@blockcast/mmt-container 2.1.0 → 2.2.0-main.51d1358fdf4c

package/dist/multicast-transport.d.ts

@@ -42,7 +42,13 @@ export interface MulticastTransportConfig {
      */
     protected?: boolean;
 }
-export type ResolvedMulticastTransport = 'native' | 'amt';
+/**
+ * The leg a join resolved to. `'user-agent'`: the browser's own
+ * `MulticastReceiver` delivers it, which picks native or AMT itself and does
+ * not say which. CMCD has no user-agent value, so a caller reports a
+ * `'user-agent'` join as `'native'` (`TransportSnapshot.transport`).
+ */
+export type ResolvedMulticastTransport = 'native' | 'amt' | 'user-agent';
 /**
  * Why a joined transport handed control back to MoQ.
  *
@@ -268,8 +274,10 @@ export declare class MulticastTransport<TPacketContext = never> {
     /** Whether a subscription is live: joined, and not yet released or replaced. */
     get joined(): boolean;
     /**
-     * What the live join delivers with every accepted packet (the join's
-     * `context`, or the last setContext), or undefined without a live join.
+     * The live join's context as the caller gave it (the join's `context`, or
+     * the last setContext), or undefined without a live join. On a native
+     * provider each accepted packet is delivered with a marked copy of it
+     * (`userAgentVerifiedIngress`); this getter never carries the mark.
      */
     get context(): TPacketContext | undefined;
     /**

package/dist/multicast-transport.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"multicast-transport.d.ts","sourceRoot":"","sources":["../src/multicast-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAIL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE5B,MAAM,0BAA0B,CAAA;AASjC,MAAM,WAAW,wBAAwB;IACvC,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7C,qFAAqF;IACrF,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,KAAK,CAAA;AAEzD;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,0BAA0B,GAClC,UAAU,GACV,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,CAAA;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAA;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAA;CACpD,CAAA;AAEL;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,8EAA8E;IAC9E,6BAA6B,EAAE,MAAM,CAAA;IACrC,uFAAuF;IACvF,yBAAyB,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,uBAAuB,EAAE,MAAM,CAAA;IAC/B;;;;;;;;OAQG;IACH,2BAA2B,EAAE,MAAM,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAA;CACxE;AAkID,qBAAa,kBAAkB,CAAC,cAAc,GAAG,KAAK;;IAuFpD;;;;OAIG;gBAED,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,KAAK,IAAI,EAChE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;KAAO;IAOzF,MAAM,CAAC,WAAW,IAAI,OAAO;IAIvB,IAAI,CAAC,MAAM,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAkRxF;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IASlG,YAAY,IAAI,IAAI;IAKpB,YAAY,IAAI,IAAI;IAKpB,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI;IAIhC,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI;IAI/D;;;OAGG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI;IAIjE,kEAAkE;IAClE,IAAI,QAAQ,IAAI,uBAAuB,GAAG,SAAS,CAElD;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI;IAIrC,4EAA4E;IAC5E,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAuBlD,IAAI,KAAK,IAAI,uBAAuB,CAEnC;IAED;;;;;;;;;;;;;;OAcG;IACH,IAAI,eAAe,IAAI,oBAAoB,GAAG,SAAS,CAEtD;IAED;;;;OAIG;IACH,IAAI,SAAS,IAAI,kBAAkB,CAKlC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,yBAAyB,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM;IAQjE;;;;OAIG;IACH,IAAI,gBAAgB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAElD;IAED;;;;;;OAMG;IACH,IAAI,qBAAqB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE/C;IAED;;;;;OAKG;IACH,IAAI,sBAAsB,IAAI,MAAM,CAEnC;IAED,uEAAuE;IACvE,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IAED,gFAAgF;IAChF,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;OAGG;IACH,IAAI,OAAO,IAAI,cAAc,GAAG,SAAS,CAExC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAE1C;IAED;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IASzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAyEzD,IAAI,iBAAiB,IAAI,0BAA0B,GAAG,SAAS,CAE9D;IAED,OAAO,IAAI,IAAI;CAgMhB"}
+{"version":3,"file":"multicast-transport.d.ts","sourceRoot":"","sources":["../src/multicast-transport.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAOL,KAAK,uBAAuB,EAC5B,KAAK,sBAAsB,EAE5B,MAAM,0BAA0B,CAAA;AASjC,MAAM,WAAW,wBAAwB;IACvC,kCAAkC;IAClC,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kGAAkG;IAClG,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,EAAE,MAAM,CAAA;IACpB,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,CAAC,EAAE,MAAM,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,wEAAwE;IACxE,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,MAAM,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;IAC7C,qFAAqF;IACrF,KAAK,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IACjE;;;;;;;;;;;;OAYG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED;;;;;GAKG;AACH,MAAM,MAAM,0BAA0B,GAAG,QAAQ,GAAG,KAAK,GAAG,YAAY,CAAA;AAExE;;;;;;;;GAQG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,CAAA;AAEpE;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,MAAM,0BAA0B,GAClC,UAAU,GACV,aAAa,GACb,YAAY,GACZ,iBAAiB,GACjB,mBAAmB,GACnB,sBAAsB,GACtB,sBAAsB,CAAA;AAE1B;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;IACxB,sEAAsE;IACtE,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CACvB;AAED;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAA;CAAE,GACrB;IACE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAA;IAClB,QAAQ,CAAC,MAAM,EAAE,0BAA0B,CAAA;IAC3C,QAAQ,CAAC,aAAa,CAAC,EAAE,0BAA0B,CAAA;CACpD,CAAA;AAEL;;;;;;;;;;GAUG;AACH,MAAM,WAAW,uBAAuB;IACtC,eAAe,EAAE,MAAM,CAAA;IACvB,aAAa,EAAE,MAAM,CAAA;IACrB,8EAA8E;IAC9E,6BAA6B,EAAE,MAAM,CAAA;IACrC,uFAAuF;IACvF,yBAAyB,EAAE,MAAM,CAAA;IACjC;;;;;OAKG;IACH,uBAAuB,EAAE,MAAM,CAAA;IAC/B;;;;;;;;OAQG;IACH,2BAA2B,EAAE,MAAM,CAAA;CACpC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,uCAAuC;IACvC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,oEAAoE;IACpE,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,0BAA0B,EAAE,MAAM,CAAC,CAAC,CAAA;CACxE;AA0HD,qBAAa,kBAAkB,CAAC,cAAc,GAAG,KAAK;;IA0FpD;;;;OAIG;gBAED,QAAQ,EAAE,CAAC,MAAM,EAAE,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,KAAK,IAAI,EAChE,OAAO,GAAE;QAAE,OAAO,CAAC,EAAE,sBAAsB,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;KAAO;IAOzF,MAAM,CAAC,WAAW,IAAI,OAAO;IAIvB,IAAI,CAAC,MAAM,EAAE,wBAAwB,EAAE,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,OAAO,CAAC;IAsRxF;;;;OAIG;IACH,UAAU,CAAC,IAAI,EAAE,WAAW,GAAG,UAAU,EAAE,OAAO,CAAC,EAAE,cAAc,EAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI;IASlG,YAAY,IAAI,IAAI;IAKpB,YAAY,IAAI,IAAI;IAKpB,UAAU,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI;IAIhC,UAAU,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI;IAI/D;;;OAGG;IACH,UAAU,CAAC,EAAE,EAAE,CAAC,QAAQ,EAAE,uBAAuB,KAAK,IAAI,GAAG,IAAI;IAIjE,kEAAkE;IAClE,IAAI,QAAQ,IAAI,uBAAuB,GAAG,SAAS,CAElD;IAED;;;;;;;;OAQG;IACH,eAAe,CAAC,EAAE,EAAE,MAAM,IAAI,GAAG,IAAI;IAIrC,4EAA4E;IAC5E,IAAI,aAAa,IAAI,OAAO,CAE3B;IAED,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI;IAuBlD,IAAI,KAAK,IAAI,uBAAuB,CAEnC;IAED;;;;;;;;;;;;;;OAcG;IACH,IAAI,eAAe,IAAI,oBAAoB,GAAG,SAAS,CAEtD;IAED;;;;OAIG;IACH,IAAI,SAAS,IAAI,kBAAkB,CAKlC;IAED;;;;;;;;;;;;;;;;;;;OAmBG;IACH,yBAAyB,CAAC,SAAS,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,MAAM;IAQjE;;;;OAIG;IACH,IAAI,gBAAgB,IAAI,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAElD;IAED;;;;;;OAMG;IACH,IAAI,qBAAqB,IAAI,WAAW,CAAC,MAAM,CAAC,CAE/C;IAED;;;;;OAKG;IACH,IAAI,sBAAsB,IAAI,MAAM,CAEnC;IAED,uEAAuE;IACvE,IAAI,MAAM,IAAI,MAAM,GAAG,SAAS,CAE/B;IAED,gFAAgF;IAChF,IAAI,MAAM,IAAI,OAAO,CAEpB;IAED;;;;;OAKG;IACH,IAAI,OAAO,IAAI,cAAc,GAAG,SAAS,CAExC;IAED;;;OAGG;IACH,IAAI,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAE1C;IAED;;;;;OAKG;IACH,UAAU,CAAC,OAAO,EAAE,cAAc,GAAG,IAAI;IAqBzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4BG;IACH,YAAY,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC;IAyEzD,IAAI,iBAAiB,IAAI,0BAA0B,GAAG,SAAS,CAE9D;IAED,OAAO,IAAI,IAAI;CAkMhB"}

package/dist/multicast-transport.js

@@ -206,11 +206,33 @@ var AdaptiveBitrateController = class {
 };
 
 // node_modules/@blockcast/mmt-base/dist/mmtp.js
+var MMTP_HEADER_SIZE = 12;
 var MPU_HEADER_SIZE = 8;
 var MPU_LENGTH_FIELD_SIZE = 2;
 var MPU_HEADER_REMAINDER_SIZE = MPU_HEADER_SIZE - MPU_LENGTH_FIELD_SIZE;
 var MMTP_SIGNALING_PACKET_ID = 0;
 var MMTP_PACKET_ID_MAX = 65535;
+function readMMTPPacketId(buffer) {
+  if (buffer.length < MMTP_HEADER_SIZE)
+    return null;
+  const flags = buffer[0];
+  if ((flags >> 6 & 3) !== 0)
+    return null;
+  let offset = MMTP_HEADER_SIZE;
+  if ((flags & 32) !== 0) {
+    if (offset + 4 > buffer.length)
+      return null;
+    offset += 4;
+  }
+  if ((flags & 2) !== 0) {
+    if (offset + 4 > buffer.length)
+      return null;
+    const length = buffer[offset + 2] << 8 | buffer[offset + 3];
+    if (offset + 4 + length > buffer.length)
+      return null;
+  }
+  return buffer[2] << 8 | buffer[3];
+}
 
 // node_modules/@blockcast/mmt-base/dist/net-constants.js
 var DEFAULT_AMT_RELAY_PORT = 2268;
@@ -1196,6 +1218,205 @@ var TransportManager = class {
 };
 var transportManager = new TransportManager();
 
+// node_modules/@blockcast/mmt-transport/dist/multicast-receiver-gateway.js
+var REGISTRY = /* @__PURE__ */ Symbol.for("@blockcast/mmt-transport/native-provider-registry/v1");
+var USER_AGENT_VERIFIED = /* @__PURE__ */ Symbol.for("@blockcast/mmt-transport/user-agent-verified/v1");
+var INTEGRITY_SCHEME = "manifest-ed25519-2";
+var MulticastError = class extends Error {
+  code;
+  constructor(code, message, cause) {
+    super(message, cause === void 0 ? void 0 : { cause });
+    this.name = "MulticastError";
+    this.code = code;
+  }
+};
+function datagramsOf(chunk) {
+  const list = Array.isArray(chunk) ? chunk : chunk?.datagrams ?? [];
+  const out = [];
+  for (const d of list) {
+    const data = d instanceof Uint8Array || d instanceof ArrayBuffer ? d : d?.data;
+    if (data instanceof Uint8Array)
+      out.push(data);
+    else if (data instanceof ArrayBuffer)
+      out.push(new Uint8Array(data));
+  }
+  return out;
+}
+function reasonOf(value) {
+  return typeof value === "object" && value !== null && "reason" in value ? value.reason : value;
+}
+function registry() {
+  const g = globalThis;
+  if (g[REGISTRY] === void 0) {
+    const providers = /* @__PURE__ */ new WeakSet();
+    const byScope = /* @__PURE__ */ new WeakMap();
+    Object.defineProperty(g, REGISTRY, {
+      value: Object.freeze({
+        isProvider: (x) => typeof x === "object" && x !== null && providers.has(x),
+        providerFor: (scope) => {
+          let provider = byScope.get(scope);
+          if (provider === void 0) {
+            provider = createProvider(scope);
+            providers.add(provider);
+            byScope.set(scope, provider);
+          }
+          return provider;
+        }
+      }),
+      writable: false,
+      configurable: false,
+      enumerable: false
+    });
+  }
+  return g[REGISTRY];
+}
+function resolveMulticastGateway(scope = globalThis) {
+  const s = scope;
+  if (typeof s.MulticastReceiver === "function")
+    return registry().providerFor(scope);
+  if (typeof s.multicast?.subscribe === "function")
+    return s.multicast;
+  return void 0;
+}
+function isUserAgentVerifiedGateway(gateway) {
+  return registry().isProvider(gateway);
+}
+function userAgentVerifiedIngress(ingress, gateway) {
+  if (isUserAgentVerifiedGateway(gateway))
+    return { ...ingress, admittedBy: USER_AGENT_VERIFIED };
+  if (!("admittedBy" in ingress))
+    return ingress;
+  const { admittedBy: _, ...rest } = ingress;
+  return rest;
+}
+function unsupported(message, cause) {
+  return new MulticastError("capability-unsupported", message, cause);
+}
+function createProvider(scope) {
+  const Receiver = scope.MulticastReceiver;
+  let gate = null;
+  return {
+    capabilities: () => Promise.resolve({ consumeModes: ["bytes"] }),
+    subscribe: async (config) => {
+      const c = config;
+      if (c.consume !== "bytes")
+        throw unsupported(`consume mode ${String(c.consume)} is not supported`);
+      const origin = c.origin ?? "ip-multicast";
+      if (origin !== "ip-multicast" && !(origin === "amt" && c.discovery === "driad")) {
+        throw unsupported(`origin ${String(origin)} is not supported by MulticastReceiver`);
+      }
+      if (c.relay !== void 0)
+        throw unsupported("MulticastReceiver picks its own AMT relay");
+      if (!c.source)
+        throw unsupported("MulticastReceiver needs an SSM source");
+      if (c.senderAddress !== void 0 && c.senderAddress !== c.source) {
+        throw unsupported("MulticastReceiver filters by source only");
+      }
+      const options = { sourceAddress: c.source, groupAddress: c.group, localPort: c.port };
+      if (gate !== null)
+        await gate;
+      let rx;
+      try {
+        rx = new Receiver(options);
+      } catch (error) {
+        throw unsupported("MulticastReceiver refused the request", error);
+      }
+      const opened = rx.opened;
+      if (gate === null)
+        gate = opened.then(() => void 0, () => void 0);
+      return openSubscription(rx, opened, options, c.packetIds);
+    }
+  };
+}
+async function openSubscription(rx, openedPromise, options, packetIds) {
+  let opened;
+  try {
+    opened = await openedPromise;
+  } catch (error) {
+    throw new MulticastError("subscription-failed", "MulticastReceiver did not open", error);
+  }
+  if (rx.integrityScheme !== INTEGRITY_SCHEME) {
+    await rx.close();
+    throw unsupported(`integrity scheme ${String(rx.integrityScheme)} is not ${INTEGRITY_SCHEME}`);
+  }
+  const events = new EventTarget();
+  let state = "connected";
+  let filter = packetIds?.length ? new Set(packetIds) : null;
+  let closing = false;
+  const setState = (next) => {
+    if (state === next)
+      return;
+    state = next;
+    events.dispatchEvent(new CustomEvent("state", { detail: next }));
+  };
+  const sourceAddress = options.sourceAddress;
+  const subscription = {
+    id: `${options.sourceAddress}|${options.groupAddress}|${options.localPort}`,
+    get state() {
+      return state;
+    },
+    delivery: "datagram",
+    eventTypes: Object.freeze(["bytes", "packets", "state", "error"]),
+    setPacketIds(ids) {
+      filter = ids.length ? new Set(ids) : null;
+    },
+    addEventListener: events.addEventListener.bind(events),
+    removeEventListener: events.removeEventListener.bind(events),
+    async unsubscribe() {
+      closing = true;
+      await rx.close();
+      setState("closed");
+    }
+  };
+  void (async () => {
+    const reader = opened.readable.getReader();
+    try {
+      for (; ; ) {
+        const { value, done } = await reader.read();
+        if (done)
+          break;
+        const packets = [];
+        for (const data of datagramsOf(value)) {
+          if (filter !== null) {
+            const id = readMMTPPacketId(data);
+            if (id === null || !filter.has(id))
+              continue;
+          }
+          const copy = data.slice().buffer;
+          packets.push(copy);
+          events.dispatchEvent(Object.assign(new CustomEvent("bytes", { detail: copy }), { sourceAddress }));
+        }
+        if (packets.length > 0)
+          events.dispatchEvent(new CustomEvent("packets", { detail: packets }));
+      }
+    } catch {
+    }
+  })();
+  void rx.closed.then((value) => {
+    const reason = reasonOf(value);
+    if (!closing) {
+      if (reason === "consent-withdrawn") {
+        events.dispatchEvent(new CustomEvent("error", {
+          detail: new MulticastError("origin-not-trusted", "multicast consent withdrawn")
+        }));
+      } else if (reason === "oversubscribed" || reason === "network") {
+        events.dispatchEvent(new CustomEvent("error", {
+          detail: new MulticastError("subscription-failed", `MulticastReceiver closed: ${reason}`)
+        }));
+      }
+    }
+    setState("closed");
+  }, (error) => {
+    if (!closing) {
+      events.dispatchEvent(new CustomEvent("error", {
+        detail: new MulticastError("subscription-failed", "MulticastReceiver failed", error)
+      }));
+    }
+    setState("closed");
+  });
+  return subscription;
+}
+
 // node_modules/@blockcast/mmt-transport/dist/moqt-priority.js
 var MAX_MOQT_PRIORITY = 255;
 function moqtPriority(value, field) {
@@ -1402,19 +1623,19 @@ var AMTGatewayManager = class {
 var amtGatewayManager = new AMTGatewayManager();
 
 // ../mmt-base/dist/mmtp.js
-var MMTP_HEADER_SIZE = 12;
+var MMTP_HEADER_SIZE2 = 12;
 var MPU_HEADER_SIZE2 = 8;
 var MPU_LENGTH_FIELD_SIZE2 = 2;
 var MPU_HEADER_REMAINDER_SIZE2 = MPU_HEADER_SIZE2 - MPU_LENGTH_FIELD_SIZE2;
 var MMTP_SIGNALING_PACKET_ID2 = 0;
 var MMTP_PACKET_ID_MAX2 = 65535;
-function readMMTPPacketId(buffer) {
-  if (buffer.length < MMTP_HEADER_SIZE)
+function readMMTPPacketId2(buffer) {
+  if (buffer.length < MMTP_HEADER_SIZE2)
     return null;
   const flags = buffer[0];
   if ((flags >> 6 & 3) !== 0)
     return null;
-  let offset = MMTP_HEADER_SIZE;
+  let offset = MMTP_HEADER_SIZE2;
   if ((flags & 32) !== 0) {
     if (offset + 4 > buffer.length)
       return null;
@@ -1544,11 +1765,8 @@ function providerErrorOf(error) {
   return Object.freeze(typeof code === "string" ? { name, message, code } : { name, message });
 }
 var MAX_TRACKED_DROPPED_PIDS = 16;
-function getMulticastGlobals() {
-  return globalThis;
-}
 function hasMulticastGateway() {
-  return typeof getMulticastGlobals().multicast?.subscribe === "function";
+  return typeof resolveMulticastGateway()?.subscribe === "function";
 }
 function senderOf(event) {
   const sourceAddress = event.sourceAddress;
@@ -1640,6 +1858,9 @@ var MulticastTransport = class {
   // listener closure, so an in-place admission change (setContext) applies
   // from the next packet on without rejoining.
   #context = void 0;
+  #deliveredContext = void 0;
+  /** The live join's gateway, when it is the user agent's MulticastReceiver provider. */
+  #userAgentGateway = void 0;
   // The live join's provider-side filter. An in-place widening must reach it,
   // or the provider never delivers the new ID; null without a live join.
   #providerFilter = null;
@@ -1676,7 +1897,7 @@ var MulticastTransport = class {
     this.#dataPlaneLive = false;
     this.#sender = void 0;
     if (this.#disposed) return this.#declined(generation, "disposed");
-    const gateway = this.#gateway ?? getMulticastGlobals().multicast;
+    const gateway = this.#gateway ?? resolveMulticastGateway();
     if (typeof gateway?.subscribe !== "function") {
       console.warn("[MulticastTransport] Multicast API not available");
       return this.#declined(generation, "unavailable");
@@ -1692,15 +1913,16 @@ var MulticastTransport = class {
       console.log(
         `[MulticastTransport] window.multicast.subscribe(${config.sourceAddress ?? config.senderAddress ?? "*"}, ${config.groupAddress}, ${config.port})`
       );
+      const userAgent = isUserAgentVerifiedGateway(gateway);
       const subscribeConfig = toWindowMulticastSubscribeConfig({
         source: config.sourceAddress,
         senderAddress: config.senderAddress,
         group: config.groupAddress,
         port: config.port,
-        mode: config.mode,
-        amtRelay: config.amtRelay,
-        amtRelayPort: config.amtRelayPort,
-        amtDiscovery: config.amtDiscovery,
+        mode: userAgent ? "native" : config.mode,
+        amtRelay: userAgent ? void 0 : config.amtRelay,
+        amtRelayPort: userAgent ? void 0 : config.amtRelayPort,
+        amtDiscovery: userAgent ? void 0 : config.amtDiscovery,
         packetIds: config.packetIds,
         tracks: config.tracks,
         atsc3: config.atsc3
@@ -1746,7 +1968,8 @@ var MulticastTransport = class {
         acknowledgedUpdate: 0,
         inFlight: 0
       };
-      this.#context = context;
+      this.#userAgentGateway = userAgent ? gateway : void 0;
+      this.#setContext(context);
       if (packetIds) {
         for (const packetId of packetIds) {
           if (!this.#acceptedBytesByPacketId.has(packetId)) {
@@ -1754,7 +1977,7 @@ var MulticastTransport = class {
           }
         }
       }
-      this.#resolvedTransport = subscribeConfig.origin === "amt" ? "amt" : "native";
+      this.#resolvedTransport = userAgent ? "user-agent" : subscribeConfig.origin === "amt" ? "amt" : "native";
       const delivery = subscription.delivery ?? "datagram";
       if (delivery !== "datagram" && delivery !== "ordered-relay") {
         throw new Error(
@@ -1835,7 +2058,7 @@ var MulticastTransport = class {
     }
     if (!this.#acceptPacket(packet, sourceAddress)) return false;
     const liveness = !this.#isRecordCandidate(packet);
-    this.#onPacket(packet, this.#context);
+    this.#onPacket(packet, this.#deliveredContext);
     return liveness;
   }
   #isRecordCandidate(packet) {
@@ -2046,8 +2269,10 @@ var MulticastTransport = class {
     return this.#subscription !== null;
   }
   /**
-   * What the live join delivers with every accepted packet (the join's
-   * `context`, or the last setContext), or undefined without a live join.
+   * The live join's context as the caller gave it (the join's `context`, or
+   * the last setContext), or undefined without a live join. On a native
+   * provider each accepted packet is delivered with a marked copy of it
+   * (`userAgentVerifiedIngress`); this getter never carries the mark.
    */
   get context() {
     return this.#context;
@@ -2071,7 +2296,16 @@ var MulticastTransport = class {
         "[MulticastTransport] setContext needs a live join; join() carries the first context"
       );
     }
+    this.#setContext(context);
+  }
+  /**
+   * The join's context, and what the subscription delivers with each packet:
+   * marked admitted by the user agent when the gateway is its native
+   * MulticastReceiver provider. feedPacket never marks.
+   */
+  #setContext(context) {
     this.#context = context;
+    this.#deliveredContext = this.#userAgentGateway !== void 0 && typeof context === "object" && context !== null ? userAgentVerifiedIngress(context, this.#userAgentGateway) : context;
   }
   /**
    * Replace the live join's packet-ID allow-list in place, without rejoining.
@@ -2203,6 +2437,8 @@ var MulticastTransport = class {
     this.#matchedSource = void 0;
     this.#providerFilter = null;
     this.#context = void 0;
+    this.#deliveredContext = void 0;
+    this.#userAgentGateway = void 0;
     this.#withdrawnPacketIds.clear();
   }
   /** The ingress filter; an accepted packet is counted here, once. */
@@ -2224,7 +2460,7 @@ var MulticastTransport = class {
       this.#countAccepted(packet, null, void 0);
       return true;
     }
-    const packetId = readMMTPPacketId(packet);
+    const packetId = readMMTPPacketId2(packet);
     if (packetId === null) {
       if (!this.#packetIds) {
         this.#countAccepted(packet, null, sourceAddress);