feat(compositor): port the native compositor to Linux (Vulkan backend)

.gitattributes

@@ -0,0 +1,9 @@
+# The compositor is developed across Windows, macOS and Linux. Without this, a
+# checkout on Windows can reintroduce CRLF and the shader sources drift from the
+# `end_of_line = lf` / `charset = utf-8` that .editorconfig already mandates —
+# which is how blur.wgsl, layer.wgsl and linux_decode.rs ended up with CRLF and
+# double-encoded French comments in the first place.
+*.wgsl text eol=lf
+*.rs   text eol=lf
+*.ts   text eol=lf
+*.tsx  text eol=lf

.github/workflows/build-whisper-stt.yml

@@ -172,7 +172,25 @@ jobs:
           mkdir -p "$BAG"
           # Copy the whole per-platform directory: the helper executable plus
           # every ggml backend sidecar/library it needs at runtime.
-          cp -v "electron/native/bin/${{ matrix.tag }}"/* "$BAG/"
+          #
+          # -a, because build-whisper-stt.sh stages a symlink farm on Linux and
+          # macOS (libggml-vulkan.so -> .so.0 -> .so.0.15.1) and plain cp follows
+          # every link named on the command line, expanding each into a full copy
+          # of the payload. libggml-vulkan.so.0.15.1 alone is 60 MB, so the bag
+          # carried it three times: measured 188 MB instead of 63 MB, and the
+          # uploaded tarball 59 MB instead of 20 MB (gzip's 32 KiB window cannot
+          # dedupe copies that far apart). `dir/.` rather than `dir/*` so the copy
+          # does not depend on the shell's glob skipping dotfiles.
+          #
+          # tar preserves the links from here on (no -h below), so this shrinks
+          # the artifact and the CI download. It does NOT change the installers:
+          # scripts/stage-whisper-stt.sh:65 is a second plain `cp` that re-expands
+          # the farm before electron-builder ever sees it. Making that one -a too
+          # would cut ~131 MB from every package (electron-builder recreates
+          # symlinks, and squashfs/AppImage stores them natively — both verified),
+          # but deb/pacman go through fpm, whose behaviour here is unverified, so
+          # that step needs a real package inspection rather than a guess.
+          cp -av "electron/native/bin/${{ matrix.tag }}/." "$BAG/"
           tar -czf "${BAG}.tar.gz" "$BAG"
           echo "Staged ${BAG}.tar.gz"
 

.github/workflows/ci.yml

@@ -47,7 +47,7 @@ jobs:
       - name: Typecheck tests against a baseline
         shell: bash
         env:
-          BASELINE: 71
+          BASELINE: 66
         run: |
           set -uo pipefail
           COUNT=$(npx tsc -p tsconfig.test.json --noEmit 2>&1 | grep -c 'error TS' || true)

.gitignore

@@ -21,6 +21,8 @@ dist-ssr
 /electron/native/screencapturekit/.build/
 /electron/native/screencapturekit/.swiftpm/
 /electron/native/bin/
+/electron/native/pipewire-capture/build/
+/electron/native/pipewire-capture/target/
 
 # Native macOS generated files
 DerivedData/

THIRD-PARTY-NOTICES.md

@@ -49,11 +49,28 @@ distributed by their own registries, not redistributed inside our binaries.
 - The speech model (`ggml-*.bin`) is **not** bundled — it is downloaded into the
   user's data directory on first use by `electron/stt/modelManager.ts`.
 
+## PipeWire — headers (Linux only)
+
+- **Components**: header sources under
+  `electron/native/pipewire-capture/vendor/pipewire-1.0.5/include/`, compiled
+  into `openscreen-pipewire-helper` (the Linux cursor/capture helper) under
+  `resources/electron/native/bin/linux-*/`.
+- **License**: **MIT** — <https://gitlab.freedesktop.org/pipewire/pipewire>.
+  Every vendored file keeps its upstream `SPDX-License-Identifier: MIT` header,
+  and the project's licence text is copied alongside them as `COPYING`.
+- **Upstream**: PipeWire release 1.0.5. Only the header subset the helper
+  includes was vendored; `vendor/README.md` records exactly what was copied and
+  how to reproduce the selection.
+- **No PipeWire binary is redistributed.** The helper resolves
+  `libpipewire-0.3.so.0` with `dlopen` at runtime, from the user's own system,
+  so nothing of PipeWire's ships inside our installers beyond the compiled
+  result of its headers (inline functions and struct layouts).
+
 ## OpenScreen native helpers
 
-`wgc-capture` (Windows Graphics Capture), the ScreenCaptureKit helper (macOS)
-and the D3D11 compositor addon are part of this repository and are covered by
-[LICENSE](LICENSE).
+`wgc-capture` (Windows Graphics Capture), the ScreenCaptureKit helper (macOS),
+the PipeWire helper (Linux) and the compositor addon are part of this repository
+and are covered by [LICENSE](LICENSE).
 
 ---
 

crates/.gitignore

@@ -1,5 +1,8 @@
 # build
 /target
+# `cargo test` lancé DEPUIS crates/compositor/ y crée son propre target/, et les tests
+# compose_linux y écrivent leurs PPM de preuve. Même nature que /target ci-dessus.
+/compositor/target
 
 # dépendance téléchargée : build ffmpeg LGPL-shared BtbN (~160 Mo, voir README)
 /thirdparty