc-windows-msvc, C:\t) (push) Successful in 2m16s
arch / build-publish (push) Successful in 16m24s
windows / build (aarch64-pc-windows-msvc) (push) Successful in 1m6s
deb / build-publish (push) Successful in 17m54s
windows / build (x86_64-pc-windows-msvc) (push) Successful in 1m27s
ci / rust (push) Successful in 18m23s
apple / screenshots (push) Successful in 5m58s
rpm / build-publish (43, bazzite, punktfunk-fedora-rpm) (push) Successful in 20m24s
rpm / build-publish (44, fedora-44, punktfunk-fedora44-rpm) (push) Successful in 18m43s
Six parallel audits swept the root docs, docs-site, every per-directory README, and the packaging docs; every claim below was verified against the source before editing. - README: Layout gains the six missing crates (pf-client-core, pf-presenter, pf-console-ui, pf-ffvk, pf-driver-proto, punktfunk-tray), clients/session, api/ and ci/; Linux/Windows client rows reflect the shell + Vulkan-session split and the Vulkan Video -> VAAPI/D3D11VA -> software decode chains; the "every client over a C ABI" claim is corrected (Rust clients link the core directly); tiered stats overlay + console shell noted; Apple row mentions AV1. - CONTRIBUTING: drop the dead CLAUDE.md link (deliberately untracked); point at the README's build/invariants sections. SECURITY: 0.9.0. - host-cli/pairing: --allow-pairing/--require-pairing are no-op legacy names — pairing is required by default, --allow-tofu is the real flag; document --data-port and --idle-timeout-ms. - configuration: document PUNKTFUNK_RECOVER_SESSION_CMD (session-crash recovery hook), PUNKTFUNK_MDNS, PUNKTFUNK_DATA_PORT. - virtual-displays/gnome: GNOME per-client scaling shipped (host- persisted) — flip the ❌ to ✅ and describe how it works. - stats: new "Detail levels" section (Off/Compact/Normal/Detailed + per-platform cycle gestures); retire the GTK hand-off note. - clients/install-client/status/roadmap: decode chains, Windows client validation narrowed to HDR-only pending, adaptive bitrate, console shell, Apple AV1, Windows host vendor list. - Sub-READMEs: clients/linux rewritten for the re-architecture; session Windows decode rung + d3d11va knob; Windows tiered overlay; Android minSdk 28; decky file table; host zerocopy/ path; scripts port 47992 and steamos-host.md; pf-dualsense source path. - packaging: canary version bases are tag-derived (<next-minor> via pf-version.sh/.ps1), codecs-extra not ffmpeg-full, document the pinned offline-Skia tarball + SKIA_BINARIES_URL and vulkan-headers. - Convert 15 dangling design/*.md links to the punktfunk-planning prose convention (those docs live in the private planning repo). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
9.2 KiB
9.2 KiB
title, description
| title | description |
|---|---|
| Status & Progress | Where the work stands across the core, the host, and the native clients. |
A high-level view of where punktfunk stands. The ordered plan of work is on the Roadmap.
Milestones at a glance
| Milestone | State |
|---|---|
Core — punktfunk-core + C ABI (protocol · FEC · crypto) |
✅ complete & hardened |
| GameStream host (Moonlight-compatible) | ✅ working end-to-end; HDR/surround-audio polish open |
Native protocol — punktfunk/1 (QUIC control + UDP data, GF(2¹⁶) Leopard FEC + AES-GCM) |
✅ full session planes, validated live |
| Windows host (x64) | 🟡 implemented & shipping as a signed installer; NVIDIA/AMD/Intel encode, newer than the Linux host |
| macOS / iOS / iPadOS / tvOS client | ✅ full client; on-glass-validated stage-2 presenter is the default |
Linux client (punktfunk-client, relm4/GTK4 shell + Vulkan session) |
✅ full client; Vulkan Video → VAAPI → software decode |
Windows client (punktfunk-client, WinUI 3) |
✅ ships as signed MSIX; hardware decode validated on NVIDIA + Intel; HDR on-glass validation pending |
| Android client (phone + Android TV) | ✅ full client; hardware HEVC decode + HDR10 |
| Web console (over the management API) | ✅ status · devices · pairing |
What works today
punktfunk is a low-latency desktop and game streaming host with first-class Linux and Windows support — and native clients on macOS, iOS/iPadOS/tvOS, Linux, Windows, and Android. (The Windows host is newer than the Linux host.)
- Two protocols. The host speaks the GameStream protocol, so any Moonlight
client works out of the box, plus its own lower-latency
punktfunk/1protocol (QUIC control plane + UDP data plane with GF(2¹⁶) Leopard FEC and AES-GCM). - Native resolution, no scaling. Every session gets a virtual display at the client's exact resolution and refresh rate, via per-compositor backends for KWin, gamescope, Mutter, and Sway/wlroots.
- Zero-copy GPU pipeline. Captured frames stay on the GPU (dmabuf → CUDA → NVENC) with automatic split-encode at very high resolutions. Stable 240 fps at 5120×1440 has been measured. A GPU-less software H.264 encoder exists as an explicit fallback.
- HDR (10-bit), on the Windows host. An HDR Windows desktop is captured and encoded as HEVC Main10 (BT.2020 PQ) to HDR-capable clients (Windows, Android). Linux hosts stream 8-bit for now — HDR there is blocked upstream at the compositor.
- Secure by default. A SPAKE2 PIN pairing ceremony establishes trust (the host shows a 4-digit PIN; an attacker gets a single online guess, no offline dictionary attack). Trust-on-first-use (TOFU) remains an explicit opt-in for fully trusted LANs.
- LAN auto-discovery. Hosts advertise over mDNS (
_punktfunk._udp); clients browse and list them automatically. - Full input. Mouse, keyboard, and gamepads (including DualSense touchpad, motion, rumble, lightbar, player LEDs, and adaptive triggers) in both directions.
- Audio both ways. Opus desktop audio host → client, plus an opt-in, paired-only client microphone uplink.
- Management surface. A REST management API with a checked-in OpenAPI document, plus a web console for status, paired devices, and pairing.
Native clients
| Client | Highlights |
|---|---|
| macOS / iOS / iPadOS / tvOS | VideoToolbox HEVC + AV1 decode (AV1 on hardware that decodes it — M3-class Macs, A17 Pro-class iPhones), GameController capture, full DualSense feedback, mDNS discovery, PIN pairing + TOFU, network speed test, latency HUD. Stage-2 presenter (VTDecompressionSession → CAMetalLayer, ~11 ms p50 capture→present) is validated on glass and is the default (stage 1 remains the fallback when Metal is unavailable). Ships as one universal TestFlight build / App Store listing. |
Linux (punktfunk-client) |
relm4/GTK4 shell; streams run in the spawned Vulkan session presenter. Hardware decode via Vulkan Video (all vendors, incl. NVIDIA) with VAAPI dmabuf and software fallbacks, PipeWire audio + mic, SDL3 gamepads incl. DualSense, mDNS discovery, PIN pairing + TOFU, speed test, Skia console UI + tiered stats overlay. Ships as Flatpak, apt, rpm, and Arch packages. |
Windows (punktfunk-client) |
WinUI 3 shell; streams run in the Vulkan session presenter with a Vulkan Video → D3D11VA → software decode chain, HDR10, WASAPI audio + mic, SDL3 gamepads incl. DualSense, mDNS discovery, and the full PIN/TOFU trust surface. Ships as a signed MSIX (x86_64 + ARM64). Hardware decode validated on NVIDIA and Intel; HDR present pending on-glass validation. |
| Android (phone + Android TV) | Kotlin app with a Rust core over JNI. NDK AMediaCodec hardware HEVC decode + HDR10 (Main10/BT.2020 PQ), Opus/Oboe audio + mic, gamepad input with rumble/HID feedback, mDNS discovery, PIN pairing + TOFU (Keystore identity), tiered stats overlay (three-finger tap), custom resolutions, and D-pad/controller focus navigation for TV. Ships to the Google Play Internal Testing track. |
punktfunk-probe is a headless reference and measurement client (for testing and
benchmarking, not everyday use).
Validated live on
The stack has been validated live on a range of hosts and clients:
- Hosts: Ubuntu (GNOME / KDE), Fedora KDE, and Bazzite (gamescope) on machines with RTX-class NVIDIA GPUs, across the KWin, gamescope, Mutter, and Sway/wlroots backends.
- Clients: native macOS, Linux, Windows, and Android clients against live hosts, plus stock Moonlight clients over the GameStream path.
- Cross-machine latency is measured and skew-corrected (a wall-clock handshake removes the inter-machine clock offset), so capture-to-present numbers are valid across the LAN.
Highlights
Notable capabilities that have landed, newest first:
- Tiered stats overlay everywhere. One shared stats vocabulary with Compact / Normal / Detailed levels on every client, cycled live in-stream — see Understanding the Stats Overlay.
- Per-client display scaling on GNOME. The host persists each client's scale itself and reapplies it on reconnect (GNOME's virtual-monitor API exposes no stable identity to key it on).
- Adaptive bitrate. With bitrate set to Automatic, the host re-targets the encoder mid-stream as the link's measured capacity changes.
- Gamepad console shell. The session client carries a full controller-driven shell — host list, PIN pairing, settings, screen transitions, and an on-screen keyboard — usable with no desktop at all (e.g. gamescope on a Steam Deck).
- Native Linux client (stage 1). GTK4/libadwaita app that links
punktfunk-coredirectly: mDNS host list, TOFU + SPAKE2 PIN pairing, FFmpeg HEVC decode, PipeWire audio with mic uplink, SDL3 gamepad capture with rumble/lightbar feedback, layout-independent keyboard, absolute mouse, fullscreen, and a stats overlay. (Since re-architected: streams now run in a spawned Vulkan session presenter with Vulkan Video decode on all vendors.) - Delegated pairing approval. An unpaired device that knocks on a pairing-required host appears as a pending request in the web console's Pairing page; one click approves and pins its certificate — no PIN fetched out of band.
- Concurrent sessions. The host serves multiple clients at once (bounded by an NVENC limit), each with its own virtual output and encoder — e.g. stream the same desktop to a laptop and a TV simultaneously.
- Cross-machine latency HUD + wall-clock skew handshake. A short NTP-style handshake aligns client and host clocks, making capture-to-received latency valid across machines; the Apple client surfaces a skew-corrected capture-to-receipt p50/p95 in its HUD.
- Native LAN auto-discovery. Hosts advertise
_punktfunk._udpover mDNS (with TXT records carrying the protocol, cert fingerprint, and pairing requirement); clients discover and list them automatically. - 1 Gbps data plane. Batched
sendmmsg/recvmmsg, a microburst-capped paced send thread, and larger socket buffers, exploiting the GF(2¹⁶) Leopard FEC that breaks the classic ~1 Gbps GameStream ceiling. - Boot appliance. A headless compositor session plus host systemd units, so a host can come up and stream with no interactive login.
- Network speed test + settable bitrate. Bitrate negotiation and an in-band bandwidth probe inform the client's bitrate picker instead of guesswork.
- Rich DualSense. A full UHID DualSense backend on the host (gamepad, motion, touchpad, lightbar, player LEDs, adaptive triggers) with feedback carried back to the clients.
- AV1 + surround audio are implemented and unit/live-capture tested.
In flight / next
See the Roadmap for the ordered list. Near-term:
- True glass-to-glass latency — combine the client present-stamp (decode → present) with the host render → capture term for a complete end-to-end number.
- On-glass validation of the Windows client's HDR present path (hardware decode and the GUI are already validated on NVIDIA and Intel).
- gamescope multi-user isolation — per-session input/audio so concurrent sessions can be fully independent desktops (the shared-desktop multi-view case already works).