libva-v4l2-request-fourier: bump pin to c454618 (#15 transparent resize)

Bumps both Arch PKGBUILD and Debian build-deb.sh pins to PR #16 —
codec_store_buffer + request_pool_resize transparent OUTPUT-pool grow
on a mid-session resolution upshift overrun.  Picks up the frame-
survival path that supersedes #13's drop-and-recreate fallback.

Dual-pin per feedback_marfrit_packages_dual_pin so both Arch and
Debian repos see check-already-published.sh report a new version.

.gitea/scripts/check-already-published.sh

@@ -193,13 +193,33 @@ debian)
   esac
 
   pkg_name=$(basename "$RECIPE_DIR")
-  first_letter="${pkg_name:0:1}"
 
-  url="${REPO_BASE}/debian/pool/main/${first_letter}/${pkg_name}/${pkg_name}_${ver_full}_${file_arch}.deb"
-  code=$(http_head "$url")
-  if [ "$code" = "200" ]; then
+  # Compare against the canonical Packages index (what apt actually
+  # consults).  reprepro refuses lower-version uploads, so checking
+  # only an exact source-pkgrel URL produces an endless-rebuild trap
+  # whenever source PKGREL has rolled back below pool head.  We skip
+  # if pools published version >= source version-tuple.
+  source_full="${ver_full}"
+  if [ -n "${PKGVER#*:}" ] && [ "${PKGVER}" != "${PKGVER#*:}" ]; then
+    # PKGVER had an epoch — keep it for dpkg --compare-versions.
+    source_full="${PKGVER}-${PKGREL}"
+  fi
+
+  # Determine suite: most recipes publish to both bookworm and trixie;
+  # checking trixie is sufficient (changelogs share Distribution).
+  suite="trixie"
+  pkg_arch_label="$file_arch"
+  [ "$file_arch" = "all" ] && pkg_arch_label="all"
+  packages_url="${REPO_BASE}/debian/dists/${suite}/main/binary-arm64/Packages"
+  [ "$file_arch" = "amd64" ] && packages_url="${REPO_BASE}/debian/dists/${suite}/main/binary-amd64/Packages"
+
+  pool_ver=$(set +o pipefail; curl -sS --max-time "$HEAD_TIMEOUT" "$packages_url" 2>/dev/null     | awk -v p="$pkg_name" '$1=="Package:" && $2==p {found=1; next} found && $1=="Version:" {print $2; exit}')
+
+  if [ -n "$pool_ver" ] && command -v dpkg >/dev/null &&        dpkg --compare-versions "$pool_ver" ge "$source_full"; then
+    echo "pool has $pool_ver >= source $source_full" >&2
     emit 1
   fi
+  echo "pool has $pool_ver, source wants $source_full — build" >&2
   emit 0
   ;;
 

.gitea/workflows/build.yml

@@ -906,7 +906,7 @@ jobs:
   # -------------------------------------------------------------------------
   ffmpeg-v4l2-request-debian:
     needs: ffmpeg-v4l2-request-aarch64
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -924,11 +924,20 @@ jobs:
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          retry pacman -Syu --noconfirm --needed \
-            dpkg openssh rsync curl base-devel git nasm yasm \
-            linux-api-headers mesa alsa-lib bzip2 fontconfig fribidi gmp \
-            gnutls lame libass dav1d libdrm freetype2 libpulse libva \
-            libvorbis libvpx libwebp x264 x265 libxml2 opus v4l-utils xz zlib
+          export DEBIAN_FRONTEND=noninteractive
+          retry apt-get update -qq
+          # Debian build-deps for the FFmpeg fourier-fork build.  These
+          # map 1:1 to the previous Arch list; libav*-dev intentionally
+          # absent (we are FFmpeg itself, providing those libs).
+          retry apt-get install -y --no-install-recommends \
+              build-essential git pkg-config nasm yasm \
+              linux-libc-dev libgl1-mesa-dev libasound2-dev libbz2-dev \
+              libfontconfig-dev libfribidi-dev libgmp-dev libgnutls28-dev \
+              libmp3lame-dev libass-dev libdav1d-dev libdrm-dev \
+              libfreetype-dev libpulse-dev libva-dev libvorbis-dev libvpx-dev \
+              libwebp-dev libx264-dev libx265-dev libxml2-dev libopus-dev \
+              v4l-utils liblzma-dev zlib1g-dev \
+              curl ca-certificates openssh-client rsync dpkg-dev
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'
@@ -1045,7 +1054,7 @@ jobs:
   # -------------------------------------------------------------------------
   mpv-fourier-debian:
     needs: mpv-fourier-aarch64
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1063,31 +1072,30 @@ jobs:
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          retry pacman -Syu --noconfirm --needed \
-            dpkg openssh rsync curl base-devel git meson ninja python-docutils \
-            ladspa wayland-protocols vulkan-headers \
-            alsa-lib desktop-file-utils glibc hicolor-icon-theme jack lcms2 \
-            libarchive libass libbluray libcdio libcdio-paranoia libdisplay-info \
-            libdrm libdvdnav libdvdread libegl libgl libglvnd libjpeg-turbo \
-            libplacebo libpulse libsixel libva libvdpau libx11 libxext \
-            libxkbcommon libxpresent libxrandr libxss libxv luajit mesa mujs \
-            libpipewire rubberband sdl2 openal uchardet vapoursynth \
-            vulkan-icd-loader wayland zlib
-
-      - name: configure [marfrit] repo + pre-install ffmpeg-v4l2-request-fourier
-        if: steps.skip-check.outputs.skip != '1'
-        run: |
-          set -e
-          curl -sLo /tmp/marfrit.gpg https://packages.reauktion.de/marfrit.gpg
-          pacman-key --add /tmp/marfrit.gpg
-          pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
-          rm -f /tmp/marfrit.gpg
-          if ! grep -q '^\[marfrit\]' /etc/pacman.conf; then
-            printf '\n[marfrit]\nServer = https://packages.reauktion.de/arch/$arch\nSigLevel = Required\n' >> /etc/pacman.conf
-          fi
-          pacman -Sy --noconfirm
-          rm -f /var/cache/pacman/pkg/ffmpeg-v4l2-request-fourier-*-aarch64.pkg.tar.*
-          printf 'y\ny\ny\n' | pacman -S marfrit/ffmpeg-v4l2-request-fourier
+          export DEBIAN_FRONTEND=noninteractive
+          retry apt-get update -qq
+          # Debian libav*-dev is ABI-compatible with the fourier ffmpeg
+          # fork at the header level; mpv link-binds against system
+          # libav at build time, runtime dlopen picks up the fourier
+          # libs if installed.  The previous [marfrit] pre-install of
+          # ffmpeg-v4l2-request-fourier under pacman is unnecessary
+          # under apt: stock Debian libav*-dev provides the trixie
+          # ABI mpv-fourier's binary will encounter.
+          retry apt-get install -y --no-install-recommends \
+              build-essential git meson ninja-build pkg-config python3-docutils \
+              ladspa-sdk wayland-protocols libvulkan-dev libwayland-dev \
+              libasound2-dev desktop-file-utils libc6-dev hicolor-icon-theme \
+              libjack-jackd2-dev liblcms2-dev libarchive-dev libass-dev \
+              libbluray-dev libcdio-dev libcdio-paranoia-dev libdisplay-info-dev \
+              libdrm-dev libdvdnav-dev libdvdread-dev libegl-dev libgl-dev \
+              libglvnd-dev libjpeg-dev libplacebo-dev libpulse-dev libsixel-dev \
+              libva-dev libvdpau-dev libx11-dev libxext-dev libxkbcommon-dev \
+              libxpresent-dev libxrandr-dev libxss-dev libxv-dev libluajit-5.1-dev \
+              libmujs-dev libpipewire-0.3-dev librubberband-dev libsdl2-dev \
+              libopenal-dev libuchardet-dev libvapoursynth-dev liblzma-dev \
+              libavcodec-dev libavformat-dev libavutil-dev libswscale-dev libswresample-dev \
+              zlib1g-dev \
+              curl ca-certificates openssh-client rsync dpkg-dev
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'
@@ -1131,7 +1139,7 @@ jobs:
   # -------------------------------------------------------------------------
   daedalus-v4l2-debian:
     needs: claude-his-debian
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1144,39 +1152,25 @@ jobs:
           echo "$result" >> "$GITHUB_OUTPUT"
           echo "decision: $result"
 
-      - name: install build-deps (sans ffmpeg — see [marfrit] step)
+      - name: install build-deps
         if: steps.skip-check.outputs.skip != '1'
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          # Do NOT pull stock 'ffmpeg' here: the arch-aarch64 runner has
-          # ffmpeg-v4l2-request-fourier pre-installed from the mpv-aarch64
-          # job (configured via [marfrit]), and pacman -S ffmpeg would
-          # conflict on the libav* drop-in.  Daedalus build only needs
-          # libavcodec/libavformat headers, which the fourier package
-          # already supplies.  Keep cmake/ninja/pkgconf/libdrm here; the
-          # ffmpeg-dev equivalent comes via the next step.
-          retry pacman -Syu --noconfirm --needed \
-            dpkg openssh rsync curl base-devel git cmake ninja pkgconf \
-            libdrm
-
-      - name: ensure ffmpeg-v4l2-request-fourier installed (link-time ABI source)
-        if: steps.skip-check.outputs.skip != '1'
-        run: |
-          set -e
-          # Idempotent: pre-install the marfrit fourier ffmpeg so cmake
-          # finds libavcodec / libavformat / libavutil headers + .so's.
-          # Mirrors mpv-fourier-debian's [marfrit] step.
-          curl -sLo /tmp/marfrit.gpg https://packages.reauktion.de/marfrit.gpg
-          pacman-key --add /tmp/marfrit.gpg
-          pacman-key --lsign-key 92D5E96D8F63C75E4116AA1FF5C8C4603D0D250C
-          rm -f /tmp/marfrit.gpg
-          if ! grep -q '^\[marfrit\]' /etc/pacman.conf; then
-            printf '\n[marfrit]\nServer = https://packages.reauktion.de/arch/$arch\nSigLevel = Required\n' >> /etc/pacman.conf
-          fi
-          pacman -Sy --noconfirm
-          rm -f /var/cache/pacman/pkg/ffmpeg-v4l2-request-fourier-*-aarch64.pkg.tar.*
-          printf 'y\ny\ny\n' | pacman -S --needed marfrit/ffmpeg-v4l2-request-fourier
+          export DEBIAN_FRONTEND=noninteractive
+          retry apt-get update -qq
+          # libav*-dev provide the headers daedalus daemon dlopens at
+          # runtime — Debian's stock packages match the trixie ABI the
+          # daemon will encounter on Pi 5 hosts (both ship libavcodec
+          # 61.x).  The fourier ffmpeg fork isn't needed here; the
+          # daemon never link-binds against libav (Option γ — dlopen
+          # at runtime), so any header set with the right struct
+          # definitions works.
+          retry apt-get install -y --no-install-recommends \
+              build-essential cmake ninja-build pkg-config git \
+              libavcodec-dev libavformat-dev libavutil-dev libdrm-dev \
+              linux-libc-dev \
+              curl ca-certificates openssh-client rsync dpkg-dev
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'
@@ -1220,7 +1214,7 @@ jobs:
   # -------------------------------------------------------------------------
   daedalus-v4l2-dkms-debian:
     needs: daedalus-v4l2-debian
-    runs-on: arch-aarch64
+    runs-on: debian-aarch64
     continue-on-error: true
     steps:
       - uses: actions/checkout@v4
@@ -1238,7 +1232,10 @@ jobs:
         run: |
           set -e
           retry() { for i in 1 2 3; do "$@" && return 0; rc=$?; echo "retry $i (exit=$rc)" >&2; sleep $((i*5)); done; return 1; }
-          retry pacman -Syu --noconfirm --needed dpkg openssh rsync curl tar gzip
+          export DEBIAN_FRONTEND=noninteractive
+          retry apt-get update -qq
+          retry apt-get install -y --no-install-recommends \
+              dpkg-dev openssh-client rsync curl ca-certificates tar gzip
 
       - name: install hertz deploy ssh key
         if: steps.skip-check.outputs.skip != '1'

arch/daedalus-v4l2-dkms/PKGBUILD

@@ -18,10 +18,12 @@ _module=daedalus_v4l2
 
 # Same pin as arch/daedalus-v4l2 — keep kernel module + daemon
 # bit-versioned together so the chardev wire protocol stays in sync.
-_commit=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+# PROTO_VERSION 0 → 1 at this pin (H.264 B-frame reorder fix); must
+# install both packages atomically.
+_commit=79256dc7ef41f83873ca9c23db20f5888858e65d
 
-pkgver=0.1.0.r18.481279c
-pkgrel=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+pkgver=0.1.0.r28.79256dc
+pkgrel=1  # reset for new upstream pin (79256dc — H.264 B-frame reorder fix)
 pkgdesc="V4L2 stateless decoder shim kernel module (DKMS) — Pi 5 / CM5"
 arch=('any')
 url="https://git.reauktion.de/reauktion/daedalus-v4l2"

arch/daedalus-v4l2/PKGBUILD

@@ -16,17 +16,18 @@
 pkgname=daedalus-v4l2
 _upstreampkg=daedalus-v4l2
 
-# Pin the daedalus-v4l2 tip.  481279c = "Phase 8.13: byte-exact end-to-
-# end via libva (consumer target hit)" — first commit where the full
-# ffmpeg -hwaccel vaapi → libva → /dev/video0 → daemon path lands a
-# pixel-correct decoded frame back in ffmpeg.  Promote to a later pin
-# only after a future phase closes cleanly.
-_commit=481279c9bffd19e32c8f3299897e9b63fc5a24aa
+# Pin the daedalus-v4l2 tip.  79256dc = "kernel + daemon: H.264 B-frame
+# display reorder fix (closes #6)" — adds the wire-protocol src_pts /
+# output_src_pts / RESP_FRAME flags split that lets H.264 streams with
+# B-frames preserve display order through libva → kernel → daemon.
+# PROTO_VERSION bumps 0 → 1; lock-step userspace + kernel rebuild
+# REQUIRED (daedalus-v4l2-dkms PKGBUILD pinned to the same commit).
+_commit=79256dc7ef41f83873ca9c23db20f5888858e65d
 
 # 0.1.0 (pre-1.0) + commit count + short sha.  Bump the .Y on each
 # Phase 8.x close.  pkgver() recomputes at build time.
-pkgver=0.1.0.r18.481279c
-pkgrel=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+pkgver=0.1.0.r28.79256dc
+pkgrel=1  # reset for new upstream pin (79256dc — H.264 B-frame reorder fix)
 pkgdesc="Userspace daemon for the daedalus-v4l2 V4L2 stateless decoder shim (VP9/AV1/H.264 on Pi 5 / CM5)"
 arch=('aarch64')
 url="https://git.reauktion.de/reauktion/daedalus-v4l2"

arch/firefox-fourier/0003-ffmpegvideo-v4l2-request-route.patch

@@ -18,27 +18,30 @@ This patch adds a sibling init path, `InitV4L2RequestDecoder`, that:
   * looks up the codec via two complementary mechanisms libavcodec
     uses for v4l2_request:
       - **named codec** (`h264_v4l2request`, `vp8_v4l2request`, etc.):
-        the legacy AVCodec-per-hwaccel registration. ALARM, Debian,
-        and most distros building with --enable-v4l2-request expose
-        this (avcodec_find_decoder_by_name lookup).
-      - **generic codec + AV_HWDEVICE_TYPE_DRM** in `hw_configs`:
-        the modern hwaccel registration on some upstream-only ffmpeg
-        builds.
+        the legacy AVCodec-per-hwaccel registration.
+      - **generic codec + hw_configs walk**: the modern hwaccel
+        registration. Accepts EITHER AV_HWDEVICE_TYPE_DRM (legacy
+        ffmpeg-v4l2-request-fork output prior to FFmpeg 7.1) OR
+        AV_HWDEVICE_TYPE_V4L2REQUEST (FFmpeg 7.1+ dedicated enum,
+        value 13 on Kwiboo's no-AMF tree, 14 on upstream-AMF tree).
+        Mozilla's bundled libavutil headers may not have the V4L2REQUEST
+        enumerator, so the test is on the integer value via `(int)cast`.
     Probes named-codec first (explicit, portable) and falls back to
-    walking the generic codec's `hw_configs` for the DRM device type;
-  * creates an `AV_HWDEVICE_TYPE_DRM` hwdevice context bound to
-    `/dev/dri/renderD128` via the new `av_hwdevice_ctx_create` wrapper
-    (patch 2/4) and attaches it to the codec context;
+    walking the generic codec's `hw_configs` for either device type;
+  * creates an hwdevice context bound to `/dev/dri/renderD128`. Uses
+    integer 13 (V4L2REQUEST as defined by Kwiboo's v4l2-request-n7.1.3
+    tree, what our libavcodec61-fourier emits) cast to enum
+    AVHWDeviceType for the av_hwdevice_ctx_create call;
   * reuses the existing `ChooseV4L2PixelFormat` get-format callback
     (already returns `AV_PIX_FMT_DRM_PRIME`) and the existing
     `apply_cropping = 0` constraint.
 
 `InitV4L2RequestDecoder` is invoked **before** `InitV4L2Decoder` in
 `InitHWDecoderIfAllowed`. On Rockchip mainline it succeeds via either
-mechanism (ALARM uses the named codec). On Pi4 / Mediatek /
-vendor-MPP-stateful boards neither mechanism is registered for the
-codec, the function bails out, and the existing stateful
-`InitV4L2Decoder` runs as before. No regression of stateful boards.
+mechanism. On Pi4 / Mediatek / vendor-MPP-stateful boards neither
+mechanism is registered for the codec, the function bails out, and the
+existing stateful `InitV4L2Decoder` runs as before. No regression of
+stateful boards.
 
 `mDRMDeviceContext` is unconditionally `av_buffer_unref`'d in
 `ProcessShutdown` (no-op when null). Gated behind
@@ -46,9 +49,8 @@ codec, the function bails out, and the existing stateful
 
 Bug 1969297.
 
-diff --git a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h
---- a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h	2026-03-18 19:22:14.000000000 +0000
-+++ b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h	2026-04-27 20:43:39.347992674 +0000
+--- a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h	2026-05-21 04:57:59.570946601 +0000
++++ b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h	2026-05-21 04:57:59.876488776 +0000
 @@ -225,7 +225,12 @@
    bool IsLinuxHDR() const;
    MediaResult InitVAAPIDecoder();
@@ -73,9 +75,8 @@ diff --git a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.h b/dom/media/platfor
    // If video overlay is used we want to upload SW decoded frames to
    // DMABuf and present it as a external texture to rendering pipeline.
    bool mUploadSWDecodeToDMABuf = false;
-diff --git a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp
---- a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp	2026-04-27 16:09:10.000000000 +0200
-+++ b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp	2026-04-29 00:10:00.098884335 +0200
+--- a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp	2026-05-21 04:57:59.566685221 +0000
++++ b/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp	2026-05-21 04:58:00.136004159 +0000
 @@ -403,6 +403,129 @@
    return NS_OK;
  }
@@ -90,7 +91,7 @@ diff --git a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp b/dom/media/platf
 +  }
 +  const char* drmDevice = "/dev/dri/renderD128";
 +  if (mLib->av_hwdevice_ctx_create(&mDRMDeviceContext,
-+                                   AV_HWDEVICE_TYPE_DRM, drmDevice,
++                                   (enum AVHWDeviceType)13, drmDevice,
 +                                   nullptr, 0) < 0) {
 +    FFMPEG_LOG("  av_hwdevice_ctx_create(DRM, %s) failed", drmDevice);
 +    return false;
@@ -143,7 +144,7 @@ diff --git a/dom/media/platforms/ffmpeg/FFmpegVideoDecoder.cpp b/dom/media/platf
 +      for (int i = 0;; i++) {
 +        const AVCodecHWConfig* cfg = mLib->avcodec_get_hw_config(generic, i);
 +        if (!cfg) break;
-+        if (cfg->device_type == AV_HWDEVICE_TYPE_DRM) {
++        if (cfg->device_type == AV_HWDEVICE_TYPE_DRM || (int)cfg->device_type == 13 || (int)cfg->device_type == 14) {
 +          codec = generic;
 +          FFMPEG_LOG("  using generic codec %s with DRM hwaccel", codec->name);
 +          break;

arch/libva-v4l2-request-fourier/PKGBUILD

@@ -24,27 +24,29 @@ pkgname=libva-v4l2-request-fourier
 epoch=1
 _upstreampkg=libva-v4l2-request
 
-# Pin the fork tip. de27e95 = "v4l2: log error_idx + failing ctrl id
-# on S_EXT_CTRLS failure" — Phase 8.13 diagnostic that surfaced the
-# real root cause of the libva→daedalus_v4l2 request-completion
-# timeout (turned out the EINVAL libva was logging was a harmless
-# H264/HEVC probe; actual VP9 stateless control SET worked all along).
+# Pin the fork tip. c454618 = PR #16 merge "picture, request_pool:
+# transparent OUTPUT-pool resize on bitstream overrun (#15)" —
+# follow-up root-cause fix to #13/#14. On a mid-stream bitstream-
+# budget overrun (typical cause: SPS-driven resolution upshift in an
+# adaptive-bitrate stream), codec_store_buffer now snapshots the in-
+# flight surface's accumulated bytes, releases its OUTPUT pool slot,
+# calls request_pool_resize (STREAMOFF → REQBUFS(0) → S_FMT with
+# 2×sizeimage hint, capped at 1 GiB, page-aligned → CREATE_BUFS →
+# mmap → media_request_alloc → STREAMON), re-acquires a slot, re-
+# mirrors the surface's source_{data,size,request_fd}, restores the
+# bytes, and continues. The frame survives instead of being dropped
+# back to libavcodec for surface recreation. CAPTURE side untouched
+# (per-queue V4L2 streaming independence).
 #
-# Prior pin (7ac934e) was iter38b — fresnel-fourier multi-device probe
-# + MAX_PROFILES bounds-check fix. de27e95 added the daedalus_v4l2
-# probe slot (b5b3acf), the meson option gate (2146341), and the
-# S_EXT_CTRLS diagnostic (de27e95 itself).  c332d34 (LIBVA-1) finishes
-# the per-codec dispatch: rpi-hevc-dec + daedalus_v4l2 both probe each
-# other as alts, VP9/AV1/H.264 route to daedalus via new 'd' kind,
-# HEVC stays on 'p' (rpi-hevc-dec).  Required for the Pi 5 / CM5
-# mixed-decoder deployment (higgs).
-_commit=c332d34643be29e88012e30878d2fbeb255b20ab
+# Prior pin (2860d75) = PR #14 merge — codec_store_buffer bounds-
+# check floor (#13).
+_commit=c454618ae11addce2e17b560f4deeacbed067d98
 
 # Project version from meson.build (1.0.0) + commit count + short sha,
 # matching the ffmpeg-v4l2-request-fourier convention. Recomputed at
 # build time by pkgver() below; the static value here is a placeholder
 # so AUR-style consumers see something coherent before src/ exists.
-pkgver=1.0.0.r378.c332d34
+pkgver=1.0.0.r390.c454618
 pkgrel=1
 pkgdesc="VA-API backend for V4L2 stateless decoders (multiplanar fork — fourier umbrella)"
 arch=('aarch64')

arch/mesa-panvk-bifrost/0003-panvk-bifrost-vk-ext-transform-feedback.patch

@@ -0,0 +1,328 @@
+--- a/src/panfrost/vulkan/panvk_shader.h	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_shader.h	2026-05-20 18:52:53.312698258 +0200
+@@ -150,6 +150,10 @@
+    struct {
+ #if PAN_ARCH < 9
+       int32_t raw_vertex_offset;
++      uint32_t num_vertices;       /* iter13: XFB needs per-draw vertex count */
++      /* aligned_u64 attribute below inserts the 4-byte alignment gap
++       * after num_vertices automatically — no explicit pad needed. */
++      aligned_u64 xfb_address[4];  /* iter13: 4 transform feedback buffer base addresses */
+ #endif
+       int32_t first_vertex;
+       int32_t base_instance;
+--- a/src/panfrost/vulkan/panvk_vX_physical_device.c	2026-05-20 19:09:29.711145446 +0200
++++ b/src/panfrost/vulkan/panvk_vX_physical_device.c	2026-05-20 18:52:54.832720445 +0200
+@@ -169,6 +169,7 @@
+       .EXT_provoking_vertex = true,
+       .EXT_queue_family_foreign = true,
+       .EXT_robustness2 = true,
++      .EXT_transform_feedback = PAN_ARCH < 9,   /* iter13: JM-class only for now */
+       .EXT_sampler_filter_minmax = PAN_ARCH >= 10,
+       .EXT_scalar_block_layout = true,
+       .EXT_separate_stencil_usage = true,
+@@ -495,6 +496,10 @@
+       .robustImageAccess2 = false,
+       .nullDescriptor = true,
+ 
++      /* VK_EXT_transform_feedback (iter13) */
++      .transformFeedback = PAN_ARCH < 9,
++      .geometryStreams = false,
++
+       /* VK_KHR_shader_clock */
+       .shaderSubgroupClock = device->kmod.dev->props.gpu_can_query_timestamp,
+       .shaderDeviceClock = device->kmod.dev->props.timestamp_device_coherent,
+@@ -1020,6 +1025,18 @@
+       .robustStorageBufferAccessSizeAlignment = 1,
+       .robustUniformBufferAccessSizeAlignment = 1,
+ 
++      /* VK_EXT_transform_feedback (iter13) */
++      .maxTransformFeedbackStreams = 1,
++      .maxTransformFeedbackBuffers = 4,
++      .maxTransformFeedbackBufferSize = UINT32_MAX,
++      .maxTransformFeedbackStreamDataSize = 512,
++      .maxTransformFeedbackBufferDataSize = 512,
++      .maxTransformFeedbackBufferDataStride = 2048,
++      .transformFeedbackQueries = false,
++      .transformFeedbackStreamsLinesTriangles = false,
++      .transformFeedbackRasterizationStreamSelect = false,
++      .transformFeedbackDraw = false,
++
+       /* VK_EXT_shader_object */
+       /* We do not currently support VK_EXT_shader_object but this is used
+        * internally by vk_shader
+--- a/src/panfrost/vulkan/panvk_vX_shader.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_vX_shader.c	2026-05-20 18:52:56.556745611 +0200
+@@ -21,6 +21,7 @@
+ #include "panvk_physical_device.h"
+ #include "panvk_sampler.h"
+ #include "panvk_shader.h"
++#include "pan_nir.h"   /* iter13: pan_nir_lower_xfb */
+ 
+ #include "spirv/nir_spirv.h"
+ #include "util/memstream.h"
+@@ -100,6 +101,20 @@
+    case nir_intrinsic_load_raw_vertex_offset_pan:
+       val = load_sysval(b, graphics, bit_size, vs.raw_vertex_offset);
+       break;
++   case nir_intrinsic_load_num_vertices:    /* iter13: XFB index calc */
++      val = load_sysval(b, graphics, bit_size, vs.num_vertices);
++      break;
++   case nir_intrinsic_load_xfb_address: {   /* iter13: XFB buffer N base address */
++      unsigned idx = nir_intrinsic_base(intr);
++      switch (idx) {
++      case 0: val = load_sysval(b, graphics, bit_size, vs.xfb_address[0]); break;
++      case 1: val = load_sysval(b, graphics, bit_size, vs.xfb_address[1]); break;
++      case 2: val = load_sysval(b, graphics, bit_size, vs.xfb_address[2]); break;
++      case 3: val = load_sysval(b, graphics, bit_size, vs.xfb_address[3]); break;
++      default: return false;
++      }
++      break;
++   }
+    case nir_intrinsic_load_layer_id:
+       assert(b->shader->info.stage == MESA_SHADER_FRAGMENT);
+       val = load_sysval(b, graphics, bit_size, layer_id);
+@@ -457,6 +472,7 @@
+             core_max_id);
+ 
+    pan_preprocess_nir(nir, pdev->kmod.dev->props.gpu_id);
++
+ }
+ 
+ static void
+@@ -870,6 +886,18 @@
+             nir_var_shader_in | nir_var_shader_out, UINT32_MAX);
+    NIR_PASS(_, nir, nir_lower_io, nir_var_shader_in | nir_var_shader_out,
+             glsl_type_size, nir_lower_io_use_interpolated_input_intrinsics);
++
++#if PAN_ARCH < 9
++   /* iter13: VK_EXT_transform_feedback — runs AFTER nir_lower_io so that
++    * shader outputs are now store_output intrinsics that pan_nir_lower_xfb
++    * can rewrite to nir_store_global+nir_load_xfb_address. */
++   if (nir->info.stage == MESA_SHADER_VERTEX &&
++       nir->info.has_transform_feedback_varyings) {
++      NIR_PASS(_, nir, nir_opt_constant_folding);
++      NIR_PASS(_, nir, nir_io_add_intrinsic_xfb_info);
++      NIR_PASS(_, nir, pan_nir_lower_xfb);
++   }
++#endif
+ }
+ 
+ static VkResult
+@@ -1288,6 +1316,9 @@
+       .view_mask = (state && state->rp) ? state->rp->view_mask : 0,
+       .robust2_modes = robust2_modes,
+       .robust_descriptors = dev->vk.enabled_features.nullDescriptor,
++      /* iter13: XFB shaders must disable IDVS (matches Panfrost-Gallium). */
++      .no_idvs = (info->stage == MESA_SHADER_VERTEX) &&
++                 info->nir->info.has_transform_feedback_varyings,
+    };
+ 
+    switch (info->stage) {
+--- a/src/panfrost/vulkan/panvk_cmd_draw.h	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_cmd_draw.h	2026-05-20 18:52:57.748763011 +0200
+@@ -135,6 +135,19 @@
+    struct panvk_graphics_sysvals sysvals;
+ 
+ #if PAN_ARCH < 9
++   /* iter13: VK_EXT_transform_feedback state (JM-class only for now). */
++   struct {
++      bool active;
++      uint32_t buffer_count;
++      struct {
++         uint64_t addr;
++         uint64_t offset;
++         uint64_t size;
++      } buffers[4];
++   } xfb;
++#endif
++
++#if PAN_ARCH < 9
+    struct panvk_shader_link link;
+ #endif
+ 
+--- a/src/panfrost/vulkan/panvk_vX_cmd_draw.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/panvk_vX_cmd_draw.c	2026-05-20 19:10:23.031919662 +0200
+@@ -10,6 +10,7 @@
+ #include "panvk_entrypoints.h"
+ 
+ #include "pan_desc.h"
++#include "pan_compiler.h"   /* PAN_SHADER_OOB_ADDRESS */
+ #include "pan_util.h"
+ 
+ static void
+@@ -722,6 +723,35 @@
+    set_gfx_sysval(cmdbuf, dirty_sysvals, vs.raw_vertex_offset,
+                   info->vertex.raw_offset);
+    set_gfx_sysval(cmdbuf, dirty_sysvals, layer_id, info->layer_id);
++
++   /* iter13: VK_EXT_transform_feedback sysvals — always set (per draw),
++    * reflect bound XFB state. set_gfx_sysval is a no-op if value unchanged. */
++   set_gfx_sysval(cmdbuf, dirty_sysvals, vs.num_vertices, info->vertex.count);
++   {
++      const struct panvk_cmd_graphics_state *_gfx = &cmdbuf->state.gfx;
++      /* iter13: default each XFB buffer address to PAN_SHADER_OOB_ADDRESS
++       * (= 1<<63). This is the Panfrost-Gallium memory-sink idiom — the
++       * Bifrost MMU silently discards stores to this address, so a pipeline
++       * with XFB outputs used in a non-XFB draw (or in an XFB draw with
++       * fewer bound buffers than the shader declares) is safe instead of
++       * faulting. See gallium/drivers/panfrost/pan_cmdstream.c PAN_SYSVAL_XFB. */
++      uint64_t _xa0 = PAN_SHADER_OOB_ADDRESS, _xa1 = PAN_SHADER_OOB_ADDRESS,
++               _xa2 = PAN_SHADER_OOB_ADDRESS, _xa3 = PAN_SHADER_OOB_ADDRESS;
++      if (_gfx->xfb.active) {
++         if (_gfx->xfb.buffer_count > 0 && _gfx->xfb.buffers[0].addr)
++            _xa0 = _gfx->xfb.buffers[0].addr + _gfx->xfb.buffers[0].offset;
++         if (_gfx->xfb.buffer_count > 1 && _gfx->xfb.buffers[1].addr)
++            _xa1 = _gfx->xfb.buffers[1].addr + _gfx->xfb.buffers[1].offset;
++         if (_gfx->xfb.buffer_count > 2 && _gfx->xfb.buffers[2].addr)
++            _xa2 = _gfx->xfb.buffers[2].addr + _gfx->xfb.buffers[2].offset;
++         if (_gfx->xfb.buffer_count > 3 && _gfx->xfb.buffers[3].addr)
++            _xa3 = _gfx->xfb.buffers[3].addr + _gfx->xfb.buffers[3].offset;
++      }
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[0], _xa0);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[1], _xa1);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[2], _xa2);
++      set_gfx_sysval(cmdbuf, dirty_sysvals, vs.xfb_address[3], _xa3);
++   }
+ #endif
+ 
+    if (dyn_gfx_state_dirty(cmdbuf, CB_BLEND_CONSTANTS)) {
+--- a/src/panfrost/vulkan/meson.build	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/meson.build	2026-05-20 18:53:04.484861338 +0200
+@@ -73,6 +73,7 @@
+ jm_inc_dir = ['jm']
+ jm_files = [
+   'jm/panvk_vX_bind_queue.c',
++  'jm/panvk_vX_cmd_xfb.c',   # iter13
+   'jm/panvk_vX_cmd_buffer.c',
+   'jm/panvk_vX_cmd_dispatch.c',
+   'jm/panvk_vX_cmd_draw.c',
+--- a/src/panfrost/vulkan/jm/panvk_vX_cmd_buffer.c	2026-04-29 22:19:00.000000000 +0200
++++ b/src/panfrost/vulkan/jm/panvk_vX_cmd_buffer.c	2026-05-20 19:10:26.163965149 +0200
+@@ -473,5 +473,12 @@
+ 
+    vk_command_buffer_begin(&cmdbuf->vk, pBeginInfo);
+ 
++#if PAN_ARCH < 9
++   /* iter13: clear XFB state on Begin so a reused command buffer does not
++    * inherit stale xfb.buffer_count / xfb.active / xfb.buffers[] from a
++    * prior recording. */
++   memset(&cmdbuf->state.gfx.xfb, 0, sizeof(cmdbuf->state.gfx.xfb));
++#endif
++
+    return VK_SUCCESS;
+ }
+--- a/src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c	2026-05-18 12:50:53.067999996 +0200
++++ b/src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c	2026-05-20 19:10:27.175979847 +0200
+@@ -0,0 +1,111 @@
++/*
++ * Copyright © 2026 mfritsche / claude-noether
++ * SPDX-License-Identifier: MIT
++ *
++ * iter13: VK_EXT_transform_feedback command handlers for the JM
++ * architecture path (Bifrost v6/v7 + Valhall-JM v9).
++ *
++ * The runtime contract:
++ *   - vkCmdBindTransformFeedbackBuffersEXT: stash (gpu_addr, offset, size)
++ *     for each slot into cmdbuf->state.gfx.xfb.buffers[].
++ *   - vkCmdBeginTransformFeedbackEXT: set cmdbuf->state.gfx.xfb.active = true.
++ *     Mark sysvals dirty so the next draw re-emits vs.xfb_address[].
++ *   - vkCmdEndTransformFeedbackEXT: set active = false.
++ *
++ * Counter buffers (firstCounterBuffer/counterBufferCount/pCounterBuffers/
++ * pCounterBufferOffsets) are accepted by API but ignored — v1 doesn't
++ * support pause/resume. transformFeedbackDraw is advertised as false.
++ *
++ * Per-draw integration: jm/panvk_vX_cmd_draw.c reads cmdbuf->state.gfx.xfb
++ * and populates vs.xfb_address[i] for shader use. The pan_nir_lower_xfb
++ * pass in panvk_vX_shader.c emits nir_load_xfb_address(i) which lowers
++ * (via panvk_vX_shader.c sysval handler) to a load from the per-draw
++ * sysval push area.
++ */
++
++#include "vk_log.h"
++#include "util/log.h"
++
++#include "panvk_cmd_buffer.h"
++#include "panvk_cmd_draw.h"
++#include "panvk_buffer.h"
++#include "panvk_entrypoints.h"
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdBindTransformFeedbackBuffersEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstBinding,
++   uint32_t bindingCount,
++   const VkBuffer *pBuffers,
++   const VkDeviceSize *pOffsets,
++   const VkDeviceSize *pSizes)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   for (uint32_t i = 0; i < bindingCount; i++) {
++      uint32_t slot = firstBinding + i;
++      if (slot >= 4)
++         continue;
++
++      VK_FROM_HANDLE(panvk_buffer, buf, pBuffers[i]);
++      gfx->xfb.buffers[slot].addr = panvk_buffer_gpu_ptr(buf, 0);
++      gfx->xfb.buffers[slot].offset = pOffsets[i];
++      gfx->xfb.buffers[slot].size =
++         (pSizes != NULL && pSizes[i] != VK_WHOLE_SIZE)
++            ? pSizes[i]
++            : (buf->vk.size - pOffsets[i]);
++   }
++
++   if (firstBinding + bindingCount > gfx->xfb.buffer_count)
++      gfx->xfb.buffer_count = firstBinding + bindingCount;
++}
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdBeginTransformFeedbackEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstCounterBuffer,
++   uint32_t counterBufferCount,
++   const VkBuffer *pCounterBuffers,
++   const VkDeviceSize *pCounterBufferOffsets)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   /* Counter buffers ignored in v1 — see VkPhysicalDeviceTransformFeedback
++    * PropertiesEXT.transformFeedbackDraw = false in panvk_vX_physical_device.c.
++    * App is spec-compliant if it does not pass counter buffers (which our
++    * features advertisement allows), but warn loudly if it does so we do not
++    * silently produce wrong capture state. */
++   (void)firstCounterBuffer;
++   (void)pCounterBufferOffsets;
++   if (counterBufferCount > 0 && pCounterBuffers != NULL) {
++      mesa_logw("panvk: CmdBeginTransformFeedbackEXT: counter buffers not "
++                "implemented (transformFeedbackDraw=false); XFB resume will "
++                "restart at buffer offset 0");
++   }
++
++   gfx->xfb.active = true;
++   /* Per-draw set_gfx_sysval picks up the change automatically — no
++    * explicit dirty marking required (set_gfx_sysval uses memcmp +
++    * BITSET to detect state diffs and re-emit sysvals). */
++}
++
++VKAPI_ATTR void VKAPI_CALL
++panvk_per_arch(CmdEndTransformFeedbackEXT)(
++   VkCommandBuffer commandBuffer,
++   uint32_t firstCounterBuffer,
++   uint32_t counterBufferCount,
++   const VkBuffer *pCounterBuffers,
++   const VkDeviceSize *pCounterBufferOffsets)
++{
++   VK_FROM_HANDLE(panvk_cmd_buffer, cmdbuf, commandBuffer);
++   struct panvk_cmd_graphics_state *gfx = &cmdbuf->state.gfx;
++
++   (void)firstCounterBuffer;
++   (void)counterBufferCount;
++   (void)pCounterBuffers;
++   (void)pCounterBufferOffsets;
++
++   gfx->xfb.active = false;
++}

arch/mesa-panvk-bifrost/PKGBUILD

@@ -30,7 +30,7 @@
 
 pkgname=mesa-panvk-bifrost
 _mesaver=26.0.6
-pkgver=26.0.6.r2
+pkgver=26.0.6.r3
 pkgrel=1
 pkgdesc="Patched Mesa libvulkan_panfrost.so exposing Bifrost-gen Mali to Vulkan apps (panvk-bifrost campaign)"
 arch=('aarch64')
@@ -79,6 +79,7 @@ source=(
     "https://archive.mesa3d.org/mesa-${_mesaver}.tar.xz"
     "0001-panvk-expose-robustness2-nullDescriptor-bifrost.patch"
     "0002-panvk-expose-vulkan-1.1-1.2-on-bifrost.patch"
+    "0003-panvk-bifrost-vk-ext-transform-feedback.patch"
     "brave-vulkan"
     "icd.json"
 )
@@ -88,6 +89,7 @@ sha256sums=(
     'SKIP'
     'SKIP'
     'SKIP'
+    'SKIP'
 )
 
 prepare() {
@@ -107,12 +109,23 @@ prepare() {
     sed -i 's|bool has_vk1_1 = PAN_ARCH >= 10;|bool has_vk1_1 = true;|' src/panfrost/vulkan/panvk_vX_physical_device.c
     sed -i 's|bool has_vk1_2 = PAN_ARCH >= 10;|bool has_vk1_2 = true;|' src/panfrost/vulkan/panvk_vX_physical_device.c
 
+    # iter13: VK_EXT_transform_feedback implementation for Bifrost (PAN_ARCH<9).
+    # Applied as a real unified-diff patch — the change is too large for sed.
+    # Phase-doc context: ~/src/panvk-bifrost/phase{4,5,6}_iter13_close.md.
+    # Unlocks ANGLE-Vulkan → GLES3 → WebGL2 / WebGPU on Brave (chrome://gpu
+    # reports "Hardware accelerated" across the board for the affected paths).
+    patch -p1 < "${srcdir}/0003-panvk-bifrost-vk-ext-transform-feedback.patch"
+
     # Sanity-check the patches landed.
     grep -q "KHR_robustness2 = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "EXT_robustness2 = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "nullDescriptor = true," src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "has_vk1_1 = true;" src/panfrost/vulkan/panvk_vX_physical_device.c
     grep -q "has_vk1_2 = true;" src/panfrost/vulkan/panvk_vX_physical_device.c
+    # iter13 sanity:
+    grep -q "EXT_transform_feedback = PAN_ARCH < 9," src/panfrost/vulkan/panvk_vX_physical_device.c
+    grep -q "pan_nir_lower_xfb" src/panfrost/vulkan/panvk_vX_shader.c
+    test -f src/panfrost/vulkan/jm/panvk_vX_cmd_xfb.c
 }
 
 build() {

debian/claude-his-agent/build-deb.sh

@@ -16,7 +16,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo his.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo his.tar.gz \
     "https://git.reauktion.de/marfrit/claude-his-agent/archive/v${PKGVER}.tar.gz"
 echo "$HIS_TARBALL_SHA256  his.tar.gz" | sha256sum -c
 tar xzf his.tar.gz

debian/daedalus-v4l2-dkms/build-deb.sh

@@ -14,9 +14,9 @@
 # Sibling userspace package: ../daedalus-v4l2/build-deb.sh
 set -euo pipefail
 
-UPSTREAM_COMMIT=481279c9bffd19e32c8f3299897e9b63fc5a24aa
-PKGVER=0.1.0+r18+g481279c
-PKGREL=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+UPSTREAM_COMMIT=79256dc7ef41f83873ca9c23db20f5888858e65d
+PKGVER=0.1.0+r28+g79256dc
+PKGREL=1  # reset for new upstream pin (79256dc — H.264 B-frame reorder fix); still carries the #64 multi-kernel postinst fix
 MODULE_NAME=daedalus_v4l2
 
 HERE=$(dirname "$(readlink -f "$0")")
@@ -28,7 +28,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo daedalus-v4l2.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo daedalus-v4l2.tar.gz \
     "https://git.reauktion.de/reauktion/daedalus-v4l2/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf daedalus-v4l2.tar.gz
 SRCDIR=daedalus-v4l2
@@ -78,7 +78,6 @@ set -e
 
 NAME=${MODULE_NAME}
 VERSION=${PKGVER}
-KERNELVER=\$(uname -r)
 
 # Yellow + bold ANSI for the warning so it stands out in apt's
 # stream of "Setting up" lines.  Disable colour on non-TTY.
@@ -101,29 +100,56 @@ if [ "\$1" = "configure" ]; then
 
     dkms add "\$NAME/\$VERSION" 2>/dev/null || true
 
-    # Don't let autoinstall failure mask the actual problem behind '|| true'.
-    # Run it, capture the result, then verify post-condition.
-    autoinstall_rc=0
-    dkms autoinstall "\$NAME/\$VERSION" || autoinstall_rc=\$?
+    # Enumerate every kernel whose headers are actually present
+    # (/lib/modules/<kver>/build resolves to a directory).  We iterate
+    # all of them — not just \$(uname -r) — so that installing this
+    # package after a kernel update covers the newly-installed kernel
+    # too, and so that a later kernel-headers install for a previously
+    # uncovered version gets picked up on dpkg-reconfigure.  Without
+    # this, autoinstall (which targets only the running kernel) leaves
+    # /dev/daedalus-v4l2 absent after a kernel switch + reboot
+    # (marfrit/marfrit-packages#64).
+    kvers=''
+    for d in /lib/modules/*/build; do
+        [ -d "\$d" ] || continue
+        k=\$(basename "\$(dirname "\$d")")
+        kvers="\$kvers \$k"
+    done
 
-    # Verify the module actually built + installed for the running kernel.
-    status=\$(dkms status -m "\$NAME" -v "\$VERSION" -k "\$KERNELVER" 2>/dev/null || true)
-    if ! printf '%s\\n' "\$status" | grep -q -E 'installed|loaded'; then
+    if [ -z "\$kvers" ]; then
         warn ""
-        warn "DKMS build did NOT land for kernel \$KERNELVER."
-        warn "  dkms status -m \$NAME -v \$VERSION -k \$KERNELVER:"
-        warn "    \$(printf '%s' "\$status" | head -1)"
-        warn ""
-        warn "Most likely cause: kernel headers package is missing."
-        warn "  Raspberry Pi OS / Pi 5:  apt install linux-headers-rpi-2712"
-        warn "  Debian generic:          apt install linux-headers-\$KERNELVER"
-        warn ""
-        warn "After installing headers, finish the install with:"
+        warn "No kernels with headers found under /lib/modules/*/build."
+        warn "Install kernel headers (e.g. linux-headers-rpi-2712 on Pi OS)"
+        warn "then finish with:"
         warn "  sudo dkms autoinstall \$NAME/\$VERSION"
-        warn "  sudo modprobe daedalus_v4l2"
+        exit 0
+    fi
+
+    failed=''
+    for k in \$kvers; do
+        dkms autoinstall -k "\$k" "\$NAME/\$VERSION" >/dev/null 2>&1 || true
+        s=\$(dkms status -m "\$NAME" -v "\$VERSION" -k "\$k" 2>/dev/null || true)
+        if ! printf '%s\\n' "\$s" | grep -q -E 'installed|loaded'; then
+            failed="\$failed \$k"
+        fi
+    done
+
+    if [ -n "\$failed" ]; then
         warn ""
-        warn "Until then daedalus_v4l2 will NOT be loadable and the"
-        warn "userspace daedalus-v4l2 daemon will have nothing to talk to."
+        warn "DKMS build did NOT land for kernel(s):\$failed"
+        warn ""
+        warn "Most likely cause: kernel headers missing for those versions."
+        warn "  Raspberry Pi OS / Pi 5:  apt install linux-headers-rpi-2712"
+        warn "  Debian generic:          apt install linux-headers-<version>"
+        warn ""
+        warn "After installing headers, finish with:"
+        for k in \$failed; do
+            warn "  sudo dkms autoinstall -k \$k \$NAME/\$VERSION"
+        done
+        warn "  sudo modprobe daedalus_v4l2  (after booting that kernel)"
+        warn ""
+        warn "Until then daedalus_v4l2 will NOT be loadable on those kernels"
+        warn "and the userspace daedalus-v4l2 daemon will have nothing to talk to."
     fi
 fi
 

debian/daedalus-v4l2-dkms/debian/changelog

@@ -1,3 +1,77 @@
+daedalus-v4l2-dkms (0.1.0+r28+g79256dc-1) bookworm trixie; urgency=medium
+
+  * Bump to 79256dc — H.264 B-frame display reorder fix (closes
+    daedalus-v4l2#6).  libavcodec's H.264 decoder reorders output to
+    display order before returning from avcodec_receive_frame; the
+    daemon was binding each REQ_DECODE's pixels to the cookie of the
+    bitstream that triggered the receive_frame call, not the cookie
+    of the bitstream that actually produced the picture.  For B-frame
+    sequences this paired cookie N's CAPTURE buffer with cookie N-2's
+    pixels and silently lost intermediate frames — visible as
+    "2 1 4 3 6 5" frame pairing in mpv / Firefox on Pi CM5.
+  * Wire-protocol bump (DAEDALUS_PROTO_VERSION 0 → 1): REQ_DECODE
+    gains __u64 src_pts; RESP_FRAME gains __u32 flags +
+    __u64 output_src_pts.  Kernel + daemon must install atomically
+    (this package + daedalus-v4l2 0.1.0+r28+g79256dc).
+  * Carries forward the #64 multi-kernel postinst fix from -2:
+    autoinstall for every /lib/modules/*/build that resolves to real
+    headers, not just $(uname -r).
+  * Closes #64.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Thu, 21 May 2026 12:00:00 +0000
+
+daedalus-v4l2-dkms (0.1.0+r24+gf0d4186-2) bookworm trixie; urgency=medium
+
+  * postinst: autoinstall for every installed kernel with headers, not
+    just the running one.  Previously `dkms autoinstall $NAME/$VERSION`
+    built only against `$(uname -r)`, so installing the package on
+    kernel A and then rebooting into a separately-installed kernel B
+    left /lib/modules/B/updates/dkms/ empty — /dev/daedalus-v4l2 absent,
+    daedalus daemon nothing to talk to, browser/VAAPI silently falling
+    back to software with no obvious diagnostic.  Now we enumerate every
+    /lib/modules/*/build that resolves to a real directory and run
+    `dkms autoinstall -k <kver>` for each, reporting per-kernel failure
+    only when headers are missing.  Closes #64.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Thu, 21 May 2026 09:30:00 +0000
+
+daedalus-v4l2-dkms (0.1.0+r24+gf0d4186-1) bookworm trixie; urgency=medium
+
+  * Bump to f0d4186 — per-ctx vb2 lock fix.  daedalus_queue_init now
+    uses ctx->vb_mutex instead of ctx->dev->m2m_lock for each
+    vb2_queue's lock, unblocking Firefox's multi-process VAAPI
+    clients (they were colliding on the device-wide mutex and one
+    would EBUSY-fail S_FMT while another was mid-streamon).
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 23:00:00 +0000
+
+daedalus-v4l2-dkms (0.1.0+r22+g462aa4b-1) bookworm trixie; urgency=medium
+
+  * Bump to 462aa4b — kernel device_run() now calls
+    v4l2_ctrl_request_setup() before reading the H.264 stateless
+    control values from the bound media_request, so the values
+    daedalus ships to the userspace daemon match what the V4L2
+    client (libva-v4l2-request-fourier) actually set.  Closes the
+    libva→kernel control-binding gap that was causing decoded
+    frames to come back as best-effort zero garbage from libavcodec.
+  * Wire-ABI lockstep with daedalus-v4l2 0.1.0+r22+g462aa4b.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 22:00:00 +0000
+
+daedalus-v4l2-dkms (0.1.0+r20+g3dd0eb0-1) bookworm trixie; urgency=medium
+
+  * Bump to 3dd0eb0 — DAEMON-PPS kernel-side changes.  device_run()
+    now reads the V4L2 H.264 stateless control values from the bound
+    media_request and ships them to the daemon inside REQ_DECODE
+    via the new struct daedalus_h264_meta block (gated on
+    DAEDALUS_REQ_FLAG_H264_META).  Required for H.264 decode to
+    work via the libva-v4l2-request -> daedalus daemon path; daemon
+    synthesises AnnexB SPS+PPS NAL units from the structs.
+  * Wire-ABI lockstep with daedalus-v4l2 0.1.0+r20+g3dd0eb0 — install
+    both packages together.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 21:00:00 +0000
+
 daedalus-v4l2-dkms (0.1.0+r18+g481279c-1) bookworm trixie; urgency=medium
 
   * Bump to 481279c in lockstep with the userspace daedalus-v4l2

debian/daedalus-v4l2/build-deb.sh

@@ -11,13 +11,16 @@
 # Upstream repo: https://git.reauktion.de/reauktion/daedalus-v4l2
 set -euo pipefail
 
-# Same pin as the Arch PKGBUILD.  481279c = "Phase 8.13: byte-exact
-# end-to-end via libva (consumer target hit)" — first commit where the
-# full ffmpeg -hwaccel vaapi → libva → /dev/video0 → daemon path lands
-# a pixel-correct decoded frame back in ffmpeg.
-UPSTREAM_COMMIT=481279c9bffd19e32c8f3299897e9b63fc5a24aa
-PKGVER=0.1.0+r18+g481279c
-PKGREL=1  # reset for new upstream pin (481279c — Phase 8.13 close)
+# Same pin as the Arch PKGBUILD.  79256dc = "kernel + daemon: H.264
+# B-frame display reorder fix (closes #6)" — adds the wire-protocol
+# src_pts / output_src_pts / RESP_FRAME flags split that lets H.264
+# streams with B-frames preserve display order through libva → kernel
+# → daemon.  PROTO_VERSION bumps 0 → 1; lock-step userspace + kernel
+# rebuild REQUIRED (daedalus-v4l2-dkms build-deb.sh pinned to the same
+# commit).
+UPSTREAM_COMMIT=79256dc7ef41f83873ca9c23db20f5888858e65d
+PKGVER=0.1.0+r28+g79256dc
+PKGREL=1  # reset for new upstream pin (79256dc — H.264 B-frame reorder fix)
 
 HERE=$(dirname "$(readlink -f "$0")")
 
@@ -28,7 +31,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo daedalus-v4l2.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo daedalus-v4l2.tar.gz \
     "https://git.reauktion.de/reauktion/daedalus-v4l2/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf daedalus-v4l2.tar.gz
 SRCDIR=daedalus-v4l2

debian/daedalus-v4l2/debian/changelog

@@ -1,3 +1,79 @@
+daedalus-v4l2 (0.1.0+r28+g79256dc-1) bookworm trixie; urgency=medium
+
+  * Bump to 79256dc — H.264 B-frame display reorder fix (closes
+    daedalus-v4l2#6 + #4 menu controls).  Daemon side: the
+    avcodec_send_packet → receive_frame loop now stamps pkt->pts =
+    req->src_pts so libavcodec's display-ordered frame->pts identifies
+    which OUTPUT bitstream's pixels each drained frame belongs to.
+    chardev_client maintains a (src_pts → cookie) lookup table so the
+    daemon can ship pixels to the cookie of the *originating*
+    bitstream, not the cookie of whatever REQ triggered the
+    receive_frame call.  Multiple RESP_FRAME messages per REQ_DECODE
+    are now possible (one for the just-consumed src, one or more for
+    drained pixels).
+  * Wire-protocol bump (DAEDALUS_PROTO_VERSION 0 → 1): REQ_DECODE
+    gains __u64 src_pts; RESP_FRAME gains __u32 flags +
+    __u64 output_src_pts.  Daemon + kernel must install atomically
+    (this package + daedalus-v4l2-dkms 0.1.0+r28+g79256dc).
+  * Also subsumes 79256dc's predecessor 7ff2d89 — H.264 DECODE_MODE +
+    START_CODE menu-control registration that retires the
+    "Unable to set control(s) error_idx=2/2" warning libva-v4l2-
+    request emitted on every context init.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Thu, 21 May 2026 12:00:00 +0000
+
+daedalus-v4l2 (0.1.0+r24+gf0d4186-1) bookworm trixie; urgency=medium
+
+  * Bump to f0d4186 — kernel per-ctx vb2 lock fix.  daedalus_queue_init
+    was wiring src_vq->lock and dst_vq->lock to ctx->dev->m2m_lock (a
+    device-wide mutex), serialising every vb2 ioctl across all
+    concurrent clients of /dev/video0.  For Firefox (which spawns
+    separate content + RDD + GPU processes that each open the device
+    and run libva probe simultaneously), one libva session's
+    S_FMT(OUTPUT_MPLANE) hit EBUSY while another was mid-streamon —
+    Firefox VAAPI playback fell apart at startup.
+  * Fix gives each open() its own ctx->vb_mutex; vb2 ioctls run
+    independently per client.  Matches cedrus / rkvdec / hantro
+    pattern.
+  * Verified on higgs: Firefox YouTube playback engages VAAPI cleanly,
+    sustained ~230 fps decode at 640x368 through the daedalus daemon,
+    zero EBUSY in stderr or daemon journal.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 23:00:00 +0000
+
+daedalus-v4l2 (0.1.0+r22+g462aa4b-1) bookworm trixie; urgency=medium
+
+  * Bump to 462aa4b — kernel-side fix for control-binding gap that
+    closes the libva→daemon SPS/PPS pipeline.  Kernel device_run now
+    calls v4l2_ctrl_request_setup() before reading ctrl->p_cur, so
+    the daemon's daedalus_h264_meta block actually carries THIS
+    request's V4L2 stateless H.264 control values instead of stale
+    /default ones.  Pairs with libva-v4l2-request-fourier r382+gc1bb444
+    (Fix 3 + Fix 4 from issue libva-v4l2-request-fourier#8).
+  * After-fix on higgs (Pi CM5): ffmpeg -hwaccel vaapi -i h264.mp4
+    produces unique decoded P-frames (per-frame fnv1a hashes differ)
+    and zero "error while decoding MB" / "reference frames exceeds
+    max" warnings.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 22:00:00 +0000
+
+daedalus-v4l2 (0.1.0+r20+g3dd0eb0-1) bookworm trixie; urgency=medium
+
+  * Bump to 3dd0eb0 — DAEMON-PPS H.264 SPS/PPS NAL synthesiser.
+    Daemon now reconstructs AnnexB SPS+PPS NAL units from the V4L2
+    stateless H.264 control structs (forwarded by the kernel via
+    a new struct daedalus_h264_meta block in REQ_DECODE) and
+    prepends them to the slice bitstream before feeding libavcodec.
+    Without this, ffmpeg -hwaccel vaapi on H.264 sources failed
+    with "non-existing PPS 0 referenced" even after LIBVA-1/-2
+    routing correctly delivered the request.
+  * Wire protocol: new DAEDALUS_REQ_FLAG_H264_META bit + struct
+    daedalus_h264_meta; daemon and kernel must be installed in
+    lockstep (this package + daedalus-v4l2-dkms 0.1.0+r20+g3dd0eb0).
+  * VP9 / AV1 paths unchanged.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 21:00:00 +0000
+
 daedalus-v4l2 (0.1.0+r18+g481279c-1) bookworm trixie; urgency=medium
 
   * Bump to 481279c.  Upstream landed the systemd unit + modules-load.d

debian/libva-v4l2-request-fourier/build-deb.sh

@@ -10,13 +10,26 @@
 # Upstream fork: https://git.reauktion.de/marfrit/libva-v4l2-request-fourier
 set -euo pipefail
 
-# Same pin as the Arch PKGBUILD.  c332d34 = LIBVA-1 close — per-codec
-# dispatch on Pi 5: rpi-hevc-dec + daedalus_v4l2 both probe each other
-# as alts, VP9/AV1/H.264 route to daedalus via new 'd' kind, HEVC stays
-# on 'p' (rpi-hevc-dec).
-UPSTREAM_COMMIT=c332d34643be29e88012e30878d2fbeb255b20ab
-PKGVER=1.0.0+r378+gc332d34
-PKGREL=2  # rebuild against pinned trixie libva-dev (2.22) for __vaDriverInit_1_22 ABI
+# Same pin as the Arch PKGBUILD.  c454618 = PR #16 merge "picture,
+# request_pool: transparent OUTPUT-pool resize on bitstream overrun
+# (#15)" — follow-up root-cause fix to #13/#14.  On a mid-stream
+# bitstream-budget overrun (typical cause: SPS-driven resolution
+# upshift in an adaptive-bitrate stream), codec_store_buffer now
+# snapshots the in-flight surface's accumulated bytes, releases its
+# OUTPUT pool slot, calls request_pool_resize (STREAMOFF →
+# REQBUFS(0) → S_FMT with 2×sizeimage hint, capped at 1 GiB, page-
+# aligned → CREATE_BUFS → mmap → media_request_alloc → STREAMON),
+# re-acquires a slot, re-mirrors the surface's source_{data,size,
+# request_fd}, restores the bytes, and continues.  The frame
+# survives instead of being dropped back to libavcodec for surface
+# recreation.  CAPTURE side untouched (per-queue V4L2 streaming
+# independence).
+#
+# Prior pin (2860d75) = PR #14 merge — codec_store_buffer bounds-
+# check floor (#13).
+UPSTREAM_COMMIT=c454618ae11addce2e17b560f4deeacbed067d98
+PKGVER=1.0.0+r390+gc454618
+PKGREL=1
 
 HERE=$(dirname "$(readlink -f "$0")")
 
@@ -27,7 +40,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo libva-fourier.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo libva-fourier.tar.gz \
     "https://git.reauktion.de/marfrit/libva-v4l2-request-fourier/archive/${UPSTREAM_COMMIT}.tar.gz"
 tar xzf libva-fourier.tar.gz
 SRCDIR=$(echo libva-v4l2-request-fourier)

debian/libva-v4l2-request-fourier/debian/changelog

@@ -1,3 +1,18 @@
+libva-v4l2-request-fourier (1.0.0+r380+g9898331-1) bookworm trixie; urgency=medium
+
+  * Bump to 9898331 — LIBVA-2 close.  Adds video_fd_daedalus to
+    any_fd_supports_output_format's probe list in config.c so the
+    profile enumerator actually sees daedalus_v4l2's OUTPUT formats
+    (VP9F + AV1F + S264).  Before this commit, ffmpeg vaapi against
+    H.264 on higgs bailed with "No support for codec h264 profile 578"
+    because RequestQueryConfigProfiles only walked rkvdec/hantro/
+    rpi-hevc-dec/vpu981 fds and never asked daedalus what it could do.
+  * Backward-compatible on RK3399/3588 — new slot gated by
+    HAVE_DAEDALUS_V4L2 *and* video_fd_daedalus >= 0; both false in
+    those deployments.
+
+ -- Markus Fritsche <mfritsche@reauktion.de>  Wed, 20 May 2026 19:30:00 +0000
+
 libva-v4l2-request-fourier (1.0.0+r378+gc332d34-2) bookworm trixie; urgency=medium
 
   * Rebuild on a native Debian trixie runner (actrunner-debian-aarch64-bohr) so

debian/lmcp/build-deb.sh

@@ -23,7 +23,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo lmcp.tar.gz "https://git.reauktion.de/marfrit/lmcp/archive/${UPSTREAM_TAG}.tar.gz"
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo lmcp.tar.gz "https://git.reauktion.de/marfrit/lmcp/archive/${UPSTREAM_TAG}.tar.gz"
 echo "$LMCP_TARBALL_SHA256  lmcp.tar.gz" | sha256sum -c
 tar xzf lmcp.tar.gz
 

debian/mpv-fourier/build-deb.sh

@@ -33,7 +33,7 @@ work=$(mktemp -d)
 trap "rm -rf $work" EXIT
 
 cd "$work"
-curl -sSLfo mpv.tar.gz \
+curl --connect-timeout 10 --max-time 600 --retry 3 --retry-delay 5 -sSLfo mpv.tar.gz \
     "https://github.com/mpv-player/mpv/archive/v${MPV_VERSION}/mpv-${MPV_VERSION}.tar.gz"
 echo "$MPV_TARBALL_SHA256  mpv.tar.gz" | sha256sum -c
 tar xzf mpv.tar.gz