Step 1
Watch
Open `/browse` or home cards, then watch from `/watch/:npub/:streamId` with WHEP-first and HLS fallback.
Technical Documentation
dStream Runtime Docs (Production Path)
Updated reference for the current stack: Nostr identity, WHIP/WHEP/HLS media path, P2P assist policy controls, and wallet-integrated payment flows.
Getting Started
Step 2
Connect Identity
Use extension or local key in Settings. Canonical stream identity is `(pubkeyHex, streamId)`; UI routes are npub-first.
Step 3
Go Live
Open `/broadcast`, start preview, publish over WHIP, and confirm announce relay acceptance.
Step 4
Verify Economics
Check rail status in Settings, execute a wallet payment, and verify its durable payment intent before granting paid access.
Runtime Architecture
Identity + Coordination
Nostr relays carry announce, moderation, presence, profile, and DM/whisper signaling.
Media Origin
WHIP ingest to MediaMTX, remux to HLS, expose WHEP endpoints, maintain origin fallback.
Assist Transport
WebRTC datachannel assist can offload HLS delivery when host policy and stake conditions allow.
Payments
This deployment publicly accepts Monero, Bitcoin Lightning, and Bitcoin on-chain payments. Additional protocol adapters can remain backend-connected for real-chain operator checks without becoming public payment options.
Protocol Landscape
dStream
Nostr identity/discovery + WHIP/WHEP/HLS media stack + optional WebRTC assist queue (`host_only` vs `p2p_economy`) + intent-bound multi-rail settlement.
zap.stream
NIP-53-focused Nostr client with Lightning/Zap ecosystem alignment and a host/CDN-style media path centered around HLS/RTMP workflows.
Detailed comparison notes are maintained in repository docs:docs/COMPETITIVE_DELTA.md
Nostr Event Surface
| Kind | Purpose | Notes |
|---|---|---|
| 30311 | Stream announce | Replaceable live metadata (`d`, `title`, `streaming`, host mode, discoverability, payment methods). |
| 30312 | Presence | Viewer heartbeat and participation estimates. |
| 30313 | Moderation / roles | Relay-scoped mute/block + moderator/subscriber role updates. |
| 30321 | Discovery moderation | Operator hide/restore actions for official app discovery surfaces only. |
| 10030 | Custom Emotes | Visual emote mapping packs per broadcaster via emoji-picker-react integration. |
| 1 | Public chat | Stream-associated public text events. |
| 4 / 20004 | DM / whisper | Private encrypted channels for broadcaster/viewer coordination. |
HTTP/API Surface
| Route | Role | Auth / Guard |
|---|---|---|
| /api/whip/:originStreamId/whip | WHIP ingest proxy | Signed publisher path expected upstream. |
| /api/whep/:originStreamId/whep | WHEP playback proxy | Public read; guarded by origin policy. |
| /api/hls/:originStreamId/* | HLS passthrough | Public read with edge cache compatibility. |
| /api/xmr/tip/session(/:token) | Verified tip lifecycle | Signed control requests. |
| /api/xmr/stake/session(/:token) | Stake gate + refund lifecycle | Signed control requests. |
| /api/xmr/escrow/session/* | Escrow-v3 multisig orchestration | Coordinator/participant scoped actions. |
| /api/payments/catalog | Asset + wallet integration metadata | Public read. |
| /api/payments/intents(/:intentId) | Bound payment intent lifecycle | Signed buyer proof + one-time intent secret. |
| /api/payments/intents/:intentId/verify | Rail receipt or transaction verification | Intent secret; provider configuration stays server-only. |
| /api/payments/validate | Server-side payment method validator | Schema guard only. |
| /api/moderation/reports | Abuse report intake + operator queue actions | Signed report/operator proof scopes. |
Wallet Integration Workflow
- Configure payout methods in Broadcast (core fields + advanced payout section).
- Set preferred wallet per asset from Settings wallet integration panel.
- Watchers use copy/URI actions on watch page to pay with native app, extension, or CLI workflow.
- For XMR verification, viewers request a dedicated subaddress and check on-session status.
Safety & Reporting
- In-app report controls are available on browse cards, watch header, and chat messages.
- Operators review report queue items in Moderation and can mark state transitions.
- Confirmed abuse can be hidden from official discovery surfaces without changing decentralized relay history.
- Policy URLs for app review:
/terms,/privacy,/community-guidelines.
Production Gate
npm run harden:deploy -- .env.production
npm run smoke:external:readiness
npm run smoke:prod:runtime
npm run gate:prod -- .env.production
Known Failure Modes
HLS / WebRTC 404 Failure
Cause: The streamer's media pipeline has disconnected, or the P2P swarm cannot find their raw video track.
Action: Refresh the page. If the issue persists, the Creator has ended the live stream or their Node lost connection.
WebRTC Assist Latency
Cause: Viewer's browser is attempting to pull P2P segments from other viewers but is failing network ICE checks.
Action: System will automatically fallback to the central HLS node to preserve video playback.
Announce Relay Drop
Cause: The broadcaster's video feed is actively running, but their Chat Relay disconnected from Nostr.
Action: Broadcaster must trigger an 'Update Announce' on their control panel to physically reconnect their identity to the stream.
Primary Reading
Trust Boundaries
- P2P assist reduces host load but does not remove origin bootstrap/fallback requirements.
- Wallet integration never stores private keys; key material stays in user-controlled wallet software.
- Escrow-v3 is multisig workflow coordination, not a trustless smart-contract VM.
- Canonical routing is `(pubkeyHex, streamId)`; UI keeps npub-first addressing for users.
- Content responsibility is node-local: independent operators are responsible for what they broadcast/relay; dStream does not control third-party content.