@blockcast/mmt-base 0.4.0-main.94b7ef7dcd8d → 0.4.0-main.9d97fa55ba69

package/dist/index.d.ts

@@ -5,4 +5,5 @@ export * from './signalling.js';
 export * from './serial-number.js';
 export * from './fec-block-profile.js';
 export * from './catalog-fec-source.js';
+export * from './multicast-catalog.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,yBAAyB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA"}

package/dist/index.js

@@ -5,4 +5,5 @@ export * from './signalling.js';
 export * from './serial-number.js';
 export * from './fec-block-profile.js';
 export * from './catalog-fec-source.js';
+export * from './multicast-catalog.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,yBAAyB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc,WAAW,CAAA;AACzB,cAAc,oBAAoB,CAAA;AAClC,cAAc,gBAAgB,CAAA;AAC9B,cAAc,iBAAiB,CAAA;AAC/B,cAAc,oBAAoB,CAAA;AAClC,cAAc,wBAAwB,CAAA;AACtC,cAAc,yBAAyB,CAAA;AACvC,cAAc,wBAAwB,CAAA"}

package/dist/multicast-catalog.d.ts

@@ -0,0 +1,75 @@
+/**
+ * The draft-ramadan-moq-multicast-01 endpoint and `auth` rules, written once
+ * for both sides of the catalog: `validateCmsfMmtpCatalog` in
+ * `@blockcast/mmt-container` throws the first issue, and the receivers in
+ * `@blockcast/mmt-transport` ignore every endpoint an issue names (all of
+ * them when the issue is catalog-level). It lives here because mmt-base is
+ * the only package both depend on.
+ *
+ * Draft: Blockcast/moqcast-draft@fd962fd73d21ed281b60219c11ea61cc9e4e91c4
+ * (PR #2 head; normative text equal to 3162ef93), sections 4.1 and 7.2.6.
+ */
+export type MulticastJoinMode = "ssm" | "asm";
+/** An endpoint's join mode and `S` (4.1): `sourceAddress` on SSM,
+ * `auth.senderAddress` on protected ASM, absent on unprotected ASM. */
+export interface MulticastEndpointSource {
+    mode: MulticastJoinMode;
+    source?: string;
+}
+export type MulticastCatalogIssueCode = "multicast_auth" | "multicast_endpoint" | "multicast_endpoint_auth" | "multicast_track";
+export interface MulticastCatalogIssue {
+    code: MulticastCatalogIssueCode;
+    /** JSONPath of the offending field. */
+    path: string;
+    message: string;
+    /** Endpoint the issue makes a receiver ignore; absent for a catalog-level
+     * issue, which leaves the receiver no endpoint at all (7.2.6). */
+    endpointIndex?: number;
+}
+/** Canonical unpadded base64url of exactly 32 octets. */
+export declare const ED25519_PUBLIC_KEY_BASE64URL: RegExp;
+/**
+ * Join mode and `S` of one endpoint, or `undefined` when its fields disagree
+ * and a receiver must ignore it (4.1). `sourceAddress` alone selects the mode;
+ * `protocol` may only restate it, so "amt" and "atsc3" (draft -00) are
+ * inconsistent here: a bearer is a `networkSource`, never a protocol.
+ */
+export declare function multicastEndpointSource(endpoint: unknown): MulticastEndpointSource | undefined;
+/**
+ * Where a catalog object carries the namespace of the catalog track it was
+ * read from. A symbol, so it is never wire data and survives object spread;
+ * `Symbol.for`, so two bundled copies of this module agree on it.
+ */
+export declare const CATALOG_NAMESPACE: unique symbol;
+/**
+ * `catalog` tagged with the namespace of its catalog track. Every receiver
+ * rule that takes the catalog (`multicastCatalogIssues`,
+ * `admittedMulticastEndpoints` and the transport selectors built on them)
+ * then judges the foreign-namespace rule against it, independent of track
+ * order. Tag once, where the catalog track is read.
+ */
+export declare function withCatalogNamespace<T extends object>(catalog: T, namespace: string): T;
+/**
+ * Every draft -01 4.1 / 7.2.6 violation in `catalog.multicast`, in document
+ * order. Packet-id, group-address and track-existence rules are not here; the
+ * container validator and the receivers already check those.
+ *
+ * `catalogNamespace` is the namespace of the catalog track, from `options` or else the
+ * catalog's `withCatalogNamespace` tag. Without it the
+ * foreign-namespace rule can only compare listed tracks with each other: the
+ * first listed track's namespace becomes the reference, so which side of a
+ * disagreement is dropped depends on order. It still fails closed; pass
+ * `catalogNamespace` wherever the catalog track is known.
+ */
+export declare function multicastCatalogIssues(catalog: unknown, options?: {
+    catalogNamespace?: string;
+}): MulticastCatalogIssue[];
+/**
+ * Indices of the endpoints a receiver may use: none when a catalog-level
+ * issue leaves it no key set (7.2.6), otherwise every endpoint no issue
+ * names. Other receiver checks (group address, packet ids) still apply.
+ */
+export declare function admittedMulticastEndpoints(catalog: unknown, options?: {
+    catalogNamespace?: string;
+}): ReadonlySet<number>;
+//# sourceMappingURL=multicast-catalog.d.ts.map

package/dist/multicast-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"multicast-catalog.d.ts","sourceRoot":"","sources":["../src/multicast-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,CAAC;AAE9C;uEACuE;AACvE,MAAM,WAAW,uBAAuB;IACvC,IAAI,EAAE,iBAAiB,CAAC;IACxB,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,MAAM,yBAAyB,GAClC,gBAAgB,GAChB,oBAAoB,GACpB,yBAAyB,GACzB,iBAAiB,CAAC;AAErB,MAAM,WAAW,qBAAqB;IACrC,IAAI,EAAE,yBAAyB,CAAC;IAChC,uCAAuC;IACvC,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB;sEACkE;IAClE,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,yDAAyD;AACzD,eAAO,MAAM,4BAA4B,QAA0C,CAAC;AA4BpF;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,QAAQ,EAAE,OAAO,GAAG,uBAAuB,GAAG,SAAS,CAY9F;AAqFD;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,EAAE,OAAO,MAA2D,CAAC;AAEnG;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,CAAC,SAAS,MAAM,EAAE,OAAO,EAAE,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,CAEvF;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,CACrC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,qBAAqB,EAAE,CAkIzB;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACzC,OAAO,EAAE,OAAO,EAChB,OAAO,GAAE;IAAE,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAAO,GACzC,WAAW,CAAC,MAAM,CAAC,CAOrB"}

package/dist/multicast-catalog.js

@@ -0,0 +1,318 @@
+/**
+ * The draft-ramadan-moq-multicast-01 endpoint and `auth` rules, written once
+ * for both sides of the catalog: `validateCmsfMmtpCatalog` in
+ * `@blockcast/mmt-container` throws the first issue, and the receivers in
+ * `@blockcast/mmt-transport` ignore every endpoint an issue names (all of
+ * them when the issue is catalog-level). It lives here because mmt-base is
+ * the only package both depend on.
+ *
+ * Draft: Blockcast/moqcast-draft@fd962fd73d21ed281b60219c11ea61cc9e4e91c4
+ * (PR #2 head; normative text equal to 3162ef93), sections 4.1 and 7.2.6.
+ */
+/** Canonical unpadded base64url of exactly 32 octets. */
+export const ED25519_PUBLIC_KEY_BASE64URL = /^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/;
+const UINT32_MAX = 0xffff_ffff;
+const AUTH_MEMBERS = new Set(["scheme", "version", "sig", "keys", "minEpoch"]);
+const KEY_MEMBERS = new Set(["kid", "publicKey", "firstEpoch"]);
+const ENDPOINT_AUTH_MEMBERS = new Set([
+    "manifestPort",
+    "streamId",
+    "senderAddress",
+    "maxAuthDelayMs",
+    "manifestTimerMs",
+    "manifestTrack",
+]);
+function isObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isNonEmptyString(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+function isIntegerIn(value, min, max) {
+    return Number.isSafeInteger(value) && value >= min && value <= max;
+}
+/**
+ * Join mode and `S` of one endpoint, or `undefined` when its fields disagree
+ * and a receiver must ignore it (4.1). `sourceAddress` alone selects the mode;
+ * `protocol` may only restate it, so "amt" and "atsc3" (draft -00) are
+ * inconsistent here: a bearer is a `networkSource`, never a protocol.
+ */
+export function multicastEndpointSource(endpoint) {
+    if (!isObject(endpoint))
+        return undefined;
+    const sourceAddress = endpoint["sourceAddress"];
+    if (sourceAddress !== undefined && !isNonEmptyString(sourceAddress))
+        return undefined;
+    const mode = sourceAddress === undefined ? "asm" : "ssm";
+    const protocol = endpoint["protocol"];
+    if (protocol !== undefined && protocol !== mode)
+        return undefined;
+    const auth = endpoint["auth"];
+    const senderAddress = isObject(auth) ? auth["senderAddress"] : undefined;
+    if (mode === "ssm")
+        return senderAddress === undefined ? { mode, source: sourceAddress } : undefined;
+    if (auth === undefined)
+        return { mode };
+    return isNonEmptyString(senderAddress) ? { mode, source: senderAddress } : undefined;
+}
+function authIssues(auth) {
+    const base = "$.multicast.auth";
+    const issue = (path, message) => [
+        { code: "multicast_auth", path: `${base}${path}`, message },
+    ];
+    if (!isObject(auth))
+        return issue("", "auth must be an object");
+    const unknown = Object.keys(auth).filter(key => !AUTH_MEMBERS.has(key));
+    if (unknown.length > 0) {
+        return issue("", `auth has unknown member(s) ${unknown.join(", ")}; draft -01 7.2.6 defines scheme, version, sig, keys and minEpoch`);
+    }
+    if (auth["scheme"] !== "bc-provenance")
+        return issue(".scheme", 'scheme must be "bc-provenance"');
+    if (auth["version"] !== 2)
+        return issue(".version", "version must be 2 (bc-provenance version 2, draft -01 7.2)");
+    if (auth["sig"] !== "ed25519")
+        return issue(".sig", 'sig must be "ed25519"');
+    const keys = auth["keys"];
+    if (!Array.isArray(keys) || keys.length < 1 || keys.length > 4) {
+        return issue(".keys", "keys must be an array of one to four {kid, publicKey, firstEpoch} objects");
+    }
+    const kids = new Set();
+    const firstEpochs = new Set();
+    for (let index = 0; index < keys.length; index++) {
+        const key = keys[index];
+        const at = `.keys[${index}]`;
+        if (!isObject(key) || Object.keys(key).some(member => !KEY_MEMBERS.has(member))) {
+            return issue(at, "a key is exactly {kid, publicKey, firstEpoch}");
+        }
+        if (!isIntegerIn(key["kid"], 0, UINT32_MAX))
+            return issue(`${at}.kid`, "kid must be an unsigned 32-bit integer");
+        if (typeof key["publicKey"] !== "string" || !ED25519_PUBLIC_KEY_BASE64URL.test(key["publicKey"])) {
+            return issue(`${at}.publicKey`, "publicKey must be a 32-octet Ed25519 key in canonical unpadded base64url");
+        }
+        if (!isIntegerIn(key["firstEpoch"], 0, UINT32_MAX)) {
+            return issue(`${at}.firstEpoch`, "firstEpoch must be an unsigned 32-bit integer");
+        }
+        // A repeated kid or firstEpoch leaves no key set (7.2.6): fail the whole
+        // block, never fall back to unauthenticated reception.
+        if (kids.has(key["kid"]))
+            return issue(`${at}.kid`, `kid ${key["kid"]} is repeated; the catalog holds no key set`);
+        if (firstEpochs.has(key["firstEpoch"])) {
+            return issue(`${at}.firstEpoch`, `firstEpoch ${key["firstEpoch"]} is repeated; the catalog holds no key set`);
+        }
+        kids.add(key["kid"]);
+        firstEpochs.add(key["firstEpoch"]);
+    }
+    if (!isIntegerIn(auth["minEpoch"], 0, UINT32_MAX)) {
+        return issue(".minEpoch", "minEpoch must be an unsigned 32-bit integer");
+    }
+    return [];
+}
+function endpointAuthIssue(endpoint, mode, at) {
+    const auth = endpoint["auth"];
+    if (!isObject(auth))
+        return { path: `${at}.auth`, message: "auth must be an object" };
+    const unknown = Object.keys(auth).filter(key => !ENDPOINT_AUTH_MEMBERS.has(key));
+    if (unknown.length > 0)
+        return { path: `${at}.auth`, message: `auth has unknown member(s) ${unknown.join(", ")}` };
+    if (!isIntegerIn(auth["manifestPort"], 1, 65535)) {
+        return { path: `${at}.auth.manifestPort`, message: "manifestPort must be an integer from 1 to 65535" };
+    }
+    if (!isIntegerIn(auth["streamId"], 0, UINT32_MAX)) {
+        return { path: `${at}.auth.streamId`, message: "streamId must be an unsigned 32-bit integer" };
+    }
+    if (mode === "ssm" && auth["senderAddress"] !== undefined) {
+        return { path: `${at}.auth.senderAddress`, message: "senderAddress must not appear on an SSM endpoint; S is sourceAddress" };
+    }
+    if (mode === "asm" && !isNonEmptyString(auth["senderAddress"])) {
+        return { path: `${at}.auth.senderAddress`, message: "a protected ASM endpoint requires senderAddress" };
+    }
+    if (auth["maxAuthDelayMs"] !== undefined && !isIntegerIn(auth["maxAuthDelayMs"], 50, 1000)) {
+        return { path: `${at}.auth.maxAuthDelayMs`, message: "maxAuthDelayMs must be an integer from 50 to 1000" };
+    }
+    if (auth["manifestTimerMs"] !== undefined && !isIntegerIn(auth["manifestTimerMs"], 1, Number.MAX_SAFE_INTEGER)) {
+        return { path: `${at}.auth.manifestTimerMs`, message: "manifestTimerMs must be an integer of at least 1" };
+    }
+    if (auth["manifestTrack"] !== undefined && !isNonEmptyString(auth["manifestTrack"])) {
+        return { path: `${at}.auth.manifestTrack`, message: "manifestTrack must be a non-empty string" };
+    }
+    if (!isIntegerIn(endpoint["bandwidth"], 1, Number.MAX_SAFE_INTEGER)) {
+        return { path: `${at}.bandwidth`, message: "a protected endpoint requires bandwidth, which bounds the receiver's hold queues" };
+    }
+    return undefined;
+}
+/**
+ * Where a catalog object carries the namespace of the catalog track it was
+ * read from. A symbol, so it is never wire data and survives object spread;
+ * `Symbol.for`, so two bundled copies of this module agree on it.
+ */
+export const CATALOG_NAMESPACE = Symbol.for("@blockcast/mmt-base/catalogNamespace");
+/**
+ * `catalog` tagged with the namespace of its catalog track. Every receiver
+ * rule that takes the catalog (`multicastCatalogIssues`,
+ * `admittedMulticastEndpoints` and the transport selectors built on them)
+ * then judges the foreign-namespace rule against it, independent of track
+ * order. Tag once, where the catalog track is read.
+ */
+export function withCatalogNamespace(catalog, namespace) {
+    return { ...catalog, [CATALOG_NAMESPACE]: namespace };
+}
+/**
+ * Every draft -01 4.1 / 7.2.6 violation in `catalog.multicast`, in document
+ * order. Packet-id, group-address and track-existence rules are not here; the
+ * container validator and the receivers already check those.
+ *
+ * `catalogNamespace` is the namespace of the catalog track, from `options` or else the
+ * catalog's `withCatalogNamespace` tag. Without it the
+ * foreign-namespace rule can only compare listed tracks with each other: the
+ * first listed track's namespace becomes the reference, so which side of a
+ * disagreement is dropped depends on order. It still fails closed; pass
+ * `catalogNamespace` wherever the catalog track is known.
+ */
+export function multicastCatalogIssues(catalog, options = {}) {
+    if (!isObject(catalog))
+        return [];
+    const issues = [];
+    if ("multicast.auth" in catalog) {
+        // Fail closed: a draft -00 publisher meant the flow to be protected, and
+        // the key it names verifies nothing in bc-provenance version 2.
+        issues.push({
+            code: "multicast_auth",
+            path: '$["multicast.auth"]',
+            message: 'the root "multicast.auth" key is retired; declare auth as multicast.auth (draft -01 7.2.6)',
+        });
+    }
+    const multicast = catalog["multicast"];
+    if (!isObject(multicast))
+        return issues;
+    const protectedCatalog = multicast["auth"] !== undefined;
+    if (protectedCatalog)
+        issues.push(...authIssues(multicast["auth"]));
+    const endpoints = multicast["endpoints"];
+    if (!Array.isArray(endpoints))
+        return issues;
+    const tracks = Array.isArray(catalog["tracks"]) ? catalog["tracks"] : [];
+    const namespaceOf = new Map();
+    for (const track of tracks) {
+        if (isObject(track) && typeof track["name"] === "string")
+            namespaceOf.set(track["name"], track["namespace"]);
+    }
+    const tagged = catalog[CATALOG_NAMESPACE];
+    let referenceNamespace = options.catalogNamespace ?? (typeof tagged === "string" ? tagged : undefined);
+    const sources = [];
+    for (let index = 0; index < endpoints.length; index++) {
+        const endpoint = endpoints[index];
+        const at = `$.multicast.endpoints[${index}]`;
+        const fail = (code, path, message) => {
+            issues.push({ code, path, message, endpointIndex: index });
+        };
+        sources.push(undefined);
+        if (!isObject(endpoint)) {
+            fail("multicast_endpoint", at, "endpoint must be an object");
+            continue;
+        }
+        const protocol = endpoint["protocol"];
+        if (protocol !== undefined && protocol !== "ssm" && protocol !== "asm") {
+            fail("multicast_endpoint", `${at}.protocol`, `protocol must be "ssm" or "asm"; a bearer such as ${JSON.stringify(protocol)} is a networkSource entry (draft -01 4.2)`);
+            continue;
+        }
+        const hasAuth = endpoint["auth"] !== undefined;
+        if (protectedCatalog !== hasAuth) {
+            fail("multicast_endpoint_auth", `${at}.auth`, protectedCatalog
+                ? "every endpoint requires auth when multicast carries auth; a receiver ignores this endpoint"
+                : "auth names no key without multicast.auth; a receiver ignores this endpoint");
+            continue;
+        }
+        const sourceAddress = endpoint["sourceAddress"];
+        if (sourceAddress !== undefined && !isNonEmptyString(sourceAddress)) {
+            fail("multicast_endpoint", `${at}.sourceAddress`, "sourceAddress must be a non-empty string");
+            continue;
+        }
+        const mode = sourceAddress === undefined ? "asm" : "ssm";
+        if (protocol !== undefined && protocol !== mode) {
+            fail("multicast_endpoint", `${at}.protocol`, `protocol ${JSON.stringify(protocol)} disagrees with sourceAddress, which selects ${mode}`);
+            continue;
+        }
+        // The (S, G, port) rule below compares ports with ===, so only an
+        // integer may reach it: "5001" and 5001 would otherwise both pass.
+        if (!isIntegerIn(endpoint["port"], 1, 65535)) {
+            fail("multicast_endpoint", `${at}.port`, "port must be an integer from 1 to 65535");
+            continue;
+        }
+        if (hasAuth) {
+            const authIssue = endpointAuthIssue(endpoint, mode, at);
+            if (authIssue) {
+                fail("multicast_endpoint_auth", authIssue.path, authIssue.message);
+                continue;
+            }
+        }
+        sources[index] = multicastEndpointSource(endpoint);
+        const refs = Array.isArray(endpoint["tracks"]) ? endpoint["tracks"] : [];
+        for (let refIndex = 0; refIndex < refs.length; refIndex++) {
+            const ref = refs[refIndex];
+            const name = isObject(ref) ? ref["name"] : ref;
+            if (typeof name !== "string")
+                continue;
+            const namespace = namespaceOf.get(name);
+            if (typeof namespace !== "string")
+                continue;
+            referenceNamespace ??= namespace;
+            if (namespace !== referenceNamespace) {
+                fail("multicast_track", `${at}.tracks[${refIndex}].name`, `track ${JSON.stringify(name)} declares namespace ${JSON.stringify(namespace)}, not the catalog track's ${JSON.stringify(referenceNamespace)}`);
+            }
+        }
+    }
+    // One endpoint object per (S, G, port), and a manifestPort that is no port
+    // and no other manifestPort of its (S, G) (4.1, 7.2.6). The rule binds the
+    // endpoint whose manifestPort clashes; two equal tuples or two equal
+    // manifestPorts break it on both sides, so both are named.
+    const tupleOf = (index) => {
+        const endpoint = endpoints[index];
+        const auth = endpoint["auth"];
+        return {
+            sg: JSON.stringify([sources[index].source ?? null, endpoint["groupAddress"]]),
+            port: endpoint["port"],
+            manifestPort: isObject(auth) ? auth["manifestPort"] : undefined,
+        };
+    };
+    for (let index = 0; index < endpoints.length; index++) {
+        if (!sources[index])
+            continue;
+        const own = tupleOf(index);
+        const at = `$.multicast.endpoints[${index}]`;
+        if (own.manifestPort !== undefined && own.manifestPort === own.port) {
+            issues.push({ code: "multicast_endpoint_auth", path: `${at}.auth.manifestPort`, message: "manifestPort must differ from the endpoint's own port", endpointIndex: index });
+            continue;
+        }
+        for (let other = 0; other < endpoints.length; other++) {
+            if (other === index || !sources[other])
+                continue;
+            const peer = tupleOf(other);
+            if (peer.sg !== own.sg)
+                continue;
+            if (peer.port === own.port) {
+                issues.push({ code: "multicast_endpoint", path: `${at}.port`, message: `(S, G, port) is shared with endpoint ${other}; one endpoint object per multicast tuple`, endpointIndex: index });
+                break;
+            }
+            if (own.manifestPort !== undefined && (own.manifestPort === peer.port || own.manifestPort === peer.manifestPort)) {
+                issues.push({ code: "multicast_endpoint_auth", path: `${at}.auth.manifestPort`, message: `manifestPort is a port or manifestPort of endpoint ${other} on the same (S, G)`, endpointIndex: index });
+                break;
+            }
+        }
+    }
+    return issues;
+}
+/**
+ * Indices of the endpoints a receiver may use: none when a catalog-level
+ * issue leaves it no key set (7.2.6), otherwise every endpoint no issue
+ * names. Other receiver checks (group address, packet ids) still apply.
+ */
+export function admittedMulticastEndpoints(catalog, options = {}) {
+    const multicast = isObject(catalog) ? catalog["multicast"] : undefined;
+    const endpoints = isObject(multicast) && Array.isArray(multicast["endpoints"]) ? multicast["endpoints"] : [];
+    const issues = multicastCatalogIssues(catalog, options);
+    if (issues.some(issue => issue.endpointIndex === undefined))
+        return new Set();
+    const ignored = new Set(issues.map(issue => issue.endpointIndex));
+    return new Set(endpoints.map((_, index) => index).filter(index => !ignored.has(index)));
+}
+//# sourceMappingURL=multicast-catalog.js.map

package/dist/multicast-catalog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"multicast-catalog.js","sourceRoot":"","sources":["../src/multicast-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AA2BH,yDAAyD;AACzD,MAAM,CAAC,MAAM,4BAA4B,GAAG,uCAAuC,CAAC;AAEpF,MAAM,UAAU,GAAG,WAAW,CAAC;AAC/B,MAAM,YAAY,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC;AAC/E,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CAAC;AAChE,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC;IACrC,cAAc;IACd,UAAU;IACV,eAAe;IACf,gBAAgB;IAChB,iBAAiB;IACjB,eAAe;CACf,CAAC,CAAC;AAIH,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC7E,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACvC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC7D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,GAAW,EAAE,GAAW;IAC5D,OAAO,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,IAAK,KAAgB,IAAI,GAAG,IAAK,KAAgB,IAAI,GAAG,CAAC;AAC5F,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,QAAiB;IACxD,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;IAChD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC;QAAE,OAAO,SAAS,CAAC;IACtF,MAAM,IAAI,GAAsB,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC5E,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAClE,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,MAAM,aAAa,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,IAAI,IAAI,KAAK,KAAK;QAAE,OAAO,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAuB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/G,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxC,OAAO,gBAAgB,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACtF,CAAC;AAED,SAAS,UAAU,CAAC,IAAa;IAChC,MAAM,IAAI,GAAG,kBAAkB,CAAC;IAChC,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,OAAe,EAA2B,EAAE,CAAC;QACzE,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,GAAG,IAAI,GAAG,IAAI,EAAE,EAAE,OAAO,EAAE;KAC3D,CAAC;IACF,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,EAAE,EAAE,wBAAwB,CAAC,CAAC;IAChE,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACxE,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,EAAE,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;IACvI,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,eAAe;QAAE,OAAO,KAAK,CAAC,SAAS,EAAE,gCAAgC,CAAC,CAAC;IAClG,IAAI,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,UAAU,EAAE,4DAA4D,CAAC,CAAC;IAClH,IAAI,IAAI,CAAC,KAAK,CAAC,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;IAC7E,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC;IAC1B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAChE,OAAO,KAAK,CAAC,OAAO,EAAE,2EAA2E,CAAC,CAAC;IACpG,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;IACtC,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QAClD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,EAAE,GAAG,SAAS,KAAK,GAAG,CAAC;QAC7B,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACjF,OAAO,KAAK,CAAC,EAAE,EAAE,+CAA+C,CAAC,CAAC;QACnE,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,wCAAwC,CAAC,CAAC;QACjH,IAAI,OAAO,GAAG,CAAC,WAAW,CAAC,KAAK,QAAQ,IAAI,CAAC,4BAA4B,CAAC,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC;YAClG,OAAO,KAAK,CAAC,GAAG,EAAE,YAAY,EAAE,0EAA0E,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;YACpD,OAAO,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,+CAA+C,CAAC,CAAC;QACnF,CAAC;QACD,yEAAyE;QACzE,uDAAuD;QACvD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,GAAG,CAAC,KAAK,CAAC,4CAA4C,CAAC,CAAC;QACnH,IAAI,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;YACxC,OAAO,KAAK,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,GAAG,CAAC,YAAY,CAAC,4CAA4C,CAAC,CAAC;QAC/G,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACrB,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACpC,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,KAAK,CAAC,WAAW,EAAE,6CAA6C,CAAC,CAAC;IAC1E,CAAC;IACD,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,iBAAiB,CACzB,QAAoB,EACpB,IAAuB,EACvB,EAAU;IAEV,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC9B,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC;IACtF,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,qBAAqB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACjF,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,8BAA8B,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;IACnH,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IACxG,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,UAAU,CAAC,EAAE,CAAC;QACnD,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;IAChG,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,EAAE,CAAC;QAC3D,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE,sEAAsE,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,IAAI,KAAK,KAAK,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QAChE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;IACzG,CAAC;IACD,IAAI,IAAI,CAAC,gBAAgB,CAAC,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,gBAAgB,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,CAAC;QAC5F,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,sBAAsB,EAAE,OAAO,EAAE,mDAAmD,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,iBAAiB,CAAC,KAAK,SAAS,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QAChH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,uBAAuB,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;IAC5G,CAAC;IACD,IAAI,IAAI,CAAC,eAAe,CAAC,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC;QACrF,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,qBAAqB,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,YAAY,EAAE,OAAO,EAAE,kFAAkF,EAAE,CAAC;IACjI,CAAC;IACD,OAAO,SAAS,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAkB,MAAM,CAAC,GAAG,CAAC,sCAAsC,CAAC,CAAC;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAmB,OAAU,EAAE,SAAiB;IACnF,OAAO,EAAE,GAAG,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,sBAAsB,CACrC,OAAgB,EAChB,UAAyC,EAAE;IAE3C,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,gBAAgB,IAAI,OAAO,EAAE,CAAC;QACjC,yEAAyE;QACzE,gEAAgE;QAChE,MAAM,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,gBAAgB;YACtB,IAAI,EAAE,qBAAqB;YAC3B,OAAO,EAAE,4FAA4F;SACrG,CAAC,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IACvC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IACxC,MAAM,gBAAgB,GAAG,SAAS,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;IACzD,IAAI,gBAAgB;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,SAAS,GAAG,SAAS,CAAC,WAAW,CAAC,CAAC;IACzC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC;QAAE,OAAO,MAAM,CAAC;IAE7C,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,WAAW,GAAG,IAAI,GAAG,EAAmB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,QAAQ;YAAE,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,MAAM,GAAI,OAA6C,CAAC,iBAAiB,CAAC,CAAC;IACjF,IAAI,kBAAkB,GAAG,OAAO,CAAC,gBAAgB,IAAI,CAAC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IAEvG,MAAM,OAAO,GAA+C,EAAE,CAAC;IAC/D,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;QAClC,MAAM,EAAE,GAAG,yBAAyB,KAAK,GAAG,CAAC;QAC7C,MAAM,IAAI,GAAG,CAAC,IAA+B,EAAE,IAAY,EAAE,OAAe,EAAE,EAAE;YAC/E,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;QAC5D,CAAC,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YACzB,IAAI,CAAC,oBAAoB,EAAE,EAAE,EAAE,4BAA4B,CAAC,CAAC;YAC7D,SAAS;QACV,CAAC;QACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;QACtC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;YACxE,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,WAAW,EAAE,qDAAqD,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,2CAA2C,CAAC,CAAC;YACvK,SAAS;QACV,CAAC;QACD,MAAM,OAAO,GAAG,QAAQ,CAAC,MAAM,CAAC,KAAK,SAAS,CAAC;QAC/C,IAAI,gBAAgB,KAAK,OAAO,EAAE,CAAC;YAClC,IAAI,CACH,yBAAyB,EACzB,GAAG,EAAE,OAAO,EACZ,gBAAgB;gBACf,CAAC,CAAC,4FAA4F;gBAC9F,CAAC,CAAC,4EAA4E,CAC/E,CAAC;YACF,SAAS;QACV,CAAC;QACD,MAAM,aAAa,GAAG,QAAQ,CAAC,eAAe,CAAC,CAAC;QAChD,IAAI,aAAa,KAAK,SAAS,IAAI,CAAC,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;YACrE,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,gBAAgB,EAAE,0CAA0C,CAAC,CAAC;YAC9F,SAAS;QACV,CAAC;QACD,MAAM,IAAI,GAAsB,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;QAC5E,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACjD,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,WAAW,EAAE,YAAY,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,gDAAgD,IAAI,EAAE,CAAC,CAAC;YACzI,SAAS;QACV,CAAC;QACD,kEAAkE;QAClE,mEAAmE;QACnE,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,OAAO,EAAE,yCAAyC,CAAC,CAAC;YACpF,SAAS;QACV,CAAC;QACD,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;YACxD,IAAI,SAAS,EAAE,CAAC;gBACf,IAAI,CAAC,yBAAyB,EAAE,SAAS,CAAC,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,CAAC;gBACnE,SAAS;YACV,CAAC;QACF,CAAC;QACD,OAAO,CAAC,KAAK,CAAC,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QAEnD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACzE,KAAK,IAAI,QAAQ,GAAG,CAAC,EAAE,QAAQ,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE,CAAC;YAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;YAC3B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;YAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,SAAS;YACvC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI,OAAO,SAAS,KAAK,QAAQ;gBAAE,SAAS;YAC5C,kBAAkB,KAAK,SAAS,CAAC;YACjC,IAAI,SAAS,KAAK,kBAAkB,EAAE,CAAC;gBACtC,IAAI,CAAC,iBAAiB,EAAE,GAAG,EAAE,WAAW,QAAQ,QAAQ,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,6BAA6B,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,EAAE,CAAC,CAAC;YAC3M,CAAC;QACF,CAAC;IACF,CAAC;IAED,2EAA2E;IAC3E,2EAA2E;IAC3E,qEAAqE;IACrE,2DAA2D;IAC3D,MAAM,OAAO,GAAG,CAAC,KAAa,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAe,CAAC;QAChD,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9B,OAAO;YACN,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,KAAK,CAAE,CAAC,MAAM,IAAI,IAAI,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,CAAC;YAC9E,IAAI,EAAE,QAAQ,CAAC,MAAM,CAAC;YACtB,YAAY,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,SAAS;SAC/D,CAAC;IACH,CAAC,CAAC;IACF,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;QACvD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;YAAE,SAAS;QAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;QAC3B,MAAM,EAAE,GAAG,yBAAyB,KAAK,GAAG,CAAC;QAC7C,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YACrE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,uDAAuD,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;YAC1K,SAAS;QACV,CAAC;QACD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YACvD,IAAI,KAAK,KAAK,KAAK,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;gBAAE,SAAS;YACjD,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;YAC5B,IAAI,IAAI,CAAC,EAAE,KAAK,GAAG,CAAC,EAAE;gBAAE,SAAS;YACjC,IAAI,IAAI,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;gBAC5B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,wCAAwC,KAAK,2CAA2C,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;gBACzL,MAAM;YACP,CAAC;YACD,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,CAAC,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,YAAY,KAAK,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;gBAClH,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,yBAAyB,EAAE,IAAI,EAAE,GAAG,EAAE,oBAAoB,EAAE,OAAO,EAAE,sDAAsD,KAAK,qBAAqB,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC,CAAC;gBACnM,MAAM;YACP,CAAC;QACF,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAC;AACf,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACzC,OAAgB,EAChB,UAAyC,EAAE;IAE3C,MAAM,SAAS,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvE,MAAM,SAAS,GAAG,QAAQ,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7G,MAAM,MAAM,GAAG,sBAAsB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACxD,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,KAAK,SAAS,CAAC;QAAE,OAAO,IAAI,GAAG,EAAE,CAAC;IAC9E,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC;IAClE,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACzF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blockcast/mmt-base",
-  "version": "0.4.0-main.94b7ef7dcd8d",
+  "version": "0.4.0-main.9d97fa55ba69",
   "description": "Shared MMTP parsing primitives and protocol constants (zero FEC dependency). Hosts MMTP_HEADER_SIZE, parseMMTPHeader, extractMFUPayload and friends, plus wire constants such as DEFAULT_AMT_RELAY_PORT, so @blockcast/mmt-fec, @blockcast/mmt-container and @blockcast/mmt-transport can share one definition without a circular dep.",
   "type": "module",
   "main": "dist/index.js",

package/src/index.ts

@@ -5,3 +5,4 @@ export * from './signalling.js'
 export * from './serial-number.js'
 export * from './fec-block-profile.js'
 export * from './catalog-fec-source.js'
+export * from './multicast-catalog.js'

package/src/mmtp.ts

@@ -480,7 +480,7 @@ export interface MFUExtraction {
  *   from the payload boundary, even if fecType >= 1 in the MMTP header.  Use this for
  *   FEC-recovered symbols where the FEC PID was already stripped before WASM decoding
  *   but the fecType bits in byte 0 still reflect the original packet (FEC Type=1 per
- *   draft-ramadan-moq-mmt-00 §3.1).
+ *   draft-ramadan-moq-mmt-01 §3.1).
  * @param options.overlayDeclared The catalog declares a keyframe overlay for this
  *   source, so a RAP packet carries an 8-byte trailer (see MFUExtractOptions).
  * @returns Extracted MFU data + metadata, or null if packet is too small

package/src/multicast-catalog.ts

@@ -0,0 +1,350 @@
+/**
+ * The draft-ramadan-moq-multicast-01 endpoint and `auth` rules, written once
+ * for both sides of the catalog: `validateCmsfMmtpCatalog` in
+ * `@blockcast/mmt-container` throws the first issue, and the receivers in
+ * `@blockcast/mmt-transport` ignore every endpoint an issue names (all of
+ * them when the issue is catalog-level). It lives here because mmt-base is
+ * the only package both depend on.
+ *
+ * Draft: Blockcast/moqcast-draft@fd962fd73d21ed281b60219c11ea61cc9e4e91c4
+ * (PR #2 head; normative text equal to 3162ef93), sections 4.1 and 7.2.6.
+ */
+
+export type MulticastJoinMode = "ssm" | "asm";
+
+/** An endpoint's join mode and `S` (4.1): `sourceAddress` on SSM,
+ * `auth.senderAddress` on protected ASM, absent on unprotected ASM. */
+export interface MulticastEndpointSource {
+	mode: MulticastJoinMode;
+	source?: string;
+}
+
+export type MulticastCatalogIssueCode =
+	| "multicast_auth"
+	| "multicast_endpoint"
+	| "multicast_endpoint_auth"
+	| "multicast_track";
+
+export interface MulticastCatalogIssue {
+	code: MulticastCatalogIssueCode;
+	/** JSONPath of the offending field. */
+	path: string;
+	message: string;
+	/** Endpoint the issue makes a receiver ignore; absent for a catalog-level
+	 * issue, which leaves the receiver no endpoint at all (7.2.6). */
+	endpointIndex?: number;
+}
+
+/** Canonical unpadded base64url of exactly 32 octets. */
+export const ED25519_PUBLIC_KEY_BASE64URL = /^[A-Za-z0-9_-]{42}[AEIMQUYcgkosw048]$/;
+
+const UINT32_MAX = 0xffff_ffff;
+const AUTH_MEMBERS = new Set(["scheme", "version", "sig", "keys", "minEpoch"]);
+const KEY_MEMBERS = new Set(["kid", "publicKey", "firstEpoch"]);
+const ENDPOINT_AUTH_MEMBERS = new Set([
+	"manifestPort",
+	"streamId",
+	"senderAddress",
+	"maxAuthDelayMs",
+	"manifestTimerMs",
+	"manifestTrack",
+]);
+
+type JsonObject = Record<string, unknown>;
+
+function isObject(value: unknown): value is JsonObject {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+
+function isNonEmptyString(value: unknown): value is string {
+	return typeof value === "string" && value.trim().length > 0;
+}
+
+function isIntegerIn(value: unknown, min: number, max: number): value is number {
+	return Number.isSafeInteger(value) && (value as number) >= min && (value as number) <= max;
+}
+
+/**
+ * Join mode and `S` of one endpoint, or `undefined` when its fields disagree
+ * and a receiver must ignore it (4.1). `sourceAddress` alone selects the mode;
+ * `protocol` may only restate it, so "amt" and "atsc3" (draft -00) are
+ * inconsistent here: a bearer is a `networkSource`, never a protocol.
+ */
+export function multicastEndpointSource(endpoint: unknown): MulticastEndpointSource | undefined {
+	if (!isObject(endpoint)) return undefined;
+	const sourceAddress = endpoint["sourceAddress"];
+	if (sourceAddress !== undefined && !isNonEmptyString(sourceAddress)) return undefined;
+	const mode: MulticastJoinMode = sourceAddress === undefined ? "asm" : "ssm";
+	const protocol = endpoint["protocol"];
+	if (protocol !== undefined && protocol !== mode) return undefined;
+	const auth = endpoint["auth"];
+	const senderAddress = isObject(auth) ? auth["senderAddress"] : undefined;
+	if (mode === "ssm") return senderAddress === undefined ? { mode, source: sourceAddress as string } : undefined;
+	if (auth === undefined) return { mode };
+	return isNonEmptyString(senderAddress) ? { mode, source: senderAddress } : undefined;
+}
+
+function authIssues(auth: unknown): MulticastCatalogIssue[] {
+	const base = "$.multicast.auth";
+	const issue = (path: string, message: string): MulticastCatalogIssue[] => [
+		{ code: "multicast_auth", path: `${base}${path}`, message },
+	];
+	if (!isObject(auth)) return issue("", "auth must be an object");
+	const unknown = Object.keys(auth).filter(key => !AUTH_MEMBERS.has(key));
+	if (unknown.length > 0) {
+		return issue("", `auth has unknown member(s) ${unknown.join(", ")}; draft -01 7.2.6 defines scheme, version, sig, keys and minEpoch`);
+	}
+	if (auth["scheme"] !== "bc-provenance") return issue(".scheme", 'scheme must be "bc-provenance"');
+	if (auth["version"] !== 2) return issue(".version", "version must be 2 (bc-provenance version 2, draft -01 7.2)");
+	if (auth["sig"] !== "ed25519") return issue(".sig", 'sig must be "ed25519"');
+	const keys = auth["keys"];
+	if (!Array.isArray(keys) || keys.length < 1 || keys.length > 4) {
+		return issue(".keys", "keys must be an array of one to four {kid, publicKey, firstEpoch} objects");
+	}
+	const kids = new Set<number>();
+	const firstEpochs = new Set<number>();
+	for (let index = 0; index < keys.length; index++) {
+		const key = keys[index];
+		const at = `.keys[${index}]`;
+		if (!isObject(key) || Object.keys(key).some(member => !KEY_MEMBERS.has(member))) {
+			return issue(at, "a key is exactly {kid, publicKey, firstEpoch}");
+		}
+		if (!isIntegerIn(key["kid"], 0, UINT32_MAX)) return issue(`${at}.kid`, "kid must be an unsigned 32-bit integer");
+		if (typeof key["publicKey"] !== "string" || !ED25519_PUBLIC_KEY_BASE64URL.test(key["publicKey"])) {
+			return issue(`${at}.publicKey`, "publicKey must be a 32-octet Ed25519 key in canonical unpadded base64url");
+		}
+		if (!isIntegerIn(key["firstEpoch"], 0, UINT32_MAX)) {
+			return issue(`${at}.firstEpoch`, "firstEpoch must be an unsigned 32-bit integer");
+		}
+		// A repeated kid or firstEpoch leaves no key set (7.2.6): fail the whole
+		// block, never fall back to unauthenticated reception.
+		if (kids.has(key["kid"])) return issue(`${at}.kid`, `kid ${key["kid"]} is repeated; the catalog holds no key set`);
+		if (firstEpochs.has(key["firstEpoch"])) {
+			return issue(`${at}.firstEpoch`, `firstEpoch ${key["firstEpoch"]} is repeated; the catalog holds no key set`);
+		}
+		kids.add(key["kid"]);
+		firstEpochs.add(key["firstEpoch"]);
+	}
+	if (!isIntegerIn(auth["minEpoch"], 0, UINT32_MAX)) {
+		return issue(".minEpoch", "minEpoch must be an unsigned 32-bit integer");
+	}
+	return [];
+}
+
+function endpointAuthIssue(
+	endpoint: JsonObject,
+	mode: MulticastJoinMode,
+	at: string,
+): { path: string; message: string } | undefined {
+	const auth = endpoint["auth"];
+	if (!isObject(auth)) return { path: `${at}.auth`, message: "auth must be an object" };
+	const unknown = Object.keys(auth).filter(key => !ENDPOINT_AUTH_MEMBERS.has(key));
+	if (unknown.length > 0) return { path: `${at}.auth`, message: `auth has unknown member(s) ${unknown.join(", ")}` };
+	if (!isIntegerIn(auth["manifestPort"], 1, 65535)) {
+		return { path: `${at}.auth.manifestPort`, message: "manifestPort must be an integer from 1 to 65535" };
+	}
+	if (!isIntegerIn(auth["streamId"], 0, UINT32_MAX)) {
+		return { path: `${at}.auth.streamId`, message: "streamId must be an unsigned 32-bit integer" };
+	}
+	if (mode === "ssm" && auth["senderAddress"] !== undefined) {
+		return { path: `${at}.auth.senderAddress`, message: "senderAddress must not appear on an SSM endpoint; S is sourceAddress" };
+	}
+	if (mode === "asm" && !isNonEmptyString(auth["senderAddress"])) {
+		return { path: `${at}.auth.senderAddress`, message: "a protected ASM endpoint requires senderAddress" };
+	}
+	if (auth["maxAuthDelayMs"] !== undefined && !isIntegerIn(auth["maxAuthDelayMs"], 50, 1000)) {
+		return { path: `${at}.auth.maxAuthDelayMs`, message: "maxAuthDelayMs must be an integer from 50 to 1000" };
+	}
+	if (auth["manifestTimerMs"] !== undefined && !isIntegerIn(auth["manifestTimerMs"], 1, Number.MAX_SAFE_INTEGER)) {
+		return { path: `${at}.auth.manifestTimerMs`, message: "manifestTimerMs must be an integer of at least 1" };
+	}
+	if (auth["manifestTrack"] !== undefined && !isNonEmptyString(auth["manifestTrack"])) {
+		return { path: `${at}.auth.manifestTrack`, message: "manifestTrack must be a non-empty string" };
+	}
+	if (!isIntegerIn(endpoint["bandwidth"], 1, Number.MAX_SAFE_INTEGER)) {
+		return { path: `${at}.bandwidth`, message: "a protected endpoint requires bandwidth, which bounds the receiver's hold queues" };
+	}
+	return undefined;
+}
+
+/**
+ * Where a catalog object carries the namespace of the catalog track it was
+ * read from. A symbol, so it is never wire data and survives object spread;
+ * `Symbol.for`, so two bundled copies of this module agree on it.
+ */
+export const CATALOG_NAMESPACE: unique symbol = Symbol.for("@blockcast/mmt-base/catalogNamespace");
+
+/**
+ * `catalog` tagged with the namespace of its catalog track. Every receiver
+ * rule that takes the catalog (`multicastCatalogIssues`,
+ * `admittedMulticastEndpoints` and the transport selectors built on them)
+ * then judges the foreign-namespace rule against it, independent of track
+ * order. Tag once, where the catalog track is read.
+ */
+export function withCatalogNamespace<T extends object>(catalog: T, namespace: string): T {
+	return { ...catalog, [CATALOG_NAMESPACE]: namespace };
+}
+
+/**
+ * Every draft -01 4.1 / 7.2.6 violation in `catalog.multicast`, in document
+ * order. Packet-id, group-address and track-existence rules are not here; the
+ * container validator and the receivers already check those.
+ *
+ * `catalogNamespace` is the namespace of the catalog track, from `options` or else the
+ * catalog's `withCatalogNamespace` tag. Without it the
+ * foreign-namespace rule can only compare listed tracks with each other: the
+ * first listed track's namespace becomes the reference, so which side of a
+ * disagreement is dropped depends on order. It still fails closed; pass
+ * `catalogNamespace` wherever the catalog track is known.
+ */
+export function multicastCatalogIssues(
+	catalog: unknown,
+	options: { catalogNamespace?: string } = {},
+): MulticastCatalogIssue[] {
+	if (!isObject(catalog)) return [];
+	const issues: MulticastCatalogIssue[] = [];
+	if ("multicast.auth" in catalog) {
+		// Fail closed: a draft -00 publisher meant the flow to be protected, and
+		// the key it names verifies nothing in bc-provenance version 2.
+		issues.push({
+			code: "multicast_auth",
+			path: '$["multicast.auth"]',
+			message: 'the root "multicast.auth" key is retired; declare auth as multicast.auth (draft -01 7.2.6)',
+		});
+	}
+	const multicast = catalog["multicast"];
+	if (!isObject(multicast)) return issues;
+	const protectedCatalog = multicast["auth"] !== undefined;
+	if (protectedCatalog) issues.push(...authIssues(multicast["auth"]));
+	const endpoints = multicast["endpoints"];
+	if (!Array.isArray(endpoints)) return issues;
+
+	const tracks = Array.isArray(catalog["tracks"]) ? catalog["tracks"] : [];
+	const namespaceOf = new Map<string, unknown>();
+	for (const track of tracks) {
+		if (isObject(track) && typeof track["name"] === "string") namespaceOf.set(track["name"], track["namespace"]);
+	}
+	const tagged = (catalog as { [CATALOG_NAMESPACE]?: unknown })[CATALOG_NAMESPACE];
+	let referenceNamespace = options.catalogNamespace ?? (typeof tagged === "string" ? tagged : undefined);
+
+	const sources: Array<MulticastEndpointSource | undefined> = [];
+	for (let index = 0; index < endpoints.length; index++) {
+		const endpoint = endpoints[index];
+		const at = `$.multicast.endpoints[${index}]`;
+		const fail = (code: MulticastCatalogIssueCode, path: string, message: string) => {
+			issues.push({ code, path, message, endpointIndex: index });
+		};
+		sources.push(undefined);
+		if (!isObject(endpoint)) {
+			fail("multicast_endpoint", at, "endpoint must be an object");
+			continue;
+		}
+		const protocol = endpoint["protocol"];
+		if (protocol !== undefined && protocol !== "ssm" && protocol !== "asm") {
+			fail("multicast_endpoint", `${at}.protocol`, `protocol must be "ssm" or "asm"; a bearer such as ${JSON.stringify(protocol)} is a networkSource entry (draft -01 4.2)`);
+			continue;
+		}
+		const hasAuth = endpoint["auth"] !== undefined;
+		if (protectedCatalog !== hasAuth) {
+			fail(
+				"multicast_endpoint_auth",
+				`${at}.auth`,
+				protectedCatalog
+					? "every endpoint requires auth when multicast carries auth; a receiver ignores this endpoint"
+					: "auth names no key without multicast.auth; a receiver ignores this endpoint",
+			);
+			continue;
+		}
+		const sourceAddress = endpoint["sourceAddress"];
+		if (sourceAddress !== undefined && !isNonEmptyString(sourceAddress)) {
+			fail("multicast_endpoint", `${at}.sourceAddress`, "sourceAddress must be a non-empty string");
+			continue;
+		}
+		const mode: MulticastJoinMode = sourceAddress === undefined ? "asm" : "ssm";
+		if (protocol !== undefined && protocol !== mode) {
+			fail("multicast_endpoint", `${at}.protocol`, `protocol ${JSON.stringify(protocol)} disagrees with sourceAddress, which selects ${mode}`);
+			continue;
+		}
+		// The (S, G, port) rule below compares ports with ===, so only an
+		// integer may reach it: "5001" and 5001 would otherwise both pass.
+		if (!isIntegerIn(endpoint["port"], 1, 65535)) {
+			fail("multicast_endpoint", `${at}.port`, "port must be an integer from 1 to 65535");
+			continue;
+		}
+		if (hasAuth) {
+			const authIssue = endpointAuthIssue(endpoint, mode, at);
+			if (authIssue) {
+				fail("multicast_endpoint_auth", authIssue.path, authIssue.message);
+				continue;
+			}
+		}
+		sources[index] = multicastEndpointSource(endpoint);
+
+		const refs = Array.isArray(endpoint["tracks"]) ? endpoint["tracks"] : [];
+		for (let refIndex = 0; refIndex < refs.length; refIndex++) {
+			const ref = refs[refIndex];
+			const name = isObject(ref) ? ref["name"] : ref;
+			if (typeof name !== "string") continue;
+			const namespace = namespaceOf.get(name);
+			if (typeof namespace !== "string") continue;
+			referenceNamespace ??= namespace;
+			if (namespace !== referenceNamespace) {
+				fail("multicast_track", `${at}.tracks[${refIndex}].name`, `track ${JSON.stringify(name)} declares namespace ${JSON.stringify(namespace)}, not the catalog track's ${JSON.stringify(referenceNamespace)}`);
+			}
+		}
+	}
+
+	// One endpoint object per (S, G, port), and a manifestPort that is no port
+	// and no other manifestPort of its (S, G) (4.1, 7.2.6). The rule binds the
+	// endpoint whose manifestPort clashes; two equal tuples or two equal
+	// manifestPorts break it on both sides, so both are named.
+	const tupleOf = (index: number) => {
+		const endpoint = endpoints[index] as JsonObject;
+		const auth = endpoint["auth"];
+		return {
+			sg: JSON.stringify([sources[index]!.source ?? null, endpoint["groupAddress"]]),
+			port: endpoint["port"],
+			manifestPort: isObject(auth) ? auth["manifestPort"] : undefined,
+		};
+	};
+	for (let index = 0; index < endpoints.length; index++) {
+		if (!sources[index]) continue;
+		const own = tupleOf(index);
+		const at = `$.multicast.endpoints[${index}]`;
+		if (own.manifestPort !== undefined && own.manifestPort === own.port) {
+			issues.push({ code: "multicast_endpoint_auth", path: `${at}.auth.manifestPort`, message: "manifestPort must differ from the endpoint's own port", endpointIndex: index });
+			continue;
+		}
+		for (let other = 0; other < endpoints.length; other++) {
+			if (other === index || !sources[other]) continue;
+			const peer = tupleOf(other);
+			if (peer.sg !== own.sg) continue;
+			if (peer.port === own.port) {
+				issues.push({ code: "multicast_endpoint", path: `${at}.port`, message: `(S, G, port) is shared with endpoint ${other}; one endpoint object per multicast tuple`, endpointIndex: index });
+				break;
+			}
+			if (own.manifestPort !== undefined && (own.manifestPort === peer.port || own.manifestPort === peer.manifestPort)) {
+				issues.push({ code: "multicast_endpoint_auth", path: `${at}.auth.manifestPort`, message: `manifestPort is a port or manifestPort of endpoint ${other} on the same (S, G)`, endpointIndex: index });
+				break;
+			}
+		}
+	}
+	return issues;
+}
+
+/**
+ * Indices of the endpoints a receiver may use: none when a catalog-level
+ * issue leaves it no key set (7.2.6), otherwise every endpoint no issue
+ * names. Other receiver checks (group address, packet ids) still apply.
+ */
+export function admittedMulticastEndpoints(
+	catalog: unknown,
+	options: { catalogNamespace?: string } = {},
+): ReadonlySet<number> {
+	const multicast = isObject(catalog) ? catalog["multicast"] : undefined;
+	const endpoints = isObject(multicast) && Array.isArray(multicast["endpoints"]) ? multicast["endpoints"] : [];
+	const issues = multicastCatalogIssues(catalog, options);
+	if (issues.some(issue => issue.endpointIndex === undefined)) return new Set();
+	const ignored = new Set(issues.map(issue => issue.endpointIndex));
+	return new Set(endpoints.map((_, index) => index).filter(index => !ignored.has(index)));
+}