@blockcast/mmt-container 0.1.0 → 0.3.0-main.d9354616fdf2

package/node_modules/@blockcast/mmt-alta-parse/dist/index.d.ts

@@ -0,0 +1,57 @@
+/**
+ * Zero-dependency helper for extracting the detached ALTA authenticator trailer
+ * from an MMTP source packet.
+ *
+ * Lives in its own leaf package so both `@blockcast/mmt-container` (wire-path
+ * parsing) and `@blockcast/fec-worker` (FEC-recovered-source parsing) can share
+ * one implementation without creating a package cycle between them.
+ *
+ * Spec: ISO/IEC 23008-1:2023 + draft-ramadan-moq-mmt §12 (detached trailer, Path 2).
+ */
+/**
+ * MMTP header-extension ext_type assigned to the detached ALTA authenticator
+ * trailer (Path 2 / 08-07). Carried in an `[ext_type][ext_length][auth]`
+ * block appended after the MPU's declared payload bytes, before the 4-byte
+ * Source FEC Payload ID. MMTP X-bit stays 0 — non-ALTA MMTP receivers treat
+ * the trailer as bytes past `payload_length` and skip it (per ISO 23008-1
+ * §9.2.2 "may be discarded without impacting correct processing").
+ */
+export declare const MMTP_EXT_TYPE_ALTA_AUTH = 61601;
+/** Fixed size of the trailer's `[ext_type][ext_length]` prefix (2 + 2 BE). */
+export declare const MMTP_EXT_TRAILER_HEADER_SIZE = 4;
+/** Result of extracting the detached ALTA authenticator from an MMTP packet. */
+export interface AltaTrailer {
+    /** Authenticator bytes (no ext_type/ext_length prefix, no trailing padding). */
+    auth: Uint8Array;
+    /**
+     * Wire-packet byte offset where the signed payload ends, i.e. where the
+     * trailer begins. Caller uses this to produce
+     * `payload = wirePacket.subarray(0, signedEnd)` for verify_detached.
+     */
+    signedEnd: number;
+}
+/**
+ * Extract the detached ALTA authenticator trailer from an MMTP source packet.
+ *
+ * Wire layout:
+ *   `[MMTP hdr][length(2)][remaining MPU hdr(6)][DU?][media][TRAILER][SS_ID?]`
+ *   `payload_length = 6 + DU bytes + media bytes`
+ *
+ * Returns `null` when:
+ * - the packet is too small / malformed,
+ * - `payload_length` cannot contain the remaining six MPU-header bytes,
+ * - the declared payload overruns the packet,
+ * - no bytes remain between `payload_length` and the SS_ID,
+ * - the trailer's `ext_type` isn't {@link MMTP_EXT_TYPE_ALTA_AUTH},
+ * - the declared `ext_length` would extend past the SS_ID boundary.
+ *
+ * Non-MPU packets (repair, signaling) always return `null`.
+ *
+ * @param options.skipFecId When true, do NOT reserve 4 trailing bytes for the
+ *   Source FEC Payload ID. Use on FEC-recovered symbols where the PID has
+ *   already been stripped upstream.
+ */
+export declare function extractAltaTrailer(mmtpPacket: Uint8Array, options?: {
+    skipFecId?: boolean;
+}): AltaTrailer | null;
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@blockcast/mmt-alta-parse/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAiBH;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAS,CAAA;AAE7C,8EAA8E;AAC9E,eAAO,MAAM,4BAA4B,IAAI,CAAA;AAE7C,gFAAgF;AAChF,MAAM,WAAW,WAAW;IAC1B,gFAAgF;IAChF,IAAI,EAAE,UAAU,CAAA;IAChB;;;;OAIG;IACH,SAAS,EAAE,MAAM,CAAA;CAClB;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,UAAU,EACtB,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,OAAO,CAAA;CAAE,GAChC,WAAW,GAAG,IAAI,CA4DpB"}

package/node_modules/@blockcast/mmt-alta-parse/dist/index.js

@@ -0,0 +1,115 @@
+/**
+ * Zero-dependency helper for extracting the detached ALTA authenticator trailer
+ * from an MMTP source packet.
+ *
+ * Lives in its own leaf package so both `@blockcast/mmt-container` (wire-path
+ * parsing) and `@blockcast/fec-worker` (FEC-recovered-source parsing) can share
+ * one implementation without creating a package cycle between them.
+ *
+ * Spec: ISO/IEC 23008-1:2023 + draft-ramadan-moq-mmt §12 (detached trailer, Path 2).
+ */
+// --- Private MMTP/MPU/MFU constants (ISO/IEC 23008-1 §9.2.2–9.2.3) ---
+// Duplicated here as immutable spec values so this package stays a leaf with
+// zero `@blockcast/*` dependencies. Re-deriving from `mmt-container` would
+// reintroduce the package cycle this split exists to avoid.
+const MMTP_HEADER_SIZE = 12;
+const MPU_HEADER_SIZE = 8;
+const MPU_LENGTH_FIELD_SIZE = 2;
+const MPU_HEADER_REMAINDER_SIZE = MPU_HEADER_SIZE - MPU_LENGTH_FIELD_SIZE;
+const TIMED_MFU_DU_HEADER_SIZE = 14;
+const NONTIMED_MFU_DU_HEADER_SIZE = 4;
+const PACKET_TYPE_MPU = 0x00;
+// --- Public ALTA trailer constants ---
+/**
+ * MMTP header-extension ext_type assigned to the detached ALTA authenticator
+ * trailer (Path 2 / 08-07). Carried in an `[ext_type][ext_length][auth]`
+ * block appended after the MPU's declared payload bytes, before the 4-byte
+ * Source FEC Payload ID. MMTP X-bit stays 0 — non-ALTA MMTP receivers treat
+ * the trailer as bytes past `payload_length` and skip it (per ISO 23008-1
+ * §9.2.2 "may be discarded without impacting correct processing").
+ */
+export const MMTP_EXT_TYPE_ALTA_AUTH = 0xf0a1;
+/** Fixed size of the trailer's `[ext_type][ext_length]` prefix (2 + 2 BE). */
+export const MMTP_EXT_TRAILER_HEADER_SIZE = 4;
+/**
+ * Extract the detached ALTA authenticator trailer from an MMTP source packet.
+ *
+ * Wire layout:
+ *   `[MMTP hdr][length(2)][remaining MPU hdr(6)][DU?][media][TRAILER][SS_ID?]`
+ *   `payload_length = 6 + DU bytes + media bytes`
+ *
+ * Returns `null` when:
+ * - the packet is too small / malformed,
+ * - `payload_length` cannot contain the remaining six MPU-header bytes,
+ * - the declared payload overruns the packet,
+ * - no bytes remain between `payload_length` and the SS_ID,
+ * - the trailer's `ext_type` isn't {@link MMTP_EXT_TYPE_ALTA_AUTH},
+ * - the declared `ext_length` would extend past the SS_ID boundary.
+ *
+ * Non-MPU packets (repair, signaling) always return `null`.
+ *
+ * @param options.skipFecId When true, do NOT reserve 4 trailing bytes for the
+ *   Source FEC Payload ID. Use on FEC-recovered symbols where the PID has
+ *   already been stripped upstream.
+ */
+export function extractAltaTrailer(mmtpPacket, options) {
+    if (mmtpPacket.length < MMTP_HEADER_SIZE + MPU_HEADER_SIZE)
+        return null;
+    // ISO/IEC 23008-1:2023 Figure 8 places V=0 packet_type in the low six bits.
+    const packetType = mmtpPacket[1] & 0x3f;
+    if (packetType !== PACKET_TYPE_MPU)
+        return null;
+    const fecType = (mmtpPacket[0] >> 3) & 0x03;
+    let headerLength = MMTP_HEADER_SIZE;
+    if (fecType < 2 && (mmtpPacket[0] & 0x20) !== 0)
+        headerLength += 4;
+    if (fecType < 2 && (mmtpPacket[0] & 0x02) !== 0) {
+        if (headerLength + 4 > mmtpPacket.length)
+            return null;
+        const extensionLength = new DataView(mmtpPacket.buffer, mmtpPacket.byteOffset + headerLength + 2, 2).getUint16(0, false);
+        headerLength += 4 + extensionLength;
+    }
+    if (headerLength + MPU_HEADER_SIZE > mmtpPacket.length)
+        return null;
+    const payload = mmtpPacket.subarray(headerLength);
+    // Inline a minimal MPU-header read — only the fields extractAltaTrailer needs.
+    // payloadLength: 16 BE at bytes 0-1.
+    // Byte 2 packs FT(4) | T(1) | FI(2) | A(1).
+    const payloadLength = (payload[0] << 8) | payload[1];
+    const flagsByte = payload[2];
+    const fragmentType = (flagsByte >> 4) & 0x0f;
+    const timed = ((flagsByte >> 3) & 0x01) === 1;
+    const fragmentationIndicator = (flagsByte >> 1) & 0x03;
+    // Only MFU packets (FT=2) carry the detached trailer.
+    if (fragmentType !== 2)
+        return null;
+    // FI=0/1 structurally carries a DU header; FI=2/3 does not. Require at
+    // least one media byte after that deterministic layout so the bytes at the
+    // declared boundary cannot impersonate ALTA for a header-only fragment.
+    const dataUnitHeaderSize = fragmentationIndicator <= 1
+        ? (timed ? TIMED_MFU_DU_HEADER_SIZE : NONTIMED_MFU_DU_HEADER_SIZE)
+        : 0;
+    if (payloadLength <= MPU_HEADER_REMAINDER_SIZE + dataUnitHeaderSize)
+        return null;
+    if (fecType > 1)
+        return null;
+    const hasFecId = !options?.skipFecId && fecType === 1;
+    const payloadEnd = hasFecId ? payload.length - 4 : payload.length;
+    const declaredEnd = MPU_LENGTH_FIELD_SIZE + payloadLength;
+    if (declaredEnd > payloadEnd)
+        return null;
+    if (declaredEnd + MMTP_EXT_TRAILER_HEADER_SIZE > payloadEnd)
+        return null;
+    const extType = (payload[declaredEnd] << 8) | payload[declaredEnd + 1];
+    if (extType !== MMTP_EXT_TYPE_ALTA_AUTH)
+        return null;
+    const extLen = (payload[declaredEnd + 2] << 8) | payload[declaredEnd + 3];
+    const authStart = declaredEnd + MMTP_EXT_TRAILER_HEADER_SIZE;
+    if (authStart + extLen !== payloadEnd)
+        return null;
+    return {
+        auth: payload.subarray(authStart, payloadEnd),
+        signedEnd: headerLength + declaredEnd,
+    };
+}
+//# sourceMappingURL=index.js.map

package/node_modules/@blockcast/mmt-alta-parse/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,wEAAwE;AACxE,6EAA6E;AAC7E,2EAA2E;AAC3E,4DAA4D;AAE5D,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,MAAM,eAAe,GAAG,CAAC,CAAA;AACzB,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAC/B,MAAM,yBAAyB,GAAG,eAAe,GAAG,qBAAqB,CAAA;AACzE,MAAM,wBAAwB,GAAG,EAAE,CAAA;AACnC,MAAM,2BAA2B,GAAG,CAAC,CAAA;AACrC,MAAM,eAAe,GAAG,IAAI,CAAA;AAE5B,wCAAwC;AAExC;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAA;AAE7C,8EAA8E;AAC9E,MAAM,CAAC,MAAM,4BAA4B,GAAG,CAAC,CAAA;AAc7C;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAAsB,EACtB,OAAiC;IAEjC,IAAI,UAAU,CAAC,MAAM,GAAG,gBAAgB,GAAG,eAAe;QAAE,OAAO,IAAI,CAAA;IACvE,4EAA4E;IAC5E,MAAM,UAAU,GAAG,UAAU,CAAC,CAAC,CAAE,GAAG,IAAI,CAAA;IACxC,IAAI,UAAU,KAAK,eAAe;QAAE,OAAO,IAAI,CAAA;IAE/C,MAAM,OAAO,GAAG,CAAC,UAAU,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAC5C,IAAI,YAAY,GAAG,gBAAgB,CAAA;IACnC,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,YAAY,IAAI,CAAC,CAAA;IACnE,IAAI,OAAO,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,YAAY,GAAG,CAAC,GAAG,UAAU,CAAC,MAAM;YAAE,OAAO,IAAI,CAAA;QACrD,MAAM,eAAe,GAAG,IAAI,QAAQ,CAClC,UAAU,CAAC,MAAM,EACjB,UAAU,CAAC,UAAU,GAAG,YAAY,GAAG,CAAC,EACxC,CAAC,CACF,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAA;QACrB,YAAY,IAAI,CAAC,GAAG,eAAe,CAAA;IACrC,CAAC;IACD,IAAI,YAAY,GAAG,eAAe,GAAG,UAAU,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IAEnE,MAAM,OAAO,GAAG,UAAU,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAA;IAEjD,+EAA+E;IAC/E,qCAAqC;IACrC,4CAA4C;IAC5C,MAAM,aAAa,GAAG,CAAC,OAAO,CAAC,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IACtD,MAAM,SAAS,GAAG,OAAO,CAAC,CAAC,CAAE,CAAA;IAC7B,MAAM,YAAY,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAC5C,MAAM,KAAK,GAAG,CAAC,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAC7C,MAAM,sBAAsB,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAA;IAEtD,sDAAsD;IACtD,IAAI,YAAY,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IAEnC,uEAAuE;IACvE,2EAA2E;IAC3E,wEAAwE;IACxE,MAAM,kBAAkB,GAAG,sBAAsB,IAAI,CAAC;QACpD,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,wBAAwB,CAAC,CAAC,CAAC,2BAA2B,CAAC;QAClE,CAAC,CAAC,CAAC,CAAA;IACL,IAAI,aAAa,IAAI,yBAAyB,GAAG,kBAAkB;QAAE,OAAO,IAAI,CAAA;IAEhF,IAAI,OAAO,GAAG,CAAC;QAAE,OAAO,IAAI,CAAA;IAC5B,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,SAAS,IAAI,OAAO,KAAK,CAAC,CAAA;IACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAA;IACjE,MAAM,WAAW,GAAG,qBAAqB,GAAG,aAAa,CAAA;IACzD,IAAI,WAAW,GAAG,UAAU;QAAE,OAAO,IAAI,CAAA;IAEzC,IAAI,WAAW,GAAG,4BAA4B,GAAG,UAAU;QAAE,OAAO,IAAI,CAAA;IACxE,MAAM,OAAO,GAAG,CAAC,OAAO,CAAC,WAAW,CAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,CAAC,CAAE,CAAA;IACxE,IAAI,OAAO,KAAK,uBAAuB;QAAE,OAAO,IAAI,CAAA;IACpD,MAAM,MAAM,GAAG,CAAC,OAAO,CAAC,WAAW,GAAG,CAAC,CAAE,IAAI,CAAC,CAAC,GAAG,OAAO,CAAC,WAAW,GAAG,CAAC,CAAE,CAAA;IAE3E,MAAM,SAAS,GAAG,WAAW,GAAG,4BAA4B,CAAA;IAC5D,IAAI,SAAS,GAAG,MAAM,KAAK,UAAU;QAAE,OAAO,IAAI,CAAA;IAElD,OAAO;QACL,IAAI,EAAE,OAAO,CAAC,QAAQ,CAAC,SAAS,EAAE,UAAU,CAAC;QAC7C,SAAS,EAAE,YAAY,GAAG,WAAW;KACtC,CAAA;AACH,CAAC"}

package/node_modules/@blockcast/mmt-alta-parse/package.json

@@ -0,0 +1,50 @@
+{
+  "name": "@blockcast/mmt-alta-parse",
+  "version": "0.3.0",
+  "description": "Zero-dependency leaf: extract the detached ALTA authenticator trailer from an MMTP source packet",
+  "type": "module",
+  "main": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "src",
+    "!src/**/*.test.ts",
+    "!src/**/*.spec.ts",
+    "!src/**/__tests__",
+    "!dist/**/*.test.*",
+    "!dist/**/*.spec.*"
+  ],
+  "scripts": {
+    "build": "tsc",
+    "dev": "tsc --watch",
+    "clean": "rm -rf dist",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "test:watch": "vitest"
+  },
+  "dependencies": {},
+  "devDependencies": {
+    "typescript": "^5.3.0",
+    "vitest": "^1.0.0"
+  },
+  "keywords": [
+    "mmt",
+    "mmtp",
+    "alta",
+    "authenticator",
+    "trailer",
+    "iso23008-1"
+  ],
+  "license": "Apache-2.0",
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/Blockcast/libmmt.git",
+    "directory": "packages/mmt-alta-parse"
+  }
+}

package/node_modules/@blockcast/mmt-alta-parse/src/index.ts

@@ -0,0 +1,136 @@
+/**
+ * Zero-dependency helper for extracting the detached ALTA authenticator trailer
+ * from an MMTP source packet.
+ *
+ * Lives in its own leaf package so both `@blockcast/mmt-container` (wire-path
+ * parsing) and `@blockcast/fec-worker` (FEC-recovered-source parsing) can share
+ * one implementation without creating a package cycle between them.
+ *
+ * Spec: ISO/IEC 23008-1:2023 + draft-ramadan-moq-mmt §12 (detached trailer, Path 2).
+ */
+
+// --- Private MMTP/MPU/MFU constants (ISO/IEC 23008-1 §9.2.2–9.2.3) ---
+// Duplicated here as immutable spec values so this package stays a leaf with
+// zero `@blockcast/*` dependencies. Re-deriving from `mmt-container` would
+// reintroduce the package cycle this split exists to avoid.
+
+const MMTP_HEADER_SIZE = 12
+const MPU_HEADER_SIZE = 8
+const MPU_LENGTH_FIELD_SIZE = 2
+const MPU_HEADER_REMAINDER_SIZE = MPU_HEADER_SIZE - MPU_LENGTH_FIELD_SIZE
+const TIMED_MFU_DU_HEADER_SIZE = 14
+const NONTIMED_MFU_DU_HEADER_SIZE = 4
+const PACKET_TYPE_MPU = 0x00
+
+// --- Public ALTA trailer constants ---
+
+/**
+ * MMTP header-extension ext_type assigned to the detached ALTA authenticator
+ * trailer (Path 2 / 08-07). Carried in an `[ext_type][ext_length][auth]`
+ * block appended after the MPU's declared payload bytes, before the 4-byte
+ * Source FEC Payload ID. MMTP X-bit stays 0 — non-ALTA MMTP receivers treat
+ * the trailer as bytes past `payload_length` and skip it (per ISO 23008-1
+ * §9.2.2 "may be discarded without impacting correct processing").
+ */
+export const MMTP_EXT_TYPE_ALTA_AUTH = 0xf0a1
+
+/** Fixed size of the trailer's `[ext_type][ext_length]` prefix (2 + 2 BE). */
+export const MMTP_EXT_TRAILER_HEADER_SIZE = 4
+
+/** Result of extracting the detached ALTA authenticator from an MMTP packet. */
+export interface AltaTrailer {
+  /** Authenticator bytes (no ext_type/ext_length prefix, no trailing padding). */
+  auth: Uint8Array
+  /**
+   * Wire-packet byte offset where the signed payload ends, i.e. where the
+   * trailer begins. Caller uses this to produce
+   * `payload = wirePacket.subarray(0, signedEnd)` for verify_detached.
+   */
+  signedEnd: number
+}
+
+/**
+ * Extract the detached ALTA authenticator trailer from an MMTP source packet.
+ *
+ * Wire layout:
+ *   `[MMTP hdr][length(2)][remaining MPU hdr(6)][DU?][media][TRAILER][SS_ID?]`
+ *   `payload_length = 6 + DU bytes + media bytes`
+ *
+ * Returns `null` when:
+ * - the packet is too small / malformed,
+ * - `payload_length` cannot contain the remaining six MPU-header bytes,
+ * - the declared payload overruns the packet,
+ * - no bytes remain between `payload_length` and the SS_ID,
+ * - the trailer's `ext_type` isn't {@link MMTP_EXT_TYPE_ALTA_AUTH},
+ * - the declared `ext_length` would extend past the SS_ID boundary.
+ *
+ * Non-MPU packets (repair, signaling) always return `null`.
+ *
+ * @param options.skipFecId When true, do NOT reserve 4 trailing bytes for the
+ *   Source FEC Payload ID. Use on FEC-recovered symbols where the PID has
+ *   already been stripped upstream.
+ */
+export function extractAltaTrailer(
+  mmtpPacket: Uint8Array,
+  options?: { skipFecId?: boolean },
+): AltaTrailer | null {
+  if (mmtpPacket.length < MMTP_HEADER_SIZE + MPU_HEADER_SIZE) return null
+  // ISO/IEC 23008-1:2023 Figure 8 places V=0 packet_type in the low six bits.
+  const packetType = mmtpPacket[1]! & 0x3f
+  if (packetType !== PACKET_TYPE_MPU) return null
+
+  const fecType = (mmtpPacket[0]! >> 3) & 0x03
+  let headerLength = MMTP_HEADER_SIZE
+  if (fecType < 2 && (mmtpPacket[0]! & 0x20) !== 0) headerLength += 4
+  if (fecType < 2 && (mmtpPacket[0]! & 0x02) !== 0) {
+    if (headerLength + 4 > mmtpPacket.length) return null
+    const extensionLength = new DataView(
+      mmtpPacket.buffer,
+      mmtpPacket.byteOffset + headerLength + 2,
+      2,
+    ).getUint16(0, false)
+    headerLength += 4 + extensionLength
+  }
+  if (headerLength + MPU_HEADER_SIZE > mmtpPacket.length) return null
+
+  const payload = mmtpPacket.subarray(headerLength)
+
+  // Inline a minimal MPU-header read — only the fields extractAltaTrailer needs.
+  // payloadLength: 16 BE at bytes 0-1.
+  // Byte 2 packs FT(4) | T(1) | FI(2) | A(1).
+  const payloadLength = (payload[0]! << 8) | payload[1]!
+  const flagsByte = payload[2]!
+  const fragmentType = (flagsByte >> 4) & 0x0f
+  const timed = ((flagsByte >> 3) & 0x01) === 1
+  const fragmentationIndicator = (flagsByte >> 1) & 0x03
+
+  // Only MFU packets (FT=2) carry the detached trailer.
+  if (fragmentType !== 2) return null
+
+  // FI=0/1 structurally carries a DU header; FI=2/3 does not. Require at
+  // least one media byte after that deterministic layout so the bytes at the
+  // declared boundary cannot impersonate ALTA for a header-only fragment.
+  const dataUnitHeaderSize = fragmentationIndicator <= 1
+    ? (timed ? TIMED_MFU_DU_HEADER_SIZE : NONTIMED_MFU_DU_HEADER_SIZE)
+    : 0
+  if (payloadLength <= MPU_HEADER_REMAINDER_SIZE + dataUnitHeaderSize) return null
+
+  if (fecType > 1) return null
+  const hasFecId = !options?.skipFecId && fecType === 1
+  const payloadEnd = hasFecId ? payload.length - 4 : payload.length
+  const declaredEnd = MPU_LENGTH_FIELD_SIZE + payloadLength
+  if (declaredEnd > payloadEnd) return null
+
+  if (declaredEnd + MMTP_EXT_TRAILER_HEADER_SIZE > payloadEnd) return null
+  const extType = (payload[declaredEnd]! << 8) | payload[declaredEnd + 1]!
+  if (extType !== MMTP_EXT_TYPE_ALTA_AUTH) return null
+  const extLen = (payload[declaredEnd + 2]! << 8) | payload[declaredEnd + 3]!
+
+  const authStart = declaredEnd + MMTP_EXT_TRAILER_HEADER_SIZE
+  if (authStart + extLen !== payloadEnd) return null
+
+  return {
+    auth: payload.subarray(authStart, payloadEnd),
+    signedEnd: headerLength + declaredEnd,
+  }
+}

package/node_modules/@blockcast/mmt-base/README.md

@@ -0,0 +1,134 @@
+# @blockcast/mmt-base
+
+The shared MMTP packet-parsing leaf for libmmt's TypeScript packages. It hosts the low-level MMTP / MPU / MFU header parsers, FEC payload-id predicates, and ALTA-trailer extractor — everything that operates on raw MMTP packet bytes **with zero FEC-decode dependency**. RFC 6330 OTI geometry belongs to `@blockcast/mmt-fec`.
+
+It exists for one structural reason. Both `@blockcast/mmt-fec` and `@blockcast/mmt-container` need these primitives. Before this package they lived in `mmt-container`, so `mmt-fec` had to import `mmt-container` for them — while `mmt-container`'s `FecManager` already imports `mmt-fec`. That is a circular dependency. Extracting the primitives into this leaf breaks the cycle: both packages now import **down** into `mmt-base` rather than across into each other. Its only dependency is `@blockcast/mmt-alta-parse` (for the ALTA trailer types it re-exports).
+
+```bash
+pnpm add @blockcast/mmt-base
+```
+
+## Quick start
+
+```ts
+import {
+  unwrapMMTP, extractMFUPayload, extractTimestamp,
+  isFecRepairPacket, hasSourceFecPayloadId,
+  PACKET_TYPE_MPU,
+} from "@blockcast/mmt-base"
+
+const pkt = unwrapMMTP(datagram)            // { header, payload }
+if (pkt.header.packetType === PACKET_TYPE_MPU) {
+  const mfu = extractMFUPayload(datagram)   // { data, fragmentationIndicator, mpuSequenceNumber, ... }
+  const ts  = extractTimestamp(datagram)    // bigint MPU timestamp
+}
+
+if (isFecRepairPacket(datagram)) {
+  // repair flow — hand the payload to @blockcast/mmt-fec
+}
+```
+
+## Exports
+
+Single entry point — `package.json#exports` declares only `.`, and `src/index.ts` re-exports the packet primitives. Group them as three families:
+
+### Header, MPU & MFU parsing
+
+| Symbol | Kind | Purpose |
+|--------|------|---------|
+| `parseMMTPHeader` | function | Parse the 12-byte MMTP header → `MMTPHeader` |
+| `unwrapMMTP` | function | Header + payload split → `MMTPPacket` |
+| `parseMPUHeader` | function | Parse the 8-byte MPU header → `MPUHeader` |
+| `extractMFUPayload` | function | Pull the MFU data unit out of an MMTP packet → `MFUExtraction` (handles timed `T=1` and non-timed `T=0` DU headers) |
+| `extractNALUnit` | function | Extract the NAL unit bytes from an MMTP packet |
+| `extractTimestamp` | function | MPU presentation timestamp as `bigint` |
+| `MMTPHeader`, `MPUHeader`, `MMTPPacket`, `MFUExtraction` | type | Parsed-structure shapes |
+| `MMTP_HEADER_SIZE` (12), `MPU_HEADER_SIZE` (8), `MFU_DU_HEADER_SIZE_TIMED` (14), `MFU_DU_HEADER_SIZE_NONTIMED` (4) | const | Fixed header sizes |
+| `PACKET_TYPE_MPU` (0x00), `PACKET_TYPE_SIGNALING` (0x02), `PACKET_TYPE_REPAIR` (0x03) | const | MMTP `packet_type` values |
+
+MPU `payload_length` is interpreted strictly as ISO's length-after-field value: six remaining MPU-header bytes plus the data-unit header and media. ALTA and Source FEC Payload ID suffixes are outside that span; malformed, zero-length, media-only, and ambiguous declarations are rejected.
+
+### FEC payload-id, repair & AL-FEC signaling
+
+| Symbol | Kind | Purpose |
+|--------|------|---------|
+| `isFecRepairPacket` | function | Is this a `PACKET_TYPE_REPAIR` packet? |
+| `hasSourceFecPayloadId` | function | Strict predicate for a source packet's declared four-byte FEC payload ID |
+| `extractFecPayloadId` | function | `{ ssId }` from a source packet's FEC payload id (or `null`) |
+| `extractRepairFecPayloadId` | function | Repair-flow FEC payload id (13-byte, `REPAIR_FEC_PID_SIZE`) |
+| `parseMoqRepairFrame` | function | Strictly parse a mode-0 MMTP Annex C repair frame → `MoqRepairFrame` |
+| `MoqRepairFrame` | type | Repair-frame shape |
+| `ALFEC_MESSAGE_ID` (0x0203), `FEC_CODE_XOR` (1), `FEC_CODE_RAPTORQ` (2), `REPAIR_FEC_PID_SIZE` (13) | const | AL-FEC signaling + payload-id constants |
+| `MMTP_SIGNALING_PACKET_ID` (0), `MMTP_PACKET_ID_MAX` (0xffff) | const | Signaling-flow `packet_id` (never a track's) and the 16-bit `packet_id` ceiling; a track's `packet_id` is 1..65535 |
+
+### Signalling messages (`signalling.ts`, packet_id 0)
+
+Total parsers (malformed or unsupported input → `null`, never a throw), per
+ISO/IEC 23008-1:2023 9.3.4.2, 10.2-10.3, 10.6 and Annex C Table C.3 as
+replaced by Amd 1:2025.
+
+| Symbol | Kind | Purpose |
+|--------|------|---------|
+| `parseSignallingPayload` | function | Split a signalling packet into complete messages; reports the payload form: `iso-9.3.4.2` (Figure 15 header) or `legacy-bare-alfec` (message 0x0203 directly after the MMTP header, recognised by its exact `0x02 0x03` peek) |
+| `parseSignallingPacket` | function | Decode every message of a signalling packet → `al-fec` / `pa` / `mpt` / `other` |
+| `parseAlFecMessage`, `parseAlFecMessageBody` | function | Every FEC flow of an AL-FEC message: all asset packet_ids, one-stage / two-stage / LA-FEC repair flows, private fields → `AlFecMessage` |
+| `alFecRaptorQFlowConfig` | function | One flow's decoder geometry under the Blockcast one-stage RaptorQ profile (private field = OTI + interleave depth) → `AlFecRaptorQFlowConfig` |
+| `parsePaMessageBody`, `parseMptMessageBody`, `parseMpTable`, `mpAssetPacketIds` | function | PA / MPT messages and the MP table: asset → packet_id mapping |
+
+### ALTA trailer (re-exported from `@blockcast/mmt-alta-parse`)
+
+| Symbol | Kind | Purpose |
+|--------|------|---------|
+| `extractAltaTrailer` | function | Extract the ALTA authentication trailer from an MMTP packet |
+| `AltaTrailer` | type | Parsed trailer shape |
+| `MMTP_EXT_TYPE_ALTA_AUTH`, `MMTP_EXT_TRAILER_HEADER_SIZE` | const | ALTA extension-header identifiers |
+
+These four are re-exported so callers that already pull MMTP primitives from here don't need a second import from `@blockcast/mmt-alta-parse` just for the trailer.
+
+## Why this package exists
+
+```
+        before                                   after
+   ┌──────────────┐                       ┌──────────────┐
+   │ mmt-fec      │──needs primitives──►  │ mmt-fec      │─┐
+   └──────────────┘                       └──────────────┘ │ import down
+   ┌──────────────┐                       ┌──────────────┐ │
+   │ mmt-container│◄─FecManager needs─┐   │ mmt-container│─┤
+   │  (hosts the  │   mmt-fec         │   └──────────────┘ │
+   │  primitives) │───────────────────┘                    ▼
+   └──────────────┘   ⟲ CYCLE              ┌──────────────────────────┐
+                                           │ @blockcast/mmt-base      │
+                                           │ (MMTP/MPU/MFU/PID)       │
+                                           └──────────────────────────┘
+```
+
+- `@blockcast/mmt-fec` imports the parsers in `src/block-processor.ts` (splitting a decoded FEC block back into MFU fragments).
+- `@blockcast/mmt-container` imports these primitives directly. The obsolete
+  container re-export shim and `@blockcast/mmt-container/mmtp` subpath were
+  removed so there is one parser authority.
+
+Keep this package dependency-light. OTI geometry and anything that needs the WASM FEC decoder belong in `@blockcast/mmt-fec`; anything that needs catalog/CMAF/reassembly state belongs in `@blockcast/mmt-container`. `mmt-base` stays pure MMTP packet parsing so both can depend on it without pulling in the other.
+
+## Build & test
+
+```bash
+npm run build       # tsc → dist/
+npm run typecheck   # tsc --noEmit
+npm test            # vitest run
+```
+
+The direct suite owns header parsing, MFU extraction, payload-ID predicates,
+declared-boundary rejection, C/X optional headers, and
+ALTA/FEC suffix coverage. Downstream suites exercise integration only.
+
+## Related packages
+
+| Package | Relationship |
+|---------|-------------|
+| [`@blockcast/mmt-alta-parse`](../mmt-alta-parse) | Only dependency — supplies the ALTA trailer types this package re-exports |
+| [`@blockcast/mmt-fec`](../fec) | Imports these parsers in `block-processor` to turn decoded FEC blocks back into MFU fragments |
+| [`@blockcast/mmt-container`](../container) | Imports these primitives directly and builds the `FecManager`, MFU reassembler, and CMAF demuxer on top |
+
+## License
+
+Apache-2.0 — see `LICENSE`.

package/node_modules/@blockcast/mmt-base/dist/fec-block-profile.d.ts

@@ -0,0 +1,55 @@
+/** The two block profiles a catalog `fec.blockProfile` may name. */
+export type FecBlockProfile = 'k-padded-v1' | 'iso-ssbg1-v1';
+/** Every accepted `fec.blockProfile` token, legacy first. */
+export declare const FEC_BLOCK_PROFILES: readonly FecBlockProfile[];
+/** True for a known block-profile token. */
+export declare function isFecBlockProfile(value: unknown): value is FecBlockProfile;
+/**
+ * Read a required `fec.blockProfile`. Throws on an absent or unknown token:
+ * there is no default and nothing is inferred, because the two profiles carry
+ * identical wire tuples whose repair math differs.
+ *
+ * @param where the catalog path of the field, for the error message.
+ */
+export declare function parseFecBlockProfile(value: unknown, where: string): FecBlockProfile;
+/** ISO/IEC 23008-1 C.3.3 ssbg_mode1: the two-octet packet length field. */
+export declare const SSBG1_LENGTH_FIELD_BYTES = 2;
+/** The largest protected packet an ssbg_mode1 symbol of size T can carry. */
+export declare function ssbg1MaxPacketLength(symbolSize: number): number;
+/** Whether a protected packet of `packetLength` bytes fits one T-byte ssbg_mode1 symbol. */
+export declare function ssbg1FitsSymbol(packetLength: number, symbolSize: number): boolean;
+/**
+ * Build one ssbg_mode1 source symbol (C.3.3): the protected packet's length
+ * in two octets, network byte order, then the packet, then zero octets up to
+ * T. The protected packet is the MMTP packet before its Source FEC Payload ID
+ * is appended (C.4.2).
+ *
+ * @throws when `length + 2 > T`: the packet cannot be protected under this
+ * profile, and silently truncating it would corrupt every repair symbol.
+ */
+export declare function buildSsbg1SourceSymbol(packet: Uint8Array, symbolSize: number): Uint8Array;
+/**
+ * Recover the protected packet from one ssbg_mode1 source symbol: the bytes
+ * the length field names. Returns null, never a guess, when the length field
+ * points past the symbol or any padding octet is non-zero (C.3.3 padding is
+ * all 00h), since either means the recovered symbol is not what was sent.
+ */
+export declare function trimSsbg1SourceSymbol(symbol: Uint8Array): Uint8Array | null;
+/** The SS_ID after the last source symbol of `[ssStart, ssStart + ssbLength)`. */
+export declare function isoBlockEnd(ssStart: number, ssbLength: number): number;
+/**
+ * Range membership (C.5.2, C.5.3): whether `ssId` is one of the
+ * `ssbLength` consecutive SS_IDs starting at `ssStart`, modulo 2^32.
+ */
+export declare function isoBlockContains(ssStart: number, ssbLength: number, ssId: number): boolean;
+/**
+ * A lower bound on how many blocks the block starting at `a` lies behind the
+ * one starting at `b` (0 when `a` does not precede `b`). An iso-ssbg1-v1
+ * block holds at most `kMax` source symbols (the catalog `sourceSymbols`, the
+ * AL-FEC maximum_k_for_repair_flow), so `n * kMax` SS_IDs always span at least
+ * `n` blocks. Every interleave horizon in the receiver (decoder retention,
+ * worker retirement, ordered-relay settlement) uses this one bound, so the
+ * manager's horizon can never fall inside the decoder's.
+ */
+export declare function isoBlocksBehindLowerBound(a: number, b: number, kMax: number): number;
+//# sourceMappingURL=fec-block-profile.d.ts.map

package/node_modules/@blockcast/mmt-base/dist/fec-block-profile.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fec-block-profile.d.ts","sourceRoot":"","sources":["../src/fec-block-profile.ts"],"names":[],"mappings":"AAwBA,oEAAoE;AACpE,MAAM,MAAM,eAAe,GAAG,aAAa,GAAG,cAAc,CAAA;AAE5D,6DAA6D;AAC7D,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAGvD,CAAA;AAEF,4CAA4C;AAC5C,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,eAAe,CAUnF;AAED,2EAA2E;AAC3E,eAAO,MAAM,wBAAwB,IAAI,CAAA;AAEzC,6EAA6E;AAC7E,wBAAgB,oBAAoB,CAAC,UAAU,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED,4FAA4F;AAC5F,wBAAgB,eAAe,CAAC,YAAY,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,OAAO,CAOjF;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,GAAG,UAAU,CAczF;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,UAAU,GAAG,IAAI,CAS3E;AAED,kFAAkF;AAClF,wBAAgB,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAEtE;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAE1F;AAED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAKpF"}