@blockcast/mmt-container 2.2.0-main.6c178bf47550 → 2.2.0-main.75b39a2cdddf

package/dist/browser-runtime.js

@@ -7988,8 +7988,8 @@ var MulticastSubscriptionPool = class {
       record.claims--;
       return this.acquire(gateway, config, consumer);
     }
-    const token = Symbol(key);
-    entry.consumers.set(token, consumer);
+    const token2 = Symbol(key);
+    entry.consumers.set(token2, consumer);
     let released = false;
     return {
       key,
@@ -7997,7 +7997,7 @@ var MulticastSubscriptionPool = class {
         if (released)
           return;
         released = true;
-        entry.consumers.delete(token);
+        entry.consumers.delete(token2);
         record.claims--;
         if (record.claims > 0)
           return;
@@ -8625,9 +8625,9 @@ async function openSubscription(rx, openedPromise, options, packetIds) {
   } catch (error) {
     throw new MulticastError("subscription-failed", "MulticastReceiver did not open", error);
   }
-  if (rx.integrityScheme !== INTEGRITY_SCHEME) {
+  if (opened.integrityScheme !== INTEGRITY_SCHEME) {
     await rx.close();
-    throw unsupported(`integrity scheme ${String(rx.integrityScheme)} is not ${INTEGRITY_SCHEME}`);
+    throw unsupported(`integrity scheme ${String(opened.integrityScheme)} is not ${INTEGRITY_SCHEME}`);
   }
   const events = new EventTarget();
   let state = "connected";
@@ -8746,14 +8746,15 @@ var MOQT_PUBLISHER_PRIORITY = Object.freeze({
 });
 
 // node_modules/@blockcast/mmt-transport/dist/amt-gateway.js
+var MAX_PENDING_PACKETS = 256;
 var AMTGatewayManager = class {
   subscriptions = /* @__PURE__ */ new Map();
   messageHandler;
+  messageListenerRegistered = false;
   pendingPackets = /* @__PURE__ */ new Map();
   constructor() {
     this.messageHandler = (event) => {
       const data = event.data;
-      console.log(`[AMT] SW message received:`, data.type);
       if (data.type === "UDP_PACKET") {
         this.handlePacket(data);
       } else if (data.type === "SOCKET_ERROR") {
@@ -8762,12 +8763,22 @@ var AMTGatewayManager = class {
         console.log(`[AMT SW Debug] ${data.message}`);
       }
     };
-    if (typeof navigator !== "undefined" && navigator.serviceWorker) {
-      navigator.serviceWorker.addEventListener("message", this.messageHandler);
-      console.log("[AMT] Registered service worker message handler");
-    } else {
-      console.warn("[AMT] Service worker not available");
+  }
+  ensureMessageListener() {
+    if (this.messageListenerRegistered || typeof navigator === "undefined" || !navigator.serviceWorker || !this.messageHandler) {
+      return;
+    }
+    navigator.serviceWorker.addEventListener("message", this.messageHandler);
+    this.messageListenerRegistered = true;
+    console.log("[AMT] Registered service worker message handler");
+  }
+  removeMessageListener() {
+    if (!this.messageListenerRegistered)
+      return;
+    if (this.messageHandler && typeof navigator !== "undefined" && navigator.serviceWorker) {
+      navigator.serviceWorker.removeEventListener("message", this.messageHandler);
     }
+    this.messageListenerRegistered = false;
   }
   /**
    * Subscribe via AMT tunnel
@@ -8777,6 +8788,7 @@ var AMTGatewayManager = class {
     if (config.protected) {
       throw new Error("AMTGatewayManager refuses a protected join: it reports no per-datagram sender (multicast-02 7.2.7)");
     }
+    this.ensureMessageListener();
     const keyStr = this.getKeyString(key);
     if (this.subscriptions.has(keyStr)) {
       console.log(`[AMT] Reusing existing subscription to ${keyStr}`);
@@ -8812,6 +8824,8 @@ var AMTGatewayManager = class {
         this.subscriptions.delete(keyStr);
         this.pendingPackets.delete(subscription.subscriptionId);
       }
+      if (this.subscriptions.size === 0)
+        this.removeMessageListener();
       throw new Error(`Failed to subscribe via AMT: ${error instanceof Error ? error.message : String(error)}`);
     }
   }
@@ -8833,6 +8847,8 @@ var AMTGatewayManager = class {
     } finally {
       this.subscriptions.delete(handle);
       this.pendingPackets.delete(subscription.subscriptionId);
+      if (this.subscriptions.size === 0)
+        this.removeMessageListener();
     }
   }
   /**
@@ -8849,14 +8865,12 @@ var AMTGatewayManager = class {
     if (!subscriptionId)
       return;
     const subscription = this.subscriptions.get(subscriptionId);
-    if (!subscription) {
-      console.warn(`[AMT] Received packet for unknown subscription: ${subscriptionId}`);
+    if (!subscription)
       return;
-    }
     if (!subscription.handshakeComplete) {
       const queue = this.pendingPackets.get(subscriptionId);
       const packetData2 = data;
-      if (queue) {
+      if (queue && queue.length < MAX_PENDING_PACKETS) {
         queue.push({
           data: packetData2.data,
           remoteAddress: packetData2.remoteAddress,
@@ -8882,19 +8896,15 @@ var AMTGatewayManager = class {
     if (!subscriptionId)
       return;
     const subscription = this.subscriptions.get(subscriptionId);
-    if (!subscription) {
-      console.warn(`[AMT] Received error for unknown subscription: ${subscriptionId}`);
+    if (!subscription)
       return;
-    }
     subscription.config.onError(new Error(error || "Unknown error"));
   }
   /**
    * Cleanup on destroy
    */
   destroy() {
-    if (this.messageHandler && typeof navigator !== "undefined" && navigator.serviceWorker) {
-      navigator.serviceWorker.removeEventListener("message", this.messageHandler);
-    }
+    this.removeMessageListener();
     const handles = Array.from(this.subscriptions.keys());
     for (const handle of handles) {
       this.unsubscribe(handle).catch((err) => {
@@ -12939,6 +12949,7 @@ var IsoBlockLocator = class _IsoBlockLocator {
   #retentionBlocks;
   #heldEvicted;
   #newest;
+  #newestSource;
   #holes;
   static #checkedRetention(retentionBlocks) {
     if (!Number.isSafeInteger(retentionBlocks) || retentionBlocks <= 0) {
@@ -12976,6 +12987,21 @@ var IsoBlockLocator = class _IsoBlockLocator {
   observe(position) {
     if (this.#newest === void 0 || serial32Precedes(this.#newest, position)) this.#newest = position;
   }
+  /**
+   * The newest source SS_ID noted with `noteSource` (RFC 1982 order). Unlike
+   * `newest`, a repair never moves it: a repair can run ahead of its sources,
+   * a source cannot run ahead of the sources sent before it except by
+   * reordering.
+   */
+  get newestSource() {
+    return this.#newestSource;
+  }
+  /** Note a received source's SS_ID; true when it is the newest one yet. */
+  noteSource(ssId) {
+    if (this.#newestSource !== void 0 && !serial32Precedes(this.#newestSource, ssId)) return false;
+    this.#newestSource = ssId;
+    return true;
+  }
   /** Held sources evicted by `heldCapacity` (never by the horizon itself). */
   get heldEvicted() {
     return this.#heldEvicted;
@@ -13208,6 +13234,7 @@ var IsoBlockLocator = class _IsoBlockLocator {
     this.#held.clear();
     this.#coverageEnd = void 0;
     this.#newest = void 0;
+    this.#newestSource = void 0;
   }
   #claim(block) {
     const placed = [];
@@ -13827,6 +13854,7 @@ var WORKER_ERROR_LOG_CAP = 5;
 var WORKER_ERROR_KIND_CAP = 32;
 var WORKER_ERROR_OVERFLOW_KIND = "other";
 var STARTUP_REPAIR_WAIT_SOURCE_BOUNDARIES = 2;
+var NOT_TAKEN = Object.freeze({ taken: false, recovered: null });
 function isMulticastSymbolDelivery(value) {
   return value === "datagram" || value === "ordered-relay";
 }
@@ -13924,6 +13952,10 @@ var FECManager = class _FECManager {
     // Source symbol count per track-scoped block — marks complete when K symbols arrive.
     this.#blockSourceCounts = /* @__PURE__ */ new Map();
     this.#blockSourceEsis = /* @__PURE__ */ new Map();
+    // Source ESIs per block that another FEC instance rebuilt and fed in
+    // (feedRebuiltSourceSymbol). Kept apart from #blockSourceEsis: they are
+    // not network arrivals and never make a block clean.
+    this.#blockRebuiltEsis = /* @__PURE__ */ new Map();
     // Authored SSB_length per block (ISO/IEC 23008-1 §C.5.3), learned from the
     // first repair symbol. The FFmpeg moq_mmt publisher closes a block every D
     // media units, usually before it holds K symbols; under iso-ssbg1-v1
@@ -14052,6 +14084,10 @@ var FECManager = class _FECManager {
     // ── Keyframe-protected repair policy (block-policy.ts) ──
     // One classifier per physical stream, built from that stream's geometry.
     this.#classifiers = /* @__PURE__ */ new Map();
+    // A stream without catalog timing has no classifier, so the last RAP it
+    // released stands in for one: "an MPU boundary bounds its RAPs" holds until
+    // a second RAP is released inside one MPU (BLO-52085).
+    this.#noSpanRaps = /* @__PURE__ */ new Map();
     // Geometry a stream-scoped configuration gave one stream (streamKey). ABR
     // rungs can share a packetId with a different framerate or GOP, so the
     // packet-level geometry is only the geometry of a packet whose streams
@@ -14209,6 +14245,7 @@ var FECManager = class _FECManager {
   #pendingWorkerCleanupBounds;
   #blockSourceCounts;
   #blockSourceEsis;
+  #blockRebuiltEsis;
   #blockAuthoredLengths;
   #ssbLengthConflictCount;
   #blockRepairRsIds;
@@ -14251,6 +14288,7 @@ var FECManager = class _FECManager {
   #orderedFrontiers;
   #orderedPendingBlocks;
   #classifiers;
+  #noSpanRaps;
   #streamGeometries;
   #failedBlocks;
   #resolvedBlockClasses;
@@ -14912,6 +14950,7 @@ var FECManager = class _FECManager {
     };
     const discontinuity = () => {
       this.#classifiers.get(streamKey)?.noteSourceDiscontinuity();
+      this.#noSpanRaps.delete(streamKey);
       this.#highestSbn.set(streamKey, { sbn, atMs: now });
       this.#sourceFrontiers.set(streamKey, { sbn, atMs: now });
       if (psn === void 0) this.#sourceAnchors.delete(streamKey);
@@ -15324,6 +15363,9 @@ var FECManager = class _FECManager {
     }
     if (policyChanged) {
       this.#bumpEpoch(packetId);
+      for (const key of [...this.#noSpanRaps.keys()]) {
+        if (this.#belongsToPacket(key, packetId)) this.#noSpanRaps.delete(key);
+      }
       for (const [key, classifier] of [...this.#classifiers]) {
         if (!this.#belongsToPacket(key, packetId)) continue;
         const stream = this.#parseStreamKey(key);
@@ -15526,6 +15568,7 @@ var FECManager = class _FECManager {
     }
     resetMap(this.#blockSourceCounts);
     resetMap(this.#blockSourceEsis);
+    resetMap(this.#blockRebuiltEsis);
     resetMap(this.#blockAuthoredLengths);
     resetMap(this.#blockRepairRsIds);
     resetMap(this.#blockRsbLengths);
@@ -15559,6 +15602,7 @@ var FECManager = class _FECManager {
     resetMap(this.#isoLocators);
     resetMap(this.#sourceAnchors);
     this.#classifiers.delete(this.#streamKey(packetId, catalogTrackName));
+    this.#noSpanRaps.delete(this.#streamKey(packetId, catalogTrackName));
     this.#bumpEpoch(packetId);
     for (const [sbn, keys] of this.#blockKeysBySbn) {
       for (const key of keys.keys()) {
@@ -15649,6 +15693,7 @@ var FECManager = class _FECManager {
     dropMap(this.#pendingWorkerCleanupClients);
     dropMap(this.#blockSourceCounts);
     dropMap(this.#blockSourceEsis);
+    dropMap(this.#blockRebuiltEsis);
     dropMap(this.#blockAuthoredLengths);
     dropMap(this.#blockRepairRsIds);
     dropMap(this.#blockRsbLengths);
@@ -15665,6 +15710,7 @@ var FECManager = class _FECManager {
     dropMap(this.#isoLocators);
     dropMap(this.#sourceAnchors);
     dropMap(this.#classifiers);
+    dropMap(this.#noSpanRaps);
     dropMap(this.#streamGeometries);
     dropSet(this.#pendingWorkerCleanups);
     dropSet(this.#completedBlocks);
@@ -15810,6 +15856,9 @@ var FECManager = class _FECManager {
         this.#unindexBlockKey(key);
       }
     }
+    if (isSourceSymbol && source === "multicast") {
+      this.#noteMulticastSource(this.#isoLocatorFor(packetId, catalogTrackName), sbn + esi >>> 0, packetId, catalogTrackName);
+    }
     return true;
   }
   #observeBlockCatalogTrackName(blockKey, sbn, packetId, catalogTrackName) {
@@ -16127,6 +16176,7 @@ var FECManager = class _FECManager {
     const locator = this.#growingIsoLocatorFor(packetId, catalogTrackName);
     const evictedBefore = locator.heldEvicted;
     const held = locator.hold(ssId, source);
+    if (held && source.source === "multicast") this.#noteMulticastSource(locator, ssId, packetId, catalogTrackName);
     const evicted = locator.heldEvicted - evictedBefore;
     if (evicted > 0) {
       const before = this.#isoHeldEvictedCount;
@@ -16295,11 +16345,14 @@ var FECManager = class _FECManager {
   /**
    * Whether an MPU boundary still bounds this stream's RAPs (see
    * `BlockClassifier.mpuBoundsRaps`). Gap decisions drop MPU evidence once
-   * it does not. A stream with no classifier yet has shown nothing against it.
+   * it does not. A stream with no classifier yet has shown nothing against it,
+   * and neither has a stream without catalog timing until it releases two
+   * RAPs inside one MPU.
    */
   mpuBoundsRapsFor(packetId, catalogTrackName) {
-    if (!this.#hasCatalogTimingForPacket(packetId)) return false;
-    return this.#classifiers.get(this.#streamKey(packetId, catalogTrackName))?.mpuBoundsRaps ?? true;
+    const streamKey = this.#streamKey(packetId, catalogTrackName);
+    if (!this.#hasCatalogTimingForPacket(packetId)) return this.#noSpanRaps.get(streamKey)?.inside !== true;
+    return this.#classifiers.get(streamKey)?.mpuBoundsRaps ?? true;
   }
   /** A block's class now, or frozen at its resolution. */
   blockClassFor(sbn, packetId, catalogTrackName) {
@@ -16325,7 +16378,14 @@ var FECManager = class _FECManager {
    * invariant (consecutive MPUs exactly one keyframe interval apart).
    */
   noteReleasedRap(packetId, catalogTrackName, mpu, presentationTime, mediaTimescale) {
-    if (!this.#trackConfigs.has(packetId) || !this.#hasCatalogTimingForPacket(packetId)) return;
+    if (!this.#trackConfigs.has(packetId)) return;
+    if (!this.#hasCatalogTimingForPacket(packetId)) {
+      const streamKey = this.#streamKey(packetId, catalogTrackName);
+      const last = this.#noSpanRaps.get(streamKey);
+      const inside = last?.inside === true || last?.mpu === mpu && last.presentationTime !== presentationTime;
+      this.#noSpanRaps.set(streamKey, { mpu, presentationTime, inside });
+      return;
+    }
     this.#applyClassifierChanges(
       packetId,
       catalogTrackName,
@@ -16712,7 +16772,15 @@ var FECManager = class _FECManager {
       this.#isoSourceOversizeCount++;
       return null;
     }
-    const sbn = located.block.start;
+    return this.#feedDecoderSource(packetId, ssId, symbolData, catalogTrackName, located.block.start);
+  }
+  /**
+   * Hand one placed source symbol to the stream's decoder: its Worker, which
+   * answers through onFrame (null here), or its synchronous decoder, whose
+   * recovered block is returned. `sbn` is the SS_Start of the block a repair
+   * stated for `ssId`.
+   */
+  #feedDecoderSource(packetId, ssId, symbolData, catalogTrackName, sbn) {
     const blockKey = this.#blockKey(sbn, packetId, catalogTrackName);
     const syncBlockOwner = this.#syncDecoderBlockOwners.get(blockKey);
     const workerClient = this.#routableWorkerForPacket(packetId, catalogTrackName);
@@ -16741,6 +16809,74 @@ var FECManager = class _FECManager {
     }
     return recovered;
   }
+  /**
+   * Feed a source symbol of this stream that another FEC instance over the
+   * same packets rebuilt: a keyframe overlay recovery whose base SS_ID the
+   * caller determined (draft-ramadan-moq-mmt-02 7.1, 7.4.4; joint decoding,
+   * BLO-52085). It joins its block's decoder as a received source would, so
+   * it reduces the erasures the block still has to solve, but it is not a
+   * network arrival: no transport accounting, no classification evidence,
+   * no deadline refresh, and it never makes a block clean.
+   *
+   * Only a block a repair stated takes one (a repair-less span has no
+   * decoder block). A block that is terminal, or already holds that source,
+   * does not. The symbol is the exact protected packet, unpadded, as
+   * feedSourceSymbol takes it.
+   *
+   * `recovered` is the block the synchronous decoder completed with it; the
+   * caller routes it and completes the block, as for any recovery. When
+   * every source of the block is then present, received or rebuilt, and no
+   * decoder returned it (a Worker answers asynchronously, and reports such a
+   * block as clean on its own side), the block is completed here as
+   * recovered, with nothing left to route.
+   */
+  feedRebuiltSourceSymbol(packetId, ssId, symbolData, catalogTrackName) {
+    if (!this.#hasBlockProfile(packetId)) return NOT_TAKEN;
+    const located = this.#isoLocatorFor(packetId, catalogTrackName).locate(ssId);
+    if (located === null || located.block.span) return NOT_TAKEN;
+    if (!ssbg1FitsSymbol(symbolData.byteLength, this.#trackConfig(packetId).symbolSize)) return NOT_TAKEN;
+    const sbn = located.block.start;
+    const key = this.#blockKey(sbn, packetId, catalogTrackName);
+    if (this.#completedBlocks.has(key) || this.#blockSourceEsis.get(key)?.has(located.esi)) return NOT_TAKEN;
+    let rebuilt = this.#blockRebuiltEsis.get(key);
+    if (rebuilt?.has(located.esi)) return NOT_TAKEN;
+    if (rebuilt === void 0) {
+      rebuilt = /* @__PURE__ */ new Set();
+      this.#blockRebuiltEsis.set(key, rebuilt);
+    }
+    const config = this.#trackConfigs.get(packetId);
+    const wasShort = config !== void 0 && this.#lateSourceWaitMs(key, sbn, packetId, catalogTrackName, config) !== void 0;
+    rebuilt.add(located.esi);
+    const recovered = this.#feedDecoderSource(packetId, ssId, symbolData, catalogTrackName, sbn);
+    if (recovered === null && !this.#completeWhenSourcesPresent(key, sbn, located.block.length, packetId, catalogTrackName)) {
+      if (wasShort && this.#activeBlocks.has(key) && this.#lateSourceWaitMs(key, sbn, packetId, catalogTrackName, config) === void 0) {
+        this.#armBlockTimeout(sbn, packetId, catalogTrackName, this.#multicastWaitMs(config));
+      }
+    }
+    return { taken: true, recovered };
+  }
+  /**
+   * A block that holds every one of its `length` sources, received or
+   * rebuilt by another instance, with at least one rebuilt, is recovered:
+   * every packet of it was delivered, by its own arrival or by the instance
+   * that rebuilt it, so nothing is routed. Returns whether it completed it.
+   */
+  #completeWhenSourcesPresent(key, sbn, length, packetId, catalogTrackName) {
+    const rebuilt = this.#blockRebuiltEsis.get(key);
+    if (rebuilt === void 0 || this.#completedBlocks.has(key)) return false;
+    let present = rebuilt.size;
+    for (const esi of this.#blockSourceEsis.get(key) ?? []) if (!rebuilt.has(esi)) present++;
+    if (present < length) return false;
+    this.#traceLifecycle("recovered", sbn, packetId, catalogTrackName);
+    this.countRecovery(packetId, sbn, catalogTrackName);
+    this.cancelBlockTimeout(sbn, packetId, catalogTrackName);
+    if (catalogTrackName === void 0) {
+      this.onBlockComplete?.(sbn, packetId);
+    } else {
+      this.onBlockComplete?.(sbn, packetId, catalogTrackName);
+    }
+    return true;
+  }
   /**
    * fec-01 4.5: a reed-solomon repair packet whose SSB_length + RSB_length
    * exceeds 255, or whose RS_ID is not below RSB_length, is discarded with the
@@ -16943,8 +17079,75 @@ var FECManager = class _FECManager {
       this.#completeCleanBlock(blockKey, sbn, packetId, catalogTrackName);
       return null;
     }
+    if (recovered === null) this.#shortenUnrecoverableWait(blockKey, sbn, packetId, catalogTrackName);
     return recovered;
   }
+  /**
+   * A first-arrival multicast source, held or placed. A datagram flow keeps
+   * its sources in send order, so one that moves the stream's newest source
+   * position past a block leaves the sources that block still misses
+   * reordered behind it at best: it shortens the wait of every block it
+   * passed that only a late source can complete. MoQ is left out: its streams
+   * can overtake one another, so a MoQ source shows nothing about the sources
+   * sent before it.
+   */
+  #noteMulticastSource(locator, ssId, packetId, catalogTrackName) {
+    const previous = locator.newestSource;
+    if (!locator.noteSource(ssId) || previous === void 0) return;
+    for (const block of locator.blocksBetween(previous - 1 >>> 0, ssId)) {
+      if (block.span || !serial32Precedes(serial32Add(block.start, block.length - 1), ssId)) continue;
+      this.#shortenUnrecoverableWait(
+        this.#blockKey(block.start, packetId, catalogTrackName),
+        block.start,
+        packetId,
+        catalogTrackName
+      );
+    }
+  }
+  /**
+   * The wait of a block that only a late source can complete (BLO-52085): a
+   * repair stated it, its received sources plus every symbol its repair group
+   * carries (RSB_length) are short of K' (the repair scheduler's
+   * group-cannot-complete), and a later source of the stream has arrived, so
+   * a source it misses is lost or reordered behind that one. The span, which
+   * covers repair symbols paced after its sources, buys it nothing: it waits
+   * the late-symbol allowance alone, the multicast wait less the span (the
+   * catalog tolerance or the measured delivery gap). Undefined for any other
+   * block.
+   */
+  #lateSourceWaitMs(key, sbn, packetId, catalogTrackName, config) {
+    const authoredLength = this.#blockAuthoredLengths.get(key);
+    const rsbLength = this.#blockRsbLengths.get(key);
+    if (authoredLength === void 0 || rsbLength === void 0) return void 0;
+    let present = this.#blockSourceCounts.get(key) ?? 0;
+    const received = this.#blockSourceEsis.get(key);
+    for (const esi of this.#blockRebuiltEsis.get(key) ?? []) if (!received?.has(esi)) present++;
+    if (present + rsbLength >= authoredLength) return void 0;
+    const newestSource = this.#isoLocators.get(this.#streamKey(packetId, catalogTrackName))?.newestSource;
+    if (newestSource === void 0 || !serial32Precedes(serial32Add(sbn, authoredLength - 1), newestSource)) {
+      return void 0;
+    }
+    return this.#multicastWaitMs(config) - config.interleaveDepthMs;
+  }
+  /**
+   * Bring an open block's wait in to its late-source wait, when it has one.
+   * Never later than it is armed: only a source can complete such a block,
+   * so a repair of its group (paced across the span) must not keep it open.
+   */
+  #shortenUnrecoverableWait(key, sbn, packetId, catalogTrackName) {
+    if (!this.#activeBlocks.has(key)) return;
+    const config = this.#trackConfigs.get(packetId);
+    if (config === void 0) return;
+    const waitMs = this.#lateSourceWaitMs(key, sbn, packetId, catalogTrackName, config);
+    if (waitMs === void 0) return;
+    const armedAtMs = this.#blockWaitDeadlinesMs.get(key);
+    this.#armBlockTimeout(
+      sbn,
+      packetId,
+      catalogTrackName,
+      armedAtMs === void 0 ? waitMs : Math.min(waitMs, armedAtMs - this.#receiptNow())
+    );
+  }
   /**
    * Record a block's authored SSB_length from a repair symbol. Returns false,
    * leaving the block unchanged, when the symbol contradicts the block: a
@@ -17099,6 +17302,15 @@ var FECManager = class _FECManager {
       this.#completeCleanBlock(key, sbn, packetId, catalogTrackName);
       return;
     }
+    if (this.#blockRebuiltEsis.has(key) && this.#completeWhenSourcesPresent(
+      key,
+      sbn,
+      this.#isoLocatorFor(packetId, catalogTrackName).blockAt(sbn)?.length ?? authoredLength,
+      packetId,
+      catalogTrackName
+    )) {
+      return;
+    }
     this.noteBlockActivity(sbn, packetId, catalogTrackName, true);
   }
   #completeCleanBlock(key, sbn, packetId, catalogTrackName) {
@@ -17107,6 +17319,7 @@ var FECManager = class _FECManager {
     this.cancelBlockTimeout(sbn, packetId, catalogTrackName);
     this.#blockSourceCounts.delete(key);
     this.#blockSourceEsis.delete(key);
+    this.#blockRebuiltEsis.delete(key);
     this.#blockAuthoredLengths.delete(key);
     this.#blockRepairRsIds.delete(key);
     this.#blockRsbLengths.delete(key);
@@ -17173,7 +17386,16 @@ var FECManager = class _FECManager {
         this.#repairDeadlineMs(trackConfig)
       );
     }
-    this.#armBlockTimeout(sbn, packetId, catalogTrackName, timeoutMs);
+    if (!sourceProgress && this.#lateSourceWaitMs(key, sbn, packetId, catalogTrackName, trackConfig) !== void 0) {
+      this.#shortenUnrecoverableWait(key, sbn, packetId, catalogTrackName);
+      return;
+    }
+    this.#armBlockTimeout(
+      sbn,
+      packetId,
+      catalogTrackName,
+      this.#lateSourceWaitMs(key, sbn, packetId, catalogTrackName, trackConfig) ?? timeoutMs
+    );
   }
   #failBlock(sbn, packetId, catalogTrackName) {
     const key = this.#blockKey(sbn, packetId, catalogTrackName);
@@ -17186,6 +17408,7 @@ var FECManager = class _FECManager {
     }
     this.#blockSourceCounts.delete(key);
     this.#blockSourceEsis.delete(key);
+    this.#blockRebuiltEsis.delete(key);
     this.#blockAuthoredLengths.delete(key);
     this.#blockRepairRsIds.delete(key);
     this.#blockRsbLengths.delete(key);
@@ -17224,6 +17447,7 @@ var FECManager = class _FECManager {
     this.#retireBlockClass(key, block.sbn, block.packetId, block.catalogTrackName);
     this.#blockSourceCounts.delete(key);
     this.#blockSourceEsis.delete(key);
+    this.#blockRebuiltEsis.delete(key);
     this.#blockAuthoredLengths.delete(key);
     this.#blockRepairRsIds.delete(key);
     this.#blockRsbLengths.delete(key);
@@ -17315,6 +17539,7 @@ var FECManager = class _FECManager {
     this.#blockKeysBySbn.clear();
     this.#blockSourceCounts.clear();
     this.#blockSourceEsis.clear();
+    this.#blockRebuiltEsis.clear();
     this.#blockAuthoredLengths.clear();
     this.#blockRepairRsIds.clear();
     this.#blockRsbLengths.clear();
@@ -17340,6 +17565,7 @@ var FECManager = class _FECManager {
     this.#blockAnchorsMs.clear();
     this.#blockCatalogTrackNames.clear();
     this.#classifiers.clear();
+    this.#noSpanRaps.clear();
     this.#streamGeometries.clear();
     this.#failedBlocks.clear();
     this.#resolvedBlockClasses.clear();
@@ -17870,9 +18096,21 @@ var IsoBmffTimingResolver = class {
   }
   #track = null;
   #fragments = /* @__PURE__ */ new Map();
+  /** First sample of each pending fragment, kept in `#delivered` with its sample count. */
+  #firstSamples = /* @__PURE__ */ new Map();
+  /**
+   * First sample and sample count of the newest fragments whose every slot was
+   * cleared. Abandonment counts: `releaseSample` clears a slot too, which
+   * matches the combiner, since it retires an abandoned sample as well.
+   */
+  #delivered = /* @__PURE__ */ new Map();
   #pendingSamples = 0;
   #evictedSamples = 0;
   #lastMovieFragmentRejection = null;
+  /** True once an FT=0 has bound the track that FT=1 timing is read against. */
+  get initialized() {
+    return this.#track !== null;
+  }
   get pendingSampleCount() {
     return this.#pendingSamples;
   }
@@ -17896,7 +18134,14 @@ var IsoBmffTimingResolver = class {
     this.#track = timing;
     return true;
   }
-  addMovieFragment(mpuSequenceNumber2, data, additionalSampleLimit = this.maxPendingSamples) {
+  /**
+   * `recovered` marks an FEC-recovered copy. A recovered block hands back
+   * every FT=1 it holds, the received ones included, so a recovered copy of a
+   * fragment whose samples are all done is a duplicate: admitting it again
+   * would charge stale timing and could displace the live MPU's. A source
+   * copy is still admitted again (a rendition switch re-arms timing that way).
+   */
+  addMovieFragment(mpuSequenceNumber2, data, additionalSampleLimit = this.maxPendingSamples, recovered = false) {
     this.#lastMovieFragmentRejection = null;
     if (!Number.isInteger(additionalSampleLimit) || additionalSampleLimit < 0) {
       this.#lastMovieFragmentRejection = "invalid";
@@ -17922,6 +18167,8 @@ var IsoBmffTimingResolver = class {
         (sample, index) => sample !== null && sameSample(sample, parsed.samples[index])
       );
     }
+    const delivered = recovered ? this.#delivered.get(key) : void 0;
+    if (delivered && delivered.sampleCount === parsed.samples.length && sameSample(delivered.first, parsed.samples[0])) return true;
     let freed = 0;
     while (this.#fragments.size > 0 && (this.#pendingSamples + parsed.samples.length > this.maxPendingSamples || parsed.samples.length - freed > additionalSampleLimit)) {
       freed += this.#evictOldestFragment();
@@ -17935,6 +18182,7 @@ var IsoBmffTimingResolver = class {
       return false;
     }
     this.#fragments.set(key, [...parsed.samples]);
+    this.#firstSamples.set(key, parsed.samples[0]);
     this.#pendingSamples += parsed.samples.length;
     return true;
   }
@@ -17992,6 +18240,7 @@ var IsoBmffTimingResolver = class {
     let live = 0;
     for (const sample of samples) if (sample !== null) live++;
     this.#fragments.delete(oldest);
+    this.#firstSamples.delete(oldest);
     this.#pendingSamples -= live;
     this.#evictedSamples += live;
     return live;
@@ -18007,12 +18256,23 @@ var IsoBmffTimingResolver = class {
     if (!samples || !samples[index]) return false;
     samples[index] = null;
     this.#pendingSamples--;
-    if (samples.every((value) => value === null)) this.#fragments.delete(key);
+    if (samples.every((value) => value === null)) {
+      this.#fragments.delete(key);
+      const first = this.#firstSamples.get(key);
+      this.#firstSamples.delete(key);
+      this.#delivered.delete(key);
+      this.#delivered.set(key, { first, sampleCount: samples.length });
+      if (this.#delivered.size > this.maxPendingSamples) {
+        this.#delivered.delete(this.#delivered.keys().next().value);
+      }
+    }
     return true;
   }
   reset() {
     this.#track = null;
     this.#fragments.clear();
+    this.#firstSamples.clear();
+    this.#delivered.clear();
     this.#pendingSamples = 0;
   }
 };
@@ -18494,6 +18754,12 @@ var MmtpContainerParser = class _MmtpContainerParser {
     this.#reclaimedTimingSamples = 0;
     this.#evictedTimingSamples = 0;
     this.#rejectedMovieFragments = 0;
+    this.#recoveredHeadsAwaitingTiming = {
+      held: 0,
+      expired: 0,
+      discarded: 0,
+      superseded: 0
+    };
     this.#sequencers = /* @__PURE__ */ new Map();
     this.#fecGate = null;
     this.#fecSequencer = null;
@@ -18602,6 +18868,7 @@ var MmtpContainerParser = class _MmtpContainerParser {
   #reclaimedTimingSamples;
   #evictedTimingSamples;
   #rejectedMovieFragments;
+  #recoveredHeadsAwaitingTiming;
   #sequencers;
   #fecGate;
   #fecSequencer;
@@ -18707,11 +18974,12 @@ var MmtpContainerParser = class _MmtpContainerParser {
   /**
    * Typed view of the ISO-BMFF timing-sample budget.
    *
-   * This is the acceptance signal for the budget ratchet: `pending` walking
-   * to `capacity` while `rejectedMovieFragments` climbs is the stream wedging,
-   * and it is observable here rather than only as media silently stopping.
-   * Per repo policy this is a producer-owned counter -- never infer budget
-   * state by parsing logs.
+   * Each stream admits timing against its own window of `capacity` slots
+   * (BLO-52085). A stream at capacity displaces its own oldest timing to
+   * admit the moof in hand, and `evicted` counts the slots so displaced:
+   * timing a stream declared and never delivered shows up there. `pending`
+   * sums every stream, so it can exceed `capacity`. Per repo policy this is
+   * a producer-owned counter -- never infer budget state by parsing logs.
    */
   get timingBudgetStats() {
     return {
@@ -18722,6 +18990,14 @@ var MmtpContainerParser = class _MmtpContainerParser {
       rejectedMovieFragments: this.#rejectedMovieFragments
     };
   }
+  /** Recovered heads parked for FT=1 timing (BLO-53369). Survives dispose(). */
+  get recoveredHeadsAwaitingTiming() {
+    let pending = 0;
+    for (const { awaitingTiming } of this.#timingStreams.values()) {
+      for (const head of awaitingTiming) if (head.options?.recovered) pending++;
+    }
+    return { ...this.#recoveredHeadsAwaitingTiming, pending };
+  }
   get reorderStats() {
     let bufferedFrames = this.#fecSequencer?.buffered ?? 0;
     for (const { sequencer } of this.#sequencers.values()) bufferedFrames += sequencer.buffered;
@@ -18850,10 +19126,10 @@ var MmtpContainerParser = class _MmtpContainerParser {
   get reassemblerDataUnitsReturned() {
     return this.#reassemblerDataUnitsReturned;
   }
-  #countOutcome(token) {
-    const count = (this.#feedOutcomes.get(token) ?? 0) + 1;
-    this.#feedOutcomes.set(token, count);
-    this.#lastOutcome = token;
+  #countOutcome(token2) {
+    const count = (this.#feedOutcomes.get(token2) ?? 0) + 1;
+    this.#feedOutcomes.set(token2, count);
+    this.#lastOutcome = token2;
     this.#lastOutcomeCount = count;
   }
   #countDeferredOutcome(reason) {
@@ -18895,7 +19171,7 @@ var MmtpContainerParser = class _MmtpContainerParser {
     const now = Date.now();
     for (const { awaitingTiming } of this.#timingStreams.values()) {
       while (awaitingTiming.length > 0 && now - awaitingTiming[0].arrivedAt > timeoutMs) {
-        awaitingTiming.shift();
+        this.#leaveAwaitingTiming(awaitingTiming.shift(), "expired");
       }
     }
   }
@@ -19013,11 +19289,16 @@ var MmtpContainerParser = class _MmtpContainerParser {
       if (mpu.fragmentationIndicator !== 0 || mpu.fragmentCounter !== 0)
         return this.#drop("fragment-unexpected-fragmentation");
       const resolver2 = this.#timingResolver(streamKey, info.packetId, false);
-      if (!resolver2) return this.#drop("fragment-no-resolver");
+      if (!resolver2?.initialized) return this.#drop("fragment-no-resolver");
       const pendingBefore = resolver2.pendingSampleCount;
       const evictedBefore = resolver2.evictedSampleCount;
-      const remaining = this.#maxPendingTimingSamples - this.#pendingTimingSamples;
-      const admitted = resolver2.addMovieFragment(mpu.mpuSequenceNumber, data, remaining);
+      const remaining = this.#maxPendingTimingSamples - resolver2.pendingSampleCount;
+      const admitted = resolver2.addMovieFragment(
+        mpu.mpuSequenceNumber,
+        data,
+        remaining,
+        options?.recovered === true
+      );
       this.#pendingTimingSamples += resolver2.pendingSampleCount - pendingBefore;
       this.#evictedTimingSamples += resolver2.evictedSampleCount - evictedBefore;
       if (!admitted) {
@@ -19037,7 +19318,7 @@ var MmtpContainerParser = class _MmtpContainerParser {
       };
     }
     if (fragmentType !== 2) return this.#drop("unknown-fragment-type");
-    const resolver = this.#timingResolver(streamKey, info.packetId, false);
+    const resolver = this.#timingResolver(streamKey, info.packetId, true);
     if (!resolver) return this.#drop("mfu-no-resolver");
     if (!Number.isSafeInteger(data.byteLength) || data.byteLength <= 0)
       return this.#drop("mfu-empty-payload");
@@ -19058,6 +19339,7 @@ var MmtpContainerParser = class _MmtpContainerParser {
           mpuSequenceNumber: mpu.mpuSequenceNumber,
           movieFragmentSequenceNumber: mfuDuHeader.movieFragmentSequenceNumber,
           sampleNumber: mfuDuHeader.sampleNumber,
+          sequenceNumber: info.sequenceNumber,
           arrivedAt: Date.now()
         });
         return this.#drop("mfu-sample-timing-missing");
@@ -19381,6 +19663,10 @@ var MmtpContainerParser = class _MmtpContainerParser {
     }
     this.#emitFrame(data, meta);
   }
+  /** Whether FT=1 metadata already names this sample, without claiming it. */
+  hasAuthoredTimingFor(packetId, mpuSequenceNumber2, movieFragmentSequenceNumber, sampleNumber, catalogTrackName) {
+    return this.#timingResolver(this.#streamKey(packetId, catalogTrackName), packetId, false)?.sampleTiming(mpuSequenceNumber2, movieFragmentSequenceNumber, sampleNumber) != null;
+  }
   /**
    * Claim and return the authored timing for a recovered sample. Recovery does
    * not pass through the ordinary `feed()` completion path, so it must retire
@@ -19442,6 +19728,9 @@ var MmtpContainerParser = class _MmtpContainerParser {
     for (const { sequencer } of this.#sequencers.values()) sequencer.discard();
     this.#sequencers.clear();
     this.#fecSequencer?.discard();
+    for (const { awaitingTiming } of this.#timingStreams.values()) {
+      for (const head of awaitingTiming) this.#leaveAwaitingTiming(head, "discarded");
+    }
     this.#timingStreams.clear();
     this.#pendingTimingSamples = 0;
     this.#reliableMoqStartupGate.clear();
@@ -19460,10 +19749,23 @@ var MmtpContainerParser = class _MmtpContainerParser {
     return resolver;
   }
   #awaitTiming(streamKey, head) {
-    const awaitingTiming = this.#timingStreams.get(streamKey)?.awaitingTiming;
-    if (!awaitingTiming) return;
+    const state = this.#timingStreams.get(streamKey);
+    if (!state) return;
+    if (!head.options?.recovered) {
+      const kept = state.awaitingTiming.filter((queued) => !queued.options?.recovered || queued.sequenceNumber !== head.sequenceNumber);
+      this.#recoveredHeadsAwaitingTiming.superseded += state.awaitingTiming.length - kept.length;
+      state.awaitingTiming = kept;
+    }
+    const awaitingTiming = state.awaitingTiming;
     awaitingTiming.push(head);
-    if (awaitingTiming.length > MAX_AWAITING_TIMING_HEADS) awaitingTiming.shift();
+    if (head.options?.recovered) this.#recoveredHeadsAwaitingTiming.held++;
+    if (awaitingTiming.length > MAX_AWAITING_TIMING_HEADS) {
+      this.#leaveAwaitingTiming(awaitingTiming.shift(), "expired");
+    }
+  }
+  /** Count a recovered head leaving the queue other than by replay or its source copy. */
+  #leaveAwaitingTiming(head, outcome) {
+    if (head.options?.recovered) this.#recoveredHeadsAwaitingTiming[outcome]++;
   }
   /**
    * Feed again the heads whose timing the FT=1 just admitted declares. That
@@ -19491,6 +19793,7 @@ var MmtpContainerParser = class _MmtpContainerParser {
     const state = this.#timingStreams.get(streamKey);
     if (!state) return;
     this.#timingStreams.delete(streamKey);
+    for (const head of state.awaitingTiming) this.#leaveAwaitingTiming(head, "discarded");
     this.#pendingTimingSamples -= state.resolver.pendingSampleCount;
     if (this.#pendingTimingSamples < 0) {
       throw new Error("[MmtpContainerParser] pending timing sample accounting underflow");
@@ -22697,6 +23000,16 @@ function keyframeOverlaySsId(header) {
   if (ext?.type !== KEYFRAME_OVERLAY_EXTENSION_TYPE || ext.data.length !== 4) return void 0;
   return new DataView(ext.data.buffer, ext.data.byteOffset, 4).getUint32(0);
 }
+function overlayBaseSsId(anchor, overlaySsId, restoredPsn, headerPsn) {
+  if (anchor.baseSsId === void 0 || headerPsn !== restoredPsn) return void 0;
+  return serial32Add(anchor.baseSsId, overlaySsId - anchor.overlaySsId | 0);
+}
+function unstampedBaseSsId(offset, unstampedOffset, headerPsn) {
+  if (offset === void 0 || offset !== unstampedOffset) return void 0;
+  return headerPsn + offset >>> 0;
+}
+var OVERLAY_ROUTED_LIMIT = 1024;
+var OVERLAY_PENDING_LIMIT = 256;
 var OVERLAY_OFFSET_MPUS = 16;
 var OVERLAY_MOQ_HORIZON_BLOCKS = 64;
 function assertStreamIdentity(role, stream) {
@@ -22808,6 +23121,7 @@ var MmtpRouter = class {
   #provenance = /* @__PURE__ */ new Map();
   #onFlowProtected = null;
   #unadmittedListedDrops = 0;
+  #admittedSourceDatagrams = 0;
   #unlistedRepairSetAside = 0;
   #assistBlocks = /* @__PURE__ */ new Map();
   #assistFailures = /* @__PURE__ */ new Map();
@@ -22864,6 +23178,15 @@ var MmtpRouter = class {
    * sequence is its SS_ID minus this; see #routeProcessedFecSymbols.
    */
   #ssIdSeqOffsetByStream = /* @__PURE__ */ new Map();
+  /**
+   * Per stream, the SS_ID offset at which a base recovery last showed the
+   * sender's own packet_sequence_number: a recovered packet's header psn
+   * equal to its SS_ID minus that offset. While it equals the stream's
+   * current offset, no hop re-stamps the stream, and a packet's protected psn
+   * names its base SS_ID within unstampedBaseSsId's limits (joint decoding of
+   * an MPU no member of which arrived).
+   */
+  #unstampedSsIdSeqOffsetByStream = /* @__PURE__ */ new Map();
   /**
    * Streams whose multicast leg delivered a RAP-flagged source packet that was
    * not parsed, typically because its overlap copy was parsed first
@@ -22933,7 +23256,9 @@ var MmtpRouter = class {
     recovered: 0,
     restarts: 0,
     unsequencedDropped: 0,
-    protectedDropped: 0
+    protectedDropped: 0,
+    baseFed: 0,
+    baseUndetermined: 0
   };
   /** Callback fired when a delta-track FEC block completes or fails. */
   #onDeltaBlockCompleteCb = null;
@@ -23106,7 +23431,7 @@ var MmtpRouter = class {
     const cb = this.#getFrameCallback(packetId);
     if (isVideo && !assembler) {
       if (frameMeta.recovered) {
-        this.#routeDirectRecoveredVideo(packetId, data, frameMeta, cb);
+        this.#routeDirectRecoveredVideo(packetId, data, frameMeta, cb, meta.fecSbn);
       } else {
         this.#routeDirectSourceVideo(packetId, data, frameMeta, cb);
       }
@@ -23496,6 +23821,10 @@ var MmtpRouter = class {
   get keyframeOverlayStats() {
     return { ...this.#overlayStats };
   }
+  /** Recovered FT=2 heads held for their FT=1, and how each left the wait (BLO-53369). */
+  get recoveredHeadsAwaitingTiming() {
+    return this.#parser.recoveredHeadsAwaitingTiming;
+  }
   #isOverlayRepair(repairPacketId, repairTrackName) {
     return this.#overlayLegs.has(repairPacketId) || repairTrackName !== void 0 && this.#overlayRepairNames.has(repairTrackName);
   }
@@ -23546,6 +23875,11 @@ var MmtpRouter = class {
    */
   resetKeyframeOverlays(sourcePacketId, catalogTrackName) {
     for (const inst of this.#overlaysForSource(sourcePacketId, catalogTrackName)) this.#resetOverlay(inst);
+    for (const [name, stream] of this.#streams.get(sourcePacketId) ?? []) {
+      if (catalogTrackName !== void 0 && name !== catalogTrackName) continue;
+      stream.overlayToBase.routed.clear();
+      stream.overlayToBase.pending.clear();
+    }
   }
   #resetOverlay(inst) {
     inst.fec.resetTrack(inst.repairPacketId, inst.streamName);
@@ -23602,9 +23936,10 @@ var MmtpRouter = class {
    * A source packet that carries a 0x8B01 overlay SS_ID is also a symbol of
    * every overlay installed for its source, at that SS_ID, with the bytes the
    * base protects: the packet minus its 4-byte SS_ID trailer, extension
-   * included (7.1, 7.4.3).
+   * included (7.1, 7.4.3). `baseSsId` is that trailer's SS_ID, when the base
+   * FEC reads it.
    */
-  #feedOverlaySource(packetId, catalogTrackName, packet, header, sequenceNumber, rapFlag, source) {
+  #feedOverlaySource(packetId, catalogTrackName, packet, header, sequenceNumber, rapFlag, source, baseSsId) {
     if (this.#overlays.size === 0) return;
     const ssId = keyframeOverlaySsId(header);
     if (ssId === void 0) return;
@@ -23613,7 +23948,11 @@ var MmtpRouter = class {
       const identity = MmtpContainerParser.sourcePacketIdentity(packet, header);
       if (identity !== null) {
         inst.offsets.delete(identity.mpuSequenceNumber);
-        inst.offsets.set(identity.mpuSequenceNumber, ssId - sequenceNumber >>> 0);
+        inst.offsets.set(identity.mpuSequenceNumber, {
+          psnOffset: ssId - sequenceNumber >>> 0,
+          overlaySsId: ssId,
+          ...baseSsId === void 0 ? {} : { baseSsId }
+        });
         if (inst.offsets.size > OVERLAY_OFFSET_MPUS) inst.offsets.delete(inst.offsets.keys().next().value);
       }
       const { fec, repairPacketId: pid, streamName: name } = inst;
@@ -23692,14 +24031,27 @@ var MmtpRouter = class {
     const streamKey = this.#mediaStreamKey(sourcePacketId, sourceName);
     const restamped = this.#restampedStreams.has(streamKey);
     const restored = /* @__PURE__ */ new Set();
+    const baseSsIds = /* @__PURE__ */ new Map();
     const symbols = result.symbols.flatMap((sym) => {
-      const offset = inst.offsets.get(sym.fragment.mpuSequenceNumber);
-      if (offset !== void 0) {
-        const packetSequenceNumber = serial32Add(blockStart, sym.index) - offset >>> 0;
+      const anchor = inst.offsets.get(sym.fragment.mpuSequenceNumber);
+      if (anchor !== void 0) {
+        const overlaySsId = serial32Add(blockStart, sym.index);
+        const packetSequenceNumber = overlaySsId - anchor.psnOffset >>> 0;
         restored.add(packetSequenceNumber);
-        return [{ ...sym, packetSequenceNumber }];
+        const out = { ...sym, packetSequenceNumber };
+        const baseSsId = overlayBaseSsId(anchor, overlaySsId, packetSequenceNumber, sym.packetSequenceNumber);
+        if (baseSsId !== void 0) baseSsIds.set(out, baseSsId);
+        return [out];
+      }
+      if (!restamped) {
+        const baseSsId = unstampedBaseSsId(
+          this.#ssIdSeqOffsetByStream.get(streamKey),
+          this.#unstampedSsIdSeqOffsetByStream.get(streamKey),
+          sym.packetSequenceNumber
+        );
+        if (baseSsId !== void 0) baseSsIds.set(sym, baseSsId);
+        return [sym];
       }
-      if (!restamped) return [sym];
       this.#overlayStats.unsequencedDropped++;
       return [];
     });
@@ -23708,6 +24060,85 @@ var MmtpRouter = class {
       deliveryProvenance: inst.moqBlocks.has(blockStart) ? "mixed" : "multicast"
     });
     this.#noteOverlayRecoveredRaps(sourcePacketId, sourceName, streamKey, symbols.filter((sym) => restored.has(sym.packetSequenceNumber)));
+    this.#feedOverlayRecoveredToBase(inst, blockStart, symbols, baseSsIds);
+  }
+  /**
+   * Joint decoding (BLO-52085). A packet the overlay rebuilt is a source of
+   * its base block too, once its base SS_ID is determined (overlayBaseSsId,
+   * from a received member of its MPU, else unstampedBaseSsId),
+   * so it is fed to the base decoder as a rebuilt source
+   * (FECManager.feedRebuiltSourceSymbol): the base block has one erasure
+   * fewer to solve, and its repair can recover the block's other packets.
+   * A base block no repair has stated yet takes it when one does
+   * (#feedPendingRebuilt).
+   *
+   * The overlay route already handled each packet fed (delivered it, or
+   * held an untimed head for its FT=1), so a base recovery routes none of
+   * them again (#routeVerifiedFecSymbols): a second recovered copy of a
+   * held head would wait in the parser for timing its first copy consumed.
+   * Only an overlay block decoded from multicast symbols alone is fed: with
+   * a MoQ symbol in it, the base block's recovery would depend on bytes
+   * that crossed no multicast socket, which the provenance counted from the
+   * block's own arrivals cannot show.
+   */
+  #feedOverlayRecoveredToBase(inst, blockStart, symbols, baseSsIds) {
+    const fec = this.#fecManager;
+    const owner = inst.leg.sourcePacketId;
+    const name = inst.leg.sourceCatalogTrackName;
+    if (!fec?.feedRebuiltSourceSymbol || inst.moqBlocks.has(blockStart)) return;
+    if (this.#classifyPacketId(owner) === null || fec.isTrackConfigured?.(owner) === false) return;
+    const { duplicates, overlayToBase: { routed } } = this.#stream(owner, name);
+    const feeds = [];
+    for (const sym of symbols) {
+      if (duplicates.sourceSeqs.has(sym.packetSequenceNumber)) continue;
+      const ssId = baseSsIds.get(sym);
+      if (ssId === void 0) {
+        this.#overlayStats.baseUndetermined++;
+        continue;
+      }
+      routed.delete(ssId);
+      routed.add(ssId);
+      if (routed.size > OVERLAY_ROUTED_LIMIT) routed.delete(routed.values().next().value);
+      feeds.push([ssId, sym.rawSymbol]);
+    }
+    for (const [ssId, symbolData] of feeds) {
+      if (this.#classifyPacketId(owner) === null) return;
+      this.#feedRebuiltToBase(owner, name, ssId, symbolData);
+    }
+  }
+  /** Feed one rebuilt source to its base block, or keep it until a repair states that block. */
+  #feedRebuiltToBase(owner, name, ssId, symbolData) {
+    const fec = this.#fecManager;
+    if (!fec?.feedRebuiltSourceSymbol) return;
+    const coords = fec.locateIsoSource?.(owner, name, ssId);
+    if (coords == null) {
+      const pending = this.#stream(owner, name).overlayToBase.pending;
+      pending.delete(ssId);
+      pending.set(ssId, symbolData.slice());
+      if (pending.size > OVERLAY_PENDING_LIMIT) pending.delete(pending.keys().next().value);
+      return;
+    }
+    const fed = fec.feedRebuiltSourceSymbol(owner, ssId, symbolData, name);
+    if (!fed.taken) return;
+    this.#overlayStats.baseFed++;
+    if (fed.recovered === null) return;
+    const sbn = coords.sbn;
+    this.#routeRecoveredBlock(sbn, fed.recovered, owner, name, () => {
+      fec.cancelBlockTimeout(sbn, owner, name);
+      fec.countRecovery(owner, sbn, name);
+      fec.markBlockCompleted(sbn, owner, name);
+    });
+  }
+  /** A repair stated `block`: the rebuilt sources that waited for it join it now. */
+  #feedPendingRebuilt(owner, name, block) {
+    const pending = this.#streams.get(owner)?.get(name)?.overlayToBase.pending;
+    if (pending === void 0 || pending.size === 0) return;
+    for (const [ssId, symbolData] of [...pending]) {
+      if (this.#classifyPacketId(owner) === null) return;
+      if (serial32Distance(block.start, ssId) >= block.length) continue;
+      pending.delete(ssId);
+      this.#feedRebuiltToBase(owner, name, ssId, symbolData);
+    }
   }
   /** fec-multicast-00 §6.6: report each base block whose RAP MFU fragments
    *  the overlay restored, when the keyframe's FT=0 and FT=1 are held too. A
@@ -23847,6 +24278,10 @@ var MmtpRouter = class {
   get unadmittedListedDropCount() {
     return this.#unadmittedListedDrops;
   }
+  /** Source datagrams (multicast or MoQ) a protected flow's bc-provenance v2 receiver released: admitted at once or held, then admitted by a record. Repair symbols and user-agent-admitted datagrams are not counted. Counted at release, before this router's own track checks: a released datagram those drop, which only a track change between hold and release can cause, still counts, so this is not a count of routed media. */
+  get admittedSourceDatagramCount() {
+    return this.#admittedSourceDatagrams;
+  }
   /** MoQ repair symbols of an unlisted track kept out of a governed FEC instance (7.2.7 step 2). */
   get unlistedRepairSetAsideCount() {
     return this.#unlistedRepairSetAside;
@@ -24333,6 +24768,8 @@ var MmtpRouter = class {
     )) return;
     fec.noteBlockActivity?.(blockStart, ownerPacketId, catalogTrackName);
     fec.noteRepairGroupLength?.(blockStart, ownerPacketId, repair.rsbLength, catalogTrackName);
+    this.#feedPendingRebuilt(ownerPacketId, catalogTrackName, placement.block);
+    if (this.#classifyPacketId(ownerPacketId) === null) return;
     const alreadyCompleted = fec.isBlockCompleted(blockStart, ownerPacketId, catalogTrackName);
     const recovered = fec.feedRepairSymbol(
       ownerPacketId,
@@ -24470,6 +24907,7 @@ var MmtpRouter = class {
     this.#droppedPreSyncVideo.delete(streamKey);
     this.#latestVideoSeqByStream.delete(streamKey);
     this.#ssIdSeqOffsetByStream.delete(streamKey);
+    this.#unstampedSsIdSeqOffsetByStream.delete(streamKey);
     this.#multicastRapTwinByStream.delete(streamKey);
     this.#lastDirectSourceVideoTsByStream.delete(streamKey);
     this.#lastDirectEmittedVideoTsByStream.delete(streamKey);
@@ -25104,6 +25542,7 @@ var MmtpRouter = class {
     const parsed = this.#parser.parsePacket(packet);
     if (!parsed) return;
     const info = parsed.info;
+    if (manifestAdmitted && !info.isRepair && ingress?.admittedBy !== USER_AGENT_VERIFIED) this.#admittedSourceDatagrams++;
     if (source === "multicast" && !manifestAdmitted) {
       this.#fecManager?.noteMulticastArrival?.(info.packetId, info.sequenceNumber);
     }
@@ -25385,7 +25824,8 @@ var MmtpRouter = class {
           parsed.header,
           info.sequenceNumber,
           info.rapFlag,
-          source
+          source,
+          fecPayloadId?.ssId
         );
       }
     }
@@ -25535,7 +25975,8 @@ var MmtpRouter = class {
     if (stream === void 0) {
       stream = {
         key: JSON.stringify([packetId, catalogTrackName ?? null]),
-        duplicates: new StreamDuplicateLedgers(() => this.duplicateHorizonFor(packetId))
+        duplicates: new StreamDuplicateLedgers(() => this.duplicateHorizonFor(packetId)),
+        overlayToBase: { routed: /* @__PURE__ */ new Set(), pending: /* @__PURE__ */ new Map() }
       };
       byName.set(catalogTrackName, stream);
     }
@@ -25650,8 +26091,16 @@ var MmtpRouter = class {
     this.#drainDirectRecoveredVideo(streamKey, packetId, (frame) => frame.timestamp <= meta.timestamp, cb);
     this.#emitDirectVideo(packetId, data, meta, cb);
   }
-  #routeDirectRecoveredVideo(packetId, data, meta, cb) {
+  #routeDirectRecoveredVideo(packetId, data, meta, cb, fecSbn) {
     const streamKey = this.#mediaStreamKey(packetId, meta.catalogTrackName);
+    if (this.#isFecTrack(packetId)) {
+      const high = this.#deliveredVideoHighWaterByStream.get(streamKey);
+      if (fecSbn !== void 0 || high !== void 0 && authoredAdjacent(high, meta)) {
+        this.#drainDirectRecoveredVideo(streamKey, packetId, (frame) => frame.timestamp <= meta.timestamp, cb);
+        this.#emitDirectVideo(packetId, data, meta, cb);
+        return;
+      }
+    }
     this.#enqueueDirectRecoveredVideo(packetId, data, meta);
     const lastSourceTs = this.#lastDirectSourceVideoTsByStream.get(streamKey);
     this.#drainDirectRecoveredVideo(
@@ -25805,6 +26254,13 @@ var MmtpRouter = class {
    * frames by epoch only if pre-protection input ever matters.
    */
   #routeVerifiedFecSymbols(blockId, result, ownerPacketId, catalogTrackName, complete, assisted = false) {
+    const overlayRouted = ownerPacketId == null ? void 0 : this.#streams.get(ownerPacketId)?.get(catalogTrackName)?.overlayToBase.routed;
+    if (overlayRouted !== void 0 && overlayRouted.size > 0) {
+      result = {
+        ...result,
+        symbols: result.symbols.filter((sym) => !overlayRouted.has(this.#fecAnchorForRecovered(blockId, sym.index)))
+      };
+    }
     const entry = ownerPacketId == null ? void 0 : this.#provenanceFor(ownerPacketId, catalogTrackName);
     const receiver = entry === void 0 || entry === "ambiguous" ? entry : entry.receiver;
     const userAgent = !assisted && entry !== void 0 && entry !== "ambiguous" && entry.protected === true && entry.userAgent === true;
@@ -25869,7 +26325,10 @@ var MmtpRouter = class {
         ...result,
         symbols: result.symbols.map((sym) => {
           const wire = this.#fecAnchorForRecovered(blockId, sym.index) - ssIdSeqOffset >>> 0;
-          if (wire === sym.packetSequenceNumber) return sym;
+          if (wire === sym.packetSequenceNumber) {
+            this.#unstampedSsIdSeqOffsetByStream.set(streamKey, ssIdSeqOffset);
+            return sym;
+          }
           this.#restampedRecoveredSeqs++;
           this.#restampedStreams.add(streamKey);
           return { ...sym, packetSequenceNumber: wire };
@@ -25905,6 +26364,29 @@ var MmtpRouter = class {
         }
       );
     }
+    const untimedHead = (sym) => sym.fragmentType === 2 && sym.fragment.fragmentationIndicator === 1 && sym.fragment.movieFragmentSequenceNumber !== void 0 && sym.fragment.sampleNumber !== void 0 && !this.#parser.hasAuthoredTimingFor(
+      ownerPacketId,
+      sym.fragment.mpuSequenceNumber,
+      sym.fragment.movieFragmentSequenceNumber,
+      sym.fragment.sampleNumber,
+      catalogTrackName
+    );
+    for (const sym of result.symbols) {
+      if (!untimedHead(sym) || this.#sourceSeqReceived(ownerPacketId, sym.packetSequenceNumber, catalogTrackName)) continue;
+      this.#feedViaParser(
+        sym.rawSymbol,
+        { packetId: ownerPacketId, sequenceNumber: sym.packetSequenceNumber },
+        void 0,
+        {
+          skipFecPayloadId: true,
+          recovered: true,
+          deliveryProvenance,
+          ...fecSbnOf(sym.index),
+          ...catalogTrackName === void 0 ? {} : { catalogTrackName }
+        }
+      );
+    }
+    result = { ...result, symbols: result.symbols.filter((sym) => !untimedHead(sym)) };
     const gated = this.#isFecTrack(ownerPacketId);
     const assembler = this.#mseAssemblerFor(ownerPacketId, catalogTrackName);
     if (assembler) {
@@ -29666,7 +30148,7 @@ async function setupFecWorkerForTrack(opts) {
     blockProfile,
     k: opts.fecK,
     // P as this receiver joined it, not the catalog total: the worker snapshot
-    // and CMCD `x-bc-fec-p` are read from this. Identity on a single layer.
+    // and CMCD `com.blockcast-fp` are read from this. Identity on a single layer.
     repairCount: opts.joinedRepairCount ?? opts.fecRepairCount,
     symbolSize: opts.fecSymbolSize,
     interleaveDepth: interleaveDepthBlocks,
@@ -30208,24 +30690,24 @@ var MediaRouter = class {
     if (!this.#multicastVideoKeyed) return;
     if (this.#requireAudio && !this.#multicastAudioReceived) return;
     if (this.#requireAudio && !this.#moqAudioWarmed) return;
-    const token = ++this.#sourceSwitchToken;
+    const token2 = ++this.#sourceSwitchToken;
     const maybeReady = this.#onSourceSwitch?.("multicast");
     if (!maybeReady || typeof maybeReady.then !== "function") {
-      this.#commitMulticastActivation(token);
+      this.#commitMulticastActivation(token2);
       return;
     }
     const ready = Promise.resolve(maybeReady);
-    this.#pendingMulticastToken = token;
+    this.#pendingMulticastToken = token2;
     this.#sourceSwitchReady = ready;
     void ready.then(
-      () => this.#commitMulticastActivation(token),
-      (err) => this.#rejectMulticastActivation(token, err)
+      () => this.#commitMulticastActivation(token2),
+      (err) => this.#rejectMulticastActivation(token2, err)
     ).finally(() => {
       if (this.#sourceSwitchReady === ready) this.#sourceSwitchReady = null;
     });
   }
-  #commitMulticastActivation(token) {
-    if (token !== this.#sourceSwitchToken) return;
+  #commitMulticastActivation(token2) {
+    if (token2 !== this.#sourceSwitchToken) return;
     this.#active = "multicast";
     this.#suppressed = true;
     this.#pendingMulticastToken = null;
@@ -30236,9 +30718,9 @@ var MediaRouter = class {
     if (video) this.#onVideoFrame?.(video.data, video.meta);
     if (audio) this.#onAudioFrame?.(audio.data, audio.meta);
   }
-  #rejectMulticastActivation(token, err) {
-    if (token !== this.#sourceSwitchToken) return;
-    if (this.#pendingMulticastToken === token) this.#pendingMulticastToken = null;
+  #rejectMulticastActivation(token2, err) {
+    if (token2 !== this.#sourceSwitchToken) return;
+    if (this.#pendingMulticastToken === token2) this.#pendingMulticastToken = null;
     this.#pendingMulticastVideo = null;
     this.#pendingMulticastAudio = null;
     console.warn("[MediaRouter] onSourceSwitch(multicast) failed", err);
@@ -31207,63 +31689,65 @@ var FecStarvationDetector = class {
 
 // src/cmcd-producer.ts
 var PLAY_MODES = ["full", "base-only", "single-track"];
-function sanitize(value) {
-  return value.replace(/[,\r\n]/g, "");
-}
-function buildFecParams(stats) {
-  const params = {};
-  const cfg = stats.config;
-  params["x-bc-fec-algo"] = cfg.algorithm;
-  params["x-bc-fec-k"] = cfg.k;
-  params["x-bc-fec-p"] = cfg.repairCount;
-  params["x-bc-fec-recovery"] = parseFloat((stats.recoveryRate / 100).toFixed(4));
-  return params;
-}
-function buildTransportParams(snap) {
-  if (!snap) return {};
-  const params = {};
-  params["x-bc-transport"] = snap.transport;
-  if (snap.multicastGroup != null) {
-    params["x-bc-multicast-group"] = snap.multicastGroup;
-  }
-  if (snap.multicastSource != null) {
-    params["x-bc-multicast-source"] = snap.multicastSource;
-  }
-  if (snap.amtRelay != null) {
-    params["x-bc-amt-relay"] = snap.amtRelay;
-  }
-  return params;
-}
-function formatQueryString(params) {
-  return Object.keys(params).sort().map((key) => {
-    const v = params[key];
-    if (typeof v === "string") return `${key}=${sanitize(v)}`;
-    return `${key}=${v}`;
+var DEFAULT_INTERVAL_MS = 3e4;
+var CUSTOM_PREFIX = "com.blockcast-";
+var MAX_CUSTOM_VALUE = 64;
+var TRANSPORT_TOKEN = {
+  native: "ssm",
+  amt: "amt",
+  moq: "moq"
+};
+function sfString(value) {
+  return `"${value.replace(/[^\x20-\x7e]/g, "").replace(/[\\"]/g, "\\$&")}"`;
+}
+function encodeCmcdRecord(record) {
+  return Object.keys(record).sort().map((key) => {
+    const value = record[key];
+    if (typeof value === "number") return `${key}=${value}`;
+    if (typeof value === "string") return `${key}=${sfString(value)}`;
+    if (Array.isArray(value)) return `${key}=(${value.map(sfString).join(" ")})`;
+    return `${key}=${value.token}`;
   }).join(",");
 }
+var token = (value) => ({ token: value });
+function putCustom(record, name, value) {
+  if (value === void 0) return;
+  if (typeof value === "number") value = String(value);
+  if (typeof value === "string" && value.length > MAX_CUSTOM_VALUE) return;
+  record[CUSTOM_PREFIX + name] = value;
+}
 var CmcdProducer = class {
-  #onCmcdParams;
   #onCmcdPost;
+  #intervalMs;
+  #sessionId;
+  #now;
+  #sn = 0;
+  #lastHeartbeat = null;
   #transport;
   #lastStats;
-  // Phase 14 state — Plan 03 Task 2 (D-12, D-15).
   #playMode = null;
   #deltaFailRate = null;
   #switchMiscount = 0;
   #manifestStats = null;
   #fecFailClosed = null;
+  /** Video-block resolutions from the repair lifecycle; null until the player feeds one. */
+  #lifecycle = null;
   constructor(options) {
-    this.#onCmcdParams = options.onCmcdParams;
     this.#onCmcdPost = options.onCmcdPost;
+    this.#intervalMs = options.intervalMs ?? DEFAULT_INTERVAL_MS;
+    if (!Number.isFinite(this.#intervalMs) || this.#intervalMs <= 0) {
+      throw new Error(`[CmcdProducer] invalid intervalMs "${String(options.intervalMs)}"; expected a positive number`);
+    }
+    this.#sessionId = options.sessionId ?? globalThis.crypto.randomUUID();
+    this.#now = options.now ?? Date.now;
   }
   /** Update the stored transport state. Called by player wiring layer. */
   updateTransport(snapshot) {
     this.#transport = snapshot;
   }
   /**
-   * Set the current play-mode. Emitted as `x-bc-play-mode` on subsequent
-   * snapshots. Throws on any value outside {'full','base-only','single-track'}
-   * (CLAUDE.md: error on bad init).
+   * Set the current play-mode, reported as `com.blockcast-pm`. Throws on any
+   * value outside {'full','base-only','single-track'} (CLAUDE.md: error on bad init).
    */
   updatePlayMode(mode) {
     if (typeof mode !== "string" || !PLAY_MODES.includes(mode)) {
@@ -31274,9 +31758,8 @@ var CmcdProducer = class {
     this.#playMode = mode;
   }
   /**
-   * Set the delta-track FEC block-failure rate (0..1 inclusive). Emitted as
-   * `x-bc-delta-fail-rate` on snapshots when play-mode is 'full' or 'base-only'.
-   * Omitted on single-track streams.
+   * Set the delta-track FEC block-failure rate (0..1 inclusive), reported as
+   * `com.blockcast-dfr` when play-mode is 'full' or 'base-only'.
    */
   updateDeltaFailRate(rate) {
     if (typeof rate !== "number" || !Number.isFinite(rate) || rate < 0 || rate > 1) {
@@ -31286,112 +31769,139 @@ var CmcdProducer = class {
     }
     this.#deltaFailRate = rate;
   }
-  /**
-   * Bump the cumulative switching-set misalignment counter. Emitted as
-   * `x-bc-switch-miscount` on snapshots when the counter is > 0.
-   */
+  /** Bump the cumulative switching-set misalignment counter (`com.blockcast-sm`). */
   incrementSwitchMiscount() {
     this.#switchMiscount += 1;
   }
   /**
-   * Record that FEC failed closed at runtime (fec-01 6.3.9). Every later
-   * snapshot carries `x-bc-fec-fail-closed` (the reason code) and
-   * `x-bc-fec-fail-layer` (the held layer i whose total B_i was undercut), so a
-   * stream playing without FEC is told apart from one with no loss.
+   * Record that FEC failed closed at runtime (fec-01 6.3.9). Reported at once
+   * as `e=e` with the reason code in `ec`, and on every later counter report
+   * as `com.blockcast-ffc` / `com.blockcast-ffl` (the held layer whose total
+   * B_i was undercut), so a stream playing without FEC is told apart from one
+   * with no loss.
    */
   updateFecFailClosed(reason) {
+    const changed = this.#fecFailClosed?.code !== reason.code || this.#fecFailClosed?.layer !== reason.layer;
     this.#fecFailClosed = reason;
+    if (changed) this.#post([{ ...this.#base("e"), ec: [reason.code] }]);
   }
   updateManifestVerification(stats) {
     this.#manifestStats = stats;
   }
   /**
-   * One-shot emit of `x-bc-switch-drift-us` for a single misalignment event.
-   * Does NOT mutate snapshot state — subsequent onSnapshot() calls will not
-   * include the drift key until the next emitSwitchDrift(). Mirrors the
-   * existing onTransition() pattern.
+   * Count a video block's resolution from the repair lifecycle: recovered in
+   * band (`com.blockcast-fbr`), recovered by repair FETCH (`-fbq`), or failed
+   * as a keyframe-class block (`-fbfk`). Audio blocks are not counted, matching
+   * the video-track `-fbf`. Until the player feeds this, the three are absent.
    */
+  onRepairLifecycle(event) {
+    this.#lifecycle ??= { inband: 0, fetch: 0, failedKeyframe: 0 };
+    if (event.type === "recovered" && event.blockClass !== "audio") {
+      if (event.via === "inband") this.#lifecycle.inband++;
+      else this.#lifecycle.fetch++;
+    } else if (event.type === "failed" && event.blockClass === "keyframe") {
+      this.#lifecycle.failedKeyframe++;
+    }
+  }
+  /** One-shot custom event `com.blockcast-switch-drift` for a single misalignment. */
   emitSwitchDrift(driftUs) {
     if (typeof driftUs !== "number" || !Number.isFinite(driftUs) || driftUs < 0) {
       throw new Error(
         `[CmcdProducer] invalid drift-us "${String(driftUs)}"; expected a non-negative finite number`
       );
     }
-    const params = {};
-    if (this.#lastStats) Object.assign(params, buildFecParams(this.#lastStats));
-    Object.assign(params, buildTransportParams(this.#transport));
-    if (this.#switchMiscount > 0) params["x-bc-switch-miscount"] = this.#switchMiscount;
-    params["x-bc-switch-drift-us"] = driftUs;
-    this.#emit(params);
+    const record = { ...this.#base("ce"), cen: CUSTOM_PREFIX + "switch-drift" };
+    putCustom(record, "sdu", Math.round(driftUs));
+    this.#post([record]);
   }
-  /**
-   * Process a FecTrackStats snapshot. Finds the video track, builds
-   * x-bc-* vendor keys, and fires both delivery callbacks.
-   */
+  /** Take a FecTrackStats snapshot (first video track) and send the heartbeat when due. */
   onSnapshot(data) {
     const videoTrack = data.tracks.find((t) => t.config.trackType === "video");
     if (!videoTrack) return;
     this.#lastStats = videoTrack;
-    const params = {
-      ...buildFecParams(videoTrack),
-      ...buildTransportParams(this.#transport)
-    };
-    if (this.#playMode !== null) {
-      params["x-bc-play-mode"] = this.#playMode;
-    }
-    if (this.#fecFailClosed) {
-      params["x-bc-fec-fail-closed"] = this.#fecFailClosed.code;
-      params["x-bc-fec-fail-layer"] = this.#fecFailClosed.layer;
-    }
-    if (this.#playMode !== null && this.#playMode !== "single-track" && this.#deltaFailRate !== null) {
-      params["x-bc-delta-fail-rate"] = parseFloat(this.#deltaFailRate.toFixed(4));
-    }
-    if (this.#switchMiscount > 0) {
-      params["x-bc-switch-miscount"] = this.#switchMiscount;
-    }
-    if (this.#manifestStats) {
-      params["x-bc-manifest-verified"] = this.#manifestStats.verified > 0;
-      params["x-bc-manifest-failures"] = Object.values(this.#manifestStats.failures).reduce((total, count) => total + count, 0);
-    }
-    this.#emit(params);
+    this.#heartbeat();
   }
   /**
-   * Emit transport state without inventing FEC metrics. Cadence is owned by
-   * the caller because only the transport integration knows when state changed.
+   * Take transport state for receivers that do not own FEC stats, and send the
+   * heartbeat when due.
    */
   onTransportSnapshot(data) {
     if (!Number.isFinite(data.timestampMs) || data.timestampMs < 0) {
       throw new Error("[CmcdProducer] transport snapshot timestamp must be a non-negative finite number");
     }
     if (data.playMode !== void 0) this.updatePlayMode(data.playMode);
-    if (data.switchMiscount !== void 0 && (!Number.isSafeInteger(data.switchMiscount) || data.switchMiscount < 0)) {
-      throw new Error("[CmcdProducer] transport snapshot switch-miscount must be a non-negative safe integer");
+    if (data.switchMiscount !== void 0) {
+      if (!Number.isSafeInteger(data.switchMiscount) || data.switchMiscount < 0) {
+        throw new Error("[CmcdProducer] transport snapshot switch-miscount must be a non-negative safe integer");
+      }
+      this.#switchMiscount = data.switchMiscount;
     }
     this.#transport = data.transport;
-    const params = buildTransportParams(data.transport);
-    if (this.#playMode !== null) params["x-bc-play-mode"] = this.#playMode;
-    const switchMiscount = data.switchMiscount ?? this.#switchMiscount;
-    if (switchMiscount > 0) params["x-bc-switch-miscount"] = switchMiscount;
-    this.#emit(params);
+    this.#heartbeat();
   }
-  /**
-   * Signal a transport transition event. Fires an immediate out-of-band
-   * emit with x-bc-ct set. The subsequent onSnapshot() will NOT include
-   * x-bc-ct (one-shot).
-   */
+  /** Report a transport transition at once, as custom event `com.blockcast-ct`. */
   onTransition(event) {
-    const params = {};
-    if (this.#lastStats) {
-      Object.assign(params, buildFecParams(this.#lastStats));
+    const record = { ...this.#base("ce"), cen: CUSTOM_PREFIX + "ct" };
+    putCustom(record, "ct", token(event));
+    this.#putTransport(record);
+    this.#post([record]);
+  }
+  #base(event) {
+    return { e: token(event), sid: this.#sessionId, sn: this.#sn++, ts: Math.floor(this.#now()), v: 2 };
+  }
+  #heartbeat() {
+    const now = this.#now();
+    if (this.#lastHeartbeat !== null && now - this.#lastHeartbeat < this.#intervalMs) return;
+    this.#lastHeartbeat = now;
+    this.#post([this.#base("t"), this.#counters()]);
+  }
+  #putTransport(record) {
+    const snap = this.#transport;
+    if (!snap) return;
+    putCustom(record, "tr", token(TRANSPORT_TOKEN[snap.transport]));
+    if (snap.multicastGroup != null && snap.multicastSource != null) {
+      putCustom(record, "sg", `${snap.multicastGroup}@${snap.multicastSource}`);
+    }
+    putCustom(record, "ar", snap.amtRelay);
+  }
+  /** The `e=ce` counter report. */
+  #counters() {
+    const record = { ...this.#base("ce"), cen: CUSTOM_PREFIX + "fec" };
+    const stats = this.#lastStats;
+    if (stats) {
+      putCustom(record, "fa", stats.config.algorithm);
+      putCustom(record, "fk", stats.config.k);
+      putCustom(record, "fp", stats.config.repairCount);
+      putCustom(record, "pr", stats.sourceSymbols);
+      putCustom(record, "pl", stats.sourcePacketsMissing);
+      putCustom(record, "pu", stats.sourcePacketsUnrecovered);
+      putCustom(record, "fbf", stats.blocksFailed);
+    }
+    if (this.#lifecycle) {
+      putCustom(record, "fbr", this.#lifecycle.inband);
+      putCustom(record, "fbq", this.#lifecycle.fetch);
+      putCustom(record, "fbfk", this.#lifecycle.failedKeyframe);
+    }
+    this.#putTransport(record);
+    if (this.#playMode !== null) {
+      putCustom(record, "pm", token(this.#playMode));
+      if (this.#playMode !== "single-track" && this.#deltaFailRate !== null) {
+        putCustom(record, "dfr", this.#deltaFailRate.toFixed(3));
+      }
     }
-    Object.assign(params, buildTransportParams(this.#transport));
-    params["x-bc-ct"] = event;
-    this.#emit(params);
+    if (this.#fecFailClosed) {
+      putCustom(record, "ffc", token(this.#fecFailClosed.code));
+      putCustom(record, "ffl", this.#fecFailClosed.layer);
+    }
+    if (this.#switchMiscount > 0) putCustom(record, "sm", this.#switchMiscount);
+    if (this.#manifestStats) {
+      putCustom(record, "mv", this.#manifestStats.verified);
+      putCustom(record, "mf", Object.values(this.#manifestStats.failures).reduce((a, b) => a + b, 0));
+    }
+    return record;
   }
-  /** Fire both delivery callbacks with the given params. */
-  #emit(params) {
-    this.#onCmcdParams?.(params);
-    this.#onCmcdPost?.(formatQueryString(params));
+  #post(records) {
+    this.#onCmcdPost?.(records.map(encodeCmcdRecord).join("\n"));
   }
 };
 
@@ -31487,6 +31997,19 @@ function resolveRepairLayers(catalog, source) {
     totalBaseRepairSymbols: binding.totalBaseRepairSymbols
   };
 }
+function valueAt(catalog, pointer) {
+  let node = catalog;
+  for (const segment of pointer.split("/").slice(1)) {
+    if (typeof node !== "object" || node === null) return void 0;
+    node = node[segment.replace(/~1/g, "/").replace(/~0/g, "~")];
+  }
+  return node;
+}
+function catalogTrackDeliveryMode(catalog, source) {
+  const binding = bindingOf(catalog, source);
+  const entry = binding ? valueAt(catalog, binding.pointer) : void 0;
+  return entry?.deliveryMode === "stream" ? "stream" : "datagram";
+}
 function moqtPriority2(value) {
   return Number.isSafeInteger(value) && value >= 0 && value <= 255 ? value : null;
 }
@@ -31530,6 +32053,7 @@ function fecParams(catalog, track, fps, sampleRate) {
     repairTrackName: base.repairTrack,
     repairLayers: repair.baseLayers,
     repairOverlays: repair.overlays,
+    deliveryMode: catalogTrackDeliveryMode(catalog, track),
     ...mediaRate
   };
 }
@@ -32019,6 +32543,168 @@ function requireNumber(value, path) {
   return value;
 }
 
+// src/repair-layer-subscriptions.ts
+var SERIAL32_HALF2 = 2147483648;
+var RepairLayerSubscriptions = class {
+  #opts;
+  #windowPackets;
+  #margin;
+  #dropAfterWindows;
+  #source;
+  #layerCount = 0;
+  #subs = /* @__PURE__ */ new Map();
+  #disposed = false;
+  #lastSeq;
+  #expected = 0;
+  #lost = 0;
+  #wantFewer = 0;
+  #lossRate = null;
+  #repairPackets = 0;
+  #repairBytes = 0;
+  #staleDropped = 0;
+  constructor(opts) {
+    this.#opts = opts;
+    this.#source = opts.source;
+    this.#windowPackets = opts.windowPackets ?? 500;
+    this.#margin = opts.margin ?? 2;
+    this.#dropAfterWindows = opts.dropAfterWindows ?? 3;
+  }
+  get layerCount() {
+    return this.#layerCount;
+  }
+  /**
+   * One source packet's MMTP `packet_sequence_number`, in arrival order.
+   * The sequence is per `packet_id`: pass the packets of ONE packet_id only,
+   * or interleaved sequences read as loss.
+   */
+  noteSourceSequence(seq) {
+    if (this.#disposed || this.#delivery() === "stream") return;
+    seq >>>= 0;
+    if (this.#lastSeq === void 0) {
+      this.#lastSeq = seq;
+      return;
+    }
+    const d = serial32Distance(this.#lastSeq, seq);
+    if (d === 0) return;
+    const back = d >= SERIAL32_HALF2 ? 2 ** 32 - d : 0;
+    if (d > this.#windowPackets && (back === 0 || back > this.#windowPackets)) {
+      this.#lastSeq = seq;
+      this.#expected = 0;
+      this.#lost = 0;
+      return;
+    }
+    if (back === 0) {
+      this.#expected += d;
+      this.#lost += d - 1;
+      this.#lastSeq = seq;
+    } else if (this.#lost > 0) {
+      this.#lost -= 1;
+    }
+    if (this.#expected >= this.#windowPackets) this.#closeWindow();
+  }
+  /** ABR switch R -> R': close R's tracks, carry the layer count to R'. */
+  switchSource(next) {
+    if (this.#disposed) return;
+    this.#closeAll();
+    this.#source = next;
+    this.#lastSeq = void 0;
+    this.#expected = 0;
+    this.#lost = 0;
+    this.#wantFewer = 0;
+    this.#layerCount = this.#delivery() === "stream" ? 0 : Math.min(this.#layerCount, this.#layers().length);
+    this.#reconcile();
+  }
+  snapshot() {
+    return {
+      delivery: this.#delivery(),
+      layerCount: this.#layerCount,
+      subscribedTracks: [...this.#subs.keys()],
+      repairPackets: this.#repairPackets,
+      repairBytes: this.#repairBytes,
+      staleDropped: this.#staleDropped,
+      lossRate: this.#lossRate
+    };
+  }
+  dispose() {
+    if (this.#disposed) return;
+    this.#closeAll();
+    this.#disposed = true;
+  }
+  #delivery() {
+    return this.#source.deliveryMode === "stream" ? "stream" : "datagram";
+  }
+  #layers() {
+    return this.#source.repairLayers ?? [];
+  }
+  #closeWindow() {
+    const rate = this.#lost / this.#expected;
+    this.#lossRate = rate;
+    this.#expected = 0;
+    this.#lost = 0;
+    const target = this.#targetLayers(rate);
+    if (target > this.#layerCount) {
+      this.#wantFewer = 0;
+      this.#layerCount = target;
+    } else if (target < this.#layerCount) {
+      this.#wantFewer += 1;
+      if (this.#wantFewer >= this.#dropAfterWindows) {
+        this.#wantFewer = 0;
+        this.#layerCount -= 1;
+      }
+    } else {
+      this.#wantFewer = 0;
+    }
+    this.#reconcile();
+  }
+  /** Fewest base layers whose summed P covers margin x the measured loss of K. */
+  #targetLayers(rate) {
+    if (rate <= 0) return 0;
+    const needed = Math.ceil(rate * this.#source.fecK * this.#margin);
+    const layers = this.#layers();
+    let held = 0;
+    for (let n = 0; n < layers.length; n++) {
+      held += layers[n].repairSymbols;
+      if (held >= needed) return n + 1;
+    }
+    return layers.length;
+  }
+  /** Stream delivery never leaves layer count 0, so it never subscribes. */
+  #reconcile() {
+    const want = /* @__PURE__ */ new Map();
+    for (const layer of this.#layers().slice(0, this.#layerCount)) {
+      want.set(layer.repairTrackName, layer.priority);
+    }
+    const overlay = this.#source.repairOverlays?.[0];
+    if (this.#layerCount > 0 && overlay) want.set(overlay.repairTrackName, overlay.priority);
+    for (const [name, entry] of this.#subs) {
+      if (!want.has(name)) {
+        entry.sub.close();
+        this.#subs.delete(name);
+      }
+    }
+    for (const [name, priority] of want) {
+      if (this.#subs.has(name)) continue;
+      const entry = {};
+      entry.sub = this.#opts.subscribe(name, priority, (packet) => this.#onPacket(name, entry, packet));
+      this.#subs.set(name, entry);
+    }
+  }
+  /** Fenced on the entry itself, so a closed subscription is stale even if its track is re-added. */
+  #onPacket(name, entry, packet) {
+    if (this.#disposed || this.#subs.get(name) !== entry) {
+      this.#staleDropped += 1;
+      return;
+    }
+    this.#repairPackets += 1;
+    this.#repairBytes += packet.byteLength;
+    this.#opts.feed(packet, name);
+  }
+  #closeAll() {
+    for (const entry of this.#subs.values()) entry.sub.close();
+    this.#subs.clear();
+  }
+};
+
 // src/repair-fetch.ts
 var MOQT_PRIORITY_MAX = 255;
 var SOURCE_MEDIA_PRIORITY_MAX = REPAIR_PRIORITY_MIN - 1;
@@ -32664,6 +33350,7 @@ export {
   REPAIR_LIFECYCLE_LOG_PREFIX,
   REPAIR_PRIORITY_MAX,
   REPAIR_PRIORITY_MIN,
+  RepairLayerSubscriptions,
   SOURCE_MEDIA_PRIORITY_MAX,
   SampleCombineError,
   SampleCombiner,
@@ -32688,6 +33375,7 @@ export {
   catalogGroupDurationMs,
   catalogKeyframeCadenceMs,
   catalogRepairTarget,
+  catalogTrackDeliveryMode,
   catalogTrackFecUnavailable,
   classifyH264Keyframe,
   classifyHevcKeyframe,
@@ -32708,6 +33396,7 @@ export {
   detectH264Keyframe,
   detectHevcKeyframe,
   driftCheck,
+  encodeCmcdRecord,
   encodeDataSegment,
   encodeFecSourceInfo,
   encodeLocTimestamp,