mesa-panvk-bifrost: iter13 — implement VK_EXT_transform_feedback for Bifrost

iter12 hit a wall: Brave's ANGLE-Vulkan path requires GLES3, which
requires VK_EXT_transform_feedback, which PanVk-Bifrost did not
implement. This iter implements that extension, unlocking the full
ANGLE-Vulkan-on-Bifrost stack.

The implementation follows Panfrost-Gallium's well-validated XFB lowering
(nir_io_add_intrinsic_xfb_info + pan_nir_lower_xfb) wired into the PanVk
shader pipeline after nir_lower_io. Adds 4 XFB buffer address sysvals
plus per-draw num_vertices to the graphics sysval struct. Buffer state
is tracked on the cmd buffer; per-draw sysval upload populates either
the bound buffer's GPU address or PAN_SHADER_OOB_ADDRESS (memory-sink)
so XFB-capable pipelines used outside Begin/End survive without GPU
fault — the Panfrost-Gallium idiom from gallium/drivers/panfrost/
pan_cmdstream.c:1350.

Verified on PineTab2 (Mali-G52 r1 MC1, RK3566):
- /tmp/panvk-iter13/probe_xfb: 3 vertices captured byte-exact
- /tmp/panvk-iter13/probe_xfb_nodraw: XFB pipeline used without Bind/
  Begin/End survives — DEVICE_LOST regression closed
- Brave 148 with --use-angle=vulkan: WebGL 2.0 (OpenGL ES 3.0) creates
  cleanly, renderer reports
  "ANGLE (ARM, Vulkan 1.2.335 (Mali-G52 r1 MC1), panvk)"
- chrome://gpu graphics feature status: Canvas/Compositing/OpenGL/
  Rasterization/WebGL/WebGL2/WebGPU/Video Decode all hardware accelerated

Phase docs:
- ~/src/panvk-bifrost/phase4_iter13_close.md  (build green)
- ~/src/panvk-bifrost/phase5_iter13_close.md  (review fixes applied)
- ~/src/panvk-bifrost/phase6_iter13_close.md  (Brave integration green)

pkgver bumped 26.0.6.r2 -> 26.0.6.r3; iter13 patch applied via
unified-diff (the 328-line change scope is past sed-of-individual-
lines territory). Sanity checks in prepare() verify the patch landed.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

.gitea/scripts/check-already-published.sh

@@ -193,13 +193,33 @@ debian)
   esac
 
   pkg_name=$(basename "$RECIPE_DIR")
-  first_letter="${pkg_name:0:1}"
 
-  url="${REPO_BASE}/debian/pool/main/${first_letter}/${pkg_name}/${pkg_name}_${ver_full}_${file_arch}.deb"
+  # Compare against the canonical Packages index (what apt actually
-  code=$(http_head "$url")
+  # consults).  reprepro refuses lower-version uploads, so checking
-  if [ "$code" = "200" ]; then
+  # only an exact source-pkgrel URL produces an endless-rebuild trap
+  # whenever source PKGREL has rolled back below pool head.  We skip
+  # if pools published version >= source version-tuple.
+  source_full="${ver_full}"
+  if [ -n "${PKGVER#*:}" ] && [ "${PKGVER}" != "${PKGVER#*:}" ]; then
+    # PKGVER had an epoch — keep it for dpkg --compare-versions.
+    source_full="${PKGVER}-${PKGREL}"
+  fi
+
+  # Determine suite: most recipes publish to both bookworm and trixie;
+  # checking trixie is sufficient (changelogs share Distribution).
+  suite="trixie"
+  pkg_arch_label="$file_arch"
+  [ "$file_arch" = "all" ] && pkg_arch_label="all"
+  packages_url="${REPO_BASE}/debian/dists/${suite}/main/binary-arm64/Packages"
+  [ "$file_arch" = "amd64" ] && packages_url="${REPO_BASE}/debian/dists/${suite}/main/binary-amd64/Packages"
+
+  pool_ver=$(set +o pipefail; curl -sS --max-time "$HEAD_TIMEOUT" "$packages_url" 2>/dev/null     | awk -v p="$pkg_name" '$1=="Package:" && $2==p {found=1; next} found && $1=="Version:" {print $2; exit}')
+
+  if [ -n "$pool_ver" ] && command -v dpkg >/dev/null &&        dpkg --compare-versions "$pool_ver" ge "$source_full"; then
+    echo "pool has $pool_ver >= source $source_full" >&2
     emit 1
   fi
+  echo "pool has $pool_ver, source wants $source_full — build" >&2
   emit 0
   ;;
 

.gitea/workflows/build.yml

@@ -906,7 +906,7 @@ jobs:
   # -------------------------------------------------------------------------
   ffmpeg-v4l2-request-debian:
     needs: ffmpeg-v4l2-request-aarch64
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -976,7 +976,7 @@ jobs:
     # __vaDriverInit_1_23, which trixie's libva 2.22 runtime cannot bind: the
     # .deb installed but vaInitialize() returned -1 on every host.  A native
     # trixie runner avoids the cross-distro ABI skew entirely.
-    runs-on: actrunner-debian-aarch64-bohr
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1045,7 +1045,7 @@ jobs:
   # -------------------------------------------------------------------------
   mpv-fourier-debian:
     needs: mpv-fourier-aarch64
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1131,7 +1131,7 @@ jobs:
   # -------------------------------------------------------------------------
   daedalus-v4l2-debian:
     needs: claude-his-debian
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1144,39 +1144,25 @@ jobs:
           echo "$result" >> "$GITHUB_OUTPUT"
           echo "decision: $result"
 
-      - name: install build-deps (sans ffmpeg — see [marfrit] step)
+      - name: install build-deps
         if: steps.skip-check.outputs.skip != '1'
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          # Do NOT pull stock 'ffmpeg' here: the arch-aarch64 runner has
+          export DEBIAN_FRONTEND=noninteractive
-          # ffmpeg-v4l2-request-fourier pre-installed from the mpv-aarch64
+          retry apt-get update -qq
-          # job (configured via [marfrit]), and pacman -S ffmpeg would
+          # libav*-dev provide the headers daedalus daemon dlopens at
-          # conflict on the libav* drop-in.  Daedalus build only needs
+          # runtime — Debian's stock packages match the trixie ABI the
-          # libavcodec/libavformat headers, which the fourier package
+          # daemon will encounter on Pi 5 hosts (both ship libavcodec
-          # already supplies.  Keep cmake/ninja/pkgconf/libdrm here; the
+          # 61.x).  The fourier ffmpeg fork isn't needed here; the
-          # ffmpeg-dev equivalent comes via the next step.
+          # daemon never link-binds against libav (Option γ — dlopen
-          retry pacman -Syu --noconfirm --needed \
+          # at runtime), so any header set with the right struct
-            dpkg openssh rsync curl base-devel git cmake ninja pkgconf \
+          # definitions works.
-            libdrm
+          retry apt-get install -y --no-install-recommends \
-
+              build-essential cmake ninja-build pkg-config git \
-      - name: ensure ffmpeg-v4l2-request-fourier installed (link-time ABI source)
+              libavcodec-dev libavformat-dev libavutil-dev libdrm-dev \
-        if: steps.skip-check.outputs.skip != '1'
+              linux-libc-dev \
-        run: |
+              curl ca-certificates openssh-client rsync dpkg-dev
-          set -e
-          # Idempotent: pre-install the marfrit fourier ffmpeg so cmake
-          # finds libavcodec / libavformat / libavutil headers + .so's.
-          # Mirrors mpv-fourier-debian's [marfrit] step.
-          curl -sLo /tmp/marfrit.gpg https://packages.reauktion.de/marfrit.gpg
-          pacman-key --add /tmp/marfrit.gpg
-          pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
-          rm -f /tmp/marfrit.gpg
-          if ! grep -q '^\[marfrit\]' /etc/pacman.conf; then
-            printf '\n[marfrit]\nServer = https://packages.reauktion.de/arch/$arch\nSigLevel = Required\n' >> /etc/pacman.conf
-          fi
-          pacman -Sy --noconfirm
-          rm -f /var/cache/pacman/pkg/ffmpeg-v4l2-request-fourier-*-aarch64.pkg.tar.*
-          printf 'y\ny\ny\n' | pacman -S --needed marfrit/ffmpeg-v4l2-request-fourier
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'
@@ -1220,7 +1206,7 @@ jobs:
   # -------------------------------------------------------------------------
   daedalus-v4l2-dkms-debian:
     needs: daedalus-v4l2-debian
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1238,7 +1224,10 @@ jobs:
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          retry pacman -Syu --noconfirm --needed dpkg openssh rsync curl tar gzip
+          export DEBIAN_FRONTEND=noninteractive
+          retry apt-get update -qq
+          retry apt-get install -y --no-install-recommends \
+              dpkg-dev openssh-client rsync curl ca-certificates tar gzip
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'

arch/daedalus-v4l2-dkms/PKGBUILD

@@ -18,10 +18,10 @@ _module=daedalus_v4l2
 
 # Same pin as arch/daedalus-v4l2 — keep kernel module + daemon
 # bit-versioned together so the chardev wire protocol stays in sync.
-_commit=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+_commit=3dd0eb070a75893f78368ce819b9e9ebf08c124d
 
-pkgver=0.1.0.r18.481279c
+pkgver=0.1.0.r20.3dd0eb0
-pkgrel=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+pkgrel=1  # reset for new upstream pin (3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synth)
 pkgdesc="V4L2 stateless decoder shim kernel module (DKMS) — Pi 5 / CM5"
 arch=('any')
 url="https://git.reauktion.de/reauktion/daedalus-v4l2"

arch/daedalus-v4l2/PKGBUILD

@@ -21,12 +21,12 @@ _upstreampkg=daedalus-v4l2
 # ffmpeg -hwaccel vaapi → libva → /dev/video0 → daemon path lands a
 # pixel-correct decoded frame back in ffmpeg.  Promote to a later pin
 # only after a future phase closes cleanly.
-_commit=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+_commit=3dd0eb070a75893f78368ce819b9e9ebf08c124d
 
 # 0.1.0 (pre-1.0) + commit count + short sha.  Bump the .Y on each
 # Phase 8.x close.  pkgver() recomputes at build time.
-pkgver=0.1.0.r18.481279c
+pkgver=0.1.0.r20.3dd0eb0
-pkgrel=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+pkgrel=1  # reset for new upstream pin (3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synth)
 pkgdesc="Userspace daemon for the daedalus-v4l2 V4L2 stateless decoder shim (VP9/AV1/H.264 on Pi 5 / CM5)"
 arch=('aarch64')
 url="https://git.reauktion.de/reauktion/daedalus-v4l2"

arch/libva-v4l2-request-fourier/PKGBUILD

@@ -33,18 +33,22 @@ _upstreampkg=libva-v4l2-request
 # Prior pin (7ac934e) was iter38b — fresnel-fourier multi-device probe
 # + MAX_PROFILES bounds-check fix. de27e95 added the daedalus_v4l2
 # probe slot (b5b3acf), the meson option gate (2146341), and the
-# S_EXT_CTRLS diagnostic (de27e95 itself).  c332d34 (LIBVA-1) finishes
+# S_EXT_CTRLS diagnostic (de27e95 itself).  c332d34 (LIBVA-1) added
 # the per-codec dispatch: rpi-hevc-dec + daedalus_v4l2 both probe each
 # other as alts, VP9/AV1/H.264 route to daedalus via new 'd' kind,
-# HEVC stays on 'p' (rpi-hevc-dec).  Required for the Pi 5 / CM5
+# HEVC stays on 'p' (rpi-hevc-dec).  9898331 (LIBVA-2) completes that
-# mixed-decoder deployment (higgs).
+# by adding video_fd_daedalus to any_fd_supports_output_format's probe
-_commit=c332d34643be29e88012e30878d2fbeb255b20ab
+# array — without it, H.264/VP9/AV1 profiles never got advertised on
+# Pi 5 mixed deployments (rpi-hevc-dec primary, daedalus alt) and
+# ffmpeg bailed with "No support for codec h264 profile 578" before
+# the per-codec dispatch could fire.
+_commit=989833114a7708ad999dc68309cbc181d9913bdb
 
 # Project version from meson.build (1.0.0) + commit count + short sha,
 # matching the ffmpeg-v4l2-request-fourier convention. Recomputed at
 # build time by pkgver() below; the static value here is a placeholder
 # so AUR-style consumers see something coherent before src/ exists.
-pkgver=1.0.0.r378.c332d34
+pkgver=1.0.0.r380.9898331
 pkgrel=1
 pkgdesc="VA-API backend for V4L2 stateless decoders (multiplanar fork — fourier umbrella)"
 arch=('aarch64')

arch/mesa-panvk-bifrost/0003-panvk-bifrost-vk-ext-transform-feedback.patch

@@ -0,0 +1,328 @@
+--- a/src/panfrost/vulkan/panvk_shader.h	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_shader.h	2026-05-20 18:52:53.312698258 +0200
+@@ -150,6 +150,10 @@
+    struct {
+ #if PAN_ARCH < 9
+       int32_t raw_vertex_offset;
++      uint32_t num_vertices;       /* iter13: XFB needs per-draw vertex count */
++      /* aligned_u64 attribute below inserts the 4-byte alignment gap
++       * after num_vertices automatically — no explicit pad needed. */
++      aligned_u64 xfb_address[4];  /* iter13: 4 transform feedback buffer base addresses */
+ #endif
+       int32_t first_vertex;
+       int32_t base_instance;
+--- a/src/panfrost/vulkan/panvk_vX_physical_device.c	2026-05-20 19:09:29.711145446 +0200
++++ b/src/panfrost/vulkan/panvk_vX_physical_device.c	2026-05-20 18:52:54.832720445 +0200
+@@ -169,6 +169,7 @@
+       .EXT_provoking_vertex = true,
+       .EXT_queue_family_foreign = true,
+       .EXT_robustness2 = true,
++      .EXT_transform_feedback = PAN_ARCH < 9,   /* iter13: JM-class only for now */
+       .EXT_sampler_filter_minmax = PAN_ARCH >= 10,
+       .EXT_scalar_block_layout = true,
+       .EXT_separate_stencil_usage = true,
+@@ -495,6 +496,10 @@
+       .robustImageAccess2 = false,
+       .nullDescriptor = true,
+ 
++      /* VK_EXT_transform_feedback (iter13) */
++      .transformFeedback = PAN_ARCH < 9,
++      .geometryStreams = false,
++
+       /* VK_KHR_shader_clock */
+       .shaderSubgroupClock = device->kmod.dev->props.gpu_can_query_timestamp,
+       .shaderDeviceClock = device->kmod.dev->props.timestamp_device_coherent,
+@@ -1020,6 +1025,18 @@
+       .robustStorageBufferAccessSizeAlignment = 1,
+       .robustUniformBufferAccessSizeAlignment = 1,
+ 
++      /* VK_EXT_transform_feedback (iter13) */
++      .maxTransformFeedbackStreams = 1,
++      .maxTransformFeedbackBuffers = 4,
++      .maxTransformFeedbackBufferSize = UINT32_MAX,
++      .maxTransformFeedbackStreamDataSize = 512,
++      .maxTransformFeedbackBufferDataSize = 512,
++      .maxTransformFeedbackBufferDataStride = 2048,
++      .transformFeedbackQueries = false,
++      .transformFeedbackStreamsLinesTriangles = false,
++      .transformFeedbackRasterizationStreamSelect = false,
++      .transformFeedbackDraw = false,
++
+       /* VK_EXT_shader_object */
+       /* We do not currently support VK_EXT_shader_object but this is used
+        * internally by vk_shader
+--- a/src/panfrost/vulkan/panvk_vX_shader.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_vX_shader.c	2026-05-20 18:52:56.556745611 +0200
+@@ -21,6 +21,7 @@
+ #include "panvk_physical_device.h"
+ #include "panvk_sampler.h"
+ #include "panvk_shader.h"
++#include "pan_nir.h"   /* iter13: pan_nir_lower_xfb */
+ 
+ #include "spirv/nir_spirv.h"
+ #include "util/memstream.h"
+@@ -100,6 +101,20 @@
+    case nir_intrinsic_load_raw_vertex_offset_pan:
+       val = load_sysval(b, graphics, bit_size, vs.raw_vertex_offset);
+       break;
++   case nir_intrinsic_load_num_vertices:    /* iter13: XFB index calc */
++      val = load_sysval(b, graphics, bit_size, vs.num_vertices);
++      break;
++   case nir_intrinsic_load_xfb_address: {   /* iter13: XFB buffer N base address */
++      unsigned idx = nir_intrinsic_base(intr);
++      switch (idx) {
++      case 0: val = load_sysval(b, graphics, bit_size, vs.xfb_address[0]); break;
++      case 1: val = load_sysval(b, graphics, bit_size, vs.xfb_address[1]); break;
++      case 2: val = load_sysval(b, graphics, bit_size, vs.xfb_address[2]); break;
++      case 3: val = load_sysval(b, graphics, bit_size, vs.xfb_address[3]); break;
++      default: return false;
++      }
++      break;
++   }
+    case nir_intrinsic_load_layer_id:
+       assert(b->shader->info.stage == MESA_SHADER_FRAGMENT);
+       val = load_sysval(b, graphics, bit_size, layer_id);
+@@ -457,6 +472,7 @@
+             core_max_id);
+ 
+    pan_preprocess_nir(nir, pdev->kmod.dev->props.gpu_id);
++
+ }
+ 
+ static void
+@@ -870,6 +886,18 @@
+             nir_var_shader_in | nir_var_shader_out, UINT32_MAX);
+    NIR_PASS(_, nir, nir_lower_io, nir_var_shader_in | nir_var_shader_out,
+             glsl_type_size, nir_lower_io_use_interpolated_input_intrinsics);
++
++#if PAN_ARCH < 9
++   /* iter13: VK_EXT_transform_feedback — runs AFTER nir_lower_io so that
++    * shader outputs are now store_output intrinsics that pan_nir_lower_xfb
++    * can rewrite to nir_store_global+nir_load_xfb_address. */
++   if (nir->info.stage == MESA_SHADER_VERTEX &&
++       nir->info.has_transform_feedback_varyings) {
++      NIR_PASS(_, nir, nir_opt_constant_folding);
++      NIR_PASS(_, nir, nir_io_add_intrinsic_xfb_info);
++      NIR_PASS(_, nir, pan_nir_lower_xfb);
++   }
++#endif
+ }
+ 
+ static VkResult
+@@ -1288,6 +1316,9 @@
+       .view_mask = (state && state->rp) ? state->rp->view_mask : 0,
+       .robust2_modes = robust2_modes,
+       .robust_descriptors = dev->vk.enabled_features.nullDescriptor,
++      /* iter13: XFB shaders must disable IDVS (matches Panfrost-Gallium). */
++      .no_idvs = (info->stage == MESA_SHADER_VERTEX) &&
++                 info->nir->info.has_transform_feedback_varyings,
+    };
+ 
+    switch (info->stage) {
+--- a/src/panfrost/vulkan/panvk_cmd_draw.h	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_cmd_draw.h	2026-05-20 18:52:57.748763011 +0200
+@@ -135,6 +135,19 @@
+    struct panvk_graphics_sysvals sysvals;
+ 
+ #if PAN_ARCH < 9
++   /* iter13: VK_EXT_transform_feedback state (JM-class only for now). */
++   struct {
++      bool active;
++      uint32_t buffer_count;
++      struct {
++         uint64_t addr;
++         uint64_t offset;
++         uint64_t size;
++      } buffers[4];
++   } xfb;
++#endif
++
++#if PAN_ARCH < 9
+    struct panvk_shader_link link;
+ #endif
+ 
+--- a/src/panfrost/vulkan/panvk_vX_cmd_draw.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_vX_cmd_draw.c	2026-05-20 19:10:23.031919662 +0200
+@@ -10,6 +10,7 @@
+ #include "panvk_entrypoints.h"
+ 
+ #include "pan_desc.h"
++#include "pan_compiler.h"   /* PAN_SHADER_OOB_ADDRESS */
+ #include "pan_util.h"
+ 
+ static void
+@@ -722,6 +723,35 @@
+    set_gfx_sysval(cmdbuf, dirty_sysvals, vs.raw_vertex_offset,
+                   info->vertex.raw_offset);
+    set_gfx_sysval(cmdbuf, dirty_sysvals, layer_id, info->layer_id);
++
++   /* iter13: VK_EXT_transform_feedback sysvals — always set (per draw),
++    * reflect bound XFB state. set_gfx_sysval is a no-op if value unchanged. */
++   set_gfx_sysval(cmdbuf, dirty_sysvals, vs.num_vertices, info->vertex.count);
++   {
++      const struct panvk_cmd_graphics_state *_gfx = &cmdbuf->state.gfx;
++      /* iter13: default each XFB buffer address to PAN_SHADER_OOB_ADDRESS
++       * (= 1<<63). This is the Panfrost-Gallium memory-sink idiom — the
++       * Bifrost MMU silently discards stores to this address, so a pipeline
++       * with XFB outputs used in a non-XFB draw (or in an XFB draw with
++       * fewer bound buffers than the shader declares) is safe instead of
++       * faulting. See gallium/drivers/panfrost/pan_cmdstream.c PAN_SYSVAL_XFB. */
++      uint64_t _xa0 = PAN_SHADER_OOB_ADDRESS, _xa1 = PAN_SHADER_OOB_ADDRESS,
++               _xa2 = PAN_SHADER_OOB_ADDRESS, _xa3 = PAN_SHADER_OOB_ADDRESS;
++      if (_gfx->xfb.active) {
++         if (_gfx->xfb.buffer_count > 0 && _gfx->xfb.buffers[0].addr)
++            _xa0 = _gfx->xfb.buffers[0].addr + _gfx->xfb.buffers[0].offset;
++         if (_gfx->xfb.buffer_count > 1 && _gfx->xfb.buffers[1].addr)
++            _xa1 = _gfx->xfb.buffers[1].addr + _gfx->xfb.buffers[1].offset;
++         if (_gfx->xfb.buffer_count > 2 && _gfx->xfb.buffers[2].addr)
++            _xa2 = _gfx->xfb.buffers[2].addr + _gfx->xfb.buffers[2].offset;
++         if (_gfx->xfb.buffer_count > 3 && _gfx->xfb.buffers[3].addr)
++            _xa3 = _gfx->xfb.buffers[3].addr + _gfx->xfb.buffers[3].offset;
++      }
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[0], _xa0);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[1], _xa1);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[2], _xa2);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[3], _xa3);
++   }
+ #endif
+ 
+    if (dyn_gfx_state_dirty(cmdbuf, CB_BLEND_CONSTANTS)) {
+--- a/src/panfrost/vulkan/meson.build	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/meson.build	2026-05-20 18:53:04.484861338 +0200
+@@ -73,6 +73,7 @@
+ jm_inc_dir = ['jm']
+ jm_files = [
+   'jm/panvk_vX_bind_queue.c',
++  'jm/panvk_vX_cmd_xfb.c',   # iter13
+   'jm/panvk_vX_cmd_buffer.c',
+   'jm/panvk_vX_cmd_dispatch.c',
+   'jm/panvk_vX_cmd_draw.c',
+--- a/src/panfrost/vulkan/jm/panvk_vX_cmd_buffer.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/jm/panvk_vX_cmd_buffer.c	2026-05-20 19:10:26.163965149 +0200
+@@ -473,5 +473,12 @@
+ 
+    vk_command_buffer_begin(&cmdbuf->vk, pBeginInfo);
+ 
++#if PAN_ARCH < 9
++   /* iter13: clear XFB state on Begin so a reused command buffer does not
++    * inherit stale xfb.buffer_count / xfb.active / xfb.buffers[] from a
++    * prior recording. */
++   memset(&cmdbuf->state.gfx.xfb, 0, sizeof(cmdbuf->state.gfx.xfb));
++#endif
++
+    return VK_SUCCESS;
+ }
+--- a/src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c	2026-05-18 12:50:53.067999996 +0200
++++ b/src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c	2026-05-20 19:10:27.175979847 +0200
+@@ -0,0 +1,111 @@
++/*
++ * Copyright © 2026 mfritsche / claude-noether
++ * SPDX-License-Identifier: MIT
++ *
++ * iter13: VK_EXT_transform_feedback command handlers for the JM
++ * architecture path (Bifrost v6/v7 + Valhall-JM v9).
++ *
++ * The runtime contract:
++ *   - vkCmdBindTransformFeedbackBuffersEXT: stash (gpu_addr, offset, size)
++ *     for each slot into cmdbuf->state.gfx.xfb.buffers[].
++ *   - vkCmdBeginTransformFeedbackEXT: set cmdbuf->state.gfx.xfb.active = true.
++ *     Mark sysvals dirty so the next draw re-emits vs.xfb_address[].
++ *   - vkCmdEndTransformFeedbackEXT: set active = false.
++ *
++ * Counter buffers (firstCounterBuffer/counterBufferCount/pCounterBuffers/
++ * pCounterBufferOffsets) are accepted by API but ignored — v1 doesn't
++ * support pause/resume. transformFeedbackDraw is advertised as false.
++ *
++ * Per-draw integration: jm/panvk_vX_cmd_draw.c reads cmdbuf->state.gfx.xfb
++ * and populates vs.xfb_address[i] for shader use. The pan_nir_lower_xfb
++ * pass in panvk_vX_shader.c emits nir_load_xfb_address(i) which lowers
++ * (via panvk_vX_shader.c sysval handler) to a load from the per-draw
++ * sysval push area.
++ */
++
++#include "vk_log.h"
++#include "util/log.h"
++
++#include "panvk_cmd_buffer.h"
++#include "panvk_cmd_draw.h"
++#include "panvk_buffer.h"
++#include "panvk_entrypoints.h"
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdBindTransformFeedbackBuffersEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstBinding,
++   uint32_t bindingCount,
++   const VkBuffer *pBuffers,
++   const VkDeviceSize *pOffsets,
++   const VkDeviceSize *pSizes)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   for (uint32_t i = 0; i < bindingCount; i++) {
++      uint32_t slot = firstBinding + i;
++      if (slot >= 4)
++         continue;
++
++      VK_FROM_HANDLE(panvk_buffer, buf, pBuffers[i]);
++      gfx->xfb.buffers[slot].addr = panvk_buffer_gpu_ptr(buf, 0);
++      gfx->xfb.buffers[slot].offset = pOffsets[i];
++      gfx->xfb.buffers[slot].size =
++         (pSizes != NULL && pSizes[i] != VK_WHOLE_SIZE)
++            ? pSizes[i]
++            : (buf->vk.size - pOffsets[i]);
++   }
++
++   if (firstBinding + bindingCount > gfx->xfb.buffer_count)
++      gfx->xfb.buffer_count = firstBinding + bindingCount;
++}
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdBeginTransformFeedbackEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstCounterBuffer,
++   uint32_t counterBufferCount,
++   const VkBuffer *pCounterBuffers,
++   const VkDeviceSize *pCounterBufferOffsets)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   /* Counter buffers ignored in v1 — see VkPhysicalDeviceTransformFeedback
++    * PropertiesEXT.transformFeedbackDraw = false in panvk_vX_physical_device.c.
++    * App is spec-compliant if it does not pass counter buffers (which our
++    * features advertisement allows), but warn loudly if it does so we do not
++    * silently produce wrong capture state. */
++   (void)firstCounterBuffer;
++   (void)pCounterBufferOffsets;
++   if (counterBufferCount > 0 && pCounterBuffers != NULL) {
++      mesa_logw("panvk: CmdBeginTransformFeedbackEXT: counter buffers not "
++                "implemented (transformFeedbackDraw=false); XFB resume will "
++                "restart at buffer offset 0");
++   }
++
++   gfx->xfb.active = true;
++   /* Per-draw set_gfx_sysval picks up the change automatically — no
++    * explicit dirty marking required (set_gfx_sysval uses memcmp +
++    * BITSET to detect state diffs and re-emit sysvals). */
++}
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdEndTransformFeedbackEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstCounterBuffer,
++   uint32_t counterBufferCount,
++   const VkBuffer *pCounterBuffers,
++   const VkDeviceSize *pCounterBufferOffsets)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   (void)firstCounterBuffer;
++   (void)counterBufferCount;
++   (void)pCounterBuffers;
++   (void)pCounterBufferOffsets;
++
++   gfx->xfb.active = false;
++}

arch/mesa-panvk-bifrost/PKGBUILD

@@ -30,7 +30,7 @@
 
 pkgname=mesa-panvk-bifrost
 _mesaver=26.0.6
-pkgver=26.0.6.r2
+pkgver=26.0.6.r3
 pkgrel=1
 pkgdesc="Patched Mesa libvulkan_panfrost.so exposing Bifrost-gen Mali to Vulkan apps (panvk-bifrost campaign)"
 arch=('aarch64')
@@ -79,6 +79,7 @@ source=(
     "https://archive.mesa3d.org/mesa-${_mesaver}.tar.xz"
     "0001-panvk-expose-robustness2-nullDescriptor-bifrost.patch"
     "0002-panvk-expose-vulkan-1.1-1.2-on-bifrost.patch"
+    "0003-panvk-bifrost-vk-ext-transform-feedback.patch"
     "brave-vulkan"
     "icd.json"
 )
@@ -88,6 +89,7 @@ sha256sums=(
     'SKIP'
     'SKIP'
     'SKIP'
+    'SKIP'
 )
 
 prepare() {
@@ -107,12 +109,23 @@ prepare() {
     sed -i 's|bool has_vk1_1 = PAN_ARCH >= 10;|bool has_vk1_1 = true;|' src/panfrost/vulkan/panvk_vX_physical_device.c
     sed -i 's|bool has_vk1_2 = PAN_ARCH >= 10;|bool has_vk1_2 = true;|' src/panfrost/vulkan/panvk_vX_physical_device.c
 
+    # iter13: VK_EXT_transform_feedback implementation for Bifrost (PAN_ARCH<9).
+    # Applied as a real unified-diff patch — the change is too large for sed.
+    # Phase-doc context: ~/src/panvk-bifrost/phase{4,5,6}_iter13_close.md.
+    # Unlocks ANGLE-Vulkan → GLES3 → WebGL2 / WebGPU on Brave (chrome://gpu
+    # reports "Hardware accelerated" across the board for the affected paths).
+    patch -p1 < "${srcdir}/0003-panvk-bifrost-vk-ext-transform-feedback.patch"
+
     # Sanity-check the patches landed.
     grep -q "KHR_robustness2 = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "EXT_robustness2 = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "nullDescriptor = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "has_vk1_1 = true;" src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "has_vk1_2 = true;" src/panfrost/vulkan/panvk_vX_physical_device.c
+    # iter13 sanity:
+    grep -q "EXT_transform_feedback = PAN_ARCH < 9," src/panfrost/vulkan/panvk_vX_physical_device.c
+    grep -q "pan_nir_lower_xfb" src/panfrost/vulkan/panvk_vX_shader.c
+    test -f src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c
 }
 
 build() {

debian/claude-his-agent/build-deb.sh

@@ -16,7 +16,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo his.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo his.tar.gz \
     "https://git.reauktion.de/marfrit/claude-his-agent/archive/v${PKGVER}.tar.gz"
 echo "$HIS_TARBALL_SHA256  his.tar.gz" | sha256sum -c
 tar xzf his.tar.gz

debian/daedalus-v4l2-dkms/build-deb.sh

@@ -14,9 +14,9 @@
 # Sibling userspace package: ../daedalus-v4l2/build-deb.sh
 set -euo pipefail
 
-UPSTREAM_COMMIT=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+UPSTREAM_COMMIT=3dd0eb070a75893f78368ce819b9e9ebf08c124d
-PKGVER=0.1.0+r18+g481279c
+PKGVER=0.1.0+r20+g3dd0eb0
-PKGREL=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+PKGREL=1  # reset for new upstream pin (3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synth)
 MODULE_NAME=daedalus_v4l2
 
 HERE=$(dirname "$(readlink -f "$0")")
@@ -28,7 +28,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo daedalus-v4l2.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo daedalus-v4l2.tar.gz \
     "https://git.reauktion.de/reauktion/daedalus-v4l2/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf daedalus-v4l2.tar.gz
 SRCDIR=daedalus-v4l2

debian/daedalus-v4l2-dkms/debian/changelog

@@ -1,3 +1,17 @@
+daedalus-v4l2-dkms (0.1.0+r20+g3dd0eb0-1) bookworm trixie; urgency=medium
+
+  * Bump to 3dd0eb0 — DAEMON-PPS kernel-side changes.  device_run()
+    now reads the V4L2 H.264 stateless control values from the bound
+    media_request and ships them to the daemon inside REQ_DECODE
+    via the new struct daedalus_h264_meta block (gated on
+    DAEDALUS_REQ_FLAG_H264_META).  Required for H.264 decode to
+    work via the libva-v4l2-request -> daedalus daemon path; daemon
+    synthesises AnnexB SPS+PPS NAL units from the structs.
+  * Wire-ABI lockstep with daedalus-v4l2 0.1.0+r20+g3dd0eb0 — install
+    both packages together.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 21:00:00 +0000
+
 daedalus-v4l2-dkms (0.1.0+r18+g481279c-1) bookworm trixie; urgency=medium
 
   * Bump to 481279c in lockstep with the userspace daedalus-v4l2

debian/daedalus-v4l2/build-deb.sh

@@ -15,9 +15,9 @@ set -euo pipefail
 # end-to-end via libva (consumer target hit)" — first commit where the
 # full ffmpeg -hwaccel vaapi → libva → /dev/video0 → daemon path lands
 # a pixel-correct decoded frame back in ffmpeg.
-UPSTREAM_COMMIT=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+UPSTREAM_COMMIT=3dd0eb070a75893f78368ce819b9e9ebf08c124d
-PKGVER=0.1.0+r18+g481279c
+PKGVER=0.1.0+r20+g3dd0eb0
-PKGREL=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+PKGREL=1  # reset for new upstream pin (3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synth)
 
 HERE=$(dirname "$(readlink -f "$0")")
 
@@ -28,7 +28,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo daedalus-v4l2.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo daedalus-v4l2.tar.gz \
     "https://git.reauktion.de/reauktion/daedalus-v4l2/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf daedalus-v4l2.tar.gz
 SRCDIR=daedalus-v4l2

debian/daedalus-v4l2/debian/changelog

@@ -1,3 +1,20 @@
+daedalus-v4l2 (0.1.0+r20+g3dd0eb0-1) bookworm trixie; urgency=medium
+
+  * Bump to 3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synthesiser.
+    Daemon now reconstructs AnnexB SPS+PPS NAL units from the V4L2
+    stateless H.264 control structs (forwarded by the kernel via
+    a new struct daedalus_h264_meta block in REQ_DECODE) and
+    prepends them to the slice bitstream before feeding libavcodec.
+    Without this, ffmpeg -hwaccel vaapi on H.264 sources failed
+    with "non-existing PPS 0 referenced" even after LIBVA-1/-2
+    routing correctly delivered the request.
+  * Wire protocol: new DAEDALUS_REQ_FLAG_H264_META bit + struct
+    daedalus_h264_meta; daemon and kernel must be installed in
+    lockstep (this package + daedalus-v4l2-dkms 0.1.0+r20+g3dd0eb0).
+  * VP9 / AV1 paths unchanged.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 21:00:00 +0000
+
 daedalus-v4l2 (0.1.0+r18+g481279c-1) bookworm trixie; urgency=medium
 
   * Bump to 481279c.  Upstream landed the systemd unit + modules-load.d

debian/libva-v4l2-request-fourier/build-deb.sh

@@ -10,13 +10,16 @@
 # Upstream fork: https://git.reauktion.de/marfrit/libva-v4l2-request-fourier
 set -euo pipefail
 
-# Same pin as the Arch PKGBUILD.  c332d34 = LIBVA-1 close — per-codec
+# Same pin as the Arch PKGBUILD.  9898331 = LIBVA-2 close — completes
-# dispatch on Pi 5: rpi-hevc-dec + daedalus_v4l2 both probe each other
+# the per-codec dispatch from c332d34 (LIBVA-1) by adding video_fd_
-# as alts, VP9/AV1/H.264 route to daedalus via new 'd' kind, HEVC stays
+# daedalus to any_fd_supports_output_format's probe array.  Without
-# on 'p' (rpi-hevc-dec).
+# it, H.264/VP9/AV1 profiles never got advertised on Pi 5 mixed
-UPSTREAM_COMMIT=c332d34643be29e88012e30878d2fbeb255b20ab
+# deployments (rpi-hevc-dec primary, daedalus_v4l2 alt) — ffmpeg
-PKGVER=1.0.0+r378+gc332d34
+# bailed with "No support for codec h264 profile 578" before the
-PKGREL=2  # rebuild against pinned trixie libva-dev (2.22) for __vaDriverInit_1_22 ABI
+# per-codec dispatch could even fire.
+UPSTREAM_COMMIT=989833114a7708ad999dc68309cbc181d9913bdb
+PKGVER=1.0.0+r380+g9898331
+PKGREL=1
 
 HERE=$(dirname "$(readlink -f "$0")")
 
@@ -27,7 +30,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo libva-fourier.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo libva-fourier.tar.gz \
     "https://git.reauktion.de/marfrit/libva-v4l2-request-fourier/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf libva-fourier.tar.gz
 SRCDIR=$(echo libva-v4l2-request-fourier)

debian/libva-v4l2-request-fourier/debian/changelog

@@ -1,3 +1,18 @@
+libva-v4l2-request-fourier (1.0.0+r380+g9898331-1) bookworm trixie; urgency=medium
+
+  * Bump to 9898331 — LIBVA-2 close.  Adds video_fd_daedalus to
+    any_fd_supports_output_format's probe list in config.c so the
+    profile enumerator actually sees daedalus_v4l2's OUTPUT formats
+    (VP9F + AV1F + S264).  Before this commit, ffmpeg vaapi against
+    H.264 on higgs bailed with "No support for codec h264 profile 578"
+    because RequestQueryConfigProfiles only walked rkvdec/hantro/
+    rpi-hevc-dec/vpu981 fds and never asked daedalus what it could do.
+  * Backward-compatible on RK3399/3588 — new slot gated by
+    HAVE_DAEDALUS_V4L2 *and* video_fd_daedalus >= 0; both false in
+    those deployments.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 19:30:00 +0000
+
 libva-v4l2-request-fourier (1.0.0+r378+gc332d34-2) bookworm trixie; urgency=medium
 
   * Rebuild on a native Debian trixie runner (actrunner-debian-aarch64-bohr) so

debian/lmcp/build-deb.sh

@@ -23,7 +23,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo lmcp.tar.gz "https://git.reauktion.de/marfrit/lmcp/archive/${UPSTREAM_TAG}.tar.gz"
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo lmcp.tar.gz "https://git.reauktion.de/marfrit/lmcp/archive/${UPSTREAM_TAG}.tar.gz"
 echo "$LMCP_TARBALL_SHA256  lmcp.tar.gz" | sha256sum -c
 tar xzf lmcp.tar.gz
 

debian/mpv-fourier/build-deb.sh

@@ -33,7 +33,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo mpv.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo mpv.tar.gz \
     "https://github.com/mpv-player/mpv/archive/v${MPV_VERSION}/mpv-${MPV_VERSION}.tar.gz"
 echo "$MPV_TARBALL_SHA256  mpv.tar.gz" | sha256sum -c
 tar xzf mpv.tar.gz