Real camera sources, HID reports and a private peer tunnel

The next October 5 milestone moved several modules beyond their earlier limits. Build 36 added real camera-source pipelines, native HID descriptors and reports, MIDI 2 UMP endpoints, encrypted disk images and an authenticated encrypted peer transport.

The camera work had an especially useful test. A selected image traveled through capture, the Core Media I/O sink, the extension and an AVFoundation consumer, where the exact BGRA pixels matched. Earlier preference-based exchange had failed across the service boundary, so the implementation moved to the public CMIO provider bridge and IOSurface streams.

HID acceptance created and enumerated a real gamepad, received actual reports in a native client, neutralized it and released it. The Apple capability request had been approved. This remained a macOS 15-and-newer feature, with no physical haptic actuator implied by a virtual controller.

The network probe sent a packet through macOS packetFlow, an authenticated encrypted companion and back again, with real counters. It was an explicitly configured private peer tunnel, not a general public VPN. Storage testing created and reused an encrypted APFS image, rejected a wrong password, mounted it and detached it safely.

The release record includes 58 strict tests, notarization and a verified itch download matching all 61 tested app files. That supplies a real publication milestone beyond the preceding candidate.

There were still clear boundaries: the camera used BGRA sRGB without embedded audio or HDR, displays depended on an undocumented Mac API, and clean-install, reboot, sleep/wake and another physical Mac remained unverified. The progress was specific and useful because we could follow actual frames, reports and packets through the intended native path.