enricobuehler 9a6058cd20 feat(host): §8a — require native pairing by default (serve --open to disable) ...

An open punktfunk/1 host any LAN device can trust-on-first-use and stream from is
insecure. The unified host now gates native sessions on pairing by DEFAULT: a client
must complete the SPAKE2 PIN ceremony (armed from the web console) before it's
admitted; paired devices persist. `serve --open` keeps the old TOFU behavior for
trusted single-user setups.

native_serve_opts now takes a NativeServe { port, require_pairing }; parse_serve
builds it with require_pairing = !--open. GameStream pairing (separate) is unchanged.
The require_pairing gate + ceremony are already covered by m3::pairing_ceremony_and_gate.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-11 10:23:08 +00:00

..

protocols

rename: lumen → punktfunk, everywhere

2026-06-10 13:11:59 +00:00

src

feat(host): §8a — require native pairing by default (serve --open to disable)

2026-06-11 10:23:08 +00:00

Cargo.toml

feat(gamestream): AV1 negotiation + 5.1/7.1 surround audio

2026-06-10 15:41:15 +00:00