@blockcast/mmt-container 0.1.0 → 0.3.0

package/node_modules/@blockcast/fec-worker/dist/fec-worker.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../src/transfer.ts", "../src/block-order.ts", "../src/fec-worker.ts"],
+  "sourcesContent": ["/**\n * Return a fresh ArrayBuffer containing exactly the bytes in `view`.\n *\n * Worker outputs must not transfer buffers that might be owned by a WASM\n * binding or by a larger shared packet. A fresh JS-owned buffer gives\n * postMessage() exclusive ownership without detaching unrelated memory.\n */\nexport function toOwnedArrayBuffer(view: Uint8Array): ArrayBuffer {\n\tconst copy = new Uint8Array(view.byteLength);\n\tcopy.set(view);\n\treturn copy.buffer;\n}\n", "/**\n * Order of K-stride FEC blocks on the 32-bit SS_ID (ISO/IEC 23008-1:2023\n * C.5.2; RFC 1982 serial arithmetic, SERIAL_BITS = 32; BLO-35597 iso:5).\n *\n * Block `sbn` starts at SS_ID `sbn * K mod 2^32`, and blocks are ordered by\n * serial comparison of their starts. That is identical to comparing SBNs\n * with < for any two blocks less than 2^31 SS_IDs apart, so only the order\n * across the SS_ID wrap changes.\n *\n * The canonical helpers are @blockcast/mmt-base `kStrideBlockPrecedes` /\n * `kStrideBlocksBehind`. This worker bundle does not depend on mmt-base, so\n * it carries these two, and block-order.test.ts pins them to the same wrap\n * vectors.\n */\n\nconst SPAN = 0x1_0000_0000;\nconst HALF = 0x8000_0000;\n\nfunction blockStart(sbn: number, k: number): number {\n\t// sbn < 2^32 and k <= 56 403 keep the product below 2^48: exact.\n\treturn (sbn * k) % SPAN;\n}\n\n/** Forward SS_ID distance from block `a`'s start to block `b`'s, or null when `a` does not precede `b`. */\nfunction precedingDistance(a: number, b: number, k: number): number | null {\n\tconst distance = (blockStart(b, k) - blockStart(a, k) + SPAN) % SPAN;\n\treturn distance !== 0 && distance < HALF ? distance : null;\n}\n\n/** Whether block `a` precedes block `b`. */\nexport function blockPrecedes(a: number, b: number, k: number): boolean {\n\treturn precedingDistance(a, b, k) !== null;\n}\n\n/**\n * How many blocks `a` lies behind `b`: 0 unless `a` precedes `b`. Across the\n * wrap the short pre-wrap block (2^32 mod K symbols) counts as one block.\n */\nexport function blocksBehind(a: number, b: number, k: number): number {\n\tconst distance = precedingDistance(a, b, k);\n\treturn distance === null ? 0 : Math.ceil(distance / k);\n}\n\n// --- iso-ssbg1-v1 (ISO/IEC 23008-1 C.3.3 ssbg_mode1; C.5.2/C.5.3) ---------\n//\n// Under the ISO profile SS_ID increments by one per FEC source packet and\n// wraps at 2^32, and a block is the SSB_length consecutive SS_IDs\n// `[SS_Start, SS_Start + SSB_length)`. Blocks are keyed and ordered by their\n// SS_Start, never by an SBN derived from K: the catalog K is only the maximum\n// block length (kMax). The canonical helpers are @blockcast/mmt-base\n// `serial32Distance` / `serial32Precedes` / `isoBlockContains` /\n// `isoBlocksBehindLowerBound`; this bundle carries its own copies (it does not\n// depend on mmt-base), and block-order.test.ts pins them to the same vectors.\n\n/** Forward RFC 1982 distance from `from` to `to` on the 32-bit SS_ID, in 0..2^32-1. */\nexport function serialDistance(from: number, to: number): number {\n\treturn (to - from + SPAN) % SPAN;\n}\n\n/** Whether `a` precedes `b` under RFC 1982 serial comparison (SERIAL_BITS = 32). */\nexport function serialPrecedes(a: number, b: number): boolean {\n\tconst distance = serialDistance(a, b);\n\treturn distance !== 0 && distance < HALF;\n}\n\n/** Whether `ssId` is one of the `ssbLength` consecutive SS_IDs starting at `ssStart`, mod 2^32. */\nexport function isoBlockContains(ssStart: number, ssbLength: number, ssId: number): boolean {\n\treturn serialDistance(ssStart, ssId) < ssbLength;\n}\n\n/** Whether two SS_ID ranges `[start, start + length)` share any SS_ID, mod 2^32. */\nexport function isoBlocksOverlap(\n\taStart: number,\n\taLength: number,\n\tbStart: number,\n\tbLength: number,\n): boolean {\n\treturn isoBlockContains(aStart, aLength, bStart) || isoBlockContains(bStart, bLength, aStart);\n}\n\n/**\n * How many blocks SS_ID `a` lies behind SS_ID `b` (0 unless `a` precedes `b`):\n * a lower bound, because an iso-ssbg1-v1 block holds at most `kMax` source\n * symbols, so `n * kMax` SS_IDs always span at least `n` blocks. This is the\n * one interleave-horizon metric every ISO receiver layer shares (decoder\n * retention, worker retirement, ordered-relay settlement).\n */\nexport function isoBlocksBehind(a: number, b: number, kMax: number): number {\n\tif (!Number.isSafeInteger(kMax) || kMax <= 0) {\n\t\tthrow new Error(`iso-ssbg1-v1 block horizon needs a positive maximum K (got ${kMax})`);\n\t}\n\treturn serialPrecedes(a, b) ? Math.floor(serialDistance(a, b) / kMax) : 0;\n}\n", "/**\n * @blockcast/fec-worker \u2014 Worker Entry Point\n *\n * Runs inside DedicatedWorkerGlobalScope. Receives FecWorkerCommand messages,\n * drives the MmtFecDecoder WASM module, emits FecWorkerEvent messages back.\n *\n * WASM bindings are resolved via:\n *   1. (self as any).__MMT_WASM_BINDINGS__ \u2014 set by consumer's loader/importmap\n *   2. Falls back to error if not available (no defaults)\n *\n * This file must NOT import DOM globals incompatible with Worker scope.\n */\n\nimport type {\n\tFecWorkerCommand,\n\tFecWorkerEvent,\n\tFecTrackConfig,\n\tFecTrackStats,\n\tFecBlockSnapshot,\n\tFrameMeta,\n\tFecBlockProfile,\n} from \"./fec-worker-types.js\";\nimport { toOwnedArrayBuffer } from \"./transfer.js\";\nimport {\n\tblockPrecedes,\n\tblocksBehind,\n\tisoBlockContains,\n\tisoBlocksBehind,\n\tisoBlocksOverlap,\n\tserialDistance,\n\tserialPrecedes,\n} from \"./block-order.js\";\n\n// --- WASM binding types (from mmt-wasm) ---\n// Signatures MUST match a freshly generated external mmt_wasm.d.ts exactly.\n// The decoder derives SBN/ESI internally \u2014 do not pre-compute.\ninterface WasmFecDecoder {\n\t/**\n\t * ISO 23008-1 \u00A7C.5.2: ss_id is the flat 32-bit Source Symbol ID.\n\t * `k-padded-v1`: data is the source symbol. `iso-ssbg1-v1`: data is the\n\t * protected packet, unpadded; the decoder builds the ssbg_mode1 symbol and\n\t * holds it until a repair names the block containing it.\n\t */\n\tadd_source(\n\t\tss_id: number,\n\t\tdata: Uint8Array,\n\t\ttimestamp: number,\n\t): Uint8Array | undefined;\n\t/**\n\t * ISO 23008-1 \u00A7C.5.3. `k-padded-v1`: repair ESI = configured K + rs_id,\n\t * SBN = ss_start / configured K. `iso-ssbg1-v1`: the block is\n\t * `[ss_start, ss_start + ssb_length)` with K' = ssb_length and repair\n\t * ESI = ssb_length + rs_id; a recovered block is ssb_length x T bytes of\n\t * ssbg_mode1 symbols.\n\t */\n\tadd_repair(\n\t\tss_start: number,\n\t\tssb_length: number,\n\t\trs_id: number,\n\t\tdata: Uint8Array,\n\t\ttimestamp: number,\n\t): Uint8Array | undefined;\n\tconfigure_params(k: number, symbolSize: number): void;\n\t/**\n\t * Retire the named blocks (last-chance decode + stats), driven by the\n\t * manager's exact deadlines. Nothing is synthesised for a lost block:\n\t * concealment is the sink's hold-last-good-frame.\n\t */\n\tcleanup_blocks_detailed(sbns: Uint32Array): void;\n\t/**\n\t * `k-padded-v1` only (throws under `iso-ssbg1-v1`): remove decoder blocks\n\t * below its configured live-SBN interleave horizon; returns their SBNs.\n\t */\n\tcleanup_by_sbn(current_sbn: number): Uint32Array;\n\t/**\n\t * `iso-ssbg1-v1` only: remove decoder blocks, and held unplaced sources,\n\t * more than interleaveDepth `isoBlocksBehind` the live SS_ID; returns the\n\t * SS_Starts of the blocks it removed.\n\t */\n\tcleanup_by_ss_start(current: number): Uint32Array;\n\t/** The block profile the decoder was constructed with. */\n\tget_block_profile(): string;\n\tflush(): void;\n\tpending_blocks(): number;\n\treset_stats(): void;\n\tget_stats(): {\n\t\tsource_packets: bigint;\n\t\trepair_packets: bigint;\n\t\tblocks_complete: bigint;\n\t\tblocks_recovered: bigint;\n\t\tblocks_failed: bigint;\n\t\tbytes_recovered: bigint;\n\t\trecovery_rate(): number;\n\t};\n\tfree(): void;\n}\n\ninterface WasmBindings {\n\tinitSync(module: { module: WebAssembly.Module }): unknown;\n\tMmtFecDecoder: new (interleaveDepth: number, blockProfile: FecBlockProfile) => WasmFecDecoder;\n}\n\n// --- Worker state (local to this Worker instance) ---\n\nlet wasmDecoder: WasmFecDecoder | null = null;\nlet config: FecTrackConfig | null = null;\nlet altaEnabled = false;\n// eslint-disable-next-line @typescript-eslint/no-explicit-any\nlet altaVerifier: any = null;  // JsAltaVerifier instance (loaded from ALTA WASM)\nlet snapshotTimer: ReturnType<typeof setInterval> | null = null;\n// blockUpdate events are posted only after a client subscribes (BLO-36599).\nlet blockUpdatesSubscribed = false;\n\n// Block tracking\nconst blocks = new Map<number, FecBlockSnapshot>();\nconst acceptedSourceEsis = new Map<number, Set<number>>();\nconst acceptedRepairEsis = new Map<number, Set<number>>();\n// iso-ssbg1-v1: sources fed to the decoder before any repair named a block\n// containing them, keyed by SS_ID with their arrival time. Map order is\n// arrival order, which the horizon sweep relies on (retireUnplacedSources).\nconst unplacedSources = new Map<number, number>();\nconst UINT32_MAX = 0xffff_ffff;\nconst UINT24_MAX = 0xff_ffff;\nconst SS_ID_SPAN = 0x1_0000_0000;\n// ISO/IEC 23008-1 C.3.3 ssbg_mode1: the two-octet protected-packet length field.\nconst SSBG1_LENGTH_FIELD_BYTES = 2;\n// ISO/IEC 23008-1 AL-FEC signaling carries interleave_depth in one byte.\nconst MAX_INTERLEAVE_DEPTH = 0xff;\n// Rust stores T as u16 and this decoder profile fixes RFC 6330 Al=8.\nconst MAX_SYMBOL_SIZE = 0xfff8;\n// RFC 6330 systematic table limit, enforced by the vendored raptorq decoder.\nconst MAX_RAPTORQ_SOURCE_SYMBOLS_PER_BLOCK = 56_403;\n\n// Aggregate counters\nlet sourceSymbols = 0;\nlet repairSymbols = 0;\nlet blocksComplete = 0;\nlet blocksRecovered = 0;\nlet blocksFailed = 0;\nlet altaVerified = 0;\nlet altaFailed = 0;            // Crypto-confirmed tamper (MAC / sig / hash chain mismatch)\nconst altaFailedDetails: Array<{\n\tseq: number;\n\terror: string;\n\tauthLen: number;\n\tpayloadLen: number;\n\tpath: string; // \"direct\" | \"recovered\" | \"pending-retry\"\n}> = [];\nlet altaPending = 0;           // Unverifiable but not tamper (no trailer, verifier not ready, anchor missing)\nlet altaPendingEvictedCap = 0; // Incoming \"pending\" packets rejected because the queue was at cap after stale-sweep (flood indicator)\nlet altaPendingEvictedTtl = 0; // Deferred-queue entries dropped by TTL (retry window expired)\nlet altaError = 0;             // verifyDetached threw \u2014 infrastructure flake, not tamper\nlet altaInitFailed = false;    // ALTA configured but WASM init failed; altaEnabled was forced off\nlet relayBlocksVerified = 0;\nlet relayBlocksFailed = 0;\nlet liveSbn = 0;\n// Whether liveSbn has been set by a symbol of this decoder epoch. Block order\n// is serial on the 32-bit SS_ID (block-order.ts, BLO-35597 iso:5), where 0 is\n// a real position, so \"nothing seen yet\" needs its own state.\nlet liveSbnKnown = false;\nlet repairSymbolSizeMismatch = 0;\n// Source symbols dropped before WASM, by cause. All three sites below were\n// silent, which left the \"block settles at exactly K-1 source symbols\" shape\n// (BLO-35597 defect 2) with no evidence to attribute it to. A retired drop\n// means a late symbol past retention; a terminal drop means the block had\n// already settled \u2014 `state !== \"collecting\"`, so complete OR recovered OR\n// FAILED, and the failed arm is the one this issue is chasing (a block aged out\n// by synchronizeDecoderHorizon stays in `blocks` until its SBN retires, so a\n// late symbol for a short block lands here); a duplicate drop means a repeated\n// (SBN, ESI), which on this wire is usually a plain duplicate packet \u2014 the\n// router's ledger has deliberate gaps \u2014 and only sometimes an SBN/ESI\n// derivation collision.\n//\n// These narrow the cause; they do not uniquely attribute it. A symbol LOST IN\n// TRANSIT never reaches handleFeedSource and increments nothing, so all three\n// reading zero on a short block is NOT evidence of a publisher defect \u2014 wire\n// loss is the null hypothesis here, and it produces an identical shape. The\n// discriminator for that residual arm is `block.ssbLength` (set at the repair\n// symbol's declared SSB_length, conflict-checked on arrival):\n//   ssbLength < k                        \u2192 genuinely short authored block\n//   ssbLength === k, sourceReceived < k  \u2192 loss or a still-late symbol\n// With no repair symbol yet seen, ssbLength is undefined and both stay open.\nlet sourceDroppedRetired = 0;\nlet sourceDroppedTerminal = 0;\nlet sourceDroppedDuplicate = 0;\nlet sourceUnplacedRetired = 0;\n\n// Recovery timing\nconst recoveryTimes: number[] = [];\n\n// \u2500\u2500 Deferred ALTA verification queue (08-07 Path 3) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n//\n// When an ALTA packet arrives whose MAC references point at sequences not yet\n// in the verifier's ring buffer, we can't anchor trust \u2014 verify returns \"No\n// trust anchor\". Typical cause: a predecessor packet was lost and hasn't been\n// FEC-recovered yet. Rather than drop these, hold them in a bounded FIFO and\n// retry verification after every successful verify (direct or FEC-recovered)\n// that seeds the ring buffer with new raw bytes.\n//\n// Zero-copy (1B-B): the queue entry stores a Uint8Array view into the\n// original `data` ArrayBuffer. JS GC keeps the buffer alive via the view\n// reference; no bytes are copied on queue.\n//\n// Timeout entries (TTL exceeded) and cap-rejections count as `altaPending`\n// (2C-B): they're not tamper indicators, they're just packets that couldn't\n// be authenticated within the receive window \u2014 either loss or, in the cap\n// case, a flood of unanchorable arrivals (real or attacker-driven) that\n// exceeded the queue budget. See enqueuePendingVerify for the rate-limit\n// protocol.\ninterface PendingVerify {\n\tseq: number;\n\tauth: Uint8Array;\n\tpayload: Uint8Array;\n\tarrivalTs: number;\n}\nconst pendingVerify = new Map<number, PendingVerify>();\nlet pendingVerifyCap = 0;\nlet pendingVerifyTtlMs = 0;\n\n// --- Helpers ---\n\nfunction emit(event: FecWorkerEvent, transfer?: Transferable[]): void {\n\tself.postMessage(event, transfer ?? []);\n}\n\nfunction isUint32(value: number): boolean {\n\treturn Number.isInteger(value) && value >= 0 && value <= UINT32_MAX;\n}\n\nfunction isTerminalBlock(block: FecBlockSnapshot): boolean {\n\treturn block.state !== \"collecting\";\n}\n\nfunction retireAcceptedIds(sbn: number): void {\n\tacceptedSourceEsis.delete(sbn);\n\tacceptedRepairEsis.delete(sbn);\n}\n\nfunction clearBlockTracking(): void {\n\tblocks.clear();\n\tacceptedSourceEsis.clear();\n\tacceptedRepairEsis.clear();\n\tunplacedSources.clear();\n\tpendingVerify.clear();\n\trecoveryTimes.length = 0;\n\tliveSbn = 0;\n\tliveSbnKnown = false;\n}\n\n/**\n * Whether `sbn` has fallen behind the decoder's retained interleave window:\n * more than `interleaveDepth` blocks behind the live SBN. liveSbn only moves\n * forward within a decoder epoch and configure() resets both, so this is the\n * monotonic retirement frontier the decoder horizon implies.\n */\nfunction isRetiredSbn(sbn: number): boolean {\n\tif (config === null || !liveSbnKnown) return false;\n\t// iso-ssbg1-v1: `sbn` is an SS_ID (a block's SS_Start or a source's own\n\t// SS_ID) and liveSbn the live SS_ID; K is only the maximum block length.\n\treturn config.blockProfile === \"iso-ssbg1-v1\"\n\t\t? isoBlocksBehind(sbn, liveSbn, config.k) > config.interleaveDepth\n\t\t: blocksBehind(sbn, liveSbn, config.k) > config.interleaveDepth;\n}\n\nfunction isIsoProfile(): boolean {\n\treturn config?.blockProfile === \"iso-ssbg1-v1\";\n}\n\n/**\n * iso-ssbg1-v1: the SS_IDs a known block certainly covers. Every block a\n * repair created has its SSB_length; a cleanup tombstone for a block no\n * repair declared certainly holds only its own SS_Start.\n */\nfunction isoKnownLength(block: FecBlockSnapshot): number {\n\treturn block.ssbLength ?? 1;\n}\n\n/** iso-ssbg1-v1: the known block whose SS_ID range contains `ssId` (ranges never overlap). */\nfunction findIsoBlock(ssId: number): FecBlockSnapshot | undefined {\n\tfor (const block of blocks.values()) {\n\t\tif (isoBlockContains(block.sbn, isoKnownLength(block), ssId)) return block;\n\t}\n\treturn undefined;\n}\n\n/**\n * Whether a terminal block's diagnostics may be deleted. Under iso-ssbg1-v1 a\n * source carries no block identity, so a deleted block cannot refuse a late\n * source of its own: that source would be admitted as unplaced and reopen the\n * block in the decoder. The tombstone therefore stays until its LAST SS_ID is\n * retired, after which the SS_ID retirement check refuses every member.\n */\nfunction isRetiredBlock(key: number, block: FecBlockSnapshot): boolean {\n\treturn isIsoProfile()\n\t\t? isRetiredSbn((key + isoKnownLength(block) - 1) % SS_ID_SPAN)\n\t\t: isRetiredSbn(key);\n}\n\n/**\n * Retire terminal diagnostics only after the decoder's monotonic interleave\n * horizon proves that the SBN can no longer be valid out-of-order media.\n * Admission keeps the compact frontier as the durable tombstone, so deletion\n * never reopens a finalized block.\n */\nfunction trimBlockRetention(): void {\n\tfor (const [sbn, block] of blocks) {\n\t\tif (!isTerminalBlock(block) || !isRetiredBlock(sbn, block)) continue;\n\t\tblocks.delete(sbn);\n\t\tretireAcceptedIds(sbn);\n\t}\n}\n\n/** Advance the live position: an SBN (k-padded-v1) or an SS_ID / SS_Start (iso-ssbg1-v1). */\nfunction advanceMediaHorizon(sbn: number): void {\n\tif (!config) return;\n\tif (liveSbnKnown) {\n\t\tconst ahead = config.blockProfile === \"iso-ssbg1-v1\"\n\t\t\t? serialPrecedes(liveSbn, sbn)\n\t\t\t: blockPrecedes(liveSbn, sbn, config.k);\n\t\tif (!ahead) return;\n\t}\n\tliveSbn = sbn;\n\tliveSbnKnown = true;\n\ttrimBlockRetention();\n}\n\nfunction markBlockTerminal(\n\tblock: FecBlockSnapshot,\n\tstate: \"complete\" | \"recovered\" | \"failed\",\n): void {\n\tblock.state = state;\n\tblock.completedTs = performance.now();\n\tretireAcceptedIds(block.sbn);\n\ttrimBlockRetention();\n}\n\nfunction synchronizeDecoderHorizon(): void {\n\tif (!wasmDecoder || !liveSbnKnown) return;\n\tconst iso = isIsoProfile();\n\tconst expired = iso\n\t\t? wasmDecoder.cleanup_by_ss_start(liveSbn)\n\t\t: wasmDecoder.cleanup_by_sbn(liveSbn);\n\tfor (const sbn of expired) {\n\t\tconst block = blocks.get(sbn);\n\t\tif (!block || isTerminalBlock(block)) {\n\t\t\tretireAcceptedIds(sbn);\n\t\t\tcontinue;\n\t\t}\n\t\tmarkBlockTerminal(block, \"failed\");\n\t\tblocksFailed++;\n\t\temitBlockUpdate(block);\n\t}\n\tif (iso) retireUnplacedSources();\n\ttrimBlockRetention();\n}\n\n/**\n * iso-ssbg1-v1: retire unplaced sources behind the horizon, by the same\n * isoBlocksBehind metric as a block start, sweeping in arrival order and\n * stopping at the first live one (amortised O(1) per symbol). A source that\n * arrived out of order behind a newer live one is retired when it reaches the\n * front; until then nothing can place it, because any repair range holding it\n * starts at or before it and is itself retired. One the live position moved\n * at least half the SS_ID space past no longer precedes it serially; it is\n * retired too rather than pinning the sweep.\n */\nfunction retireUnplacedSources(): void {\n\tfor (const ssId of unplacedSources.keys()) {\n\t\tconst unreachable = ssId !== liveSbn && !serialPrecedes(ssId, liveSbn);\n\t\tif (!unreachable && !isRetiredSbn(ssId)) break;\n\t\tunplacedSources.delete(ssId);\n\t\tsourceUnplacedRetired++;\n\t}\n}\n\n/**\n * Run detached ALTA verify against the current verifier. Four-state result:\n *   - \"valid\":   crypto passed, packet authentic. Caller increments altaVerified.\n *   - \"failed\":  crypto confirmed tamper (MAC/sig mismatch, hash chain mismatch).\n *                Caller increments altaFailed. Not retryable.\n *   - \"pending\": anchor missing (MAC refs not in buffer, no signature, not\n *                early-warmup). Caller may enqueue for retry after the next\n *                successful verify seeds the ring buffer.\n *   - \"error\":   verifier threw \u2014 WASM trap, unmarshal panic, OOM. Caller\n *                increments altaError (infrastructure flake, not tamper).\n *                The distinction matters for ops alerting: a spike in\n *                altaError indicates a runtime problem, not an attack.\n */\nlet _lastVerifyError = \"\";\nfunction runDetachedVerify(\n\tauth: Uint8Array,\n\tpayload: Uint8Array,\n): \"valid\" | \"failed\" | \"pending\" | \"error\" {\n\tif (!altaVerifier) return \"pending\";\n\ttry {\n\t\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n\t\tconst r: any = altaVerifier.verifyDetached(auth, payload);\n\t\tif (r.valid) {\n\t\t\t_lastVerifyError = \"\";\n\t\t\treturn \"valid\";\n\t\t}\n\t\tconst err = (r.error as string | undefined) ?? \"\";\n\t\t_lastVerifyError = err;\n\t\t// The bootstrap-friendly verifier returns this specific error string when\n\t\t// the only obstacle to verification is a missing anchor (see alta-rs\n\t\t// verifier.rs verify()). Distinguishing this from tamper cases keeps us\n\t\t// from queuing packets that are definitively invalid.\n\t\tif (err.startsWith(\"No trust anchor\")) return \"pending\";\n\t\treturn \"failed\";\n\t} catch (e) {\n\t\t// Ratelimit: first ~N occurrences get logged. A sustained exception\n\t\t// stream indicates a real problem \u2014 the altaError counter is the\n\t\t// durable signal.\n\t\tif (altaError < 5) {\n\t\t\tconsole.warn(\"[FecWorker] verifyDetached threw:\", e);\n\t\t}\n\t\treturn \"error\";\n\t}\n}\n\n/** Extract u32 BE sequence number from the ALTA authenticator header (offset 0..3). */\nfunction seqFromAuth(auth: Uint8Array): number {\n\treturn (\n\t\t((auth[0]! << 24) | (auth[1]! << 16) | (auth[2]! << 8) | auth[3]!) >>> 0\n\t);\n}\n\n/**\n * Enqueue a packet whose ALTA verification returned \"pending\" (anchor\n * missing). Dedupes by sequence number.\n *\n * Flood resistance (08-08 review): when the queue is at cap we do NOT\n * evict the oldest entry. The oldest entry is typically the most\n * load-bearing one \u2014 it's the packet whose anchor everything else in the\n * queue is waiting on. Evict-oldest-on-insert let an attacker emitting a\n * stream of \"No trust anchor\" packets flood out legitimate entries and\n * prevent them from ever anchoring. Instead:\n *   1. First try to free stale TTL'd entries (they'd be evicted on next\n *      drain anyway \u2014 pulling that forward is free).\n *   2. If still full, reject the NEW entry. altaPendingEvictedCap counts\n *      these rejections (rate-limit trigger).\n *\n * Stores Uint8Array views into the original data + auth buffers \u2014 no copy.\n * The views keep their underlying ArrayBuffers alive via GC references.\n */\nfunction enqueuePendingVerify(\n\tauth: Uint8Array,\n\tpayload: Uint8Array,\n): void {\n\tconst seq = seqFromAuth(auth);\n\tif (pendingVerify.has(seq)) return;\n\n\tif (pendingVerify.size >= pendingVerifyCap) {\n\t\t// Step 1: sweep stale entries so legitimate traffic isn't penalized\n\t\t// by TTL'd junk that happens to still occupy slots.\n\t\tconst now = performance.now();\n\t\tfor (const [staleSeq, entry] of pendingVerify) {\n\t\t\tif (now - entry.arrivalTs > pendingVerifyTtlMs) {\n\t\t\t\tpendingVerify.delete(staleSeq);\n\t\t\t\taltaPendingEvictedTtl++;\n\t\t\t}\n\t\t}\n\t\t// Step 2: if the queue is still at cap it's a genuine flood \u2014\n\t\t// reject the new entry rather than evict an existing one. The\n\t\t// rejected packet counts as altaPendingEvictedCap (which is\n\t\t// surfaced up through stats for rate-limit alerting).\n\t\tif (pendingVerify.size >= pendingVerifyCap) {\n\t\t\taltaPendingEvictedCap++;\n\t\t\treturn;\n\t\t}\n\t}\n\n\tpendingVerify.set(seq, {\n\t\tseq,\n\t\tauth,\n\t\tpayload,\n\t\tarrivalTs: performance.now(),\n\t});\n}\n\n/**\n * Retry every queued entry. Called after every successful verify (direct\n * source or FEC-recovered) \u2014 new raw bytes in the verifier's ring buffer may\n * unblock previously-pending MAC references.\n *\n * Three outcomes per entry:\n *   - \"valid\"  \u2192 remove from queue, altaVerified++\n *   - \"failed\" \u2192 remove from queue, altaFailed++ (tamper on retry)\n *   - \"pending\" \u2192 keep in queue, unless TTL expired (then evict as altaPending)\n *\n * Iteration order: Map preserves insertion order, so we drain oldest-first.\n * No-op when the queue is empty or the verifier isn't ready.\n */\nfunction drainPendingVerify(): void {\n\tif (pendingVerify.size === 0 || !altaVerifier) return;\n\tconst now = performance.now();\n\t// Collect keys to avoid mutating Map during iteration\n\tconst keys = Array.from(pendingVerify.keys());\n\tfor (const seq of keys) {\n\t\tconst entry = pendingVerify.get(seq);\n\t\tif (!entry) continue;\n\t\tif (now - entry.arrivalTs > pendingVerifyTtlMs) {\n\t\t\tpendingVerify.delete(seq);\n\t\t\taltaPendingEvictedTtl++;\n\t\t\tcontinue;\n\t\t}\n\t\tconst result = runDetachedVerify(entry.auth, entry.payload);\n\t\tif (result === \"valid\") {\n\t\t\tpendingVerify.delete(seq);\n\t\t\taltaVerified++;\n\t\t} else if (result === \"failed\") {\n\t\t\tpendingVerify.delete(seq);\n\t\t\taltaFailed++;\n\t\t\tif (altaFailedDetails.length < 16) {\n\t\t\t\taltaFailedDetails.push({\n\t\t\t\t\tseq: entry.seq,\n\t\t\t\t\terror: _lastVerifyError,\n\t\t\t\t\tauthLen: entry.auth.length,\n\t\t\t\t\tpayloadLen: entry.payload.length,\n\t\t\t\t\tpath: \"pending-retry\",\n\t\t\t\t});\n\t\t\t}\n\t\t} else if (result === \"error\") {\n\t\t\t// Infrastructure failure \u2014 remove from queue, count as altaError.\n\t\t\t// Keeping it around would just re-throw on every subsequent drain.\n\t\t\tpendingVerify.delete(seq);\n\t\t\taltaError++;\n\t\t}\n\t\t// \"pending\" \u2192 leave in queue for next drain\n\t}\n}\n\n/**\n * Look up or create a block. `isoSsbLength` creates an iso-ssbg1-v1 block,\n * whose K' is its SSB_length (C.5.3); without it the block has the catalog K.\n */\nfunction getOrCreateBlock(sbn: number, isoSsbLength?: number): FecBlockSnapshot {\n\tlet block = blocks.get(sbn);\n\tif (!block) {\n\t\tif (!config) throw new Error(\"[FecWorker] not configured\");\n\t\tconst now = performance.now();\n\t\tblock = {\n\t\t\tsbn,\n\t\t\tstate: \"collecting\",\n\t\t\tsourceReceived: 0,\n\t\t\trepairReceived: 0,\n\t\t\tk: isoSsbLength ?? config.k,\n\t\t\trepairCount: config.repairCount,\n\t\t\tfirstSymbolTs: now,\n\t\t\tlastSymbolTs: now,\n\t\t\tdeadlineTs: now + config.deliveryWindowMs,\n\t\t\taltaVerified: 0,\n\t\t\trelayBlockSigValid: null,\n\t\t};\n\t\tif (isoSsbLength !== undefined) block.ssbLength = isoSsbLength;\n\t\tblocks.set(sbn, block);\n\t\ttrimBlockRetention();\n\t}\n\treturn block;\n}\n\nfunction buildStatsSnapshot(): FecTrackStats {\n\tif (!config) throw new Error(\"[FecWorker] not configured\");\n\tconst decoderStats = wasmDecoder?.get_stats();\n\tconst decoder = decoderStats\n\t\t? {\n\t\t\tsourcePackets: Number(decoderStats.source_packets),\n\t\t\trepairPackets: Number(decoderStats.repair_packets),\n\t\t\tblocksComplete: Number(decoderStats.blocks_complete),\n\t\t\tblocksRecovered: Number(decoderStats.blocks_recovered),\n\t\t\tblocksFailed: Number(decoderStats.blocks_failed),\n\t\t\tbytesRecovered: Number(decoderStats.bytes_recovered),\n\t\t\tpendingBlocks: wasmDecoder?.pending_blocks() ?? 0,\n\t\t}\n\t\t: undefined;\n\n\tconst avgRecoveryMs =\n\t\trecoveryTimes.length > 0\n\t\t\t? recoveryTimes.reduce((a, b) => a + b, 0) / recoveryTimes.length\n\t\t\t: 0;\n\tconst maxRecoveryMs =\n\t\trecoveryTimes.length > 0 ? Math.max(...recoveryTimes) : 0;\n\n\t// Cap block array to interleave window\n\tconst maxBlocks = Math.max(config.interleaveDepth * 3, 24);\n\tconst blockArray = Array.from(blocks.values())\n\t\t.sort((a, b) => b.sbn - a.sbn)\n\t\t.slice(0, maxBlocks);\n\n\treturn {\n\t\tconfig,\n\t\tsourceSymbols,\n\t\trepairSymbols,\n\t\tblocksComplete,\n\t\tblocksRecovered,\n\t\tblocksFailed,\n\t\trecoveryRate:\n\t\t\tblocksComplete + blocksRecovered > 0\n\t\t\t\t? Math.round(\n\t\t\t\t\t\t(blocksRecovered / (blocksRecovered + blocksFailed)) * 100,\n\t\t\t\t\t) || 0\n\t\t\t\t: 0,\n\t\taltaVerified,\n\t\taltaFailed,\n\t\taltaPending,\n\t\taltaPendingEvictedCap,\n\t\taltaPendingEvictedTtl,\n\t\taltaError,\n\t\taltaInitFailed,\n\t\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n\t\taltaFailedDetails: altaFailedDetails.slice() as any,\n\t\trelayBlocksVerified,\n\t\trelayBlocksFailed,\n\t\tliveSbn,\n\t\tblocks: blockArray,\n\t\tinterleaveWindowBlocks: config.interleaveDepth,\n\t\tavgRecoveryMs: Math.round(avgRecoveryMs * 100) / 100,\n\t\tmaxRecoveryMs: Math.round(maxRecoveryMs * 100) / 100,\n\t\trepairSymbolSizeMismatch,\n\t\tsourceDroppedRetired,\n\t\tsourceDroppedTerminal,\n\t\tsourceDroppedDuplicate,\n\t\t...(config.blockProfile === \"iso-ssbg1-v1\" ? { sourceUnplacedRetired } : {}),\n\t\tdecoder,\n\t};\n}\n\nfunction emitSnapshot(): void {\n\tif (!config) return;\n\temit({ type: \"snapshot\", stats: buildStatsSnapshot() });\n}\n\nfunction emitBlockUpdate(block: FecBlockSnapshot): void {\n\tif (!blockUpdatesSubscribed) return;\n\temit({ type: \"blockUpdate\", block: { ...block } });\n}\n\nfunction emitRecoveredSymbols(\n\tsbn: number,\n\trecoveredBlock: Uint8Array,\n\tblock: FecBlockSnapshot,\n): void {\n\tif (!config) return;\n\tconst symbolSize = config.symbolSize;\n\tif (symbolSize <= 0) {\n\t\temit({\n\t\t\ttype: \"error\",\n\t\t\tcode: \"recovered-symbol-size-unconfigured\",\n\t\t\tmessage: \"[FecWorker] recovered block has no configured symbolSize\",\n\t\t});\n\t\treturn;\n\t}\n\t// The decoder returns only the block's authored source symbols\n\t// (SSB_length x T); the encoder's zero padding is not media.\n\tconst ssbLength = block.ssbLength ?? config.k;\n\tif (recoveredBlock.byteLength !== symbolSize * ssbLength) {\n\t\temit({\n\t\t\ttype: \"error\",\n\t\t\tcode: \"recovered-block-too-short\",\n\t\t\tmessage: `[FecWorker] recovered block has the wrong length: got ${recoveredBlock.byteLength}B, expected ${symbolSize * ssbLength}B (SSB_length=${ssbLength})`,\n\t\t});\n\t\treturn;\n\t}\n\n\tconst iso = config.blockProfile === \"iso-ssbg1-v1\";\n\tfor (let i = 0; i < ssbLength; i++) {\n\t\tconst symbol = recoveredBlock.subarray(i * symbolSize, (i + 1) * symbolSize);\n\t\t// ssbg_mode1 symbols are emitted whole: the router trims them by their\n\t\t// length field. A field past T-2 or non-zero padding means the\n\t\t// recovered symbol is not what was sent, so it is refused, not trimmed.\n\t\tif (iso) {\n\t\t\tconst invalid = invalidSsbg1Symbol(symbol, symbolSize);\n\t\t\tif (invalid !== null) {\n\t\t\t\temit({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tcode: \"recovered-ssbg1-symbol-invalid\",\n\t\t\t\t\tmessage: `[FecWorker] Dropping recovered ssbg_mode1 symbol (ssStart=${sbn}, esi=${i}, SSB_length=${ssbLength}): ${invalid}`,\n\t\t\t\t});\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\n\t\t// Source authentication now runs once at router admission in\n\t\t// @blockcast/mmt-manifest-verify. The worker only records that this\n\t\t// legacy ALTA-enabled symbol bypassed hot-path verification.\n\t\tconst recoveredAltaVerified: boolean | null = null;\n\t\tif (altaEnabled) altaPending++;\n\n\t\tconst buf = toOwnedArrayBuffer(symbol);\n\t\tconst meta: FrameMeta = {\n\t\t\taltaVerified: recoveredAltaVerified,\n\t\t\trecovered: true,\n\t\t\tsbn,\n\t\t\tesi: i,\n\t\t\tssbLength,\n\t\t};\n\t\temit({ type: \"frame\", data: buf, meta }, [buf]);\n\t}\n}\n\n/** Why a T-byte ssbg_mode1 symbol is malformed (C.3.3), or null when it is well formed. */\nfunction invalidSsbg1Symbol(symbol: Uint8Array, symbolSize: number): string | null {\n\tconst length = (symbol[0]! << 8) | symbol[1]!;\n\tconst maxLength = symbolSize - SSBG1_LENGTH_FIELD_BYTES;\n\tif (length > maxLength) {\n\t\treturn `length field ${length} exceeds T-2 = ${maxLength}`;\n\t}\n\tfor (let j = SSBG1_LENGTH_FIELD_BYTES + length; j < symbolSize; j++) {\n\t\tif (symbol[j] !== 0) return `non-zero padding at byte ${j} after a ${length}-byte packet`;\n\t}\n\treturn null;\n}\n\nfunction startSnapshotTimer(): void {\n\tif (snapshotTimer !== null) clearInterval(snapshotTimer);\n\tsnapshotTimer = setInterval(() => emitSnapshot(), 200);\n}\n\nfunction resolveWasmBindings(): WasmBindings {\n\tconst bindings = (self as unknown as Record<string, unknown>)\n\t\t.__MMT_WASM_BINDINGS__ as WasmBindings | undefined;\n\tif (!bindings) {\n\t\tthrow new Error(\n\t\t\t\"[FecWorker] WASM bindings not available. Set self.__MMT_WASM_BINDINGS__ = { initSync, MmtFecDecoder } before configure.\",\n\t\t);\n\t}\n\treturn bindings;\n}\n\n/**\n * Refuse a decoder that does not run the configured block profile: one that\n * ignored or predates the constructor argument would apply one profile's\n * block math to the other's wire.\n */\nfunction verifyDecoderProfile(decoder: WasmFecDecoder, expected: FecBlockProfile): void {\n\tlet actual: unknown;\n\ttry {\n\t\tactual = decoder.get_block_profile();\n\t} catch (err) {\n\t\tdecoder.free();\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: decoder cannot report its block profile (${err instanceof Error ? err.message : String(err)})`,\n\t\t);\n\t}\n\tif (actual !== expected) {\n\t\tdecoder.free();\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: decoder runs block profile ${JSON.stringify(actual)}, not the configured \"${expected}\"`,\n\t\t);\n\t}\n}\n\nfunction acceptId(ids: Map<number, Set<number>>, key: number, id: number): void {\n\tlet set = ids.get(key);\n\tif (!set) {\n\t\tset = new Set<number>();\n\t\tids.set(key, set);\n\t}\n\tset.add(id);\n}\n\n/** A block the decoder returned: record its recovery and emit its source symbols. */\nfunction recordRecovered(key: number, block: FecBlockSnapshot, result: Uint8Array): void {\n\tconst recovered = new Uint8Array(toOwnedArrayBuffer(result));\n\tconst recoveryMs = performance.now() - block.firstSymbolTs;\n\trecoveryTimes.push(recoveryMs);\n\t// Cap recovery times array at 1000 entries\n\tif (recoveryTimes.length > 1000) recoveryTimes.shift();\n\n\tif (block.state === \"collecting\") {\n\t\tmarkBlockTerminal(block, \"recovered\");\n\t\tblocksRecovered++;\n\t\temitBlockUpdate(block);\n\t}\n\temitRecoveredSymbols(key, recovered, block);\n}\n\n/** Settle a block after one of its source symbols was accepted. */\nfunction settleSourceArrival(\n\tkey: number,\n\tblock: FecBlockSnapshot,\n\tresult: Uint8Array | undefined,\n): void {\n\t// Check if block is complete (all authored source symbols received:\n\t// SSB_length once a repair symbol declared it, otherwise K)\n\tconst authoredLength = block.ssbLength ?? block.k;\n\tif (\n\t\tblock.sourceReceived >= authoredLength &&\n\t\tblock.state === \"collecting\"\n\t) {\n\t\tmarkBlockTerminal(block, \"complete\");\n\t\tblocksComplete++;\n\t\temitBlockUpdate(block);\n\t}\n\n\t// A source-triggered return can be either clean block completion or recovery\n\t// of earlier missing symbols after repair arrived. Clean completion is\n\t// already routed by the source path, so only emit when the block did not\n\t// reach K source arrivals.\n\tif (result && result.byteLength > 0 && block.sourceReceived < authoredLength) {\n\t\trecordRecovered(key, block, result);\n\t}\n\tsynchronizeDecoderHorizon();\n}\n\n/** Settle a block after one of its repair symbols was accepted. */\nfunction settleRepairArrival(\n\tkey: number,\n\tblock: FecBlockSnapshot,\n\tssbLength: number,\n\tresult: Uint8Array | undefined,\n): void {\n\t// Every authored source symbol already arrived: knowing SSB_length makes\n\t// the block clean. The decoder's return is the source already routed.\n\t// Otherwise, returned data is the recovered source block: its SSB_length\n\t// fixed-width authored symbols concatenated. Split it before emitting so\n\t// MmtpRouter gets the same one-symbol shape as a direct source packet.\n\tif (block.sourceReceived >= ssbLength && block.state === \"collecting\") {\n\t\tmarkBlockTerminal(block, \"complete\");\n\t\tblocksComplete++;\n\t\temitBlockUpdate(block);\n\t} else if (result && result.byteLength > 0) {\n\t\trecordRecovered(key, block, result);\n\t}\n\tsynchronizeDecoderHorizon();\n}\n\n/**\n * iso-ssbg1-v1 source admission. A source inside a known block is accounted\n * at ESI = SS_ID - SS_Start. One no repair has placed yet is held unplaced,\n * deduplicated by SS_ID, and still fed to the decoder, which holds it too,\n * until a repair names a range containing it.\n */\nfunction feedIsoSource(\n\tcmd: Extract<FecWorkerCommand, { type: \"feedSource\" }>,\n\tview: Uint8Array,\n\tdecoder: WasmFecDecoder,\n\tcfg: FecTrackConfig,\n): void {\n\tconst maxPacketLength = cfg.symbolSize - SSBG1_LENGTH_FIELD_BYTES;\n\tif (view.byteLength > maxPacketLength) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] feedSource: iso-ssbg1-v1 protected packet of ${view.byteLength}B exceeds T-2 = ${maxPacketLength}B`,\n\t\t);\n\t}\n\tconst block = findIsoBlock(cmd.ssId);\n\tif (!block) {\n\t\tif (isRetiredSbn(cmd.ssId)) {\n\t\t\tsourceDroppedRetired++;\n\t\t\treturn;\n\t\t}\n\t\tif (unplacedSources.has(cmd.ssId)) {\n\t\t\tsourceDroppedDuplicate++;\n\t\t\treturn;\n\t\t}\n\t\tconst result = decoder.add_source(cmd.ssId, view, cmd.ts);\n\t\tadvanceMediaHorizon(cmd.ssId);\n\t\tunplacedSources.set(cmd.ssId, performance.now());\n\t\tsourceSymbols++;\n\t\tif (altaEnabled) altaPending++;\n\t\t// No repair has named this source's block, so the decoder cannot have\n\t\t// one to recover; data here is a Worker/decoder disagreement that\n\t\t// cannot be attributed to a block, and is refused rather than guessed.\n\t\tif (result && result.byteLength > 0) {\n\t\t\temit({\n\t\t\t\ttype: \"error\",\n\t\t\t\tcode: \"recovered-block-unplaced\",\n\t\t\t\tmessage: `[FecWorker] Dropping a ${result.byteLength}B recovered block returned for SS_ID ${cmd.ssId}, which no known block contains`,\n\t\t\t});\n\t\t}\n\t\tsynchronizeDecoderHorizon();\n\t\treturn;\n\t}\n\n\tconst key = block.sbn;\n\tif (isRetiredSbn(key)) {\n\t\tsourceDroppedRetired++;\n\t\treturn;\n\t}\n\tif (isTerminalBlock(block)) {\n\t\tsourceDroppedTerminal++;\n\t\treturn;\n\t}\n\tconst esi = serialDistance(key, cmd.ssId);\n\tif (acceptedSourceEsis.get(key)?.has(esi)) {\n\t\tsourceDroppedDuplicate++;\n\t\treturn;\n\t}\n\n\tconst result = decoder.add_source(cmd.ssId, view, cmd.ts);\n\tadvanceMediaHorizon(cmd.ssId);\n\tacceptId(acceptedSourceEsis, key, esi);\n\tblock.sourceReceived++;\n\tblock.lastSymbolTs = performance.now();\n\tsourceSymbols++;\n\tif (altaEnabled) altaPending++;\n\tsettleSourceArrival(key, block, result);\n}\n\n/** iso-ssbg1-v1: a known block sharing an SS_ID with `[ssStart, ssStart + ssbLength)`. */\nfunction findOverlappingIsoBlock(\n\tssStart: number,\n\tssbLength: number,\n): FecBlockSnapshot | undefined {\n\tfor (const block of blocks.values()) {\n\t\tif (isoBlocksOverlap(block.sbn, isoKnownLength(block), ssStart, ssbLength)) return block;\n\t}\n\treturn undefined;\n}\n\n/**\n * iso-ssbg1-v1: create the block a repair first named, with K' = SSB_length,\n * and move every unplaced source in its range into its accounting.\n */\nfunction placeIsoBlock(ssStart: number, ssbLength: number): FecBlockSnapshot {\n\tconst block = getOrCreateBlock(ssStart, ssbLength);\n\tfor (let esi = 0; esi < ssbLength; esi++) {\n\t\tconst ssId = (ssStart + esi) % SS_ID_SPAN;\n\t\tconst arrivalTs = unplacedSources.get(ssId);\n\t\tif (arrivalTs === undefined) continue;\n\t\tunplacedSources.delete(ssId);\n\t\tacceptId(acceptedSourceEsis, ssStart, esi);\n\t\tblock.sourceReceived++;\n\t\tif (arrivalTs < block.firstSymbolTs) block.firstSymbolTs = arrivalTs;\n\t}\n\treturn block;\n}\n\n/**\n * iso-ssbg1-v1 repair admission. The block is `[SS_Start, SS_Start +\n * SSB_length)` keyed by SS_Start, with repair ESI = SSB_length + RS_ID. A\n * known block's SSB_length is checked before deduplication because the\n * dedup key depends on it.\n */\nfunction feedIsoRepair(\n\tcmd: Extract<FecWorkerCommand, { type: \"feedRepair\" }>,\n\tview: Uint8Array,\n\tdecoder: WasmFecDecoder,\n): void {\n\tconst key = cmd.ssStart;\n\tif (isRetiredSbn(key)) return;\n\tconst existingBlock = blocks.get(key);\n\tif (existingBlock && isTerminalBlock(existingBlock)) return;\n\tif (existingBlock) {\n\t\tif (existingBlock.ssbLength !== cmd.ssbLength) {\n\t\t\temit({\n\t\t\t\ttype: \"error\",\n\t\t\t\tcode: \"repair-ssb-length-conflict\",\n\t\t\t\tmessage: `[FecWorker] Dropping repair symbol whose SSB_length ${cmd.ssbLength} conflicts with ${existingBlock.ssbLength} (ssStart=${key})`,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t} else {\n\t\tconst overlapped = findOverlappingIsoBlock(key, cmd.ssbLength);\n\t\tif (overlapped) {\n\t\t\temit({\n\t\t\t\ttype: \"error\",\n\t\t\t\tcode: \"repair-block-overlap\",\n\t\t\t\tmessage: `[FecWorker] Dropping repair symbol whose block (ssStart=${key}, SSB_length=${cmd.ssbLength}) overlaps known block (ssStart=${overlapped.sbn}, SSB_length=${isoKnownLength(overlapped)})`,\n\t\t\t});\n\t\t\treturn;\n\t\t}\n\t}\n\tconst repairEsi = cmd.ssbLength + cmd.rsId;\n\tif (acceptedRepairEsis.get(key)?.has(repairEsi)) return;\n\n\tconst result = decoder.add_repair(key, cmd.ssbLength, cmd.rsId, view, cmd.ts);\n\tadvanceMediaHorizon(key);\n\tconst block = existingBlock ?? placeIsoBlock(key, cmd.ssbLength);\n\tacceptId(acceptedRepairEsis, key, repairEsi);\n\tblock.repairReceived++;\n\tblock.lastSymbolTs = performance.now();\n\trepairSymbols++;\n\tsettleRepairArrival(key, block, cmd.ssbLength, result);\n}\n\n// --- Command handlers ---\n\nasync function handleConfigure(\n\tcmd: Extract<FecWorkerCommand, { type: \"configure\" }>,\n): Promise<void> {\n\tif (!cmd.wasmModule) {\n\t\tthrow new Error(\"[FecWorker] configure: wasmModule required\");\n\t}\n\tif (!cmd.config) {\n\t\tthrow new Error(\"[FecWorker] configure: config required\");\n\t}\n\t// The block profile is the one discriminator for two wire-identical block\n\t// maths, so it is required and never defaulted (BLO-35597).\n\tconst blockProfile: unknown = cmd.config.blockProfile;\n\tif (blockProfile === undefined) {\n\t\tthrow new Error(\n\t\t\t'[FecWorker] configure: blockProfile is required: name the FEC block profile (\"k-padded-v1\" or \"iso-ssbg1-v1\")',\n\t\t);\n\t}\n\tif (blockProfile !== \"k-padded-v1\" && blockProfile !== \"iso-ssbg1-v1\") {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: blockProfile must be \"k-padded-v1\" or \"iso-ssbg1-v1\" (got ${JSON.stringify(blockProfile)})`,\n\t\t);\n\t}\n\tif (\n\t\t!Number.isFinite(cmd.config.interleaveDepth) ||\n\t\t!Number.isInteger(cmd.config.interleaveDepth) ||\n\t\tcmd.config.interleaveDepth <= 0 ||\n\t\tcmd.config.interleaveDepth > MAX_INTERLEAVE_DEPTH\n\t) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: interleaveDepth must be an integer in 1..${MAX_INTERLEAVE_DEPTH} (got ${cmd.config.interleaveDepth})`,\n\t\t);\n\t}\n\tif (\n\t\t!Number.isFinite(cmd.config.interleaveMs) ||\n\t\tcmd.config.interleaveMs <= 0\n\t) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: interleaveMs must be finite and > 0 (got ${cmd.config.interleaveMs})`,\n\t\t);\n\t}\n\tif (\n\t\t!Number.isFinite(cmd.config.deliveryWindowMs) ||\n\t\tcmd.config.deliveryWindowMs <= 0\n\t) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: deliveryWindowMs must be > 0 (got ${cmd.config.deliveryWindowMs})`,\n\t\t);\n\t}\n\tif (\n\t\t!Number.isInteger(cmd.config.k) ||\n\t\tcmd.config.k <= 0 ||\n\t\tcmd.config.k > MAX_RAPTORQ_SOURCE_SYMBOLS_PER_BLOCK\n\t) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: k must be an integer in 1..${MAX_RAPTORQ_SOURCE_SYMBOLS_PER_BLOCK} (got ${cmd.config.k})`,\n\t\t);\n\t}\n\tif (\n\t\t!Number.isInteger(cmd.config.symbolSize) ||\n\t\tcmd.config.symbolSize <= 0 ||\n\t\tcmd.config.symbolSize > MAX_SYMBOL_SIZE ||\n\t\tcmd.config.symbolSize % 8 !== 0\n\t) {\n\t\tthrow new Error(\n\t\t\t`[FecWorker] configure: symbolSize must be an 8-byte-aligned integer in 8..${MAX_SYMBOL_SIZE} (got ${cmd.config.symbolSize})`,\n\t\t);\n\t}\n\n\tconst wasm = resolveWasmBindings();\n\n\t// Initialize WASM from pre-compiled Module (no fetch, no re-compile)\n\twasm.initSync({ module: cmd.wasmModule });\n\n\t// A configure command starts a new decoder epoch. No terminal tombstone,\n\t// accepted-symbol ID, or active block from the previous decoder may affect it.\n\twasmDecoder?.free();\n\twasmDecoder = null;\n\tclearBlockTracking();\n\n\t// Decoder policy and geometry are explicit at the epoch boundary. The WASM\n\t// module has no guessed K/T/interleave slow path.\n\tconst decoder = new wasm.MmtFecDecoder(cmd.config.interleaveDepth, blockProfile);\n\tverifyDecoderProfile(decoder, blockProfile);\n\twasmDecoder = decoder;\n\tconfig = cmd.config;\n\taltaEnabled = !!cmd.altaPublicKey;\n\n\t// Size the deferred-verify queue strictly from catalog-derived FEC\n\t// parameters. CLAUDE.md bans Math.max(x, floor) magic \u2014 if catalog\n\t// values are zero/missing, throw at init rather than silently applying\n\t// a hardcoded floor. Consumers of an undersized queue cap would see\n\t// altaPendingEvictedCap spike with no actionable signal.\n\t// Cap: 1.5\u00D7 interleave depth \u2014 wide enough to hold one full FEC recovery\n\t// window plus jitter, narrow enough to bound memory.\n\tpendingVerifyCap = Math.ceil(config.interleaveDepth * 1.5);\n\t// TTL: 1.5\u00D7 block duration (K symbols at one per interleave tick) \u2014\n\t// after this many ms, any unresolved entry has missed its FEC window.\n\tpendingVerifyTtlMs = Math.ceil(config.interleaveMs * config.k * 1.5);\n\n\t// Initialize ALTA WASM verifier if public key and WASM module provided (D-05, D-09)\n\taltaVerifier = null;\n\taltaInitFailed = false;\n\tif (cmd.altaPublicKey && cmd.altaWasmModule) {\n\t\ttry {\n\t\t\t// Load ALTA JS glue (wasm-bindgen output from wasm-pack build).\n\t\t\t// Mirrors the RaptorQ WASM pattern: initSync({ module }) then construct.\n\t\t\t// Dynamic import path matches the IWA static asset layout.\n\t\t\t// Cast via string to prevent TypeScript from attempting static resolution\n\t\t\t// of a runtime-only URL (same pattern as fec-worker-entry.js loading).\n\t\t\tconst altaGlueUrl = '/wasm/alta/alta_rs.js' as string;\n\t\t\t// eslint-disable-next-line @typescript-eslint/no-explicit-any\n\t\t\tconst altaGlue: any = await import(/* webpackIgnore: true */ altaGlueUrl);\n\t\t\taltaGlue.initSync({ module: cmd.altaWasmModule });\n\t\t\tconst keyBytes = new Uint8Array(cmd.altaPublicKey);\n\t\t\taltaVerifier = new altaGlue.JsAltaVerifier(keyBytes);\n\t\t} catch (e) {\n\t\t\t// T-08-15: WASM init failure must NOT silently look like \"not-ready-yet\".\n\t\t\t// Force altaEnabled = false so handleFeedSource takes the disabled\n\t\t\t// branch instead of continuously bumping altaPending under the\n\t\t\t// misleading \"verifier not yet ready\" comment. altaInitFailed\n\t\t\t// flag in the snapshot tells consumers this is an error state, not\n\t\t\t// an opt-out.\n\t\t\tconsole.warn('[FecWorker] ALTA WASM init failed, verification disabled:', e);\n\t\t\taltaVerifier = null;\n\t\t\taltaEnabled = false;\n\t\t\taltaInitFailed = true;\n\t\t}\n\t}\n\n\twasmDecoder.configure_params(config.k, config.symbolSize);\n\n\t// Tell the client which optional commands this Worker accepts, so it can\n\t// batch symbols without risking a Worker that predates the batch command.\n\temit({ type: \"capabilities\", commands: [\"feedSymbols\", \"subscribeBlockUpdates\"] });\n\n\t// Start periodic snapshot emission (200ms floor)\n\tstartSnapshotTimer();\n\n\t// Emit initial snapshot\n\temitSnapshot();\n}\n\nfunction handleFeedSource(\n\tcmd: Extract<FecWorkerCommand, { type: \"feedSource\" }>,\n): void {\n\tif (!wasmDecoder) {\n\t\tthrow new Error(\"[FecWorker] feedSource: not configured\");\n\t}\n\tif (!config) {\n\t\tthrow new Error(\"[FecWorker] feedSource: config missing\");\n\t}\n\tif (\n\t\t!isUint32(cmd.ssId) ||\n\t\t!(cmd.data instanceof ArrayBuffer)\n\t) {\n\t\tthrow new Error(\"[FecWorker] feedSource: invalid source symbol\");\n\t}\n\n\tconst view = new Uint8Array(cmd.data);\n\tif (config.blockProfile === \"iso-ssbg1-v1\") {\n\t\tfeedIsoSource(cmd, view, wasmDecoder, config);\n\t\treturn;\n\t}\n\n\t// Derive SBN locally for block-level accounting. WASM derives the same\n\t// value internally (ISO 23008-1 \u00A7C.5.2: SBN = floor(SS_ID / K)).\n\tconst sbn = config.k > 0 ? Math.floor(cmd.ssId / config.k) : cmd.ssId;\n\tconst esi = cmd.ssId % config.k;\n\tif (isRetiredSbn(sbn)) {\n\t\tsourceDroppedRetired++;\n\t\treturn;\n\t}\n\tconst existingBlock = blocks.get(sbn);\n\tif (existingBlock && isTerminalBlock(existingBlock)) {\n\t\tsourceDroppedTerminal++;\n\t\treturn;\n\t}\n\tif (acceptedSourceEsis.get(sbn)?.has(esi)) {\n\t\tsourceDroppedDuplicate++;\n\t\treturn;\n\t}\n\n\tconst result = wasmDecoder.add_source(cmd.ssId, view, cmd.ts);\n\tadvanceMediaHorizon(sbn);\n\tlet sourceEsis = acceptedSourceEsis.get(sbn);\n\tif (!sourceEsis) {\n\t\tsourceEsis = new Set<number>();\n\t\tacceptedSourceEsis.set(sbn, sourceEsis);\n\t}\n\tsourceEsis.add(esi);\n\n\t// Update block state\n\tconst block = getOrCreateBlock(sbn);\n\tblock.sourceReceived++;\n\tblock.lastSymbolTs = performance.now();\n\tsourceSymbols++;\n\n\t// The FEC worker must remain decode-only on the per-symbol hot path. ALTA\n\t// WASM is retained temporarily for low-rate signaling users, but media is\n\t// authenticated by the canonical manifest verifier at router admission.\n\tif (altaEnabled) altaPending++;\n\n\tsettleSourceArrival(sbn, block, result);\n}\n\nfunction handleFeedRepair(\n\tcmd: Extract<FecWorkerCommand, { type: \"feedRepair\" }>,\n): void {\n\tif (!wasmDecoder) {\n\t\tthrow new Error(\"[FecWorker] feedRepair: not configured\");\n\t}\n\tif (!config) {\n\t\tthrow new Error(\"[FecWorker] feedRepair: config missing\");\n\t}\n\t// k-padded-v1 blocks start at multiples of K and repair ESI = K + RS_ID;\n\t// iso-ssbg1-v1 blocks start at any SS_ID and repair ESI = SSB_length + RS_ID.\n\tconst iso = config.blockProfile === \"iso-ssbg1-v1\";\n\tif (\n\t\t!isUint32(cmd.ssStart) ||\n\t\t!isUint32(cmd.ssbLength) ||\n\t\tcmd.ssbLength <= 0 ||\n\t\tcmd.ssbLength > config.k ||\n\t\t(!iso && cmd.ssStart % config.k !== 0) ||\n\t\t!isUint32(cmd.rsId) ||\n\t\t(iso ? cmd.ssbLength : config.k) + cmd.rsId > UINT24_MAX ||\n\t\t!(cmd.data instanceof ArrayBuffer)\n\t) {\n\t\tthrow new Error(\"[FecWorker] feedRepair: invalid repair symbol\");\n\t}\n\n\tconst view = new Uint8Array(cmd.data);\n\tif (config.symbolSize > 0 && view.byteLength !== config.symbolSize) {\n\t\trepairSymbolSizeMismatch++;\n\t\tif (repairSymbolSizeMismatch <= 5 || repairSymbolSizeMismatch % 100 === 0) {\n\t\t\temit({\n\t\t\t\ttype: \"error\",\n\t\t\t\tcode: \"repair-symbol-size-mismatch\",\n\t\t\t\tmessage: `[FecWorker] Dropping repair symbol with invalid size: got ${view.byteLength}B, expected ${config.symbolSize}B (ssStart=${cmd.ssStart}, ssbLength=${cmd.ssbLength}, rsId=${cmd.rsId})`,\n\t\t\t});\n\t\t}\n\t\treturn;\n\t}\n\tif (iso) {\n\t\tfeedIsoRepair(cmd, view, wasmDecoder);\n\t\treturn;\n\t}\n\tconst sbn = Math.floor(cmd.ssStart / config.k);\n\tconst repairEsi = config.k + cmd.rsId;\n\t// The repair path's mirror drops stay silent and uncounted: BLO-35597\n\t// defect 2 is a source-symbol shortfall, so only the source side needed\n\t// evidence. The asymmetry is deliberate, not an oversight \u2014 extend these\n\t// the same way if a repair-side shortfall ever needs attributing.\n\tif (isRetiredSbn(sbn)) return;\n\tconst existingBlock = blocks.get(sbn);\n\tif (existingBlock && isTerminalBlock(existingBlock)) return;\n\tif (acceptedRepairEsis.get(sbn)?.has(repairEsi)) return;\n\t// One block has one authored SSB_length; a repair symbol naming another\n\t// is dropped before it reaches the decoder (which rejects it too).\n\tif (existingBlock?.ssbLength !== undefined && existingBlock.ssbLength !== cmd.ssbLength) {\n\t\temit({\n\t\t\ttype: \"error\",\n\t\t\tcode: \"repair-ssb-length-conflict\",\n\t\t\tmessage: `[FecWorker] Dropping repair symbol whose SSB_length ${cmd.ssbLength} conflicts with ${existingBlock.ssbLength} (sbn=${sbn})`,\n\t\t});\n\t\treturn;\n\t}\n\n\tconst result = wasmDecoder.add_repair(\n\t\tcmd.ssStart,\n\t\tcmd.ssbLength,\n\t\tcmd.rsId,\n\t\tview,\n\t\tcmd.ts,\n\t);\n\tadvanceMediaHorizon(sbn);\n\tlet repairEsis = acceptedRepairEsis.get(sbn);\n\tif (!repairEsis) {\n\t\trepairEsis = new Set<number>();\n\t\tacceptedRepairEsis.set(sbn, repairEsis);\n\t}\n\trepairEsis.add(repairEsi);\n\tconst block = getOrCreateBlock(sbn);\n\tblock.ssbLength = cmd.ssbLength;\n\tblock.repairReceived++;\n\tblock.lastSymbolTs = performance.now();\n\trepairSymbols++;\n\tsettleRepairArrival(sbn, block, cmd.ssbLength, result);\n}\n\nfunction handleRelayBlockSig(\n\tcmd: Extract<FecWorkerCommand, { type: \"relayBlockSig\" }>,\n): void {\n\t// No-op AUTH stub: store sig on block, mark as not-yet-verified\n\tconst block = blocks.get(cmd.sbn);\n\tif (block) {\n\t\t// Real verification deferred to ALTA milestone\n\t\t// For now, mark as null (not verified) \u2014 will be wired when ALTA is implemented\n\t\tblock.relayBlockSigValid = null;\n\t\temitBlockUpdate(block);\n\t}\n}\n\nfunction handleCleanup(\n\tcmd: Extract<FecWorkerCommand, { type: \"cleanup\" }>,\n): void {\n\tif (\n\t\t!Array.isArray(cmd.sbns) ||\n\t\tcmd.sbns.length === 0 ||\n\t\t!cmd.sbns.every(isUint32)\n\t) {\n\t\tthrow new Error(\"[FecWorker] cleanup: invalid SBNs\");\n\t}\n\tconst sbns = [...new Set(cmd.sbns)].sort((a, b) => a - b);\n\tconst pendingSbns = sbns.filter((sbn) => !isRetiredSbn(sbn));\n\ttry {\n\t\tif (!wasmDecoder) {\n\t\t\tthrow new Error(\"[FecWorker] cleanup: not configured\");\n\t\t}\n\n\t\t// Call WASM cleanup only after all earlier symbol commands have drained,\n\t\t// and only for the exact SBNs the manager's deadlines named; command\n\t\t// coalescing must not infer ownership from the largest timed-out SBN.\n\t\tif (pendingSbns.length > 0) {\n\t\t\twasmDecoder.cleanup_blocks_detailed(Uint32Array.from(pendingSbns));\n\t\t}\n\t\t// Manager deadlines are block-scoped and may expire a newer SBN while an\n\t\t// older interleaved block is still live. Only accepted media progression\n\t\t// advances the shared JS/Rust horizon; cleanup creates exact tombstones.\n\n\t\t// Rust already finalized every SBN behind the media frontier. For each\n\t\t// remaining exact request, mirror the block-scoped WASM boundary immediately\n\t\t// so JS never retains state for a decoder block that is gone.\n\t\tfor (const sbn of pendingSbns) {\n\t\t\tlet currentBlock = blocks.get(sbn);\n\t\t\tif (currentBlock && isTerminalBlock(currentBlock)) {\n\t\t\t\tretireAcceptedIds(sbn);\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t\tcurrentBlock ??= getOrCreateBlock(sbn);\n\t\t\t// k-padded-v1 compares with K, unchanged. iso-ssbg1-v1 compares with\n\t\t\t// the block's SSB_length; a key no repair declared has none, so a\n\t\t\t// block the Worker never knew can only have failed.\n\t\t\tconst authoredLength = isIsoProfile() ? currentBlock.ssbLength : currentBlock.k;\n\t\t\tif (authoredLength !== undefined && currentBlock.sourceReceived >= authoredLength) {\n\t\t\t\tmarkBlockTerminal(currentBlock, \"complete\");\n\t\t\t\tblocksComplete++;\n\t\t\t} else {\n\t\t\t\tmarkBlockTerminal(currentBlock, \"failed\");\n\t\t\t\tblocksFailed++;\n\t\t\t}\n\t\t\temitBlockUpdate(currentBlock);\n\t\t}\n\t} finally {\n\t\t// Message ordering makes this an acknowledgement that every source/repair\n\t\t// command posted before cleanup has completed. The main thread must not\n\t\t// commit failure accounting until it observes this event.\n\t\temit({ type: \"cleanupComplete\", sbns });\n\t}\n}\n\nfunction handleDispose(): void {\n\t// Clear snapshot timer (MUST clear to prevent leaks)\n\tif (snapshotTimer !== null) {\n\t\tclearInterval(snapshotTimer);\n\t\tsnapshotTimer = null;\n\t}\n\n\t// Free ALTA verifier WASM object (MUST call to release WASM memory \u2014\n\t// Worker.terminate() fires immediately after dispose, so the FinalizationRegistry\n\t// callback has no chance to run and this memory would leak without explicit free)\n\tif (altaVerifier) {\n\t\ttry {\n\t\t\taltaVerifier.free();\n\t\t} catch (_e) {\n\t\t\t// Best-effort \u2014 verifier may already be freed\n\t\t}\n\t\taltaVerifier = null;\n\t}\n\n\t// Free WASM decoder (MUST call to release WASM memory)\n\tif (wasmDecoder) {\n\t\twasmDecoder.free();\n\t\twasmDecoder = null;\n\t}\n\n\t// Clear deferred-verify queue so pinned ArrayBuffers drop.\n\tpendingVerify.clear();\n\tpendingVerifyCap = 0;\n\tpendingVerifyTtlMs = 0;\n\n\tconfig = null;\n\tclearBlockTracking();\n}\n\nfunction handleReset(): void {\n\ttry {\n\t\twasmDecoder?.flush();\n\t\twasmDecoder?.reset_stats();\n\t} catch (err) {\n\t\temit({\n\t\t\ttype: \"error\",\n\t\t\tcode: \"reset-failed\",\n\t\t\tmessage:\n\t\t\t\terr instanceof Error\n\t\t\t\t\t? `[FecWorker] reset failed: ${err.message}`\n\t\t\t\t\t: `[FecWorker] reset failed: ${String(err)}`,\n\t\t});\n\t\treturn;\n\t}\n\n\tclearBlockTracking();\n\tsourceSymbols = 0;\n\trepairSymbols = 0;\n\tblocksComplete = 0;\n\tblocksRecovered = 0;\n\tblocksFailed = 0;\n\taltaVerified = 0;\n\taltaFailed = 0;\n\taltaFailedDetails.length = 0;\n\taltaPending = 0;\n\taltaPendingEvictedCap = 0;\n\taltaPendingEvictedTtl = 0;\n\taltaError = 0;\n\trelayBlocksVerified = 0;\n\trelayBlocksFailed = 0;\n\trepairSymbolSizeMismatch = 0;\n\tsourceDroppedRetired = 0;\n\tsourceDroppedTerminal = 0;\n\tsourceDroppedDuplicate = 0;\n\tsourceUnplacedRetired = 0;\n\temit({ type: \"resetComplete\" });\n\tif (config) emitSnapshot();\n}\n\n/**\n * A batch of symbols fed in one page task (BLO-36599). Each record is\n * handled exactly as its single-symbol command would be, in order, and a\n * failing record reports the same `command-failed` error that command would\n * without stopping the records after it.\n */\nfunction handleFeedSymbols(\n\tcmd: Extract<FecWorkerCommand, { type: \"feedSymbols\" }>,\n): void {\n\tif (!Array.isArray(cmd.symbols)) {\n\t\tthrow new Error(\"[FecWorker] feedSymbols: symbols must be an array\");\n\t}\n\tfor (const symbol of cmd.symbols) {\n\t\ttry {\n\t\t\tif (symbol?.type === \"feedSource\") handleFeedSource(symbol);\n\t\t\telse if (symbol?.type === \"feedRepair\") handleFeedRepair(symbol);\n\t\t\telse {\n\t\t\t\tthrow new Error(\n\t\t\t\t\t`[FecWorker] feedSymbols: unknown symbol type ${String((symbol as { type?: unknown } | null)?.type)}`,\n\t\t\t\t);\n\t\t\t}\n\t\t} catch (err) {\n\t\t\temit({\n\t\t\t\ttype: \"error\",\n\t\t\t\tcode: \"command-failed\",\n\t\t\t\tmessage:\n\t\t\t\t\terr instanceof Error ? err.message : `[FecWorker] ${String(err)}`,\n\t\t\t});\n\t\t}\n\t}\n}\n\n// --- Main message handler ---\n\nasync function dispatchCommand(cmd: FecWorkerCommand): Promise<void> {\n\ttry {\n\t\tswitch (cmd.type) {\n\t\t\tcase \"configure\":\n\t\t\t\t// handleConfigure is async (ALTA WASM init uses dynamic import).\n\t\t\t\t// Await it so feed/cleanup messages cannot run against a partially\n\t\t\t\t// configured decoder.\n\t\t\t\tawait handleConfigure(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"feedSource\":\n\t\t\t\thandleFeedSource(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"feedRepair\":\n\t\t\t\thandleFeedRepair(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"feedSymbols\":\n\t\t\t\thandleFeedSymbols(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"relayBlockSig\":\n\t\t\t\thandleRelayBlockSig(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"cleanup\":\n\t\t\t\thandleCleanup(cmd);\n\t\t\t\tbreak;\n\t\t\tcase \"reset\":\n\t\t\t\thandleReset();\n\t\t\t\tbreak;\n\t\t\tcase \"subscribeBlockUpdates\":\n\t\t\t\tblockUpdatesSubscribed = true;\n\t\t\t\tbreak;\n\t\t\tcase \"dispose\":\n\t\t\t\thandleDispose();\n\t\t\t\tbreak;\n\t\t\tdefault:\n\t\t\t\temit({\n\t\t\t\t\ttype: \"error\",\n\t\t\t\t\tcode: \"unknown-command\",\n\t\t\t\t\tmessage: `Unknown command type: ${(cmd as Record<string, unknown>).type}`,\n\t\t\t\t});\n\t\t}\n\t} catch (err) {\n\t\temit({\n\t\t\ttype: \"error\",\n\t\t\tcode: \"command-failed\",\n\t\t\tmessage:\n\t\t\t\terr instanceof Error ? err.message : `[FecWorker] ${String(err)}`,\n\t\t});\n\t}\n}\n\nlet commandQueue: Promise<void> = Promise.resolve();\n\nself.onmessage = (e: MessageEvent<FecWorkerCommand>) => {\n\tconst cmd = e.data;\n\tcommandQueue = commandQueue.then(() => dispatchCommand(cmd));\n};\n"],
+  "mappings": ";;;AAOO,SAAS,mBAAmB,MAA+B;AACjE,QAAM,OAAO,IAAI,WAAW,KAAK,UAAU;AAC3C,OAAK,IAAI,IAAI;AACb,SAAO,KAAK;AACb;;;ACIA,IAAM,OAAO;AACb,IAAM,OAAO;AAEb,SAAS,WAAW,KAAa,GAAmB;AAEnD,SAAQ,MAAM,IAAK;AACpB;AAGA,SAAS,kBAAkB,GAAW,GAAW,GAA0B;AAC1E,QAAM,YAAY,WAAW,GAAG,CAAC,IAAI,WAAW,GAAG,CAAC,IAAI,QAAQ;AAChE,SAAO,aAAa,KAAK,WAAW,OAAO,WAAW;AACvD;AAGO,SAAS,cAAc,GAAW,GAAW,GAAoB;AACvE,SAAO,kBAAkB,GAAG,GAAG,CAAC,MAAM;AACvC;AAMO,SAAS,aAAa,GAAW,GAAW,GAAmB;AACrE,QAAM,WAAW,kBAAkB,GAAG,GAAG,CAAC;AAC1C,SAAO,aAAa,OAAO,IAAI,KAAK,KAAK,WAAW,CAAC;AACtD;AAcO,SAAS,eAAe,MAAc,IAAoB;AAChE,UAAQ,KAAK,OAAO,QAAQ;AAC7B;AAGO,SAAS,eAAe,GAAW,GAAoB;AAC7D,QAAM,WAAW,eAAe,GAAG,CAAC;AACpC,SAAO,aAAa,KAAK,WAAW;AACrC;AAGO,SAAS,iBAAiB,SAAiB,WAAmB,MAAuB;AAC3F,SAAO,eAAe,SAAS,IAAI,IAAI;AACxC;AAGO,SAAS,iBACf,QACA,SACA,QACA,SACU;AACV,SAAO,iBAAiB,QAAQ,SAAS,MAAM,KAAK,iBAAiB,QAAQ,SAAS,MAAM;AAC7F;AASO,SAAS,gBAAgB,GAAW,GAAW,MAAsB;AAC3E,MAAI,CAAC,OAAO,cAAc,IAAI,KAAK,QAAQ,GAAG;AAC7C,UAAM,IAAI,MAAM,8DAA8D,IAAI,GAAG;AAAA,EACtF;AACA,SAAO,eAAe,GAAG,CAAC,IAAI,KAAK,MAAM,eAAe,GAAG,CAAC,IAAI,IAAI,IAAI;AACzE;;;ACYA,IAAI,cAAqC;AACzC,IAAI,SAAgC;AACpC,IAAI,cAAc;AAElB,IAAI,eAAoB;AACxB,IAAI,gBAAuD;AAE3D,IAAI,yBAAyB;AAG7B,IAAM,SAAS,oBAAI,IAA8B;AACjD,IAAM,qBAAqB,oBAAI,IAAyB;AACxD,IAAM,qBAAqB,oBAAI,IAAyB;AAIxD,IAAM,kBAAkB,oBAAI,IAAoB;AAChD,IAAM,aAAa;AACnB,IAAM,aAAa;AACnB,IAAM,aAAa;AAEnB,IAAM,2BAA2B;AAEjC,IAAM,uBAAuB;AAE7B,IAAM,kBAAkB;AAExB,IAAM,uCAAuC;AAG7C,IAAI,gBAAgB;AACpB,IAAI,gBAAgB;AACpB,IAAI,iBAAiB;AACrB,IAAI,kBAAkB;AACtB,IAAI,eAAe;AACnB,IAAI,eAAe;AACnB,IAAI,aAAa;AACjB,IAAM,oBAMD,CAAC;AACN,IAAI,cAAc;AAClB,IAAI,wBAAwB;AAC5B,IAAI,wBAAwB;AAC5B,IAAI,YAAY;AAChB,IAAI,iBAAiB;AACrB,IAAI,sBAAsB;AAC1B,IAAI,oBAAoB;AACxB,IAAI,UAAU;AAId,IAAI,eAAe;AACnB,IAAI,2BAA2B;AAsB/B,IAAI,uBAAuB;AAC3B,IAAI,wBAAwB;AAC5B,IAAI,yBAAyB;AAC7B,IAAI,wBAAwB;AAG5B,IAAM,gBAA0B,CAAC;AA2BjC,IAAM,gBAAgB,oBAAI,IAA2B;AACrD,IAAI,mBAAmB;AACvB,IAAI,qBAAqB;AAIzB,SAAS,KAAK,OAAuB,UAAiC;AACrE,OAAK,YAAY,OAAO,YAAY,CAAC,CAAC;AACvC;AAEA,SAAS,SAAS,OAAwB;AACzC,SAAO,OAAO,UAAU,KAAK,KAAK,SAAS,KAAK,SAAS;AAC1D;AAEA,SAAS,gBAAgB,OAAkC;AAC1D,SAAO,MAAM,UAAU;AACxB;AAEA,SAAS,kBAAkB,KAAmB;AAC7C,qBAAmB,OAAO,GAAG;AAC7B,qBAAmB,OAAO,GAAG;AAC9B;AAEA,SAAS,qBAA2B;AACnC,SAAO,MAAM;AACb,qBAAmB,MAAM;AACzB,qBAAmB,MAAM;AACzB,kBAAgB,MAAM;AACtB,gBAAc,MAAM;AACpB,gBAAc,SAAS;AACvB,YAAU;AACV,iBAAe;AAChB;AAQA,SAAS,aAAa,KAAsB;AAC3C,MAAI,WAAW,QAAQ,CAAC,aAAc,QAAO;AAG7C,SAAO,OAAO,iBAAiB,iBAC5B,gBAAgB,KAAK,SAAS,OAAO,CAAC,IAAI,OAAO,kBACjD,aAAa,KAAK,SAAS,OAAO,CAAC,IAAI,OAAO;AAClD;AAEA,SAAS,eAAwB;AAChC,SAAO,QAAQ,iBAAiB;AACjC;AAOA,SAAS,eAAe,OAAiC;AACxD,SAAO,MAAM,aAAa;AAC3B;AAGA,SAAS,aAAa,MAA4C;AACjE,aAAW,SAAS,OAAO,OAAO,GAAG;AACpC,QAAI,iBAAiB,MAAM,KAAK,eAAe,KAAK,GAAG,IAAI,EAAG,QAAO;AAAA,EACtE;AACA,SAAO;AACR;AASA,SAAS,eAAe,KAAa,OAAkC;AACtE,SAAO,aAAa,IACjB,cAAc,MAAM,eAAe,KAAK,IAAI,KAAK,UAAU,IAC3D,aAAa,GAAG;AACpB;AAQA,SAAS,qBAA2B;AACnC,aAAW,CAAC,KAAK,KAAK,KAAK,QAAQ;AAClC,QAAI,CAAC,gBAAgB,KAAK,KAAK,CAAC,eAAe,KAAK,KAAK,EAAG;AAC5D,WAAO,OAAO,GAAG;AACjB,sBAAkB,GAAG;AAAA,EACtB;AACD;AAGA,SAAS,oBAAoB,KAAmB;AAC/C,MAAI,CAAC,OAAQ;AACb,MAAI,cAAc;AACjB,UAAM,QAAQ,OAAO,iBAAiB,iBACnC,eAAe,SAAS,GAAG,IAC3B,cAAc,SAAS,KAAK,OAAO,CAAC;AACvC,QAAI,CAAC,MAAO;AAAA,EACb;AACA,YAAU;AACV,iBAAe;AACf,qBAAmB;AACpB;AAEA,SAAS,kBACR,OACA,OACO;AACP,QAAM,QAAQ;AACd,QAAM,cAAc,YAAY,IAAI;AACpC,oBAAkB,MAAM,GAAG;AAC3B,qBAAmB;AACpB;AAEA,SAAS,4BAAkC;AAC1C,MAAI,CAAC,eAAe,CAAC,aAAc;AACnC,QAAM,MAAM,aAAa;AACzB,QAAM,UAAU,MACb,YAAY,oBAAoB,OAAO,IACvC,YAAY,eAAe,OAAO;AACrC,aAAW,OAAO,SAAS;AAC1B,UAAM,QAAQ,OAAO,IAAI,GAAG;AAC5B,QAAI,CAAC,SAAS,gBAAgB,KAAK,GAAG;AACrC,wBAAkB,GAAG;AACrB;AAAA,IACD;AACA,sBAAkB,OAAO,QAAQ;AACjC;AACA,oBAAgB,KAAK;AAAA,EACtB;AACA,MAAI,IAAK,uBAAsB;AAC/B,qBAAmB;AACpB;AAYA,SAAS,wBAA8B;AACtC,aAAW,QAAQ,gBAAgB,KAAK,GAAG;AAC1C,UAAM,cAAc,SAAS,WAAW,CAAC,eAAe,MAAM,OAAO;AACrE,QAAI,CAAC,eAAe,CAAC,aAAa,IAAI,EAAG;AACzC,oBAAgB,OAAO,IAAI;AAC3B;AAAA,EACD;AACD;AAmKA,SAAS,iBAAiB,KAAa,cAAyC;AAC/E,MAAI,QAAQ,OAAO,IAAI,GAAG;AAC1B,MAAI,CAAC,OAAO;AACX,QAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,4BAA4B;AACzD,UAAM,MAAM,YAAY,IAAI;AAC5B,YAAQ;AAAA,MACP;AAAA,MACA,OAAO;AAAA,MACP,gBAAgB;AAAA,MAChB,gBAAgB;AAAA,MAChB,GAAG,gBAAgB,OAAO;AAAA,MAC1B,aAAa,OAAO;AAAA,MACpB,eAAe;AAAA,MACf,cAAc;AAAA,MACd,YAAY,MAAM,OAAO;AAAA,MACzB,cAAc;AAAA,MACd,oBAAoB;AAAA,IACrB;AACA,QAAI,iBAAiB,OAAW,OAAM,YAAY;AAClD,WAAO,IAAI,KAAK,KAAK;AACrB,uBAAmB;AAAA,EACpB;AACA,SAAO;AACR;AAEA,SAAS,qBAAoC;AAC5C,MAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,4BAA4B;AACzD,QAAM,eAAe,aAAa,UAAU;AAC5C,QAAM,UAAU,eACb;AAAA,IACD,eAAe,OAAO,aAAa,cAAc;AAAA,IACjD,eAAe,OAAO,aAAa,cAAc;AAAA,IACjD,gBAAgB,OAAO,aAAa,eAAe;AAAA,IACnD,iBAAiB,OAAO,aAAa,gBAAgB;AAAA,IACrD,cAAc,OAAO,aAAa,aAAa;AAAA,IAC/C,gBAAgB,OAAO,aAAa,eAAe;AAAA,IACnD,eAAe,aAAa,eAAe,KAAK;AAAA,EACjD,IACE;AAEH,QAAM,gBACL,cAAc,SAAS,IACpB,cAAc,OAAO,CAAC,GAAG,MAAM,IAAI,GAAG,CAAC,IAAI,cAAc,SACzD;AACJ,QAAM,gBACL,cAAc,SAAS,IAAI,KAAK,IAAI,GAAG,aAAa,IAAI;AAGzD,QAAM,YAAY,KAAK,IAAI,OAAO,kBAAkB,GAAG,EAAE;AACzD,QAAM,aAAa,MAAM,KAAK,OAAO,OAAO,CAAC,EAC3C,KAAK,CAAC,GAAG,MAAM,EAAE,MAAM,EAAE,GAAG,EAC5B,MAAM,GAAG,SAAS;AAEpB,SAAO;AAAA,IACN;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,cACC,iBAAiB,kBAAkB,IAChC,KAAK;AAAA,MACJ,mBAAmB,kBAAkB,gBAAiB;AAAA,IACxD,KAAK,IACJ;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA;AAAA,IAEA,mBAAmB,kBAAkB,MAAM;AAAA,IAC3C;AAAA,IACA;AAAA,IACA;AAAA,IACA,QAAQ;AAAA,IACR,wBAAwB,OAAO;AAAA,IAC/B,eAAe,KAAK,MAAM,gBAAgB,GAAG,IAAI;AAAA,IACjD,eAAe,KAAK,MAAM,gBAAgB,GAAG,IAAI;AAAA,IACjD;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,GAAI,OAAO,iBAAiB,iBAAiB,EAAE,sBAAsB,IAAI,CAAC;AAAA,IAC1E;AAAA,EACD;AACD;AAEA,SAAS,eAAqB;AAC7B,MAAI,CAAC,OAAQ;AACb,OAAK,EAAE,MAAM,YAAY,OAAO,mBAAmB,EAAE,CAAC;AACvD;AAEA,SAAS,gBAAgB,OAA+B;AACvD,MAAI,CAAC,uBAAwB;AAC7B,OAAK,EAAE,MAAM,eAAe,OAAO,EAAE,GAAG,MAAM,EAAE,CAAC;AAClD;AAEA,SAAS,qBACR,KACA,gBACA,OACO;AACP,MAAI,CAAC,OAAQ;AACb,QAAM,aAAa,OAAO;AAC1B,MAAI,cAAc,GAAG;AACpB,SAAK;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS;AAAA,IACV,CAAC;AACD;AAAA,EACD;AAGA,QAAM,YAAY,MAAM,aAAa,OAAO;AAC5C,MAAI,eAAe,eAAe,aAAa,WAAW;AACzD,SAAK;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,yDAAyD,eAAe,UAAU,eAAe,aAAa,SAAS,iBAAiB,SAAS;AAAA,IAC3J,CAAC;AACD;AAAA,EACD;AAEA,QAAM,MAAM,OAAO,iBAAiB;AACpC,WAAS,IAAI,GAAG,IAAI,WAAW,KAAK;AACnC,UAAM,SAAS,eAAe,SAAS,IAAI,aAAa,IAAI,KAAK,UAAU;AAI3E,QAAI,KAAK;AACR,YAAM,UAAU,mBAAmB,QAAQ,UAAU;AACrD,UAAI,YAAY,MAAM;AACrB,aAAK;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS,6DAA6D,GAAG,SAAS,CAAC,gBAAgB,SAAS,MAAM,OAAO;AAAA,QAC1H,CAAC;AACD;AAAA,MACD;AAAA,IACD;AAKA,UAAM,wBAAwC;AAC9C,QAAI,YAAa;AAEjB,UAAM,MAAM,mBAAmB,MAAM;AACrC,UAAM,OAAkB;AAAA,MACvB,cAAc;AAAA,MACd,WAAW;AAAA,MACX;AAAA,MACA,KAAK;AAAA,MACL;AAAA,IACD;AACA,SAAK,EAAE,MAAM,SAAS,MAAM,KAAK,KAAK,GAAG,CAAC,GAAG,CAAC;AAAA,EAC/C;AACD;AAGA,SAAS,mBAAmB,QAAoB,YAAmC;AAClF,QAAM,SAAU,OAAO,CAAC,KAAM,IAAK,OAAO,CAAC;AAC3C,QAAM,YAAY,aAAa;AAC/B,MAAI,SAAS,WAAW;AACvB,WAAO,gBAAgB,MAAM,kBAAkB,SAAS;AAAA,EACzD;AACA,WAAS,IAAI,2BAA2B,QAAQ,IAAI,YAAY,KAAK;AACpE,QAAI,OAAO,CAAC,MAAM,EAAG,QAAO,4BAA4B,CAAC,YAAY,MAAM;AAAA,EAC5E;AACA,SAAO;AACR;AAEA,SAAS,qBAA2B;AACnC,MAAI,kBAAkB,KAAM,eAAc,aAAa;AACvD,kBAAgB,YAAY,MAAM,aAAa,GAAG,GAAG;AACtD;AAEA,SAAS,sBAAoC;AAC5C,QAAM,WAAY,KAChB;AACF,MAAI,CAAC,UAAU;AACd,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,SAAO;AACR;AAOA,SAAS,qBAAqB,SAAyB,UAAiC;AACvF,MAAI;AACJ,MAAI;AACH,aAAS,QAAQ,kBAAkB;AAAA,EACpC,SAAS,KAAK;AACb,YAAQ,KAAK;AACb,UAAM,IAAI;AAAA,MACT,mEAAmE,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG,CAAC;AAAA,IACpH;AAAA,EACD;AACA,MAAI,WAAW,UAAU;AACxB,YAAQ,KAAK;AACb,UAAM,IAAI;AAAA,MACT,qDAAqD,KAAK,UAAU,MAAM,CAAC,yBAAyB,QAAQ;AAAA,IAC7G;AAAA,EACD;AACD;AAEA,SAAS,SAAS,KAA+B,KAAa,IAAkB;AAC/E,MAAI,MAAM,IAAI,IAAI,GAAG;AACrB,MAAI,CAAC,KAAK;AACT,UAAM,oBAAI,IAAY;AACtB,QAAI,IAAI,KAAK,GAAG;AAAA,EACjB;AACA,MAAI,IAAI,EAAE;AACX;AAGA,SAAS,gBAAgB,KAAa,OAAyB,QAA0B;AACxF,QAAM,YAAY,IAAI,WAAW,mBAAmB,MAAM,CAAC;AAC3D,QAAM,aAAa,YAAY,IAAI,IAAI,MAAM;AAC7C,gBAAc,KAAK,UAAU;AAE7B,MAAI,cAAc,SAAS,IAAM,eAAc,MAAM;AAErD,MAAI,MAAM,UAAU,cAAc;AACjC,sBAAkB,OAAO,WAAW;AACpC;AACA,oBAAgB,KAAK;AAAA,EACtB;AACA,uBAAqB,KAAK,WAAW,KAAK;AAC3C;AAGA,SAAS,oBACR,KACA,OACA,QACO;AAGP,QAAM,iBAAiB,MAAM,aAAa,MAAM;AAChD,MACC,MAAM,kBAAkB,kBACxB,MAAM,UAAU,cACf;AACD,sBAAkB,OAAO,UAAU;AACnC;AACA,oBAAgB,KAAK;AAAA,EACtB;AAMA,MAAI,UAAU,OAAO,aAAa,KAAK,MAAM,iBAAiB,gBAAgB;AAC7E,oBAAgB,KAAK,OAAO,MAAM;AAAA,EACnC;AACA,4BAA0B;AAC3B;AAGA,SAAS,oBACR,KACA,OACA,WACA,QACO;AAMP,MAAI,MAAM,kBAAkB,aAAa,MAAM,UAAU,cAAc;AACtE,sBAAkB,OAAO,UAAU;AACnC;AACA,oBAAgB,KAAK;AAAA,EACtB,WAAW,UAAU,OAAO,aAAa,GAAG;AAC3C,oBAAgB,KAAK,OAAO,MAAM;AAAA,EACnC;AACA,4BAA0B;AAC3B;AAQA,SAAS,cACR,KACA,MACA,SACA,KACO;AACP,QAAM,kBAAkB,IAAI,aAAa;AACzC,MAAI,KAAK,aAAa,iBAAiB;AACtC,UAAM,IAAI;AAAA,MACT,4DAA4D,KAAK,UAAU,mBAAmB,eAAe;AAAA,IAC9G;AAAA,EACD;AACA,QAAM,QAAQ,aAAa,IAAI,IAAI;AACnC,MAAI,CAAC,OAAO;AACX,QAAI,aAAa,IAAI,IAAI,GAAG;AAC3B;AACA;AAAA,IACD;AACA,QAAI,gBAAgB,IAAI,IAAI,IAAI,GAAG;AAClC;AACA;AAAA,IACD;AACA,UAAMA,UAAS,QAAQ,WAAW,IAAI,MAAM,MAAM,IAAI,EAAE;AACxD,wBAAoB,IAAI,IAAI;AAC5B,oBAAgB,IAAI,IAAI,MAAM,YAAY,IAAI,CAAC;AAC/C;AACA,QAAI,YAAa;AAIjB,QAAIA,WAAUA,QAAO,aAAa,GAAG;AACpC,WAAK;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,0BAA0BA,QAAO,UAAU,wCAAwC,IAAI,IAAI;AAAA,MACrG,CAAC;AAAA,IACF;AACA,8BAA0B;AAC1B;AAAA,EACD;AAEA,QAAM,MAAM,MAAM;AAClB,MAAI,aAAa,GAAG,GAAG;AACtB;AACA;AAAA,EACD;AACA,MAAI,gBAAgB,KAAK,GAAG;AAC3B;AACA;AAAA,EACD;AACA,QAAM,MAAM,eAAe,KAAK,IAAI,IAAI;AACxC,MAAI,mBAAmB,IAAI,GAAG,GAAG,IAAI,GAAG,GAAG;AAC1C;AACA;AAAA,EACD;AAEA,QAAM,SAAS,QAAQ,WAAW,IAAI,MAAM,MAAM,IAAI,EAAE;AACxD,sBAAoB,IAAI,IAAI;AAC5B,WAAS,oBAAoB,KAAK,GAAG;AACrC,QAAM;AACN,QAAM,eAAe,YAAY,IAAI;AACrC;AACA,MAAI,YAAa;AACjB,sBAAoB,KAAK,OAAO,MAAM;AACvC;AAGA,SAAS,wBACR,SACA,WAC+B;AAC/B,aAAW,SAAS,OAAO,OAAO,GAAG;AACpC,QAAI,iBAAiB,MAAM,KAAK,eAAe,KAAK,GAAG,SAAS,SAAS,EAAG,QAAO;AAAA,EACpF;AACA,SAAO;AACR;AAMA,SAAS,cAAc,SAAiB,WAAqC;AAC5E,QAAM,QAAQ,iBAAiB,SAAS,SAAS;AACjD,WAAS,MAAM,GAAG,MAAM,WAAW,OAAO;AACzC,UAAM,QAAQ,UAAU,OAAO;AAC/B,UAAM,YAAY,gBAAgB,IAAI,IAAI;AAC1C,QAAI,cAAc,OAAW;AAC7B,oBAAgB,OAAO,IAAI;AAC3B,aAAS,oBAAoB,SAAS,GAAG;AACzC,UAAM;AACN,QAAI,YAAY,MAAM,cAAe,OAAM,gBAAgB;AAAA,EAC5D;AACA,SAAO;AACR;AAQA,SAAS,cACR,KACA,MACA,SACO;AACP,QAAM,MAAM,IAAI;AAChB,MAAI,aAAa,GAAG,EAAG;AACvB,QAAM,gBAAgB,OAAO,IAAI,GAAG;AACpC,MAAI,iBAAiB,gBAAgB,aAAa,EAAG;AACrD,MAAI,eAAe;AAClB,QAAI,cAAc,cAAc,IAAI,WAAW;AAC9C,WAAK;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,uDAAuD,IAAI,SAAS,mBAAmB,cAAc,SAAS,aAAa,GAAG;AAAA,MACxI,CAAC;AACD;AAAA,IACD;AAAA,EACD,OAAO;AACN,UAAM,aAAa,wBAAwB,KAAK,IAAI,SAAS;AAC7D,QAAI,YAAY;AACf,WAAK;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,2DAA2D,GAAG,gBAAgB,IAAI,SAAS,mCAAmC,WAAW,GAAG,gBAAgB,eAAe,UAAU,CAAC;AAAA,MAChM,CAAC;AACD;AAAA,IACD;AAAA,EACD;AACA,QAAM,YAAY,IAAI,YAAY,IAAI;AACtC,MAAI,mBAAmB,IAAI,GAAG,GAAG,IAAI,SAAS,EAAG;AAEjD,QAAM,SAAS,QAAQ,WAAW,KAAK,IAAI,WAAW,IAAI,MAAM,MAAM,IAAI,EAAE;AAC5E,sBAAoB,GAAG;AACvB,QAAM,QAAQ,iBAAiB,cAAc,KAAK,IAAI,SAAS;AAC/D,WAAS,oBAAoB,KAAK,SAAS;AAC3C,QAAM;AACN,QAAM,eAAe,YAAY,IAAI;AACrC;AACA,sBAAoB,KAAK,OAAO,IAAI,WAAW,MAAM;AACtD;AAIA,eAAe,gBACd,KACgB;AAChB,MAAI,CAAC,IAAI,YAAY;AACpB,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC7D;AACA,MAAI,CAAC,IAAI,QAAQ;AAChB,UAAM,IAAI,MAAM,wCAAwC;AAAA,EACzD;AAGA,QAAM,eAAwB,IAAI,OAAO;AACzC,MAAI,iBAAiB,QAAW;AAC/B,UAAM,IAAI;AAAA,MACT;AAAA,IACD;AAAA,EACD;AACA,MAAI,iBAAiB,iBAAiB,iBAAiB,gBAAgB;AACtE,UAAM,IAAI;AAAA,MACT,oFAAoF,KAAK,UAAU,YAAY,CAAC;AAAA,IACjH;AAAA,EACD;AACA,MACC,CAAC,OAAO,SAAS,IAAI,OAAO,eAAe,KAC3C,CAAC,OAAO,UAAU,IAAI,OAAO,eAAe,KAC5C,IAAI,OAAO,mBAAmB,KAC9B,IAAI,OAAO,kBAAkB,sBAC5B;AACD,UAAM,IAAI;AAAA,MACT,mEAAmE,oBAAoB,SAAS,IAAI,OAAO,eAAe;AAAA,IAC3H;AAAA,EACD;AACA,MACC,CAAC,OAAO,SAAS,IAAI,OAAO,YAAY,KACxC,IAAI,OAAO,gBAAgB,GAC1B;AACD,UAAM,IAAI;AAAA,MACT,mEAAmE,IAAI,OAAO,YAAY;AAAA,IAC3F;AAAA,EACD;AACA,MACC,CAAC,OAAO,SAAS,IAAI,OAAO,gBAAgB,KAC5C,IAAI,OAAO,oBAAoB,GAC9B;AACD,UAAM,IAAI;AAAA,MACT,4DAA4D,IAAI,OAAO,gBAAgB;AAAA,IACxF;AAAA,EACD;AACA,MACC,CAAC,OAAO,UAAU,IAAI,OAAO,CAAC,KAC9B,IAAI,OAAO,KAAK,KAChB,IAAI,OAAO,IAAI,sCACd;AACD,UAAM,IAAI;AAAA,MACT,qDAAqD,oCAAoC,SAAS,IAAI,OAAO,CAAC;AAAA,IAC/G;AAAA,EACD;AACA,MACC,CAAC,OAAO,UAAU,IAAI,OAAO,UAAU,KACvC,IAAI,OAAO,cAAc,KACzB,IAAI,OAAO,aAAa,mBACxB,IAAI,OAAO,aAAa,MAAM,GAC7B;AACD,UAAM,IAAI;AAAA,MACT,6EAA6E,eAAe,SAAS,IAAI,OAAO,UAAU;AAAA,IAC3H;AAAA,EACD;AAEA,QAAM,OAAO,oBAAoB;AAGjC,OAAK,SAAS,EAAE,QAAQ,IAAI,WAAW,CAAC;AAIxC,eAAa,KAAK;AAClB,gBAAc;AACd,qBAAmB;AAInB,QAAM,UAAU,IAAI,KAAK,cAAc,IAAI,OAAO,iBAAiB,YAAY;AAC/E,uBAAqB,SAAS,YAAY;AAC1C,gBAAc;AACd,WAAS,IAAI;AACb,gBAAc,CAAC,CAAC,IAAI;AASpB,qBAAmB,KAAK,KAAK,OAAO,kBAAkB,GAAG;AAGzD,uBAAqB,KAAK,KAAK,OAAO,eAAe,OAAO,IAAI,GAAG;AAGnE,iBAAe;AACf,mBAAiB;AACjB,MAAI,IAAI,iBAAiB,IAAI,gBAAgB;AAC5C,QAAI;AAMH,YAAM,cAAc;AAEpB,YAAM,WAAgB,MAAM;AAAA;AAAA,QAAiC;AAAA;AAC7D,eAAS,SAAS,EAAE,QAAQ,IAAI,eAAe,CAAC;AAChD,YAAM,WAAW,IAAI,WAAW,IAAI,aAAa;AACjD,qBAAe,IAAI,SAAS,eAAe,QAAQ;AAAA,IACpD,SAAS,GAAG;AAOX,cAAQ,KAAK,6DAA6D,CAAC;AAC3E,qBAAe;AACf,oBAAc;AACd,uBAAiB;AAAA,IAClB;AAAA,EACD;AAEA,cAAY,iBAAiB,OAAO,GAAG,OAAO,UAAU;AAIxD,OAAK,EAAE,MAAM,gBAAgB,UAAU,CAAC,eAAe,uBAAuB,EAAE,CAAC;AAGjF,qBAAmB;AAGnB,eAAa;AACd;AAEA,SAAS,iBACR,KACO;AACP,MAAI,CAAC,aAAa;AACjB,UAAM,IAAI,MAAM,wCAAwC;AAAA,EACzD;AACA,MAAI,CAAC,QAAQ;AACZ,UAAM,IAAI,MAAM,wCAAwC;AAAA,EACzD;AACA,MACC,CAAC,SAAS,IAAI,IAAI,KAClB,EAAE,IAAI,gBAAgB,cACrB;AACD,UAAM,IAAI,MAAM,+CAA+C;AAAA,EAChE;AAEA,QAAM,OAAO,IAAI,WAAW,IAAI,IAAI;AACpC,MAAI,OAAO,iBAAiB,gBAAgB;AAC3C,kBAAc,KAAK,MAAM,aAAa,MAAM;AAC5C;AAAA,EACD;AAIA,QAAM,MAAM,OAAO,IAAI,IAAI,KAAK,MAAM,IAAI,OAAO,OAAO,CAAC,IAAI,IAAI;AACjE,QAAM,MAAM,IAAI,OAAO,OAAO;AAC9B,MAAI,aAAa,GAAG,GAAG;AACtB;AACA;AAAA,EACD;AACA,QAAM,gBAAgB,OAAO,IAAI,GAAG;AACpC,MAAI,iBAAiB,gBAAgB,aAAa,GAAG;AACpD;AACA;AAAA,EACD;AACA,MAAI,mBAAmB,IAAI,GAAG,GAAG,IAAI,GAAG,GAAG;AAC1C;AACA;AAAA,EACD;AAEA,QAAM,SAAS,YAAY,WAAW,IAAI,MAAM,MAAM,IAAI,EAAE;AAC5D,sBAAoB,GAAG;AACvB,MAAI,aAAa,mBAAmB,IAAI,GAAG;AAC3C,MAAI,CAAC,YAAY;AAChB,iBAAa,oBAAI,IAAY;AAC7B,uBAAmB,IAAI,KAAK,UAAU;AAAA,EACvC;AACA,aAAW,IAAI,GAAG;AAGlB,QAAM,QAAQ,iBAAiB,GAAG;AAClC,QAAM;AACN,QAAM,eAAe,YAAY,IAAI;AACrC;AAKA,MAAI,YAAa;AAEjB,sBAAoB,KAAK,OAAO,MAAM;AACvC;AAEA,SAAS,iBACR,KACO;AACP,MAAI,CAAC,aAAa;AACjB,UAAM,IAAI,MAAM,wCAAwC;AAAA,EACzD;AACA,MAAI,CAAC,QAAQ;AACZ,UAAM,IAAI,MAAM,wCAAwC;AAAA,EACzD;AAGA,QAAM,MAAM,OAAO,iBAAiB;AACpC,MACC,CAAC,SAAS,IAAI,OAAO,KACrB,CAAC,SAAS,IAAI,SAAS,KACvB,IAAI,aAAa,KACjB,IAAI,YAAY,OAAO,KACtB,CAAC,OAAO,IAAI,UAAU,OAAO,MAAM,KACpC,CAAC,SAAS,IAAI,IAAI,MACjB,MAAM,IAAI,YAAY,OAAO,KAAK,IAAI,OAAO,cAC9C,EAAE,IAAI,gBAAgB,cACrB;AACD,UAAM,IAAI,MAAM,+CAA+C;AAAA,EAChE;AAEA,QAAM,OAAO,IAAI,WAAW,IAAI,IAAI;AACpC,MAAI,OAAO,aAAa,KAAK,KAAK,eAAe,OAAO,YAAY;AACnE;AACA,QAAI,4BAA4B,KAAK,2BAA2B,QAAQ,GAAG;AAC1E,WAAK;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SAAS,6DAA6D,KAAK,UAAU,eAAe,OAAO,UAAU,cAAc,IAAI,OAAO,eAAe,IAAI,SAAS,UAAU,IAAI,IAAI;AAAA,MAC7L,CAAC;AAAA,IACF;AACA;AAAA,EACD;AACA,MAAI,KAAK;AACR,kBAAc,KAAK,MAAM,WAAW;AACpC;AAAA,EACD;AACA,QAAM,MAAM,KAAK,MAAM,IAAI,UAAU,OAAO,CAAC;AAC7C,QAAM,YAAY,OAAO,IAAI,IAAI;AAKjC,MAAI,aAAa,GAAG,EAAG;AACvB,QAAM,gBAAgB,OAAO,IAAI,GAAG;AACpC,MAAI,iBAAiB,gBAAgB,aAAa,EAAG;AACrD,MAAI,mBAAmB,IAAI,GAAG,GAAG,IAAI,SAAS,EAAG;AAGjD,MAAI,eAAe,cAAc,UAAa,cAAc,cAAc,IAAI,WAAW;AACxF,SAAK;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SAAS,uDAAuD,IAAI,SAAS,mBAAmB,cAAc,SAAS,SAAS,GAAG;AAAA,IACpI,CAAC;AACD;AAAA,EACD;AAEA,QAAM,SAAS,YAAY;AAAA,IAC1B,IAAI;AAAA,IACJ,IAAI;AAAA,IACJ,IAAI;AAAA,IACJ;AAAA,IACA,IAAI;AAAA,EACL;AACA,sBAAoB,GAAG;AACvB,MAAI,aAAa,mBAAmB,IAAI,GAAG;AAC3C,MAAI,CAAC,YAAY;AAChB,iBAAa,oBAAI,IAAY;AAC7B,uBAAmB,IAAI,KAAK,UAAU;AAAA,EACvC;AACA,aAAW,IAAI,SAAS;AACxB,QAAM,QAAQ,iBAAiB,GAAG;AAClC,QAAM,YAAY,IAAI;AACtB,QAAM;AACN,QAAM,eAAe,YAAY,IAAI;AACrC;AACA,sBAAoB,KAAK,OAAO,IAAI,WAAW,MAAM;AACtD;AAEA,SAAS,oBACR,KACO;AAEP,QAAM,QAAQ,OAAO,IAAI,IAAI,GAAG;AAChC,MAAI,OAAO;AAGV,UAAM,qBAAqB;AAC3B,oBAAgB,KAAK;AAAA,EACtB;AACD;AAEA,SAAS,cACR,KACO;AACP,MACC,CAAC,MAAM,QAAQ,IAAI,IAAI,KACvB,IAAI,KAAK,WAAW,KACpB,CAAC,IAAI,KAAK,MAAM,QAAQ,GACvB;AACD,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACpD;AACA,QAAM,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE,KAAK,CAAC,GAAG,MAAM,IAAI,CAAC;AACxD,QAAM,cAAc,KAAK,OAAO,CAAC,QAAQ,CAAC,aAAa,GAAG,CAAC;AAC3D,MAAI;AACH,QAAI,CAAC,aAAa;AACjB,YAAM,IAAI,MAAM,qCAAqC;AAAA,IACtD;AAKA,QAAI,YAAY,SAAS,GAAG;AAC3B,kBAAY,wBAAwB,YAAY,KAAK,WAAW,CAAC;AAAA,IAClE;AAQA,eAAW,OAAO,aAAa;AAC9B,UAAI,eAAe,OAAO,IAAI,GAAG;AACjC,UAAI,gBAAgB,gBAAgB,YAAY,GAAG;AAClD,0BAAkB,GAAG;AACrB;AAAA,MACD;AACA,uBAAiB,iBAAiB,GAAG;AAIrC,YAAM,iBAAiB,aAAa,IAAI,aAAa,YAAY,aAAa;AAC9E,UAAI,mBAAmB,UAAa,aAAa,kBAAkB,gBAAgB;AAClF,0BAAkB,cAAc,UAAU;AAC1C;AAAA,MACD,OAAO;AACN,0BAAkB,cAAc,QAAQ;AACxC;AAAA,MACD;AACA,sBAAgB,YAAY;AAAA,IAC7B;AAAA,EACD,UAAE;AAID,SAAK,EAAE,MAAM,mBAAmB,KAAK,CAAC;AAAA,EACvC;AACD;AAEA,SAAS,gBAAsB;AAE9B,MAAI,kBAAkB,MAAM;AAC3B,kBAAc,aAAa;AAC3B,oBAAgB;AAAA,EACjB;AAKA,MAAI,cAAc;AACjB,QAAI;AACH,mBAAa,KAAK;AAAA,IACnB,SAAS,IAAI;AAAA,IAEb;AACA,mBAAe;AAAA,EAChB;AAGA,MAAI,aAAa;AAChB,gBAAY,KAAK;AACjB,kBAAc;AAAA,EACf;AAGA,gBAAc,MAAM;AACpB,qBAAmB;AACnB,uBAAqB;AAErB,WAAS;AACT,qBAAmB;AACpB;AAEA,SAAS,cAAoB;AAC5B,MAAI;AACH,iBAAa,MAAM;AACnB,iBAAa,YAAY;AAAA,EAC1B,SAAS,KAAK;AACb,SAAK;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SACC,eAAe,QACZ,6BAA6B,IAAI,OAAO,KACxC,6BAA6B,OAAO,GAAG,CAAC;AAAA,IAC7C,CAAC;AACD;AAAA,EACD;AAEA,qBAAmB;AACnB,kBAAgB;AAChB,kBAAgB;AAChB,mBAAiB;AACjB,oBAAkB;AAClB,iBAAe;AACf,iBAAe;AACf,eAAa;AACb,oBAAkB,SAAS;AAC3B,gBAAc;AACd,0BAAwB;AACxB,0BAAwB;AACxB,cAAY;AACZ,wBAAsB;AACtB,sBAAoB;AACpB,6BAA2B;AAC3B,yBAAuB;AACvB,0BAAwB;AACxB,2BAAyB;AACzB,0BAAwB;AACxB,OAAK,EAAE,MAAM,gBAAgB,CAAC;AAC9B,MAAI,OAAQ,cAAa;AAC1B;AAQA,SAAS,kBACR,KACO;AACP,MAAI,CAAC,MAAM,QAAQ,IAAI,OAAO,GAAG;AAChC,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACpE;AACA,aAAW,UAAU,IAAI,SAAS;AACjC,QAAI;AACH,UAAI,QAAQ,SAAS,aAAc,kBAAiB,MAAM;AAAA,eACjD,QAAQ,SAAS,aAAc,kBAAiB,MAAM;AAAA,WAC1D;AACJ,cAAM,IAAI;AAAA,UACT,gDAAgD,OAAQ,QAAsC,IAAI,CAAC;AAAA,QACpG;AAAA,MACD;AAAA,IACD,SAAS,KAAK;AACb,WAAK;AAAA,QACJ,MAAM;AAAA,QACN,MAAM;AAAA,QACN,SACC,eAAe,QAAQ,IAAI,UAAU,eAAe,OAAO,GAAG,CAAC;AAAA,MACjE,CAAC;AAAA,IACF;AAAA,EACD;AACD;AAIA,eAAe,gBAAgB,KAAsC;AACpE,MAAI;AACH,YAAQ,IAAI,MAAM;AAAA,MACjB,KAAK;AAIJ,cAAM,gBAAgB,GAAG;AACzB;AAAA,MACD,KAAK;AACJ,yBAAiB,GAAG;AACpB;AAAA,MACD,KAAK;AACJ,yBAAiB,GAAG;AACpB;AAAA,MACD,KAAK;AACJ,0BAAkB,GAAG;AACrB;AAAA,MACD,KAAK;AACJ,4BAAoB,GAAG;AACvB;AAAA,MACD,KAAK;AACJ,sBAAc,GAAG;AACjB;AAAA,MACD,KAAK;AACJ,oBAAY;AACZ;AAAA,MACD,KAAK;AACJ,iCAAyB;AACzB;AAAA,MACD,KAAK;AACJ,sBAAc;AACd;AAAA,MACD;AACC,aAAK;AAAA,UACJ,MAAM;AAAA,UACN,MAAM;AAAA,UACN,SAAS,yBAA0B,IAAgC,IAAI;AAAA,QACxE,CAAC;AAAA,IACH;AAAA,EACD,SAAS,KAAK;AACb,SAAK;AAAA,MACJ,MAAM;AAAA,MACN,MAAM;AAAA,MACN,SACC,eAAe,QAAQ,IAAI,UAAU,eAAe,OAAO,GAAG,CAAC;AAAA,IACjE,CAAC;AAAA,EACF;AACD;AAEA,IAAI,eAA8B,QAAQ,QAAQ;AAElD,KAAK,YAAY,CAAC,MAAsC;AACvD,QAAM,MAAM,EAAE;AACd,iBAAe,aAAa,KAAK,MAAM,gBAAgB,GAAG,CAAC;AAC5D;",
+  "names": ["result"]
+}

package/node_modules/@blockcast/fec-worker/dist/index.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @blockcast/fec-worker — Worker-per-track FEC decode with zero-copy transfers
+ *
+ * Re-exports shared types and main-thread client.
+ */
+export type { FecWorkerCommand, FecSymbolCommand, FecWorkerOptionalCommand, FecWorkerEvent, FecWorkerErrorCode, FecBlockProfile, FecTrackConfig, FecTrackStats, FecBlockSnapshot, FrameMeta, } from "./fec-worker-types.js";
+export { FecWorkerClient } from "./fec-worker-client.js";
+export type { ShredWorkerCommand, ShredWorkerEvent, ShredWorkerConfig, ShredWorkerStats, ShredWorkerErrorCode, RecoveredMeta, SlotSample, } from "./shred-worker-types.js";
+export { ShredWorkerClient } from "./shred-worker-client.js";
+//# sourceMappingURL=index.d.ts.map

package/node_modules/@blockcast/fec-worker/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,YAAY,EACX,gBAAgB,EAChB,gBAAgB,EAChB,wBAAwB,EACxB,cAAc,EACd,kBAAkB,EAClB,eAAe,EACf,cAAc,EACd,aAAa,EACb,gBAAgB,EAChB,SAAS,GACT,MAAM,uBAAuB,CAAC;AAE/B,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAKzD,YAAY,EACX,kBAAkB,EAClB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,oBAAoB,EACpB,aAAa,EACb,UAAU,GACV,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/node_modules/@blockcast/fec-worker/dist/index.js

@@ -0,0 +1,8 @@
+/**
+ * @blockcast/fec-worker — Worker-per-track FEC decode with zero-copy transfers
+ *
+ * Re-exports shared types and main-thread client.
+ */
+export { FecWorkerClient } from "./fec-worker-client.js";
+export { ShredWorkerClient } from "./shred-worker-client.js";
+//# sourceMappingURL=index.js.map

package/node_modules/@blockcast/fec-worker/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAeH,OAAO,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AAezD,OAAO,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC"}

package/node_modules/@blockcast/fec-worker/dist/shred-fec-worker.d.ts

@@ -0,0 +1,20 @@
+/**
+ * @blockcast/fec-worker — Shred (Reed-Solomon) Worker Entry Point
+ *
+ * Runs inside a DedicatedWorkerGlobalScope. Owns the batch-drain: reads raw
+ * shred frames (either from a transferred `ReadableStream` or via `feedShred`),
+ * parses the wire header, drives the `ShredFecBuffer` WASM decoder, and posts
+ * only recovered FEC sets (plus a coalesced stats heartbeat) back to the main
+ * thread. This moves the datagram read loop + wire parse + WASM FEC entirely
+ * off the main thread, so the page does no `read()`-per-packet work.
+ *
+ * WASM bindings resolve via:
+ *   1. (self as any).__SHRED_WASM_BINDINGS__ — injected by a loader/importmap
+ *      or by tests (mirrors the RaptorQ worker's __MMT_WASM_BINDINGS__ contract)
+ *   2. dynamic import of config.wasmUrl (wasm-bindgen ESM: `await default()`
+ *      then `new ShredFecBuffer(...)`)
+ *
+ * This file must NOT import DOM globals incompatible with Worker scope.
+ */
+export {};
+//# sourceMappingURL=shred-fec-worker.d.ts.map

package/node_modules/@blockcast/fec-worker/dist/shred-fec-worker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shred-fec-worker.d.ts","sourceRoot":"","sources":["../src/shred-fec-worker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG"}

package/node_modules/@blockcast/fec-worker/dist/shred-fec-worker.js

@@ -0,0 +1,370 @@
+// Self-contained worker bundle (no bare imports). See build.mjs.
+
+// src/shred-worker-types.ts
+var SHRED_WIRE_VERSION = 3;
+var SHRED_WIRE_VERSION_FULL = 4;
+var SHRED_HEADER_LEN = 28;
+var SHRED_FLAG_DATA_COMPLETE = 1;
+var SHRED_FLAG_IS_CODING = 2;
+
+// src/transfer.ts
+function toOwnedArrayBuffer(view) {
+  const copy = new Uint8Array(view.byteLength);
+  copy.set(view);
+  return copy.buffer;
+}
+
+// src/shred-fec-worker.ts
+function callAddShred(dec, slot, fecSetIndex, localIndex, numData, numCoding, isCoding, payload, lastInSet) {
+  if (dec.add_shred.length >= 7) {
+    return dec.add_shred(slot, fecSetIndex, localIndex, numData, numCoding, isCoding, payload, lastInSet);
+  }
+  if (!isCoding) return dec.add_shred(slot, fecSetIndex, localIndex, payload, lastInSet);
+  return null;
+}
+var decoder = null;
+var configureGen = 0;
+var statsTimer = null;
+var recoverTimer = null;
+var activeStreamReader = null;
+var disposed = false;
+var maxSlot = 0n;
+var lastSlotSampled = null;
+var slotSamples = [];
+var SLOT_SAMPLE_CAP = 256;
+var setSendTs = /* @__PURE__ */ new Map();
+var SET_TS_CAP = 4096;
+function setKey(slot, fecSetIndex) {
+  return slot << 32n | BigInt(fecSetIndex >>> 0);
+}
+function recordSetSendTs(slot, fecSetIndex, sendTsUs) {
+  if (sendTsUs === 0n) return;
+  const key = setKey(slot, fecSetIndex);
+  if (setSendTs.has(key)) return;
+  if (setSendTs.size >= SET_TS_CAP) return;
+  setSendTs.set(key, sendTsUs);
+}
+var stats = {
+  shredsRx: 0,
+  sourceShreds: 0,
+  repairShreds: 0,
+  fecSetsCompleted: 0,
+  bytesReassembled: 0,
+  fecSetsRecovered: 0,
+  pendingFecSets: -1,
+  malformed: 0,
+  versionMismatch: 0,
+  currentSlot: "0",
+  slotSamples: []
+};
+function post(event, transfer = []) {
+  self.postMessage(event, transfer);
+}
+function postError(message, code) {
+  post({ type: "error", message, code });
+}
+function emitRecovered(view, meta) {
+  const buf = toOwnedArrayBuffer(view);
+  stats.fecSetsCompleted++;
+  stats.bytesReassembled += buf.byteLength;
+  if (meta.recovered) stats.fecSetsRecovered++;
+  post({ type: "recovered", data: buf, meta }, [buf]);
+}
+function postStats() {
+  if (decoder && typeof decoder.pending_fec_sets === "function") {
+    try {
+      stats.pendingFecSets = decoder.pending_fec_sets();
+    } catch {
+    }
+  }
+  stats.currentSlot = maxSlot.toString();
+  const drainedSamples = slotSamples;
+  slotSamples = [];
+  post({ type: "stats", stats: { ...stats, slotSamples: drainedSamples } });
+}
+function erasureShardOfFullShred(shred, isCoding) {
+  if (shred.byteLength !== (isCoding ? 1228 : 1203)) return null;
+  const variant = shred[64];
+  const family = variant & 240;
+  const variantIsCoding = family === 96 || family === 112;
+  const variantIsData = family === 144 || family === 176;
+  if (isCoding ? !variantIsCoding : !variantIsData) return null;
+  const resigned = family === 176 || family === 112;
+  const trailer = 32 + (variant & 15) * 20 + (resigned ? 64 : 0);
+  const start = isCoding ? 89 : 64;
+  const end = shred.byteLength - trailer;
+  if (end <= start) return null;
+  return shred.subarray(start, end);
+}
+function ingestFrame(frame) {
+  if (frame.byteLength < SHRED_HEADER_LEN) {
+    stats.malformed++;
+    return;
+  }
+  const dv = new DataView(frame.buffer, frame.byteOffset, frame.byteLength);
+  const version = dv.getUint8(0);
+  if (version !== SHRED_WIRE_VERSION && version !== SHRED_WIRE_VERSION_FULL) {
+    stats.versionMismatch++;
+    return;
+  }
+  const slot = dv.getBigUint64(1, true);
+  const fecSetIndex = dv.getUint32(9, true);
+  const localIndex = dv.getUint32(13, true);
+  const flags = dv.getUint8(17);
+  const dataComplete = (flags & SHRED_FLAG_DATA_COMPLETE) !== 0;
+  const isCoding = (flags & SHRED_FLAG_IS_CODING) !== 0;
+  const numData = dv.getUint8(18);
+  const numCoding = dv.getUint8(19);
+  const sendTsUs = dv.getBigUint64(20, true);
+  const body = frame.subarray(SHRED_HEADER_LEN);
+  const payload = version === SHRED_WIRE_VERSION ? body : erasureShardOfFullShred(body, isCoding);
+  if (payload === null) {
+    stats.malformed++;
+    return;
+  }
+  stats.shredsRx++;
+  if (isCoding) stats.repairShreds++;
+  else stats.sourceShreds++;
+  if (slot > maxSlot) maxSlot = slot;
+  if (lastSlotSampled === null || slot !== lastSlotSampled) {
+    lastSlotSampled = slot;
+    if (slotSamples.length < SLOT_SAMPLE_CAP) {
+      slotSamples.push({ slot, sendTsUs, bytes: frame.byteLength });
+    }
+  }
+  recordSetSendTs(slot, fecSetIndex, sendTsUs);
+  if (!decoder) return;
+  let result;
+  try {
+    result = callAddShred(
+      decoder,
+      slot,
+      fecSetIndex,
+      localIndex,
+      numData,
+      numCoding,
+      isCoding,
+      payload,
+      dataComplete
+    );
+  } catch (err) {
+    postError(`add_shred threw: ${errString(err)}`, "worker-runtime");
+    return;
+  }
+  if (result && result.byteLength > 0) {
+    setSendTs.delete(setKey(slot, fecSetIndex));
+    emitRecovered(result, { slot, fecSetIndex, sendTsUs, recovered: false });
+  }
+}
+function recoverAll(nowMs) {
+  if (!decoder) return;
+  if (typeof decoder.try_recover_all_with_identity === "function") {
+    let set;
+    try {
+      set = decoder.try_recover_all_with_identity(nowMs);
+    } catch (err) {
+      postError(`try_recover_all_with_identity threw: ${errString(err)}`, "worker-runtime");
+      return;
+    }
+    if (!set) return;
+    const slot = set.slot;
+    const fecSetIndex = set.fec_set_index;
+    const payload = set.payload;
+    try {
+      set.free?.();
+    } catch {
+    }
+    const key = setKey(slot, fecSetIndex);
+    const sendTsUs = setSendTs.get(key) ?? 0n;
+    setSendTs.delete(key);
+    if (!payload || payload.byteLength === 0) return;
+    emitRecovered(payload, { slot, fecSetIndex, sendTsUs, recovered: true });
+    return;
+  }
+  if (typeof decoder.try_recover_all !== "function") return;
+  let result;
+  try {
+    result = decoder.try_recover_all(nowMs);
+  } catch (err) {
+    postError(`try_recover_all threw: ${errString(err)}`, "worker-runtime");
+    return;
+  }
+  if (result && result.byteLength > 0) {
+    emitRecovered(result, {
+      slot: 0n,
+      fecSetIndex: 0,
+      sendTsUs: 0n,
+      recovered: true
+    });
+  }
+}
+async function drainStream(readable) {
+  await cancelActiveStream();
+  const reader = readable.getReader();
+  activeStreamReader = reader;
+  try {
+    for (; ; ) {
+      const { value, done } = await reader.read();
+      if (done || disposed) break;
+      if (value) ingestFrame(value);
+    }
+  } catch (err) {
+    if (!disposed) postError(`stream read failed: ${errString(err)}`, "stream-read-failed");
+  } finally {
+    if (activeStreamReader === reader) activeStreamReader = null;
+    try {
+      reader.releaseLock();
+    } catch {
+    }
+  }
+}
+async function cancelActiveStream() {
+  const reader = activeStreamReader;
+  if (!reader) return;
+  activeStreamReader = null;
+  try {
+    await reader.cancel();
+  } catch {
+  }
+  try {
+    reader.releaseLock();
+  } catch {
+  }
+}
+function pickDecoderCtor(b) {
+  if (typeof b.ShredFecBuffer === "function") return b.ShredFecBuffer;
+  if (typeof b.ShredReassembler === "function") return b.ShredReassembler;
+  return null;
+}
+async function loadBindings(cfg) {
+  const injected = self.__SHRED_WASM_BINDINGS__;
+  if (injected && pickDecoderCtor(injected)) {
+    return injected;
+  }
+  if (!cfg.wasmUrl) {
+    throw new Error(
+      "no shred WASM: set self.__SHRED_WASM_BINDINGS__ = { ShredFecBuffer } or pass config.wasmUrl"
+    );
+  }
+  const mod = await import(
+    /* @vite-ignore */
+    cfg.wasmUrl
+  );
+  if (typeof mod.default === "function") await mod.default();
+  if (!pickDecoderCtor(mod)) {
+    throw new Error(
+      `shred WASM at ${cfg.wasmUrl} exports neither ShredFecBuffer nor ShredReassembler`
+    );
+  }
+  return mod;
+}
+async function configure(cfg) {
+  const gen = ++configureGen;
+  disposed = false;
+  teardownTimers();
+  await cancelActiveStream();
+  if (decoder?.free) {
+    try {
+      decoder.free();
+    } catch {
+    }
+  }
+  decoder = null;
+  setSendTs.clear();
+  let bindings;
+  try {
+    bindings = await loadBindings(cfg);
+  } catch (err) {
+    if (gen === configureGen) postError(errString(err), "wasm-load-failed");
+    return;
+  }
+  if (gen !== configureGen) return;
+  const Ctor = pickDecoderCtor(bindings);
+  if (!Ctor) {
+    postError("no shred decoder constructor after load", "wasm-bindings-missing");
+    return;
+  }
+  try {
+    decoder = new Ctor(BigInt(cfg.maxSlots), cfg.symbolSize);
+  } catch (err) {
+    postError(`shred decoder ctor threw: ${errString(err)}`, "wasm-load-failed");
+    return;
+  }
+  teardownTimers();
+  const statsMs = cfg.statsIntervalMs ?? 250;
+  if (statsMs > 0) statsTimer = setInterval(postStats, statsMs);
+  const recoverMs = cfg.recoverIntervalMs ?? 50;
+  if (recoverMs > 0) recoverTimer = setInterval(() => recoverAll(Date.now()), recoverMs);
+}
+function teardownTimers() {
+  if (statsTimer !== null) {
+    clearInterval(statsTimer);
+    statsTimer = null;
+  }
+  if (recoverTimer !== null) {
+    clearInterval(recoverTimer);
+    recoverTimer = null;
+  }
+}
+async function dispose() {
+  disposed = true;
+  teardownTimers();
+  await cancelActiveStream();
+  if (decoder?.free) {
+    try {
+      decoder.free();
+    } catch {
+    }
+  }
+  decoder = null;
+  setSendTs.clear();
+}
+self.onmessage = (e) => {
+  const cmd = e.data;
+  switch (cmd.type) {
+    case "configure":
+      void configure(cmd.config).catch(
+        (err) => postError(errString(err), "wasm-load-failed")
+      );
+      break;
+    case "attachStream":
+      if (!decoder) {
+        postError("attachStream before configure", "not-configured");
+        void cancelStreamHandle(cmd.readable);
+        break;
+      }
+      void drainStream(cmd.readable);
+      break;
+    case "feedShred":
+      if (!decoder) {
+        postError("feedShred before configure", "not-configured");
+        break;
+      }
+      ingestFrame(new Uint8Array(cmd.frame));
+      break;
+    case "recoverAll":
+      recoverAll(cmd.nowMs);
+      break;
+    case "dispose":
+      void dispose();
+      break;
+    default: {
+      const _exhaustive = cmd;
+      postError(`unknown command: ${JSON.stringify(_exhaustive)}`, "unknown-command");
+    }
+  }
+};
+self.onmessageerror = () => {
+  postError("failed to deserialize worker message", "worker-message");
+};
+async function cancelStreamHandle(readable) {
+  try {
+    await readable.cancel();
+  } catch {
+  }
+}
+function errString(err) {
+  if (err instanceof Error) return err.message;
+  return String(err);
+}
+//# sourceMappingURL=shred-fec-worker.js.map