@blockcast/mmt-container 0.1.0-main.149f78a4adae

package/dist/manifest-auth-plan.js

@@ -0,0 +1,1267 @@
+var __typeError = (msg) => {
+  throw TypeError(msg);
+};
+var __accessCheck = (obj, member, msg) => member.has(obj) || __typeError("Cannot " + msg);
+var __privateGet = (obj, member, getter) => (__accessCheck(obj, member, "read from private field"), getter ? getter.call(obj) : member.get(obj));
+var __privateAdd = (obj, member, value) => member.has(obj) ? __typeError("Cannot add the same private member more than once") : member instanceof WeakSet ? member.add(obj) : member.set(obj, value);
+var __privateSet = (obj, member, value, setter) => (__accessCheck(obj, member, "write to private field"), setter ? setter.call(obj, value) : member.set(obj, value), value);
+var __privateMethod = (obj, member, method) => (__accessCheck(obj, member, "access private method"), method);
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/utils.js
+function isBytes(a) {
+  return a instanceof Uint8Array || ArrayBuffer.isView(a) && a.constructor.name === "Uint8Array";
+}
+function anumber(n) {
+  if (!Number.isSafeInteger(n) || n < 0)
+    throw new Error("positive integer expected, got " + n);
+}
+function abytes(b, ...lengths) {
+  if (!isBytes(b))
+    throw new Error("Uint8Array expected");
+  if (lengths.length > 0 && !lengths.includes(b.length))
+    throw new Error("Uint8Array expected of length " + lengths + ", got length=" + b.length);
+}
+function aexists(instance, checkFinished = true) {
+  if (instance.destroyed)
+    throw new Error("Hash instance has been destroyed");
+  if (checkFinished && instance.finished)
+    throw new Error("Hash#digest() has already been called");
+}
+function aoutput(out, instance) {
+  abytes(out);
+  const min = instance.outputLen;
+  if (out.length < min) {
+    throw new Error("digestInto() expects output buffer of length at least " + min);
+  }
+}
+function u8(arr) {
+  return new Uint8Array(arr.buffer, arr.byteOffset, arr.byteLength);
+}
+function u32(arr) {
+  return new Uint32Array(arr.buffer, arr.byteOffset, Math.floor(arr.byteLength / 4));
+}
+function clean(...arrays) {
+  for (let i = 0; i < arrays.length; i++) {
+    arrays[i].fill(0);
+  }
+}
+function rotr(word, shift) {
+  return word << 32 - shift | word >>> shift;
+}
+var isLE = /* @__PURE__ */ (() => new Uint8Array(new Uint32Array([287454020]).buffer)[0] === 68)();
+function byteSwap(word) {
+  return word << 24 & 4278190080 | word << 8 & 16711680 | word >>> 8 & 65280 | word >>> 24 & 255;
+}
+var swap8IfBE = isLE ? (n) => n : (n) => byteSwap(n);
+function byteSwap32(arr) {
+  for (let i = 0; i < arr.length; i++) {
+    arr[i] = byteSwap(arr[i]);
+  }
+  return arr;
+}
+var swap32IfBE = isLE ? (u) => u : byteSwap32;
+function utf8ToBytes(str) {
+  if (typeof str !== "string")
+    throw new Error("string expected");
+  return new Uint8Array(new TextEncoder().encode(str));
+}
+function toBytes(data) {
+  if (typeof data === "string")
+    data = utf8ToBytes(data);
+  abytes(data);
+  return data;
+}
+var Hash = class {
+};
+function createXOFer(hashCons) {
+  const hashC = (msg, opts) => hashCons(opts).update(toBytes(msg)).digest();
+  const tmp = hashCons({});
+  hashC.outputLen = tmp.outputLen;
+  hashC.blockLen = tmp.blockLen;
+  hashC.create = (opts) => hashCons(opts);
+  return hashC;
+}
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/_md.js
+var SHA256_IV = /* @__PURE__ */ Uint32Array.from([
+  1779033703,
+  3144134277,
+  1013904242,
+  2773480762,
+  1359893119,
+  2600822924,
+  528734635,
+  1541459225
+]);
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/_u64.js
+var U32_MASK64 = /* @__PURE__ */ BigInt(2 ** 32 - 1);
+var _32n = /* @__PURE__ */ BigInt(32);
+function fromBig(n, le = false) {
+  if (le)
+    return { h: Number(n & U32_MASK64), l: Number(n >> _32n & U32_MASK64) };
+  return { h: Number(n >> _32n & U32_MASK64) | 0, l: Number(n & U32_MASK64) | 0 };
+}
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/_blake.js
+function G1s(a, b, c, d, x) {
+  a = a + b + x | 0;
+  d = rotr(d ^ a, 16);
+  c = c + d | 0;
+  b = rotr(b ^ c, 12);
+  return { a, b, c, d };
+}
+function G2s(a, b, c, d, x) {
+  a = a + b + x | 0;
+  d = rotr(d ^ a, 8);
+  c = c + d | 0;
+  b = rotr(b ^ c, 7);
+  return { a, b, c, d };
+}
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/blake2.js
+var BLAKE2 = class extends Hash {
+  constructor(blockLen, outputLen) {
+    super();
+    this.finished = false;
+    this.destroyed = false;
+    this.length = 0;
+    this.pos = 0;
+    anumber(blockLen);
+    anumber(outputLen);
+    this.blockLen = blockLen;
+    this.outputLen = outputLen;
+    this.buffer = new Uint8Array(blockLen);
+    this.buffer32 = u32(this.buffer);
+  }
+  update(data) {
+    aexists(this);
+    data = toBytes(data);
+    abytes(data);
+    const { blockLen, buffer, buffer32 } = this;
+    const len = data.length;
+    const offset = data.byteOffset;
+    const buf = data.buffer;
+    for (let pos = 0; pos < len; ) {
+      if (this.pos === blockLen) {
+        swap32IfBE(buffer32);
+        this.compress(buffer32, 0, false);
+        swap32IfBE(buffer32);
+        this.pos = 0;
+      }
+      const take = Math.min(blockLen - this.pos, len - pos);
+      const dataOffset = offset + pos;
+      if (take === blockLen && !(dataOffset % 4) && pos + take < len) {
+        const data32 = new Uint32Array(buf, dataOffset, Math.floor((len - pos) / 4));
+        swap32IfBE(data32);
+        for (let pos32 = 0; pos + blockLen < len; pos32 += buffer32.length, pos += blockLen) {
+          this.length += blockLen;
+          this.compress(data32, pos32, false);
+        }
+        swap32IfBE(data32);
+        continue;
+      }
+      buffer.set(data.subarray(pos, pos + take), this.pos);
+      this.pos += take;
+      this.length += take;
+      pos += take;
+    }
+    return this;
+  }
+  digestInto(out) {
+    aexists(this);
+    aoutput(out, this);
+    const { pos, buffer32 } = this;
+    this.finished = true;
+    clean(this.buffer.subarray(pos));
+    swap32IfBE(buffer32);
+    this.compress(buffer32, 0, true);
+    swap32IfBE(buffer32);
+    const out32 = u32(out);
+    this.get().forEach((v, i) => out32[i] = swap8IfBE(v));
+  }
+  digest() {
+    const { buffer, outputLen } = this;
+    this.digestInto(buffer);
+    const res = buffer.slice(0, outputLen);
+    this.destroy();
+    return res;
+  }
+  _cloneInto(to) {
+    const { buffer, length, finished, destroyed, outputLen, pos } = this;
+    to || (to = new this.constructor({ dkLen: outputLen }));
+    to.set(...this.get());
+    to.buffer.set(buffer);
+    to.destroyed = destroyed;
+    to.finished = finished;
+    to.length = length;
+    to.pos = pos;
+    to.outputLen = outputLen;
+    return to;
+  }
+  clone() {
+    return this._cloneInto();
+  }
+};
+function compress(s, offset, msg, rounds, v0, v1, v2, v3, v4, v5, v6, v7, v8, v9, v10, v11, v12, v13, v14, v15) {
+  let j = 0;
+  for (let i = 0; i < rounds; i++) {
+    ({ a: v0, b: v4, c: v8, d: v12 } = G1s(v0, v4, v8, v12, msg[offset + s[j++]]));
+    ({ a: v0, b: v4, c: v8, d: v12 } = G2s(v0, v4, v8, v12, msg[offset + s[j++]]));
+    ({ a: v1, b: v5, c: v9, d: v13 } = G1s(v1, v5, v9, v13, msg[offset + s[j++]]));
+    ({ a: v1, b: v5, c: v9, d: v13 } = G2s(v1, v5, v9, v13, msg[offset + s[j++]]));
+    ({ a: v2, b: v6, c: v10, d: v14 } = G1s(v2, v6, v10, v14, msg[offset + s[j++]]));
+    ({ a: v2, b: v6, c: v10, d: v14 } = G2s(v2, v6, v10, v14, msg[offset + s[j++]]));
+    ({ a: v3, b: v7, c: v11, d: v15 } = G1s(v3, v7, v11, v15, msg[offset + s[j++]]));
+    ({ a: v3, b: v7, c: v11, d: v15 } = G2s(v3, v7, v11, v15, msg[offset + s[j++]]));
+    ({ a: v0, b: v5, c: v10, d: v15 } = G1s(v0, v5, v10, v15, msg[offset + s[j++]]));
+    ({ a: v0, b: v5, c: v10, d: v15 } = G2s(v0, v5, v10, v15, msg[offset + s[j++]]));
+    ({ a: v1, b: v6, c: v11, d: v12 } = G1s(v1, v6, v11, v12, msg[offset + s[j++]]));
+    ({ a: v1, b: v6, c: v11, d: v12 } = G2s(v1, v6, v11, v12, msg[offset + s[j++]]));
+    ({ a: v2, b: v7, c: v8, d: v13 } = G1s(v2, v7, v8, v13, msg[offset + s[j++]]));
+    ({ a: v2, b: v7, c: v8, d: v13 } = G2s(v2, v7, v8, v13, msg[offset + s[j++]]));
+    ({ a: v3, b: v4, c: v9, d: v14 } = G1s(v3, v4, v9, v14, msg[offset + s[j++]]));
+    ({ a: v3, b: v4, c: v9, d: v14 } = G2s(v3, v4, v9, v14, msg[offset + s[j++]]));
+  }
+  return { v0, v1, v2, v3, v4, v5, v6, v7, v8, v9, v10, v11, v12, v13, v14, v15 };
+}
+
+// ../mmt-manifest-verify/node_modules/@noble/hashes/esm/blake3.js
+var B3_Flags = {
+  CHUNK_START: 1,
+  CHUNK_END: 2,
+  PARENT: 4,
+  ROOT: 8,
+  KEYED_HASH: 16,
+  DERIVE_KEY_CONTEXT: 32,
+  DERIVE_KEY_MATERIAL: 64
+};
+var B3_IV = SHA256_IV.slice();
+var B3_SIGMA = /* @__PURE__ */ (() => {
+  const Id = Array.from({ length: 16 }, (_, i) => i);
+  const permute = (arr) => [2, 6, 3, 10, 7, 0, 4, 13, 1, 11, 12, 5, 9, 14, 15, 8].map((i) => arr[i]);
+  const res = [];
+  for (let i = 0, v = Id; i < 7; i++, v = permute(v))
+    res.push(...v);
+  return Uint8Array.from(res);
+})();
+var BLAKE3 = class _BLAKE3 extends BLAKE2 {
+  constructor(opts = {}, flags = 0) {
+    super(64, opts.dkLen === void 0 ? 32 : opts.dkLen);
+    this.chunkPos = 0;
+    this.chunksDone = 0;
+    this.flags = 0 | 0;
+    this.stack = [];
+    this.posOut = 0;
+    this.bufferOut32 = new Uint32Array(16);
+    this.chunkOut = 0;
+    this.enableXOF = true;
+    const { key, context } = opts;
+    const hasContext = context !== void 0;
+    if (key !== void 0) {
+      if (hasContext)
+        throw new Error('Only "key" or "context" can be specified at same time');
+      const k = toBytes(key).slice();
+      abytes(k, 32);
+      this.IV = u32(k);
+      swap32IfBE(this.IV);
+      this.flags = flags | B3_Flags.KEYED_HASH;
+    } else if (hasContext) {
+      const ctx = toBytes(context);
+      const contextKey = new _BLAKE3({ dkLen: 32 }, B3_Flags.DERIVE_KEY_CONTEXT).update(ctx).digest();
+      this.IV = u32(contextKey);
+      swap32IfBE(this.IV);
+      this.flags = flags | B3_Flags.DERIVE_KEY_MATERIAL;
+    } else {
+      this.IV = B3_IV.slice();
+      this.flags = flags;
+    }
+    this.state = this.IV.slice();
+    this.bufferOut = u8(this.bufferOut32);
+  }
+  // Unused
+  get() {
+    return [];
+  }
+  set() {
+  }
+  b2Compress(counter, flags, buf, bufPos = 0) {
+    const { state: s, pos } = this;
+    const { h, l } = fromBig(BigInt(counter), true);
+    const { v0, v1, v2, v3, v4, v5, v6, v7, v8, v9, v10, v11, v12, v13, v14, v15 } = compress(B3_SIGMA, bufPos, buf, 7, s[0], s[1], s[2], s[3], s[4], s[5], s[6], s[7], B3_IV[0], B3_IV[1], B3_IV[2], B3_IV[3], h, l, pos, flags);
+    s[0] = v0 ^ v8;
+    s[1] = v1 ^ v9;
+    s[2] = v2 ^ v10;
+    s[3] = v3 ^ v11;
+    s[4] = v4 ^ v12;
+    s[5] = v5 ^ v13;
+    s[6] = v6 ^ v14;
+    s[7] = v7 ^ v15;
+  }
+  compress(buf, bufPos = 0, isLast = false) {
+    let flags = this.flags;
+    if (!this.chunkPos)
+      flags |= B3_Flags.CHUNK_START;
+    if (this.chunkPos === 15 || isLast)
+      flags |= B3_Flags.CHUNK_END;
+    if (!isLast)
+      this.pos = this.blockLen;
+    this.b2Compress(this.chunksDone, flags, buf, bufPos);
+    this.chunkPos += 1;
+    if (this.chunkPos === 16 || isLast) {
+      let chunk = this.state;
+      this.state = this.IV.slice();
+      for (let last, chunks = this.chunksDone + 1; isLast || !(chunks & 1); chunks >>= 1) {
+        if (!(last = this.stack.pop()))
+          break;
+        this.buffer32.set(last, 0);
+        this.buffer32.set(chunk, 8);
+        this.pos = this.blockLen;
+        this.b2Compress(0, this.flags | B3_Flags.PARENT, this.buffer32, 0);
+        chunk = this.state;
+        this.state = this.IV.slice();
+      }
+      this.chunksDone++;
+      this.chunkPos = 0;
+      this.stack.push(chunk);
+    }
+    this.pos = 0;
+  }
+  _cloneInto(to) {
+    to = super._cloneInto(to);
+    const { IV, flags, state, chunkPos, posOut, chunkOut, stack, chunksDone } = this;
+    to.state.set(state.slice());
+    to.stack = stack.map((i) => Uint32Array.from(i));
+    to.IV.set(IV);
+    to.flags = flags;
+    to.chunkPos = chunkPos;
+    to.chunksDone = chunksDone;
+    to.posOut = posOut;
+    to.chunkOut = chunkOut;
+    to.enableXOF = this.enableXOF;
+    to.bufferOut32.set(this.bufferOut32);
+    return to;
+  }
+  destroy() {
+    this.destroyed = true;
+    clean(this.state, this.buffer32, this.IV, this.bufferOut32);
+    clean(...this.stack);
+  }
+  // Same as b2Compress, but doesn't modify state and returns 16 u32 array (instead of 8)
+  b2CompressOut() {
+    const { state: s, pos, flags, buffer32, bufferOut32: out32 } = this;
+    const { h, l } = fromBig(BigInt(this.chunkOut++));
+    swap32IfBE(buffer32);
+    const { v0, v1, v2, v3, v4, v5, v6, v7, v8, v9, v10, v11, v12, v13, v14, v15 } = compress(B3_SIGMA, 0, buffer32, 7, s[0], s[1], s[2], s[3], s[4], s[5], s[6], s[7], B3_IV[0], B3_IV[1], B3_IV[2], B3_IV[3], l, h, pos, flags);
+    out32[0] = v0 ^ v8;
+    out32[1] = v1 ^ v9;
+    out32[2] = v2 ^ v10;
+    out32[3] = v3 ^ v11;
+    out32[4] = v4 ^ v12;
+    out32[5] = v5 ^ v13;
+    out32[6] = v6 ^ v14;
+    out32[7] = v7 ^ v15;
+    out32[8] = s[0] ^ v8;
+    out32[9] = s[1] ^ v9;
+    out32[10] = s[2] ^ v10;
+    out32[11] = s[3] ^ v11;
+    out32[12] = s[4] ^ v12;
+    out32[13] = s[5] ^ v13;
+    out32[14] = s[6] ^ v14;
+    out32[15] = s[7] ^ v15;
+    swap32IfBE(buffer32);
+    swap32IfBE(out32);
+    this.posOut = 0;
+  }
+  finish() {
+    if (this.finished)
+      return;
+    this.finished = true;
+    clean(this.buffer.subarray(this.pos));
+    let flags = this.flags | B3_Flags.ROOT;
+    if (this.stack.length) {
+      flags |= B3_Flags.PARENT;
+      swap32IfBE(this.buffer32);
+      this.compress(this.buffer32, 0, true);
+      swap32IfBE(this.buffer32);
+      this.chunksDone = 0;
+      this.pos = this.blockLen;
+    } else {
+      flags |= (!this.chunkPos ? B3_Flags.CHUNK_START : 0) | B3_Flags.CHUNK_END;
+    }
+    this.flags = flags;
+    this.b2CompressOut();
+  }
+  writeInto(out) {
+    aexists(this, false);
+    abytes(out);
+    this.finish();
+    const { blockLen, bufferOut } = this;
+    for (let pos = 0, len = out.length; pos < len; ) {
+      if (this.posOut >= blockLen)
+        this.b2CompressOut();
+      const take = Math.min(blockLen - this.posOut, len - pos);
+      out.set(bufferOut.subarray(this.posOut, this.posOut + take), pos);
+      this.posOut += take;
+      pos += take;
+    }
+    return out;
+  }
+  xofInto(out) {
+    if (!this.enableXOF)
+      throw new Error("XOF is not possible after digest call");
+    return this.writeInto(out);
+  }
+  xof(bytes) {
+    anumber(bytes);
+    return this.xofInto(new Uint8Array(bytes));
+  }
+  digestInto(out) {
+    aoutput(out, this);
+    if (this.finished)
+      throw new Error("digest() was already called");
+    this.enableXOF = false;
+    this.writeInto(out);
+    this.destroy();
+    return out;
+  }
+  digest() {
+    return this.digestInto(new Uint8Array(this.outputLen));
+  }
+};
+var blake3 = /* @__PURE__ */ createXOFer((opts) => new BLAKE3(opts));
+
+// ../mmt-manifest-verify/dist/source-auth.js
+var SOURCE_AUTH_MANIFEST_VERSION = 1;
+var SOURCE_AUTH_OBJECT_ENTRY_FRAME = 1;
+var SOURCE_AUTH_GROUP_CLOSE_FRAME = 2;
+var SOURCE_AUTH_OBJECT_ENTRY_LENGTH = 52;
+var SOURCE_AUTH_GROUP_CLOSE_LENGTH = 112;
+var SOURCE_AUTH_MAX_OBJECTS_PER_GROUP = 4096;
+var SOURCE_AUTH_MAX_TRUE_LENGTH = 16 * 1024 * 1024;
+var SOURCE_AUTH_SCOPE_LENGTH = 32;
+var SIGNATURE_DOMAIN = new TextEncoder().encode("blockcast-mmt-root-v1\0\0\0");
+function requireBytes(name, value, length) {
+  if (value.byteLength !== length) {
+    throw new Error(`${name} must be ${length} bytes, got ${value.byteLength}`);
+  }
+}
+function requireU32(name, value) {
+  if (!Number.isInteger(value) || value < 0 || value > 4294967295) {
+    throw new Error(`${name} must be an unsigned 32-bit integer`);
+  }
+}
+function requireU64(name, value) {
+  if (value < 0n || value > 0xffffffffffffffffn) {
+    throw new Error(`${name} must be an unsigned 64-bit integer`);
+  }
+}
+function requireTrueLength(value) {
+  requireU32("trueLength", value);
+  if (value > SOURCE_AUTH_MAX_TRUE_LENGTH) {
+    throw new Error(`trueLength exceeds the ${SOURCE_AUTH_MAX_TRUE_LENGTH}-byte profile maximum`);
+  }
+}
+function sourceAuthObjectDigest(object) {
+  return blake3(object);
+}
+function sourceAuthLeafHash(groupId, objectId, digest, trueLength) {
+  requireU64("groupId", groupId);
+  requireU32("objectId", objectId);
+  requireBytes("digest", digest, 32);
+  requireTrueLength(trueLength);
+  const preimage = new Uint8Array(49);
+  const view = new DataView(preimage.buffer);
+  view.setBigUint64(1, groupId);
+  view.setUint32(9, objectId);
+  preimage.set(digest, 13);
+  view.setUint32(45, trueLength);
+  return blake3(preimage);
+}
+function sourceAuthMerkleRoot(entries) {
+  if (entries.length === 0)
+    throw new Error("Merkle tree requires at least one object");
+  if (entries.length > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+    throw new Error(`group exceeds ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP} objects`);
+  }
+  const groupId = entries[0].groupId;
+  const objectIds = /* @__PURE__ */ new Set();
+  const ordered = [...entries].sort((left, right) => left.objectId - right.objectId);
+  let level = ordered.map((entry) => {
+    if (entry.groupId !== groupId)
+      throw new Error("Merkle entries must belong to one group");
+    if (objectIds.has(entry.objectId))
+      throw new Error(`duplicate objectId ${entry.objectId}`);
+    objectIds.add(entry.objectId);
+    return sourceAuthLeafHash(entry.groupId, entry.objectId, entry.digest, entry.trueLength);
+  });
+  while (level.length > 1) {
+    const parents = [];
+    for (let index = 0; index < level.length; index += 2) {
+      const left = level[index];
+      const right = level[index + 1] ?? left;
+      const preimage = new Uint8Array(65);
+      preimage[0] = 1;
+      preimage.set(left, 1);
+      preimage.set(right, 33);
+      parents.push(blake3(preimage));
+    }
+    level = parents;
+  }
+  return level[0];
+}
+function sourceAuthSignaturePreimage(authScope, groupId, objectCount, root) {
+  requireU32("objectCount", objectCount);
+  if (objectCount === 0 || objectCount > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+    throw new Error(`objectCount must be between 1 and ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP}`);
+  }
+  requireU64("groupId", groupId);
+  requireBytes("authScope", authScope, SOURCE_AUTH_SCOPE_LENGTH);
+  requireBytes("root", root, 32);
+  const preimage = new Uint8Array(100);
+  const view = new DataView(preimage.buffer);
+  preimage.set(SIGNATURE_DOMAIN);
+  preimage.set(authScope, 24);
+  view.setBigUint64(56, groupId);
+  view.setUint32(64, objectCount);
+  preimage.set(root, 68);
+  return preimage;
+}
+function decodeSourceAuthManifestFrame(frame) {
+  const frameType = frame[0];
+  const expectedLength = frameType === SOURCE_AUTH_OBJECT_ENTRY_FRAME ? SOURCE_AUTH_OBJECT_ENTRY_LENGTH : frameType === SOURCE_AUTH_GROUP_CLOSE_FRAME ? SOURCE_AUTH_GROUP_CLOSE_LENGTH : 0;
+  if (expectedLength === 0)
+    throw new Error(`unsupported manifest frame type ${frameType}`);
+  if (frame.byteLength !== expectedLength) {
+    throw new Error(`manifest frame has invalid length ${frame.byteLength} for type ${frameType}`);
+  }
+  if (frame[1] !== SOURCE_AUTH_MANIFEST_VERSION) {
+    throw new Error(`unsupported manifest version ${frame[1]}`);
+  }
+  if (frame[2] !== 0 || frame[3] !== 0)
+    throw new Error("manifest reserved bits must be zero");
+  const view = new DataView(frame.buffer, frame.byteOffset, frame.byteLength);
+  const groupId = view.getBigUint64(4);
+  if (frameType === SOURCE_AUTH_OBJECT_ENTRY_FRAME) {
+    const entry = {
+      kind: "object",
+      groupId,
+      objectId: view.getUint32(12),
+      trueLength: view.getUint32(16),
+      digest: frame.slice(20, 52)
+    };
+    requireTrueLength(entry.trueLength);
+    return entry;
+  }
+  const close = {
+    kind: "close",
+    groupId,
+    objectCount: view.getUint32(12),
+    root: frame.slice(16, 48),
+    signature: frame.slice(48, 112)
+  };
+  if (close.objectCount === 0 || close.objectCount > SOURCE_AUTH_MAX_OBJECTS_PER_GROUP) {
+    throw new Error(`objectCount must be between 1 and ${SOURCE_AUTH_MAX_OBJECTS_PER_GROUP}`);
+  }
+  return close;
+}
+
+// ../mmt-manifest-verify/dist/verifier.js
+function manifestBindingId(trackName, sourceSymbolFormat) {
+  return JSON.stringify([trackName, sourceSymbolFormat]);
+}
+var FAILURE_REASONS = [
+  "sigInvalid",
+  "digestMismatch",
+  "manifestLate",
+  "manifestAbsent",
+  "verifierError"
+];
+var equalBytes = (left, right) => {
+  if (left.byteLength !== right.byteLength)
+    return false;
+  let diff = 0;
+  for (let index = 0; index < left.byteLength; index++)
+    diff |= left[index] ^ right[index];
+  return diff === 0;
+};
+var isPromiseLike = (value) => typeof value === "object" && value !== null && typeof value.then === "function";
+var _config, _verifySignature, _onFailure, _tracks, _stats, _disposed, _ManifestVerifier_instances, requireTrack_fn, group_fn, validateIdentity_fn, admitAgainstEntry_fn, rejectOrShadow_fn, resolvePending_fn, closeGroup_fn, finishGroupSignature_fn, verifyAcceptedSignature_fn, failGroup_fn, removePending_fn, quarantine_fn, enforceCap_fn, failOpenTrack_fn, failOpenGroup_fn, releaseAllQuarantine_fn, failure_fn;
+var ManifestVerifier = class {
+  constructor(options) {
+    __privateAdd(this, _ManifestVerifier_instances);
+    __privateAdd(this, _config);
+    __privateAdd(this, _verifySignature);
+    __privateAdd(this, _onFailure);
+    __privateAdd(this, _tracks, /* @__PURE__ */ new Map());
+    __privateAdd(this, _stats, {
+      verified: 0,
+      failures: Object.fromEntries(FAILURE_REASONS.map((reason) => [reason, 0])),
+      quarantinedBytes: 0
+    });
+    __privateAdd(this, _disposed, false);
+    __privateSet(this, _config, { ...options.manifestAuth });
+    __privateSet(this, _verifySignature, options.verifySignature);
+    __privateSet(this, _onFailure, options.onFailure);
+  }
+  get config() {
+    return __privateGet(this, _config);
+  }
+  get stats() {
+    let quarantined = 0;
+    for (const track of __privateGet(this, _tracks).values())
+      quarantined += track.quarantine.length;
+    return {
+      verified: __privateGet(this, _stats).verified,
+      failures: { ...__privateGet(this, _stats).failures },
+      quarantined,
+      quarantinedBytes: __privateGet(this, _stats).quarantinedBytes
+    };
+  }
+  setMode(mode) {
+    __privateSet(this, _config, { ...__privateGet(this, _config), mode });
+    if (mode !== "enforce")
+      __privateMethod(this, _ManifestVerifier_instances, releaseAllQuarantine_fn).call(this, false);
+  }
+  registerTrack(context) {
+    const bindingId = context.bindingId ?? context.trackName;
+    if (__privateGet(this, _tracks).has(bindingId)) {
+      throw new Error(`manifest binding ${bindingId} is already registered`);
+    }
+    if (!Number.isFinite(context.bitrate) || context.bitrate <= 0) {
+      throw new Error("manifest track bitrate must be > 0");
+    }
+    if (!Number.isFinite(context.groupDurationMs) || context.groupDurationMs <= 0) {
+      throw new Error("manifest track groupDurationMs must be > 0");
+    }
+    if (context.authScope.byteLength !== 32)
+      throw new Error("manifest authScope must be 32 bytes");
+    if (context.publicKey.byteLength !== 32)
+      throw new Error("manifest publicKey must be 32 bytes");
+    for (const key of context.acceptedPublicKeys ?? []) {
+      if (key.byteLength !== 32)
+        throw new Error("manifest acceptedPublicKeys must contain 32-byte keys");
+    }
+    for (const [name, value] of Object.entries({
+      broadcastNamespaceId: context.broadcastNamespaceId,
+      trackName: context.trackName,
+      codec: context.codec,
+      timing: context.timing,
+      fecGeometry: context.fecGeometry
+    })) {
+      if (value.length === 0)
+        throw new Error(`manifest ${name} must not be empty`);
+    }
+    __privateGet(this, _tracks).set(bindingId, {
+      context: { ...context, bindingId },
+      groups: /* @__PURE__ */ new Map(),
+      quarantine: [],
+      quarantinedBytes: 0,
+      capBytes: Math.ceil(context.bitrate * context.groupDurationMs / 8e3),
+      manifestEntries: 0,
+      maxManifestEntries: Math.ceil(context.bitrate * context.groupDurationMs / (8e3 * 52)),
+      maxGroups: context.mapper.d + 1
+    });
+  }
+  ingestManifestFrame(bindingId, frameBytes) {
+    const track = __privateMethod(this, _ManifestVerifier_instances, requireTrack_fn).call(this, bindingId);
+    try {
+      const frame = decodeSourceAuthManifestFrame(frameBytes);
+      const groupId = frame.groupId;
+      const group = __privateMethod(this, _ManifestVerifier_instances, group_fn).call(this, track, groupId);
+      if (frame.kind === "object") {
+        if (group.close || group.signaturePending || group.failed) {
+          __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, bindingId, groupId, objectId: frame.objectId }, "verifierError");
+          return;
+        }
+        if (group.entries.has(frame.objectId)) {
+          __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, bindingId, groupId, objectId: frame.objectId }, "verifierError");
+          return;
+        }
+        if (group.entries.size >= 4096 || track.manifestEntries >= track.maxManifestEntries) {
+          __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, bindingId, groupId, objectId: frame.objectId }, "verifierError");
+          return;
+        }
+        group.entries.set(frame.objectId, frame);
+        track.manifestEntries++;
+        const pending = group.pending.get(frame.objectId);
+        if (pending) {
+          __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestLate");
+          __privateMethod(this, _ManifestVerifier_instances, resolvePending_fn).call(this, track, group, pending, frame);
+        }
+        if (group.pendingClose && group.entries.size === group.pendingClose.objectCount) {
+          const close = group.pendingClose;
+          group.pendingClose = void 0;
+          __privateMethod(this, _ManifestVerifier_instances, closeGroup_fn).call(this, track, groupId, group, close);
+        }
+        return;
+      }
+      __privateMethod(this, _ManifestVerifier_instances, closeGroup_fn).call(this, track, groupId, group, frame);
+    } catch {
+      __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, bindingId, groupId: 0, objectId: 0 }, "verifierError");
+    }
+  }
+  admitObject(identity, data, release) {
+    if (__privateGet(this, _config).mode === "off") {
+      release();
+      return { action: "play", verified: false };
+    }
+    const track = __privateGet(this, _tracks).get(identity.bindingId ?? identity.trackName);
+    if (!track) {
+      release();
+      __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, identity, "verifierError");
+      return { action: "play", verified: false, reason: "verifierError" };
+    }
+    try {
+      if (!__privateMethod(this, _ManifestVerifier_instances, validateIdentity_fn).call(this, track, identity)) {
+        return __privateMethod(this, _ManifestVerifier_instances, rejectOrShadow_fn).call(this, identity, release, "digestMismatch");
+      }
+      const group = __privateMethod(this, _ManifestVerifier_instances, group_fn).call(this, track, BigInt(identity.groupId));
+      if (group.failed === "sigInvalid" || group.failed === "digestMismatch") {
+        return __privateMethod(this, _ManifestVerifier_instances, rejectOrShadow_fn).call(this, identity, release, group.failed);
+      }
+      const entry = group.entries.get(identity.objectId);
+      if (entry)
+        return __privateMethod(this, _ManifestVerifier_instances, admitAgainstEntry_fn).call(this, track, group, identity, data, release, entry);
+      if (__privateGet(this, _config).mode === "shadow" || __privateGet(this, _config).onMissingManifest === "fallback-shadow") {
+        release();
+        __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, identity, "manifestAbsent");
+        return { action: "play", verified: false, reason: "manifestAbsent" };
+      }
+      if (!__privateMethod(this, _ManifestVerifier_instances, quarantine_fn).call(this, track, group, { identity, data, release, bytes: data.byteLength })) {
+        return { action: "drop", verified: false };
+      }
+      return { action: "stall", verified: false };
+    } catch {
+      release();
+      __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, identity, "verifierError");
+      return { action: "play", verified: false, reason: "verifierError" };
+    }
+  }
+  dispose() {
+    if (__privateGet(this, _disposed))
+      return;
+    __privateSet(this, _disposed, true);
+    __privateMethod(this, _ManifestVerifier_instances, releaseAllQuarantine_fn).call(this, false);
+    __privateGet(this, _tracks).clear();
+  }
+};
+_config = new WeakMap();
+_verifySignature = new WeakMap();
+_onFailure = new WeakMap();
+_tracks = new WeakMap();
+_stats = new WeakMap();
+_disposed = new WeakMap();
+_ManifestVerifier_instances = new WeakSet();
+requireTrack_fn = function(bindingId) {
+  const track = __privateGet(this, _tracks).get(bindingId);
+  if (!track)
+    throw new Error(`unknown manifest binding ${bindingId}`);
+  return track;
+};
+group_fn = function(track, groupId) {
+  let group = track.groups.get(groupId);
+  if (!group) {
+    group = { entries: /* @__PURE__ */ new Map(), pending: /* @__PURE__ */ new Map(), rootVerified: false };
+    track.groups.set(groupId, group);
+    while (track.groups.size > track.maxGroups) {
+      const oldest = track.groups.entries().next().value;
+      if (!oldest)
+        break;
+      const [oldestId, oldestGroup] = oldest;
+      for (const pending of [...oldestGroup.pending.values()]) {
+        __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, oldestGroup, pending);
+        pending.release();
+        __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestAbsent");
+      }
+      track.manifestEntries -= oldestGroup.entries.size;
+      track.groups.delete(oldestId);
+    }
+  }
+  return group;
+};
+validateIdentity_fn = function(track, identity) {
+  const coordinates = track.context.mapper.derive(Number(identity.groupId), identity.objectId);
+  return identity.ssId === void 0 || coordinates.ssId === identity.ssId;
+};
+admitAgainstEntry_fn = function(track, group, identity, data, release, entry) {
+  if (entry.trueLength !== data.byteLength) {
+    return __privateMethod(this, _ManifestVerifier_instances, rejectOrShadow_fn).call(this, identity, release, "digestMismatch");
+  }
+  const digestMatches = equalBytes(sourceAuthObjectDigest(data.subarray(0, entry.trueLength)), entry.digest);
+  if (!digestMatches)
+    return __privateMethod(this, _ManifestVerifier_instances, rejectOrShadow_fn).call(this, identity, release, "digestMismatch");
+  if (!track.context.manifestChannelAuthenticated && !group.rootVerified) {
+    if (__privateGet(this, _config).mode === "shadow") {
+      release();
+      return { action: "play", verified: false };
+    }
+    if (!__privateMethod(this, _ManifestVerifier_instances, quarantine_fn).call(this, track, group, { identity, data, release, bytes: data.byteLength })) {
+      return { action: "drop", verified: false };
+    }
+    return { action: "stall", verified: false };
+  }
+  release();
+  __privateGet(this, _stats).verified++;
+  return { action: "play", verified: true };
+};
+rejectOrShadow_fn = function(identity, release, reason) {
+  __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, identity, reason);
+  if (__privateGet(this, _config).mode === "enforce") {
+    console.warn(JSON.stringify({ event: "manifest-enforce-drop", track: identity.trackName, group: String(identity.groupId), object: identity.objectId, reason }));
+    return { action: "drop", verified: false, reason };
+  }
+  release();
+  return { action: "play", verified: false, reason };
+};
+resolvePending_fn = function(track, group, pending, entry) {
+  __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+  __privateMethod(this, _ManifestVerifier_instances, admitAgainstEntry_fn).call(this, track, group, pending.identity, pending.data, pending.release, entry);
+};
+closeGroup_fn = function(track, groupId, group, close) {
+  if (group.close || group.signaturePending)
+    return;
+  const entries = [...group.entries.values()];
+  if (entries.length !== close.objectCount) {
+    group.pendingClose = close;
+    const hadPending = group.pending.size > 0;
+    if (__privateGet(this, _config).onMissingManifest === "fallback-shadow" || __privateGet(this, _config).mode === "shadow") {
+      for (const pending of [...group.pending.values()]) {
+        __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+        pending.release();
+        __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestAbsent");
+      }
+    } else {
+      for (const pending of group.pending.values()) {
+        __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestAbsent");
+      }
+    }
+    if (!hadPending) {
+      __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, groupId, objectId: 0 }, "manifestAbsent");
+    }
+    return;
+  }
+  if (!equalBytes(sourceAuthMerkleRoot(entries), close.root)) {
+    group.failed = "digestMismatch";
+    __privateMethod(this, _ManifestVerifier_instances, failGroup_fn).call(this, track, groupId, group, "digestMismatch");
+    return;
+  }
+  const preimage = sourceAuthSignaturePreimage(track.context.authScope, close.groupId, close.objectCount, close.root);
+  let signatureValid;
+  try {
+    signatureValid = __privateMethod(this, _ManifestVerifier_instances, verifyAcceptedSignature_fn).call(this, track, preimage, close.signature);
+  } catch {
+    __privateMethod(this, _ManifestVerifier_instances, failOpenGroup_fn).call(this, track, groupId, group);
+    return;
+  }
+  if (isPromiseLike(signatureValid)) {
+    group.signaturePending = true;
+    void signatureValid.then((valid) => {
+      if (__privateGet(this, _disposed))
+        return;
+      group.signaturePending = false;
+      __privateMethod(this, _ManifestVerifier_instances, finishGroupSignature_fn).call(this, track, groupId, group, close, valid);
+    }, () => {
+      if (__privateGet(this, _disposed))
+        return;
+      group.signaturePending = false;
+      __privateMethod(this, _ManifestVerifier_instances, failOpenGroup_fn).call(this, track, groupId, group);
+    });
+    return;
+  }
+  __privateMethod(this, _ManifestVerifier_instances, finishGroupSignature_fn).call(this, track, groupId, group, close, signatureValid);
+};
+finishGroupSignature_fn = function(track, groupId, group, close, signatureValid) {
+  if (!signatureValid) {
+    group.failed = "sigInvalid";
+    __privateMethod(this, _ManifestVerifier_instances, failGroup_fn).call(this, track, groupId, group, "sigInvalid");
+    return;
+  }
+  group.failed = void 0;
+  group.close = close;
+  group.pendingClose = void 0;
+  group.rootVerified = true;
+  for (const pending of [...group.pending.values()]) {
+    const entry = group.entries.get(pending.identity.objectId);
+    if (entry)
+      __privateMethod(this, _ManifestVerifier_instances, resolvePending_fn).call(this, track, group, pending, entry);
+    else if (__privateGet(this, _config).onMissingManifest === "fallback-shadow") {
+      __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+      pending.release();
+      __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestAbsent");
+    }
+  }
+};
+verifyAcceptedSignature_fn = function(track, message, signature) {
+  const keys = track.context.acceptedPublicKeys ?? [track.context.publicKey];
+  const pending = [];
+  let hadSynchronousError = false;
+  for (const key of keys) {
+    try {
+      const result = __privateGet(this, _verifySignature).call(this, key, message, signature);
+      if (isPromiseLike(result)) {
+        pending.push(Promise.resolve(result).then((valid) => valid, () => "error"));
+      } else if (result) {
+        return true;
+      }
+    } catch {
+      hadSynchronousError = true;
+    }
+  }
+  if (pending.length === 0) {
+    if (hadSynchronousError)
+      throw new Error("manifest signature verifier unavailable");
+    return false;
+  }
+  return Promise.all(pending).then((results) => {
+    if (results.some((valid) => valid === true))
+      return true;
+    if (hadSynchronousError || results.some((valid) => valid === "error")) {
+      throw new Error("manifest signature verifier unavailable");
+    }
+    return false;
+  });
+};
+failGroup_fn = function(track, groupId, group, reason) {
+  if (group.pending.size === 0) {
+    __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, groupId, objectId: 0 }, reason);
+    return;
+  }
+  for (const pending of [...group.pending.values()]) {
+    __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+    __privateMethod(this, _ManifestVerifier_instances, rejectOrShadow_fn).call(this, pending.identity, pending.release, reason);
+  }
+};
+removePending_fn = function(track, group, pending) {
+  if (group.pending.get(pending.identity.objectId) === pending) {
+    group.pending.delete(pending.identity.objectId);
+  }
+  const index = track.quarantine.indexOf(pending);
+  if (index >= 0)
+    track.quarantine.splice(index, 1);
+  track.quarantinedBytes -= pending.bytes;
+  __privateGet(this, _stats).quarantinedBytes -= pending.bytes;
+};
+quarantine_fn = function(track, group, pending) {
+  if (group.pending.has(pending.identity.objectId))
+    return false;
+  group.pending.set(pending.identity.objectId, pending);
+  track.quarantine.push(pending);
+  track.quarantinedBytes += pending.bytes;
+  __privateGet(this, _stats).quarantinedBytes += pending.bytes;
+  __privateMethod(this, _ManifestVerifier_instances, enforceCap_fn).call(this, track);
+  return true;
+};
+enforceCap_fn = function(track) {
+  while (track.quarantinedBytes > track.capBytes && track.quarantine.length > 0) {
+    const pending = track.quarantine.shift();
+    const group = track.groups.get(BigInt(pending.identity.groupId));
+    if (group)
+      group.pending.delete(pending.identity.objectId);
+    track.quarantinedBytes -= pending.bytes;
+    __privateGet(this, _stats).quarantinedBytes -= pending.bytes;
+    pending.release();
+    __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "manifestAbsent");
+    console.warn(`[ManifestVerifier] quarantine cap eviction fail-open track=${pending.identity.trackName} group=${pending.identity.groupId} object=${pending.identity.objectId}`);
+  }
+};
+failOpenTrack_fn = function(track, reason) {
+  for (const pending of [...track.quarantine]) {
+    const group = track.groups.get(BigInt(pending.identity.groupId));
+    if (group)
+      __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+    pending.release();
+    __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, reason);
+  }
+};
+failOpenGroup_fn = function(track, groupId, group) {
+  const pending = [...group.pending.values()];
+  if (pending.length === 0) {
+    __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, { trackName: track.context.trackName, groupId, objectId: 0 }, "verifierError");
+    return;
+  }
+  for (const object of pending) {
+    __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, object);
+    object.release();
+    __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, object.identity, "verifierError");
+  }
+};
+releaseAllQuarantine_fn = function(countFailure) {
+  for (const track of __privateGet(this, _tracks).values()) {
+    for (const pending of [...track.quarantine]) {
+      const group = track.groups.get(BigInt(pending.identity.groupId));
+      if (group)
+        __privateMethod(this, _ManifestVerifier_instances, removePending_fn).call(this, track, group, pending);
+      pending.release();
+      if (countFailure)
+        __privateMethod(this, _ManifestVerifier_instances, failure_fn).call(this, pending.identity, "verifierError");
+    }
+  }
+};
+failure_fn = function(identity, reason) {
+  var _a;
+  __privateGet(this, _stats).failures[reason]++;
+  (_a = __privateGet(this, _onFailure)) == null ? void 0 : _a.call(this, {
+    trackName: identity.trackName,
+    ...identity.bindingId === void 0 ? {} : { bindingId: identity.bindingId },
+    groupId: identity.groupId,
+    objectId: identity.objectId,
+    reason
+  });
+};
+
+// src/multicast-auth-catalog.ts
+var RAW_ED25519_KEY_LENGTH = 32;
+var SOURCE_AUTH_SCOPE_LENGTH2 = 32;
+var BASE64URL_ALPHABET = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_";
+function encodeBase64Url(bytes) {
+  let output = "";
+  for (let i = 0; i < bytes.length; i += 3) {
+    const b0 = bytes[i];
+    const b1 = bytes[i + 1];
+    const b2 = bytes[i + 2];
+    output += BASE64URL_ALPHABET[b0 >> 2];
+    output += BASE64URL_ALPHABET[(b0 & 3) << 4 | (b1 === void 0 ? 0 : b1 >> 4)];
+    if (b1 === void 0) break;
+    output += BASE64URL_ALPHABET[(b1 & 15) << 2 | (b2 === void 0 ? 0 : b2 >> 6)];
+    if (b2 === void 0) break;
+    output += BASE64URL_ALPHABET[b2 & 63];
+  }
+  return output;
+}
+var BASE64URL_DECODE_TABLE = (() => {
+  const table = new Int8Array(128).fill(-1);
+  for (let i = 0; i < BASE64URL_ALPHABET.length; i++) {
+    table[BASE64URL_ALPHABET.charCodeAt(i)] = i;
+  }
+  return table;
+})();
+function decodeBase64Url(text) {
+  if (text.length % 4 === 1) {
+    throw new Error(`[multicast-auth-catalog] invalid unpadded base64url length for "${text}"`);
+  }
+  const bytes = [];
+  let buffer = 0;
+  let bits = 0;
+  for (let i = 0; i < text.length; i++) {
+    const code = text.charCodeAt(i);
+    const value = code < 128 ? BASE64URL_DECODE_TABLE[code] : -1;
+    if (value === void 0 || value < 0) {
+      throw new Error(`[multicast-auth-catalog] invalid base64url character in "${text}"`);
+    }
+    buffer = buffer << 6 | value;
+    bits += 6;
+    if (bits >= 8) {
+      bits -= 8;
+      bytes.push(buffer >> bits & 255);
+    }
+  }
+  const decoded = Uint8Array.from(bytes);
+  if (encodeBase64Url(decoded) !== text) {
+    throw new Error(`[multicast-auth-catalog] non-canonical base64url encoding "${text}"`);
+  }
+  return decoded;
+}
+function decodeAuthScope(authScope) {
+  const bytes = decodeBase64Url(authScope);
+  if (bytes.byteLength !== SOURCE_AUTH_SCOPE_LENGTH2) {
+    throw new Error(
+      `[multicast-auth-catalog] authScope must decode to ${SOURCE_AUTH_SCOPE_LENGTH2} raw bytes, got ${bytes.byteLength}`
+    );
+  }
+  return bytes;
+}
+function decodeEd25519PublicKey(publicKey) {
+  const bytes = decodeBase64Url(publicKey);
+  if (bytes.byteLength !== RAW_ED25519_KEY_LENGTH) {
+    throw new Error(
+      `[multicast-auth-catalog] public key must decode to ${RAW_ED25519_KEY_LENGTH} raw bytes, got ${bytes.byteLength}`
+    );
+  }
+  return bytes;
+}
+function isNonEmptyString(value) {
+  return typeof value === "string" && value.length > 0;
+}
+function isValidAuthScopeField(value) {
+  if (!isNonEmptyString(value)) return false;
+  try {
+    decodeAuthScope(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function isValidPublicKeyField(value) {
+  if (!isNonEmptyString(value)) return false;
+  try {
+    decodeEd25519PublicKey(value);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function hasOnlyKeys(object, allowed) {
+  const allowedKeys = new Set(allowed);
+  return Object.keys(object).every((key) => allowedKeys.has(key));
+}
+function isMulticastAuthTrackConfig(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const o = obj;
+  return hasOnlyKeys(o, ["mediaTrack", "manifestTrack", "authScope", "sourceSymbolFormat"]) && isNonEmptyString(o["mediaTrack"]) && isNonEmptyString(o["manifestTrack"]) && o["mediaTrack"] !== o["manifestTrack"] && isValidAuthScopeField(o["authScope"]) && isNonEmptyString(o["sourceSymbolFormat"]);
+}
+var VALID_COMPACTION = /* @__PURE__ */ new Set(["merkle", "none"]);
+var VALID_ENFORCEMENT = /* @__PURE__ */ new Set(["shadow", "enforce"]);
+function hasUniqueMulticastAuthTrackBindings(tracks) {
+  const bindings = tracks.flatMap((track) => {
+    if (typeof track !== "object" || track === null) return [];
+    const value = track;
+    if (typeof value["mediaTrack"] !== "string" || typeof value["sourceSymbolFormat"] !== "string") {
+      return [];
+    }
+    return [JSON.stringify([value["mediaTrack"], value["sourceSymbolFormat"]])];
+  });
+  return new Set(bindings).size === bindings.length;
+}
+function isMulticastAuthConfig(obj) {
+  if (typeof obj !== "object" || obj === null) return false;
+  const o = obj;
+  if (o["scheme"] !== "bc-provenance") return false;
+  if (o["hash"] !== "blake3") return false;
+  if (o["sig"] !== "ed25519") return false;
+  if (!hasOnlyKeys(o, ["scheme", "hash", "sig", "publicKey", "keyId", "previousKey", "compaction", "enforcement", "tracks"])) return false;
+  if (!isValidPublicKeyField(o["publicKey"])) return false;
+  if (!isNonEmptyString(o["keyId"])) return false;
+  if (o["previousKey"] !== void 0 && !isValidPublicKeyField(o["previousKey"])) return false;
+  if (o["previousKey"] === o["publicKey"]) return false;
+  if (typeof o["compaction"] !== "string" || !VALID_COMPACTION.has(o["compaction"])) return false;
+  if (o["enforcement"] !== void 0) {
+    if (typeof o["enforcement"] !== "string" || !VALID_ENFORCEMENT.has(o["enforcement"])) return false;
+  }
+  if (!Array.isArray(o["tracks"]) || o["tracks"].length === 0) return false;
+  const tracks = o["tracks"];
+  if (!tracks.every((t) => isMulticastAuthTrackConfig(t))) return false;
+  const typedTracks = tracks;
+  const scopes = typedTracks.map((t) => t.authScope);
+  if (new Set(scopes).size !== scopes.length) return false;
+  if (!hasUniqueMulticastAuthTrackBindings(typedTracks)) return false;
+  const manifestTracks = typedTracks.map((t) => t.manifestTrack);
+  if (new Set(manifestTracks).size !== manifestTracks.length) return false;
+  return true;
+}
+function resolveMulticastAuthMode(playerMode, auth) {
+  if (playerMode !== void 0) return playerMode;
+  if (auth === void 0) return "off";
+  return auth.enforcement ?? "shadow";
+}
+function resolveMulticastAuthCatalog(catalog, playerMode) {
+  if (typeof catalog !== "object" || catalog === null || Array.isArray(catalog)) {
+    throw new Error("[multicast-auth-catalog] catalog must be an object");
+  }
+  const root = catalog;
+  const rawAuth = root["multicast.auth"];
+  if (rawAuth === void 0) {
+    if (playerMode === "enforce") {
+      throw new Error("[multicast-auth-catalog] player enforce mode requires multicast.auth");
+    }
+    return void 0;
+  }
+  if (!isMulticastAuthConfig(rawAuth)) {
+    throw new Error("[multicast-auth-catalog] invalid multicast.auth v2 block");
+  }
+  const rawTracks = root["tracks"];
+  if (!Array.isArray(rawTracks)) {
+    throw new Error("[multicast-auth-catalog] catalog tracks must be an array");
+  }
+  const catalogTrackNames = new Set(
+    rawTracks.flatMap(
+      (track) => typeof track === "object" && track !== null && typeof track["name"] === "string" ? [track["name"]] : []
+    )
+  );
+  for (const track of rawAuth.tracks) {
+    if (!catalogTrackNames.has(track.mediaTrack)) {
+      throw new Error(`[multicast-auth-catalog] unknown mediaTrack "${track.mediaTrack}"`);
+    }
+    if (!catalogTrackNames.has(track.manifestTrack)) {
+      throw new Error(`[multicast-auth-catalog] unknown manifestTrack "${track.manifestTrack}"`);
+    }
+  }
+  return {
+    keyId: rawAuth.keyId,
+    acceptedPublicKeys: [
+      decodeEd25519PublicKey(rawAuth.publicKey),
+      ...rawAuth.previousKey === void 0 ? [] : [decodeEd25519PublicKey(rawAuth.previousKey)]
+    ],
+    mode: resolveMulticastAuthMode(playerMode, rawAuth),
+    compaction: rawAuth.compaction,
+    tracks: rawAuth.tracks.map((track) => ({
+      ...track,
+      authScope: decodeAuthScope(track.authScope)
+    }))
+  };
+}
+
+// src/manifest-auth-plan.ts
+function createManifestAuthPlan(catalog, options) {
+  const resolved = resolveMulticastAuthCatalog(catalog, options.playerMode);
+  if (!resolved || resolved.mode === "off") return void 0;
+  const verifier = new ManifestVerifier({
+    manifestAuth: {
+      mode: resolved.mode,
+      onMissingManifest: options.onMissingManifest ?? (resolved.mode === "enforce" ? "stall" : "fallback-shadow")
+    },
+    verifySignature: options.verifySignature,
+    ...options.onFailure === void 0 ? {} : { onFailure: options.onFailure }
+  });
+  const byManifestTrack = /* @__PURE__ */ new Map();
+  const bindings = resolved.tracks.map((binding) => {
+    const bindingId = manifestBindingId(binding.mediaTrack, binding.sourceSymbolFormat);
+    const planned = {
+      bindingId,
+      mediaTrack: binding.mediaTrack,
+      manifestTrack: binding.manifestTrack,
+      sourceSymbolFormat: binding.sourceSymbolFormat
+    };
+    verifier.registerTrack({
+      ...options.contextFor(binding, resolved),
+      bindingId,
+      trackName: binding.mediaTrack,
+      sourceSymbolFormat: binding.sourceSymbolFormat,
+      authScope: binding.authScope,
+      publicKey: resolved.acceptedPublicKeys[0],
+      acceptedPublicKeys: resolved.acceptedPublicKeys
+    });
+    byManifestTrack.set(binding.manifestTrack, planned);
+    return planned;
+  });
+  let disposed = false;
+  return {
+    verifier,
+    mode: resolved.mode,
+    bindings,
+    manifestTracks: [...byManifestTrack.keys()],
+    bindingIdFor(mediaTrack, sourceSymbolFormat) {
+      const bindingId = manifestBindingId(mediaTrack, sourceSymbolFormat);
+      return bindings.some((binding) => binding.bindingId === bindingId) ? bindingId : void 0;
+    },
+    ingestManifestPayload(manifestTrack, payload) {
+      const binding = byManifestTrack.get(manifestTrack);
+      if (!binding) throw new Error(`unknown manifest subscription track ${manifestTrack}`);
+      verifier.ingestManifestFrame(binding.bindingId, payload);
+    },
+    dispose() {
+      if (disposed) return;
+      disposed = true;
+      verifier.dispose();
+    }
+  };
+}
+export {
+  createManifestAuthPlan
+};
+/*! Bundled license information:
+
+@noble/hashes/esm/utils.js:
+  (*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) *)
+*/
+//# sourceMappingURL=manifest-auth-plan.js.map