commit 897e556bea5a8081f3bb5a42944d7e498db82266
Author: every.channel <founder@every.channel>
Date:   Sun Feb 15 16:17:27 2026 -0500

    every.channel: sanitized baseline

diff --git a/.envrc b/.envrc
new file mode 100644
index 0000000..95c114d
--- /dev/null
+++ b/.envrc
@@ -0,0 +1,2 @@
+use flake
+export EVERY_CHANNEL_ROOT="$(git rev-parse --show-toplevel 2>/dev/null || pwd)"
diff --git a/.forgejo/workflows/deploy-cloudflare.yml b/.forgejo/workflows/deploy-cloudflare.yml
new file mode 100644
index 0000000..50ac6aa
--- /dev/null
+++ b/.forgejo/workflows/deploy-cloudflare.yml
@@ -0,0 +1,40 @@
+name: deploy-cloudflare
+
+on:
+  push:
+    branches: [main]
+  workflow_dispatch: {}
+
+concurrency:
+  group: cloudflare-deploy-${{ forgejo.ref }}
+  cancel-in-progress: true
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - uses: actions/setup-node@v4
+        with:
+          node-version: "20"
+
+      - uses: dtolnay/rust-toolchain@stable
+        with:
+          targets: wasm32-unknown-unknown
+
+      - name: Build Web App (Trunk)
+        run: |
+          set -euo pipefail
+          cargo install trunk --locked
+          cd apps/tauri/ui
+          trunk build --release --public-url /
+
+      - name: Deploy Worker (Wrangler)
+        env:
+          CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+        run: |
+          set -euo pipefail
+          cd deploy/cloudflare-worker
+          npm ci
+          npm run deploy
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..414b9bb
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,28 @@
+apps/tauri/resources/yt-dlp/*/venv/
+tmp/
+target/
+apps/tauri/ui/target/
+apps/tauri/ui/apps/
+apps/tauri/dist/
+apps/tauri/gen/
+.direnv/
+result
+.wrangler/
+# third_party is managed as submodules for build-critical deps (iroh-live, iroh-gossip).
+# Everything else under third_party is treated as local scratch space.
+third_party/*
+!third_party/iroh-live
+!third_party/iroh-org
+third_party/iroh-org/*
+!third_party/iroh-org/iroh-gossip
+
+# Cloudflare worker local deps / builds
+deploy/cloudflare-worker/node_modules/
+
+# NEVER commit private keys
+every_channel_ed25519
+*.pem
+*.key
+*.p12
+*.pfx
+**/.env
diff --git a/AGENTS.md b/AGENTS.md
new file mode 100644
index 0000000..7c6e5f7
--- /dev/null
+++ b/AGENTS.md
@@ -0,0 +1,24 @@
+# Agent Instructions
+
+This repo runs on explicit governance. Agents should operate autonomously and record decisions as ECPs.
+
+## Principles
+
+- The constitution states enduring principles, not specific technical choices.
+- Technical decisions belong in ECPs.
+- Use ECPs as the primary review surface for the founder.
+
+## Workflow
+
+- For any non-trivial change, draft an ECP in `evolution/proposals/` before or alongside implementation.
+- Keep ECPs short, decisive, and reversible where possible.
+- Prefer incremental commits; document rationale in ECPs rather than inline comments.
+
+## Identity and signing
+
+- Commits must be signed with SSH or age identities (minimum: SSH-signed commits).
+- If unsure about signing configuration, pause and ask.
+
+## Autonomy
+
+- Proceed independently; ask for input only when blocked by ambiguous design or missing constraints.
diff --git a/CONSTITUTION.md b/CONSTITUTION.md
new file mode 100644
index 0000000..8c69107
--- /dev/null
+++ b/CONSTITUTION.md
@@ -0,0 +1,42 @@
+# every.channel Constitution
+
+1. Mission
+
+Make broadcast television universally reachable.
+
+Build a global, disaggregated network of relays that lets anyone, anywhere, watch every.channel on any device, for free.
+
+2. Principles
+
+These are non-negotiable. Amendments require explicit constitutional process.
+
+- **Free access.** No paywalls or tiers for viewing or participation. Donations and grants are welcome.
+- **Public-first.** Broadcast spectrum is public. The network exists to expand public access and reduce artificial scarcity.
+- **User sovereignty.** Nodes are user-run, user-owned, and programmable. Leaving the network must be as easy as joining it.
+- **Resilient by design.** The system must tolerate takedowns, failures, and hostile pressure without losing the whole.
+- **Transparent operation.** Source, protocols, and governance are public. Hidden control planes are not acceptable.
+- **Composable layers.** The system is built from separable components so multiple implementations can coexist.
+
+3. Infrastructure
+
+**The project controls its own infrastructure.** CI, deployment, and secrets are defined in this repository.
+
+External services may be used when practical but must not create dependencies that prevent independent operation.
+
+4. Contributor Conduct
+
+- Non-trivial changes require a written proposal in `evolution/proposals/` referencing this constitution.
+- Capture decisions and rationale in the repository. If it is not written down, it did not happen.
+- When tradeoffs appear, prefer choices that maximize user control and network resiliency.
+- Security-sensitive changes require senior contributor review.
+
+5. Governance
+
+- ECP (every.channel proposals) is the legislative process.
+- Senior contributors are named in `CONTRIBUTORS.md`.
+- All changes merge through pull requests.
+- Constitutional amendments require a dedicated ECP quoting the affected section with explicit rationale.
+
+6. Origin
+
+This constitution implements the intent of the every.channel genesis documents.
diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
new file mode 100644
index 0000000..6f35733
--- /dev/null
+++ b/CONTRIBUTORS.md
@@ -0,0 +1,3 @@
+# Contributors
+
+- Founder: founder@every.channel
diff --git a/Cargo.lock b/Cargo.lock
new file mode 100644
index 0000000..da401d9
--- /dev/null
+++ b/Cargo.lock
@@ -0,0 +1,9029 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "ac-ffmpeg"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd5735fde11540ea2a6e5cc93fea7fe8d8ff0f39f1630cbd21c74155d5ae6710"
+dependencies = [
+ "ac-ffmpeg-build",
+ "ac-ffmpeg-features",
+ "cc",
+ "lazy_static",
+ "rustc_version",
+]
+
+[[package]]
+name = "ac-ffmpeg-build"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd4d05f90fca97e6f5960cbca5154985db2b3e91592d874f0f22a8a34f53aa9"
+dependencies = [
+ "cfg-if",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "ac-ffmpeg-features"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6bdd0b60d57a35283db1b94d786f47857b412195943b38be68a9dbb481adb9c"
+dependencies = [
+ "ac-ffmpeg-build",
+ "cc",
+]
+
+[[package]]
+name = "acto"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "148541f13c28e3e840354ee4d6c99046c10be2c81068bbd23b9e3a38f95a917e"
+dependencies = [
+ "parking_lot",
+ "pin-project-lite",
+ "rustc_version",
+ "smol_str 0.1.24",
+ "sync_wrapper",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common 0.1.7",
+ "generic-array",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "alloc-no-stdlib"
+version = "2.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc7bb162ec39d46ab1ca8c77bf72e890535becd1751bb45f64c597edb4c8c6b3"
+
+[[package]]
+name = "alloc-stdlib"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94fb8275041c72129eb51b7d0322c29b8387a0386127718b096429201a5d6ece"
+dependencies = [
+ "alloc-no-stdlib",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "0.6.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+
+[[package]]
+name = "arc-swap"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ded5f9a03ac8f24d1b8a25101ee812cd32cdc8c50a4c50237de2c4915850e73"
+dependencies = [
+ "rustversion",
+]
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
+
+[[package]]
+name = "asn1-rs"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f6fd5ddaf0351dff5b8da21b2fb4ff8e08ddd02857f0bf69c47639106c0fff0"
+dependencies = [
+ "asn1-rs-derive 0.4.0",
+ "asn1-rs-impl 0.1.0",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "asn1-rs"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5493c3bedbacf7fd7382c6346bbd66687d12bbaad3a89a2d2c303ee6cf20b048"
+dependencies = [
+ "asn1-rs-derive 0.5.1",
+ "asn1-rs-impl 0.2.0",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 1.0.69",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "726535892e8eae7e70657b4c8ea93d26b8553afb1ce617caee529ef96d7dee6c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "synstructure 0.12.6",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2777730b2039ac0f95f093556e61b6d26cebed5393ca6f152717777cec3a42ed"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "async-channel"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
+dependencies = [
+ "concurrent-queue",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-compat"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1ba85bc55464dcbf728b56d97e119d673f4cf9062be330a9a26f3acf504a590"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "once_cell",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "async_cell"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "447ab28afbb345f5408b120702a44e5529ebf90b1796ec76e9528df8e288e6c2"
+dependencies = [
+ "loom",
+]
+
+[[package]]
+name = "async_io_stream"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d7b9decdf35d8908a7e3ef02f64c5e9b1695e230154c0e8de3969142d9b94c"
+dependencies = [
+ "futures",
+ "pharos",
+ "rustc_version",
+]
+
+[[package]]
+name = "atk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "241b621213072e993be4f6f3a9e4b45f65b7e6faad43001be957184b7bb1824b"
+dependencies = [
+ "atk-sys",
+ "glib",
+ "libc",
+]
+
+[[package]]
+name = "atk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e48b684b0ca77d2bbadeef17424c2ea3c897d44d566a1617e7e8f30614d086"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "atomic-polyfill"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cf2bce30dfe09ef0bfaef228b9d414faaf7e563035494d7fe092dba54b300f4"
+dependencies = [
+ "critical-section",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "attohttpc"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16e2cdb6d5ed835199484bb92bb8b3edd526effe995c61732580439c1a67e2e9"
+dependencies = [
+ "base64 0.22.1",
+ "http",
+ "log",
+ "url",
+]
+
+[[package]]
+name = "auto_generate_cdp"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "359220d0b9360b79d17d648d0a3ba1e792ec36bdbc227c8fd0351df3a0415704"
+dependencies = [
+ "convert_case 0.8.0",
+ "proc-macro2",
+ "quote",
+ "serde",
+ "serde_json",
+ "ureq 3.2.0",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "axum"
+version = "0.7.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edca88bc138befd0323b20752846e6587272d3b03b0343c8ea28a6f819e6e71f"
+dependencies = [
+ "async-trait",
+ "axum-core",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "itoa",
+ "matchit",
+ "memchr",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "rustversion",
+ "serde",
+ "serde_json",
+ "serde_path_to_error",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "axum-core"
+version = "0.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09f2bd6146b97ae3359fa0cc6d6b376d9539582c7b4220f041a33ec24c226199"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "mime",
+ "pin-project-lite",
+ "rustversion",
+ "sync_wrapper",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "backon"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cffb0e931875b666fc4fcb20fee52e9bbd1ef836fd9e9e04ec21555f9f85f7ef"
+dependencies = [
+ "fastrand",
+ "gloo-timers",
+ "tokio",
+]
+
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
+[[package]]
+name = "base32"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
+
+[[package]]
+name = "bincode"
+version = "1.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "blake3"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2468ef7d57b3fb7e16b576e8377cdbde2320c60e1491e961d11da40fc4f02a2d"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96eb4cdd6cf1b31d671e9efe75c5d1ec614776856cefbe109ca373554a6d514f"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block-padding"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "brotli"
+version = "8.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bd8b9603c7aa97359dbd97ecf258968c95f3adddd6db2f7e7a5bef101c84560"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+ "brotli-decompressor",
+]
+
+[[package]]
+name = "brotli-decompressor"
+version = "5.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "874bb8112abecc98cbd6d81ea4fa7e94fb9449648c93cc89aa40c81c24d7de03"
+dependencies = [
+ "alloc-no-stdlib",
+ "alloc-stdlib",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
+
+[[package]]
+name = "bytemuck"
+version = "1.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8efb64bd706a16a1bdde310ae86b351e4d21550d98d056f22f8a7f7a2183fec"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cairo-rs"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ca26ef0159422fb77631dc9d17b102f253b876fe1586b03b803e63a309b4ee2"
+dependencies = [
+ "bitflags 2.10.0",
+ "cairo-sys-rs",
+ "glib",
+ "libc",
+ "once_cell",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "cairo-sys-rs"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "685c9fa8e590b8b3d678873528d83411db17242a73fccaed827770ea0fedda51"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "camino"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e629a66d692cb9ff1a1c664e41771b3dcaf961985a9774c0eb0bd1b51cf60a48"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "cargo-platform"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e35af189006b9c0f00a064685c727031e3ed2d8020f7ba284d78cc2671bd36ea"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cargo_metadata"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd5eb614ed4c27c5d706420e4320fbe3216ab31fa1c33cd8246ac36dae4479ba"
+dependencies = [
+ "camino",
+ "cargo-platform",
+ "semver",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "cargo_toml"
+version = "0.22.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "374b7c592d9c00c1f4972ea58390ac6b18cbb6ab79011f3bdc90a0b82ca06b77"
+dependencies = [
+ "serde",
+ "toml 0.9.11+spec-1.1.0",
+]
+
+[[package]]
+name = "cbc"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b26a0954ae34af09b50f0de26458fa95369a0d478d8236d3f93082b219bd29"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "ccm"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae3c82e4355234767756212c570e29833699ab63e6ffd161887314cc5b43847"
+dependencies = [
+ "aead",
+ "cipher",
+ "ctr",
+ "subtle",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfb"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38f2da7a0a2c4ccf0065be06397cc26a81f4e528be095826eee9d4adbb8c60f"
+dependencies = [
+ "byteorder",
+ "fnv",
+ "uuid",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
+dependencies = [
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chacha20"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3613f74bd2eac03dad61bd53dbe620703d4371614fe0bc3b9f04dd36fe4e818"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "chacha20poly1305"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10cd79432192d1c0f4e1a0fef9527696cc039165d729fb41b3f4f4f354c2dc35"
+dependencies = [
+ "aead",
+ "chacha20",
+ "cipher",
+ "poly1305",
+ "zeroize",
+]
+
+[[package]]
+name = "chrono"
+version = "0.4.43"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fac4744fb15ae8337dc853fee7fb3f4e48c0fbaa23d0afe49c447b4fab126118"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common 0.1.7",
+ "inout",
+ "zeroize",
+]
+
+[[package]]
+name = "clap"
+version = "4.5.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75ca66430e33a14957acc24c5077b503e7d374151b2b4b3a10c83b4ceb4be0e"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.5.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "793207c7fa6300a0608d1080b858e5fdbe713cdc1c8db9fb17777d8a13e63df0"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.5.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a92793da1a46a5f2a02a6f4c46c6496b28c43638adea8306fcb0caa1634f24e5"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "clap_lex"
+version = "0.7.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e64b0cc0439b12df2fa678eae89a1c56a529fd067a9115f7827f1fffd22b32"
+
+[[package]]
+name = "cobs"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1"
+dependencies = [
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "colorchoice"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+
+[[package]]
+name = "convert_case"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6245d59a3e82a7fc217c5828a6692dbc6dfb63a0c8c90495621f7b9d79704a0e"
+
+[[package]]
+name = "convert_case"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "baaaa0ecca5b51987b9423ccdc971514dd8b0bb7b4060b983d3664dad3f1f89f"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cookie"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ddef33a339a91ea89fb53151bd0a4689cfce27055c291dfa69945475d22c747"
+dependencies = [
+ "time",
+ "version_check",
+]
+
+[[package]]
+name = "cordyceps"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "688d7fbb8092b8de775ef2536f36c8c31f2bc4006ece2e8d8ad2d17d00ce0a2a"
+dependencies = [
+ "loom",
+ "tracing",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa95a34622365fa5bbf40b20b75dba8dfa8c94c734aea8ac9a5ca38af14316f1"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation",
+ "core-graphics-types",
+ "foreign-types",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation",
+ "libc",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5eb8a2a1cd12ab0d987a5d5e825195d372001a4094a0376319d5a0ad71c1ba0d"
+dependencies = [
+ "crc-catalog",
+]
+
+[[package]]
+name = "crc-catalog"
+version = "2.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19d374276b40fb8bbdee95aef7c7fa6b5316ec764510eb64b8dd0e2ed0d7e7f5"
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "rand_core 0.6.4",
+ "typenum",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.2.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a8235645834fbc6832939736ce2f2d08192652269e11010a6240f61b908a1c6"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "cssparser"
+version = "0.29.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f93d03419cb5950ccfd3daf3ff1c7a36ace64609a1a8746d493df1ca0afde0fa"
+dependencies = [
+ "cssparser-macros",
+ "dtoa-short",
+ "itoa",
+ "matches",
+ "phf 0.10.1",
+ "proc-macro2",
+ "quote",
+ "smallvec",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "cssparser-macros"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13b588ba4ac1a99f7f2964d24b3d896ddc6bf847ee3855dbd4366f058cfcd331"
+dependencies = [
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "ctor"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a2785755761f3ddc1492979ce1e48d2c00d09311c39e4466429188f3dd6501"
+dependencies = [
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "4.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "digest 0.10.7",
+ "fiat-crypto 0.2.9",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "5.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f9200d1d13637f15a6acb71e758f64624048d85b31a5fdbfd8eca1e2687d0b7"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "digest 0.11.0-rc.3",
+ "fiat-crypto 0.3.0",
+ "rand_core 0.9.5",
+ "rustc_version",
+ "serde",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
+dependencies = [
+ "darling_core 0.20.11",
+ "darling_macro 0.20.11",
+]
+
+[[package]]
+name = "darling"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+dependencies = [
+ "darling_core 0.21.3",
+ "darling_macro 0.21.3",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
+dependencies = [
+ "darling_core 0.20.11",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+dependencies = [
+ "darling_core 0.21.3",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid 0.9.6",
+ "pem-rfc7468 0.7.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der"
+version = "0.8.0-rc.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02c1d73e9668ea6b6a28172aa55f3ebec38507131ce179051c8033b5c6037653"
+dependencies = [
+ "const-oid 0.10.2",
+ "pem-rfc7468 1.0.0",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "8.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dbd676fbbab537128ef0278adb5576cf363cff6aa22a7b24effe97347cfab61e"
+dependencies = [
+ "asn1-rs 0.5.2",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "der-parser"
+version = "9.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5cd0a5c643689626bec213c4d8bd4d96acc8ffdb4ad4bb6bc16abf27d5f4b553"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "displaydoc",
+ "nom",
+ "num-bigint",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
+dependencies = [
+ "powerfmt",
+ "serde_core",
+]
+
+[[package]]
+name = "derive_builder"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "507dfb09ea8b7fa618fcf76e953f4f5e192547945816d5358edffe39f6f94947"
+dependencies = [
+ "derive_builder_macro",
+]
+
+[[package]]
+name = "derive_builder_core"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d5bcf7b024d6835cfb3d473887cd966994907effbe9227e8c8219824d06c4e8"
+dependencies = [
+ "darling 0.20.11",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "derive_builder_macro"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab63b0e2bf4d5928aff72e83a7dace85d7bba5fe12dcc3c5a572d78caffd3f3c"
+dependencies = [
+ "derive_builder_core",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "derive_more"
+version = "0.99.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6edb4b64a43d977b8e99788fe3a04d483834fba1215a7e02caa415b626497f7f"
+dependencies = [
+ "convert_case 0.4.0",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "convert_case 0.10.0",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.114",
+ "unicode-xid",
+]
+
+[[package]]
+name = "diatomic-waker"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab03c107fafeb3ee9f5925686dbb7a73bc76e3932abb0d2b365cb64b169cf04c"
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer 0.10.4",
+ "const-oid 0.9.6",
+ "crypto-common 0.1.7",
+ "subtle",
+]
+
+[[package]]
+name = "digest"
+version = "0.11.0-rc.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dac89f8a64533a9b0eaa73a68e424db0fb1fd6271c74cc0125336a05f090568d"
+dependencies = [
+ "block-buffer 0.11.0",
+ "crypto-common 0.2.0-rc.4",
+]
+
+[[package]]
+name = "dirs"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e8aa94d75141228480295a7d0e7feb620b1a5ad9f12bc40be62411e38cce4e"
+dependencies = [
+ "dirs-sys",
+]
+
+[[package]]
+name = "dirs-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e01a3366d27ee9890022452ee61b2b63a67e6f13f58900b651ff5665f0bb1fab"
+dependencies = [
+ "libc",
+ "option-ext",
+ "redox_users",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "dispatch"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+
+[[package]]
+name = "dispatch2"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89a09f22a6c6069a18470eb92d2298acf25463f14256d24778e1230d789a2aec"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09b4f5f101177ff01b8ec4ecc81eead416a8aa42819a2869311b3420fa114ffa"
+dependencies = [
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e2c5bd4158e66d1e215c49b837e11d62f3267b30c92f1d171c4d3105e3dc4d4"
+dependencies = [
+ "dlopen2_derive",
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "dlopen2_derive"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fbbb781877580993a8707ec48672673ec7b81eeba04cfd2310bd28c08e47c8f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "dtoa"
+version = "1.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c3cf4824e2d5f025c7b531afcb2325364084a16806f6d47fbc1f5fbd9960590"
+
+[[package]]
+name = "dtoa-short"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd1511a7b6a56299bd043a9c167a6d2bfb37bf84a6dfceaba651168adfb43c87"
+dependencies = [
+ "dtoa",
+]
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "ec-chopper"
+version = "0.0.0"
+dependencies = [
+ "ac-ffmpeg",
+ "anyhow",
+ "blake3",
+ "ec-core",
+ "ec-ts",
+ "serde",
+]
+
+[[package]]
+name = "ec-cli"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "blake3",
+ "clap",
+ "ec-chopper",
+ "ec-core",
+ "ec-hdhomerun",
+ "ec-linux-iptv",
+ "serde_json",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "ec-core"
+version = "0.0.0"
+dependencies = [
+ "blake3",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "ec-crypto"
+version = "0.0.0"
+dependencies = [
+ "blake3",
+ "chacha20poly1305",
+ "ec-core",
+ "ed25519-dalek 2.2.0",
+ "hex",
+]
+
+[[package]]
+name = "ec-direct"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "base64 0.22.1",
+ "bytes",
+ "just-webrtc",
+ "serde",
+ "serde_json",
+ "tokio",
+]
+
+[[package]]
+name = "ec-hdhomerun"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "crc32fast",
+ "ec-core",
+ "hex",
+ "serde",
+ "serde_json",
+ "ureq 2.12.1",
+]
+
+[[package]]
+name = "ec-iroh"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "blake3",
+ "bytes",
+ "ec-core",
+ "futures-lite",
+ "iroh",
+ "iroh-gossip",
+ "serde_json",
+ "tokio",
+]
+
+[[package]]
+name = "ec-linux-iptv"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "serde",
+]
+
+[[package]]
+name = "ec-moq"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "blake3",
+ "bytes",
+ "ec-core",
+ "ec-crypto",
+ "ec-iroh",
+ "hex",
+ "iroh",
+ "iroh-moq",
+ "moq-lite",
+ "serde",
+ "serde_json",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "ec-node"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "blake3",
+ "bytes",
+ "clap",
+ "ec-chopper",
+ "ec-core",
+ "ec-crypto",
+ "ec-direct",
+ "ec-hdhomerun",
+ "ec-iroh",
+ "ec-linux-iptv",
+ "ec-moq",
+ "futures-util",
+ "headless_chrome",
+ "hex",
+ "iroh",
+ "just-webrtc",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "tokio",
+ "tokio-tungstenite",
+ "tracing",
+ "tracing-subscriber",
+ "urlencoding",
+ "which 6.0.3",
+]
+
+[[package]]
+name = "ec-tauri"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "axum",
+ "blake3",
+ "ec-chopper",
+ "ec-core",
+ "ec-crypto",
+ "ec-hdhomerun",
+ "ec-iroh",
+ "ec-linux-iptv",
+ "ec-moq",
+ "hex",
+ "iroh",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "tauri",
+ "tauri-build",
+ "tokio",
+ "tower-http 0.5.2",
+ "tracing",
+]
+
+[[package]]
+name = "ec-ts"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "serde",
+ "serde-big-array",
+]
+
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der 0.7.10",
+ "digest 0.10.7",
+ "elliptic-curve",
+ "rfc6979",
+ "signature 2.2.0",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "ed25519"
+version = "2.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "115531babc129696a58c64a4fef0a8bf9e9698629fb97e9e40767d235cfbcd53"
+dependencies = [
+ "pkcs8 0.10.2",
+ "signature 2.2.0",
+]
+
+[[package]]
+name = "ed25519"
+version = "3.0.0-rc.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d058004dae83c9cf58f3d81612d0296bbf0a52dd7d7b6afa30ab7228bb6119f"
+dependencies = [
+ "pkcs8 0.11.0-rc.10",
+ "serde",
+ "signature 3.0.0-rc.9",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e796c081cee67dc755e1a36a0a172b897fab85fc3f6bc48307991f64e4eca9"
+dependencies = [
+ "curve25519-dalek 4.1.3",
+ "ed25519 2.2.3",
+ "serde",
+ "sha2 0.10.9",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "3.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad207ed88a133091f83224265eac21109930db09bedcad05d5252f2af2de20a1"
+dependencies = [
+ "curve25519-dalek 5.0.0-pre.1",
+ "ed25519 3.0.0-rc.3",
+ "rand_core 0.9.5",
+ "serde",
+ "sha2 0.11.0-rc.2",
+ "signature 3.0.0-rc.9",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest 0.10.7",
+ "ff",
+ "generic-array",
+ "group",
+ "hkdf",
+ "pem-rfc7468 0.7.0",
+ "pkcs8 0.10.2",
+ "rand_core 0.6.4",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "embed-resource"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55a075fc573c64510038d7ee9abc7990635863992f83ebc52c8b433b8411a02e"
+dependencies = [
+ "cc",
+ "memchr",
+ "rustc_version",
+ "toml 0.9.11+spec-1.1.0",
+ "vswhom",
+ "winreg 0.55.0",
+]
+
+[[package]]
+name = "embed_plist"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ef6b89e5b37196644d8796de5268852ff179b44e96276cf4290264843743bb7"
+
+[[package]]
+name = "embedded-io"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
+
+[[package]]
+name = "embedded-io"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edd0f118536f44f5ccd48bcb8b111bdc3de888b58c74639dfb034a357d0f206d"
+
+[[package]]
+name = "enum-as-inner"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "enum-assoc"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ed8956bd5c1f0415200516e78ff07ec9e16415ade83c056c230d7b7ea0d55b7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "env_home"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7f84e12ccf0a7ddc17a6c41c93326024c42920d7ee630d04950e6926645c0fe"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "erased-serde"
+version = "0.4.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89e8918065695684b2b0702da20382d5ae6065cf3327bc2d6436bd49a71ce9f3"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "event-listener"
+version = "5.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+dependencies = [
+ "concurrent-queue",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fastbloom"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7f34442dbe69c60fe8eaf58a8cafff81a1f278816d8ab4db255b3bef4ac3c4"
+dependencies = [
+ "getrandom 0.3.4",
+ "libm",
+ "rand 0.9.2",
+ "siphasher 1.0.2",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "fiat-crypto"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d"
+
+[[package]]
+name = "fiat-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
+
+[[package]]
+name = "field-offset"
+version = "0.3.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38e2275cc4e4fc009b0669731a1e5ab7ebf11f469eaede2bab9309a5b4d6057f"
+dependencies = [
+ "memoffset 0.9.1",
+ "rustc_version",
+]
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "fixedbitset"
+version = "0.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d674e81391d1e1ab681a28d99df07927c6d4aa5b027d7da16ba32d1d21ecd99"
+
+[[package]]
+name = "flate2"
+version = "1.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b375d6465b98090a5f25b1c7703f3859783755aa9a80433b36e0379a3ec2f369"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "flume"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "spin 0.9.8",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futf"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df420e2e84819663797d1ec6544b13c5be84629e7bb00dc960d6917db2987843"
+dependencies = [
+ "mac",
+ "new_debug_unreachable",
+]
+
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-buffered"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8e0e1f38ec07ba4abbde21eed377082f17ccb988be9d988a5adbf4bafc118fd"
+dependencies = [
+ "cordyceps",
+ "diatomic-waker",
+ "futures-core",
+ "pin-project-lite",
+ "spin 0.10.0",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-concurrency"
+version = "7.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175cd8cca9e1d45b87f18ffa75088f2099e3c4fe5e2f83e42de112560bea8ea6"
+dependencies = [
+ "fixedbitset",
+ "futures-core",
+ "futures-lite",
+ "pin-project",
+ "smallvec",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "fxhash"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c31b6d751ae2c7f11320402d34e41349dd1016f8d5d45e48c4312bc8625af50c"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "gdk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f245958c627ac99d8e529166f9823fb3b838d1d41fd2b297af3075093c2691"
+dependencies = [
+ "cairo-rs",
+ "gdk-pixbuf",
+ "gdk-sys",
+ "gio",
+ "glib",
+ "libc",
+ "pango",
+]
+
+[[package]]
+name = "gdk-pixbuf"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50e1f5f1b0bfb830d6ccc8066d18db35c487b1b2b1e8589b5dfe9f07e8defaec"
+dependencies = [
+ "gdk-pixbuf-sys",
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+]
+
+[[package]]
+name = "gdk-pixbuf-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9839ea644ed9c97a34d129ad56d38a25e6756f99f3a88e15cd39c20629caf7"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "gdk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c2d13f38594ac1e66619e188c6d5a1adb98d11b2fcf7894fc416ad76aa2f3f7"
+dependencies = [
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkwayland-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "140071d506d223f7572b9f09b5e155afbd77428cd5cc7af8f2694c41d98dfe69"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pkg-config",
+ "system-deps",
+]
+
+[[package]]
+name = "gdkx11"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3caa00e14351bebbc8183b3c36690327eb77c49abc2268dd4bd36b856db3fbfe"
+dependencies = [
+ "gdk",
+ "gdkx11-sys",
+ "gio",
+ "glib",
+ "libc",
+ "x11",
+]
+
+[[package]]
+name = "gdkx11-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e7445fe01ac26f11601db260dd8608fe172514eb63b3b5e261ea6b0f4428d"
+dependencies = [
+ "gdk-sys",
+ "glib-sys",
+ "libc",
+ "system-deps",
+ "x11",
+]
+
+[[package]]
+name = "generator"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f04ae4152da20c76fe800fa48659201d5cf627c5149ca0b707b69d7eef6cf9"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "libc",
+ "log",
+ "rustversion",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+ "zeroize",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.1.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fc3cb4d91f53b50155bdcfd23f6a4c39ae1969c2ae85982b135750cccaf5fce"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi 0.9.0+wasi-snapshot-preview1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "ghash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
+dependencies = [
+ "opaque-debug",
+ "polyval",
+]
+
+[[package]]
+name = "gio"
+version = "0.18.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4fc8f532f87b79cbc51a79748f16a6828fb784be93145a322fa14d06d354c73"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-util",
+ "gio-sys",
+ "glib",
+ "libc",
+ "once_cell",
+ "pin-project-lite",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "gio-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37566df850baf5e4cb0dfb78af2e4b9898d817ed9263d1090a2df958c64737d2"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+ "winapi",
+]
+
+[[package]]
+name = "glib"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "233daaf6e83ae6a12a52055f568f9d7cf4671dabb78ff9560ab6da230ce00ee5"
+dependencies = [
+ "bitflags 2.10.0",
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-task",
+ "futures-util",
+ "gio-sys",
+ "glib-macros",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "memchr",
+ "once_cell",
+ "smallvec",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "glib-macros"
+version = "0.18.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bb0228f477c0900c880fd78c8759b95c7636dbd7842707f49e132378aa2acdc"
+dependencies = [
+ "heck 0.4.1",
+ "proc-macro-crate 2.0.2",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "glib-sys"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "063ce2eb6a8d0ea93d2bf8ba1957e78dbab6be1c2220dd3daca57d5a9d869898"
+dependencies = [
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
+
+[[package]]
+name = "gloo-timers"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbb143cf96099802033e0d4f4963b19fd2e0b728bcf076cd9cf7f6634f092994"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "gobject-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0850127b514d1c4a4654ead6dedadb18198999985908e6ffe4436f53c785ce44"
+dependencies = [
+ "glib-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core 0.6.4",
+ "subtle",
+]
+
+[[package]]
+name = "gtk"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd56fb197bfc42bd5d2751f4f017d44ff59fbb58140c6b49f9b3b2bdab08506a"
+dependencies = [
+ "atk",
+ "cairo-rs",
+ "field-offset",
+ "futures-channel",
+ "gdk",
+ "gdk-pixbuf",
+ "gio",
+ "glib",
+ "gtk-sys",
+ "gtk3-macros",
+ "libc",
+ "pango",
+ "pkg-config",
+]
+
+[[package]]
+name = "gtk-sys"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f29a1c21c59553eb7dd40e918be54dccd60c52b049b75119d5d96ce6b624414"
+dependencies = [
+ "atk-sys",
+ "cairo-sys-rs",
+ "gdk-pixbuf-sys",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "pango-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "gtk3-macros"
+version = "0.18.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52ff3c5b21f14f0736fed6dcfc0bfb4225ebf5725f3c0209edeec181e4d73e9d"
+dependencies = [
+ "proc-macro-crate 1.3.1",
+ "proc-macro-error",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.13.0",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hash32"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0c35f58762feb77d74ebe43bdbc3210f09be9fe6742234d573bacc26ed92b67"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash",
+]
+
+[[package]]
+name = "headless_chrome"
+version = "1.0.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "333344ecb4b6a91ddd2e6a3c4fdb54aaddfbd2c82847f9c58fe42dd88afcf08e"
+dependencies = [
+ "anyhow",
+ "auto_generate_cdp",
+ "base64 0.22.1",
+ "derive_builder",
+ "log",
+ "rand 0.9.2",
+ "regex",
+ "serde",
+ "serde_json",
+ "tempfile",
+ "thiserror 2.0.18",
+ "tungstenite 0.28.0",
+ "url",
+ "which 8.0.0",
+ "winreg 0.55.0",
+]
+
+[[package]]
+name = "heapless"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
+dependencies = [
+ "atomic-polyfill",
+ "hash32",
+ "rustc_version",
+ "serde",
+ "spin 0.9.8",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heck"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95505c38b4572b2d910cecb0281560f54b440a19336cbbcb27bf6ce6adc6f5a8"
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hickory-proto"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8a6fe56c0038198998a6f217ca4e7ef3a5e51f46163bd6dd60b5c71ca6c6502"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "cfg-if",
+ "data-encoding",
+ "enum-as-inner",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "h2",
+ "http",
+ "idna",
+ "ipnet",
+ "once_cell",
+ "rand 0.9.2",
+ "ring",
+ "rustls",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "hickory-resolver"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "hickory-proto",
+ "ipconfig",
+ "moka",
+ "once_cell",
+ "parking_lot",
+ "rand 0.9.2",
+ "resolv-conf",
+ "rustls",
+ "smallvec",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+]
+
+[[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "home"
+version = "0.5.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc627f471c528ff0c4a49e1d5e60450c8f6461dd6d10ba9dcd3a61d3dff7728d"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "html5ever"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b7410cae13cbc75623c98ac4cbfd1f0bedddf3227afc24f370cf0f50a44a11c"
+dependencies = [
+ "log",
+ "mac",
+ "markup5ever",
+ "match_token",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "http-range-header"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9171a2ea8a68358193d15dd5d70c1c10a2afc3e7e4c5bc92bc9f025cebd7359c"
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b41fb3dc24fe72c2e3a4685eed55917c2fb228851257f4a8f2d985da9443c3e5"
+dependencies = [
+ "typenum",
+]
+
+[[package]]
+name = "hyper"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "pin-utils",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots 1.0.5",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "727805d60e7938b76b826a6ef209eb70eaa1812794f9424d4a4e2d740662df5f"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2 0.6.2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "ico"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc50b891e4acf8fe0e71ef88ec43ad82ee07b3810ad09de10f1d01f072ed4b98"
+dependencies = [
+ "byteorder",
+ "png",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "identity-hash"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfdd7caa900436d8f13b2346fe10257e0c05c1f1f9e351f4f5d57c03bd5f45da"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "igd-next"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "516893339c97f6011282d5825ac94fc1c7aad5cad26bdc2d0cee068c0bf97f97"
+dependencies = [
+ "async-trait",
+ "attohttpc",
+ "bytes",
+ "futures",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "log",
+ "rand 0.9.2",
+ "tokio",
+ "url",
+ "xmltree",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "infer"
+version = "0.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a588916bfdfd92e71cacef98a63d9b1f0d74d6599980d11894290e7ddefffcf7"
+dependencies = [
+ "cfb",
+]
+
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "block-padding",
+ "generic-array",
+]
+
+[[package]]
+name = "interceptor"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4705c00485029e738bea8c9505b5ddb1486a8f3627a953e1e77e6abdf5eef90c"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "log",
+ "portable-atomic",
+ "rand 0.8.5",
+ "rtcp",
+ "rtp",
+ "thiserror 1.0.69",
+ "tokio",
+ "waitgroup",
+ "webrtc-srtp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "ipconfig"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f"
+dependencies = [
+ "socket2 0.5.10",
+ "widestring",
+ "windows-sys 0.48.0",
+ "winreg 0.50.0",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "iri-string"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c91338f0783edbd6195decb37bae672fd3b165faffb89bf7b9e6942f8b1a731a"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "iroh"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3790cc3a5ef6a89a1e30b64de54de31e692958e2dc8a37cf2831d52c76805de9"
+dependencies = [
+ "backon",
+ "bytes",
+ "cfg_aliases",
+ "data-encoding",
+ "derive_more 2.1.1",
+ "ed25519-dalek 3.0.0-pre.1",
+ "futures-util",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "igd-next",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp 0.8.0",
+ "iroh-relay",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netwatch 0.14.0",
+ "papaya",
+ "pin-project",
+ "pkarr",
+ "pkcs8 0.11.0-rc.10",
+ "portmapper",
+ "rand 0.9.2",
+ "reqwest",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "serde",
+ "smallvec",
+ "strum",
+ "swarm-discovery",
+ "sync_wrapper",
+ "time",
+ "tokio",
+ "tokio-stream",
+ "tokio-util",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+ "webpki-roots 1.0.5",
+]
+
+[[package]]
+name = "iroh-base"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4c3fc0440c8775bf2677a58550fcef7e544346add01bf1b163f9fc0cedd436e"
+dependencies = [
+ "curve25519-dalek 5.0.0-pre.1",
+ "data-encoding",
+ "derive_more 2.1.1",
+ "ed25519-dalek 3.0.0-pre.1",
+ "n0-error",
+ "rand_core 0.9.5",
+ "serde",
+ "url",
+ "zeroize",
+ "zeroize_derive",
+]
+
+[[package]]
+name = "iroh-gossip"
+version = "0.96.0"
+dependencies = [
+ "blake3",
+ "bytes",
+ "data-encoding",
+ "derive_more 2.1.1",
+ "ed25519-dalek 3.0.0-pre.1",
+ "futures-concurrency",
+ "futures-lite",
+ "futures-util",
+ "hex",
+ "indexmap 2.13.0",
+ "iroh",
+ "iroh-base",
+ "iroh-metrics",
+ "irpc",
+ "n0-error",
+ "n0-future",
+ "postcard",
+ "rand 0.9.2",
+ "serde",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-metrics"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c946095f060e6e59b9ff30cc26c75cdb758e7fb0cde8312c89e2144654989fcb"
+dependencies = [
+ "iroh-metrics-derive",
+ "itoa",
+ "n0-error",
+ "postcard",
+ "ryu",
+ "serde",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-metrics-derive"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cab063c2bfd6c3d5a33a913d4fdb5252f140db29ec67c704f20f3da7e8f92dbf"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "iroh-moq"
+version = "0.1.0"
+dependencies = [
+ "iroh",
+ "moq-lite",
+ "n0-error",
+ "n0-future",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "url",
+ "web-transport-iroh",
+]
+
+[[package]]
+name = "iroh-quinn"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "034ed21f34c657a123d39525d948c885aacba59508805e4dd67d71f022e7151b"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp 0.8.0",
+ "pin-project-lite",
+ "rustc-hash",
+ "rustls",
+ "socket2 0.6.2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-stream",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-proto"
+version = "0.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0de99ad8adc878ee0e68509ad256152ce23b8bbe45f5539d04e179630aca40a9"
+dependencies = [
+ "bytes",
+ "derive_more 2.1.1",
+ "enum-assoc",
+ "fastbloom",
+ "getrandom 0.3.4",
+ "identity-hash",
+ "lru-slab",
+ "rand 0.9.2",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-platform-verifier",
+ "slab",
+ "sorted-index-buffer",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-udp"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a91fe9ec3db6615d7ab1b303717f3b98fc40b96955a4ea25b113b1b879f7481f"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "iroh-quinn-udp"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f981dadd5a072a9e0efcd24bdcc388e570073f7e51b33505ceb1ef4668c80c86"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "iroh-relay"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "236c6f131ce774f7cc7548f467890c313b09f7849b8d703360d6602bc8c5184c"
+dependencies = [
+ "blake3",
+ "bytes",
+ "cfg_aliases",
+ "data-encoding",
+ "derive_more 2.1.1",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "lru",
+ "n0-error",
+ "n0-future",
+ "num_enum",
+ "pin-project",
+ "pkarr",
+ "postcard",
+ "rand 0.9.2",
+ "reqwest",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_bytes",
+ "strum",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tokio-websockets",
+ "tracing",
+ "url",
+ "vergen-gitcl",
+ "webpki-roots 1.0.5",
+ "ws_stream_wasm",
+ "z32",
+]
+
+[[package]]
+name = "irpc"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1bbc84aaeab13a6d7502bae4f40f2517b643924842e0230ea0bf807477cc208"
+dependencies = [
+ "futures-util",
+ "irpc-derive",
+ "n0-error",
+ "n0-future",
+ "serde",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "irpc-derive"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58148196d2230183c9679431ac99b57e172000326d664e8456fa2cd27af6505a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
+
+[[package]]
+name = "javascriptcore-rs"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca5671e9ffce8ffba57afc24070e906da7fc4b1ba66f2cabebf61bf2ea257fcc"
+dependencies = [
+ "bitflags 1.3.2",
+ "glib",
+ "javascriptcore-rs-sys",
+]
+
+[[package]]
+name = "javascriptcore-rs-sys"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af1be78d14ffa4b75b66df31840478fef72b51f8c2465d4ca7c194da9f7a5124"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8eaf4bc02d17cbdd7ff4c7438cafcdf7fb9a4613313ad11b4f8fefe7d3fa0130"
+
+[[package]]
+name = "js-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "json-patch"
+version = "3.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "863726d7afb6bc2590eeff7135d923545e5e964f004c2ccf8716c25e70a86f08"
+dependencies = [
+ "jsonptr",
+ "serde",
+ "serde_json",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "jsonptr"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dea2b27dd239b2556ed7a25ba842fe47fd602e7fc7433c2a8d6106d4d9edd70"
+dependencies = [
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "just-webrtc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb1cb0e36a34b7c6a147c374b68be2fb4ab279888e8637487da157da5f4b8a0b"
+dependencies = [
+ "async_cell",
+ "bytes",
+ "flume",
+ "js-sys",
+ "log",
+ "serde",
+ "serde-wasm-bindgen",
+ "thiserror 1.0.69",
+ "trait-variant",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webrtc",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags 2.10.0",
+ "serde",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "kuchikiki"
+version = "0.8.8-speedreader"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02cb977175687f33fa4afa0c95c112b987ea1443e5a51c8f8ff27dc618270cc2"
+dependencies = [
+ "cssparser",
+ "html5ever",
+ "indexmap 2.13.0",
+ "selectors",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libappindicator"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03589b9607c868cc7ae54c0b2a22c8dc03dd41692d48f2d7df73615c6a95dc0a"
+dependencies = [
+ "glib",
+ "gtk",
+ "gtk-sys",
+ "libappindicator-sys",
+ "log",
+]
+
+[[package]]
+name = "libappindicator-sys"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e9ec52138abedcc58dc17a7c6c0c00a2bdb4f3427c7f63fa97fd0d859155caf"
+dependencies = [
+ "gtk-sys",
+ "libloading",
+ "once_cell",
+]
+
+[[package]]
+name = "libc"
+version = "0.2.180"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
+
+[[package]]
+name = "libloading"
+version = "0.7.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b67380fd3b2fbe7527a606e18729d21c6f3951633d0500574c4dc22d2d638b9f"
+dependencies = [
+ "cfg-if",
+ "winapi",
+]
+
+[[package]]
+name = "libm"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
+
+[[package]]
+name = "libredox"
+version = "0.1.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d0b95e02c851351f877147b7deea7b1afb1df71b63aa5f8270716e0c5720616"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "lru"
+version = "0.16.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1dc47f592c06f33f8e3aea9591776ec7c9f9e4124778ff8a3c3b87159f7e593"
+dependencies = [
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "mac"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c41e0c4fef86961ac6d6f8a82609f55f31b05e4fce149ac5710e439df7619ba4"
+
+[[package]]
+name = "mac-addr"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3d25b0e0b648a86960ac23b7ad4abb9717601dec6f66c165f5b037f3f03065f"
+
+[[package]]
+name = "mainline"
+version = "6.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ff27d378ca495eaf3be8616d5d7319c1c18e93fd60e13698fcdc7e19448f1a4"
+dependencies = [
+ "crc",
+ "document-features",
+ "dyn-clone",
+ "ed25519-dalek 3.0.0-pre.1",
+ "flume",
+ "futures-lite",
+ "getrandom 0.3.4",
+ "lru",
+ "serde",
+ "serde_bencode",
+ "serde_bytes",
+ "sha1_smol",
+ "thiserror 2.0.18",
+ "tracing",
+]
+
+[[package]]
+name = "markup5ever"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a7213d12e1864c0f002f52c2923d4556935a43dec5e71355c2760e0f6e7a18"
+dependencies = [
+ "log",
+ "phf 0.11.3",
+ "phf_codegen 0.11.3",
+ "string_cache",
+ "string_cache_codegen",
+ "tendril",
+]
+
+[[package]]
+name = "match_token"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88a9689d8d44bf9964484516275f5cd4c9b59457a6940c1d5d0ecbb94510a36b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "matches"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2532096657941c2fea9c289d370a250971c689d4f143798ff67113ec042024a5"
+
+[[package]]
+name = "matchit"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e7465ac9959cc2b1404e8e2367b43684a6d13790fe23056cc8c6c5a6b7bcb94"
+
+[[package]]
+name = "md-5"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
+dependencies = [
+ "cfg-if",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "memchr"
+version = "2.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
+
+[[package]]
+name = "memoffset"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5de893c32cde5f383baa4c04c5d6dbdd735cfd4a794b0debdb2bb1b421da5ff4"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "memoffset"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "mime_guess"
+version = "2.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f7c44f8e672c00fe5308fa235f821cb4198414e1c77935c1ab6948d3fd78550e"
+dependencies = [
+ "mime",
+ "unicase",
+]
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi 0.11.1+wasi-snapshot-preview1",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "moka"
+version = "0.12.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac832c50ced444ef6be0767a008b02c106a909ba79d1d830501e94b96f6b7e"
+dependencies = [
+ "crossbeam-channel",
+ "crossbeam-epoch",
+ "crossbeam-utils",
+ "equivalent",
+ "parking_lot",
+ "portable-atomic",
+ "smallvec",
+ "tagptr",
+ "uuid",
+]
+
+[[package]]
+name = "moq-lite"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c2258f990ddd8465f8dcf343bd00714927cd8b8b81784b153020ca24e47898f"
+dependencies = [
+ "async-channel",
+ "bytes",
+ "futures",
+ "hex",
+ "num_enum",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-async",
+ "web-transport-trait",
+]
+
+[[package]]
+name = "muda"
+version = "0.17.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "01c1738382f66ed56b3b9c8119e794a2e23148ac8ea214eda86622d4cb9d415a"
+dependencies = [
+ "crossbeam-channel",
+ "dpi",
+ "gtk",
+ "keyboard-types",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "once_cell",
+ "png",
+ "serde",
+ "thiserror 2.0.18",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "n0-error"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af4782b4baf92d686d161c15460c83d16ebcfd215918763903e9619842665cae"
+dependencies = [
+ "anyhow",
+ "n0-error-macros",
+ "spez",
+]
+
+[[package]]
+name = "n0-error-macros"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03755949235714b2b307e5ae89dd8c1c2531fb127d9b8b7b4adf9c876cd3ed18"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "n0-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2ab99dfb861450e68853d34ae665243a88b8c493d01ba957321a1e9b2312bbe"
+dependencies = [
+ "cfg_aliases",
+ "derive_more 2.1.1",
+ "futures-buffered",
+ "futures-lite",
+ "futures-util",
+ "js-sys",
+ "pin-project",
+ "send_wrapper",
+ "tokio",
+ "tokio-util",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-time",
+]
+
+[[package]]
+name = "n0-watcher"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba717c22ceec021ace0ff7674bf8fd60c9394605740a8201678fc1cb3a7398f6"
+dependencies = [
+ "derive_more 2.1.1",
+ "n0-error",
+ "n0-future",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.10.0",
+ "jni-sys",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-context"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys",
+]
+
+[[package]]
+name = "netdev"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc9815643a243856e7bd84524e1ff739e901e846cfb06ad9627cd2b6d59bd737"
+dependencies = [
+ "block2",
+ "dispatch2",
+ "dlopen2 0.5.0",
+ "ipnet",
+ "libc",
+ "mac-addr",
+ "netlink-packet-core",
+ "netlink-packet-route 0.25.1",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "once_cell",
+ "plist",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "netlink-packet-core"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3463cbb78394cb0141e2c926b93fc2197e473394b761986eca3b9da2c63ae0f4"
+dependencies = [
+ "paste",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ec2f5b6839be2a19d7fa5aab5bc444380f6311c2b693551cb80f45caaa7b5ef"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ce3636fa715e988114552619582b530481fd5ef176a1e5c1bf024077c2c9445"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-proto"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b65d130ee111430e47eed7896ea43ca693c387f097dd97376bffafbf25812128"
+dependencies = [
+ "bytes",
+ "futures",
+ "log",
+ "netlink-packet-core",
+ "netlink-sys",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "netlink-sys"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd6c30ed10fa69cc491d491b85cc971f6bdeb8e7367b7cde2ee6cc878d583fae"
+dependencies = [
+ "bytes",
+ "futures-util",
+ "libc",
+ "log",
+ "tokio",
+]
+
+[[package]]
+name = "netwatch"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "970729c08dbe7987d698f996c6b4945cbfdcdd6ee627df6de51d5469cec13b99"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "cfg_aliases",
+ "derive_more 2.1.1",
+ "iroh-quinn-udp 0.7.0",
+ "js-sys",
+ "libc",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netlink-packet-core",
+ "netlink-packet-route 0.28.0",
+ "netlink-proto",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "pin-project-lite",
+ "serde",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "web-sys",
+ "windows 0.62.2",
+ "windows-result 0.4.1",
+ "wmi",
+]
+
+[[package]]
+name = "netwatch"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "454b8c0759b2097581f25ed5180b4a1d14c324fde6d0734932a288e044d06232"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "cfg_aliases",
+ "derive_more 2.1.1",
+ "iroh-quinn-udp 0.8.0",
+ "js-sys",
+ "libc",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netlink-packet-core",
+ "netlink-packet-route 0.28.0",
+ "netlink-proto",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "pin-project-lite",
+ "serde",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "web-sys",
+ "windows 0.62.2",
+ "windows-result 0.4.1",
+ "wmi",
+]
+
+[[package]]
+name = "new_debug_unreachable"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "650eef8c711430f1a879fdd01d4745a7deea475becfb90269c06775983bbf086"
+
+[[package]]
+name = "nix"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "598beaf3cc6fdd9a5dfb1630c2800c7acd31df7aaf0f565796fba2b53ca1af1b"
+dependencies = [
+ "bitflags 1.3.2",
+ "cfg-if",
+ "libc",
+ "memoffset 0.7.1",
+ "pin-utils",
+]
+
+[[package]]
+name = "nodrop"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72ef4a56884ca558e5ddb05a1d1e7e1bfd9a68d9ed024c21704cc98872dae1bb"
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "ntimestamp"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c50f94c405726d3e0095e89e72f75ce7f6587b94a8bd8dc8054b73f65c0fd68c"
+dependencies = [
+ "base32",
+ "document-features",
+ "getrandom 0.2.17",
+ "httpdate",
+ "js-sys",
+ "once_cell",
+ "serde",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1207a7e20ad57b847bbddc6776b968420d38292bbfe2089accff5e19e82454c"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff32365de1b6743cb203b710788263c44a03de03802daf96092f2da4fe6ba4d7"
+dependencies = [
+ "proc-macro-crate 3.4.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "num_threads"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c7398b9c8b70908f6371f47ed36737907c87c52af34c268fed0bf0ceb92ead9"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c2599ce0ec54857b29ce62166b0ed9b4f6f1a70ccc9a71165b6154caca8c05"
+dependencies = [
+ "objc2-encode",
+ "objc2-exception-helper",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-cloud-kit",
+ "objc2-core-data",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image",
+ "objc2-core-text",
+ "objc2-core-video",
+ "objc2-foundation",
+ "objc2-quartz-core",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "dispatch2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.10.0",
+ "dispatch2",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-core-video"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d425caf1df73233f29fd8a5c3e5edbc30d2d4307870f802d18f00d83dc5141a6"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-io-surface",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-exception-helper"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7a1c5fbb72d7735b076bb47b578523aedc40f3c439bea6dfd595c089d79d98a"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-javascript-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a1e6550c4caed348956ce3370c9ffeca70bb1dbed4fa96112e7c6170e074586"
+dependencies = [
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-security"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe137109bd1e8b5a99390f77a7d8b2961dafc1a1c5db8f2e60329ad6d895a"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-system-configuration"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7216bd11cbda54ccabcab84d523dc93b858ec75ecfb3a7d89513fa22464da396"
+dependencies = [
+ "bitflags 2.10.0",
+ "dispatch2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-security",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d87d638e33c06f577498cbcc50491496a3ed4246998a7fbba7ccb98b1e7eab22"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-foundation",
+]
+
+[[package]]
+name = "objc2-web-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2e5aaab980c433cf470df9d7af96a7b46a9d892d521a2cbbb2f8a4c16751e7f"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-javascript-core",
+ "objc2-security",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8d8034d9489cdaf79228eb9f6a3b8d7bb32ba00d6645ebd48eef4077ceb5bd9"
+dependencies = [
+ "asn1-rs 0.6.2",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+dependencies = [
+ "critical-section",
+ "portable-atomic",
+]
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
+name = "openssl-probe"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
+
+[[package]]
+name = "option-ext"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04744f49eae99ab78e0d5c0b603ab218f515ea8cfe5a456d7629ad883a3b6e7d"
+
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "p384"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe42f1670a52a47d448f14b6a5c61dd78fce51856e68edaa38f7ae3a46b8d6b6"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2 0.10.9",
+]
+
+[[package]]
+name = "pango"
+version = "0.18.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ca27ec1eb0457ab26f3036ea52229edbdb74dee1edd29063f5b9b010e7ebee4"
+dependencies = [
+ "gio",
+ "glib",
+ "libc",
+ "once_cell",
+ "pango-sys",
+]
+
+[[package]]
+name = "pango-sys"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "436737e391a843e5933d6d9aa102cb126d501e815b83601365a948a518555dc5"
+dependencies = [
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "papaya"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f92dd0b07c53a0a0c764db2ace8c541dc47320dad97c2200c2a637ab9dd2328f"
+dependencies = [
+ "equivalent",
+ "seize",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64 0.22.1",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6305423e0e7738146434843d1694d621cce767262b2a86910beab705e4493d9"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pharos"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9567389417feee6ce15dd6527a8a1ecac205ef62c2932bcf3d9f6fc5b78b414"
+dependencies = [
+ "futures",
+ "rustc_version",
+]
+
+[[package]]
+name = "phf"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3dfb61232e34fcb633f43d12c58f83c1df82962dcdfa565a4e866ffc17dafe12"
+dependencies = [
+ "phf_shared 0.8.0",
+]
+
+[[package]]
+name = "phf"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fabbf1ead8a5bcbc20f5f8b939ee3f5b0f6f281b6ad3468b84656b658b455259"
+dependencies = [
+ "phf_macros 0.10.0",
+ "phf_shared 0.10.0",
+ "proc-macro-hack",
+]
+
+[[package]]
+name = "phf"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078"
+dependencies = [
+ "phf_macros 0.11.3",
+ "phf_shared 0.11.3",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbffee61585b0411840d3ece935cce9cb6321f01c45477d30066498cd5e1a815"
+dependencies = [
+ "phf_generator 0.8.0",
+ "phf_shared 0.8.0",
+]
+
+[[package]]
+name = "phf_codegen"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aef8048c789fa5e851558d709946d6d79a8ff88c0440c587967f8e94bfb1216a"
+dependencies = [
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17367f0cc86f2d25802b2c26ee58a7b23faeccf78a396094c13dced0d0182526"
+dependencies = [
+ "phf_shared 0.8.0",
+ "rand 0.7.3",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d5285893bb5eb82e6aaf5d59ee909a06a16737a8970984dd7746ba9283498d6"
+dependencies = [
+ "phf_shared 0.10.0",
+ "rand 0.8.5",
+]
+
+[[package]]
+name = "phf_generator"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
+dependencies = [
+ "phf_shared 0.11.3",
+ "rand 0.8.5",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58fdf3184dd560f160dd73922bea2d5cd6e8f064bf4b13110abd81b03697b4e0"
+dependencies = [
+ "phf_generator 0.10.0",
+ "phf_shared 0.10.0",
+ "proc-macro-hack",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "phf_macros"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f84ac04429c13a7ff43785d75ad27569f2951ce0ffd30a3321230db2fc727216"
+dependencies = [
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c00cf8b9eafe68dde5e9eaa2cef8ee84a9336a47d566ec55ca16589633b65af7"
+dependencies = [
+ "siphasher 0.3.11",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6796ad771acdc0123d2a88dc428b5e38ef24456743ddb1744ed628f9815c096"
+dependencies = [
+ "siphasher 0.3.11",
+]
+
+[[package]]
+name = "phf_shared"
+version = "0.11.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5"
+dependencies = [
+ "siphasher 1.0.2",
+]
+
+[[package]]
+name = "pin-project"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkarr"
+version = "5.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d346b545765a0ef58b6a7e160e17ddaa7427f439b7b9a287df6c88c9e04bf2"
+dependencies = [
+ "async-compat",
+ "base32",
+ "bytes",
+ "cfg_aliases",
+ "document-features",
+ "dyn-clone",
+ "ed25519-dalek 3.0.0-pre.1",
+ "futures-buffered",
+ "futures-lite",
+ "getrandom 0.3.4",
+ "log",
+ "lru",
+ "mainline",
+ "ntimestamp",
+ "reqwest",
+ "self_cell",
+ "serde",
+ "sha1_smol",
+ "simple-dns",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
+dependencies = [
+ "der 0.7.10",
+ "spki 0.7.3",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.11.0-rc.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b226d2cc389763951db8869584fd800cbbe2962bf454e2edeb5172b31ee99774"
+dependencies = [
+ "der 0.8.0-rc.10",
+ "spki 0.8.0-rc.4",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c"
+
+[[package]]
+name = "plist"
+version = "1.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "740ebea15c5d1428f910cd1a5f52cebf8d25006245ed8ade92702f4943d91e07"
+dependencies = [
+ "base64 0.22.1",
+ "indexmap 2.13.0",
+ "quick-xml",
+ "serde",
+ "time",
+]
+
+[[package]]
+name = "png"
+version = "0.17.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82151a2fc869e011c153adc57cf2789ccb8d9906ce52c0b39a6b5697749d7526"
+dependencies = [
+ "bitflags 1.3.2",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "poly1305"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8159bd90725d2df49889a078b54f4f79e87f1f8a8444194cdca81d38f5393abf"
+dependencies = [
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
+
+[[package]]
+name = "portmapper"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f29fb522a166045a35b507dea30e3eb69bca1c5a53669d252744d5a0d8474ffa"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "derive_more 2.1.1",
+ "futures-lite",
+ "futures-util",
+ "hyper-util",
+ "igd-next",
+ "iroh-metrics",
+ "libc",
+ "n0-error",
+ "netwatch 0.13.0",
+ "num_enum",
+ "rand 0.9.2",
+ "serde",
+ "smallvec",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "postcard"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6764c3b5dd454e283a30e6dfe78e9b31096d9e32036b5d1eaac7a6119ccb9a24"
+dependencies = [
+ "cobs",
+ "embedded-io 0.4.0",
+ "embedded-io 0.6.1",
+ "heapless",
+ "postcard-derive",
+ "serde",
+]
+
+[[package]]
+name = "postcard-derive"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0232bd009a197ceec9cc881ba46f727fcd8060a2d8d6a9dde7a69030a6fe2bb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "precomputed-hash"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "925383efa346730478fb4838dbe9137d2a47675ad789c546d150a6e1dd4ab31c"
+
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "1.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f4c021e1093a56626774e81216a4ce732a735e5bad4868a03f3ed65ca0c3919"
+dependencies = [
+ "once_cell",
+ "toml_edit 0.19.15",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b00f26d3400549137f92511a46ac1cd8ce37cb5598a96d382381458b992a5d24"
+dependencies = [
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219cb19e96be00ab2e37d6e299658a0cfa83e52429179969b0f0121b4ac46983"
+dependencies = [
+ "toml_edit 0.23.10+spec-1.0.0",
+]
+
+[[package]]
+name = "proc-macro-error"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da25490ff9892aab3fcf7c36f08cfb902dd3e71ca0f9f9517bea02a73a5ce38c"
+dependencies = [
+ "proc-macro-error-attr",
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-error-attr"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1be40180e52ecc98ad80b184934baf3d0d29f979574e439af5a55274b35f869"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "version_check",
+]
+
+[[package]]
+name = "proc-macro-hack"
+version = "0.5.20+deprecated"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc375e1527247fe1a97d8b7156678dfe7c1af2fc075c9a4db3690ecd2a148068"
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.38.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2 0.6.2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand 0.9.2",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "rand"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a6b1679d49b24bbfe0c803429aa1874472f50d9b363131f0e89fc356b544d03"
+dependencies = [
+ "getrandom 0.1.16",
+ "libc",
+ "rand_chacha 0.2.2",
+ "rand_core 0.5.1",
+ "rand_hc",
+ "rand_pcg",
+]
+
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4c8ed856279c9737206bf725bf36935d8666ead7aa69b52be55af369d193402"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.5",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90bde5296fc891b0cef12a6d03ddccc162ce7b2aff54160af9338f8d40df6d19"
+dependencies = [
+ "getrandom 0.1.16",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rand_hc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ca3129af7b92a17112d59ad498c6f81eaf463253766b90396d39ea7a39d6613c"
+dependencies = [
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "rand_pcg"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16abd0c1b639e9eb4d7c50c0b8100b0d0f849be2349829c740fe8e6eb4816429"
+dependencies = [
+ "rand_core 0.5.1",
+]
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "rcgen"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75e669e5202259b5314d1ea5397316ad400819437857b90861765f24c4cf80a2"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser",
+ "yasna",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "redox_users"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4e608c6638b9c18977b00b475ac1f28d14e84b27d8d42f70e0bf1e3dec127ac"
+dependencies = [
+ "getrandom 0.2.17",
+ "libredox",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f354300ae66f76f1c85c5f84693f0ce81d747e2c3f21a45fef496d89c960bf7d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tower",
+ "tower-http 0.6.8",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "webpki-roots 1.0.5",
+]
+
+[[package]]
+name = "resolv-conf"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e061d1b48cb8d38042de4ae0a7a6401009d6143dc80d2e2d6f31f0bdd6470c7"
+
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac",
+ "subtle",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rtcp"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc9f775ff89c5fe7f0cc0abafb7c57688ae25ce688f1a52dd88e277616c76ab2"
+dependencies = [
+ "bytes",
+ "thiserror 1.0.69",
+ "webrtc-util",
+]
+
+[[package]]
+name = "rtp"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6870f09b5db96f8b9e7290324673259fd15519ebb7d55acf8e7eb044a9ead6af"
+dependencies = [
+ "bytes",
+ "portable-atomic",
+ "rand 0.8.5",
+ "serde",
+ "thiserror 1.0.69",
+ "webrtc-util",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags 2.10.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34"
+dependencies = [
+ "bitflags 2.10.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.11.0",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c665f33d38cea657d9614f766881e4d510e0eda4239891eea56b4cadcf01801b"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "612460d5f7bea540c490b2b6395d8e34a953e52b491accd6c86c8164c5932a63"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-platform-verifier"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d99feebc72bae7ab76ba994bb5e121b8d83d910ca40b36e0921f53becc41784"
+dependencies = [
+ "core-foundation",
+ "core-foundation-sys",
+ "jni",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-platform-verifier-android",
+ "rustls-webpki",
+ "security-framework",
+ "security-framework-sys",
+ "webpki-root-certs",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls-platform-verifier-android"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a50f4cf475b65d88e057964e0e9bb1f0aa9bbb2036dc65c64596b42932536984"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schannel"
+version = "0.1.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "schemars"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3fbf2ae1b8bc8e02df939598064d22402220cd5bbcca1c76f7d6a310974d5615"
+dependencies = [
+ "dyn-clone",
+ "indexmap 1.9.3",
+ "schemars_derive",
+ "serde",
+ "serde_json",
+ "url",
+ "uuid",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54e910108742c57a770f492731f99be216a52fadd361b06c8fb59d74ccc267d2"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars_derive"
+version = "0.8.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32e265784ad618884abaea0600a9adf15393368d840e0222d101a072f3f7534d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde_derive_internals",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sdp"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13254db766b17451aced321e7397ebf0a446ef0c8d2942b6e67a95815421093f"
+dependencies = [
+ "rand 0.8.5",
+ "substring",
+ "thiserror 1.0.69",
+ "url",
+]
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der 0.7.10",
+ "generic-array",
+ "pkcs8 0.10.2",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "security-framework"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "seize"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b55fb86dfd3a2f5f76ea78310a88f96c4ea21a3031f8d212443d56123fd0521"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "selectors"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c37578180969d00692904465fb7f6b3d50b9a2b952b87c23d0e2e5cb5013416"
+dependencies = [
+ "bitflags 1.3.2",
+ "cssparser",
+ "derive_more 0.99.20",
+ "fxhash",
+ "log",
+ "phf 0.8.0",
+ "phf_codegen 0.8.0",
+ "precomputed-hash",
+ "servo_arc",
+ "smallvec",
+]
+
+[[package]]
+name = "self_cell"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b12e76d157a900eb52e81bc6e9f3069344290341720e9178cde2407113ac8d89"
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-big-array"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11fc7cc2c76d73e0f27ee52abbd64eec84d46f370c88371120433196934e4b7f"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde-untagged"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9faf48a4a2d2693be24c6289dbe26552776eb7737074e6722891fadbe6c5058"
+dependencies = [
+ "erased-serde",
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "serde-wasm-bindgen"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8302e169f0eddcc139c70f139d19d6467353af16f9fce27e8c30158036a1e16b"
+dependencies = [
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "serde_bencode"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a70dfc7b7438b99896e7f8992363ab8e2c4ba26aa5ec675d32d1c3c2c33d413e"
+dependencies = [
+ "serde",
+ "serde_bytes",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "serde_derive_internals"
+version = "0.29.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18d26a20a969b9e3fdf2fc2d9f21eda6c40e2de84c9408bb5d3b05d499aae711"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_path_to_error"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10a9ff822e371bb5403e391ecd83e182e0e77ba7f6fe0160b795797109d1b457"
+dependencies = [
+ "itoa",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fa237f2807440d238e0364a218270b98f767a00d3dada77b1c53ae88940e2e7"
+dependencies = [
+ "base64 0.22.1",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.13.0",
+ "schemars 0.9.0",
+ "schemars 1.2.0",
+ "serde_core",
+ "serde_json",
+ "serde_with_macros",
+ "time",
+]
+
+[[package]]
+name = "serde_with_macros"
+version = "3.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52a8e3ca0ca629121f70ab50f95249e5a6f925cc0f6ffe8256c45b728875706c"
+dependencies = [
+ "darling 0.21.3",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "serialize-to-javascript"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04f3666a07a197cdb77cdf306c32be9b7f598d7060d50cfd4d5aa04bfd92f6c5"
+dependencies = [
+ "serde",
+ "serde_json",
+ "serialize-to-javascript-impl",
+]
+
+[[package]]
+name = "serialize-to-javascript-impl"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "772ee033c0916d670af7860b6e1ef7d658a4629a6d0b4c8c3e67f09b3765b75d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "servo_arc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d52aa42f8fdf0fed91e5ce7f23d8138441002fa31dca008acf47e6fd4721f741"
+dependencies = [
+ "nodrop",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha1_smol"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbfa15b3dddfee50a0fff136974b3e1bde555604ba463834a7eb7deb6417705d"
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.10.7",
+]
+
+[[package]]
+name = "sha2"
+version = "0.11.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1e3878ab0f98e35b2df35fe53201d088299b41a6bb63e3e34dada2ac4abd924"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest 0.11.0-rc.3",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "digest 0.10.7",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "signature"
+version = "3.0.0-rc.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ad0ce3b3f8efd7406f22e2ca5d02be21cdf3b3d1d53ab141f784de8965c7c7e"
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e320a6c5ad31d271ad523dcf3ad13e2767ad8b1cb8f047f75a8aeaf8da139da2"
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "simple-dns"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dee851d0e5e7af3721faea1843e8015e820a234f81fda3dea9247e15bac9a86a"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "siphasher"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38b58827f4464d87d377d175e90bf58eb00fd8716ff0a62f80356b5e61555d0d"
+
+[[package]]
+name = "siphasher"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2aa850e253778c88a04c3d7323b043aeda9d3e30d5971937c1855769763678e"
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "smol_str"
+version = "0.1.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fad6c857cbab2627dcf01ec85a623ca4e7dcb5691cbaa3d7fb7653671f0d09c9"
+
+[[package]]
+name = "smol_str"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.5.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
+dependencies = [
+ "libc",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0"
+dependencies = [
+ "libc",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "socks"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0c3dbbd9ae980613c6dd8e28a9407b50509d3803b57624d5dfe8315218cd58b"
+dependencies = [
+ "byteorder",
+ "libc",
+ "winapi",
+]
+
+[[package]]
+name = "softbuffer"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aac18da81ebbf05109ab275b157c22a653bb3c12cf884450179942f81bcbf6c3"
+dependencies = [
+ "bytemuck",
+ "js-sys",
+ "ndk",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "objc2-quartz-core",
+ "raw-window-handle",
+ "redox_syscall",
+ "tracing",
+ "wasm-bindgen",
+ "web-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "sorted-index-buffer"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea06cc588e43c632923a55450401b8f25e628131571d4e1baea1bdfdb2b5ed06"
+
+[[package]]
+name = "soup3"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "471f924a40f31251afc77450e781cb26d55c0b650842efafc9c6cbd2f7cc4f9f"
+dependencies = [
+ "futures-channel",
+ "gio",
+ "glib",
+ "libc",
+ "soup3-sys",
+]
+
+[[package]]
+name = "soup3-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7ebe8950a680a12f24f15ebe1bf70db7af98ad242d9db43596ad3108aab86c27"
+dependencies = [
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "libc",
+ "system-deps",
+]
+
+[[package]]
+name = "spez"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c87e960f4dca2788eeb86bbdde8dd246be8948790b7618d656e68f9b720a86e8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spin"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
+
+[[package]]
+name = "spki"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
+dependencies = [
+ "base64ct",
+ "der 0.7.10",
+]
+
+[[package]]
+name = "spki"
+version = "0.8.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8baeff88f34ed0691978ec34440140e1572b68c7dd4a495fd14a3dc1944daa80"
+dependencies = [
+ "base64ct",
+ "der 0.8.0-rc.10",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "string_cache"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf776ba3fa74f83bf4b63c3dcbbf82173db2632ed8452cb2d891d33f459de70f"
+dependencies = [
+ "new_debug_unreachable",
+ "parking_lot",
+ "phf_shared 0.11.3",
+ "precomputed-hash",
+ "serde",
+]
+
+[[package]]
+name = "string_cache_codegen"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c711928715f1fe0fe509c53b43e993a9a557babc2d0a3567d0a3006f1ac931a0"
+dependencies = [
+ "phf_generator 0.11.3",
+ "phf_shared 0.11.3",
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "strum"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf"
+dependencies = [
+ "strum_macros",
+]
+
+[[package]]
+name = "strum_macros"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "stun"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28fad383a1cc63ae141e84e48eaef44a1063e9d9e55bcb8f51a99b886486e01b"
+dependencies = [
+ "base64 0.21.7",
+ "crc",
+ "lazy_static",
+ "md-5",
+ "rand 0.8.5",
+ "ring",
+ "subtle",
+ "thiserror 1.0.69",
+ "tokio",
+ "url",
+ "webrtc-util",
+]
+
+[[package]]
+name = "substring"
+version = "1.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42ee6433ecef213b2e72f587ef64a2f5943e7cd16fbd82dbe8bc07486c534c86"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "swarm-discovery"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a5ab62937edac8b23fa40e55a358ea1924245b17fc1eb20d14929c8f11be98d"
+dependencies = [
+ "acto",
+ "hickory-proto",
+ "rand 0.9.2",
+ "socket2 0.6.2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "swift-rs"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4057c98e2e852d51fdcfca832aac7b571f6b351ad159f9eda5db1655f8d0c4d7"
+dependencies = [
+ "base64 0.21.7",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.12.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f36bdaa60a83aca3921b5259d5400cbf5e90fc51931376a9bd4a0eb79aa7210f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "unicode-xid",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "system-deps"
+version = "6.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
+dependencies = [
+ "cfg-expr",
+ "heck 0.5.0",
+ "pkg-config",
+ "toml 0.8.2",
+ "version-compare",
+]
+
+[[package]]
+name = "tagptr"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417"
+
+[[package]]
+name = "tao"
+version = "0.34.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3a753bdc39c07b192151523a3f77cd0394aa75413802c883a0f6f6a0e5ee2e7"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2",
+ "core-foundation",
+ "core-graphics",
+ "crossbeam-channel",
+ "dispatch",
+ "dlopen2 0.8.2",
+ "dpi",
+ "gdkwayland-sys",
+ "gdkx11-sys",
+ "gtk",
+ "jni",
+ "lazy_static",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-context",
+ "ndk-sys",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "once_cell",
+ "parking_lot",
+ "raw-window-handle",
+ "scopeguard",
+ "tao-macros",
+ "unicode-segmentation",
+ "url",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "tao-macros"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f4e16beb8b2ac17db28eab8bca40e62dbfbb34c0fcdc6d9826b11b7b5d047dfd"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "tauri"
+version = "2.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a3868da5508446a7cd08956d523ac3edf0a8bc20bf7e4038f9a95c2800d2033"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "cookie",
+ "dirs",
+ "dunce",
+ "embed_plist",
+ "getrandom 0.3.4",
+ "glob",
+ "gtk",
+ "heck 0.5.0",
+ "http",
+ "jni",
+ "libc",
+ "log",
+ "mime",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "percent-encoding",
+ "plist",
+ "raw-window-handle",
+ "reqwest",
+ "serde",
+ "serde_json",
+ "serde_repr",
+ "serialize-to-javascript",
+ "swift-rs",
+ "tauri-build",
+ "tauri-macros",
+ "tauri-runtime",
+ "tauri-runtime-wry",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "tokio",
+ "tray-icon",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "window-vibrancy",
+ "windows 0.61.3",
+]
+
+[[package]]
+name = "tauri-build"
+version = "2.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17fcb8819fd16463512a12f531d44826ce566f486d7ccd211c9c8cebdaec4e08"
+dependencies = [
+ "anyhow",
+ "cargo_toml",
+ "dirs",
+ "glob",
+ "heck 0.5.0",
+ "json-patch",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "tauri-winres",
+ "toml 0.9.11+spec-1.1.0",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-codegen"
+version = "2.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa9844cefcf99554a16e0a278156ae73b0d8680bbc0e2ad1e4287aadd8489cf"
+dependencies = [
+ "base64 0.22.1",
+ "brotli",
+ "ico",
+ "json-patch",
+ "plist",
+ "png",
+ "proc-macro2",
+ "quote",
+ "semver",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "syn 2.0.114",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "time",
+ "url",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-macros"
+version = "2.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3764a12f886d8245e66b7ee9b43ccc47883399be2019a61d80cf0f4117446fde"
+dependencies = [
+ "heck 0.5.0",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "tauri-codegen",
+ "tauri-utils",
+]
+
+[[package]]
+name = "tauri-runtime"
+version = "2.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87f766fe9f3d1efc4b59b17e7a891ad5ed195fa8d23582abb02e6c9a01137892"
+dependencies = [
+ "cookie",
+ "dpi",
+ "gtk",
+ "http",
+ "jni",
+ "objc2",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "raw-window-handle",
+ "serde",
+ "serde_json",
+ "tauri-utils",
+ "thiserror 2.0.18",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows 0.61.3",
+]
+
+[[package]]
+name = "tauri-runtime-wry"
+version = "2.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "187a3f26f681bdf028f796ccf57cf478c1ee422c50128e5a0a6ebeb3f5910065"
+dependencies = [
+ "gtk",
+ "http",
+ "jni",
+ "log",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-foundation",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "softbuffer",
+ "tao",
+ "tauri-runtime",
+ "tauri-utils",
+ "url",
+ "webkit2gtk",
+ "webview2-com",
+ "windows 0.61.3",
+ "wry",
+]
+
+[[package]]
+name = "tauri-utils"
+version = "2.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a423c51176eb3616ee9b516a9fa67fed5f0e78baaba680e44eb5dd2cc37490"
+dependencies = [
+ "anyhow",
+ "brotli",
+ "cargo_metadata",
+ "ctor",
+ "dunce",
+ "glob",
+ "html5ever",
+ "http",
+ "infer",
+ "json-patch",
+ "kuchikiki",
+ "log",
+ "memchr",
+ "phf 0.11.3",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "schemars 0.8.22",
+ "semver",
+ "serde",
+ "serde-untagged",
+ "serde_json",
+ "serde_with",
+ "swift-rs",
+ "thiserror 2.0.18",
+ "toml 0.9.11+spec-1.1.0",
+ "url",
+ "urlpattern",
+ "uuid",
+ "walkdir",
+]
+
+[[package]]
+name = "tauri-winres"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1087b111fe2b005e42dbdc1990fc18593234238d47453b0c99b7de1c9ab2c1e0"
+dependencies = [
+ "dunce",
+ "embed-resource",
+ "toml 0.9.11+spec-1.1.0",
+]
+
+[[package]]
+name = "tempfile"
+version = "3.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "655da9c7eb6305c55742045d5a8d2037996d61d8de95806335c7c86ce0f82e9c"
+dependencies = [
+ "fastrand",
+ "getrandom 0.3.4",
+ "once_cell",
+ "rustix 1.1.3",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tendril"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d24a120c5fc464a3458240ee02c299ebcb9d67b5249c8848b09d639dca8d7bb0"
+dependencies = [
+ "futf",
+ "mac",
+ "utf-8",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9da98b7d9b7dad93488a84b8248efc35352b0b2657397d4167e7ad67e5d535e5"
+dependencies = [
+ "deranged",
+ "itoa",
+ "js-sys",
+ "libc",
+ "num-conv",
+ "num_threads",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca"
+
+[[package]]
+name = "time-macros"
+version = "0.2.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78cc610bac2dcee56805c99642447d4c5dbde4d01f752ffea0199aee1f601dc4"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.49.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72a2903cd7736441aac9df9d7688bd0ce48edccaadf181c3b90be801e81d3d86"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2 0.6.2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "tokio-tungstenite"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edc5f74e248dc973e0dbb7b74c7e0d6fcc301c694ff50049504004ef4d0cdcd9"
+dependencies = [
+ "futures-util",
+ "log",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tungstenite 0.24.0",
+ "webpki-roots 0.26.11",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "futures-util",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-websockets"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1b6348ebfaaecd771cecb69e832961d277f59845d4220a584701f72728152b7"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "getrandom 0.3.4",
+ "http",
+ "httparse",
+ "rand 0.9.2",
+ "ring",
+ "rustls-pki-types",
+ "simdutf8",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "185d8ab0dfbb35cf1399a6344d8484209c088f75f8f68230da55d48d95d43e3d"
+dependencies = [
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "toml_edit 0.20.2",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.11+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46"
+dependencies = [
+ "indexmap 2.13.0",
+ "serde_core",
+ "serde_spanned 1.0.4",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "toml_writer",
+ "winnow 0.7.14",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7cda73e2f1397b1262d6dfdcef8aafae14d1de7748d66822d3bfeeb6d03e5e4b"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.19.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1b5bb770da30e5cbfde35a2d7b9b8a2c4b8ef89548a7a6aeab5c9a576e3e7421"
+dependencies = [
+ "indexmap 2.13.0",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "396e4d48bbb2b7554c944bde63101b5ae446cff6ec4a24227428f15eb72ef338"
+dependencies = [
+ "indexmap 2.13.0",
+ "serde",
+ "serde_spanned 0.6.9",
+ "toml_datetime 0.6.3",
+ "winnow 0.5.40",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.23.10+spec-1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "84c8b9f757e028cee9fa244aea147aab2a9ec09d5325a9b01e0a49730c2b5269"
+dependencies = [
+ "indexmap 2.13.0",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "winnow 0.7.14",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
+dependencies = [
+ "winnow 0.7.14",
+]
+
+[[package]]
+name = "toml_writer"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e9cd434a998747dd2c4276bc96ee2e0c7a2eadf3cae88e52be55a05fa9053f5"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "http-range-header",
+ "httpdate",
+ "mime",
+ "mime_guess",
+ "percent-encoding",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "trait-variant"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70977707304198400eb4835a78f6a9f928bf41bba420deb8fdb175cd965d77a7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tray-icon"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e85aa143ceb072062fc4d6356c1b520a51d636e7bc8e77ec94be3608e5e80c"
+dependencies = [
+ "crossbeam-channel",
+ "dirs",
+ "libappindicator",
+ "muda",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation",
+ "once_cell",
+ "png",
+ "serde",
+ "thiserror 2.0.18",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "tungstenite"
+version = "0.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "18e5b8366ee7a95b16d32197d0b2604b43a0be89dc5fac9f8e96ccafbaedda8a"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand 0.8.5",
+ "rustls",
+ "rustls-pki-types",
+ "sha1",
+ "thiserror 1.0.69",
+ "utf-8",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8628dcc84e5a09eb3d8423d6cb682965dea9133204e8fb3efee74c2a0c259442"
+dependencies = [
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand 0.9.2",
+ "sha1",
+ "thiserror 2.0.18",
+ "utf-8",
+]
+
+[[package]]
+name = "turn"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b000cebd930420ac1ed842c8128e3b3412512dfd5b82657eab035a3f5126acc"
+dependencies = [
+ "async-trait",
+ "base64 0.21.7",
+ "futures",
+ "log",
+ "md-5",
+ "portable-atomic",
+ "rand 0.8.5",
+ "ring",
+ "stun",
+ "thiserror 1.0.69",
+ "tokio",
+ "tokio-util",
+ "webrtc-util",
+]
+
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unic-char-property"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8c57a407d9b6fa02b4795eb81c5b6652060a15a7903ea981f3d723e6c0be221"
+dependencies = [
+ "unic-char-range",
+]
+
+[[package]]
+name = "unic-char-range"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0398022d5f700414f6b899e10b8348231abf9173fa93144cbc1a43b9793c1fbc"
+
+[[package]]
+name = "unic-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80d7ff825a6a654ee85a63e80f92f054f904f21e7d12da4e22f9834a4aaa35bc"
+
+[[package]]
+name = "unic-ucd-ident"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e230a37c0381caa9219d67cf063aa3a375ffed5bf541a452db16e744bdab6987"
+dependencies = [
+ "unic-char-property",
+ "unic-char-range",
+ "unic-ucd-version",
+]
+
+[[package]]
+name = "unic-ucd-version"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96bd2f2237fe450fcd0a1d2f5f4e91711124f7857ba2e964247776ebeeb7b0c4"
+dependencies = [
+ "unic-common",
+]
+
+[[package]]
+name = "unicase"
+version = "2.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dbc4bc3a9f746d862c45cb89d705aa10f187bb96c76001afab07a0d35ce60142"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common 0.1.7",
+ "subtle",
+]
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "ureq"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02d1a66277ed75f640d608235660df48c8e3c19f3b4edb6a263315626cc3c01d"
+dependencies = [
+ "base64 0.22.1",
+ "flate2",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-pki-types",
+ "url",
+ "webpki-roots 0.26.11",
+]
+
+[[package]]
+name = "ureq"
+version = "3.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdc97a28575b85cfedf2a7e7d3cc64b3e11bd8ac766666318003abbacc7a21fc"
+dependencies = [
+ "base64 0.22.1",
+ "flate2",
+ "log",
+ "percent-encoding",
+ "rustls",
+ "rustls-pki-types",
+ "socks",
+ "ureq-proto",
+ "utf-8",
+ "webpki-roots 1.0.5",
+]
+
+[[package]]
+name = "ureq-proto"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d81f9efa9df032be5934a46a068815a10a042b494b6a58cb0a1a97bb5467ed6f"
+dependencies = [
+ "base64 0.22.1",
+ "http",
+ "httparse",
+ "log",
+]
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "urlencoding"
+version = "2.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "daf8dba3b7eb870caf1ddeed7bc9d2a049f3cfdfae7cb521b087cc33ae4c49da"
+
+[[package]]
+name = "urlpattern"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70acd30e3aa1450bc2eece896ce2ad0d178e9c079493819301573dae3c37ba6d"
+dependencies = [
+ "regex",
+ "serde",
+ "unic-ucd-ident",
+ "url",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f"
+dependencies = [
+ "getrandom 0.3.4",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "vergen"
+version = "9.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b849a1f6d8639e8de261e81ee0fc881e3e3620db1af9f2e0da015d4382ceaf75"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+ "vergen-lib 9.1.0",
+]
+
+[[package]]
+name = "vergen-gitcl"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9dfc1de6eb2e08a4ddf152f1b179529638bedc0ea95e6d667c014506377aefe"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+ "time",
+ "vergen",
+ "vergen-lib 0.1.6",
+]
+
+[[package]]
+name = "vergen-lib"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b07e6010c0f3e59fcb164e0163834597da68d1f864e2b8ca49f74de01e9c166"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+]
+
+[[package]]
+name = "vergen-lib"
+version = "9.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b34a29ba7e9c59e62f229ae1932fb1b8fb8a6fdcc99215a641913f5f5a59a569"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+]
+
+[[package]]
+name = "version-compare"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "vswhom"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be979b7f07507105799e854203b470ff7c78a1639e330a58f183b5fea574608b"
+dependencies = [
+ "libc",
+ "vswhom-sys",
+]
+
+[[package]]
+name = "vswhom-sys"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb067e4cbd1ff067d1df46c9194b5de0e98efd2810bbc95c5d5e5f25a3231150"
+dependencies = [
+ "cc",
+ "libc",
+]
+
+[[package]]
+name = "waitgroup"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1f50000a783467e6c0200f9d10642f4bc424e39efc1b770203e88b488f79292"
+dependencies = [
+ "atomic-waker",
+]
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.9.0+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cccddf32554fecc6acb585f82a32a72e28b48f8c4c1883ddfeeeaa96f7d8e519"
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70a6e77fd0ae8029c9ea0063f87c46fde723e7d887703d74ad2616d792e51e6f"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-async"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6b2260b739b0e95cf9b78f22a64704af7ed9760ea12baa3745b4b97899dc89a"
+dependencies = [
+ "tokio",
+ "tracing",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "312e32e551d92129218ea9a2452120f4aabc03529ef03e4d0d82fb2780608598"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-transport-iroh"
+version = "0.1.1"
+dependencies = [
+ "bytes",
+ "http",
+ "iroh",
+ "iroh-quinn",
+ "n0-error",
+ "n0-future",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "url",
+ "web-transport-proto",
+ "web-transport-trait",
+]
+
+[[package]]
+name = "web-transport-proto"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "660175a6d1643adb93b71c4f853d4f20f0fce47f53ae579afe9f7711fe84870d"
+dependencies = [
+ "bytes",
+ "http",
+ "thiserror 2.0.18",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "web-transport-trait"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ae5c857e6b426610648b39c6b48f9e66ae97b27b166d7c2f1ec369596548271"
+dependencies = [
+ "bytes",
+]
+
+[[package]]
+name = "webkit2gtk"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76b1bc1e54c581da1e9f179d0b38512ba358fb1af2d634a1affe42e37172361a"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-rs",
+ "gdk",
+ "gdk-sys",
+ "gio",
+ "gio-sys",
+ "glib",
+ "glib-sys",
+ "gobject-sys",
+ "gtk",
+ "gtk-sys",
+ "javascriptcore-rs",
+ "libc",
+ "once_cell",
+ "soup3",
+ "webkit2gtk-sys",
+]
+
+[[package]]
+name = "webkit2gtk-sys"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62daa38afc514d1f8f12b8693d30d5993ff77ced33ce30cd04deebc267a6d57c"
+dependencies = [
+ "bitflags 1.3.2",
+ "cairo-sys-rs",
+ "gdk-sys",
+ "gio-sys",
+ "glib-sys",
+ "gobject-sys",
+ "gtk-sys",
+ "javascriptcore-rs-sys",
+ "libc",
+ "pkg-config",
+ "soup3-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "webpki-root-certs"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36a29fc0408b113f68cf32637857ab740edfafdf460c326cd2afaa2d84cc05dc"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "521bc38abb08001b01866da9f51eb7c5d647a19260e00054a8c7fd5f9e57f7a9"
+dependencies = [
+ "webpki-roots 1.0.5",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12bed680863276c63889429bfd6cab3b99943659923822de1c8a39c49e4d722c"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webrtc"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b3a840e31c969844714f93b5a87e73ee49f3bc2a4094ab9132c69497eb31db"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "bytes",
+ "cfg-if",
+ "hex",
+ "interceptor",
+ "lazy_static",
+ "log",
+ "portable-atomic",
+ "rand 0.8.5",
+ "rcgen",
+ "regex",
+ "ring",
+ "rtcp",
+ "rtp",
+ "rustls",
+ "sdp",
+ "serde",
+ "serde_json",
+ "sha2 0.10.9",
+ "smol_str 0.2.2",
+ "stun",
+ "thiserror 1.0.69",
+ "time",
+ "tokio",
+ "turn",
+ "url",
+ "waitgroup",
+ "webrtc-data",
+ "webrtc-dtls",
+ "webrtc-ice",
+ "webrtc-mdns",
+ "webrtc-media",
+ "webrtc-sctp",
+ "webrtc-srtp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-data"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8b7c550f8d35867b72d511640adf5159729b9692899826fe00ba7fa74f0bf70"
+dependencies = [
+ "bytes",
+ "log",
+ "portable-atomic",
+ "thiserror 1.0.69",
+ "tokio",
+ "webrtc-sctp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-dtls"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86e5eedbb0375aa04da93fc3a189b49ed3ed9ee844b6997d5aade14fc3e2c26e"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "async-trait",
+ "bincode",
+ "byteorder",
+ "cbc",
+ "ccm",
+ "der-parser 8.2.0",
+ "hkdf",
+ "hmac",
+ "log",
+ "p256",
+ "p384",
+ "portable-atomic",
+ "rand 0.8.5",
+ "rand_core 0.6.4",
+ "rcgen",
+ "ring",
+ "rustls",
+ "sec1",
+ "serde",
+ "sha1",
+ "sha2 0.10.9",
+ "subtle",
+ "thiserror 1.0.69",
+ "tokio",
+ "webrtc-util",
+ "x25519-dalek",
+ "x509-parser",
+]
+
+[[package]]
+name = "webrtc-ice"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d4f0ca6d4df8d1bdd34eece61b51b62540840b7a000397bcfb53a7bfcf347c8"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "crc",
+ "log",
+ "portable-atomic",
+ "rand 0.8.5",
+ "serde",
+ "serde_json",
+ "stun",
+ "thiserror 1.0.69",
+ "tokio",
+ "turn",
+ "url",
+ "uuid",
+ "waitgroup",
+ "webrtc-mdns",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-mdns"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0804694f3b2acfdff48f6df217979b13cb0a00377c63b5effd111daaee7e8c4"
+dependencies = [
+ "log",
+ "socket2 0.5.10",
+ "thiserror 1.0.69",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-media"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c15b20e98167b22949abc1c20eca7c6d814307d187068fe7a48f0b87a4f6d46"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "rand 0.8.5",
+ "rtp",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "webrtc-sctp"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d850daa68639b9d7bb16400676e97525d1e52b15b4928240ae2ba0e849817a5"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "bytes",
+ "crc",
+ "log",
+ "portable-atomic",
+ "rand 0.8.5",
+ "thiserror 1.0.69",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-srtp"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fbec5da43a62c228d321d93fb12cc9b4d9c03c9b736b0c215be89d8bd0774cfe"
+dependencies = [
+ "aead",
+ "aes",
+ "aes-gcm",
+ "byteorder",
+ "bytes",
+ "ctr",
+ "hmac",
+ "log",
+ "rtcp",
+ "rtp",
+ "sha1",
+ "subtle",
+ "thiserror 1.0.69",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-util"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc8d9bc631768958ed97b8d68b5d301e63054ae90b09083d43e2fefb939fd77e"
+dependencies = [
+ "async-trait",
+ "bitflags 1.3.2",
+ "bytes",
+ "ipnet",
+ "lazy_static",
+ "libc",
+ "log",
+ "nix",
+ "portable-atomic",
+ "rand 0.8.5",
+ "thiserror 1.0.69",
+ "tokio",
+ "winapi",
+]
+
+[[package]]
+name = "webview2-com"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7130243a7a5b33c54a444e54842e6a9e133de08b5ad7b5861cd8ed9a6a5bc96a"
+dependencies = [
+ "webview2-com-macros",
+ "webview2-com-sys",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-implement",
+ "windows-interface",
+]
+
+[[package]]
+name = "webview2-com-macros"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67a921c1b6914c367b2b823cd4cde6f96beec77d30a939c8199bb377cf9b9b54"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "webview2-com-sys"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "381336cfffd772377d291702245447a5251a2ffa5bad679c99e61bc48bacbf9c"
+dependencies = [
+ "thiserror 2.0.18",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "which"
+version = "6.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ee928febd44d98f2f459a4a79bd4d928591333a494a10a868418ac1b39cf1f"
+dependencies = [
+ "either",
+ "home",
+ "rustix 0.38.44",
+ "winsafe",
+]
+
+[[package]]
+name = "which"
+version = "8.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3fabb953106c3c8eea8306e4393700d7657561cb43122571b172bbfb7c7ba1d"
+dependencies = [
+ "env_home",
+ "rustix 1.1.3",
+ "winsafe",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "window-vibrancy"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9bec5a31f3f9362f2258fd0e9c9dd61a9ca432e7306cc78c444258f0dce9a9c"
+dependencies = [
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "raw-window-handle",
+ "windows-sys 0.59.0",
+ "windows-version",
+]
+
+[[package]]
+name = "windows"
+version = "0.61.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
+dependencies = [
+ "windows-collections 0.2.0",
+ "windows-core 0.61.2",
+ "windows-future 0.2.1",
+ "windows-link 0.1.3",
+ "windows-numerics 0.2.0",
+]
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections 0.3.2",
+ "windows-core 0.62.2",
+ "windows-future 0.3.2",
+ "windows-numerics 0.3.1",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+ "windows-threading 0.1.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+ "windows-threading 0.2.1",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-version"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4060a1da109b9d0326b7262c8e12c84df67cc0dbc9e33cf49e01ccc2eb63631"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.5.40"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f593a95398737aeed53e489c785df13f3618e41dbcd6718c6addbf1395aa6876"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "winreg"
+version = "0.55.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb5a765337c50e9ec252c2069be9bf91c7df47afb103b642ba3a53bf8101be97"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "winsafe"
+version = "0.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904"
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+
+[[package]]
+name = "wmi"
+version = "0.18.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "746791db82f029aaefc774ccbb8e61306edba18ef2c8998337cadccc0b8067f7"
+dependencies = [
+ "chrono",
+ "futures",
+ "log",
+ "serde",
+ "thiserror 2.0.18",
+ "windows 0.62.2",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "wry"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728b7d4c8ec8d81cab295e0b5b8a4c263c0d41a785fb8f8c4df284e5411140a2"
+dependencies = [
+ "base64 0.22.1",
+ "block2",
+ "cookie",
+ "crossbeam-channel",
+ "dirs",
+ "dpi",
+ "dunce",
+ "gdkx11",
+ "gtk",
+ "html5ever",
+ "http",
+ "javascriptcore-rs",
+ "jni",
+ "kuchikiki",
+ "libc",
+ "ndk",
+ "objc2",
+ "objc2-app-kit",
+ "objc2-core-foundation",
+ "objc2-foundation",
+ "objc2-ui-kit",
+ "objc2-web-kit",
+ "once_cell",
+ "percent-encoding",
+ "raw-window-handle",
+ "sha2 0.10.9",
+ "soup3",
+ "tao-macros",
+ "thiserror 2.0.18",
+ "url",
+ "webkit2gtk",
+ "webkit2gtk-sys",
+ "webview2-com",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+ "windows-version",
+ "x11-dl",
+]
+
+[[package]]
+name = "ws_stream_wasm"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c173014acad22e83f16403ee360115b38846fe754e735c5d9d3803fe70c6abc"
+dependencies = [
+ "async_io_stream",
+ "futures",
+ "js-sys",
+ "log",
+ "pharos",
+ "rustc_version",
+ "send_wrapper",
+ "thiserror 2.0.18",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "x11"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "502da5464ccd04011667b11c435cb992822c2c0dbde1770c988480d312a0db2e"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "x25519-dalek"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
+dependencies = [
+ "curve25519-dalek 4.1.3",
+ "rand_core 0.6.4",
+ "serde",
+ "zeroize",
+]
+
+[[package]]
+name = "x509-parser"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcbc162f30700d6f3f82a24bf7cc62ffe7caea42c0b2cba8bf7f3ae50cf51f69"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "data-encoding",
+ "der-parser 9.0.0",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror 1.0.69",
+ "time",
+]
+
+[[package]]
+name = "xml-rs"
+version = "0.8.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ae8337f8a065cfc972643663ea4279e04e7256de865aa66fe25cec5fb912d3f"
+
+[[package]]
+name = "xmltree"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7d8a75eaf6557bb84a65ace8609883db44a29951042ada9b393151532e41fcb"
+dependencies = [
+ "xml-rs",
+]
+
+[[package]]
+name = "yasna"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17bb3549cc1321ae1296b9cdc2698e2b6cb1992adfa19a8c72e5b7a738f44cd"
+dependencies = [
+ "time",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "z32"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2164e798d9e3d84ee2c91139ace54638059a3b23e361f5c11781c2c6459bde0f"
+
+[[package]]
+name = "zerocopy"
+version = "0.8.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7456cf00f0685ad319c5b1693f291a650eaf345e941d082fc4e03df8a03996ac"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1328722bbf2115db7e19d69ebcc15e795719e2d66b60827c6a69a117365e37a0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85a5b4158499876c763cb03bc4e49185d3cccbabb15b33c627f7884f43db852e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1966f8ac2c1f76987d69a74d0e0f929241c10e78136434e3be70ff7f58f64214"
diff --git a/Cargo.toml b/Cargo.toml
new file mode 100644
index 0000000..a1d7c77
--- /dev/null
+++ b/Cargo.toml
@@ -0,0 +1,36 @@
+[workspace]
+resolver = "2"
+members = [
+  "crates/ec-core",
+  "crates/ec-moq",
+  "crates/ec-direct",
+  "crates/ec-hdhomerun",
+  "crates/ec-linux-iptv",
+  "crates/ec-iroh",
+  "crates/ec-crypto",
+  "crates/ec-ts",
+  "crates/ec-chopper",
+  "crates/ec-node",
+  "crates/ec-cli",
+  "apps/tauri",
+]
+exclude = [
+  # Vendored upstream crates; we build them as dependencies but do not treat them
+  # as first-class workspace members (their upstream tests are timing-sensitive).
+  "third_party/iroh-org/iroh-gossip",
+  "third_party/iroh-live/iroh-moq",
+  "third_party/iroh-live/web-transport-iroh",
+]
+
+[workspace.package]
+edition = "2021"
+license = "AGPL-3.0-only"
+
+[workspace.dependencies]
+anyhow = "1"
+blake3 = "1"
+clap = { version = "4", features = ["derive"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+tracing = "0.1"
+tracing-subscriber = "0.3"
diff --git a/LICENSE b/LICENSE
new file mode 100644
index 0000000..012c074
--- /dev/null
+++ b/LICENSE
@@ -0,0 +1,644 @@
+                    GNU AFFERO GENERAL PUBLIC LICENSE
+                       Version 3, 19 November 2007
+
+ Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
+ Everyone is permitted to copy and distribute verbatim copies
+ of this license document, but changing it is not allowed.
+
+                            Preamble
+
+  The GNU Affero General Public License is a free, copyleft license for
+software and other kinds of works, specifically designed to ensure
+cooperation with the community in the case of network server software.
+
+  The licenses for most software and other practical works are designed
+to take away your freedom to share and change the works.  By contrast,
+our General Public Licenses are intended to guarantee your freedom to
+share and change all versions of a program--to make sure it remains free
+software for all its users.
+
+  When we speak of free software, we are referring to freedom, not
+price.  Our General Public Licenses are designed to make sure that you
+have the freedom to distribute copies of free software (and charge for
+them if you wish), that you receive source code or can get it if you
+want it, that you can change the software or use pieces of it in new
+free programs, and that you know you can do these things.
+
+  Developers that use our General Public Licenses protect your rights
+with two steps: (1) assert copyright on the software, and (2) offer
+you this License which gives you legal permission to copy, distribute
+and/or modify the software.
+
+  A secondary benefit of defending all users' freedom is that
+improvements made in alternate versions of the program, if they
+receive widespread use, become available for other developers to
+incorporate.  Many developers of free software are heartened and
+encouraged by the resulting cooperation.  However, in the case of
+software used on network servers, this result may fail to come about.
+The GNU General Public License permits making a modified version and
+letting the public access it on a server without ever releasing its
+source code to the public.
+
+  The GNU Affero General Public License is designed specifically to
+ensure that, in such cases, the modified source code becomes available
+to the community.  It requires the operator of a network server to
+provide the source code of the modified version running there to the
+users of that server.  Therefore, public use of a modified version, on
+a publicly accessible server, gives the public access to the source
+code of the modified version.
+
+  An older license, called the Affero General Public License and
+published by Affero, was designed to accomplish similar goals.  This is
+a different license, not a version of the Affero GPL, but Affero has
+released a new version of the Affero GPL which permits relicensing under
+this license.
+
+  The precise terms and conditions for copying, distribution and
+modification follow.
+
+                       TERMS AND CONDITIONS
+
+  0. Definitions.
+
+  "This License" refers to version 3 of the GNU Affero General Public License.
+
+  "Copyright" also means copyright-like laws that apply to other kinds of
+works, such as semiconductor masks.
+
+  "The Program" refers to any copyrightable work licensed under this
+License.  Each licensee is addressed as "you".  "Licensees" and
+"recipients" may be individuals or organizations.
+
+  To "modify" a work means to copy from or adapt all or part of the work
+in a fashion requiring copyright permission, other than the making of an
+exact copy.  The resulting work is called a "modified version" of the
+earlier work or a work "based on" the earlier work.
+
+  A "covered work" means either the unmodified Program or a work based
+on the Program.
+
+  To "propagate" a work means to do anything with it that, without
+permission, would make you directly or secondarily liable for
+infringement under applicable copyright law, except executing it on a
+computer or modifying a private copy.  Propagation includes copying,
+distribution (with or without modification), making available to the
+public, and in some countries other activities as well.
+
+  To "convey" a work means any kind of propagation that enables other
+parties to make or receive copies.  Mere interaction with a user through
+a computer network, with no transfer of a copy, is not conveying.
+
+  An interactive user interface displays "Appropriate Legal Notices"
+if it includes a convenient and prominently visible feature that
+(1) displays an appropriate copyright notice, and (2) tells the user
+that there is no warranty for the work (except to the extent that
+warranties are provided), that licensees may convey the work under
+this License, and how to view a copy of this License.  If the
+interface presents a list of user commands or options, such as a
+menu, a prominent item in the list meets this criterion.
+
+  1. Source Code.
+
+  The "source code" for a work means the preferred form of the work
+for making modifications to it.  "Object code" means any non-source
+form of a work.
+
+  A "Standard Interface" means an interface that either is an official
+standard defined by a recognized standards body, or, in the case of
+interfaces specified for a particular programming language, one that
+is widely used among developers working in that language.
+
+  The "System Libraries" of an executable work include anything, other
+than the work as a whole, that (a) is included in the normal form of
+packaging a Major Component, but which is not part of that Major
+Component, and (b) serves only to enable use of the work with that
+Major Component, or to implement a Standard Interface for which an
+implementation is available to the public in source code form.  A
+"Major Component", in this context, means a major essential component
+(kernel, window system, and so on) of the specific operating system
+(if any) on which the executable work runs, or a compiler used to
+produce the work, or an object code interpreter used to run it.
+
+  The "Corresponding Source" for a work in object code form means all
+the source code needed to generate, install, and (for an executable
+work) run the object code and to modify the work, including scripts to
+control those activities.  However, it does not include the work's
+System Libraries, or general-purpose tools or generally available free
+programs which are used unmodified in performing those activities but
+which are not part of the work.  For example, Corresponding Source
+includes interface definition files associated with source files for
+the work, and the source code for shared libraries and dynamically
+linked subprograms that the work is specifically designed to require,
+such as by intimate data communication or control flow between those
+subprograms and other parts of the work.
+
+  The Corresponding Source need not include anything that users
+can regenerate automatically from other parts of the Corresponding
+Source.
+
+  The Corresponding Source for a work in source code form is that
+same work.
+
+  2. Basic Permissions.
+
+  All rights granted under this License are granted for the term of
+copyright on the Program, and are irrevocable provided the stated
+conditions are met.  This License explicitly affirms your unlimited
+permission to run the unmodified Program.  The output from running a
+covered work is covered by this License only if the output, given its
+content, constitutes a covered work.  This License acknowledges your
+rights of fair use or other equivalent, as provided by copyright law.
+
+  You may make, run and propagate covered works that you do not
+convey, without conditions so long as your license otherwise remains
+in force.  You may convey covered works to others for the sole purpose
+of having them make modifications exclusively for you, or provide you
+with facilities for running those works, provided that you comply with
+the terms of this License in conveying all material for which you do
+not control copyright.  Those thus making or running the covered works
+for you must do so exclusively on your behalf, under your direction
+and control, on terms that prohibit them from making any copies of
+your copyrighted material outside their relationship with you.
+
+  Conveying under any other circumstances is permitted solely under
+the conditions stated below.  Sublicensing is not allowed; section 10
+makes it unnecessary.
+
+  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
+
+  No covered work shall be deemed part of an effective technological
+measure under any applicable law fulfilling obligations under article
+11 of the WIPO copyright treaty adopted on 20 December 1996, or
+similar laws prohibiting or restricting circumvention of such
+measures.
+
+  When you convey a covered work, you waive any legal power to forbid
+circumvention of technological measures to the extent such circumvention
+is effected by exercising rights under this License with respect to
+the covered work, and you disclaim any intention to limit operation or
+modification of the work as a means of enforcing, against the work's
+users, your or third parties' legal rights to forbid circumvention of
+technological measures.
+
+  4. Conveying Verbatim Copies.
+
+  You may convey verbatim copies of the Program's source code as you
+receive it, in any medium, provided that you conspicuously and
+appropriately publish on each copy an appropriate copyright notice;
+keep intact all notices stating that this License and any
+non-permissive terms added in accord with section 7 apply to the code;
+keep intact all notices of the absence of any warranty; and give all
+recipients a copy of this License along with the Program.
+
+  You may charge any price or no price for each copy that you convey,
+and you may offer support or warranty protection for a fee.
+
+  5. Conveying Modified Source Versions.
+
+  You may convey a work based on the Program, or the modifications to
+produce it from the Program, in the form of source code under the
+terms of section 4, provided that you also meet all of these conditions:
+
+  a) The work must carry prominent notices stating that you modified
+  it, and giving a relevant date.
+
+  b) The work must carry prominent notices stating that it is
+  released under this License and any conditions added under section
+  7.  This requirement modifies the requirement in section 4 to
+  "keep intact all notices".
+
+  c) You must license the entire work, as a whole, under this
+  License to anyone who comes into possession of a copy.  This
+  License will therefore apply, along with any applicable section 7
+  additional terms, to the whole of the work, and all its parts,
+  regardless of how they are packaged.  This License gives no
+  permission to license the work in any other way, but it does not
+  invalidate such permission if you have separately received it.
+
+  d) If the work has interactive user interfaces, each must display
+  Appropriate Legal Notices; however, if the Program has interactive
+  interfaces that do not display Appropriate Legal Notices, your
+  work need not make them do so.
+
+  A compilation of a covered work with other separate and independent
+works, which are not by their nature extensions of the covered work,
+and which are not combined with it such as to form a larger program,
+in or on a volume of a storage or distribution medium, is called an
+"aggregate" if the compilation and its resulting copyright are not
+used to limit the access or legal rights of the compilation's users
+beyond what the individual works permit.  Inclusion of a covered work
+in an aggregate does not cause this License to apply to the other
+parts of the aggregate.
+
+  6. Conveying Non-Source Forms.
+
+  You may convey a covered work in object code form under the terms
+of sections 4 and 5, provided that you also convey the
+machine-readable Corresponding Source under the terms of this License,
+in one of these ways:
+
+  a) Convey the object code in, or embodied in, a physical product
+  (including a physical distribution medium), accompanied by the
+  Corresponding Source fixed on a durable physical medium
+  customarily used for software interchange.
+
+  b) Convey the object code in, or embodied in, a physical product
+  (including a physical distribution medium), accompanied by a
+  written offer, valid for at least three years and valid for as
+  long as you offer spare parts or customer support for that product
+  model, to give anyone who possesses the object code either (1) a
+  copy of the Corresponding Source for all the software in the
+  product that is covered by this License, on a durable physical
+  medium customarily used for software interchange, for a price no
+  more than your reasonable cost of physically performing this
+  conveying of source, or (2) access to copy the
+  Corresponding Source from a network server at no charge.
+
+  c) Convey individual copies of the object code with a copy of the
+  written offer to provide the Corresponding Source.  This
+  alternative is allowed only occasionally and noncommercially, and
+  only if you received the object code with such an offer, in accord
+  with subsection 6b.
+
+  d) Convey the object code by offering access from a designated
+  place (gratis or for a charge), and offer equivalent access to the
+  Corresponding Source in the same way through the same place at no
+  further charge.  You need not require recipients to copy the
+  Corresponding Source along with the object code.  If the place to
+  copy the object code is a network server, the Corresponding Source
+  may be on a different server (operated by you or a third party)
+  that supports equivalent copying facilities, provided you maintain
+  clear directions next to the object code saying where to find the
+  Corresponding Source.  Regardless of what server hosts the
+  Corresponding Source, you remain obligated to ensure that it is
+  available for as long as needed to satisfy these requirements.
+
+  e) Convey the object code using peer-to-peer transmission, provided
+  you inform other peers where the object code and Corresponding
+  Source of the work are being offered to the general public at no
+  charge under subsection 6d.
+
+  A separable portion of the object code, whose source code is excluded
+from the Corresponding Source as a System Library, need not be
+included in conveying the object code work.
+
+  A "User Product" is either (1) a "consumer product", which means any
+ tangible personal property which is normally used for personal, family,
+ or household purposes, or (2) anything designed or sold for incorporation
+ into a dwelling.  In determining whether a product is a consumer product,
+ doubtful cases shall be resolved in favor of coverage.  For a particular
+ product received by a particular user, "normally used" refers to a
+ typical or common use of that class of product, regardless of the status
+ of the particular user or of the way in which the particular user
+ actually uses, or expects or is expected to use, the product.  A product
+ is a consumer product regardless of whether the product has substantial
+ commercial, industrial or non-consumer uses, unless such uses represent
+ the only significant mode of use of the product.
+
+  "Installation Information" for a User Product means any methods,
+ procedures, authorization keys, or other information required to install
+ and execute modified versions of a covered work in that User Product from
+ a modified version of its Corresponding Source.  The information must
+ suffice to ensure that the continued functioning of the modified object
+ code is in no case prevented or interfered with solely because
+ modification has been made.
+
+  If you convey an object code work under this section in, or with, or
+ specifically for use in, a User Product, and the conveying occurs as
+ part of a transaction in which the right of possession and use of the
+ User Product is transferred to the recipient in perpetuity or for a
+ fixed term (regardless of how the transaction is characterized), the
+ Corresponding Source conveyed under this section must be accompanied
+ by the Installation Information.  But this requirement does not apply
+ if neither you nor any third party retains the ability to install
+ modified object code on the User Product (for example, the work has
+ been installed in ROM).
+
+  The requirement to provide Installation Information does not include a
+ requirement to continue to provide support service, warranty, or updates
+ for a work that has been modified or installed by the recipient, or for
+ the User Product in which it has been modified or installed.  Access to a
+ network may be denied when the modification itself materially and
+ adversely affects the operation of the network or violates the rules and
+ protocols for communication across the network.
+
+  Corresponding Source conveyed, and Installation Information provided,
+ in accord with this section must be in a format that is publicly
+ documented (and with an implementation available to the public in
+ source code form), and must require no special password or key for
+ unpacking, reading or copying.
+
+  7. Additional Terms.
+
+  "Additional permissions" are terms that supplement the terms of this
+ License by making exceptions from one or more of its conditions.
+  Additional permissions that are applicable to the entire Program shall
+ be treated as though they were included in this License, to the extent
+ that they are valid under applicable law.  If additional permissions
+ apply only to part of the Program, that part may be used separately
+ under those permissions, but the entire Program remains governed by
+ this License without regard to the additional permissions.
+
+  When you convey a copy of a covered work, you may at your option
+ remove any additional permissions from that copy, or from any part of
+ it.  (Additional permissions may be written to require their own
+ removal in certain cases when you modify the work.)  You may place
+ additional permissions on material, added by you to a covered work,
+ for which you have or can give appropriate copyright permission.
+
+  Notwithstanding any other provision of this License, for material you
+ add to a covered work, you may (if authorized by the copyright holders
+ of that material) supplement the terms of this License with terms:
+
+  a) Disclaiming warranty or limiting liability differently from the
+  terms of sections 15 and 16 of this License; or
+
+  b) Requiring preservation of specified reasonable legal notices or
+  author attributions in that material or in the Appropriate Legal
+  Notices displayed by works containing it; or
+
+  c) Prohibiting misrepresentation of the origin of that material, or
+  requiring that modified versions of such material be marked in
+  reasonable ways as different from the original version; or
+
+  d) Limiting the use for publicity purposes of names of licensors or
+  authors of the material; or
+
+  e) Declining to grant rights under trademark law for use of some
+  trade names, trademarks, or service marks; or
+
+  f) Requiring indemnification of licensors and authors of that
+  material by anyone who conveys the material (or modified versions of
+  it) with contractual assumptions of liability to the recipient, for
+  any liability that these contractual assumptions directly impose on
+  those licensors and authors.
+
+  All other non-permissive additional terms are considered "further
+  restrictions" within the meaning of section 10.  If the Program as you
+ received it, or any part of it, contains a notice stating that it is
+ governed by this License along with a term that is a further
+  restriction, you may remove that term.  If a license document contains
+ a further restriction but permits relicensing or conveying under this
+ License, you may add to a covered work material governed by the terms
+ of that license document, provided that the further restriction does
+ not survive such relicensing or conveying.
+
+  If you add terms to a covered work in accord with this section, you
+ must place, in the relevant source files, a statement of the
+ additional terms that apply to those files, or a notice indicating
+ where to find the applicable terms.
+
+  Additional terms, permissive or non-permissive, may be stated in the
+ form of a separately written license, or stated as exceptions;
+ the above requirements apply either way.
+
+  8. Termination.
+
+  You may not propagate or modify a covered work except as expressly
+ provided under this License.  Any attempt otherwise to propagate or
+ modify it is void, and will automatically terminate your rights under
+ this License (including any patent licenses granted under the third
+ paragraph of section 11).
+
+  However, if you cease all violation of this License, then your
+ license from a particular copyright holder is reinstated (a)
+ provisionally, unless and until the copyright holder explicitly and
+ finally terminates your license, and (b) permanently, if the copyright
+ holder fails to notify you of the violation by some reasonable means
+ prior to 60 days after the cessation.
+
+  Moreover, your license from a particular copyright holder is
+ reinstated permanently if the copyright holder notifies you of the
+ violation by some reasonable means, this is the first time you have
+ received notice of violation of this License (for any work) from that
+ copyright holder, and you cure the violation prior to 30 days after
+ your receipt of the notice.
+
+  Termination of your rights under this section does not terminate the
+ licenses of parties who have received copies or rights from you under
+ this License.  If your rights have been terminated and not permanently
+ reinstated, you do not qualify to receive new licenses for the same
+ material under section 10.
+
+  9. Acceptance Not Required for Having Copies.
+
+  You are not required to accept this License in order to receive or
+ run a copy of the Program.  Ancillary propagation of a covered work
+ occurring solely as a consequence of using peer-to-peer transmission
+ to receive a copy likewise does not require acceptance.  However,
+ nothing other than this License grants you permission to propagate or
+ modify any covered work.  These actions infringe copyright if you do
+ not accept this License.  Therefore, by modifying or propagating a
+ covered work, you indicate your acceptance of this License to do so.
+
+  10. Automatic Licensing of Downstream Recipients.
+
+  Each time you convey a covered work, the recipient automatically
+ receives a license from the original licensors, to run, modify and
+ propagate that work, subject to this License.  You are not responsible
+ for enforcing compliance by third parties with this License.
+
+  An "entity transaction" is a transaction transferring control of an
+ organization, or substantially all assets of one, or subdividing an
+ organization, or merging organizations.  If propagation of a covered
+ work results from an entity transaction, each party to that
+ transaction who receives a copy of the work also receives whatever
+ licenses to the work the party's predecessor in interest had or could
+ give under the previous paragraph, plus a right to possession of the
+ Corresponding Source of the work from the predecessor in interest, if
+ the predecessor was required to provide the Corresponding Source.
+
+  You may not impose any further restrictions on the exercise of the
+ rights granted or affirmed under this License.  For example, you may
+ not impose a license fee, royalty, or other charge for exercise of
+ rights granted under this License, and you may not initiate litigation
+ (including a cross-claim or counterclaim in a lawsuit) alleging that
+ any patent claim is infringed by making, using, selling, offering for
+ sale, or importing the Program or any portion of it.
+
+  11. Patents.
+
+  A "contributor" is a copyright holder who authorizes use under this
+ License of the Program or a work on which the Program is based.  The
+ work thus licensed is called the contributor's "contributor version".
+
+  A contributor's "essential patent claims" are all patent claims
+ owned or controlled by the contributor, whether already acquired or
+ hereafter acquired, that would be infringed by some manner, permitted
+ by this License, of making, using, or selling its contributor version,
+ but do not include claims that would be infringed only as a
+ consequence of further modification of the contributor version.
+
+  Each contributor grants you a non-exclusive, worldwide, royalty-free
+ patent license under the contributor's essential patent claims, to
+ make, use, sell, offer for sale, import and otherwise run, modify and
+ propagate the contents of its contributor version.
+
+  In the following three paragraphs, a "patent license" is any express
+ agreement or commitment, however denominated, not to enforce a patent
+ (such as an express permission to practice a patent or covenant not to
+ sue for patent infringement).  To "grant" such a patent license to a
+ party means to make such an agreement or commitment not to enforce a
+ patent against the party.
+
+  If you convey a covered work, knowingly relying on a patent license,
+ and the Corresponding Source of the work is not available for anyone
+ to copy, free of charge and under the terms of this License, through a
+ publicly available network server or other readily accessible means,
+ then you must either (1) cause the Corresponding Source to be so
+ available, or (2) arrange to deprive yourself of the benefit of the
+ patent license for this particular work, or (3) arrange, in a manner
+ consistent with the requirements of this License, to extend the patent
+ license to downstream recipients.  "Knowingly relying" means you have
+ actual knowledge that, but for the patent license, your conveying the
+ covered work in a country, or your recipient's use of the covered work
+ in a country, would infringe one or more identifiable patents in that
+ country that you have reason to believe are valid.
+
+  If, pursuant to or in connection with a single transaction or
+ arrangement, you convey, or propagate by procuring conveyance of, a
+ covered work, and grant a patent license to some of the parties
+ receiving the covered work authorizing them to use, propagate, modify
+ or convey a specific copy of the covered work, then the patent license
+ you grant is automatically extended to all recipients of the covered
+ work and works based on it.
+
+  A patent license is "discriminatory" if it does not include within
+ the scope of its coverage, prohibits the exercise of, or is
+ conditioned on the non-exercise of one or more of the rights that are
+ specifically granted under this License.  You may not convey a covered
+ work if you are a party to an arrangement with a third party that is
+ in the business of distributing software, under which you make payment
+ to the third party based on the extent of your activity of conveying
+ the work, and under which the third party grants, to any of the
+ parties who would receive the covered work from you, a discriminatory
+ patent license (a) in connection with copies of the covered work
+ conveyed by you (or copies made from those copies), or (b) primarily
+ for and in connection with specific products or compilations that
+ contain the covered work, unless you entered into that arrangement,
+ or that patent license was granted, prior to 28 March 2007.
+
+  Nothing in this License shall be construed as excluding or limiting
+ any implied license or other defenses to infringement that may
+ otherwise be available to you under applicable patent law.
+
+  12. No Surrender of Others' Freedom.
+
+  If conditions are imposed on you (whether by court order, agreement or
+ otherwise) that contradict the conditions of this License, they do not
+ excuse you from the conditions of this License.  If you cannot convey a
+ covered work so as to satisfy simultaneously your obligations under
+ this License and any other pertinent obligations, then as a consequence
+ you may not convey it at all.  For example, if you agree to terms that
+ obligate you to collect a royalty for further conveying from those to
+ whom you convey the Program, the only way you could satisfy both those
+ terms and this License would be to refrain entirely from conveying the
+ Program.
+
+  13. Remote Network Interaction; Use with the GNU General Public License.
+
+  Notwithstanding any other provision of this License, if you modify the
+ Program, your modified version must prominently offer all users
+ interacting with it remotely through a computer network (if your version
+ supports such interaction) an opportunity to receive the Corresponding
+ Source of your version by providing access to the Corresponding Source
+ from a network server at no charge, through some standard or customary
+ means of facilitating copying of software.  This Corresponding Source
+ shall include the Corresponding Source for any work covered by version 3
+ of the GNU General Public License that is incorporated pursuant to the
+ following paragraph.
+
+  Notwithstanding any other provision of this License, you have
+ permission to link or combine any covered work with a work licensed
+ under version 3 of the GNU General Public License into a single
+ combined work, and to convey the resulting work.  The terms of this
+ License will continue to apply to the part which is the covered work,
+ but the work with which it is combined will remain governed by version
+ 3 of the GNU General Public License.
+
+  14. Revised Versions of this License.
+
+  The Free Software Foundation may publish revised and/or new versions of
+ the GNU Affero General Public License from time to time.  Such new
+ versions will be similar in spirit to the present version, but may
+ differ in detail to address new problems or concerns.
+
+  Each version is given a distinguishing version number.  If the
+ Program specifies that a certain numbered version of the GNU Affero
+ General Public License "or any later version" applies to it, you have
+ the option of following the terms and conditions either of that
+ numbered version or of any later version published by the Free
+ Software Foundation.  If the Program does not specify a version number
+ of the GNU Affero General Public License, you may choose any version
+ ever published by the Free Software Foundation.
+
+  If the Program specifies that a proxy can decide which future
+ versions of the GNU Affero General Public License can be used, that
+ proxy's public statement of acceptance of a version permanently
+ authorizes you to choose that version for the Program.
+
+  Later license versions may give you additional or different
+ permissions.  However, no additional obligations are imposed on any
+ author or copyright holder as a result of your choosing to follow a
+ later version.
+
+  15. Disclaimer of Warranty.
+
+  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
+ APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
+ HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
+ OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
+ THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
+ PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
+ IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
+ ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
+
+  16. Limitation of Liability.
+
+  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
+ WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
+ THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
+ GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
+ USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
+ DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
+ PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
+ EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
+ SUCH DAMAGES.
+
+  17. Interpretation of Sections 15 and 16.
+
+  If the disclaimer of warranty and limitation of liability provided
+ above cannot be given local legal effect according to their terms,
+ reviewing courts shall apply local law that most closely approximates
+ an absolute waiver of all civil liability in connection with the
+ Program, unless a warranty or assumption of liability accompanies a
+ copy of the Program in return for a fee.
+
+                     END OF TERMS AND CONDITIONS
+
+            How to Apply These Terms to Your New Programs
+
+  If you develop a new program, and you want it to be of the greatest
+possible use to the public, the best way to achieve this is to make it
+free software which everyone can redistribute and change under these terms.
+
+  To do so, attach the following notices to the program.  It is safest
+to attach them to the start of each source file to most effectively
+state the exclusion of warranty; and each file should have at least
+the "copyright" line and a pointer to where the full notice is found.
+
+    <one line to give the program's name and a brief idea of what it does.>
+    Copyright (C) <year>  <name of author>
+
+    This program is free software: you can redistribute it and/or modify
+    it under the terms of the GNU Affero General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    This program is distributed in the hope that it will be useful,
+    but WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU Affero General Public License for more details.
+
+    You should have received a copy of the GNU Affero General Public License
+    along with this program.  If not, see <https://www.gnu.org/licenses/>.
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..c0fa768
--- /dev/null
+++ b/README.md
@@ -0,0 +1,94 @@
+# every.channel
+
+A global, disaggregated mesh of relays that turns local ATSC antennas into a coherent, worldwide stream. The stack is Rust-first, MoQ-native, and designed for deterministic chunking so identical broadcasts yield identical data.
+
+## Goals
+
+- Free, global access to broadcast TV through user-run relays.
+- Deterministic encoding and chunking to make availability a coordination problem.
+- Clean layering: capture -> transcode -> MoQ publish -> relay -> client playback.
+- Cross-platform clients: Tauri app, CLI, and a static web UI.
+
+## Repository layout
+
+- `crates/ec-core`: shared types and determinism profiles.
+- `crates/ec-hdhomerun`: HDHomeRun discovery and lineup scaffolding.
+- `crates/ec-linux-iptv`: Linux DVB ingest scaffolding.
+- `crates/ec-iroh`: iroh transport scaffolding.
+- `crates/ec-crypto`: stream key derivation helpers.
+- `crates/ec-ts`: MPEG-TS timing and table parsing.
+- `crates/ec-chopper`: deterministic ffmpeg chunking scaffolding.
+- `crates/ec-moq`: MoQ data model and relay scaffolding.
+- `crates/ec-node`: node runner (ingest + publish).
+- `crates/ec-cli`: CLI for discovery and node control.
+- `apps/tauri`: desktop client shell.
+- `apps/tauri/ui`: Dioxus web frontend embedded in the Tauri app.
+- `docs/USAGE.md`: runbook for viewer and ingest pipelines.
+- `docs/IROH_EXAMPLES.md`: summary of iroh repos/examples used for design.
+- `docs/`: architecture, roadmap, and MoQ notes.
+
+## Development
+
+Nix:
+
+```sh
+nix develop
+```
+
+Rust:
+
+```sh
+cargo build
+```
+
+Runbook:
+
+```sh
+cat docs/USAGE.md
+```
+
+Coverage:
+
+```sh
+./scripts/coverage.sh
+```
+
+Build static web:
+
+```sh
+./scripts/build-web.sh
+```
+
+Deploy to Cloudflare Workers (static site):
+
+```sh
+./scripts/deploy-workers.sh
+```
+
+Remote website E2E (local publisher -> deployed every.channel web):
+
+```sh
+./scripts/e2e-remote-website-direct.sh
+```
+
+Remote website E2E (public list/signaling -> website selects stream automatically):
+
+```sh
+./scripts/e2e-remote-website-directory.sh
+```
+
+Tauri viewer (Dioxus + Trunk):
+
+```sh
+cd apps/tauri/ui
+trunk serve --port 1420 --public-url /
+```
+
+```sh
+cd ../
+cargo run
+```
+
+## Status
+
+This repository is intentionally minimal. It captures the initial architecture and scaffold for a MoQ-first network and will expand as proposals are accepted.
diff --git a/apps/tauri/Cargo.toml b/apps/tauri/Cargo.toml
new file mode 100644
index 0000000..53b8928
--- /dev/null
+++ b/apps/tauri/Cargo.toml
@@ -0,0 +1,29 @@
+[package]
+name = "ec-tauri"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+axum = "0.7"
+blake3.workspace = true
+ec-crypto = { path = "../../crates/ec-crypto" }
+ec-core = { path = "../../crates/ec-core" }
+ec-chopper = { path = "../../crates/ec-chopper" }
+ec-hdhomerun = { path = "../../crates/ec-hdhomerun" }
+ec-linux-iptv = { path = "../../crates/ec-linux-iptv" }
+ec-iroh = { path = "../../crates/ec-iroh" }
+ec-moq = { path = "../../crates/ec-moq" }
+hex = "0.4"
+iroh = "0.96"
+reqwest = { version = "0.12", default-features = false, features = ["blocking", "rustls-tls"] }
+serde.workspace = true
+serde_json = "1"
+tauri = { version = "2", features = [] }
+tokio = { version = "1", features = ["rt-multi-thread", "macros"] }
+tower-http = { version = "0.5", features = ["fs"] }
+tracing.workspace = true
+
+[build-dependencies]
+tauri-build = { version = "2", features = [] }
diff --git a/apps/tauri/build.rs b/apps/tauri/build.rs
new file mode 100644
index 0000000..261851f
--- /dev/null
+++ b/apps/tauri/build.rs
@@ -0,0 +1,3 @@
+fn main() {
+    tauri_build::build();
+}
diff --git a/apps/tauri/icons/icon.png b/apps/tauri/icons/icon.png
new file mode 100644
index 0000000..8ef45ce
Binary files /dev/null and b/apps/tauri/icons/icon.png differ
diff --git a/apps/tauri/resources/yt-dlp/README.md b/apps/tauri/resources/yt-dlp/README.md
new file mode 100644
index 0000000..2c03208
--- /dev/null
+++ b/apps/tauri/resources/yt-dlp/README.md
@@ -0,0 +1,8 @@
+Bundled yt-dlp runtime lives under platform-specific folders.
+
+Use `scripts/vendor-yt-dlp.sh` to populate:
+- macos/venv
+- linux/venv
+- windows/venv
+
+These directories are intentionally empty in git.
diff --git a/apps/tauri/src/main.rs b/apps/tauri/src/main.rs
new file mode 100644
index 0000000..6a4fd97
--- /dev/null
+++ b/apps/tauri/src/main.rs
@@ -0,0 +1,3452 @@
+#![cfg_attr(not(debug_assertions), windows_subsystem = "windows")]
+
+use anyhow::{anyhow, Context, Result};
+use axum::Router;
+use blake3;
+use ec_core::{
+    merkle_root_from_hashes, Manifest, ManifestVariant, MoqStreamDescriptor, SourceId,
+    StreamCatalogEntry, StreamDescriptor, StreamEncryptionInfo, StreamId, StreamKey,
+    StreamMetadata,
+};
+use ec_crypto::{decrypt_stream_data, encrypt_stream_data, ENCRYPTION_ALG};
+use ec_hdhomerun::{HdhomerunDevice, LineupEntry};
+use ec_iroh;
+use ec_linux_iptv::LinuxDvbConfig;
+use ec_moq::{
+    chunk_duration_secs, GroupId, HlsWriter, MoqNode, ObjectMeta, ObjectPayload, TimingMeta,
+    DEFAULT_MANIFEST_TRACK_NAME, DEFAULT_TRACK_NAME,
+};
+use reqwest::blocking as reqwest_blocking;
+use reqwest::Url;
+use serde::{Deserialize, Serialize};
+use std::collections::{HashMap, HashSet};
+use std::fs;
+use std::io::Read;
+use std::net::IpAddr;
+use std::path::{Path, PathBuf};
+use std::process::{Child, Command, Stdio};
+use std::sync::Arc;
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+use tauri::path::BaseDirectory;
+use tauri::{AppHandle, Manager, State};
+use tokio::sync::Mutex;
+use tower_http::services::ServeDir;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct PlaybackInfo {
+    stream_id: String,
+    url: String,
+}
+
+#[derive(Debug, Clone)]
+struct StreamSource {
+    stream_url: String,
+    title: String,
+    number: Option<String>,
+    metadata: Vec<StreamMetadata>,
+}
+
+struct StreamProcess {
+    _child: Child,
+    _output_dir: PathBuf,
+}
+
+struct MoqStreamProcess {
+    _task: tauri::async_runtime::JoinHandle<()>,
+    _node: MoqNode,
+    _output_dir: PathBuf,
+    _mdns: Option<ec_iroh::MdnsDiscovery>,
+}
+
+struct MoqPublishProcess {
+    _task: tauri::async_runtime::JoinHandle<()>,
+    _node: MoqNode,
+    _mdns: Option<ec_iroh::MdnsDiscovery>,
+    share: ShareInfo,
+}
+
+struct CatalogProcess {
+    _task: tauri::async_runtime::JoinHandle<()>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct SourceDescriptor {
+    id: String,
+    kind: String,
+    name: String,
+    ip: Option<String>,
+    tuner_count: Option<u8>,
+    status: String,
+}
+
+struct StreamManager {
+    port: u16,
+    output_root: PathBuf,
+    streams: Vec<StreamDescriptor>,
+    manual_streams: Vec<StreamDescriptor>,
+    sources: HashMap<String, StreamSource>,
+    manual_sources: HashMap<String, StreamSource>,
+    manual_source_descriptors: HashMap<String, SourceDescriptor>,
+    manual_devices: HashMap<String, HdhomerunDevice>,
+    manual_entries: Vec<ManualSourceEntry>,
+    manual_entries_loaded: bool,
+    processes: HashMap<String, StreamProcess>,
+    moq_processes: HashMap<String, MoqStreamProcess>,
+    moq_publishes: HashMap<String, MoqPublishProcess>,
+    catalog_streams: HashMap<String, StreamDescriptor>,
+    catalog_process: Option<CatalogProcess>,
+}
+
+impl StreamManager {
+    fn new(port: u16, output_root: PathBuf) -> Self {
+        Self {
+            port,
+            output_root,
+            streams: Vec::new(),
+            manual_streams: Vec::new(),
+            sources: HashMap::new(),
+            manual_sources: HashMap::new(),
+            manual_source_descriptors: HashMap::new(),
+            manual_devices: HashMap::new(),
+            manual_entries: Vec::new(),
+            manual_entries_loaded: false,
+            processes: HashMap::new(),
+            moq_processes: HashMap::new(),
+            moq_publishes: HashMap::new(),
+            catalog_streams: HashMap::new(),
+            catalog_process: None,
+        }
+    }
+}
+
+#[tauri::command]
+async fn list_streams(
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<Vec<StreamDescriptor>, String> {
+    let needs_refresh = {
+        let manager = state.lock().await;
+        manager.streams.is_empty()
+    };
+
+    if needs_refresh {
+        let (streams, sources) = tokio::task::spawn_blocking(discover_streams)
+            .await
+            .map_err(|err| err.to_string())
+            .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+        let mut manager = state.lock().await;
+        manager.streams = streams;
+        manager.sources = sources;
+    }
+
+    let manager = state.lock().await;
+    let local = merge_local_streams(&manager.streams, &manager.manual_streams);
+    Ok(merge_streams(&local, &manager.catalog_streams))
+}
+
+#[tauri::command]
+async fn refresh_streams(
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<Vec<StreamDescriptor>, String> {
+    let (streams, sources) = tokio::task::spawn_blocking(discover_streams)
+        .await
+        .map_err(|err| err.to_string())
+        .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+    let mut manager = state.lock().await;
+    manager.streams = streams;
+    manager.sources = sources;
+    let local = merge_local_streams(&manager.streams, &manager.manual_streams);
+    Ok(merge_streams(&local, &manager.catalog_streams))
+}
+
+#[tauri::command]
+async fn list_sources(
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<Vec<SourceDescriptor>, String> {
+    let sources = tokio::task::spawn_blocking(discover_sources)
+        .await
+        .map_err(|err| err.to_string())
+        .and_then(|res| res.map_err(|err| err.to_string()))?;
+    let manager = state.lock().await;
+    let mut merged = merge_source_descriptors(sources, manager.manual_devices.iter());
+    let mut seen: HashSet<String> = merged.iter().map(|source| source.id.clone()).collect();
+    for source in manager.manual_source_descriptors.values() {
+        if seen.insert(source.id.clone()) {
+            merged.push(source.clone());
+        }
+    }
+    Ok(dedupe_source_descriptors(merged))
+}
+
+fn dedupe_source_descriptors(sources: Vec<SourceDescriptor>) -> Vec<SourceDescriptor> {
+    // Defensive dedupe: callers occasionally merge the same physical device via multiple paths
+    // (mDNS, manual add, persisted aliases). Prefer "online" when duplicates exist.
+    use std::collections::BTreeMap;
+
+    fn key(s: &SourceDescriptor) -> (String, String, String) {
+        (
+            s.kind.clone(),
+            s.id.clone(),
+            s.ip.clone().unwrap_or_default(),
+        )
+    }
+
+    let mut by_key: BTreeMap<(String, String, String), SourceDescriptor> = BTreeMap::new();
+    for source in sources {
+        let k = key(&source);
+        match by_key.get(&k) {
+            None => {
+                by_key.insert(k, source);
+            }
+            Some(existing) => {
+                if existing.status != "online" && source.status == "online" {
+                    by_key.insert(k, source);
+                }
+            }
+        }
+    }
+
+    by_key.into_values().collect()
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddHdhrArgs {
+    host: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddYtdlpArgs {
+    url: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, Hash)]
+#[serde(rename_all = "camelCase")]
+struct ManualSourceOptions {
+    ytdlp_format: Option<String>,
+    ytdlp_live_from_start: bool,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq, Hash)]
+#[serde(rename_all = "camelCase")]
+struct ManualSourceEntry {
+    kind: String,
+    input: String,
+    options: Option<ManualSourceOptions>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddStreamArgs {
+    input: String,
+    options: Option<ManualSourceOptions>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct ProbeStreamArgs {
+    input: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbAdapterInfo {
+    adapter: u32,
+    dvrs: Vec<u32>,
+    frontends: Vec<u32>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbChannelsInfo {
+    channels_conf: Option<String>,
+    channels: Vec<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbBuildUrlArgs {
+    adapter: u32,
+    dvr: u32,
+    channel: Option<String>,
+    channels_conf: Option<String>,
+    tune_wait_ms: Option<u64>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbListChannelsArgs {
+    channels_conf: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct YtdlpFormatOption {
+    format_id: String,
+    label: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct YtdlpProbe {
+    title: Option<String>,
+    formats: Vec<YtdlpFormatOption>,
+    default_format: Option<String>,
+    supports_live_from_start: bool,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct StreamProbe {
+    kind: String,
+    live: bool,
+    requires_options: bool,
+    message: Option<String>,
+    ytdlp: Option<YtdlpProbe>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddStreamResult {
+    kind: String,
+    added: usize,
+    title: Option<String>,
+}
+
+#[tauri::command]
+async fn add_hdhr_source(
+    args: AddHdhrArgs,
+    app: AppHandle,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<SourceDescriptor, String> {
+    let host = args.host.trim();
+    if host.is_empty() {
+        return Err("host is required".to_string());
+    }
+
+    let host_string = normalize_host(host);
+    let host_for_task = host_string.clone();
+    let (device, streams, sources) =
+        tokio::task::spawn_blocking(move || hydrate_hdhr_host(&host_for_task))
+            .await
+            .map_err(|err| err.to_string())
+            .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+    let mut manager = state.lock().await;
+    add_manual_entries(
+        &mut manager,
+        host_string.clone(),
+        device.clone(),
+        streams,
+        sources,
+    );
+    remember_manual_entry(
+        &mut manager,
+        &app,
+        ManualSourceEntry {
+            kind: "hdhr".to_string(),
+            input: host_string.clone(),
+            options: None,
+        },
+    );
+    Ok(source_descriptor_for_device_with_id(
+        &device,
+        "manual",
+        manual_source_id(&host_string, &device),
+    ))
+}
+
+#[tauri::command]
+async fn add_ytdlp_source(
+    args: AddYtdlpArgs,
+    app: AppHandle,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<StreamDescriptor, String> {
+    let url = args.url.trim();
+    if url.is_empty() {
+        return Err("url is required".to_string());
+    }
+
+    let url_string = url.to_string();
+    let url_for_task = url_string.clone();
+    let app_clone = app.clone();
+    let resolved =
+        tokio::task::spawn_blocking(move || resolve_ytdlp_stream(&app_clone, &url_for_task, None))
+            .await
+            .map_err(|err| err.to_string())
+            .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+    let mut manager = state.lock().await;
+    if !manager
+        .manual_streams
+        .iter()
+        .any(|existing| existing.id == resolved.descriptor.id)
+    {
+        manager.manual_streams.push(resolved.descriptor.clone());
+    }
+    manager
+        .manual_sources
+        .insert(resolved.descriptor.id.0.clone(), resolved.source);
+    manager.manual_source_descriptors.insert(
+        resolved.source_descriptor.id.clone(),
+        resolved.source_descriptor,
+    );
+    remember_manual_entry(
+        &mut manager,
+        &app,
+        ManualSourceEntry {
+            kind: "ytdlp".to_string(),
+            input: url_string,
+            options: None,
+        },
+    );
+    Ok(resolved.descriptor)
+}
+
+#[tauri::command]
+async fn probe_stream(args: ProbeStreamArgs, app: AppHandle) -> Result<StreamProbe, String> {
+    let input = args.input.trim().to_string();
+    if input.is_empty() {
+        return Err("input is required".to_string());
+    }
+    tokio::task::spawn_blocking(move || probe_stream_input(&app, &input))
+        .await
+        .map_err(|err| err.to_string())
+        .and_then(|res| res.map_err(|err| err.to_string()))
+}
+
+#[tauri::command]
+async fn linux_dvb_list_adapters() -> Result<Vec<LinuxDvbAdapterInfo>, String> {
+    tokio::task::spawn_blocking(move || -> Result<Vec<LinuxDvbAdapterInfo>> {
+        let adapters = ec_linux_iptv::list_adapters()?;
+        Ok(adapters
+            .into_iter()
+            .map(|info| LinuxDvbAdapterInfo {
+                adapter: info.adapter,
+                dvrs: info.dvrs,
+                frontends: info.frontends,
+            })
+            .collect())
+    })
+    .await
+    .map_err(|err| err.to_string())
+    .and_then(|res| res.map_err(|err| err.to_string()))
+}
+
+#[tauri::command]
+async fn linux_dvb_list_channels(
+    args: LinuxDvbListChannelsArgs,
+) -> Result<LinuxDvbChannelsInfo, String> {
+    tokio::task::spawn_blocking(move || -> Result<LinuxDvbChannelsInfo> {
+        let conf = args
+            .channels_conf
+            .as_deref()
+            .and_then(|value| {
+                let value = value.trim();
+                if value.is_empty() {
+                    None
+                } else {
+                    Some(PathBuf::from(value))
+                }
+            })
+            .or_else(ec_linux_iptv::find_channels_conf);
+        let channels = if let Some(path) = conf.as_deref() {
+            ec_linux_iptv::parse_channels_conf(path)?
+        } else {
+            Vec::new()
+        };
+        Ok(LinuxDvbChannelsInfo {
+            channels_conf: conf.map(|p| p.display().to_string()),
+            channels,
+        })
+    })
+    .await
+    .map_err(|err| err.to_string())
+    .and_then(|res| res.map_err(|err| err.to_string()))
+}
+
+#[tauri::command]
+async fn linux_dvb_build_url(args: LinuxDvbBuildUrlArgs) -> Result<String, String> {
+    tokio::task::spawn_blocking(move || -> Result<String> {
+        let adapter = args.adapter;
+        let dvr = args.dvr;
+        let mut tune_cmd = Vec::new();
+        if let (Some(conf), Some(channel)) =
+            (args.channels_conf.as_deref(), args.channel.as_deref())
+        {
+            let conf_path = PathBuf::from(conf);
+            tune_cmd = ec_linux_iptv::default_zap_tune_command(adapter, &conf_path, channel);
+        }
+        let config = LinuxDvbConfig {
+            adapter,
+            frontend: 0,
+            dvr,
+            tune_command: if tune_cmd.is_empty() {
+                None
+            } else {
+                Some(tune_cmd)
+            },
+            tune_timeout_ms: args.tune_wait_ms,
+        };
+        Ok(linux_dvb_url(&config))
+    })
+    .await
+    .map_err(|err| err.to_string())
+    .and_then(|res| res.map_err(|err| err.to_string()))
+}
+
+#[tauri::command]
+async fn add_stream(
+    args: AddStreamArgs,
+    app: AppHandle,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<AddStreamResult, String> {
+    let input = args.input.trim().to_string();
+    if input.is_empty() {
+        return Err("input is required".to_string());
+    }
+    let options = args.options.clone();
+    let app_clone = app.clone();
+    let input_clone = input.clone();
+    let resolved = tokio::task::spawn_blocking(move || {
+        resolve_stream_input(&app_clone, &input_clone, options)
+    })
+    .await
+    .map_err(|err| err.to_string())
+    .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+    let mut manager = state.lock().await;
+    let mut added = 0usize;
+    let mut title = None;
+    let kind = resolved.kind_name();
+    match resolved {
+        ResolvedStream::Hdhr {
+            host,
+            device,
+            streams,
+            sources,
+        } => {
+            let before = manager.manual_streams.len();
+            add_manual_entries(&mut manager, host.clone(), device.clone(), streams, sources);
+            remember_manual_entry(
+                &mut manager,
+                &app,
+                ManualSourceEntry {
+                    kind: "hdhr".to_string(),
+                    input: host,
+                    options: None,
+                },
+            );
+            let after = manager.manual_streams.len();
+            added = after.saturating_sub(before);
+        }
+        ResolvedStream::Direct { entry } => {
+            title = Some(entry.descriptor.title.clone());
+            if !manager
+                .manual_streams
+                .iter()
+                .any(|existing| existing.id == entry.descriptor.id)
+            {
+                manager.manual_streams.push(entry.descriptor.clone());
+                added = 1;
+            }
+            manager
+                .manual_sources
+                .insert(entry.descriptor.id.0.clone(), entry.source);
+            manager
+                .manual_source_descriptors
+                .insert(entry.source_descriptor.id.clone(), entry.source_descriptor);
+            remember_manual_entry(&mut manager, &app, entry.manual_entry);
+        }
+    }
+
+    Ok(AddStreamResult { kind, added, title })
+}
+
+#[tauri::command]
+async fn start_stream(
+    stream_id: String,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<PlaybackInfo, String> {
+    let (stream_url, output_dir, port) = {
+        let mut manager = state.lock().await;
+        if let Some(_process) = manager.processes.get(&stream_id) {
+            let url = playback_url(manager.port, &stream_id);
+            return Ok(PlaybackInfo { stream_id, url });
+        }
+
+        let source = manager
+            .sources
+            .get(&stream_id)
+            .or_else(|| manager.manual_sources.get(&stream_id))
+            .ok_or_else(|| format!("unknown stream {stream_id}"))
+            .cloned()?;
+
+        let output_dir = manager.output_root.join(stream_dir_name(&stream_id));
+        (source.stream_url, output_dir, manager.port)
+    };
+
+    let stream_id_clone = stream_id.clone();
+    let output_dir_clone = output_dir.clone();
+    let process = tokio::task::spawn_blocking(move || {
+        spawn_ffmpeg_cmaf_ladder(&stream_url, &output_dir_clone, DEFAULT_SEGMENT_MS, 6, true)
+    })
+    .await
+    .map_err(|err| err.to_string())
+    .and_then(|res| res.map_err(|err| err.to_string()))?;
+
+    let mut manager = state.lock().await;
+    manager.processes.insert(
+        stream_id.clone(),
+        StreamProcess {
+            _child: process,
+            _output_dir: output_dir,
+        },
+    );
+
+    Ok(PlaybackInfo {
+        stream_id: stream_id_clone.clone(),
+        url: playback_url(port, &stream_id_clone),
+    })
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct MoqStartArgs {
+    remote: String,
+    broadcast_name: String,
+    stream_id: Option<String>,
+    track_name: Option<String>,
+    /// When true, subscribe to all known variants and write a master playlist so the player can
+    /// auto-pick quality. This increases inbound bandwidth.
+    auto_quality: Option<bool>,
+    /// When set, subscribe to a specific variant id (e.g. "720p").
+    variant: Option<String>,
+    network_secret: Option<String>,
+    discovery: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct CatalogWatchArgs {
+    peers: Vec<String>,
+    discovery: Option<String>,
+}
+
+#[tauri::command]
+async fn start_catalog_watch(
+    args: CatalogWatchArgs,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<(), String> {
+    {
+        let manager = state.lock().await;
+        if manager.catalog_process.is_some() {
+            return Ok(());
+        }
+    }
+
+    let state = state.inner().clone();
+    let state_for_task = state.clone();
+    let peers = args.peers.clone();
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let task = tauri::async_runtime::spawn(async move {
+        let node = match MoqNode::bind_with_discovery(None, discovery).await {
+            Ok(node) => node,
+            Err(err) => {
+                tracing::error!("catalog gossip failed to start: {err:#}");
+                return;
+            }
+        };
+
+        let mdns = if discovery.mdns {
+            match ec_iroh::MdnsDiscovery::start(
+                node.endpoint(),
+                Some(ec_iroh::MDNS_USER_DATA),
+                true,
+            )
+            .await
+            {
+                Ok(mdns) => Some(mdns),
+                Err(err) => {
+                    tracing::warn!("mdns discovery unavailable: {err:#}");
+                    None
+                }
+            }
+        } else {
+            None
+        };
+
+        let mut peer_list = parse_gossip_peers(peers);
+        if let Some(mdns) = mdns.as_ref() {
+            match mdns.discover_peers(Duration::from_secs(2)).await {
+                Ok(found) => {
+                    for addr in found {
+                        if let Ok(encoded) = serde_json::to_string(&addr) {
+                            peer_list.push(encoded);
+                        }
+                    }
+                }
+                Err(err) => {
+                    tracing::warn!("mdns peer discovery failed: {err:#}");
+                }
+            }
+        }
+        let peer_list = merge_peer_strings(peer_list);
+
+        let mut gossip =
+            match ec_iroh::CatalogGossip::join(node.endpoint().clone(), &peer_list).await {
+                Ok(gossip) => gossip,
+                Err(err) => {
+                    tracing::error!("catalog gossip join failed: {err:#}");
+                    return;
+                }
+            };
+
+        // Keep adding newly discovered peers over time so "nearby directory" can
+        // come online without manual contact entry. This is intentionally best-effort.
+        let mdns_for_loop = mdns.clone();
+        let mut last_refresh = Instant::now() - Duration::from_secs(10);
+
+        loop {
+            if let Some(mdns) = mdns_for_loop.as_ref() {
+                if last_refresh.elapsed() >= Duration::from_secs(5) {
+                    last_refresh = Instant::now();
+                    match mdns.discover_peers(Duration::from_millis(800)).await {
+                        Ok(found) => gossip.add_peers(found),
+                        Err(err) => tracing::debug!("mdns peer refresh failed: {err:#}"),
+                    }
+                }
+            }
+
+            match gossip.next_entry().await {
+                Ok(Some(entry)) => {
+                    let descriptor = catalog_entry_to_descriptor(entry);
+                    let mut manager = state_for_task.lock().await;
+                    manager
+                        .catalog_streams
+                        .insert(descriptor.id.0.clone(), descriptor);
+                }
+                Ok(None) => break,
+                Err(err) => {
+                    tracing::warn!("catalog gossip error: {err:#}");
+                    tokio::time::sleep(Duration::from_secs(1)).await;
+                }
+            }
+        }
+
+        let _mdns = mdns;
+    });
+
+    let mut manager = state.lock().await;
+    manager.catalog_process = Some(CatalogProcess { _task: task });
+    Ok(())
+}
+
+#[tauri::command]
+async fn start_moq_stream(
+    args: MoqStartArgs,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<PlaybackInfo, String> {
+    let stream_id = args
+        .stream_id
+        .clone()
+        .unwrap_or_else(|| args.broadcast_name.clone());
+
+    let (output_dir, port) = {
+        let mut manager = state.lock().await;
+        if manager.moq_processes.contains_key(&stream_id) {
+            let url = playback_url(manager.port, &stream_id);
+            return Ok(PlaybackInfo { stream_id, url });
+        }
+        let output_dir = manager.output_root.join(stream_dir_name(&stream_id));
+        (output_dir, manager.port)
+    };
+
+    let output_dir_clone = output_dir.clone();
+    let broadcast_name = args.broadcast_name.clone();
+    let base_track_name = args
+        .track_name
+        .clone()
+        .unwrap_or_else(|| DEFAULT_TRACK_NAME.to_string());
+    let auto_quality = args.auto_quality.unwrap_or(false);
+    let variant = args.variant.clone().and_then(|v| {
+        let t = v.trim().to_string();
+        if t.is_empty() {
+            None
+        } else {
+            Some(t)
+        }
+    });
+    let remote = ec_iroh::parse_endpoint_addr(&args.remote).map_err(|err| err.to_string())?;
+    let network_secret =
+        parse_network_secret(args.network_secret).map_err(|err| err.to_string())?;
+    let stream_id_for_key = args.stream_id.clone();
+
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let node = MoqNode::bind_with_discovery(None, discovery)
+        .await
+        .map_err(|err| err.to_string())?;
+    let mdns = if discovery.mdns {
+        match ec_iroh::MdnsDiscovery::start(node.endpoint(), Some(ec_iroh::MDNS_USER_DATA), true)
+            .await
+        {
+            Ok(mdns) => Some(mdns),
+            Err(err) => {
+                tracing::warn!("mdns discovery unavailable: {err:#}");
+                None
+            }
+        }
+    } else {
+        None
+    };
+
+    struct VariantSub {
+        id: String,
+        stream: ec_moq::MoqObjectStream,
+        init_stream: Option<ec_moq::MoqObjectStream>,
+        output_dir: PathBuf,
+    }
+
+    let variants = if auto_quality {
+        let variants = default_cmaf_variants();
+        let base = base_track_name
+            .split('/')
+            .next()
+            .unwrap_or(DEFAULT_TRACK_NAME)
+            .to_string();
+        let mut subs = Vec::new();
+        for v in &variants {
+            let chunk_track = format!("{}/{}", base, v.id);
+            let init_track = format!("init/{}", v.id);
+            let init_stream = node
+                .subscribe_objects(remote.clone(), &broadcast_name, &init_track)
+                .await
+                .ok();
+            let stream = match node
+                .subscribe_objects(remote.clone(), &broadcast_name, &chunk_track)
+                .await
+            {
+                Ok(s) => s,
+                Err(err) => {
+                    tracing::warn!("variant {} subscribe failed: {err:#}", v.id);
+                    continue;
+                }
+            };
+            subs.push(VariantSub {
+                id: v.id.to_string(),
+                stream,
+                init_stream,
+                output_dir: output_dir_clone.join(v.id),
+            });
+        }
+        Some((variants, subs))
+    } else {
+        None
+    };
+
+    let (single_stream, single_init_stream) = if !auto_quality {
+        let base = base_track_name
+            .split('/')
+            .next()
+            .unwrap_or(DEFAULT_TRACK_NAME)
+            .to_string();
+        let (track_name, init_track) = if let Some(v) = variant.as_deref() {
+            (format!("{base}/{v}"), format!("init/{v}"))
+        } else {
+            let track = base_track_name.clone();
+            let init = if let Some(suffix) = track.split('/').last() {
+                if track.contains('/') && !suffix.is_empty() {
+                    format!("init/{suffix}")
+                } else {
+                    "init".to_string()
+                }
+            } else {
+                "init".to_string()
+            };
+            (track, init)
+        };
+        let init_stream = node
+            .subscribe_objects(remote.clone(), &broadcast_name, &init_track)
+            .await
+            .ok();
+        let stream = node
+            .subscribe_objects(remote.clone(), &broadcast_name, &track_name)
+            .await
+            .map_err(|err| err.to_string())?;
+        (Some(stream), init_stream)
+    } else {
+        (None, None)
+    };
+
+    let task = tauri::async_runtime::spawn(async move {
+        async fn run_variant(
+            mut stream: ec_moq::MoqObjectStream,
+            mut init_stream: Option<ec_moq::MoqObjectStream>,
+            output_dir: PathBuf,
+            broadcast_name: String,
+            stream_id_for_key: Option<String>,
+            network_secret: Option<Vec<u8>>,
+        ) {
+            let mut hls = match HlsWriter::new_cmaf(&output_dir, 2.0, 6) {
+                Ok(hls) => hls,
+                Err(err) => {
+                    tracing::error!("failed to create hls writer: {err:#}");
+                    return;
+                }
+            };
+            let fallback = Duration::from_millis(2000);
+            let mut fallback_index = 0u64;
+            let mut init_ready = false;
+            let mut buffered: Vec<(u64, f64, Vec<u8>)> = Vec::new();
+
+            loop {
+                tokio::select! {
+                    biased;
+                    init_obj = async { if let Some(s) = init_stream.as_mut() { s.recv().await } else { None } }, if !init_ready && init_stream.is_some() => {
+                        let Some(object) = init_obj else {
+                            init_stream = None;
+                            continue;
+                        };
+                        let index = object.meta.timing.as_ref().map(|t| t.chunk_index).unwrap_or(0);
+                        let key_id = object.meta.encryption.as_ref().map(|enc| enc.key_id.as_str()).unwrap_or(&broadcast_name);
+                        let init = if let Some(enc) = &object.meta.encryption {
+                            if enc.alg != ENCRYPTION_ALG {
+                                tracing::warn!("init: unsupported encryption {}", enc.alg);
+                                continue;
+                            }
+                            match decrypt_stream_data(key_id, index, &object.data, network_secret.as_deref()) {
+                                Some(plaintext) => plaintext,
+                                None => {
+                                    tracing::warn!("init: decryption failed");
+                                    continue;
+                                }
+                            }
+                        } else {
+                            object.data
+                        };
+                        if let Err(err) = hls.write_init_segment(&init) {
+                            tracing::warn!("failed to write init segment: {err:#}");
+                            continue;
+                        }
+                        init_ready = true;
+                        buffered.sort_by_key(|(idx, _, _)| *idx);
+                        for (idx, dur, bytes) in buffered.drain(..) {
+                            if let Err(err) = hls.write_segment(idx, dur, &bytes) {
+                                tracing::warn!("failed to write buffered segment: {err:#}");
+                            }
+                        }
+                        continue;
+                    }
+                    obj = stream.recv() => {
+                        let Some(object) = obj else { break; };
+                        let index = object
+                            .meta
+                            .timing
+                            .as_ref()
+                            .map(|t| t.chunk_index)
+                            .unwrap_or_else(|| {
+                                let current = fallback_index;
+                                fallback_index += 1;
+                                current
+                            });
+
+                        let stream_id = stream_id_for_key
+                            .as_deref()
+                            .or_else(|| object.meta.encryption.as_ref().map(|enc| enc.key_id.as_str()))
+                            .unwrap_or(&broadcast_name);
+
+                        let data = if let Some(enc) = &object.meta.encryption {
+                            if enc.alg != ENCRYPTION_ALG {
+                                tracing::warn!("unsupported encryption {}", enc.alg);
+                                continue;
+                            }
+                            match decrypt_stream_data(stream_id, index, &object.data, network_secret.as_deref()) {
+                                Some(plaintext) => plaintext,
+                                None => {
+                                    tracing::warn!("decryption failed for chunk {}", index);
+                                    continue;
+                                }
+                            }
+                        } else {
+                            object.data
+                        };
+
+                        let duration = chunk_duration_secs(&object.meta, fallback);
+                        if !init_ready {
+                            buffered.push((index, duration, data));
+                            continue;
+                        }
+                        if let Err(err) = hls.write_segment(index, duration, &data) {
+                            tracing::warn!("failed to write hls segment: {err:#}");
+                        }
+                    }
+                }
+            }
+        }
+
+        if auto_quality {
+            let Some((variants, subs)) = variants else {
+                tracing::warn!("auto quality enabled, but no variant subscriptions were created");
+                return;
+            };
+            if let Err(err) = write_hls_master_playlist(&output_dir_clone, &variants, 128_000) {
+                tracing::warn!("failed to write master playlist: {err:#}");
+            }
+            let mut handles = Vec::new();
+            for sub in subs {
+                let out = sub.output_dir;
+                let b = broadcast_name.clone();
+                let sid = stream_id_for_key.clone();
+                let secret = network_secret.clone();
+                handles.push(tokio::spawn(async move {
+                    run_variant(sub.stream, sub.init_stream, out, b, sid, secret).await
+                }));
+            }
+            for h in handles {
+                let _ = h.await;
+            }
+            return;
+        }
+
+        let Some(stream) = single_stream else {
+            return;
+        };
+        run_variant(
+            stream,
+            single_init_stream,
+            output_dir_clone,
+            broadcast_name,
+            stream_id_for_key,
+            network_secret,
+        )
+        .await;
+    });
+
+    let mut manager = state.lock().await;
+    manager.moq_processes.insert(
+        stream_id.clone(),
+        MoqStreamProcess {
+            _task: task,
+            _node: node,
+            _output_dir: output_dir,
+            _mdns: mdns,
+        },
+    );
+
+    Ok(PlaybackInfo {
+        stream_id: stream_id.clone(),
+        url: playback_url(port, &stream_id),
+    })
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct MoqPublishArgs {
+    stream_id: String,
+    network_secret: Option<String>,
+    chunk_ms: Option<u64>,
+    announce: bool,
+    gossip_peers: Vec<String>,
+    discovery: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct ShareInfo {
+    stream_id: String,
+    endpoint_addr: String,
+    endpoint_id: String,
+    broadcast_name: String,
+    track_name: String,
+    discovery: Option<String>,
+    announce_status: Option<String>,
+}
+
+#[tauri::command]
+async fn start_moq_publish(
+    args: MoqPublishArgs,
+    state: State<'_, Arc<Mutex<StreamManager>>>,
+) -> Result<ShareInfo, String> {
+    let (stream_url, output_dir, stream_id, chunk_ms, descriptor) = {
+        let mut manager = state.lock().await;
+        if let Some(existing) = manager.moq_publishes.get(&args.stream_id) {
+            return Ok(existing.share.clone());
+        }
+
+        let source = manager
+            .sources
+            .get(&args.stream_id)
+            .or_else(|| manager.manual_sources.get(&args.stream_id))
+            .ok_or_else(|| format!("unknown stream {}", args.stream_id))
+            .cloned()?;
+        let descriptor = manager
+            .streams
+            .iter()
+            .chain(manager.manual_streams.iter())
+            .find(|stream| stream.id.0 == args.stream_id)
+            .cloned()
+            .unwrap_or_else(|| StreamDescriptor {
+                id: StreamId(args.stream_id.clone()),
+                title: source.title.clone(),
+                number: source.number.clone(),
+                source: "source".to_string(),
+                metadata: source.metadata.clone(),
+            });
+        let output_dir = manager
+            .output_root
+            .join("publish")
+            .join(stream_dir_name(&args.stream_id));
+        (
+            source.stream_url,
+            output_dir,
+            args.stream_id.clone(),
+            args.chunk_ms.unwrap_or(DEFAULT_SEGMENT_MS),
+            descriptor,
+        )
+    };
+
+    fs::create_dir_all(&output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))
+        .map_err(|err| err.to_string())?;
+
+    let variants = default_cmaf_variants();
+    let init_track_prefix = "init".to_string();
+    let chunks_track_prefix = DEFAULT_TRACK_NAME.to_string();
+    let manifest_track_name = DEFAULT_MANIFEST_TRACK_NAME.to_string();
+
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let node = MoqNode::bind_with_discovery(None, discovery)
+        .await
+        .map_err(|err| err.to_string())?;
+    let mdns = if discovery.mdns {
+        match ec_iroh::MdnsDiscovery::start(node.endpoint(), Some(ec_iroh::MDNS_USER_DATA), true)
+            .await
+        {
+            Ok(mdns) => Some(mdns),
+            Err(err) => {
+                tracing::warn!("mdns discovery unavailable: {err:#}");
+                None
+            }
+        }
+    } else {
+        None
+    };
+    let endpoint = node.endpoint().clone();
+    let endpoint_id = node.endpoint().id().to_string();
+    let endpoint_addr = serde_json::to_string(&node.endpoint_addr())
+        .unwrap_or_else(|_| node.endpoint().id().to_string());
+    let broadcast_name = stream_id.clone();
+    let track_name = chunks_track_prefix.clone();
+
+    let mut object_tracks = Vec::new();
+    // Back-compat: also publish a single default variant on the base tracks so simple links
+    // (track=chunks) still work.
+    object_tracks.push(chunks_track_prefix.clone());
+    object_tracks.push(init_track_prefix.clone());
+    for variant in &variants {
+        object_tracks.push(format!("{}/{}", chunks_track_prefix, variant.id));
+        object_tracks.push(format!("{}/{}", init_track_prefix, variant.id));
+    }
+    let mut publish_set = node
+        .publish_track_set(
+            &broadcast_name,
+            object_tracks,
+            vec![manifest_track_name.clone()],
+        )
+        .await
+        .map_err(|err| err.to_string())?;
+
+    let network_secret =
+        parse_network_secret(args.network_secret).map_err(|err| err.to_string())?;
+
+    let share = ShareInfo {
+        stream_id: stream_id.clone(),
+        endpoint_addr: endpoint_addr.clone(),
+        endpoint_id,
+        broadcast_name: broadcast_name.clone(),
+        track_name: track_name.clone(),
+        discovery: args.discovery.clone(),
+        announce_status: None,
+    };
+
+    let stream_id_for_key = stream_id.clone();
+    let share_for_task = share.clone();
+    let task = tauri::async_runtime::spawn_blocking(move || {
+        let result: Result<(), String> = (|| {
+            // Spawn FFmpeg ladder segmenter and publish init+segments as encrypted objects.
+            let mut child = spawn_ffmpeg_cmaf_ladder(&stream_url, &output_dir, chunk_ms, 0, false)
+                .map_err(|err| err.to_string())?;
+
+            for variant in &variants {
+                let init_path = output_dir.join(variant.id).join("init.mp4");
+                wait_for_stable_file(&init_path, Duration::from_secs(20))
+                    .map_err(|err| err.to_string())?;
+                let data = fs::read(&init_path).map_err(|err| err.to_string())?;
+                let key_id = format!(
+                    "{}/init",
+                    derive_variant_stream_id(&stream_id_for_key, variant.id)
+                );
+                let object = build_object_bytes(
+                    &key_id,
+                    0,
+                    0,
+                    "init",
+                    data,
+                    network_secret.as_deref(),
+                    "video/mp4",
+                    None,
+                )
+                .map_err(|err| err.to_string())?;
+                let base_copy = object.clone();
+                publish_set
+                    .publish_object(
+                        &format!("{}/{}", init_track_prefix, variant.id),
+                        GroupId(0),
+                        object,
+                    )
+                    .map_err(|err| err.to_string())?;
+                if variant.id == "720p" {
+                    publish_set
+                        .publish_object(&init_track_prefix, GroupId(0), base_copy)
+                        .map_err(|err| err.to_string())?;
+                }
+            }
+
+            let mut manifest_seq: u64 = 0;
+            let mut index: u64 = 0;
+            loop {
+                let mut per_variant_hash = Vec::new();
+                let mut per_variant_data = Vec::new();
+                for variant in &variants {
+                    let seg_path = output_dir
+                        .join(variant.id)
+                        .join(format!("segment_{index:06}.m4s"));
+                    match wait_for_stable_file(&seg_path, Duration::from_secs(30)) {
+                        Ok(()) => {}
+                        Err(err) => {
+                            if let Ok(Some(status)) = child.try_wait() {
+                                if status.success() {
+                                    return Ok(());
+                                }
+                                return Err(format!("ffmpeg exited with {status} ({err:#})"));
+                            }
+                            return Err(err.to_string());
+                        }
+                    }
+                    let data = fs::read(&seg_path).map_err(|err| err.to_string())?;
+                    let hash = blake3::hash(&data).to_hex().to_string();
+                    per_variant_hash.push((variant.id.to_string(), hash));
+                    per_variant_data.push((variant, data));
+                }
+
+                let manifest = build_multi_variant_manifest(
+                    &stream_id_for_key,
+                    chunk_ms,
+                    index,
+                    &variants,
+                    &per_variant_hash,
+                )
+                .map_err(|err| err.to_string())?;
+
+                publish_set
+                    .publish_manifest(&manifest_track_name, manifest_seq, &manifest)
+                    .map_err(|err| err.to_string())?;
+                manifest_seq += 1;
+
+                for (variant, data) in per_variant_data {
+                    let key_id = derive_variant_stream_id(&stream_id_for_key, variant.id);
+                    let object = build_object_bytes(
+                        &key_id,
+                        index,
+                        chunk_ms * 27_000,
+                        "cmaf",
+                        data,
+                        network_secret.as_deref(),
+                        "video/iso.segment",
+                        Some(&manifest.manifest_id),
+                    )
+                    .map_err(|err| err.to_string())?;
+                    let base_copy = object.clone();
+                    publish_set
+                        .publish_object(
+                            &format!("{}/{}", chunks_track_prefix, variant.id),
+                            GroupId(index + 1),
+                            object,
+                        )
+                        .map_err(|err| err.to_string())?;
+                    if variant.id == "720p" {
+                        publish_set
+                            .publish_object(&chunks_track_prefix, GroupId(index + 1), base_copy)
+                            .map_err(|err| err.to_string())?;
+                    }
+                }
+
+                index += 1;
+            }
+        })();
+
+        if let Err(err) = result {
+            tracing::warn!("moq publish task ended: {err}");
+        }
+    });
+
+    let mut manager = state.lock().await;
+    manager.moq_publishes.insert(
+        stream_id.clone(),
+        MoqPublishProcess {
+            _task: task,
+            _node: node,
+            _mdns: mdns.clone(),
+            share: share_for_task,
+        },
+    );
+
+    let mut share = share;
+    if args.announce {
+        let mut peers = parse_gossip_peers(args.gossip_peers);
+        if let Some(mdns) = mdns.as_ref() {
+            match mdns.discover_peers(Duration::from_secs(2)).await {
+                Ok(found) => {
+                    for addr in found {
+                        if let Ok(encoded) = serde_json::to_string(&addr) {
+                            peers.push(encoded);
+                        }
+                    }
+                }
+                Err(err) => {
+                    tracing::warn!("mdns peer discovery failed: {err:#}");
+                }
+            }
+        }
+        let peers = merge_peer_strings(peers);
+        if peers.is_empty() {
+            share.announce_status = Some("no gossip peers configured".to_string());
+            return Ok(share);
+        }
+        let entry = build_catalog_entry(&descriptor, &endpoint_addr, &broadcast_name, &track_name);
+        match ec_iroh::CatalogGossip::join(endpoint.clone(), &peers).await {
+            Ok(mut gossip) => match gossip.announce(entry).await {
+                Ok(_) => share.announce_status = Some("announced".to_string()),
+                Err(err) => share.announce_status = Some(format!("announce failed: {err}")),
+            },
+            Err(err) => {
+                share.announce_status = Some(format!("gossip join failed: {err}"));
+            }
+        }
+    }
+
+    Ok(share)
+}
+
+async fn load_persisted_manual_sources(
+    app: AppHandle,
+    state: Arc<Mutex<StreamManager>>,
+) -> Result<()> {
+    let entries = load_manual_sources(&app)?;
+    if entries.is_empty() {
+        let mut manager = state.lock().await;
+        manager.manual_entries_loaded = true;
+        return Ok(());
+    }
+
+    {
+        let mut manager = state.lock().await;
+        if manager.manual_entries_loaded {
+            return Ok(());
+        }
+        manager.manual_entries_loaded = true;
+        manager.manual_entries = entries.clone();
+    }
+
+    for entry in entries {
+        match entry.kind.as_str() {
+            "hdhr" => {
+                let host = entry.input.clone();
+                let result = tokio::task::spawn_blocking(move || hydrate_hdhr_host(&host))
+                    .await
+                    .map_err(|err| anyhow!("manual host task failed: {err}"))?;
+                match result {
+                    Ok((device, streams, sources)) => {
+                        let mut manager = state.lock().await;
+                        add_manual_entries(&mut manager, entry.input, device, streams, sources);
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to load manual HDHomeRun {}: {err:#}", entry.input);
+                    }
+                }
+            }
+            "ytdlp" => {
+                let app_clone = app.clone();
+                let entry_clone = entry.clone();
+                let result = tokio::task::spawn_blocking(move || {
+                    resolve_ytdlp_stream(
+                        &app_clone,
+                        &entry_clone.input,
+                        entry_clone.options.clone(),
+                    )
+                })
+                .await
+                .map_err(|err| anyhow!("manual yt-dlp task failed: {err}"))?;
+                match result {
+                    Ok(resolved) => {
+                        let mut manager = state.lock().await;
+                        if !manager
+                            .manual_streams
+                            .iter()
+                            .any(|existing| existing.id == resolved.descriptor.id)
+                        {
+                            manager.manual_streams.push(resolved.descriptor.clone());
+                        }
+                        manager
+                            .manual_sources
+                            .insert(resolved.descriptor.id.0.clone(), resolved.source);
+                        manager.manual_source_descriptors.insert(
+                            resolved.source_descriptor.id.clone(),
+                            resolved.source_descriptor,
+                        );
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to load yt-dlp source {}: {err:#}", entry.input);
+                    }
+                }
+            }
+            "hls" => {
+                let entry_clone = entry.clone();
+                let result =
+                    tokio::task::spawn_blocking(move || resolve_hls_stream(&entry_clone.input))
+                        .await
+                        .map_err(|err| anyhow!("manual hls task failed: {err}"))?;
+                match result {
+                    Ok(resolved) => {
+                        let mut manager = state.lock().await;
+                        if !manager
+                            .manual_streams
+                            .iter()
+                            .any(|existing| existing.id == resolved.descriptor.id)
+                        {
+                            manager.manual_streams.push(resolved.descriptor.clone());
+                        }
+                        manager
+                            .manual_sources
+                            .insert(resolved.descriptor.id.0.clone(), resolved.source);
+                        manager.manual_source_descriptors.insert(
+                            resolved.source_descriptor.id.clone(),
+                            resolved.source_descriptor,
+                        );
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to load hls source {}: {err:#}", entry.input);
+                    }
+                }
+            }
+            "linux-dvb" => {
+                let entry_clone = entry.clone();
+                let result = tokio::task::spawn_blocking(move || {
+                    let url = Url::parse(&entry_clone.input).context("invalid linux-dvb url")?;
+                    resolve_linux_dvb_stream(&url)
+                })
+                .await
+                .map_err(|err| anyhow!("manual linux-dvb task failed: {err}"))?;
+                match result {
+                    Ok(resolved) => {
+                        let mut manager = state.lock().await;
+                        if !manager
+                            .manual_streams
+                            .iter()
+                            .any(|existing| existing.id == resolved.descriptor.id)
+                        {
+                            manager.manual_streams.push(resolved.descriptor.clone());
+                        }
+                        manager
+                            .manual_sources
+                            .insert(resolved.descriptor.id.0.clone(), resolved.source);
+                        manager.manual_source_descriptors.insert(
+                            resolved.source_descriptor.id.clone(),
+                            resolved.source_descriptor,
+                        );
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to load linux-dvb source {}: {err:#}", entry.input);
+                    }
+                }
+            }
+            other => {
+                tracing::warn!("unknown manual source kind {other}");
+            }
+        }
+    }
+
+    Ok(())
+}
+
+fn main() -> Result<()> {
+    let output_root = std::env::temp_dir().join("every.channel").join("streams");
+    fs::create_dir_all(&output_root)?;
+
+    let port = tauri::async_runtime::block_on(start_http_server(output_root.clone()))?;
+    let manager = StreamManager::new(port, output_root);
+
+    tauri::Builder::default()
+        .manage(Arc::new(Mutex::new(manager)))
+        .setup(|app| {
+            let app_handle = app.handle().clone();
+            let state = app.state::<Arc<Mutex<StreamManager>>>().inner().clone();
+            tauri::async_runtime::spawn(async move {
+                if let Err(err) = load_persisted_manual_sources(app_handle, state).await {
+                    tracing::warn!("manual sources load failed: {err:#}");
+                }
+            });
+            Ok(())
+        })
+        .invoke_handler(tauri::generate_handler![
+            list_streams,
+            refresh_streams,
+            list_sources,
+            add_hdhr_source,
+            add_ytdlp_source,
+            probe_stream,
+            linux_dvb_list_adapters,
+            linux_dvb_list_channels,
+            linux_dvb_build_url,
+            add_stream,
+            start_stream,
+            start_moq_stream,
+            start_moq_publish,
+            start_catalog_watch
+        ])
+        .run(tauri::generate_context!())
+        .expect("tauri runtime error");
+
+    Ok(())
+}
+
+async fn start_http_server(output_root: PathBuf) -> Result<u16> {
+    let router = Router::new().nest_service("/streams", ServeDir::new(output_root));
+    let listener = tokio::net::TcpListener::bind("127.0.0.1:0").await?;
+    let port = listener.local_addr()?.port();
+
+    tauri::async_runtime::spawn(async move {
+        let _ = axum::serve(listener, router).await;
+    });
+
+    Ok(port)
+}
+
+fn playback_url(port: u16, stream_id: &str) -> String {
+    let dir = stream_dir_name(stream_id);
+    format!("http://127.0.0.1:{port}/streams/{dir}/index.m3u8")
+}
+
+fn stream_dir_name(stream_id: &str) -> String {
+    stream_id
+        .chars()
+        .map(|c| if c.is_ascii_alphanumeric() { c } else { '_' })
+        .collect::<String>()
+}
+
+fn discover_streams() -> Result<(Vec<StreamDescriptor>, HashMap<String, StreamSource>)> {
+    let devices = ec_hdhomerun::discover()?;
+    let mut streams = Vec::new();
+    let mut sources = HashMap::new();
+    let mut seen_devices = HashSet::new();
+    let mut seen_streams = HashSet::new();
+
+    for device in devices {
+        let device_key = if !device.id.0.is_empty() && device.id.0 != "unknown" {
+            format!("id:{}", device.id.0)
+        } else {
+            format!("ip:{}", device.ip)
+        };
+        if !seen_devices.insert(device_key) {
+            continue;
+        }
+        let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+        for entry in lineup {
+            let (descriptor, source) = descriptor_from_lineup(&device, &entry);
+            let id = descriptor.id.0.clone();
+            if !seen_streams.insert(id.clone()) {
+                continue;
+            }
+            streams.push(descriptor);
+            sources.insert(id, source);
+        }
+    }
+
+    // Linux DVB: if adapters exist and we can find a channels.conf, expose each channel as a
+    // stream without requiring manual "add stream" input. Actual scanning is out of scope here;
+    // we only consume an existing channels.conf.
+    if let (Ok(adapters), Some(conf_path)) = (
+        ec_linux_iptv::list_adapters(),
+        ec_linux_iptv::find_channels_conf(),
+    ) {
+        if let Ok(channels) = ec_linux_iptv::parse_channels_conf(&conf_path) {
+            for adapter in adapters {
+                let dvr = adapter.dvrs.first().copied().unwrap_or(0);
+                for channel in channels.iter() {
+                    let tune_cmd = ec_linux_iptv::default_zap_tune_command(
+                        adapter.adapter,
+                        &conf_path,
+                        channel,
+                    );
+                    let config = LinuxDvbConfig {
+                        adapter: adapter.adapter,
+                        frontend: 0,
+                        dvr,
+                        tune_command: Some(tune_cmd),
+                        tune_timeout_ms: Some(800),
+                    };
+                    let stream_url = linux_dvb_url(&config);
+
+                    let stream_id = StreamKey {
+                        version: 1,
+                        broadcast: None,
+                        source: Some(SourceId {
+                            kind: "linux-dvb".to_string(),
+                            device_id: Some(format!("adapter{}:dvr{}", adapter.adapter, dvr)),
+                            channel: Some(channel.clone()),
+                        }),
+                        profile: None,
+                        variant: None,
+                    }
+                    .to_stream_id();
+
+                    let id = stream_id.0.clone();
+                    if !seen_streams.insert(id.clone()) {
+                        continue;
+                    }
+
+                    let mut metadata = Vec::new();
+                    metadata.push(StreamMetadata {
+                        key: "adapter".to_string(),
+                        value: adapter.adapter.to_string(),
+                    });
+                    metadata.push(StreamMetadata {
+                        key: "dvr".to_string(),
+                        value: dvr.to_string(),
+                    });
+                    metadata.push(StreamMetadata {
+                        key: "channel".to_string(),
+                        value: channel.clone(),
+                    });
+                    metadata.push(StreamMetadata {
+                        key: "channels_conf".to_string(),
+                        value: conf_path.display().to_string(),
+                    });
+
+                    let descriptor = StreamDescriptor {
+                        id: stream_id,
+                        title: channel.clone(),
+                        number: None,
+                        source: "linux-dvb".to_string(),
+                        metadata: metadata.clone(),
+                    };
+                    let source = StreamSource {
+                        stream_url,
+                        title: descriptor.title.clone(),
+                        number: None,
+                        metadata,
+                    };
+                    streams.push(descriptor);
+                    sources.insert(id, source);
+                }
+            }
+        }
+    }
+
+    Ok((streams, sources))
+}
+
+fn descriptor_from_lineup(
+    device: &HdhomerunDevice,
+    entry: &LineupEntry,
+) -> (StreamDescriptor, StreamSource) {
+    let stream_id = StreamKey {
+        version: 1,
+        broadcast: None,
+        source: Some(SourceId {
+            kind: "hdhr".to_string(),
+            device_id: Some(device.id.0.clone()),
+            channel: entry
+                .channel
+                .number
+                .clone()
+                .or_else(|| Some(entry.channel.id.0.clone())),
+        }),
+        profile: None,
+        variant: None,
+    }
+    .to_stream_id();
+
+    let mut metadata = Vec::new();
+    metadata.push(StreamMetadata {
+        key: "device_id".to_string(),
+        value: device.id.0.clone(),
+    });
+    metadata.push(StreamMetadata {
+        key: "device_ip".to_string(),
+        value: device.ip.clone(),
+    });
+
+    for channel_meta in &entry.channel.metadata {
+        match channel_meta {
+            ec_core::ChannelMetadata::Callsign(value) => metadata.push(StreamMetadata {
+                key: "callsign".to_string(),
+                value: value.clone(),
+            }),
+            ec_core::ChannelMetadata::Network(value) => metadata.push(StreamMetadata {
+                key: "network".to_string(),
+                value: value.clone(),
+            }),
+            ec_core::ChannelMetadata::Region(value) => metadata.push(StreamMetadata {
+                key: "region".to_string(),
+                value: value.clone(),
+            }),
+            ec_core::ChannelMetadata::Frequency(value) => metadata.push(StreamMetadata {
+                key: "frequency".to_string(),
+                value: value.clone(),
+            }),
+            ec_core::ChannelMetadata::Extra(key, value) => metadata.push(StreamMetadata {
+                key: key.clone(),
+                value: value.clone(),
+            }),
+        }
+    }
+
+    if is_drm_entry(entry) {
+        metadata.push(StreamMetadata {
+            key: "drm".to_string(),
+            value: "likely".to_string(),
+        });
+    }
+
+    let title = entry.channel.name.clone();
+
+    let descriptor = StreamDescriptor {
+        id: stream_id.clone(),
+        title: title.clone(),
+        number: entry.channel.number.clone(),
+        source: "hdhr".to_string(),
+        metadata: metadata.clone(),
+    };
+
+    let source = StreamSource {
+        stream_url: entry.stream_url.clone(),
+        title,
+        number: entry.channel.number.clone(),
+        metadata,
+    };
+
+    (descriptor, source)
+}
+
+fn is_drm_entry(entry: &LineupEntry) -> bool {
+    fn looks_drm(value: &str) -> bool {
+        let value = value.to_lowercase();
+        value.contains("drm")
+            || value.contains("encrypted")
+            || value.contains("protected")
+            || value.contains("copy")
+            || value.contains("widevine")
+    }
+
+    if entry.tags.iter().any(|tag| looks_drm(tag)) {
+        return true;
+    }
+
+    if let Some(obj) = entry.raw.as_object() {
+        for (key, value) in obj.iter() {
+            if looks_drm(key) || looks_drm(&value.to_string()) {
+                return true;
+            }
+        }
+    }
+
+    false
+}
+
+fn discover_sources() -> Result<Vec<SourceDescriptor>> {
+    let devices = ec_hdhomerun::discover()?;
+    let mut by_key: HashMap<String, HdhomerunDevice> = HashMap::new();
+    for device in devices {
+        let key = device_key(&device);
+        by_key.entry(key).or_insert(device);
+    }
+    let mut sources = by_key
+        .into_values()
+        .map(|device| source_descriptor_for_device(&device, "online"))
+        .collect::<Vec<_>>();
+
+    if let Ok(adapters) = ec_linux_iptv::list_adapters() {
+        for info in adapters {
+            sources.push(SourceDescriptor {
+                id: format!("linux-dvb:adapter{}", info.adapter),
+                kind: "linux-dvb".to_string(),
+                name: format!("Linux DVB adapter{}", info.adapter),
+                ip: None,
+                tuner_count: Some(info.frontends.len().min(u8::MAX as usize) as u8),
+                status: "online".to_string(),
+            });
+        }
+    }
+
+    Ok(sources)
+}
+
+fn merge_source_descriptors<'a, I>(
+    mut sources: Vec<SourceDescriptor>,
+    devices: I,
+) -> Vec<SourceDescriptor>
+where
+    I: IntoIterator<Item = (&'a String, &'a HdhomerunDevice)>,
+{
+    let mut seen: HashSet<String> = sources
+        .iter()
+        .map(|source| {
+            if !source.id.is_empty() && source.id != "unknown" {
+                format!("id:{}", source.id)
+            } else {
+                format!("ip:{}", source.ip.clone().unwrap_or_default())
+            }
+        })
+        .collect();
+
+    for (host, device) in devices {
+        // Manual HDHomeRun entries are aliases, not distinct devices. Deduplicate by device id when
+        // possible so the Sources panel does not show the same tuner multiple times.
+        let key = device_key(device);
+        if key.starts_with("id:") {
+            if !seen.insert(key) {
+                continue;
+            }
+            sources.push(source_descriptor_for_device_with_id(
+                device,
+                "manual",
+                device.id.0.clone(),
+            ));
+            continue;
+        }
+
+        let key = manual_source_id(host, device);
+        if seen.insert(format!("id:{key}")) {
+            sources.push(source_descriptor_for_device_with_id(device, "manual", key));
+        }
+    }
+
+    sources
+}
+
+fn device_key(device: &HdhomerunDevice) -> String {
+    if !device.id.0.is_empty() && device.id.0 != "unknown" {
+        format!("id:{}", device.id.0)
+    } else {
+        format!("ip:{}", device.ip)
+    }
+}
+
+fn source_descriptor_for_device(device: &HdhomerunDevice, status: &str) -> SourceDescriptor {
+    source_descriptor_for_device_with_id(device, status, device.id.0.clone())
+}
+
+fn source_descriptor_for_device_with_id(
+    device: &HdhomerunDevice,
+    status: &str,
+    id: String,
+) -> SourceDescriptor {
+    SourceDescriptor {
+        id,
+        kind: "hdhr".to_string(),
+        name: device.friendly_name.clone().unwrap_or_else(|| {
+            device
+                .model_number
+                .clone()
+                .unwrap_or_else(|| "HDHomeRun".to_string())
+        }),
+        ip: Some(device.ip.clone()),
+        tuner_count: Some(device.tuner_count),
+        status: status.to_string(),
+    }
+}
+
+fn manual_source_id(host: &str, device: &HdhomerunDevice) -> String {
+    if !device.id.0.is_empty() && device.id.0 != "unknown" {
+        format!("{}@{}", device.id.0, host)
+    } else {
+        host.to_string()
+    }
+}
+
+fn normalize_host(host: &str) -> String {
+    let trimmed = host.trim();
+    let stripped = trimmed
+        .strip_prefix("http://")
+        .or_else(|| trimmed.strip_prefix("https://"))
+        .unwrap_or(trimmed);
+    let stripped = stripped.trim_end_matches('/');
+    stripped
+        .split('/')
+        .next()
+        .unwrap_or(stripped)
+        .trim()
+        .to_string()
+}
+
+fn remember_manual_entry(manager: &mut StreamManager, app: &AppHandle, entry: ManualSourceEntry) {
+    let Some(entry) = normalize_manual_entry(entry) else {
+        return;
+    };
+    if !manager
+        .manual_entries
+        .iter()
+        .any(|existing| existing == &entry)
+    {
+        manager.manual_entries.push(entry);
+        if let Err(err) = save_manual_sources(app, &manager.manual_entries) {
+            tracing::warn!("failed to persist manual sources: {err:#}");
+        }
+    }
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct YtDlpFormat {
+    format_id: Option<String>,
+    format: Option<String>,
+    format_note: Option<String>,
+    url: Option<String>,
+    protocol: Option<String>,
+    tbr: Option<f64>,
+    height: Option<u64>,
+    width: Option<u64>,
+    fps: Option<f64>,
+    ext: Option<String>,
+    vcodec: Option<String>,
+    acodec: Option<String>,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct YtDlpInfo {
+    id: Option<String>,
+    title: Option<String>,
+    webpage_url: Option<String>,
+    is_live: Option<bool>,
+    live_status: Option<String>,
+    extractor: Option<String>,
+    extractor_key: Option<String>,
+    formats: Option<Vec<YtDlpFormat>>,
+    url: Option<String>,
+}
+
+struct ResolvedDirectStream {
+    descriptor: StreamDescriptor,
+    source: StreamSource,
+    source_descriptor: SourceDescriptor,
+    manual_entry: ManualSourceEntry,
+}
+
+enum ResolvedStream {
+    Hdhr {
+        host: String,
+        device: HdhomerunDevice,
+        streams: Vec<StreamDescriptor>,
+        sources: HashMap<String, StreamSource>,
+    },
+    Direct {
+        entry: ResolvedDirectStream,
+    },
+}
+
+impl ResolvedStream {
+    fn kind_name(&self) -> String {
+        match self {
+            ResolvedStream::Hdhr { .. } => "hdhr".to_string(),
+            ResolvedStream::Direct { entry } => entry.manual_entry.kind.clone(),
+        }
+    }
+}
+
+fn resolve_ytdlp_stream(
+    app: &AppHandle,
+    url: &str,
+    options: Option<ManualSourceOptions>,
+) -> Result<ResolvedDirectStream> {
+    let info = run_ytdlp_json(app, url, options.as_ref())?;
+    if !is_ytdlp_live(&info) {
+        return Err(anyhow!("yt-dlp stream is not live"));
+    }
+    let stream_url = pick_ytdlp_stream_url(&info)
+        .ok_or_else(|| anyhow!("yt-dlp did not return a usable stream url"))?;
+    let stream_id = StreamKey {
+        version: 1,
+        broadcast: None,
+        source: Some(SourceId {
+            kind: "ytdlp".to_string(),
+            device_id: info.id.clone(),
+            channel: Some(info.webpage_url.clone().unwrap_or_else(|| url.to_string())),
+        }),
+        profile: Some("hls".to_string()),
+        variant: None,
+    }
+    .to_stream_id();
+
+    let title = info
+        .title
+        .clone()
+        .unwrap_or_else(|| "yt-dlp stream".to_string());
+    let mut metadata = Vec::new();
+    metadata.push(StreamMetadata {
+        key: "source_kind".to_string(),
+        value: "ytdlp".to_string(),
+    });
+    metadata.push(StreamMetadata {
+        key: "origin_url".to_string(),
+        value: info.webpage_url.clone().unwrap_or_else(|| url.to_string()),
+    });
+    if let Some(id) = info.id.clone() {
+        metadata.push(StreamMetadata {
+            key: "ytdlp_id".to_string(),
+            value: id,
+        });
+    }
+    if let Some(live) = info.is_live {
+        metadata.push(StreamMetadata {
+            key: "is_live".to_string(),
+            value: live.to_string(),
+        });
+    }
+
+    let descriptor = StreamDescriptor {
+        id: stream_id.clone(),
+        title: title.clone(),
+        number: None,
+        source: "ytdlp".to_string(),
+        metadata: metadata.clone(),
+    };
+
+    let source = StreamSource {
+        stream_url: stream_url.clone(),
+        title: title.clone(),
+        number: None,
+        metadata: metadata.clone(),
+    };
+
+    let source_id = info
+        .id
+        .clone()
+        .map(|id| format!("ytdlp:{id}"))
+        .unwrap_or_else(|| format!("ytdlp:{}", stream_id.0));
+
+    let source_descriptor = SourceDescriptor {
+        id: source_id,
+        kind: "ytdlp".to_string(),
+        name: title,
+        ip: None,
+        tuner_count: None,
+        status: if info.is_live.unwrap_or(false) {
+            "live".to_string()
+        } else {
+            "ready".to_string()
+        },
+    };
+
+    Ok(ResolvedDirectStream {
+        descriptor,
+        source,
+        source_descriptor,
+        manual_entry: ManualSourceEntry {
+            kind: "ytdlp".to_string(),
+            input: url.to_string(),
+            options,
+        },
+    })
+}
+
+fn run_ytdlp_json(
+    app: &AppHandle,
+    url: &str,
+    options: Option<&ManualSourceOptions>,
+) -> Result<YtDlpInfo> {
+    let python = resolve_ytdlp_python(app)?;
+    let mut cmd = Command::new(python);
+    cmd.arg("-m")
+        .arg("yt_dlp")
+        .arg("-J")
+        .arg("--no-playlist")
+        .arg("--no-warnings")
+        .arg("--no-progress");
+    if let Some(options) = options {
+        if let Some(format_id) = options.ytdlp_format.as_ref() {
+            if !format_id.trim().is_empty() {
+                cmd.arg("-f").arg(format_id);
+            }
+        }
+        if options.ytdlp_live_from_start {
+            cmd.arg("--live-from-start");
+        }
+    }
+    let output = cmd
+        .arg(url)
+        .env("PYTHONNOUSERSITE", "1")
+        .output()
+        .context("failed to run yt-dlp")?;
+    if !output.status.success() {
+        let stderr = String::from_utf8_lossy(&output.stderr);
+        return Err(anyhow!("yt-dlp failed: {stderr}"));
+    }
+    parse_ytdlp_json(&output.stdout)
+}
+
+fn parse_ytdlp_json(output: &[u8]) -> Result<YtDlpInfo> {
+    let text = String::from_utf8_lossy(output);
+    if let Ok(info) = serde_json::from_str::<YtDlpInfo>(text.trim()) {
+        return Ok(info);
+    }
+    for line in text.lines().rev() {
+        if let Ok(info) = serde_json::from_str::<YtDlpInfo>(line.trim()) {
+            return Ok(info);
+        }
+    }
+    Err(anyhow!("failed to parse yt-dlp json output"))
+}
+
+fn pick_ytdlp_stream_url(info: &YtDlpInfo) -> Option<String> {
+    let mut best: Option<(f64, String)> = None;
+    if let Some(formats) = info.formats.as_ref() {
+        for format in formats {
+            let url = match format.url.as_ref() {
+                Some(url) => url,
+                None => continue,
+            };
+            let mut score = 0.0;
+            if let Some(protocol) = format.protocol.as_ref() {
+                let protocol = protocol.to_lowercase();
+                if protocol.contains("m3u8") {
+                    score += 1000.0;
+                }
+            }
+            if let Some(ext) = format.ext.as_ref() {
+                if ext.eq_ignore_ascii_case("mp4") {
+                    score += 10.0;
+                }
+            }
+            if let Some(height) = format.height {
+                score += height as f64;
+            }
+            if let Some(tbr) = format.tbr {
+                score += tbr;
+            }
+            match best {
+                Some((best_score, _)) if best_score >= score => {}
+                _ => best = Some((score, url.clone())),
+            }
+        }
+    }
+    if let Some((_, url)) = best {
+        return Some(url);
+    }
+    info.url.clone()
+}
+
+fn resolve_ytdlp_python(app: &AppHandle) -> Result<PathBuf> {
+    if let Ok(path) = std::env::var("EVERY_CHANNEL_YTDLP_PYTHON") {
+        return Ok(PathBuf::from(path));
+    }
+    let target = match std::env::consts::OS {
+        "macos" => "macos",
+        "linux" => "linux",
+        "windows" => "windows",
+        other => other,
+    };
+    let base = app
+        .path()
+        .resolve(format!("yt-dlp/{target}/venv"), BaseDirectory::Resource)
+        .context("failed to resolve yt-dlp resource path")?;
+    let python = if cfg!(windows) {
+        base.join("Scripts").join("python.exe")
+    } else {
+        base.join("bin").join("python")
+    };
+    if python.exists() {
+        Ok(python)
+    } else {
+        Err(anyhow!(
+            "yt-dlp runtime not bundled; run scripts/vendor-yt-dlp.sh"
+        ))
+    }
+}
+
+fn probe_stream_input(app: &AppHandle, input: &str) -> Result<StreamProbe> {
+    let trimmed = input.trim();
+    if trimmed.eq_ignore_ascii_case("linux-dvb") || trimmed.eq_ignore_ascii_case("dvb") {
+        return Ok(StreamProbe {
+            kind: "linux-dvb".to_string(),
+            live: true,
+            requires_options: true,
+            message: Some("Select adapter + channel".to_string()),
+            ytdlp: None,
+        });
+    }
+    if !input.contains("://") {
+        let host = normalize_host(input);
+        if host.is_empty() {
+            return Err(anyhow!("input is required"));
+        }
+        if ec_hdhomerun::discover_from_host(&host).is_ok() {
+            return Ok(StreamProbe {
+                kind: "hdhr".to_string(),
+                live: true,
+                requires_options: false,
+                message: None,
+                ytdlp: None,
+            });
+        }
+        return Err(anyhow!("input is not a valid URL or HDHomeRun host"));
+    }
+
+    let url = Url::parse(input).context("invalid url")?;
+    if is_linux_dvb_scheme(&url) {
+        let _config = parse_linux_dvb_url(&url)?;
+        return Ok(StreamProbe {
+            kind: "linux-dvb".to_string(),
+            live: true,
+            requires_options: false,
+            message: None,
+            ytdlp: None,
+        });
+    }
+    if let Some(host) = url.host_str() {
+        if is_likely_local_host(host) && ec_hdhomerun::discover_from_host(host).is_ok() {
+            return Ok(StreamProbe {
+                kind: "hdhr".to_string(),
+                live: true,
+                requires_options: false,
+                message: None,
+                ytdlp: None,
+            });
+        }
+    }
+
+    if url.as_str().contains(".m3u8") {
+        let _resolved = probe_hls_live(url.as_str())?;
+        return Ok(StreamProbe {
+            kind: "hls".to_string(),
+            live: true,
+            requires_options: false,
+            message: None,
+            ytdlp: None,
+        });
+    }
+
+    let info = run_ytdlp_json(app, input, None)?;
+    if !is_ytdlp_live(&info) {
+        return Err(anyhow!("yt-dlp stream is not live"));
+    }
+    let probe = build_ytdlp_probe(&info);
+    Ok(StreamProbe {
+        kind: "ytdlp".to_string(),
+        live: true,
+        requires_options: !probe.formats.is_empty(),
+        message: None,
+        ytdlp: Some(probe),
+    })
+}
+
+fn resolve_stream_input(
+    app: &AppHandle,
+    input: &str,
+    options: Option<ManualSourceOptions>,
+) -> Result<ResolvedStream> {
+    let trimmed = input.trim();
+    if trimmed.eq_ignore_ascii_case("linux-dvb") || trimmed.eq_ignore_ascii_case("dvb") {
+        return Err(anyhow!(
+            "linux-dvb requires options; use the linux DVB picker"
+        ));
+    }
+    if !input.contains("://") {
+        let host = normalize_host(input);
+        let (device, streams, sources) = hydrate_hdhr_host(&host)?;
+        return Ok(ResolvedStream::Hdhr {
+            host,
+            device,
+            streams,
+            sources,
+        });
+    }
+
+    let url = Url::parse(input).context("invalid url")?;
+    if is_linux_dvb_scheme(&url) {
+        let resolved = resolve_linux_dvb_stream(&url)?;
+        return Ok(ResolvedStream::Direct { entry: resolved });
+    }
+    if let Some(host) = url.host_str() {
+        if is_likely_local_host(host) {
+            let (device, streams, sources) = hydrate_hdhr_host(host)?;
+            return Ok(ResolvedStream::Hdhr {
+                host: host.to_string(),
+                device,
+                streams,
+                sources,
+            });
+        }
+    }
+
+    if url.as_str().contains(".m3u8") {
+        let resolved = resolve_hls_stream(input)?;
+        return Ok(ResolvedStream::Direct { entry: resolved });
+    }
+
+    let resolved = resolve_ytdlp_stream(app, input, options)?;
+    Ok(ResolvedStream::Direct { entry: resolved })
+}
+
+fn is_linux_dvb_scheme(url: &Url) -> bool {
+    matches!(url.scheme(), "dvb" | "linux-dvb")
+}
+
+fn resolve_linux_dvb_stream(url: &Url) -> Result<ResolvedDirectStream> {
+    let config = parse_linux_dvb_url(url)?;
+    let stream_id = StreamKey {
+        version: 1,
+        broadcast: None,
+        source: Some(SourceId {
+            kind: "linux-dvb".to_string(),
+            device_id: Some(format!("adapter{}:dvr{}", config.adapter, config.dvr)),
+            channel: None,
+        }),
+        profile: None,
+        variant: None,
+    }
+    .to_stream_id();
+
+    let title = format!("Linux DVB adapter{} dvr{}", config.adapter, config.dvr);
+    let descriptor = StreamDescriptor {
+        id: stream_id.clone(),
+        title: title.clone(),
+        number: None,
+        source: "linux-dvb".to_string(),
+        metadata: vec![
+            StreamMetadata {
+                key: "adapter".to_string(),
+                value: config.adapter.to_string(),
+            },
+            StreamMetadata {
+                key: "dvr".to_string(),
+                value: config.dvr.to_string(),
+            },
+        ],
+    };
+
+    let stream_url = linux_dvb_url(&config);
+    let source = StreamSource {
+        stream_url: stream_url.clone(),
+        title,
+        number: None,
+        metadata: descriptor.metadata.clone(),
+    };
+
+    let source_descriptor = SourceDescriptor {
+        id: format!("linux-dvb:adapter{}:dvr{}", config.adapter, config.dvr),
+        kind: "linux-dvb".to_string(),
+        name: format!("Linux DVB adapter{} dvr{}", config.adapter, config.dvr),
+        ip: None,
+        tuner_count: None,
+        status: "manual".to_string(),
+    };
+
+    Ok(ResolvedDirectStream {
+        descriptor,
+        source,
+        source_descriptor,
+        manual_entry: ManualSourceEntry {
+            kind: "linux-dvb".to_string(),
+            input: stream_url,
+            options: None,
+        },
+    })
+}
+
+fn parse_linux_dvb_url(url: &Url) -> Result<LinuxDvbConfig> {
+    let mut adapter = None;
+    let mut dvr = None;
+    let mut tune_cmd = Vec::new();
+    let mut tune_wait_ms = None;
+
+    for (key, value) in url.query_pairs() {
+        match key.as_ref() {
+            "adapter" => adapter = value.parse::<u32>().ok(),
+            "dvr" => dvr = value.parse::<u32>().ok(),
+            "tune" | "tune_cmd" => tune_cmd.push(value.to_string()),
+            "tune_wait_ms" => tune_wait_ms = value.parse::<u64>().ok(),
+            _ => {}
+        }
+    }
+
+    if adapter.is_none() || dvr.is_none() {
+        let segments = url
+            .path_segments()
+            .map(|segments| segments.collect::<Vec<_>>())
+            .unwrap_or_default();
+        if segments.len() >= 2 && segments[0].starts_with("adapter") {
+            adapter = segments[0]
+                .trim_start_matches("adapter")
+                .parse::<u32>()
+                .ok();
+        }
+        if segments.len() >= 3 && segments[1] == "dvr" {
+            dvr = segments[2].parse::<u32>().ok();
+        } else if segments.len() >= 2 && segments[1].starts_with("dvr") {
+            dvr = segments[1].trim_start_matches("dvr").parse::<u32>().ok();
+        }
+    }
+
+    let adapter = adapter.unwrap_or(0);
+    let dvr = dvr.unwrap_or(0);
+
+    Ok(LinuxDvbConfig {
+        adapter,
+        frontend: 0,
+        dvr,
+        tune_command: if tune_cmd.is_empty() {
+            None
+        } else {
+            Some(tune_cmd)
+        },
+        tune_timeout_ms: tune_wait_ms,
+    })
+}
+
+fn linux_dvb_url(config: &LinuxDvbConfig) -> String {
+    let mut url = Url::parse("linux-dvb://localhost").expect("static url");
+    {
+        let mut pairs = url.query_pairs_mut();
+        pairs.append_pair("adapter", &config.adapter.to_string());
+        pairs.append_pair("dvr", &config.dvr.to_string());
+        if let Some(cmd) = &config.tune_command {
+            for part in cmd {
+                pairs.append_pair("tune", part);
+            }
+        }
+        if let Some(wait) = config.tune_timeout_ms {
+            pairs.append_pair("tune_wait_ms", &wait.to_string());
+        }
+    }
+    url.to_string()
+}
+
+fn is_likely_local_host(host: &str) -> bool {
+    if host.eq_ignore_ascii_case("localhost") || host.ends_with(".local") {
+        return true;
+    }
+    is_private_ip(host)
+}
+
+fn is_private_ip(host: &str) -> bool {
+    let Ok(ip) = host.parse::<IpAddr>() else {
+        return false;
+    };
+    match ip {
+        IpAddr::V4(addr) => {
+            let octets = addr.octets();
+            match octets[0] {
+                10 => true,
+                172 => (16..=31).contains(&octets[1]),
+                192 => octets[1] == 168,
+                127 => true,
+                _ => false,
+            }
+        }
+        IpAddr::V6(addr) => addr.is_loopback() || addr.is_unique_local(),
+    }
+}
+
+fn build_ytdlp_probe(info: &YtDlpInfo) -> YtdlpProbe {
+    let mut formats = Vec::new();
+    if let Some(list) = info.formats.as_ref() {
+        for format in list {
+            let format_id = match format.format_id.as_ref() {
+                Some(id) => id.clone(),
+                None => continue,
+            };
+            let mut parts = Vec::new();
+            if let Some(height) = format.height {
+                if let Some(width) = format.width {
+                    parts.push(format!("{width}x{height}"));
+                } else {
+                    parts.push(format!("{height}p"));
+                }
+            }
+            if let Some(tbr) = format.tbr {
+                parts.push(format!("{tbr:.0} kbps"));
+            }
+            if let Some(protocol) = format.protocol.as_ref() {
+                parts.push(protocol.to_string());
+            }
+            if let Some(ext) = format.ext.as_ref() {
+                parts.push(ext.to_string());
+            }
+            if let Some(note) = format.format_note.as_ref() {
+                parts.push(note.to_string());
+            }
+            if let Some(vcodec) = format.vcodec.as_ref() {
+                if !vcodec.eq_ignore_ascii_case("none") {
+                    parts.push(vcodec.to_string());
+                }
+            }
+            if let Some(acodec) = format.acodec.as_ref() {
+                if !acodec.eq_ignore_ascii_case("none") {
+                    parts.push(acodec.to_string());
+                }
+            }
+            let label = if let Some(format_label) = format.format.as_ref() {
+                format_label.clone()
+            } else if parts.is_empty() {
+                format_id.clone()
+            } else {
+                parts.join(" • ")
+            };
+            formats.push(YtdlpFormatOption { format_id, label });
+        }
+    }
+    let default_format = formats.first().map(|f| f.format_id.clone());
+    YtdlpProbe {
+        title: info.title.clone(),
+        formats,
+        default_format,
+        supports_live_from_start: supports_live_from_start(info),
+    }
+}
+
+fn supports_live_from_start(info: &YtDlpInfo) -> bool {
+    let mut key = String::new();
+    if let Some(value) = info.extractor_key.as_ref() {
+        key.push_str(value);
+    } else if let Some(value) = info.extractor.as_ref() {
+        key.push_str(value);
+    }
+    let key = key.to_lowercase();
+    key.contains("youtube") || key.contains("twitch")
+}
+
+fn is_ytdlp_live(info: &YtDlpInfo) -> bool {
+    if info.is_live == Some(true) {
+        return true;
+    }
+    if let Some(status) = info.live_status.as_ref() {
+        return status.eq_ignore_ascii_case("is_live");
+    }
+    false
+}
+
+fn resolve_hls_stream(url: &str) -> Result<ResolvedDirectStream> {
+    let resolved_url = probe_hls_live(url)?;
+    let parsed = Url::parse(&resolved_url).context("invalid hls url")?;
+    let host = parsed.host_str().unwrap_or("HLS").to_string();
+    let title = format!("HLS {host}");
+    let stream_id = StreamKey {
+        version: 1,
+        broadcast: None,
+        source: Some(SourceId {
+            kind: "hls".to_string(),
+            device_id: None,
+            channel: Some(url.to_string()),
+        }),
+        profile: Some("hls".to_string()),
+        variant: None,
+    }
+    .to_stream_id();
+    let metadata = vec![
+        StreamMetadata {
+            key: "source_kind".to_string(),
+            value: "hls".to_string(),
+        },
+        StreamMetadata {
+            key: "origin_url".to_string(),
+            value: url.to_string(),
+        },
+        StreamMetadata {
+            key: "resolved_url".to_string(),
+            value: resolved_url.clone(),
+        },
+    ];
+    let descriptor = StreamDescriptor {
+        id: stream_id.clone(),
+        title: title.clone(),
+        number: None,
+        source: "hls".to_string(),
+        metadata: metadata.clone(),
+    };
+    let source = StreamSource {
+        stream_url: resolved_url,
+        title: title.clone(),
+        number: None,
+        metadata: metadata.clone(),
+    };
+    let source_descriptor = SourceDescriptor {
+        id: format!("hls:{}", stream_id.0),
+        kind: "hls".to_string(),
+        name: title,
+        ip: None,
+        tuner_count: None,
+        status: "live".to_string(),
+    };
+    Ok(ResolvedDirectStream {
+        descriptor,
+        source,
+        source_descriptor,
+        manual_entry: ManualSourceEntry {
+            kind: "hls".to_string(),
+            input: url.to_string(),
+            options: None,
+        },
+    })
+}
+
+fn probe_hls_live(url: &str) -> Result<String> {
+    let text = fetch_hls_text(url)?;
+    if text.contains("#EXT-X-STREAM-INF") {
+        let base = Url::parse(url).context("invalid hls url")?;
+        let mut lines = text.lines();
+        while let Some(line) = lines.next() {
+            if line.trim().starts_with("#EXT-X-STREAM-INF") {
+                for candidate in lines.by_ref() {
+                    let candidate = candidate.trim();
+                    if candidate.is_empty() || candidate.starts_with('#') {
+                        continue;
+                    }
+                    let resolved = base.join(candidate).context("invalid hls variant url")?;
+                    return probe_hls_live(resolved.as_str());
+                }
+            }
+        }
+    }
+    if text.contains("#EXT-X-ENDLIST") || text.contains("#EXT-X-PLAYLIST-TYPE:VOD") {
+        return Err(anyhow!("HLS playlist is not live"));
+    }
+    Ok(url.to_string())
+}
+
+fn fetch_hls_text(url: &str) -> Result<String> {
+    let resp = reqwest_blocking::get(url).context("failed to fetch hls url")?;
+    if !resp.status().is_success() {
+        return Err(anyhow!("hls request failed with {}", resp.status()));
+    }
+    Ok(resp.text().context("failed to read hls response")?)
+}
+
+fn manual_sources_path(app: &AppHandle) -> Result<PathBuf> {
+    app.path()
+        .resolve("manual_sources.json", BaseDirectory::AppConfig)
+        .context("failed to resolve app config path")
+}
+
+fn legacy_manual_hosts_path(app: &AppHandle) -> Result<PathBuf> {
+    app.path()
+        .resolve("manual_hdhomerun.json", BaseDirectory::AppConfig)
+        .context("failed to resolve app config path")
+}
+
+fn normalize_manual_entry(mut entry: ManualSourceEntry) -> Option<ManualSourceEntry> {
+    entry.input = match entry.kind.as_str() {
+        "hdhr" => normalize_host(&entry.input),
+        "linux-dvb" => {
+            if let Ok(url) = Url::parse(&entry.input) {
+                if is_linux_dvb_scheme(&url) {
+                    if let Ok(config) = parse_linux_dvb_url(&url) {
+                        linux_dvb_url(&config)
+                    } else {
+                        entry.input.trim().to_string()
+                    }
+                } else {
+                    entry.input.trim().to_string()
+                }
+            } else {
+                entry.input.trim().to_string()
+            }
+        }
+        _ => entry.input.trim().to_string(),
+    };
+    if entry.input.is_empty() {
+        None
+    } else {
+        Some(entry)
+    }
+}
+
+fn load_manual_sources(app: &AppHandle) -> Result<Vec<ManualSourceEntry>> {
+    let path = manual_sources_path(app)?;
+    let entries: Vec<ManualSourceEntry> = if path.exists() {
+        let bytes =
+            fs::read(&path).with_context(|| format!("failed to read {}", path.display()))?;
+        serde_json::from_slice(&bytes).context("invalid manual_sources.json")?
+    } else {
+        let legacy_path = legacy_manual_hosts_path(app)?;
+        if !legacy_path.exists() {
+            Vec::new()
+        } else {
+            let bytes = fs::read(&legacy_path)
+                .with_context(|| format!("failed to read {}", legacy_path.display()))?;
+            let hosts: Vec<String> =
+                serde_json::from_slice(&bytes).context("invalid manual_hdhomerun.json")?;
+            hosts
+                .into_iter()
+                .map(|host| ManualSourceEntry {
+                    kind: "hdhr".to_string(),
+                    input: host,
+                    options: None,
+                })
+                .collect()
+        }
+    };
+
+    let mut seen = HashSet::new();
+    let mut normalized = Vec::new();
+    for entry in entries.into_iter() {
+        let Some(entry) = normalize_manual_entry(entry) else {
+            continue;
+        };
+        if seen.insert(entry.clone()) {
+            normalized.push(entry);
+        }
+    }
+    Ok(normalized)
+}
+
+fn save_manual_sources(app: &AppHandle, entries: &[ManualSourceEntry]) -> Result<()> {
+    let path = manual_sources_path(app)?;
+    if let Some(parent) = path.parent() {
+        fs::create_dir_all(parent)
+            .with_context(|| format!("failed to create {}", parent.display()))?;
+    }
+    let data = serde_json::to_vec_pretty(entries)?;
+    fs::write(&path, data).with_context(|| format!("failed to write {}", path.display()))?;
+    Ok(())
+}
+
+fn hydrate_hdhr_host(
+    host: &str,
+) -> Result<(
+    HdhomerunDevice,
+    Vec<StreamDescriptor>,
+    HashMap<String, StreamSource>,
+)> {
+    let device = ec_hdhomerun::discover_from_host(host)?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+    let mut streams = Vec::new();
+    let mut sources = HashMap::new();
+    let mut seen = HashSet::new();
+    for entry in lineup {
+        let (descriptor, source) = descriptor_from_lineup(&device, &entry);
+        let id = descriptor.id.0.clone();
+        if !seen.insert(id.clone()) {
+            continue;
+        }
+        streams.push(descriptor);
+        sources.insert(id, source);
+    }
+    Ok((device, streams, sources))
+}
+
+fn add_manual_entries(
+    manager: &mut StreamManager,
+    host: String,
+    device: HdhomerunDevice,
+    streams: Vec<StreamDescriptor>,
+    sources: HashMap<String, StreamSource>,
+) {
+    manager.manual_devices.insert(host, device);
+    for stream in streams {
+        if !manager
+            .manual_streams
+            .iter()
+            .any(|existing| existing.id == stream.id)
+        {
+            manager.manual_streams.push(stream);
+        }
+    }
+    for (id, source) in sources {
+        manager.manual_sources.insert(id, source);
+    }
+}
+
+fn merge_local_streams(
+    local: &[StreamDescriptor],
+    manual: &[StreamDescriptor],
+) -> Vec<StreamDescriptor> {
+    let mut merged = local.to_vec();
+    let mut seen: HashSet<_> = local.iter().map(|stream| stream.id.0.clone()).collect();
+    for stream in manual {
+        if seen.insert(stream.id.0.clone()) {
+            merged.push(stream.clone());
+        }
+    }
+    merged
+}
+
+fn merge_streams(
+    local: &[StreamDescriptor],
+    catalog: &HashMap<String, StreamDescriptor>,
+) -> Vec<StreamDescriptor> {
+    let mut merged = local.to_vec();
+    let existing: HashSet<_> = local.iter().map(|s| s.id.0.clone()).collect();
+    for (id, entry) in catalog.iter() {
+        if !existing.contains(id) {
+            merged.push(entry.clone());
+        }
+    }
+    merged
+}
+
+fn catalog_entry_to_descriptor(entry: StreamCatalogEntry) -> StreamDescriptor {
+    let mut descriptor = entry.stream;
+    if let Some(moq) = entry.moq {
+        descriptor.source = "moq".to_string();
+        descriptor.metadata.push(StreamMetadata {
+            key: "moq_endpoint".to_string(),
+            value: moq.endpoint,
+        });
+        descriptor.metadata.push(StreamMetadata {
+            key: "moq_broadcast".to_string(),
+            value: moq.broadcast_name,
+        });
+        descriptor.metadata.push(StreamMetadata {
+            key: "moq_track".to_string(),
+            value: moq.track_name,
+        });
+        if let Some(enc) = moq.encryption {
+            descriptor.metadata.push(StreamMetadata {
+                key: "moq_enc_alg".to_string(),
+                value: enc.alg,
+            });
+            descriptor.metadata.push(StreamMetadata {
+                key: "moq_key_id".to_string(),
+                value: enc.key_id,
+            });
+        }
+    }
+    descriptor
+}
+
+#[derive(Debug, Clone, Copy)]
+struct CmafVariantSpec {
+    id: &'static str,
+    width: u32,
+    height: u32,
+    video_bitrate_kbps: u32,
+}
+
+fn default_cmaf_variants() -> Vec<CmafVariantSpec> {
+    vec![
+        CmafVariantSpec {
+            id: "1080p",
+            width: 1920,
+            height: 1080,
+            video_bitrate_kbps: 6000,
+        },
+        CmafVariantSpec {
+            id: "720p",
+            width: 1280,
+            height: 720,
+            video_bitrate_kbps: 3000,
+        },
+        CmafVariantSpec {
+            id: "480p",
+            width: 854,
+            height: 480,
+            video_bitrate_kbps: 1200,
+        },
+    ]
+}
+
+fn write_hls_master_playlist(
+    output_dir: &Path,
+    variants: &[CmafVariantSpec],
+    audio_bitrate_bps: u32,
+) -> Result<()> {
+    let mut text = String::new();
+    text.push_str("#EXTM3U\n#EXT-X-VERSION:7\n");
+    for v in variants {
+        let bandwidth = (v.video_bitrate_kbps * 1000).saturating_add(audio_bitrate_bps);
+        text.push_str(&format!(
+            "#EXT-X-STREAM-INF:BANDWIDTH={bandwidth},RESOLUTION={}x{}\n{}/index.m3u8\n",
+            v.width, v.height, v.id
+        ));
+    }
+    fs::create_dir_all(output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))?;
+    fs::write(output_dir.join("index.m3u8"), text.as_bytes())
+        .with_context(|| format!("failed to write {}", output_dir.display()))?;
+    Ok(())
+}
+
+fn wait_for_stable_file(path: &Path, timeout: Duration) -> Result<()> {
+    let start = Instant::now();
+    let mut last_len: Option<u64> = None;
+    let mut stable_ms: u64 = 0;
+
+    while start.elapsed() < timeout {
+        if let Ok(meta) = fs::metadata(path) {
+            let len = meta.len();
+            if len > 0 {
+                if Some(len) == last_len {
+                    stable_ms += 100;
+                    if stable_ms >= 300 {
+                        return Ok(());
+                    }
+                } else {
+                    last_len = Some(len);
+                    stable_ms = 0;
+                }
+            }
+        }
+        std::thread::sleep(Duration::from_millis(100));
+    }
+
+    Err(anyhow!(
+        "timed out waiting for stable file {} after {:?}",
+        path.display(),
+        timeout
+    ))
+}
+
+fn spawn_ffmpeg_cmaf_ladder(
+    stream_url: &str,
+    output_dir: &Path,
+    chunk_ms: u64,
+    hls_list_size: usize,
+    delete_segments: bool,
+) -> Result<Child> {
+    let variants = default_cmaf_variants();
+    let segment_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+
+    let _ = fs::remove_dir_all(output_dir);
+    fs::create_dir_all(output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))?;
+    for v in &variants {
+        fs::create_dir_all(output_dir.join(v.id))?;
+    }
+    // Keep playback URL stable: /index.m3u8 is always present. For multi-variant this is a master.
+    write_hls_master_playlist(output_dir, &variants, 128_000)?;
+
+    if stream_url.starts_with("linux-dvb://") || stream_url.starts_with("dvb://") {
+        let url = Url::parse(stream_url).context("invalid linux-dvb url")?;
+        let config = parse_linux_dvb_url(&url)?;
+        let reader =
+            ec_linux_iptv::open_stream(&config).context("failed to open linux dvb stream")?;
+        return spawn_ffmpeg_cmaf_ladder_from_reader(
+            reader,
+            output_dir,
+            &segment_time,
+            &variants,
+            hls_list_size,
+            delete_segments,
+        );
+    }
+
+    spawn_ffmpeg_cmaf_ladder_with_input(
+        vec!["-i".to_string(), stream_url.to_string()],
+        None,
+        output_dir,
+        &segment_time,
+        &variants,
+        hls_list_size,
+        delete_segments,
+    )
+}
+
+fn sanitize_component(value: &str) -> String {
+    value
+        .chars()
+        .map(|c| match c {
+            'a'..='z' | '0'..='9' | '-' | '_' | '/' => c,
+            'A'..='Z' => c.to_ascii_lowercase(),
+            _ => '_',
+        })
+        .collect()
+}
+
+fn derive_variant_stream_id(base_stream_id: &str, variant_id: &str) -> String {
+    let v = sanitize_component(variant_id);
+    format!("{}/variant-{}", base_stream_id.trim_end_matches('/'), v)
+}
+
+fn build_multi_variant_manifest(
+    base_stream_id: &str,
+    chunk_ms: u64,
+    chunk_index: u64,
+    variants: &[CmafVariantSpec],
+    per_variant_hash: &[(String, String)],
+) -> Result<Manifest> {
+    let created_unix_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis() as u64;
+    let epoch_id = format!("epoch-{created_unix_ms}");
+
+    let mut entries = Vec::with_capacity(variants.len());
+    for v in variants {
+        let Some((_, hash)) = per_variant_hash.iter().find(|(id, _)| id == v.id) else {
+            return Err(anyhow!("missing hash for variant {}", v.id));
+        };
+        let chunk_hashes = vec![hash.clone()];
+        let merkle_root = merkle_root_from_hashes(&chunk_hashes).map_err(|err| anyhow!("{err}"))?;
+        entries.push(ManifestVariant {
+            variant_id: v.id.to_string(),
+            stream_id: StreamId(derive_variant_stream_id(base_stream_id, v.id)),
+            chunk_start_index: chunk_index,
+            total_chunks: 1,
+            merkle_root,
+            chunk_hashes,
+            metadata: vec![
+                StreamMetadata {
+                    key: "width".to_string(),
+                    value: v.width.to_string(),
+                },
+                StreamMetadata {
+                    key: "height".to_string(),
+                    value: v.height.to_string(),
+                },
+                StreamMetadata {
+                    key: "video_bitrate_kbps".to_string(),
+                    value: v.video_bitrate_kbps.to_string(),
+                },
+            ],
+        });
+    }
+    entries.sort_by(|a, b| a.variant_id.cmp(&b.variant_id));
+    let roots = entries
+        .iter()
+        .map(|v| v.merkle_root.clone())
+        .collect::<Vec<_>>();
+    let body_root = merkle_root_from_hashes(&roots).map_err(|err| anyhow!("{err}"))?;
+
+    let body = ec_core::ManifestBody {
+        stream_id: StreamId(base_stream_id.to_string()),
+        epoch_id,
+        chunk_duration_ms: chunk_ms,
+        total_chunks: 1,
+        chunk_start_index: chunk_index,
+        encoder_profile_id: "deterministic-h264-aac".to_string(),
+        merkle_root: body_root,
+        created_unix_ms,
+        metadata: vec![],
+        chunk_hashes: vec![],
+        variants: Some(entries),
+    };
+
+    let manifest_id = body.manifest_id()?;
+    let mut signatures = Vec::new();
+    if let Some(keypair) =
+        ec_crypto::load_manifest_keypair_from_env().map_err(|err| anyhow!(err))?
+    {
+        signatures.push(ec_crypto::sign_manifest_id(&manifest_id, &keypair));
+    }
+
+    Ok(Manifest {
+        body,
+        manifest_id,
+        signatures,
+    })
+}
+
+fn spawn_ffmpeg_cmaf_ladder_from_reader<R: Read + Send + 'static>(
+    reader: R,
+    output_dir: &Path,
+    segment_time: &str,
+    variants: &[CmafVariantSpec],
+    hls_list_size: usize,
+    delete_segments: bool,
+) -> Result<Child> {
+    spawn_ffmpeg_cmaf_ladder_with_input(
+        vec!["-i".to_string(), "pipe:0".to_string()],
+        Some(Box::new(reader)),
+        output_dir,
+        segment_time,
+        variants,
+        hls_list_size,
+        delete_segments,
+    )
+}
+
+fn spawn_ffmpeg_cmaf_ladder_with_input(
+    input_args: Vec<String>,
+    reader: Option<Box<dyn Read + Send>>,
+    output_dir: &Path,
+    segment_time: &str,
+    variants: &[CmafVariantSpec],
+    hls_list_size: usize,
+    delete_segments: bool,
+) -> Result<Child> {
+    let mut cmd = Command::new("ffmpeg");
+    cmd.current_dir(output_dir);
+    cmd.arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y");
+
+    for arg in input_args {
+        cmd.arg(arg);
+    }
+
+    // Reduce opportunities for non-deterministic scheduling in filters/decoders.
+    cmd.arg("-filter_threads")
+        .arg("1")
+        .arg("-filter_complex_threads")
+        .arg("1")
+        .arg("-threads")
+        .arg("1")
+        // Keep only a simple A/V set (ignore subs/data, drop metadata).
+        .arg("-map")
+        .arg("0:v:0")
+        .arg("-map")
+        .arg("0:a:0?")
+        .arg("-sn")
+        .arg("-dn")
+        .arg("-map_metadata")
+        .arg("-1");
+
+    // Filter graph: split and scale into N variants.
+    let mut filter = String::new();
+    filter.push_str(&format!("[0:v]split={}", variants.len()));
+    for i in 0..variants.len() {
+        filter.push_str(&format!("[v{i}]"));
+    }
+    filter.push(';');
+    for (i, v) in variants.iter().enumerate() {
+        filter.push_str(&format!(
+            "[v{i}]scale=w={}:h={}:flags=bicubic[v{i}o];",
+            v.width, v.height
+        ));
+    }
+    cmd.arg("-filter_complex").arg(filter);
+
+    for (i, v) in variants.iter().enumerate() {
+        let out_variant_dir = output_dir.join(v.id);
+        let seg_template = out_variant_dir.join("segment_%06d.m4s");
+        let seg_template = seg_template
+            .to_str()
+            .ok_or_else(|| anyhow!("invalid segment template path"))?
+            .to_string();
+
+        let v_bitrate = format!("{}k", v.video_bitrate_kbps);
+        let bufsize = format!("{}k", v.video_bitrate_kbps.saturating_mul(2));
+
+        cmd.arg("-map")
+            .arg(format!("[v{i}o]"))
+            .arg("-map")
+            .arg("0:a:0?")
+            .arg("-c:v")
+            .arg("libx264")
+            .arg("-b:v")
+            .arg(v_bitrate)
+            .arg("-maxrate")
+            .arg(format!("{}k", v.video_bitrate_kbps))
+            .arg("-bufsize")
+            .arg(bufsize);
+
+        for arg in default_encoder_args() {
+            cmd.arg(arg);
+        }
+
+        cmd.arg("-f")
+            .arg("hls")
+            .arg("-hls_time")
+            .arg(segment_time)
+            .arg("-hls_list_size")
+            .arg(hls_list_size.to_string())
+            .arg("-hls_flags")
+            .arg(if delete_segments {
+                "delete_segments+append_list+independent_segments"
+            } else {
+                "append_list+independent_segments"
+            })
+            .arg("-hls_segment_type")
+            .arg("fmp4")
+            .arg("-hls_fmp4_init_filename")
+            .arg("init.mp4")
+            .arg("-hls_segment_filename")
+            .arg(seg_template)
+            .arg(out_variant_dir.join("index.m3u8"));
+    }
+
+    if reader.is_some() {
+        cmd.stdin(Stdio::piped());
+    } else {
+        cmd.stdin(Stdio::null());
+    }
+    cmd.stdout(Stdio::null()).stderr(Stdio::inherit());
+
+    let mut child = cmd
+        .spawn()
+        .with_context(|| "failed to spawn ffmpeg".to_string())?;
+    if let Some(reader) = reader {
+        let mut stdin = child
+            .stdin
+            .take()
+            .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+        std::thread::spawn(move || {
+            let mut reader = reader;
+            let _ = std::io::copy(&mut reader, &mut stdin);
+        });
+    }
+    Ok(child)
+}
+
+fn parse_network_secret(value: Option<String>) -> Result<Option<Vec<u8>>> {
+    let value = value.or_else(|| std::env::var("EVERY_CHANNEL_NETWORK_SECRET").ok());
+    let Some(value) = value else { return Ok(None) };
+    let bytes = hex::decode(value).context("network secret must be hex")?;
+    Ok(Some(bytes))
+}
+
+fn parse_discovery(value: Option<&str>) -> Result<ec_iroh::DiscoveryConfig, String> {
+    if let Some(value) = value {
+        let trimmed = value.trim();
+        if !trimmed.is_empty() {
+            return ec_iroh::DiscoveryConfig::from_list(trimmed).map_err(|err| err.to_string());
+        }
+    }
+    ec_iroh::DiscoveryConfig::from_env().map_err(|err| err.to_string())
+}
+
+const DEFAULT_SEGMENT_MS: u64 = 2000;
+
+fn parse_gossip_peers(mut peers: Vec<String>) -> Vec<String> {
+    if peers.is_empty() {
+        if let Ok(env_peers) = std::env::var("EVERY_CHANNEL_GOSSIP_PEERS") {
+            peers = env_peers
+                .split(',')
+                .map(|peer| peer.trim().to_string())
+                .filter(|peer| !peer.is_empty())
+                .collect();
+        }
+    }
+    peers
+}
+
+fn merge_peer_strings(peers: Vec<String>) -> Vec<String> {
+    let mut seen = HashSet::new();
+    let mut merged = Vec::new();
+    for peer in peers {
+        let trimmed = peer.trim();
+        if trimmed.is_empty() {
+            continue;
+        }
+        if seen.insert(trimmed.to_string()) {
+            merged.push(trimmed.to_string());
+        }
+    }
+    merged
+}
+
+fn build_object_bytes(
+    key_id: &str,
+    chunk_index: u64,
+    chunk_duration_27mhz: u64,
+    sync_status: &str,
+    plaintext: Vec<u8>,
+    network_secret: Option<&[u8]>,
+    content_type: &str,
+    manifest_id: Option<&str>,
+) -> Result<ObjectPayload> {
+    let chunk_hash = blake3::hash(&plaintext).to_hex().to_string();
+    let created_unix_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis() as u64;
+
+    let timing = TimingMeta {
+        chunk_index,
+        chunk_start_27mhz: 0,
+        chunk_duration_27mhz,
+        utc_start_unix: None,
+        sync_status: sync_status.to_string(),
+    };
+
+    let encrypted = encrypt_stream_data(key_id, chunk_index, &plaintext, network_secret);
+    let meta = ObjectMeta {
+        created_unix_ms,
+        content_type: content_type.to_string(),
+        size_bytes: encrypted.ciphertext.len() as u64,
+        timing: Some(timing),
+        encryption: Some(ec_moq::EncryptionMeta {
+            alg: encrypted.alg.to_string(),
+            key_id: key_id.to_string(),
+            nonce_hex: hex::encode(encrypted.nonce),
+        }),
+        chunk_hash: Some(chunk_hash),
+        chunk_hash_alg: Some("blake3".to_string()),
+        chunk_proof: None,
+        chunk_proof_alg: None,
+        manifest_id: manifest_id.map(|s| s.to_string()),
+    };
+
+    Ok(ObjectPayload {
+        meta,
+        data: encrypted.ciphertext,
+    })
+}
+
+fn build_catalog_entry(
+    descriptor: &StreamDescriptor,
+    endpoint_addr: &str,
+    broadcast_name: &str,
+    track_name: &str,
+) -> StreamCatalogEntry {
+    let encryption = StreamEncryptionInfo {
+        alg: ENCRYPTION_ALG.to_string(),
+        key_id: descriptor.id.0.clone(),
+        nonce_scheme: "blake3(stream-id,chunk-index)".to_string(),
+    };
+
+    let moq = MoqStreamDescriptor {
+        endpoint: endpoint_addr.to_string(),
+        broadcast_name: broadcast_name.to_string(),
+        track_name: track_name.to_string(),
+        encryption: Some(encryption),
+    };
+
+    StreamCatalogEntry {
+        stream: descriptor.clone(),
+        moq: Some(moq),
+        manifest: None,
+        updated_unix_ms: SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_millis() as u64,
+    }
+}
+
+fn default_encoder_args() -> Vec<&'static str> {
+    vec![
+        "-c:a",
+        "aac",
+        "-b:a",
+        "128k",
+        "-ac",
+        "2",
+        "-ar",
+        "48000",
+        "-pix_fmt",
+        "yuv420p",
+        "-g",
+        "60",
+        "-keyint_min",
+        "60",
+        "-sc_threshold",
+        "0",
+        "-bf",
+        "0",
+        "-threads",
+        "1",
+        "-fflags",
+        "+bitexact",
+        "-flags:v",
+        "+bitexact",
+        "-flags:a",
+        "+bitexact",
+    ]
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn normalize_host_strips_scheme_path_and_slash() {
+        // Use documentation IPs (RFC 5737) in tests.
+        assert_eq!(normalize_host("http://192.0.2.1/"), "192.0.2.1");
+        assert_eq!(
+            normalize_host("https://example.local/foo/bar"),
+            "example.local"
+        );
+        assert_eq!(normalize_host(" 192.0.2.3 "), "192.0.2.3");
+    }
+
+    #[test]
+    fn linux_dvb_url_roundtrips_parse() {
+        let config = LinuxDvbConfig {
+            adapter: 1,
+            frontend: 0,
+            dvr: 2,
+            tune_command: Some(vec![
+                "dvbv5-zap".to_string(),
+                "-r".to_string(),
+                "Channel Name".to_string(),
+            ]),
+            tune_timeout_ms: Some(800),
+        };
+        let url = linux_dvb_url(&config);
+        let parsed = Url::parse(&url).unwrap();
+        let out = parse_linux_dvb_url(&parsed).unwrap();
+        assert_eq!(out.adapter, 1);
+        assert_eq!(out.dvr, 2);
+        assert_eq!(out.tune_timeout_ms, Some(800));
+        assert_eq!(out.tune_command.unwrap()[0], "dvbv5-zap");
+    }
+
+    #[test]
+    fn stream_dir_name_sanitizes_non_alnum() {
+        assert_eq!(
+            stream_dir_name("ec/stream/v1/source/hdhr"),
+            "ec_stream_v1_source_hdhr"
+        );
+        assert_eq!(stream_dir_name("a b+c"), "a_b_c");
+    }
+
+    #[test]
+    fn merge_source_descriptors_dedupes_manual_hdhr_by_device_id() {
+        let device = HdhomerunDevice {
+            id: ec_core::DeviceId("ABCDEF01".to_string()),
+            ip: "10.0.0.1".to_string(),
+            tuner_count: 4,
+            lineup_url: None,
+            discover_url: None,
+            base_url: None,
+            device_auth: None,
+            friendly_name: Some("HDHR".to_string()),
+            model_number: None,
+            firmware_name: None,
+            firmware_version: None,
+            device_type: None,
+            discovery_tags: Vec::new(),
+            raw_discover_json: None,
+        };
+
+        let sources = vec![source_descriptor_for_device(&device, "online")];
+        let merged = merge_source_descriptors(sources, [(&"host".to_string(), &device)]);
+        let count = merged.iter().filter(|s| s.kind == "hdhr").count();
+        assert_eq!(count, 1);
+    }
+
+    #[test]
+    fn write_hls_master_playlist_includes_variants() {
+        let dir = std::env::temp_dir().join(format!(
+            "ec-tauri-master-{}",
+            SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis()
+        ));
+        let _ = fs::remove_dir_all(&dir);
+        let variants = default_cmaf_variants();
+        write_hls_master_playlist(&dir, &variants, 128_000).unwrap();
+        let text = fs::read_to_string(dir.join("index.m3u8")).unwrap();
+        assert!(text.contains("#EXT-X-STREAM-INF"));
+        assert!(text.contains("1080p/index.m3u8"));
+        assert!(text.contains("720p/index.m3u8"));
+        assert!(text.contains("480p/index.m3u8"));
+        let _ = fs::remove_dir_all(&dir);
+    }
+
+    #[test]
+    fn derive_variant_stream_id_is_stable() {
+        assert_eq!(
+            derive_variant_stream_id("every.channel/x", "720p"),
+            "every.channel/x/variant-720p"
+        );
+        assert_eq!(
+            derive_variant_stream_id("every.channel/x/", "A B"),
+            "every.channel/x/variant-a_b"
+        );
+    }
+}
diff --git a/apps/tauri/tauri.conf.json b/apps/tauri/tauri.conf.json
new file mode 100644
index 0000000..58a4d2e
--- /dev/null
+++ b/apps/tauri/tauri.conf.json
@@ -0,0 +1,31 @@
+{
+  "$schema": "https://schema.tauri.app/config/2",
+  "productName": "every.channel",
+  "version": "0.0.0",
+  "identifier": "channel.every.app",
+  "build": {
+    "beforeBuildCommand": "cd ui && trunk build --release",
+    "beforeDevCommand": "cd ui && trunk serve --port 1420 --public-url /",
+    "devUrl": "http://localhost:1420",
+    "frontendDist": "dist"
+  },
+  "app": {
+    "withGlobalTauri": true,
+    "windows": [
+      {
+        "title": "every.channel",
+        "width": 1280,
+        "height": 820,
+        "resizable": true
+      }
+    ],
+    "security": {
+      "csp": null
+    }
+  },
+  "bundle": {
+    "resources": [
+      "resources/**/*"
+    ]
+  }
+}
diff --git a/apps/tauri/ui/Cargo.lock b/apps/tauri/ui/Cargo.lock
new file mode 100644
index 0000000..dde1ab3
--- /dev/null
+++ b/apps/tauri/ui/Cargo.lock
@@ -0,0 +1,3619 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "aead"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d122413f284cf2d62fb1b7db97e02edb8cda96d769b16e443a4f6195e35662b0"
+dependencies = [
+ "crypto-common",
+ "generic-array",
+]
+
+[[package]]
+name = "aes"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b169f7a6d4742236a0a00c541b845991d0ac43e546831af1249753ab4c3aa3a0"
+dependencies = [
+ "cfg-if",
+ "cipher",
+ "cpufeatures",
+]
+
+[[package]]
+name = "aes-gcm"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "831010a0f742e1209b3bcea8fab6a8e149051ba6099432c8cb2cc117dec3ead1"
+dependencies = [
+ "aead",
+ "aes",
+ "cipher",
+ "ctr",
+ "ghash",
+ "subtle",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.101"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
+
+[[package]]
+name = "arc-swap"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ded5f9a03ac8f24d1b8a25101ee812cd32cdc8c50a4c50237de2c4915850e73"
+dependencies = [
+ "rustversion",
+]
+
+[[package]]
+name = "asn1-rs"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f6fd5ddaf0351dff5b8da21b2fb4ff8e08ddd02857f0bf69c47639106c0fff0"
+dependencies = [
+ "asn1-rs-derive 0.4.0",
+ "asn1-rs-impl 0.1.0",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror",
+]
+
+[[package]]
+name = "asn1-rs"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5493c3bedbacf7fd7382c6346bbd66687d12bbaad3a89a2d2c303ee6cf20b048"
+dependencies = [
+ "asn1-rs-derive 0.5.1",
+ "asn1-rs-impl 0.2.0",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "726535892e8eae7e70657b4c8ea93d26b8553afb1ce617caee529ef96d7dee6c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "synstructure 0.12.6",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "965c2d33e53cb6b267e148a4cb0760bc01f4904c1cd4bb4002a085bb016d1490"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2777730b2039ac0f95f093556e61b6d26cebed5393ca6f152717777cec3a42ed"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "async_cell"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "447ab28afbb345f5408b120702a44e5529ebf90b1796ec76e9528df8e288e6c2"
+dependencies = [
+ "loom",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "base16ct"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c7f02d4ea65f2c1853089ffd8d2787bdbc63de2f0d29dedbcf8ccdfa0ccd4cf"
+
+[[package]]
+name = "base64"
+version = "0.21.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d297deb1925b89f2ccc13d7635fa0714f12c87adce1c75356b39ca9b7178567"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
+
+[[package]]
+name = "bincode"
+version = "1.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1f45e9417d87227c7a56d22e471c6206462cba514c7590c09aff4cf6d1ddcad"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "block-padding"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8894febbff9f758034a5b8e12d87918f56dfc64a8e1fe757d65e29041538d93"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
+
+[[package]]
+name = "cbc"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26b52a9543ae338f279b96b0b9fed9c8093744685043739079ce85cd58f289a6"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47b26a0954ae34af09b50f0de26458fa95369a0d478d8236d3f93082b219bd29"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "ccm"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae3c82e4355234767756212c570e29833699ab63e6ffd161887314cc5b43847"
+dependencies = [
+ "aead",
+ "cipher",
+ "ctr",
+ "subtle",
+]
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "ciborium"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42e69ffd6f0917f5c029256a24d0161db17cea3997d185db0d35926308770f0e"
+dependencies = [
+ "ciborium-io",
+ "ciborium-ll",
+ "serde",
+]
+
+[[package]]
+name = "ciborium-io"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05afea1e0a06c9be33d539b876f1ce3692f4afea2cb41f740e7743225ed1c757"
+
+[[package]]
+name = "ciborium-ll"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57663b653d948a338bfb3eeba9bb2fd5fcfaecb9e199e87e1eda4d9e8b240fd9"
+dependencies = [
+ "ciborium-io",
+ "half",
+]
+
+[[package]]
+name = "cipher"
+version = "0.4.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773f3b9af64447d2ce9850330c473515014aa235e6a783b02db81ff39e4a3dad"
+dependencies = [
+ "crypto-common",
+ "inout",
+]
+
+[[package]]
+name = "console_error_panic_hook"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a06aeb73f470f66dcdbf7223caeebb85984942f22f1adb2a088cf9668146bbbc"
+dependencies = [
+ "cfg-if",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.9.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2459377285ad874054d797f3ccebf984978aa39129f6eafde5cdc8315b612f8"
+
+[[package]]
+name = "const-serialize"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08259976d62c715c4826cb4a3d64a3a9e5c5f68f964ff6087319857f569f93a6"
+dependencies = [
+ "const-serialize-macro",
+ "serde",
+]
+
+[[package]]
+name = "const-serialize-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04382d0d9df7434af6b1b49ea1a026ef39df1b0738b1cc373368cf175354f6eb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "const_format"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7faa7469a93a566e9ccc1c73fe783b4a65c274c5ace346038dca9c39fe0030ad"
+dependencies = [
+ "const_format_proc_macros",
+]
+
+[[package]]
+name = "const_format_proc_macros"
+version = "0.2.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-xid",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5eb8a2a1cd12ab0d987a5d5e825195d372001a4094a0376319d5a0ad71c1ba0d"
+dependencies = [
+ "crc-catalog",
+]
+
+[[package]]
+name = "crc-catalog"
+version = "2.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19d374276b40fb8bbdee95aef7c7fa6b5316ec764510eb64b8dd0e2ed0d7e7f5"
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-bigint"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dc92fb57ca44df6db8059111ab3af99a63d5d0f8375d9972e319a379c6bab76"
+dependencies = [
+ "generic-array",
+ "rand_core",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "rand_core",
+ "typenum",
+]
+
+[[package]]
+name = "ctr"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0369ee1ad671834580515889b80f2ea915f23b8be8d0daa4bbaf2ac5c7590835"
+dependencies = [
+ "cipher",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "4.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97fb8b7c4503de7d6ae7b42ab72a5a59857b4c937ec27a3d4539dba95b5ab2be"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "fiat-crypto",
+ "rustc_version",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dashmap"
+version = "5.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "978747c1d849a7d2ee5e8adc0159961c48fb7e5db2f06af6723b80123bb53856"
+dependencies = [
+ "cfg-if",
+ "hashbrown",
+ "lock_api",
+ "once_cell",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "der"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e7c1832837b905bbfb5101e07cc24c8deddf52f93225eee6ead5f4d63d53ddcb"
+dependencies = [
+ "const-oid",
+ "pem-rfc7468",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "8.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dbd676fbbab537128ef0278adb5576cf363cff6aa22a7b24effe97347cfab61e"
+dependencies = [
+ "asn1-rs 0.5.2",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "der-parser"
+version = "9.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5cd0a5c643689626bec213c4d8bd4d96acc8ffdb4ad4bb6bc16abf27d5f4b553"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "displaydoc",
+ "nom",
+ "num-bigint",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
+dependencies = [
+ "powerfmt",
+]
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "const-oid",
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "dioxus"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60a247114500f1a78e87022defa8173de847accfada8e8809dfae23a118a580c"
+dependencies = [
+ "dioxus-cli-config",
+ "dioxus-config-macro",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-devtools",
+ "dioxus-document",
+ "dioxus-fullstack",
+ "dioxus-history",
+ "dioxus-hooks",
+ "dioxus-html",
+ "dioxus-logger",
+ "dioxus-signals",
+ "dioxus-web",
+ "manganis",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-cli-config"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdd16948f1ffdb068dd9a64812158073a4250e2af4e98ea31fdac0312e6bce86"
+dependencies = [
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "dioxus-config-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75cbf582fbb1c32d34a1042ea675469065574109c95154468710a4d73ee98b49"
+dependencies = [
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "dioxus-core"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c03f451a119e47433c16e2d8eb5b15bf7d6e6734eb1a4c47574e6711dadff8d"
+dependencies = [
+ "const_format",
+ "dioxus-core-types",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "longest-increasing-subsequence",
+ "rustc-hash",
+ "rustversion",
+ "serde",
+ "slab",
+ "slotmap",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-core-macro"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "105c954caaaedf8cd10f3d1ba576b01e18aa8d33ad435182125eefe488cf0064"
+dependencies = [
+ "convert_case",
+ "dioxus-rsx",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dioxus-core-types"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91a82fccfa48574eb7aa183e297769540904694844598433a9eb55896ad9f93b"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "dioxus-devtools"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712a7300f1e8181218187b03502044157eef04e0a25b518117c5ef9ae1096880"
+dependencies = [
+ "dioxus-core",
+ "dioxus-devtools-types",
+ "dioxus-signals",
+ "serde",
+ "serde_json",
+ "tracing",
+ "tungstenite",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-devtools-types"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f62434973c0c9c5a3bc42e9cd5e7070401c2062a437fb5528f318c3e42ebf4ff"
+dependencies = [
+ "dioxus-core",
+ "serde",
+]
+
+[[package]]
+name = "dioxus-document"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "802a2014d1662b6615eec0a275745822ee4fc66aacd9d0f2fb33d6c8da79b8f2"
+dependencies = [
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-core-types",
+ "dioxus-html",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "lazy-js-bundle",
+ "serde",
+ "serde_json",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-fullstack"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe99b48a1348eec385b5c4bd3e80fd863b0d3b47257d34e2ddc58754dec5d128"
+dependencies = [
+ "base64 0.22.1",
+ "bytes",
+ "ciborium",
+ "dioxus-devtools",
+ "dioxus-history",
+ "dioxus-lib",
+ "dioxus-web",
+ "dioxus_server_macro",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "once_cell",
+ "serde",
+ "server_fn",
+ "tracing",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus-history"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ae4e22616c698f35b60727313134955d885de2d32e83689258e586ebc9b7909"
+dependencies = [
+ "dioxus-core",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-hooks"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "948e2b3f20d9d4b2c300aaa60281b1755f3298684448920b27106da5841896d0"
+dependencies = [
+ "dioxus-core",
+ "dioxus-signals",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "rustversion",
+ "slab",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-html"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59c9a40e6fee20ce7990095492dedb6a753eebe05e67d28271a249de74dc796d"
+dependencies = [
+ "async-trait",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-core-types",
+ "dioxus-hooks",
+ "dioxus-html-internal-macro",
+ "enumset",
+ "euclid",
+ "futures-channel",
+ "generational-box",
+ "keyboard-types",
+ "lazy-js-bundle",
+ "rustversion",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-html-internal-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43ba87b53688a2c9f619ecdf4b3b955bc1f08bd0570a80a0d626c405f6d14a76"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dioxus-interpreter-js"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330707b10ca75cb0eb05f9e5f8d80217cd0d7e62116a8277ae363c1a09b57a22"
+dependencies = [
+ "js-sys",
+ "lazy-js-bundle",
+ "rustc-hash",
+ "sledgehammer_bindgen",
+ "sledgehammer_utils",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus-lib"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5405b71aa9b8b0c3e0d22728f12f34217ca5277792bd315878cc6ecab7301b72"
+dependencies = [
+ "dioxus-config-macro",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-document",
+ "dioxus-history",
+ "dioxus-hooks",
+ "dioxus-html",
+ "dioxus-rsx",
+ "dioxus-signals",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-logger"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "545961e752f6c8bf59c274951b3c8b18a106db6ad2f9e2035b29e1f2a3e899b1"
+dependencies = [
+ "console_error_panic_hook",
+ "dioxus-cli-config",
+ "tracing",
+ "tracing-subscriber",
+ "tracing-wasm",
+]
+
+[[package]]
+name = "dioxus-rsx"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eb588e05800b5a7eb90b2f40fca5bbd7626e823fb5e1ba21e011de649b45aa1"
+dependencies = [
+ "proc-macro2",
+ "proc-macro2-diagnostics",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dioxus-signals"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10e032dbb3a2c0386ec8b8ee59bc20b5aeb67038147c855801237b45b13d72ac"
+dependencies = [
+ "dioxus-core",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "once_cell",
+ "parking_lot",
+ "rustc-hash",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-web"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e7c12475c3d360058b8afe1b68eb6dfc9cbb7dcd760aed37c5f85c561c83ed1"
+dependencies = [
+ "async-trait",
+ "ciborium",
+ "dioxus-cli-config",
+ "dioxus-core",
+ "dioxus-core-types",
+ "dioxus-devtools",
+ "dioxus-document",
+ "dioxus-history",
+ "dioxus-html",
+ "dioxus-interpreter-js",
+ "dioxus-signals",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "js-sys",
+ "lazy-js-bundle",
+ "rustc-hash",
+ "serde",
+ "serde-wasm-bindgen 0.5.0",
+ "serde_json",
+ "tracing",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus_server_macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "371a5b21989a06b53c5092e977b3f75d0e60a65a4c15a2aa1d07014c3b2dda97"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "server_fn_macro",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "ec-direct"
+version = "0.0.0"
+dependencies = [
+ "anyhow",
+ "base64 0.22.1",
+ "just-webrtc",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "ec-tauri-ui"
+version = "0.0.0"
+dependencies = [
+ "bytes",
+ "dioxus",
+ "ec-direct",
+ "futures-util",
+ "gloo-net",
+ "gloo-timers",
+ "js-sys",
+ "just-webrtc",
+ "serde",
+ "serde-wasm-bindgen 0.6.5",
+ "serde_json",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "ecdsa"
+version = "0.16.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee27f32b5c5292967d2d4a9d7f1e0b0aed2c15daded5a60300e4abb9d8020bca"
+dependencies = [
+ "der",
+ "digest",
+ "elliptic-curve",
+ "rfc6979",
+ "signature",
+ "spki",
+]
+
+[[package]]
+name = "elliptic-curve"
+version = "0.13.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5e6043086bf7973472e0c7dff2142ea0b680d30e18d9cc40f267efbf222bd47"
+dependencies = [
+ "base16ct",
+ "crypto-bigint",
+ "digest",
+ "ff",
+ "generic-array",
+ "group",
+ "hkdf",
+ "pem-rfc7468",
+ "pkcs8",
+ "rand_core",
+ "sec1",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "enumset"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25b07a8dfbbbfc0064c0a6bdf9edcf966de6b1c33ce344bdeca3b41615452634"
+dependencies = [
+ "enumset_derive",
+]
+
+[[package]]
+name = "enumset_derive"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f43e744e4ea338060faee68ed933e46e722fb7f3617e722a5772d7e856d8b3ce"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "euclid"
+version = "0.22.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df61bf483e837f88d5c2291dcf55c67be7e676b3a51acc48db3a7b163b91ed63"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "ff"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0b50bfb653653f9ca9095b427bed08ab8d75a137839d9ad64eb11810d5b6393"
+dependencies = [
+ "rand_core",
+ "subtle",
+]
+
+[[package]]
+name = "fiat-crypto"
+version = "0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28dea519a9695b9977216879a3ebfddf92f1c08c05d984f8996aecd6ecdc811d"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
+
+[[package]]
+name = "flume"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "spin",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "generational-box"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a673cf4fb0ea6a91aa86c08695756dfe875277a912cdbf33db9a9f62d47ed82b"
+dependencies = [
+ "parking_lot",
+ "tracing",
+]
+
+[[package]]
+name = "generator"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f04ae4152da20c76fe800fa48659201d5cf627c5149ca0b707b69d7eef6cf9"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "libc",
+ "log",
+ "rustversion",
+ "windows-link",
+ "windows-result",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+ "zeroize",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "r-efi",
+ "wasip2",
+]
+
+[[package]]
+name = "ghash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0d8a4362ccb29cb0b265253fb0a2728f592895ee6854fd9bc13f2ffda266ff1"
+dependencies = [
+ "opaque-debug",
+ "polyval",
+]
+
+[[package]]
+name = "gloo-net"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c06f627b1a58ca3d42b45d6104bf1e1a03799df472df00988b6ba21accc10580"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-sink",
+ "gloo-utils",
+ "http",
+ "js-sys",
+ "pin-project",
+ "serde",
+ "serde_json",
+ "thiserror",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "gloo-timers"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbb143cf96099802033e0d4f4963b19fd2e0b728bcf076cd9cf7f6634f092994"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "gloo-utils"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b5555354113b18c547c1d3a98fbf7fb32a9ff4f6fa112ce823a21641a0ba3aa"
+dependencies = [
+ "js-sys",
+ "serde",
+ "serde_json",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "group"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0f9ef7462f7c099f518d754361858f86d8a07af53ba9af0fe635bbccb151a63"
+dependencies = [
+ "ff",
+ "rand_core",
+ "subtle",
+]
+
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if",
+ "crunchy",
+ "zerocopy",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hkdf"
+version = "0.12.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b5f8eb2ad728638ea2c7d47a21db23b7b58a72ed6a38256b8a1849f15fbbdf7"
+dependencies = [
+ "hmac",
+]
+
+[[package]]
+name = "hmac"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c49c37c09c17a53d937dfbb742eb3a961d65a994e6bcdcf37e7399d0cc8ab5e"
+dependencies = [
+ "digest",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "inout"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "879f10e63c20629ecabbb64a8010319738c66a5cd0c29b02d63d272b03751d01"
+dependencies = [
+ "block-padding",
+ "generic-array",
+]
+
+[[package]]
+name = "interceptor"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4705c00485029e738bea8c9505b5ddb1486a8f3627a953e1e77e6abdf5eef90c"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "log",
+ "portable-atomic",
+ "rand",
+ "rtcp",
+ "rtp",
+ "thiserror",
+ "tokio",
+ "waitgroup",
+ "webrtc-srtp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "itoa"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
+
+[[package]]
+name = "js-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "just-webrtc"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb1cb0e36a34b7c6a147c374b68be2fb4ab279888e8637487da157da5f4b8a0b"
+dependencies = [
+ "async_cell",
+ "bytes",
+ "flume",
+ "js-sys",
+ "log",
+ "serde",
+ "serde-wasm-bindgen 0.6.5",
+ "thiserror",
+ "trait-variant",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "webrtc",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "lazy-js-bundle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e49596223b9d9d4947a14a25c142a6e7d8ab3f27eb3ade269d238bb8b5c267e2"
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.180"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "longest-increasing-subsequence"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3bd0dd2cd90571056fdb71f6275fada10131182f84899f4b2a916e565d81d86"
+
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "manganis"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "317af44b15e7605b85f04525449a3bb631753040156c9b318e6cba8a3ea4ef73"
+dependencies = [
+ "const-serialize",
+ "manganis-core",
+ "manganis-macro",
+]
+
+[[package]]
+name = "manganis-core"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c38bee65cc725b2bba23b5dbb290f57c8be8fadbe2043fb7e2ce73022ea06519"
+dependencies = [
+ "const-serialize",
+ "dioxus-cli-config",
+ "dioxus-core-types",
+ "serde",
+]
+
+[[package]]
+name = "manganis-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f4f71310913c40174d9f0cfcbcb127dad0329ecdb3945678a120db22d3d065"
+dependencies = [
+ "dunce",
+ "manganis-core",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "md-5"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
+dependencies = [
+ "cfg-if",
+ "digest",
+]
+
+[[package]]
+name = "memchr"
+version = "2.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
+
+[[package]]
+name = "memoffset"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5de893c32cde5f383baa4c04c5d6dbdd735cfd4a794b0debdb2bb1b421da5ff4"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "nix"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "598beaf3cc6fdd9a5dfb1630c2800c7acd31df7aaf0f565796fba2b53ca1af1b"
+dependencies = [
+ "bitflags 1.3.2",
+ "cfg-if",
+ "libc",
+ "memoffset",
+ "pin-utils",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8d8034d9489cdaf79228eb9f6a3b8d7bb32ba00d6645ebd48eef4077ceb5bd9"
+dependencies = [
+ "asn1-rs 0.6.2",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+
+[[package]]
+name = "opaque-debug"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08d65885ee38876c4f86fa503fb49d7b507c2b62552df7c70b2fce627e06381"
+
+[[package]]
+name = "p256"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9863ad85fa8f4460f9c48cb909d38a0d689dba1f6f6988a5e3e0d31071bcd4b"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "p384"
+version = "0.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe42f1670a52a47d448f14b6a5c61dd78fce51856e68edaa38f7ae3a46b8d6b6"
+dependencies = [
+ "ecdsa",
+ "elliptic-curve",
+ "primeorder",
+ "sha2",
+]
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64 0.22.1",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "88b39c9bfcfc231068454382784bb460aae594343fb030d46e9f50a645418412"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkcs8"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f950b2377845cebe5cf8b5165cb3cc1a5e0fa5cfa3e1f7f55707d8fd82e0a7b7"
+dependencies = [
+ "der",
+ "spki",
+]
+
+[[package]]
+name = "polyval"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d1fe60d06143b2430aa532c94cfe9e29783047f06c0d7fd359a9a51b729fa25"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "opaque-debug",
+ "universal-hash",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.13.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "primeorder"
+version = "0.13.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "353e1ca18966c16d9deb1c69278edbc5f194139612772bd9537af60ac231e1e6"
+dependencies = [
+ "elliptic-curve",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proc-macro2-diagnostics"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "version_check",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.17",
+]
+
+[[package]]
+name = "rcgen"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75e669e5202259b5314d1ea5397316ad400819437857b90861765f24c4cf80a2"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser",
+ "yasna",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a96887878f22d7bad8a3b6dc5b7440e0ada9a245242924394987b21cf2210a4c"
+
+[[package]]
+name = "rfc6979"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8dd2a808d456c4a54e300a23e9f5a67e122c3024119acbfd73e3bf664491cb2"
+dependencies = [
+ "hmac",
+ "subtle",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rtcp"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc9f775ff89c5fe7f0cc0abafb7c57688ae25ce688f1a52dd88e277616c76ab2"
+dependencies = [
+ "bytes",
+ "thiserror",
+ "webrtc-util",
+]
+
+[[package]]
+name = "rtp"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6870f09b5db96f8b9e7290324673259fd15519ebb7d55acf8e7eb044a9ead6af"
+dependencies = [
+ "bytes",
+ "portable-atomic",
+ "rand",
+ "serde",
+ "thiserror",
+ "webrtc-util",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c665f33d38cea657d9614f766881e4d510e0eda4239891eea56b4cadcf01801b"
+dependencies = [
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
+dependencies = [
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sdp"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13254db766b17451aced321e7397ebf0a446ef0c8d2942b6e67a95815421093f"
+dependencies = [
+ "rand",
+ "substring",
+ "thiserror",
+ "url",
+]
+
+[[package]]
+name = "sec1"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3e97a565f76233a6003f9f5c54be1d9c5bdfa3eccfb189469f11ec4901c47dc"
+dependencies = [
+ "base16ct",
+ "der",
+ "generic-array",
+ "pkcs8",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-wasm-bindgen"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3b143e2833c57ab9ad3ea280d21fd34e285a42837aeb0ee301f4f41890fa00e"
+dependencies = [
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "serde-wasm-bindgen"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8302e169f0eddcc139c70f139d19d6467353af16f9fce27e8c30158036a1e16b"
+dependencies = [
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_qs"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0431a35568651e363364210c91983c1da5eb29404d9f0928b67d4ebcfa7d330c"
+dependencies = [
+ "percent-encoding",
+ "serde",
+ "thiserror",
+]
+
+[[package]]
+name = "server_fn"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fae7a3038a32e5a34ba32c6c45eb4852f8affaf8b794ebfcd4b1099e2d62ebe"
+dependencies = [
+ "bytes",
+ "const_format",
+ "dashmap",
+ "futures",
+ "gloo-net",
+ "http",
+ "js-sys",
+ "once_cell",
+ "send_wrapper",
+ "serde",
+ "serde_json",
+ "serde_qs",
+ "server_fn_macro_default",
+ "thiserror",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "xxhash-rust",
+]
+
+[[package]]
+name = "server_fn_macro"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faaaf648c6967aef78177c0610478abb5a3455811f401f3c62d10ae9bd3901a1"
+dependencies = [
+ "const_format",
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "xxhash-rust",
+]
+
+[[package]]
+name = "server_fn_macro_default"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f2aa8119b558a17992e0ac1fd07f080099564f24532858811ce04f742542440"
+dependencies = [
+ "server_fn_macro",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sha2"
+version = "0.10.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signature"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77549399552de45a898a580c1b41d445bf730df867cc44e6c0233bbc4b8329de"
+dependencies = [
+ "digest",
+ "rand_core",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "sledgehammer_bindgen"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49e83e178d176459c92bc129cfd0958afac3ced925471b889b3a75546cfc4133"
+dependencies = [
+ "sledgehammer_bindgen_macro",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "sledgehammer_bindgen_macro"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb251b407f50028476a600541542b605bb864d35d9ee1de4f6cab45d88475e6d"
+dependencies = [
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "sledgehammer_utils"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "debdd4b83524961983cea3c55383b3910fd2f24fd13a188f5b091d2d504a61ae"
+dependencies = [
+ "rustc-hash",
+]
+
+[[package]]
+name = "slotmap"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdd58c3c93c3d278ca835519292445cb4b0d4dc59ccfdf7ceadaab3f8aeb4038"
+dependencies = [
+ "serde",
+ "version_check",
+]
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "smol_str"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.5.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
+dependencies = [
+ "libc",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0"
+dependencies = [
+ "libc",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spki"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d91ed6c858b01f942cd56b37a94b3e0a1798290327d1236e4d9cf4eaca44d29d"
+dependencies = [
+ "base64ct",
+ "der",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "stun"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28fad383a1cc63ae141e84e48eaef44a1063e9d9e55bcb8f51a99b886486e01b"
+dependencies = [
+ "base64 0.21.7",
+ "crc",
+ "lazy_static",
+ "md-5",
+ "rand",
+ "ring",
+ "subtle",
+ "thiserror",
+ "tokio",
+ "url",
+ "webrtc-util",
+]
+
+[[package]]
+name = "substring"
+version = "1.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42ee6433ecef213b2e72f587ef64a2f5943e7cd16fbd82dbe8bc07486c534c86"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.12.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f36bdaa60a83aca3921b5259d5400cbf5e90fc51931376a9bd4a0eb79aa7210f"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+ "unicode-xid",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.47"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c"
+dependencies = [
+ "deranged",
+ "itoa",
+ "num-conv",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca"
+
+[[package]]
+name = "time-macros"
+version = "0.2.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2e70e4c5a0e0a8a4823ad65dfe1a6930e4f4d756dcd9dd7939022b5e8c501215"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tokio"
+version = "1.49.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72a2903cd7736441aac9df9d7688bd0ce48edccaadf181c3b90be801e81d3d86"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "socket2 0.6.2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "tracing-wasm"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4575c663a174420fa2d78f4108ff68f65bf2fbb7dd89f33749b6e826b3626e07"
+dependencies = [
+ "tracing",
+ "tracing-subscriber",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "trait-variant"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70977707304198400eb4835a78f6a9f928bf41bba420deb8fdb175cd965d77a7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e2ce1e47ed2994fd43b04c8f618008d4cabdd5ee34027cf14f9d918edd9c8"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror",
+ "utf-8",
+]
+
+[[package]]
+name = "turn"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b000cebd930420ac1ed842c8128e3b3412512dfd5b82657eab035a3f5126acc"
+dependencies = [
+ "async-trait",
+ "base64 0.21.7",
+ "futures",
+ "log",
+ "md-5",
+ "portable-atomic",
+ "rand",
+ "ring",
+ "stun",
+ "thiserror",
+ "tokio",
+ "tokio-util",
+ "webrtc-util",
+]
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "universal-hash"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc1de2c688dc15305988b563c3854064043356019f97a4b46276fe734c4f07ea"
+dependencies = [
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "uuid"
+version = "1.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f"
+dependencies = [
+ "getrandom 0.3.4",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "waitgroup"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1f50000a783467e6c0200f9d10642f4bc424e39efc1b770203e88b488f79292"
+dependencies = [
+ "atomic-waker",
+]
+
+[[package]]
+name = "warnings"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64f68998838dab65727c9b30465595c6f7c953313559371ca8bf31759b3680ad"
+dependencies = [
+ "pin-project",
+ "tracing",
+ "warnings-macro",
+]
+
+[[package]]
+name = "warnings-macro"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59195a1db0e95b920366d949ba5e0d3fc0e70b67c09be15ce5abb790106b0571"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70a6e77fd0ae8029c9ea0063f87c46fde723e7d887703d74ad2616d792e51e6f"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "312e32e551d92129218ea9a2452120f4aabc03529ef03e4d0d82fb2780608598"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webrtc"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b3a840e31c969844714f93b5a87e73ee49f3bc2a4094ab9132c69497eb31db"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "bytes",
+ "cfg-if",
+ "hex",
+ "interceptor",
+ "lazy_static",
+ "log",
+ "portable-atomic",
+ "rand",
+ "rcgen",
+ "regex",
+ "ring",
+ "rtcp",
+ "rtp",
+ "rustls",
+ "sdp",
+ "serde",
+ "serde_json",
+ "sha2",
+ "smol_str",
+ "stun",
+ "thiserror",
+ "time",
+ "tokio",
+ "turn",
+ "url",
+ "waitgroup",
+ "webrtc-data",
+ "webrtc-dtls",
+ "webrtc-ice",
+ "webrtc-mdns",
+ "webrtc-media",
+ "webrtc-sctp",
+ "webrtc-srtp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-data"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8b7c550f8d35867b72d511640adf5159729b9692899826fe00ba7fa74f0bf70"
+dependencies = [
+ "bytes",
+ "log",
+ "portable-atomic",
+ "thiserror",
+ "tokio",
+ "webrtc-sctp",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-dtls"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86e5eedbb0375aa04da93fc3a189b49ed3ed9ee844b6997d5aade14fc3e2c26e"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "async-trait",
+ "bincode",
+ "byteorder",
+ "cbc",
+ "ccm",
+ "der-parser 8.2.0",
+ "hkdf",
+ "hmac",
+ "log",
+ "p256",
+ "p384",
+ "portable-atomic",
+ "rand",
+ "rand_core",
+ "rcgen",
+ "ring",
+ "rustls",
+ "sec1",
+ "serde",
+ "sha1",
+ "sha2",
+ "subtle",
+ "thiserror",
+ "tokio",
+ "webrtc-util",
+ "x25519-dalek",
+ "x509-parser",
+]
+
+[[package]]
+name = "webrtc-ice"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4d4f0ca6d4df8d1bdd34eece61b51b62540840b7a000397bcfb53a7bfcf347c8"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "crc",
+ "log",
+ "portable-atomic",
+ "rand",
+ "serde",
+ "serde_json",
+ "stun",
+ "thiserror",
+ "tokio",
+ "turn",
+ "url",
+ "uuid",
+ "waitgroup",
+ "webrtc-mdns",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-mdns"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0804694f3b2acfdff48f6df217979b13cb0a00377c63b5effd111daaee7e8c4"
+dependencies = [
+ "log",
+ "socket2 0.5.10",
+ "thiserror",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-media"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c15b20e98167b22949abc1c20eca7c6d814307d187068fe7a48f0b87a4f6d46"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "rand",
+ "rtp",
+ "thiserror",
+]
+
+[[package]]
+name = "webrtc-sctp"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d850daa68639b9d7bb16400676e97525d1e52b15b4928240ae2ba0e849817a5"
+dependencies = [
+ "arc-swap",
+ "async-trait",
+ "bytes",
+ "crc",
+ "log",
+ "portable-atomic",
+ "rand",
+ "thiserror",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-srtp"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fbec5da43a62c228d321d93fb12cc9b4d9c03c9b736b0c215be89d8bd0774cfe"
+dependencies = [
+ "aead",
+ "aes",
+ "aes-gcm",
+ "byteorder",
+ "bytes",
+ "ctr",
+ "hmac",
+ "log",
+ "rtcp",
+ "rtp",
+ "sha1",
+ "subtle",
+ "thiserror",
+ "tokio",
+ "webrtc-util",
+]
+
+[[package]]
+name = "webrtc-util"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc8d9bc631768958ed97b8d68b5d301e63054ae90b09083d43e2fefb939fd77e"
+dependencies = [
+ "async-trait",
+ "bitflags 1.3.2",
+ "bytes",
+ "ipnet",
+ "lazy_static",
+ "libc",
+ "log",
+ "nix",
+ "portable-atomic",
+ "rand",
+ "thiserror",
+ "tokio",
+ "winapi",
+]
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "x25519-dalek"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7e468321c81fb07fa7f4c636c3972b9100f0346e5b6a9f2bd0603a52f7ed277"
+dependencies = [
+ "curve25519-dalek",
+ "rand_core",
+ "serde",
+ "zeroize",
+]
+
+[[package]]
+name = "x509-parser"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcbc162f30700d6f3f82a24bf7cc62ffe7caea42c0b2cba8bf7f3ae50cf51f69"
+dependencies = [
+ "asn1-rs 0.6.2",
+ "data-encoding",
+ "der-parser 9.0.0",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror",
+ "time",
+]
+
+[[package]]
+name = "xxhash-rust"
+version = "0.8.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
+
+[[package]]
+name = "yasna"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17bb3549cc1321ae1296b9cdc2698e2b6cb1992adfa19a8c72e5b7a738f44cd"
+dependencies = [
+ "time",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7456cf00f0685ad319c5b1693f291a650eaf345e941d082fc4e03df8a03996ac"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1328722bbf2115db7e19d69ebcc15e795719e2d66b60827c6a69a117365e37a0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+ "synstructure 0.13.2",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85a5b4158499876c763cb03bc4e49185d3cccbabb15b33c627f7884f43db852e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.114",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ff05f8caa9038894637571ae6b9e29466c1f4f829d26c9b28f869a29cbe3445"
diff --git a/apps/tauri/ui/Cargo.toml b/apps/tauri/ui/Cargo.toml
new file mode 100644
index 0000000..fc18cdc
--- /dev/null
+++ b/apps/tauri/ui/Cargo.toml
@@ -0,0 +1,22 @@
+[package]
+name = "ec-tauri-ui"
+version = "0.0.0"
+edition = "2021"
+
+[dependencies]
+dioxus = { version = "0.6", features = ["web"] }
+ec-direct = { path = "../../../crates/ec-direct" }
+bytes = "1"
+futures-util = { version = "0.3", features = ["sink"] }
+gloo-timers = { version = "0.3", features = ["futures"] }
+gloo-net = { version = "0.6", features = ["websocket"] }
+js-sys = "0.3"
+just-webrtc = "0.2"
+serde = { version = "1", features = ["derive"] }
+serde-wasm-bindgen = "0.6"
+serde_json = "1"
+wasm-bindgen = "0.2"
+wasm-bindgen-futures = "0.4"
+web-sys = { version = "0.3", features = ["Window", "Navigator", "Clipboard", "MediaSource", "SourceBuffer", "Url", "HtmlVideoElement", "HtmlMediaElement", "EventTarget", "Event", "Blob", "Request", "RequestInit", "Response", "Headers", "Location"] }
+
+[workspace]
diff --git a/apps/tauri/ui/Trunk.toml b/apps/tauri/ui/Trunk.toml
new file mode 100644
index 0000000..788fec6
--- /dev/null
+++ b/apps/tauri/ui/Trunk.toml
@@ -0,0 +1,3 @@
+[build]
+dist = "../dist"
+public_url = "/"
diff --git a/apps/tauri/ui/icons/apple-touch-icon.png b/apps/tauri/ui/icons/apple-touch-icon.png
new file mode 100644
index 0000000..75e3330
Binary files /dev/null and b/apps/tauri/ui/icons/apple-touch-icon.png differ
diff --git a/apps/tauri/ui/icons/icon-192.png b/apps/tauri/ui/icons/icon-192.png
new file mode 100644
index 0000000..21a0536
Binary files /dev/null and b/apps/tauri/ui/icons/icon-192.png differ
diff --git a/apps/tauri/ui/icons/icon-512.png b/apps/tauri/ui/icons/icon-512.png
new file mode 100644
index 0000000..f0ced44
Binary files /dev/null and b/apps/tauri/ui/icons/icon-512.png differ
diff --git a/apps/tauri/ui/index.html b/apps/tauri/ui/index.html
new file mode 100644
index 0000000..556afec
--- /dev/null
+++ b/apps/tauri/ui/index.html
@@ -0,0 +1,34 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover" />
+    <meta name="theme-color" content="#f7f4ef" />
+    <meta name="color-scheme" content="light" />
+    <meta name="apple-mobile-web-app-capable" content="yes" />
+    <meta name="apple-mobile-web-app-status-bar-style" content="default" />
+    <title>every.channel</title>
+    <link rel="manifest" href="manifest.webmanifest" />
+    <link rel="icon" href="icons/icon-192.png" />
+    <link rel="apple-touch-icon" href="icons/apple-touch-icon.png" />
+
+    <link data-trunk rel="css" href="style.css" />
+    <link data-trunk rel="rust" data-wasm-opt="z" />
+
+    <link data-trunk rel="copy-file" href="manifest.webmanifest" />
+    <link data-trunk rel="copy-file" href="sw.js" />
+    <link data-trunk rel="copy-dir" href="icons" />
+  </head>
+  <body>
+    <div id="main"></div>
+
+    <script>
+      // Installable app shell (PWA). Keep this tiny and resilient.
+      if ("serviceWorker" in navigator) {
+        window.addEventListener("load", () => {
+          navigator.serviceWorker.register("./sw.js").catch(() => {});
+        });
+      }
+    </script>
+  </body>
+</html>
diff --git a/apps/tauri/ui/manifest.webmanifest b/apps/tauri/ui/manifest.webmanifest
new file mode 100644
index 0000000..1c2f367
--- /dev/null
+++ b/apps/tauri/ui/manifest.webmanifest
@@ -0,0 +1,29 @@
+{
+  "name": "every.channel",
+  "short_name": "every.channel",
+  "description": "every.channel viewer",
+  "start_url": "/",
+  "scope": "/",
+  "display": "standalone",
+  "background_color": "#f7f4ef",
+  "theme_color": "#f7f4ef",
+  "icons": [
+    {
+      "src": "icons/icon-192.png",
+      "sizes": "192x192",
+      "type": "image/png"
+    },
+    {
+      "src": "icons/icon-512.png",
+      "sizes": "512x512",
+      "type": "image/png"
+    },
+    {
+      "src": "icons/icon-512.png",
+      "sizes": "512x512",
+      "type": "image/png",
+      "purpose": "maskable"
+    }
+  ]
+}
+
diff --git a/apps/tauri/ui/src/main.rs b/apps/tauri/ui/src/main.rs
new file mode 100644
index 0000000..9095a27
--- /dev/null
+++ b/apps/tauri/ui/src/main.rs
@@ -0,0 +1,2329 @@
+use dioxus::prelude::*;
+use js_sys::{decode_uri_component, encode_uri_component, Function, Reflect, Promise};
+use serde::{Deserialize, Serialize};
+use std::cell::RefCell;
+use std::collections::VecDeque;
+use std::rc::Rc;
+use wasm_bindgen::closure::Closure;
+use wasm_bindgen::{JsCast, JsValue};
+use wasm_bindgen_futures::JsFuture;
+use web_sys::{Event, MediaSource, Request, RequestInit, Response, SourceBuffer, Url};
+
+use bytes::Bytes;
+use ec_direct::{decode_direct_link, encode_direct_link, DirectCodeV1};
+use just_webrtc::types::{ICEServer, PeerConfiguration};
+use just_webrtc::{DataChannelExt, PeerConnectionBuilder, PeerConnectionExt};
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq)]
+struct StreamDescriptor {
+    id: String,
+    title: String,
+    number: Option<String>,
+    source: String,
+    metadata: Vec<StreamMetadata>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq)]
+struct StreamMetadata {
+    key: String,
+    value: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq)]
+struct PlaybackInfo {
+    stream_id: String,
+    url: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+struct EmptyArgs {}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct StartArgs {
+    stream_id: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct MoqStartArgs {
+    remote: String,
+    broadcast_name: String,
+    stream_id: Option<String>,
+    track_name: Option<String>,
+    auto_quality: Option<bool>,
+    variant: Option<String>,
+    network_secret: Option<String>,
+    discovery: Option<String>,
+}
+
+#[derive(Clone, Debug)]
+struct DirectSession {
+    reply_link: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct DirectoryList {
+    now_ms: u64,
+    entries: Vec<DirectoryEntry>,
+}
+
+#[derive(Clone, Debug, Deserialize, PartialEq)]
+struct DirectoryEntry {
+    stream_id: String,
+    title: String,
+    offer: String,
+    updated_ms: u64,
+    expires_ms: u64,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct ShareArgs {
+    stream_id: String,
+    network_secret: Option<String>,
+    chunk_ms: Option<u64>,
+    announce: bool,
+    gossip_peers: Vec<String>,
+    discovery: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq)]
+#[serde(rename_all = "camelCase")]
+struct ShareInfo {
+    stream_id: String,
+    endpoint_addr: String,
+    endpoint_id: Option<String>,
+    broadcast_name: String,
+    track_name: String,
+    discovery: Option<String>,
+    announce_status: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq)]
+struct SourceDescriptor {
+    id: String,
+    kind: String,
+    name: String,
+    ip: Option<String>,
+    tuner_count: Option<u8>,
+    status: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct CatalogWatchArgs {
+    peers: Vec<String>,
+    discovery: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddStreamArgs {
+    input: String,
+    options: Option<ManualSourceOptions>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct ProbeStreamArgs {
+    input: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize, PartialEq, Eq)]
+#[serde(rename_all = "camelCase")]
+struct ManualSourceOptions {
+    ytdlp_format: Option<String>,
+    ytdlp_live_from_start: bool,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct YtdlpFormatOption {
+    format_id: String,
+    label: String,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct YtdlpProbe {
+    title: Option<String>,
+    formats: Vec<YtdlpFormatOption>,
+    default_format: Option<String>,
+    supports_live_from_start: bool,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct StreamProbe {
+    kind: String,
+    live: bool,
+    requires_options: bool,
+    message: Option<String>,
+    ytdlp: Option<YtdlpProbe>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbAdapterInfo {
+    adapter: u32,
+    dvrs: Vec<u32>,
+    frontends: Vec<u32>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbChannelsInfo {
+    channels_conf: Option<String>,
+    channels: Vec<String>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbBuildUrlArgs {
+    adapter: u32,
+    dvr: u32,
+    channel: Option<String>,
+    channels_conf: Option<String>,
+    tune_wait_ms: Option<u64>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+struct LinuxDvbListChannelsArgs {
+    channels_conf: Option<String>,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(rename_all = "camelCase")]
+struct AddStreamResult {
+    kind: String,
+    added: usize,
+    title: Option<String>,
+}
+
+fn discovery_string(dht: bool, mdns: bool, dns: bool) -> Option<String> {
+    let mut modes = Vec::new();
+    if dht {
+        modes.push("dht");
+    }
+    if mdns {
+        modes.push("mdns");
+    }
+    if dns {
+        modes.push("dns");
+    }
+    if modes.is_empty() {
+        None
+    } else {
+        Some(modes.join(","))
+    }
+}
+
+#[derive(Clone, Debug)]
+struct ParsedWatchLink {
+    remote: String,
+    broadcast: String,
+    track: Option<String>,
+    stream_id: Option<String>,
+    network_secret: Option<String>,
+    discovery: Option<String>,
+}
+
+fn encode_component(value: &str) -> String {
+    encode_uri_component(value).as_string().unwrap_or_else(|| value.to_string())
+}
+
+fn decode_component(value: &str) -> Option<String> {
+    decode_uri_component(value).ok()?.as_string()
+}
+
+fn build_watch_link(
+    remote: &str,
+    broadcast: &str,
+    track: Option<&str>,
+    stream_id: Option<&str>,
+    network_secret: Option<&str>,
+    discovery: Option<&str>,
+) -> String {
+    let mut parts = Vec::new();
+    parts.push(format!("remote={}", encode_component(remote)));
+    parts.push(format!("broadcast={}", encode_component(broadcast)));
+    if let Some(track) = track {
+        if !track.trim().is_empty() {
+            parts.push(format!("track={}", encode_component(track)));
+        }
+    }
+    if let Some(stream_id) = stream_id {
+        if !stream_id.trim().is_empty() {
+            parts.push(format!("stream_id={}", encode_component(stream_id)));
+        }
+    }
+    if let Some(secret) = network_secret {
+        if !secret.trim().is_empty() {
+            parts.push(format!("secret={}", encode_component(secret)));
+        }
+    }
+    if let Some(discovery) = discovery {
+        if !discovery.trim().is_empty() {
+            parts.push(format!("discovery={}", encode_component(discovery)));
+        }
+    }
+    format!("every.channel://watch?{}", parts.join("&"))
+}
+
+fn parse_watch_link(link: &str) -> Option<ParsedWatchLink> {
+    let link = link.trim();
+    let prefix = "every.channel://";
+    if !link.starts_with(prefix) {
+        return None;
+    }
+    let rest = &link[prefix.len()..];
+    let (path, query) = rest.split_once('?')?;
+    if !path.eq_ignore_ascii_case("watch") {
+        return None;
+    }
+
+    let mut remote = None::<String>;
+    let mut broadcast = None::<String>;
+    let mut track = None::<String>;
+    let mut stream_id = None::<String>;
+    let mut secret = None::<String>;
+    let mut discovery = None::<String>;
+
+    for pair in query.split('&') {
+        let pair = pair.trim();
+        if pair.is_empty() {
+            continue;
+        }
+        let (k, v) = pair.split_once('=').unwrap_or((pair, ""));
+        let k = decode_component(k).unwrap_or_else(|| k.to_string());
+        let v = decode_component(v).unwrap_or_else(|| v.to_string());
+        match k.as_str() {
+            "remote" => remote = Some(v),
+            "broadcast" => broadcast = Some(v),
+            "track" => track = Some(v),
+            "stream_id" => stream_id = Some(v),
+            "secret" => secret = Some(v),
+            "discovery" => discovery = Some(v),
+            _ => {}
+        }
+    }
+
+    Some(ParsedWatchLink {
+        remote: remote?,
+        broadcast: broadcast?,
+        track,
+        stream_id,
+        network_secret: secret,
+        discovery,
+    })
+}
+
+fn parse_direct_link(link: &str) -> Option<DirectCodeV1> {
+    decode_direct_link(link).ok()
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct ObjectMeta {
+    created_unix_ms: u64,
+    content_type: String,
+    size_bytes: u64,
+    timing: Option<TimingMeta>,
+    #[allow(dead_code)]
+    encryption: Option<EncryptionMeta>,
+    #[allow(dead_code)]
+    chunk_hash: Option<String>,
+    #[allow(dead_code)]
+    chunk_hash_alg: Option<String>,
+    #[allow(dead_code)]
+    chunk_proof: Option<Vec<String>>,
+    #[allow(dead_code)]
+    chunk_proof_alg: Option<String>,
+    #[allow(dead_code)]
+    manifest_id: Option<String>,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct TimingMeta {
+    chunk_index: u64,
+    chunk_start_27mhz: u64,
+    chunk_duration_27mhz: u64,
+    utc_start_unix: Option<i64>,
+    sync_status: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct EncryptionMeta {
+    alg: String,
+    key_id: String,
+    nonce_hex: String,
+}
+
+const DIRECT_WIRE_TAG_FRAME: u8 = 0x00;
+const DIRECT_WIRE_TAG_STREAM: u8 = 0x01;
+const DIRECT_WIRE_TAG_PING: u8 = 0x02;
+
+#[derive(Default)]
+struct DirectWireDecoder {
+    buf: Vec<u8>,
+    pos: usize,
+    want: Option<usize>,
+}
+
+impl DirectWireDecoder {
+    fn push(&mut self, msg: &[u8]) -> Vec<Vec<u8>> {
+        if msg.is_empty() {
+            return Vec::new();
+        }
+
+        match msg[0] {
+            DIRECT_WIRE_TAG_FRAME => return vec![msg[1..].to_vec()],
+            DIRECT_WIRE_TAG_STREAM => {
+                self.buf.extend_from_slice(&msg[1..]);
+            }
+            DIRECT_WIRE_TAG_PING => {
+                // Control message; ignore.
+                return Vec::new();
+            }
+            _ => {
+                // Unknown tag: assume legacy (whole frame per message).
+                return vec![msg.to_vec()];
+            }
+        }
+
+        let mut out = Vec::new();
+        loop {
+            if self.want.is_none() {
+                if self.buf.len().saturating_sub(self.pos) < 4 {
+                    break;
+                }
+                let start = self.pos;
+                let len = u32::from_be_bytes([
+                    self.buf[start],
+                    self.buf[start + 1],
+                    self.buf[start + 2],
+                    self.buf[start + 3],
+                ]) as usize;
+                self.pos += 4;
+                self.want = Some(len);
+            }
+
+            let Some(want) = self.want else { break };
+            if self.buf.len().saturating_sub(self.pos) < want {
+                break;
+            }
+            let start = self.pos;
+            let end = start + want;
+            out.push(self.buf[start..end].to_vec());
+            self.pos = end;
+            self.want = None;
+
+            if self.pos > 64 * 1024 {
+                self.buf.drain(0..self.pos);
+                self.pos = 0;
+            }
+        }
+
+        out
+    }
+}
+
+fn decode_object_frame(bytes: &[u8]) -> Option<(ObjectMeta, Vec<u8>)> {
+    if bytes.len() < 4 {
+        return None;
+    }
+    let meta_len = u32::from_be_bytes([bytes[0], bytes[1], bytes[2], bytes[3]]) as usize;
+    if bytes.len() < 4 + meta_len {
+        return None;
+    }
+    let meta: ObjectMeta = serde_json::from_slice(&bytes[4..4 + meta_len]).ok()?;
+    let data = bytes[4 + meta_len..].to_vec();
+    Some((meta, data))
+}
+
+fn find_subslice(haystack: &[u8], needle: &[u8]) -> Option<usize> {
+    haystack
+        .windows(needle.len())
+        .position(|window| window == needle)
+}
+
+fn codec_string_from_init_mp4(init: &[u8]) -> Option<String> {
+    // Minimal: locate avcC and read AVCProfileIndication/profile_compatibility/AVCLevelIndication.
+    let pos = find_subslice(init, b"avcC")?;
+    let start = pos + 4;
+    if init.len() < start + 4 {
+        return None;
+    }
+    let config_version = init[start];
+    if config_version != 1 {
+        return None;
+    }
+    let profile = init[start + 1];
+    let compat = init[start + 2];
+    let level = init[start + 3];
+    Some(format!("avc1.{profile:02x}{compat:02x}{level:02x}"))
+}
+
+fn ws_url_for_path(path_and_query: &str) -> Result<String, String> {
+    let window = web_sys::window().ok_or_else(|| "missing window".to_string())?;
+    let loc = window.location();
+    let origin = loc.origin().map_err(|_| "location.origin failed".to_string())?;
+    let ws_origin = if origin.starts_with("https://") {
+        origin.replacen("https://", "wss://", 1)
+    } else if origin.starts_with("http://") {
+        origin.replacen("http://", "ws://", 1)
+    } else {
+        return Err("unknown origin scheme".to_string());
+    };
+    Ok(format!("{ws_origin}{path_and_query}"))
+}
+
+struct MseSink {
+    ms: MediaSource,
+    sb: Option<SourceBuffer>,
+    is_open: bool,
+    updateend_installed: bool,
+    queue: VecDeque<Vec<u8>>,
+}
+
+fn create_mse_url() -> Result<(MediaSource, String), String> {
+    let ms = MediaSource::new().map_err(|_| "MediaSource unsupported".to_string())?;
+    let url = Url::create_object_url_with_source(&ms).map_err(|_| "URL create failed".to_string())?;
+    Ok((ms, url))
+}
+
+fn install_sourceopen(ms: &MediaSource, state: Rc<RefCell<MseSink>>) {
+    let ms_for_listener = ms.clone();
+    let cb = Closure::<dyn FnMut(Event)>::new(move |_evt: Event| {
+        let mut st = state.borrow_mut();
+        st.is_open = true;
+        // Keep MediaSource alive for the listener lifetime.
+        let _ = &ms_for_listener;
+    });
+    let _ = ms.add_event_listener_with_callback("sourceopen", cb.as_ref().unchecked_ref());
+    cb.forget();
+}
+
+fn try_create_source_buffer(state: Rc<RefCell<MseSink>>, init: &[u8]) -> Result<(), JsValue> {
+    let mut st = state.borrow_mut();
+    if st.sb.is_some() || !st.is_open {
+        return Ok(());
+    }
+    let v = codec_string_from_init_mp4(init).unwrap_or_else(|| "avc1.42e01e".to_string());
+    let with_audio = format!("video/mp4; codecs=\"{v}, mp4a.40.2\"");
+    let sb = st
+        .ms
+        .add_source_buffer(&with_audio)
+        .or_else(|_| st.ms.add_source_buffer(&format!("video/mp4; codecs=\"{v}\"")))?;
+    st.sb = Some(sb);
+    if !st.updateend_installed {
+        if let Some(sb) = st.sb.as_ref() {
+            let state2 = state.clone();
+            let cb = Closure::<dyn FnMut(Event)>::new(move |_evt: Event| {
+                let mut st = state2.borrow_mut();
+                flush_queue(&mut st);
+            });
+            let _ = sb.add_event_listener_with_callback("updateend", cb.as_ref().unchecked_ref());
+            cb.forget();
+            st.updateend_installed = true;
+        }
+    }
+    Ok(())
+}
+
+fn append_bytes(st: &mut MseSink, bytes: Vec<u8>) {
+    st.queue.push_back(bytes);
+    flush_queue(st);
+}
+
+fn flush_queue(st: &mut MseSink) {
+    let Some(sb) = st.sb.as_ref() else { return; };
+    if sb.updating() {
+        return;
+    }
+    let Some(mut next) = st.queue.pop_front() else { return; };
+    let _ = sb.append_buffer_with_u8_array(&mut next);
+}
+
+async fn copy_to_clipboard(text: String) -> Result<(), String> {
+    let window = web_sys::window().ok_or_else(|| "window unavailable".to_string())?;
+    let clipboard = window.navigator().clipboard();
+    let promise = clipboard.write_text(&text);
+    JsFuture::from(promise)
+        .await
+        .map_err(|err| format!("clipboard write rejected: {err:?}"))?;
+    Ok(())
+}
+
+async fn fetch_json<T: for<'de> Deserialize<'de>>(url: &str) -> Result<T, String> {
+    let window = web_sys::window().ok_or_else(|| "window unavailable".to_string())?;
+    let p = window.fetch_with_str(url);
+    let resp = JsFuture::from(p)
+        .await
+        .map_err(|err| format!("fetch rejected: {err:?}"))?;
+    let resp: Response = resp
+        .dyn_into()
+        .map_err(|_| "fetch response type mismatch".to_string())?;
+    let p = resp.json().map_err(|_| "response.json failed".to_string())?;
+    let value = JsFuture::from(p)
+        .await
+        .map_err(|err| format!("response.json rejected: {err:?}"))?;
+    serde_wasm_bindgen::from_value(value).map_err(|err| format!("invalid json: {err}"))
+}
+
+async fn post_json<T: Serialize>(url: &str, body: &T) -> Result<(), String> {
+    let window = web_sys::window().ok_or_else(|| "window unavailable".to_string())?;
+    let mut init = RequestInit::new();
+    init.method("POST");
+    let json = serde_json::to_string(body).map_err(|err| err.to_string())?;
+    init.body(Some(&JsValue::from_str(&json)));
+    let req = Request::new_with_str_and_init(url, &init)
+        .map_err(|_| "request build failed".to_string())?;
+    req.headers()
+        .set("content-type", "application/json")
+        .map_err(|_| "header set failed".to_string())?;
+    let p = window.fetch_with_request(&req);
+    let resp = JsFuture::from(p)
+        .await
+        .map_err(|err| format!("fetch rejected: {err:?}"))?;
+    let resp: Response = resp
+        .dyn_into()
+        .map_err(|_| "fetch response type mismatch".to_string())?;
+    if !resp.ok() {
+        return Err(format!("server error: {}", resp.status()));
+    }
+    Ok(())
+}
+
+#[derive(Deserialize)]
+struct TurnResp {
+    ice_servers: Vec<ICEServer>,
+}
+
+async fn fetch_turn_peer_config() -> PeerConfiguration {
+    let mut cfg = PeerConfiguration::default();
+    if let Ok(resp) = fetch_json::<TurnResp>("/api/turn").await {
+        // Prefer server-provided ICE servers when present.
+        if !resp.ice_servers.is_empty() {
+            cfg.ice_servers = resp.ice_servers;
+        }
+    }
+    cfg
+}
+
+fn main() {
+    dioxus::launch(App);
+}
+
+fn tauri_available() -> bool {
+    find_tauri_invoke().is_some()
+}
+
+fn find_tauri_invoke() -> Option<(JsValue, Function)> {
+    let window = web_sys::window()?;
+    let tauri = Reflect::get(&window, &JsValue::from_str("__TAURI__")).ok();
+    if let Some(tauri) = tauri {
+        if let Ok(invoke) = Reflect::get(&tauri, &JsValue::from_str("invoke")) {
+            if let Ok(func) = invoke.dyn_into::<Function>() {
+                return Some((tauri, func));
+            }
+        }
+        if let Ok(core) = Reflect::get(&tauri, &JsValue::from_str("core")) {
+            if let Ok(invoke) = Reflect::get(&core, &JsValue::from_str("invoke")) {
+                if let Ok(func) = invoke.dyn_into::<Function>() {
+                    return Some((core, func));
+                }
+            }
+        }
+    }
+    if let Ok(internals) = Reflect::get(&window, &JsValue::from_str("__TAURI_INTERNALS__")) {
+        if let Ok(invoke) = Reflect::get(&internals, &JsValue::from_str("invoke")) {
+            if let Ok(func) = invoke.dyn_into::<Function>() {
+                return Some((internals, func));
+            }
+        }
+    }
+    None
+}
+
+#[component]
+fn App() -> Element {
+    let mut streams = use_signal(Vec::<StreamDescriptor>::new);
+    let mut selected = use_signal(|| None::<StreamDescriptor>);
+    let mut playback = use_signal(|| None::<PlaybackInfo>);
+    let mut status = use_signal(|| "Discovering local streams".to_string());
+    let mut share_info = use_signal(|| None::<ShareInfo>);
+    let mut share_announce = use_signal(|| true);
+    let mut share_peers = use_signal(|| "".to_string());
+    let mut share_secret = use_signal(|| "".to_string());
+    let mut sources = use_signal(Vec::<SourceDescriptor>::new);
+    let mut source_status = use_signal(|| "Idle".to_string());
+    let mut catalog_peers = use_signal(|| "".to_string());
+    let mut source_menu_open = use_signal(|| false);
+    let mut source_loading = use_signal(|| false);
+    let mut moq_link = use_signal(|| "".to_string());
+    let mut moq_link_advanced = use_signal(|| false);
+    let mut moq_remote = use_signal(|| "".to_string());
+    let mut moq_broadcast = use_signal(|| "".to_string());
+    let mut moq_stream_id = use_signal(|| "".to_string());
+    let mut moq_track = use_signal(|| "chunks".to_string());
+    let mut moq_secret = use_signal(|| "".to_string());
+    let mut moq_auto_quality = use_signal(|| true);
+    let mut moq_quality = use_signal(|| "720p".to_string());
+    let mut direct_offer = use_signal(|| None::<DirectCodeV1>);
+    let mut direct_reply = use_signal(|| "".to_string());
+    let mut direct_answer_stream_id = use_signal(|| None::<String>);
+    let mut discovery_dht = use_signal(|| false);
+    let mut discovery_mdns = use_signal(|| false);
+    let mut discovery_dns = use_signal(|| false);
+    let mut add_input = use_signal(|| "".to_string());
+    let mut add_probe = use_signal(|| None::<StreamProbe>);
+    let mut add_probe_input = use_signal(|| "".to_string());
+    let mut add_format = use_signal(|| "".to_string());
+    let mut add_live_from_start = use_signal(|| false);
+    let mut linux_adapters = use_signal(Vec::<LinuxDvbAdapterInfo>::new);
+    let mut linux_adapter = use_signal(|| "0".to_string());
+    let mut linux_dvr = use_signal(|| "0".to_string());
+    let mut linux_channels_conf = use_signal(|| "".to_string());
+    let mut linux_channels = use_signal(Vec::<String>::new);
+    let mut linux_channel = use_signal(|| "".to_string());
+    let mut linux_tune_wait = use_signal(|| "800".to_string());
+    let mut stream_filter = use_signal(|| "all".to_string());
+    let mut page = use_signal(|| 0usize);
+    let mut global_directory = use_signal(Vec::<DirectoryEntry>::new);
+    let mut global_directory_status = use_signal(|| "Loading...".to_string());
+    let mut global_directory_loading = use_signal(|| false);
+    let page_size = 14usize;
+
+    let _loader = use_resource(move || {
+        let mut streams = streams.clone();
+        let mut status = status.clone();
+        let mut sources = sources.clone();
+        let mut source_status = source_status.clone();
+        let mut global_directory = global_directory.clone();
+        let mut global_directory_status = global_directory_status.clone();
+        let mut global_directory_loading = global_directory_loading.clone();
+        async move {
+            if !tauri_available() {
+                status.set("Web mode: browse live channels".to_string());
+                source_status.set("Web mode".to_string());
+                global_directory_loading.set(true);
+                match fetch_json::<DirectoryList>("/api/directory").await {
+                    Ok(list) => {
+                        global_directory_status.set(format!("{} live", list.entries.len()));
+                        global_directory.set(list.entries);
+                    }
+                    Err(err) => {
+                        global_directory_status.set(format!("Live list error: {err}"));
+                    }
+                }
+                global_directory_loading.set(false);
+                return;
+            }
+            match tauri_invoke::<Vec<StreamDescriptor>, _>("list_streams", &EmptyArgs {})
+                .await
+            {
+                Ok(list) => {
+                    status.set(format!("{} streams ready", list.len()));
+                    streams.set(list);
+                }
+                Err(err) => {
+                    status.set(format!("Discovery error: {err}"));
+                }
+            }
+            match tauri_invoke::<Vec<SourceDescriptor>, _>("list_sources", &EmptyArgs {})
+                .await
+            {
+                Ok(list) => {
+                    source_status.set(format!("{} sources online", list.len()));
+                    sources.set(list);
+                }
+                Err(err) => {
+                    source_status.set(format!("Source error: {err}"));
+                }
+            }
+        }
+    });
+
+    let stream_list = streams.read().clone();
+    let filter_value = stream_filter.read().clone();
+    let filtered_streams = if filter_value == "all" {
+        stream_list
+    } else {
+        stream_list
+            .into_iter()
+            .filter(|stream| stream_source_kind(stream) == filter_value)
+            .collect::<Vec<_>>()
+    };
+    let total_streams = filtered_streams.len();
+    let page_index = *page.read();
+    let page_count = if total_streams == 0 {
+        1
+    } else {
+        (total_streams + page_size - 1) / page_size
+    };
+    let clamped_page = if page_index >= page_count { 0 } else { page_index };
+    let start = clamped_page * page_size;
+    let paged_streams = filtered_streams
+        .iter()
+        .skip(start)
+        .take(page_size)
+        .cloned()
+        .collect::<Vec<_>>();
+    if clamped_page != page_index {
+        page.set(clamped_page);
+    }
+    let active_id = selected.read().as_ref().map(|s| s.id.clone());
+    let playback_url = playback.read().as_ref().map(|p| p.url.clone());
+    let now_playing = selected.read().clone();
+    let current_share = share_info.read().clone();
+    let source_list = sources.read().clone();
+
+    let mut refresh_sources = {
+        let mut sources = sources.clone();
+        let mut source_status = source_status.clone();
+        let mut source_loading = source_loading.clone();
+        move || {
+            if !tauri_available() {
+                source_status.set("Tauri backend not available".to_string());
+                return;
+            }
+            source_loading.set(true);
+            let mut sources = sources.clone();
+            let mut source_status = source_status.clone();
+            let mut source_loading = source_loading.clone();
+            spawn(async move {
+                match tauri_invoke::<Vec<SourceDescriptor>, _>("list_sources", &EmptyArgs {})
+                    .await
+                {
+                    Ok(list) => {
+                        source_status.set(format!("{} sources online", list.len()));
+                        sources.set(list);
+                    }
+                    Err(err) => {
+                        source_status.set(format!("Source error: {err}"));
+                    }
+                }
+                source_loading.set(false);
+            });
+        }
+    };
+
+    let mut refresh_streams = {
+        let mut streams = streams.clone();
+        let mut status = status.clone();
+        move || {
+            if !tauri_available() {
+                status.set("Tauri backend not available (open the Tauri app)".to_string());
+                return;
+            }
+            let mut streams = streams.clone();
+            let mut status = status.clone();
+            spawn(async move {
+                match tauri_invoke::<Vec<StreamDescriptor>, _>("refresh_streams", &EmptyArgs {})
+                    .await
+                {
+                    Ok(list) => {
+                        status.set(format!("{} streams ready", list.len()));
+                        streams.set(list);
+                    }
+                    Err(err) => {
+                        status.set(format!("Discovery error: {err}"));
+                    }
+                }
+            });
+        }
+    };
+
+    let mut refresh_global_directory = {
+        let mut global_directory = global_directory.clone();
+        let mut global_directory_status = global_directory_status.clone();
+        let mut global_directory_loading = global_directory_loading.clone();
+        move || {
+            global_directory_loading.set(true);
+            let mut global_directory = global_directory.clone();
+            let mut global_directory_status = global_directory_status.clone();
+            let mut global_directory_loading = global_directory_loading.clone();
+            spawn(async move {
+                match fetch_json::<DirectoryList>("/api/directory").await {
+                    Ok(list) => {
+                        global_directory_status.set(format!("{} live", list.entries.len()));
+                        global_directory.set(list.entries);
+                    }
+                    Err(err) => {
+                        global_directory_status.set(format!("Live list error: {err}"));
+                    }
+                }
+                global_directory_loading.set(false);
+            });
+        }
+    };
+
+    rsx! {
+        div { class: "app",
+            header { class: "topbar",
+                div { class: "brand",
+                    div { class: "brand-title", "every.channel" }
+                    div { class: "brand-subtitle", "Your signal, everywhere." }
+                }
+                div { class: "topbar-actions",
+                    button {
+                        class: "add-source",
+                        onclick: move |_| {
+                            let open = *source_menu_open.read();
+                            source_menu_open.set(!open);
+                            if !open {
+                                refresh_sources();
+                            }
+                        },
+                        if *source_loading.read() { "Finding..." } else { "+ Add" }
+                    }
+                    if *source_menu_open.read() {
+                        div { class: "source-menu",
+                            div { class: "source-menu-title", "Devices" }
+                            div { class: "source-menu-status", "{source_status.read()}" }
+                            for source in source_list.clone() {
+                                div { class: "source-menu-item",
+                                    span { "{source.name}" }
+                                    span { "{source.ip.clone().unwrap_or_default()}" }
+                                }
+                            }
+                                button {
+                                    class: "source-menu-action",
+                                    onclick: move |_| refresh_sources(),
+                                    "Refresh"
+                                }
+                            div { class: "source-menu-divider" }
+                            div { class: "source-menu-section",
+                                div { class: "source-menu-title", "Add stream" }
+                                label { class: "source-menu-label", "Paste a link or device address" }
+                                input {
+                                    class: "source-menu-input",
+                                    placeholder: "HDHomeRun IP, https://…, or linux-dvb",
+                                    value: "{add_input.read()}",
+                                    oninput: move |evt| {
+                                        add_input.set(evt.value());
+                                        add_probe.set(None);
+                                        add_probe_input.set("".to_string());
+                                    },
+                                }
+                                if let Some(probe) = add_probe.read().as_ref() {
+                                    if probe.kind == "ytdlp" {
+                                        div { class: "source-menu-subsection",
+                                            label { class: "source-menu-label", "Format" }
+                                            select {
+                                                class: "source-menu-input",
+                                                onchange: move |evt| add_format.set(evt.value()),
+                                                {
+                                                    if let Some(ytdlp) = probe.ytdlp.as_ref() {
+                                                        if ytdlp.formats.is_empty() {
+                                                            rsx! { option { value: "", "Default" } }
+                                                        } else {
+                                                            rsx!({
+                                                                ytdlp.formats.iter().map(|format| {
+                                                                    let selected = add_format.read().as_str() == format.format_id;
+                                                                    rsx! {
+                                                                        option {
+                                                                            value: "{format.format_id}",
+                                                                            selected: selected,
+                                                                            "{format.label}"
+                                                                        }
+                                                                    }
+                                                                })
+                                                            })
+                                                        }
+                                                    } else {
+                                                        rsx! { option { value: "", "Default" } }
+                                                    }
+                                                }
+                                            }
+                                            if probe
+                                                .ytdlp
+                                                .as_ref()
+                                                .map(|ytdlp| ytdlp.supports_live_from_start)
+                                                .unwrap_or(false)
+                                            {
+                                                label { class: "source-menu-toggle",
+                                                    input {
+                                                        r#type: "checkbox",
+                                                        checked: *add_live_from_start.read(),
+                                                        onchange: move |_| {
+                                                            let current = *add_live_from_start.read();
+                                                            add_live_from_start.set(!current);
+                                                        }
+                                                    }
+                                                    span { "Live from start (when supported)" }
+                                                }
+                                            }
+                                        }
+                                    }
+                                    if probe.kind == "linux-dvb" {
+                                        div { class: "source-menu-subsection",
+                                            if linux_adapters.read().is_empty() {
+                                                div { class: "source-menu-status", "No Linux DVB adapters found on this machine" }
+                                            }
+                                            label { class: "source-menu-label", "Adapter" }
+                                            select {
+                                                class: "source-menu-input",
+                                                onchange: move |evt| {
+                                                    linux_adapter.set(evt.value());
+                                                    linux_dvr.set("0".to_string());
+                                                },
+                                                {
+                                                    linux_adapters.read().iter().map(|info| {
+                                                        let value = info.adapter.to_string();
+                                                        let selected = linux_adapter.read().as_str() == value;
+                                                        rsx! {
+                                                            option { value: "{value}", selected: selected, "adapter{info.adapter}" }
+                                                        }
+                                                    })
+                                                }
+                                            }
+                                            label { class: "source-menu-label", "DVR" }
+                                            select {
+                                                class: "source-menu-input",
+                                                onchange: move |evt| linux_dvr.set(evt.value()),
+                                                {
+                                                    let current_adapter = linux_adapter.read().parse::<u32>().unwrap_or(0);
+                                                    if let Some(info) = linux_adapters.read().iter().find(|info| info.adapter == current_adapter) {
+                                                        rsx!({
+                                                            info.dvrs.iter().map(|dvr| {
+                                                                let value = dvr.to_string();
+                                                                let selected = linux_dvr.read().as_str() == value;
+                                                                rsx! { option { value: "{value}", selected: selected, "dvr{dvr}" } }
+                                                            })
+                                                        })
+                                                    } else {
+                                                        rsx! { option { value: "0", "dvr0" } }
+                                                    }
+                                                }
+                                            }
+                                            label { class: "source-menu-label", "channels.conf (optional)" }
+                                            input {
+                                                class: "source-menu-input",
+                                                placeholder: "/path/to/channels.conf",
+                                                value: "{linux_channels_conf.read()}",
+                                                oninput: move |evt| linux_channels_conf.set(evt.value()),
+                                            }
+                                            button {
+                                                class: "source-menu-action",
+                                                onclick: move |_| {
+                                                    if !tauri_available() {
+                                                        status.set("Tauri backend not available (open the Tauri app)".to_string());
+                                                        return;
+                                                    }
+                                                    let conf = linux_channels_conf.read().trim().to_string();
+                                                    let args = LinuxDvbListChannelsArgs {
+                                                        channels_conf: if conf.is_empty() { None } else { Some(conf) },
+                                                    };
+                                                    let mut status = status.clone();
+                                                    let mut linux_channels = linux_channels.clone();
+                                                    let mut linux_channel = linux_channel.clone();
+                                                    let mut linux_channels_conf = linux_channels_conf.clone();
+                                                    spawn(async move {
+                                                        match tauri_invoke::<LinuxDvbChannelsInfo, _>("linux_dvb_list_channels", &args).await {
+                                                            Ok(info) => {
+                                                                if let Some(path) = info.channels_conf.clone() {
+                                                                    if linux_channels_conf.read().trim().is_empty() {
+                                                                        linux_channels_conf.set(path);
+                                                                    }
+                                                                }
+                                                                if linux_channel.read().trim().is_empty() && !info.channels.is_empty() {
+                                                                    linux_channel.set(info.channels[0].clone());
+                                                                }
+                                                                linux_channels.set(info.channels);
+                                                                status.set("Linux DVB channels loaded".to_string());
+                                                            }
+                                                            Err(err) => {
+                                                                status.set(format!("Linux DVB channels error: {err}"));
+                                                            }
+                                                        }
+                                                    });
+                                                },
+                                                "Load channels"
+                                            }
+                                            if !linux_channels.read().is_empty() {
+                                                label { class: "source-menu-label", "Channel" }
+                                                select {
+                                                    class: "source-menu-input",
+                                                    onchange: move |evt| linux_channel.set(evt.value()),
+                                                    {
+                                                        linux_channels.read().iter().map(|channel| {
+                                                            let selected = linux_channel.read().as_str() == channel.as_str();
+                                                            rsx! { option { value: "{channel}", selected: selected, "{channel}" } }
+                                                        })
+                                                    }
+                                                }
+                                            }
+                                            label { class: "source-menu-label", "Tune wait (ms)" }
+                                            input {
+                                                class: "source-menu-input",
+                                                placeholder: "800",
+                                                value: "{linux_tune_wait.read()}",
+                                                oninput: move |evt| linux_tune_wait.set(evt.value()),
+                                            }
+                                        }
+                                    }
+                                }
+                                button {
+                                    class: "source-menu-button",
+                                    onclick: move |_| {
+                                        let input = add_input.read().trim().to_string();
+                                        if input.is_empty() {
+                                            status.set("Stream input is required".to_string());
+                                            return;
+                                        }
+                                        if !tauri_available() {
+                                            status.set("Tauri backend not available (open the Tauri app)".to_string());
+                                            return;
+                                        }
+                                        let mut status = status.clone();
+                                        let mut streams = streams.clone();
+                                        let mut sources = sources.clone();
+                                        let mut source_status = source_status.clone();
+                                        let mut add_input = add_input.clone();
+                                        let mut add_probe = add_probe.clone();
+                                        let mut add_probe_input = add_probe_input.clone();
+                                        let mut add_format = add_format.clone();
+                                        let mut add_live_from_start = add_live_from_start.clone();
+                                        let mut linux_adapters = linux_adapters.clone();
+                                        let mut linux_adapter = linux_adapter.clone();
+                                        let mut linux_dvr = linux_dvr.clone();
+                                        let mut linux_channels_conf = linux_channels_conf.clone();
+                                        let mut linux_channels = linux_channels.clone();
+                                        let mut linux_channel = linux_channel.clone();
+                                        let mut linux_tune_wait = linux_tune_wait.clone();
+                                        let input_clone = input.clone();
+                                        spawn(async move {
+                                            let existing_probe = add_probe.read().clone();
+                                            if let Some(probe) = existing_probe {
+                                                if probe.kind == "ytdlp"
+                                                    && probe.requires_options
+                                                    && add_probe_input.read().as_str() == input_clone
+                                                {
+                                                    let format_value = add_format.read().trim().to_string();
+                                                    let options = ManualSourceOptions {
+                                                        ytdlp_format: if format_value.is_empty() { None } else { Some(format_value) },
+                                                        ytdlp_live_from_start: *add_live_from_start.read(),
+                                                    };
+                                                    status.set("Adding stream".to_string());
+                                                    let args = AddStreamArgs {
+                                                        input: input_clone.clone(),
+                                                        options: Some(options),
+                                                    };
+                                                    match tauri_invoke::<AddStreamResult, _>("add_stream", &args).await {
+                                                        Ok(result) => {
+                                                            status.set(format!("Added {} ({})", result.added, result.kind));
+                                                            add_input.set("".to_string());
+                                                            add_probe.set(None);
+                                                            add_probe_input.set("".to_string());
+                                                            add_format.set("".to_string());
+                                                            add_live_from_start.set(false);
+                                                            if let Ok(list) = tauri_invoke::<Vec<StreamDescriptor>, _>("list_streams", &EmptyArgs {}).await {
+                                                                streams.set(list);
+                                                            }
+                                                            if let Ok(list) = tauri_invoke::<Vec<SourceDescriptor>, _>("list_sources", &EmptyArgs {}).await {
+                                                                source_status.set(format!("{} sources online", list.len()));
+                                                                sources.set(list);
+                                                            }
+                                                        }
+                                                        Err(err) => {
+                                                            status.set(format!("Add stream error: {err}"));
+                                                        }
+                                                    }
+                                                    return;
+                                                }
+                                                if probe.kind == "linux-dvb"
+                                                    && probe.requires_options
+                                                    && add_probe_input.read().as_str() == input_clone
+                                                {
+                                                    let adapter = linux_adapter
+                                                        .read()
+                                                        .trim()
+                                                        .parse::<u32>()
+                                                        .unwrap_or(0);
+                                                    let dvr = linux_dvr
+                                                        .read()
+                                                        .trim()
+                                                        .parse::<u32>()
+                                                        .unwrap_or(0);
+                                                    let conf = linux_channels_conf.read().trim().to_string();
+                                                    let channel = linux_channel.read().trim().to_string();
+                                                    let tune_wait_ms = linux_tune_wait
+                                                        .read()
+                                                        .trim()
+                                                        .parse::<u64>()
+                                                        .ok();
+                                                    let build_args = LinuxDvbBuildUrlArgs {
+                                                        adapter,
+                                                        dvr,
+                                                        channel: if channel.is_empty() { None } else { Some(channel) },
+                                                        channels_conf: if conf.is_empty() { None } else { Some(conf) },
+                                                        tune_wait_ms,
+                                                    };
+                                                    status.set("Building Linux DVB stream".to_string());
+                                                    let url = match tauri_invoke::<String, _>("linux_dvb_build_url", &build_args).await {
+                                                        Ok(url) => url,
+                                                        Err(err) => {
+                                                            status.set(format!("Linux DVB build error: {err}"));
+                                                            return;
+                                                        }
+                                                    };
+                                                    status.set("Adding stream".to_string());
+                                                    let args = AddStreamArgs {
+                                                        input: url,
+                                                        options: None,
+                                                    };
+                                                    match tauri_invoke::<AddStreamResult, _>("add_stream", &args).await {
+                                                        Ok(result) => {
+                                                            status.set(format!("Added {} ({})", result.added, result.kind));
+                                                            add_input.set("".to_string());
+                                                            add_probe.set(None);
+                                                            add_probe_input.set("".to_string());
+                                                            add_format.set("".to_string());
+                                                            add_live_from_start.set(false);
+                                                            if let Ok(list) = tauri_invoke::<Vec<StreamDescriptor>, _>("list_streams", &EmptyArgs {}).await {
+                                                                streams.set(list);
+                                                            }
+                                                            if let Ok(list) = tauri_invoke::<Vec<SourceDescriptor>, _>("list_sources", &EmptyArgs {}).await {
+                                                                source_status.set(format!("{} sources online", list.len()));
+                                                                sources.set(list);
+                                                            }
+                                                        }
+                                                        Err(err) => {
+                                                            status.set(format!("Add stream error: {err}"));
+                                                        }
+                                                    }
+                                                    return;
+                                                }
+                                            }
+                                            status.set("Checking stream".to_string());
+                                            let probe_args = ProbeStreamArgs { input: input_clone.clone() };
+                                            match tauri_invoke::<StreamProbe, _>("probe_stream", &probe_args).await {
+                                                Ok(probe) => {
+                                                    if probe.kind == "ytdlp" && probe.requires_options {
+                                                        if let Some(ytdlp) = probe.ytdlp.as_ref() {
+                                                            if let Some(default_format) = ytdlp.default_format.as_ref() {
+                                                                add_format.set(default_format.clone());
+                                                            } else {
+                                                                add_format.set("".to_string());
+                                                            }
+                                                            add_live_from_start.set(false);
+                                                        }
+                                                        add_probe_input.set(input_clone);
+                                                        add_probe.set(Some(probe));
+                                                        status.set("Select yt-dlp options".to_string());
+                                                        return;
+                                                    }
+                                                    if probe.kind == "linux-dvb" && probe.requires_options {
+                                                        status.set("Loading Linux DVB devices".to_string());
+                                                        match tauri_invoke::<Vec<LinuxDvbAdapterInfo>, _>("linux_dvb_list_adapters", &EmptyArgs {}).await {
+                                                            Ok(list) => {
+                                                                linux_adapters.set(list.clone());
+                                                                if let Some(first) = list.first() {
+                                                                    linux_adapter.set(first.adapter.to_string());
+                                                                    if let Some(dvr) = first.dvrs.first() {
+                                                                        linux_dvr.set(dvr.to_string());
+                                                                    } else {
+                                                                        linux_dvr.set("0".to_string());
+                                                                    }
+                                                                }
+                                                            }
+                                                            Err(err) => {
+                                                                status.set(format!("Linux DVB devices error: {err}"));
+                                                            }
+                                                        }
+                                                        let conf_args = LinuxDvbListChannelsArgs { channels_conf: None };
+                                                        match tauri_invoke::<LinuxDvbChannelsInfo, _>("linux_dvb_list_channels", &conf_args).await {
+                                                            Ok(info) => {
+                                                                if let Some(path) = info.channels_conf.clone() {
+                                                                    linux_channels_conf.set(path);
+                                                                }
+                                                                if !info.channels.is_empty() {
+                                                                    linux_channel.set(info.channels[0].clone());
+                                                                }
+                                                                linux_channels.set(info.channels);
+                                                            }
+                                                            Err(err) => {
+                                                                status.set(format!("Linux DVB channels error: {err}"));
+                                                            }
+                                                        }
+                                                        add_probe_input.set(input_clone);
+                                                        add_probe.set(Some(probe));
+                                                        status.set("Select Linux DVB options".to_string());
+                                                        return;
+                                                    }
+
+                                                    let args = AddStreamArgs {
+                                                        input: input_clone.clone(),
+                                                        options: None,
+                                                    };
+                                                    match tauri_invoke::<AddStreamResult, _>("add_stream", &args).await {
+                                                        Ok(result) => {
+                                                            status.set(format!("Added {} ({})", result.added, result.kind));
+                                                            add_input.set("".to_string());
+                                                            add_probe.set(None);
+                                                            add_probe_input.set("".to_string());
+                                                            add_format.set("".to_string());
+                                                            add_live_from_start.set(false);
+                                                            if let Ok(list) = tauri_invoke::<Vec<StreamDescriptor>, _>("list_streams", &EmptyArgs {}).await {
+                                                                streams.set(list);
+                                                            }
+                                                            if let Ok(list) = tauri_invoke::<Vec<SourceDescriptor>, _>("list_sources", &EmptyArgs {}).await {
+                                                                source_status.set(format!("{} sources online", list.len()));
+                                                                sources.set(list);
+                                                            }
+                                                        }
+                                                        Err(err) => {
+                                                            status.set(format!("Add stream error: {err}"));
+                                                        }
+                                                    }
+                                                }
+                                                Err(err) => {
+                                                    status.set(format!("Probe error: {err}"));
+                                                    add_probe.set(None);
+                                                    add_probe_input.set("".to_string());
+                                                }
+                                            }
+                                        });
+                                    },
+                                    if add_probe.read().is_some() { "Start" } else { "Add" }
+                                }
+                            }
+                            div { class: "source-menu-divider" }
+                            div { class: "source-menu-section",
+                                div { class: "source-menu-title", "Watch a link" }
+                                label { class: "source-menu-label", "Link" }
+                                input {
+                                    class: "source-menu-input",
+                                    placeholder: "every.channel://watch?...",
+                                    value: "{moq_link.read()}",
+                                    oninput: move |evt| moq_link.set(evt.value()),
+                                }
+                                button {
+                                    class: "source-menu-action",
+                                    onclick: move |_| {
+                                            let link = moq_link.read().trim().to_string();
+                                            direct_offer.set(None);
+                                            direct_reply.set("".to_string());
+                                            direct_answer_stream_id.set(None);
+                                            if let Some(parsed) = parse_watch_link(&link) {
+                                                moq_remote.set(parsed.remote);
+                                                moq_broadcast.set(parsed.broadcast);
+                                                if let Some(track) = parsed.track {
+                                                    moq_track.set(track);
+                                                }
+                                                if let Some(stream_id) = parsed.stream_id {
+                                                    moq_stream_id.set(stream_id);
+                                                }
+                                                if let Some(secret) = parsed.network_secret {
+                                                    moq_secret.set(secret);
+                                                }
+                                                if let Some(discovery) = parsed.discovery {
+                                                    let d = discovery.to_ascii_lowercase();
+                                                    discovery_dht.set(d.contains("dht"));
+                                                    discovery_mdns.set(d.contains("mdns"));
+                                                    discovery_dns.set(d.contains("dns"));
+                                                }
+                                                status.set("Link parsed (ready to watch)".to_string());
+                                                return;
+                                            }
+                                            if let Some(offer) = parse_direct_link(&link) {
+                                                direct_offer.set(Some(offer));
+                                                status.set("Link parsed (reply required)".to_string());
+                                                return;
+                                            }
+                                            status.set("That link does not look valid".to_string());
+                                        },
+                                    "Parse link"
+                                }
+                                label { class: "toggle",
+                                    input {
+                                        r#type: "checkbox",
+                                        checked: {*moq_link_advanced.read()},
+                                        onclick: move |_| {
+                                            let next = !*moq_link_advanced.read();
+                                            moq_link_advanced.set(next);
+                                        },
+                                    }
+                                    span { "Show details" }
+                                }
+                                if *moq_link_advanced.read() {
+                                    label { class: "source-menu-label", "Address" }
+                                    input {
+                                        class: "source-menu-input",
+                                        placeholder: "auto-filled from link",
+                                        value: "{moq_remote.read()}",
+                                        oninput: move |evt| moq_remote.set(evt.value()),
+                                    }
+                                    label { class: "source-menu-label", "Channel" }
+                                    input {
+                                        class: "source-menu-input",
+                                        placeholder: "auto-filled from link",
+                                        value: "{moq_broadcast.read()}",
+                                        oninput: move |evt| moq_broadcast.set(evt.value()),
+                                    }
+                                    label { class: "source-menu-label", "Channel ID (optional)" }
+                                    input {
+                                        class: "source-menu-input",
+                                        placeholder: "optional",
+                                        value: "{moq_stream_id.read()}",
+                                        oninput: move |evt| moq_stream_id.set(evt.value()),
+                                    }
+                                    label { class: "source-menu-label", "Segment (optional)" }
+                                    input {
+                                        class: "source-menu-input",
+                                        placeholder: "optional",
+                                        value: "{moq_track.read()}",
+                                        oninput: move |evt| moq_track.set(evt.value()),
+                                    }
+                                    label { class: "source-menu-label", "Sharing key (optional)" }
+                                    input {
+                                        class: "source-menu-input",
+                                        placeholder: "optional",
+                                        value: "{moq_secret.read()}",
+                                        oninput: move |evt| moq_secret.set(evt.value()),
+                                    }
+                                }
+                                label { class: "source-menu-label", "Auto quality" }
+                                label { class: "toggle",
+                                    input {
+                                        r#type: "checkbox",
+                                        checked: {*moq_auto_quality.read()},
+                                        onclick: move |_| moq_auto_quality.toggle(),
+                                    }
+                                    span { "Let the player pick quality" }
+                                }
+                                label { class: "source-menu-label", "Quality" }
+                                select {
+                                    class: "source-menu-input",
+                                    value: "{moq_quality.read()}",
+                                    disabled: {*moq_auto_quality.read()},
+                                    onchange: move |evt| moq_quality.set(evt.value()),
+                                    option { value: "1080p", "1080p" }
+                                    option { value: "720p", "720p" }
+                                    option { value: "480p", "480p" }
+                                }
+                                button {
+                                    class: "source-menu-button",
+                                    onclick: move |_| {
+                                        let remote = moq_remote.read().clone();
+                                        let broadcast = moq_broadcast.read().clone();
+                                        // Direct connect does not require these fields.
+                                        if direct_offer.read().is_none() && (remote.is_empty() || broadcast.is_empty()) {
+                                            status.set("Missing info: paste a link first".to_string());
+                                            return;
+                                        }
+                                        let stream_override = moq_stream_id.read().clone();
+                                        let track = moq_track.read().clone();
+                                        let auto_quality = *moq_auto_quality.read();
+                                        let quality = moq_quality.read().clone();
+                                        let secret = moq_secret.read().clone();
+                                        let discovery = discovery_string(
+                                            *discovery_dht.read(),
+                                            *discovery_mdns.read(),
+                                            *discovery_dns.read(),
+                                        );
+                                        let mut selected = selected.clone();
+                                        let mut playback = playback.clone();
+                                        let mut status = status.clone();
+                                        let mut direct_reply = direct_reply.clone();
+                                        let direct_answer_stream_id = direct_answer_stream_id.read().clone();
+                                        let direct_offer = direct_offer.read().clone();
+                                        spawn(async move {
+                                            if let Some(offer) = direct_offer {
+                                                status.set("Preparing reply".to_string());
+                                                let cfg = fetch_turn_peer_config().await;
+                                                let pc = match PeerConnectionBuilder::new()
+                                                    .set_config(cfg)
+                                                    .with_remote_offer(Some(offer.desc.clone()))
+                                                {
+                                                    Ok(b) => match b.build().await {
+                                                        Ok(pc) => pc,
+                                                        Err(err) => {
+                                                            status.set(format!("Error: {err}"));
+                                                            return;
+                                                        }
+                                                    },
+                                                    Err(err) => {
+                                                        status.set(format!("Error: {err}"));
+                                                        return;
+                                                    }
+                                                };
+                                                if let Err(err) = pc.add_ice_candidates(offer.candidates.clone()).await {
+                                                    status.set(format!("Error: {err}"));
+                                                    return;
+                                                }
+                                                let desc = match pc.get_local_description().await {
+                                                    Some(d) => d,
+                                                    None => {
+                                                        status.set("Error: no reply description".to_string());
+                                                        return;
+                                                    }
+                                                };
+                                                let candidates = match pc.collect_ice_candidates().await {
+                                                    Ok(c) => c,
+                                                    Err(err) => {
+                                                        status.set(format!("Error: {err}"));
+                                                        return;
+                                                    }
+                                                };
+                                                let reply = match encode_direct_link(&DirectCodeV1 { v: 1, desc, candidates, label: Some("every.channel0".to_string()) }) {
+                                                    Ok(v) => v,
+                                                    Err(err) => {
+                                                        status.set(format!("Error: {err}"));
+                                                        return;
+                                                    }
+                                                };
+                                                direct_reply.set(reply);
+                                                if let Some(stream_id) = direct_answer_stream_id.as_ref() {
+                                                    // Send answer back to the directory/signaling API so the publisher can connect.
+                                                    let payload = serde_json::json!({
+                                                        "stream_id": stream_id,
+                                                        "answer": direct_reply.read().clone(),
+                                                    });
+                                                    if let Err(err) = post_json("/api/answer", &payload).await {
+                                                        status.set(format!("Reply send failed: {err}"));
+                                                        return;
+                                                    }
+                                                }
+
+                                                status.set("Waiting for video".to_string());
+                                                let ch = match pc.receive_channel().await {
+                                                    Ok(ch) => ch,
+                                                    Err(err) => {
+                                                        status.set(format!("Error: {err}"));
+                                                        return;
+                                                    }
+                                                };
+                                                ch.wait_ready().await;
+
+                                                let (ms, url) = match create_mse_url() {
+                                                    Ok(v) => v,
+                                                    Err(err) => {
+                                                        status.set(format!("Error: {err}"));
+                                                        return;
+                                                    }
+                                                };
+                                                let sink = Rc::new(RefCell::new(MseSink {
+                                                    ms: ms.clone(),
+                                                    sb: None,
+                                                    is_open: false,
+                                                    updateend_installed: false,
+                                                    queue: VecDeque::new(),
+                                                }));
+                                                install_sourceopen(&ms, sink.clone());
+
+                                                playback.set(Some(PlaybackInfo { stream_id: "direct".to_string(), url: url.clone() }));
+                                                selected.set(Some(StreamDescriptor {
+                                                    id: "direct".to_string(),
+                                                    title: "Direct".to_string(),
+                                                    number: None,
+                                                    source: "direct".to_string(),
+                                                    metadata: vec![],
+                                                }));
+
+                                                // Receive init + segments over the data channel and append to MSE.
+                                                let mut ch = ch;
+                                                spawn(async move {
+                                                    use futures_util::future::FutureExt;
+                                                    use gloo_timers::future::TimeoutFuture;
+
+                                                    let mut decoder = DirectWireDecoder::default();
+                                                    let mut next_ping = TimeoutFuture::new(1000).fuse();
+                                                    loop {
+                                                        let msg: Bytes = futures_util::select! {
+                                                            _ = next_ping => {
+                                                                let _ = ch.send(&Bytes::from(vec![DIRECT_WIRE_TAG_PING])).await;
+                                                                next_ping = TimeoutFuture::new(1000).fuse();
+                                                                continue;
+                                                            }
+                                                            msg = ch.receive().fuse() => {
+                                                                match msg {
+                                                                    Ok(b) => b,
+                                                                    Err(_) => break,
+                                                                }
+                                                            }
+                                                        };
+                                                        for frame in decoder.push(&msg) {
+                                                            let Some((meta, data)) =
+                                                                decode_object_frame(&frame)
+                                                            else {
+                                                                continue;
+                                                            };
+                                                            if meta.content_type.starts_with("video/mp4") {
+                                                                let _ = try_create_source_buffer(sink.clone(), &data);
+                                                                let mut st = sink.borrow_mut();
+                                                                append_bytes(&mut st, data);
+                                                            } else if meta.content_type.contains("iso.segment") {
+                                                                let mut st = sink.borrow_mut();
+                                                                append_bytes(&mut st, data);
+                                                            }
+                                                        }
+                                                    }
+                                                });
+
+                                                status.set("Live".to_string());
+                                                return;
+                                            }
+
+                                            if !tauri_available() {
+                                                status.set("Tauri backend not available (open the Tauri app)".to_string());
+                                                return;
+                                            }
+
+                                            status.set("Connecting".to_string());
+                                            let remote_meta = remote.clone();
+                                            let args = MoqStartArgs {
+                                                remote: remote.clone(),
+                                                broadcast_name: broadcast.clone(),
+                                                stream_id: if stream_override.is_empty() { None } else { Some(stream_override.clone()) },
+                                                track_name: if track.is_empty() { None } else { Some(track.clone()) },
+                                                auto_quality: Some(auto_quality),
+                                                variant: if auto_quality { None } else { Some(quality.clone()) },
+                                                network_secret: if secret.is_empty() { None } else { Some(secret.clone()) },
+                                                discovery,
+                                            };
+                                            match tauri_invoke::<PlaybackInfo, _>("start_moq_stream", &args).await {
+                                                Ok(info) => {
+                                                    status.set("Live".to_string());
+                                                    playback.set(Some(info));
+                                                    let stream_id = if stream_override.is_empty() {
+                                                        broadcast.clone()
+                                                    } else {
+                                                        stream_override.clone()
+                                                    };
+                                                    let descriptor = StreamDescriptor {
+                                                        id: stream_id.clone(),
+                                                        title: stream_id.clone(),
+                                                        number: None,
+                                                        source: "link".to_string(),
+                                                        metadata: vec![
+                                                            StreamMetadata { key: "broadcast".to_string(), value: broadcast.clone() },
+                                                            StreamMetadata { key: "remote".to_string(), value: remote_meta.clone() },
+                                                            StreamMetadata { key: "track".to_string(), value: track.clone() },
+                                                        ],
+                                                    };
+                                                    selected.set(Some(descriptor));
+                                                }
+                                                Err(err) => {
+                                                    status.set(format!("Error: {err}"));
+                                                }
+                                            }
+                                        });
+                                    },
+                                    "Tune in"
+                                }
+                                if !direct_reply.read().is_empty() {
+                                    div { class: "source-menu-item",
+                                        span { "Reply" }
+                                        span { "Send this back to the streamer" }
+                                    }
+                                    div { class: "source-menu-inline",
+                                        input {
+                                            class: "source-menu-input",
+                                            value: "{direct_reply.read()}",
+                                            readonly: true,
+                                        }
+                                        button {
+                                            class: "source-menu-action small",
+                                            onclick: move |_| {
+                                                let value = direct_reply.read().clone();
+                                                let mut status = status.clone();
+                                                spawn(async move {
+                                                    match copy_to_clipboard(value).await {
+                                                        Ok(_) => status.set("Copied reply".to_string()),
+                                                        Err(err) => status.set(format!("Copy failed: {err}")),
+                                                    }
+                                                });
+                                            },
+                                            "Copy"
+                                        }
+                                    }
+                                }
+                            }
+                            div { class: "source-menu-divider" }
+                            div { class: "source-menu-section",
+                                div { class: "source-menu-title", "Reach" }
+                                div { class: "source-menu-status", "How others can find you" }
+                                label { class: "toggle",
+                                    input {
+                                        r#type: "checkbox",
+                                        checked: {*discovery_dht.read()},
+                                        onclick: move |_| {
+                                            let next = !*discovery_dht.read();
+                                            discovery_dht.set(next);
+                                        },
+                                    }
+                                    span { "Public (internet)" }
+                                }
+                                label { class: "toggle",
+                                    input {
+                                        r#type: "checkbox",
+                                        checked: {*discovery_mdns.read()},
+                                        onclick: move |_| {
+                                            let next = !*discovery_mdns.read();
+                                            discovery_mdns.set(next);
+                                        },
+                                    }
+                                    span { "Nearby (same Wi-Fi)" }
+                                }
+                                label { class: "toggle",
+                                    input {
+                                        r#type: "checkbox",
+                                        checked: {*discovery_dns.read()},
+                                        onclick: move |_| {
+                                            let next = !*discovery_dns.read();
+                                            discovery_dns.set(next);
+                                        },
+                                    }
+                                    span { "Experimental DNS" }
+                                }
+                            }
+                        }
+                    }
+                    div { class: "status-pill",
+                        div { class: "status-dot" }
+                        span { "{status.read()}" }
+                    }
+                }
+            }
+            main { class: "grid",
+                div { class: "left-column",
+                    section { class: "panel",
+                            div { class: "panel-header",
+                                div { class: "panel-title", "Channels" }
+                                div { class: "panel-actions",
+                                    select {
+                                        class: "panel-select",
+                                        value: "{stream_filter.read()}",
+                                        onchange: move |evt| {
+                                            stream_filter.set(evt.value());
+                                            page.set(0);
+                                        },
+                                        option { value: "all", "All" }
+                                        option { value: "hdhr", "HDHR" }
+                                        option { value: "linux-dvb", "Linux DVB" }
+                                        option { value: "hls", "HLS" }
+                                        option { value: "ytdlp", "yt-dlp" }
+                                        option { value: "moq", "Link" }
+                                    }
+                                    button {
+                                        class: "panel-button",
+                                        onclick: move |_| refresh_streams(),
+                                        "Refresh"
+                                }
+                                div { class: "pager",
+                                    button {
+                                        class: "pager-button",
+                                        onclick: move |_| {
+                                            if clamped_page > 0 {
+                                                page.set(clamped_page - 1);
+                                            }
+                                        },
+                                        "Prev"
+                                    }
+                                    span { class: "pager-label", "{clamped_page + 1} / {page_count}" }
+                                    button {
+                                        class: "pager-button",
+                                        onclick: move |_| {
+                                            if clamped_page + 1 < page_count {
+                                                page.set(clamped_page + 1);
+                                            }
+                                        },
+                                        "Next"
+                                    }
+                                }
+                            }
+                        }
+                        div { class: "channel-list",
+                            {
+                                let active_id = active_id.clone();
+                                let mut selected = selected.clone();
+                                let mut playback = playback.clone();
+                                let mut status = status.clone();
+                                let mut share_info = share_info.clone();
+                                let discovery_dht = discovery_dht.clone();
+                                let discovery_mdns = discovery_mdns.clone();
+                                let discovery_dns = discovery_dns.clone();
+                                paged_streams.iter().map(move |stream| {
+                                    let is_active = active_id
+                                        .as_ref()
+                                        .map(|id| id == &stream.id)
+                                        .unwrap_or(false);
+                                    let card_class = if is_active { "channel-card active" } else { "channel-card" };
+                                    let moq_endpoint = stream
+                                        .metadata
+                                        .iter()
+                                        .find(|m| m.key == "moq_endpoint")
+                                        .map(|m| m.value.clone());
+                                    let moq_broadcast = stream
+                                        .metadata
+                                        .iter()
+                                        .find(|m| m.key == "moq_broadcast")
+                                        .map(|m| m.value.clone());
+                                    let moq_track = stream
+                                        .metadata
+                                        .iter()
+                                        .find(|m| m.key == "moq_track")
+                                        .map(|m| m.value.clone());
+                                    let moq_key_id = stream
+                                        .metadata
+                                        .iter()
+                                        .find(|m| m.key == "moq_key_id")
+                                        .map(|m| m.value.clone());
+                                    let stream_clone = stream.clone();
+                                    let mut selected = selected.clone();
+                                    let mut playback = playback.clone();
+                                    let mut status = status.clone();
+                                    let mut share_info = share_info.clone();
+                                    let has_drm = stream_has_drm(&stream.metadata);
+                                    rsx! {
+                                        div {
+                                            class: "{card_class}",
+                                            onclick: move |_| {
+                                                selected.set(Some(stream_clone.clone()));
+                                                let stream_id = stream_clone.id.clone();
+                                                let stream_title = stream_clone.title.clone();
+                                                status.set(format!("Starting {}", stream_title));
+                                                share_info.set(None);
+                                                let mut playback = playback.clone();
+                                                let mut status = status.clone();
+                                                let moq_endpoint = moq_endpoint.clone();
+                                                let moq_broadcast = moq_broadcast.clone();
+                                                let moq_track = moq_track.clone();
+                                                let moq_key_id = moq_key_id.clone();
+                                                spawn(async move {
+                                                    if let (Some(endpoint), Some(broadcast)) = (moq_endpoint, moq_broadcast) {
+                                                        let discovery = discovery_string(
+                                                            *discovery_dht.read(),
+                                                            *discovery_mdns.read(),
+                                                            *discovery_dns.read(),
+                                                        );
+                                                        let args = MoqStartArgs {
+                                                            remote: endpoint.clone(),
+                                                            broadcast_name: broadcast.clone(),
+                                                            stream_id: moq_key_id.or(Some(stream_id.clone())),
+                                                            track_name: moq_track,
+                                                            auto_quality: Some(true),
+                                                            variant: None,
+                                                            network_secret: None,
+                                                            discovery,
+                                                        };
+                                                        match tauri_invoke::<PlaybackInfo, _>("start_moq_stream", &args).await {
+                                                            Ok(info) => {
+                                                                status.set(format!("Live: {}", stream_title));
+                                                                playback.set(Some(info));
+                                                            }
+                                                            Err(err) => {
+                                                                status.set(format!("Link error: {err}"));
+                                                            }
+                                                        }
+                                                    } else {
+                                                        let args = StartArgs { stream_id: stream_id.clone() };
+                                                        match tauri_invoke::<PlaybackInfo, _>("start_stream", &args).await {
+                                                            Ok(info) => {
+                                                                status.set(format!("Live: {}", stream_title));
+                                                                playback.set(Some(info));
+                                                            }
+                                                            Err(err) => {
+                                                                status.set(format!("Stream error: {err}"));
+                                                            }
+                                                        }
+                                                    }
+                                                });
+                                            },
+                                            div { class: "channel-title", "{stream.title}" }
+                                            div { class: "channel-meta",
+                                                {stream.number.clone().unwrap_or_default()}
+                                            }
+                                            if !stream.source.is_empty() {
+                                                div { class: "channel-badge source", "{stream.source}" }
+                                            }
+                                            if has_drm {
+                                                div { class: "channel-badge drm", "Protected" }
+                                            }
+                                        }
+                                    }
+                                })
+                            }
+                        }
+                    }
+                    section { class: "panel",
+                        div { class: "panel-title", "Devices" }
+                        div { class: "source-status", "{source_status.read()}" }
+                        div { class: "source-list",
+                            {
+                                source_list.iter().map(|source| {
+                                    let status_label = format!(
+                                        "{} - {}",
+                                        source.kind.to_uppercase(),
+                                        source.status
+                                    );
+                                    let ip_label = source
+                                        .ip
+                                        .clone()
+                                        .unwrap_or_else(|| "Unknown IP".to_string());
+                                    let tuner_label = source
+                                        .tuner_count
+                                        .map(|tuners| format!("{tuners} tuners"))
+                                        .unwrap_or_else(|| "Tuners unknown".to_string());
+                                    rsx! {
+                                        div { class: "source-card",
+                                            div { class: "source-name", "{source.name}" }
+                                            div { class: "source-meta",
+                                                "{status_label}"
+                                            }
+                                            div { class: "source-meta",
+                                                "{ip_label}"
+                                            }
+                                            div { class: "source-meta",
+                                                "{tuner_label}"
+                                            }
+                                        }
+                                    }
+                                })
+                            }
+                        }
+                        div { class: "catalog-panel",
+                            div { class: "moq-title", "Live channels" }
+                            if tauri_available() {
+                                label { class: "moq-label", "Friends (optional, comma separated)" }
+                                input {
+                                    class: "moq-input",
+                                    placeholder: "optional",
+                                    value: "{catalog_peers.read()}",
+                                    oninput: move |evt| catalog_peers.set(evt.value()),
+                                }
+                                button {
+                                    class: "moq-button",
+                                    onclick: move |_| {
+                                        let peers = catalog_peers
+                                            .read()
+                                            .split(',')
+                                            .map(|p| p.trim().to_string())
+                                            .filter(|p| !p.is_empty())
+                                            .collect::<Vec<_>>();
+                                        let discovery = discovery_string(
+                                            *discovery_dht.read(),
+                                            *discovery_mdns.read(),
+                                            *discovery_dns.read(),
+                                        );
+                                        let mut status = status.clone();
+                                        spawn(async move {
+                                            let args = CatalogWatchArgs { peers, discovery };
+                                            match tauri_invoke::<(), _>("start_catalog_watch", &args).await {
+                                                Ok(_) => status.set("Searching for live channels...".to_string()),
+                                                Err(err) => status.set(format!("Search error: {err}")),
+                                            }
+                                        });
+                                    },
+                                    "Search"
+                                }
+                            } else {
+                                div { class: "source-status", "{global_directory_status.read()}" }
+                                button {
+                                    class: "moq-button",
+                                    "data-testid": "global-refresh",
+                                    onclick: move |_| refresh_global_directory(),
+                                    if *global_directory_loading.read() { "Refreshing..." } else { "Refresh" }
+                                }
+                                div { class: "source-list",
+                                    {global_directory.read().iter().map(|entry| {
+                                        let stream_id = entry.stream_id.clone();
+                                        let title = entry.title.clone();
+                                        let mut status = status.clone();
+                                        let mut playback = playback.clone();
+                                        let mut selected = selected.clone();
+                                        rsx! {
+                                            div { class: "source-card",
+                                                div { class: "source-name", "{title}" }
+                                                div { class: "source-meta", "{stream_id}" }
+                                                button {
+                                                    class: "panel-button",
+                                                    "data-stream-id": "{stream_id}",
+                                                    "data-testid": "global-watch",
+                                                    onclick: move |_| {
+                                                        let mut status = status.clone();
+                                                        let mut playback = playback.clone();
+                                                        let mut selected = selected.clone();
+                                                        let sid = stream_id.clone();
+                                                        let stitle = title.clone();
+                                                        spawn(async move {
+                                                            status.set("Connecting".to_string());
+
+                                                            let (ms, url) = match create_mse_url() {
+                                                                Ok(v) => v,
+                                                                Err(err) => {
+                                                                    status.set(format!("Error: {err}"));
+                                                                    return;
+                                                                }
+                                                            };
+                                                            let sink = Rc::new(RefCell::new(MseSink {
+                                                                ms: ms.clone(),
+                                                                sb: None,
+                                                                is_open: false,
+                                                                updateend_installed: false,
+                                                                queue: VecDeque::new(),
+                                                            }));
+                                                            install_sourceopen(&ms, sink.clone());
+
+                                                            playback.set(Some(PlaybackInfo { stream_id: sid.clone(), url: url.clone() }));
+                                                            selected.set(Some(StreamDescriptor {
+                                                                id: sid.clone(),
+                                                                title: stitle,
+                                                                number: None,
+                                                                source: "live".to_string(),
+                                                                metadata: vec![],
+                                                            }));
+
+                                                            spawn(async move {
+                                                                use futures_util::future::FutureExt;
+                                                                use futures_util::{SinkExt, StreamExt};
+                                                                use gloo_timers::future::TimeoutFuture;
+                                                                use gloo_net::websocket::{futures::WebSocket, Message};
+
+                                                                let sid_enc = js_sys::encode_uri_component(&sid)
+                                                                    .as_string()
+                                                                    .unwrap_or_else(|| sid.clone());
+                                                                let ws_url = match ws_url_for_path(&format!(
+                                                                    "/api/stream/ws?stream_id={}&role=sub",
+                                                                    sid_enc
+                                                                )) {
+                                                                    Ok(u) => u,
+                                                                    Err(err) => {
+                                                                        status.set(format!("WebSocket URL error: {err}"));
+                                                                        return;
+                                                                    }
+                                                                };
+                                                                let mut ws = match WebSocket::open(&ws_url) {
+                                                                    Ok(ws) => ws,
+                                                                    Err(_) => {
+                                                                        status.set("WebSocket connect failed".to_string());
+                                                                        return;
+                                                                    }
+                                                                };
+
+                                                                let mut decoder = DirectWireDecoder::default();
+                                                                let mut next_ping = TimeoutFuture::new(1000).fuse();
+                                                                loop {
+                                                                    let msg: Vec<u8> = futures_util::select! {
+                                                                        _ = next_ping => {
+                                                                            // Keep the relay connection alive (optional).
+                                                                            let _ = ws.send(Message::Bytes(vec![DIRECT_WIRE_TAG_PING])).await;
+                                                                            next_ping = TimeoutFuture::new(1000).fuse();
+                                                                            continue;
+                                                                        }
+                                                                        msg = ws.next().fuse() => {
+                                                                            match msg {
+                                                                                Some(Ok(Message::Bytes(b))) => b,
+                                                                                Some(Ok(_)) => continue,
+                                                                                Some(Err(_)) => break,
+                                                                                None => break,
+                                                                            }
+                                                                        }
+                                                                    };
+                                                                    for frame in decoder.push(&msg) {
+                                                                        let Some((meta, data)) =
+                                                                            decode_object_frame(&frame)
+                                                                        else {
+                                                                            continue;
+                                                                        };
+                                                                        if meta.content_type.starts_with("video/mp4") {
+                                                                            let _ = try_create_source_buffer(sink.clone(), &data);
+                                                                            let mut st = sink.borrow_mut();
+                                                                            append_bytes(&mut st, data);
+                                                                        } else if meta.content_type.contains("iso.segment") {
+                                                                            let mut st = sink.borrow_mut();
+                                                                            append_bytes(&mut st, data);
+                                                                        }
+                                                                    }
+                                                                }
+                                                            });
+
+                                                            status.set("Live".to_string());
+                                                        });
+                                                    },
+                                                    "Watch"
+                                                }
+                                            }
+                                        }
+                                    })}
+                                }
+                            }
+                        }
+                    }
+                }
+                section { class: "panel",
+                        div { class: "panel-header",
+                            div { class: "panel-title", "Now Playing" }
+                        if let Some(stream) = now_playing.clone() {
+                            button {
+                                class: "panel-button",
+                                onclick: move |_| {
+                                    if !tauri_available() {
+                                        status.set("Tauri backend not available (open the Tauri app)".to_string());
+                                        return;
+                                    }
+                                    let discovery = discovery_string(
+                                        *discovery_dht.read(),
+                                        *discovery_mdns.read(),
+                                        *discovery_dns.read(),
+                                    );
+                                    let peers = share_peers
+                                        .read()
+                                        .split(',')
+                                        .map(|peer| peer.trim().to_string())
+                                        .filter(|peer| !peer.is_empty())
+                                        .collect::<Vec<_>>();
+                                    let secret = share_secret.read().trim().to_string();
+                                    let args = ShareArgs {
+                                        stream_id: stream.id.clone(),
+                                        network_secret: if secret.is_empty() { None } else { Some(secret) },
+                                        chunk_ms: None,
+                                        announce: *share_announce.read(),
+                                        gossip_peers: peers,
+                                        discovery,
+                                    };
+                                    let mut share_info = share_info.clone();
+                                    let mut status = status.clone();
+                                    spawn(async move {
+                                        status.set("Preparing link".to_string());
+                                        match tauri_invoke::<ShareInfo, _>("start_moq_publish", &args).await {
+                                            Ok(info) => {
+                                                if let Some(announce) = info.announce_status.as_ref() {
+                                                    status.set(format!("Ready ({announce})"));
+                                                } else {
+                                                    status.set("Ready".to_string());
+                                                }
+                                                share_info.set(Some(info));
+                                            }
+                                            Err(err) => {
+                                                status.set(format!("Error: {err}"));
+                                            }
+                                        }
+                                    });
+                                },
+                                "Share this channel"
+                            }
+                        }
+                    }
+                    div { class: "player-shell",
+                        div { class: "video-frame",
+                            if let Some(url) = playback_url {
+                                video {
+                                    src: "{url}",
+                                    controls: true,
+                                    autoplay: true,
+                                    playsinline: true,
+                                }
+                            } else {
+                                div { class: "placeholder", "Select a channel to start playback" }
+                            }
+                        }
+                        if let Some(stream) = now_playing {
+                            div { class: "meta-grid",
+                                div { class: "meta-card",
+                                    strong { "Channel" }
+                                    span { "{stream.title}" }
+                                }
+                                div { class: "meta-card",
+                                    strong { "Number" }
+                                    span { {stream.number.clone().unwrap_or_else(|| "-".to_string())} }
+                                }
+                                if stream_has_drm(&stream.metadata) {
+                                    div { class: "meta-card drm",
+                                        strong { "Protected" }
+                                        span { "Likely protected" }
+                                    }
+                                }
+                                div { class: "meta-card",
+                                    strong { "Sharing" }
+                                    label { class: "toggle",
+                                        input {
+                                            r#type: "checkbox",
+                                            checked: {*share_announce.read()},
+                                            onclick: move |_| {
+                                                let next = !*share_announce.read();
+                                                share_announce.set(next);
+                                            },
+                                        }
+                                        span { "Show in directory" }
+                                    }
+                                    label { class: "toggle",
+                                        input {
+                                            r#type: "checkbox",
+                                            checked: {*discovery_mdns.read()},
+                                            onclick: move |_| {
+                                                let next = !*discovery_mdns.read();
+                                                discovery_mdns.set(next);
+                                            },
+                                        }
+                                        span { "Nearby (same Wi-Fi)" }
+                                    }
+                                    label { class: "toggle",
+                                        input {
+                                            r#type: "checkbox",
+                                            checked: {*discovery_dht.read()},
+                                            onclick: move |_| {
+                                                let next = !*discovery_dht.read();
+                                                discovery_dht.set(next);
+                                            },
+                                        }
+                                        span { "Public (internet)" }
+                                    }
+                                    input {
+                                        class: "share-input",
+                                        placeholder: "contacts (comma separated, optional)",
+                                        value: "{share_peers.read()}",
+                                        oninput: move |evt| share_peers.set(evt.value()),
+                                    }
+                                    input {
+                                        class: "share-input",
+                                        placeholder: "sharing key (optional)",
+                                        value: "{share_secret.read()}",
+                                        oninput: move |evt| share_secret.set(evt.value()),
+                                    }
+                                }
+                                for meta in stream.metadata.iter().take(6) {
+                                    div { class: "meta-card",
+                                        strong { "{meta.key.as_str()}" }
+                                        span { "{meta.value.as_str()}" }
+                                    }
+                                }
+                            }
+                        }
+                        if let Some(share) = current_share {
+                            div { class: "share-card",
+                                div { class: "share-title", "Share" }
+                                div { class: "share-row",
+                                    span { class: "share-label", "Link" }
+                                    div { class: "share-link-row",
+                                        input {
+                                            class: "share-link",
+                                            readonly: true,
+                                            value: {
+                                                let secret_for_link = share_secret.read().trim().to_string();
+                                                build_watch_link(
+                                                    &share.endpoint_addr,
+                                                    &share.broadcast_name,
+                                                    Some(&share.track_name),
+                                                    None,
+                                                    if secret_for_link.is_empty() { None } else { Some(secret_for_link.as_str()) },
+                                                    share.discovery.as_deref(),
+                                                )
+                                            },
+                                        }
+                                        button {
+                                            class: "share-copy",
+                                            onclick: move |_| {
+                                                let secret_for_link = share_secret.read().trim().to_string();
+                                                let link = build_watch_link(
+                                                    &share.endpoint_addr,
+                                                    &share.broadcast_name,
+                                                    Some(&share.track_name),
+                                                    None,
+                                                    if secret_for_link.is_empty() { None } else { Some(secret_for_link.as_str()) },
+                                                    share.discovery.as_deref(),
+                                                );
+                                                let mut status = status.clone();
+                                                spawn(async move {
+                                                    match copy_to_clipboard(link).await {
+                                                        Ok(_) => status.set("Copied link".to_string()),
+                                                        Err(err) => status.set(format!("Copy failed: {err}")),
+                                                    }
+                                                });
+                                            },
+                                            "Copy"
+                                        }
+                                    }
+                                }
+                                if let Some(endpoint_id) = share.endpoint_id.clone() {
+                                    div { class: "share-row",
+                                        span { class: "share-label", "Your ID" }
+                                        div { class: "share-link-row",
+                                            input {
+                                                class: "share-link",
+                                                readonly: true,
+                                                value: "{endpoint_id}",
+                                            }
+                                            button {
+                                                class: "share-copy",
+                                                onclick: move |_| {
+                                                    let value = endpoint_id.clone();
+                                                    let mut status = status.clone();
+                                                    spawn(async move {
+                                                        match copy_to_clipboard(value).await {
+                                                            Ok(_) => status.set("Copied ID".to_string()),
+                                                            Err(err) => status.set(format!("Copy failed: {err}")),
+                                                        }
+                                                    });
+                                                },
+                                                "Copy"
+                                            }
+                                        }
+                                    }
+                                }
+                                if let Some(announce) = share.announce_status {
+                                    div { class: "share-row",
+                                        span { class: "share-label", "Status" }
+                                        span { class: "share-value", "{announce}" }
+                                    }
+                                }
+                            }
+                        }
+                    }
+                }
+            }
+        }
+    }
+}
+
+fn stream_has_drm(metadata: &[StreamMetadata]) -> bool {
+    metadata.iter().any(|meta| {
+        let key = meta.key.to_lowercase();
+        let value = meta.value.to_lowercase();
+        key == "drm"
+            || key.contains("copy")
+            || key.contains("protected")
+            || value.contains("drm")
+            || value.contains("encrypted")
+            || value.contains("widevine")
+    })
+}
+
+fn stream_source_kind(stream: &StreamDescriptor) -> String {
+    let source = stream.source.trim();
+    if !source.is_empty() {
+        return source.to_ascii_lowercase();
+    }
+    if let Some(kind) = stream
+        .metadata
+        .iter()
+        .find(|entry| entry.key == "source_kind")
+        .map(|entry| entry.value.clone())
+    {
+        return kind.to_ascii_lowercase();
+    }
+    "unknown".to_string()
+}
+
+async fn tauri_invoke<T, A>(command: &str, args: &A) -> Result<T, String>
+where
+    T: for<'de> Deserialize<'de>,
+    A: Serialize,
+{
+    let (tauri, invoke_fn) = find_tauri_invoke().ok_or_else(|| "tauri invoke not available".to_string())?;
+
+    let args = serde_wasm_bindgen::to_value(args).map_err(|err| err.to_string())?;
+    let promise = invoke_fn
+        .call2(&tauri, &JsValue::from_str(command), &args)
+        .map_err(|err| format!("invoke failed: {err:?}"))?;
+    let promise = Promise::from(promise);
+    let result = JsFuture::from(promise)
+        .await
+        .map_err(|err| format!("invoke rejected: {err:?}"))?;
+
+    serde_wasm_bindgen::from_value(result).map_err(|err| err.to_string())
+}
diff --git a/apps/tauri/ui/style.css b/apps/tauri/ui/style.css
new file mode 100644
index 0000000..9798054
--- /dev/null
+++ b/apps/tauri/ui/style.css
@@ -0,0 +1,671 @@
+@import url("https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600&family=IBM+Plex+Sans:wght@400;500&display=swap");
+
+:root {
+  color-scheme: light;
+  --bg: #f7f4ef;
+  --bg-ink: #151410;
+  --bg-muted: #f1ede6;
+  --bg-card: #ffffff;
+  --accent: #18a89b;
+  --accent-strong: #0c6f68;
+  --accent-warm: #d4915a;
+  --ink: #151410;
+  --ink-muted: #5a564c;
+  --border: rgba(21, 20, 16, 0.12);
+  --shadow: 0 24px 50px rgba(21, 20, 16, 0.15);
+  font-family: "Space Grotesk", "IBM Plex Sans", "Segoe UI", sans-serif;
+}
+
+* {
+  box-sizing: border-box;
+  margin: 0;
+  padding: 0;
+}
+
+body {
+  background: radial-gradient(circle at top left, #fff7ec 0%, #f7f4ef 42%, #eef5f3 100%);
+  color: var(--ink);
+  min-height: 100vh;
+}
+
+body::before {
+  content: "";
+  position: fixed;
+  inset: 0;
+  background-image: radial-gradient(circle at 20% 20%, rgba(24, 168, 155, 0.15), transparent 45%),
+    radial-gradient(circle at 85% 12%, rgba(255, 155, 82, 0.18), transparent 40%),
+    radial-gradient(circle at 40% 80%, rgba(24, 168, 155, 0.1), transparent 50%);
+  pointer-events: none;
+  z-index: -1;
+}
+
+#main {
+  min-height: 100vh;
+}
+
+.app {
+  display: flex;
+  flex-direction: column;
+  gap: 20px;
+  padding: 24px clamp(16px, 4vw, 40px) 36px;
+  animation: fadeIn 0.6s ease-out;
+}
+
+.topbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+}
+
+.topbar-actions {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  position: relative;
+}
+
+.add-source {
+  border: none;
+  border-radius: 14px;
+  background: var(--accent-strong);
+  color: white;
+  padding: 8px 14px;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: transform 0.2s ease, box-shadow 0.2s ease;
+}
+
+.add-source:hover {
+  transform: translateY(-1px);
+  box-shadow: 0 12px 20px rgba(12, 111, 104, 0.25);
+}
+
+.source-menu {
+  position: absolute;
+  top: 48px;
+  right: 0;
+  width: 280px;
+  background: var(--bg-card);
+  border: 1px solid var(--border);
+  border-radius: 16px;
+  padding: 12px;
+  box-shadow: var(--shadow);
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  max-height: 520px;
+  overflow-y: auto;
+  z-index: 10;
+}
+
+.source-menu-title {
+  font-size: 13px;
+  font-weight: 500;
+}
+
+.source-menu-status {
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.source-menu-item {
+  display: flex;
+  justify-content: space-between;
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.source-menu-action {
+  border: none;
+  border-radius: 12px;
+  background: var(--bg-muted);
+  padding: 8px 10px;
+  font-size: 12px;
+  cursor: pointer;
+}
+
+.source-menu-action.small {
+  padding: 6px 10px;
+  border-radius: 10px;
+}
+
+.source-menu-inline {
+  display: flex;
+  gap: 8px;
+  align-items: center;
+}
+
+.source-menu-inline .source-menu-input {
+  flex: 1;
+}
+
+.source-menu-divider {
+  height: 1px;
+  background: var(--border);
+  margin: 6px 0;
+}
+
+.source-menu-section {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.source-menu-subsection {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.source-menu-label {
+  font-size: 11px;
+  color: var(--ink-muted);
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+}
+
+.source-menu-input {
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 6px 8px;
+  font-size: 12px;
+  background: var(--bg-muted);
+}
+
+.source-menu-button {
+  border: none;
+  border-radius: 12px;
+  background: var(--accent);
+  color: #fff;
+  padding: 8px 10px;
+  font-size: 12px;
+  cursor: pointer;
+}
+
+.source-menu-toggle {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.brand {
+  display: flex;
+  flex-direction: column;
+  gap: 6px;
+}
+
+.brand-title {
+  font-size: clamp(24px, 2.6vw, 30px);
+  font-weight: 600;
+  letter-spacing: -0.03em;
+}
+
+.brand-subtitle {
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.status-pill {
+  display: inline-flex;
+  align-items: center;
+  gap: 10px;
+  padding: 8px 14px;
+  border-radius: 999px;
+  border: 1px solid var(--border);
+  background: var(--bg-card);
+  font-size: 13px;
+  color: var(--ink-muted);
+  box-shadow: 0 10px 20px rgba(21, 20, 16, 0.08);
+}
+
+.status-dot {
+  width: 8px;
+  height: 8px;
+  border-radius: 50%;
+  background: var(--accent);
+  box-shadow: 0 0 0 4px rgba(24, 168, 155, 0.2);
+  animation: pulse 1.8s ease-in-out infinite;
+}
+
+@keyframes pulse {
+  0% {
+    box-shadow: 0 0 0 4px rgba(24, 168, 155, 0.2);
+  }
+  50% {
+    box-shadow: 0 0 0 7px rgba(24, 168, 155, 0.08);
+  }
+  100% {
+    box-shadow: 0 0 0 4px rgba(24, 168, 155, 0.2);
+  }
+}
+
+.grid {
+  display: grid;
+  grid-template-columns: minmax(260px, 1fr) minmax(320px, 2fr);
+  gap: 20px;
+}
+
+.left-column {
+  display: flex;
+  flex-direction: column;
+  gap: 24px;
+}
+
+.panel {
+  background: var(--bg-card);
+  border-radius: 18px;
+  border: 1px solid var(--border);
+  box-shadow: var(--shadow);
+  padding: 20px;
+}
+
+.panel-title {
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.14em;
+  color: var(--ink-muted);
+  margin-bottom: 12px;
+}
+
+.panel-header {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 12px;
+}
+
+.panel-header .panel-title {
+  margin-bottom: 0;
+}
+
+.panel-actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.panel-select {
+  border: 1px solid var(--border);
+  background: var(--bg-muted);
+  border-radius: 10px;
+  padding: 6px 10px;
+  font-size: 11px;
+  text-transform: uppercase;
+  letter-spacing: 0.1em;
+}
+
+.panel-button {
+  border: none;
+  border-radius: 12px;
+  background: var(--bg-muted);
+  padding: 8px 12px;
+  font-size: 12px;
+  cursor: pointer;
+}
+
+.pager {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+
+.pager-button {
+  border: none;
+  border-radius: 10px;
+  background: var(--bg-muted);
+  padding: 6px 10px;
+  font-size: 11px;
+  cursor: pointer;
+}
+
+.pager-label {
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.channel-list {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  max-height: 480px;
+  overflow: auto;
+  padding-right: 4px;
+}
+
+.channel-card {
+  border-radius: 14px;
+  border: 1px solid transparent;
+  background: var(--bg-muted);
+  padding: 12px 14px;
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+  cursor: pointer;
+  transition: transform 0.2s ease, border 0.2s ease, box-shadow 0.2s ease;
+}
+
+.channel-badge {
+  align-self: flex-start;
+  border-radius: 999px;
+  padding: 4px 10px;
+  font-size: 10px;
+  letter-spacing: 0.12em;
+  text-transform: uppercase;
+  font-weight: 600;
+  background: rgba(21, 20, 16, 0.08);
+  color: var(--ink-muted);
+}
+
+.channel-badge.drm {
+  background: rgba(255, 155, 82, 0.2);
+  color: #a14d00;
+}
+
+.channel-badge.source {
+  background: rgba(24, 168, 155, 0.16);
+  color: #0f6c63;
+}
+
+.channel-card:hover {
+  transform: translateY(-2px);
+  border: 1px solid rgba(24, 168, 155, 0.4);
+  box-shadow: 0 12px 24px rgba(21, 20, 16, 0.1);
+}
+
+.channel-card.active {
+  border: 1px solid var(--accent);
+  background: rgba(24, 168, 155, 0.1);
+}
+
+.channel-title {
+  font-size: 15px;
+  font-weight: 600;
+}
+
+.channel-meta {
+  font-size: 13px;
+  color: var(--ink-muted);
+}
+
+.source-status {
+  font-size: 13px;
+  color: var(--ink-muted);
+  margin-bottom: 12px;
+}
+
+.source-list {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  margin-bottom: 20px;
+}
+
+.source-card {
+  border-radius: 16px;
+  border: 1px solid var(--border);
+  background: #fbf9f6;
+  padding: 12px 14px;
+}
+
+.source-name {
+  font-weight: 600;
+  margin-bottom: 6px;
+}
+
+.source-meta {
+  font-size: 12px;
+  color: var(--ink-muted);
+}
+
+.catalog-panel {
+  margin-bottom: 18px;
+}
+
+.player-shell {
+  display: flex;
+  flex-direction: column;
+  gap: 16px;
+}
+
+.video-frame {
+  width: 100%;
+  aspect-ratio: 16 / 9;
+  border-radius: 14px;
+  overflow: hidden;
+  background: #0f0f0f;
+  border: 1px solid rgba(21, 20, 16, 0.2);
+  position: relative;
+}
+
+.video-frame::after {
+  content: "";
+  position: absolute;
+  inset: 0;
+  pointer-events: none;
+  opacity: 0.11;
+  mix-blend-mode: overlay;
+  background:
+    linear-gradient(
+      to bottom,
+      rgba(255, 255, 255, 0.045),
+      rgba(0, 0, 0, 0.045)
+    ),
+    repeating-linear-gradient(
+      to bottom,
+      rgba(255, 255, 255, 0.04) 0px,
+      rgba(255, 255, 255, 0.04) 1px,
+      rgba(0, 0, 0, 0) 2px,
+      rgba(0, 0, 0, 0) 4px
+    );
+}
+
+video {
+  width: 100%;
+  height: 100%;
+  object-fit: cover;
+}
+
+.placeholder {
+  display: grid;
+  place-items: center;
+  height: 100%;
+  color: rgba(255, 255, 255, 0.7);
+  font-size: 14px;
+}
+
+.meta-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(180px, 1fr));
+  gap: 12px;
+}
+
+.meta-card {
+  border-radius: 12px;
+  background: #fdfbf8;
+  border: 1px solid var(--border);
+  padding: 12px 14px;
+  font-size: 13px;
+  color: var(--ink-muted);
+}
+
+.meta-card.drm {
+  border-color: rgba(255, 155, 82, 0.5);
+  background: rgba(255, 155, 82, 0.12);
+}
+
+.meta-card strong {
+  display: block;
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.12em;
+  color: var(--ink-muted);
+  margin-bottom: 4px;
+}
+
+.share-card {
+  margin-top: 16px;
+  border-radius: 14px;
+  border: 1px solid var(--border);
+  background: rgba(255, 255, 255, 0.7);
+  padding: 14px 16px;
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+}
+
+.share-title {
+  font-size: 12px;
+  text-transform: uppercase;
+  letter-spacing: 0.2em;
+  color: var(--ink-muted);
+}
+
+.share-row {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.share-label {
+  font-size: 11px;
+  color: var(--ink-muted);
+  text-transform: uppercase;
+  letter-spacing: 0.08em;
+}
+
+.share-value {
+  font-size: 12px;
+  color: var(--ink);
+  word-break: break-all;
+}
+
+.share-link-row {
+  display: grid;
+  grid-template-columns: 1fr auto;
+  gap: 10px;
+  align-items: center;
+}
+
+.share-link {
+  border-radius: 10px;
+  border: 1px solid var(--border);
+  padding: 8px 10px;
+  font-size: 12px;
+  background: #fbf9f6;
+  color: var(--ink);
+}
+
+.share-copy {
+  border-radius: 10px;
+  border: 1px solid var(--border);
+  background: rgba(255, 255, 255, 0.8);
+  padding: 8px 12px;
+  font-size: 12px;
+  color: var(--ink);
+  cursor: pointer;
+  transition: transform 140ms ease, box-shadow 140ms ease, background 140ms ease;
+}
+
+.share-copy:hover {
+  transform: translateY(-1px);
+  box-shadow: 0 10px 24px rgba(30, 23, 17, 0.08);
+}
+
+.toggle {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 12px;
+  color: var(--ink);
+}
+
+.toggle input {
+  accent-color: var(--accent);
+}
+
+.share-input {
+  margin-top: 8px;
+  border-radius: 10px;
+  border: 1px solid var(--border);
+  padding: 8px 10px;
+  font-size: 12px;
+  background: #fbf9f6;
+  color: var(--ink);
+}
+
+.moq-panel {
+  margin-top: 24px;
+  padding-top: 20px;
+  border-top: 1px dashed var(--border);
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.moq-title {
+  font-size: 13px;
+  font-weight: 600;
+  color: var(--ink);
+}
+
+.moq-label {
+  font-size: 12px;
+  color: var(--ink-muted);
+  text-transform: uppercase;
+  letter-spacing: 0.12em;
+}
+
+.moq-input {
+  border-radius: 10px;
+  border: 1px solid var(--border);
+  padding: 10px 12px;
+  font-size: 13px;
+  background: #fbf9f6;
+  color: var(--ink);
+}
+
+.moq-input:focus {
+  outline: none;
+  border-color: rgba(24, 168, 155, 0.6);
+  box-shadow: 0 0 0 3px rgba(24, 168, 155, 0.15);
+}
+
+.moq-button {
+  margin-top: 6px;
+  border: none;
+  border-radius: 12px;
+  background: var(--accent);
+  color: white;
+  padding: 10px 14px;
+  font-size: 13px;
+  font-weight: 600;
+  cursor: pointer;
+  transition: transform 0.2s ease, box-shadow 0.2s ease;
+}
+
+.moq-button:hover {
+  transform: translateY(-1px);
+  box-shadow: 0 12px 20px rgba(24, 168, 155, 0.25);
+}
+
+@keyframes fadeIn {
+  from {
+    opacity: 0;
+    transform: translateY(12px);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0);
+  }
+}
+
+@media (max-width: 900px) {
+  .grid {
+    grid-template-columns: 1fr;
+  }
+}
diff --git a/apps/tauri/ui/sw.js b/apps/tauri/ui/sw.js
new file mode 100644
index 0000000..5f78660
--- /dev/null
+++ b/apps/tauri/ui/sw.js
@@ -0,0 +1,103 @@
+/* every.channel PWA service worker
+ *
+ * Goal: cache the app shell so it can be installed and load offline.
+ * Do not interfere with media fetching/streaming: always network-pass-through
+ * for non-GET requests and for large binary media responses.
+ */
+
+const CACHE_NAME = "every.channel-shell-v1";
+const SHELL = [
+  "./",
+  "./index.html",
+  "./style.css",
+  "./manifest.webmanifest",
+  "./icons/icon-192.png",
+  "./icons/icon-512.png",
+  "./icons/apple-touch-icon.png",
+];
+
+self.addEventListener("install", (event) => {
+  event.waitUntil(
+    caches
+      .open(CACHE_NAME)
+      .then((cache) => cache.addAll(SHELL))
+      .then(() => self.skipWaiting())
+  );
+});
+
+self.addEventListener("activate", (event) => {
+  event.waitUntil(
+    caches
+      .keys()
+      .then((keys) =>
+        Promise.all(
+          keys.map((key) => {
+            if (key !== CACHE_NAME) return caches.delete(key);
+            return Promise.resolve();
+          })
+        )
+      )
+      .then(() => self.clients.claim())
+  );
+});
+
+function isNavigationRequest(request) {
+  return request.mode === "navigate";
+}
+
+function isMediaRequest(request) {
+  const url = new URL(request.url);
+  const path = url.pathname.toLowerCase();
+  return (
+    path.endsWith(".m3u8") ||
+    path.endsWith(".m4s") ||
+    path.endsWith(".mp4") ||
+    path.endsWith(".ts")
+  );
+}
+
+self.addEventListener("fetch", (event) => {
+  const { request } = event;
+  if (request.method !== "GET") return;
+
+  // Don't cache/modify streaming media requests.
+  if (isMediaRequest(request)) {
+    event.respondWith(fetch(request));
+    return;
+  }
+
+  // For navigations, prefer network but fall back to cached shell.
+  if (isNavigationRequest(request)) {
+    event.respondWith(
+      fetch(request).catch(() => caches.match("./index.html").then((r) => r || Response.error()))
+    );
+    return;
+  }
+
+  // Cache-first for same-origin static assets; network fallback.
+  const url = new URL(request.url);
+  if (url.origin === self.location.origin) {
+    event.respondWith(
+      caches.match(request).then((cached) => {
+        if (cached) return cached;
+        return fetch(request)
+          .then((resp) => {
+            // Avoid caching huge binary responses.
+            const len = resp.headers.get("content-length");
+            const tooBig = len && Number(len) > 5_000_000;
+            if (resp.ok && !tooBig) {
+              const clone = resp.clone();
+              caches.open(CACHE_NAME).then((cache) => cache.put(request, clone)).catch(() => {});
+            }
+            return resp;
+          })
+          .catch(() => cached || Response.error());
+      })
+    );
+    return;
+  }
+
+  // Default: network.
+  event.respondWith(fetch(request));
+});
+
diff --git a/apps/web/Cargo.lock b/apps/web/Cargo.lock
new file mode 100644
index 0000000..7ca771a
--- /dev/null
+++ b/apps/web/Cargo.lock
@@ -0,0 +1,1857 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+
+[[package]]
+name = "block-buffer"
+version = "0.10.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
+dependencies = [
+ "generic-array",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "ciborium"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42e69ffd6f0917f5c029256a24d0161db17cea3997d185db0d35926308770f0e"
+dependencies = [
+ "ciborium-io",
+ "ciborium-ll",
+ "serde",
+]
+
+[[package]]
+name = "ciborium-io"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05afea1e0a06c9be33d539b876f1ce3692f4afea2cb41f740e7743225ed1c757"
+
+[[package]]
+name = "ciborium-ll"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57663b653d948a338bfb3eeba9bb2fd5fcfaecb9e199e87e1eda4d9e8b240fd9"
+dependencies = [
+ "ciborium-io",
+ "half",
+]
+
+[[package]]
+name = "console_error_panic_hook"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a06aeb73f470f66dcdbf7223caeebb85984942f22f1adb2a088cf9668146bbbc"
+dependencies = [
+ "cfg-if",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "const-serialize"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08259976d62c715c4826cb4a3d64a3a9e5c5f68f964ff6087319857f569f93a6"
+dependencies = [
+ "const-serialize-macro",
+ "serde",
+]
+
+[[package]]
+name = "const-serialize-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "04382d0d9df7434af6b1b49ea1a026ef39df1b0738b1cc373368cf175354f6eb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "const_format"
+version = "0.2.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7faa7469a93a566e9ccc1c73fe783b4a65c274c5ace346038dca9c39fe0030ad"
+dependencies = [
+ "const_format_proc_macros",
+]
+
+[[package]]
+name = "const_format_proc_macros"
+version = "0.2.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-xid",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
+dependencies = [
+ "generic-array",
+ "typenum",
+]
+
+[[package]]
+name = "darling"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dashmap"
+version = "5.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "978747c1d849a7d2ee5e8adc0159961c48fb7e5db2f06af6723b80123bb53856"
+dependencies = [
+ "cfg-if",
+ "hashbrown",
+ "lock_api",
+ "once_cell",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "digest"
+version = "0.10.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+]
+
+[[package]]
+name = "dioxus"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "60a247114500f1a78e87022defa8173de847accfada8e8809dfae23a118a580c"
+dependencies = [
+ "dioxus-cli-config",
+ "dioxus-config-macro",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-devtools",
+ "dioxus-document",
+ "dioxus-fullstack",
+ "dioxus-history",
+ "dioxus-hooks",
+ "dioxus-html",
+ "dioxus-logger",
+ "dioxus-signals",
+ "dioxus-web",
+ "manganis",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-cli-config"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdd16948f1ffdb068dd9a64812158073a4250e2af4e98ea31fdac0312e6bce86"
+dependencies = [
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "dioxus-config-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75cbf582fbb1c32d34a1042ea675469065574109c95154468710a4d73ee98b49"
+dependencies = [
+ "proc-macro2",
+ "quote",
+]
+
+[[package]]
+name = "dioxus-core"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c03f451a119e47433c16e2d8eb5b15bf7d6e6734eb1a4c47574e6711dadff8d"
+dependencies = [
+ "const_format",
+ "dioxus-core-types",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "longest-increasing-subsequence",
+ "rustc-hash",
+ "rustversion",
+ "serde",
+ "slab",
+ "slotmap",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-core-macro"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "105c954caaaedf8cd10f3d1ba576b01e18aa8d33ad435182125eefe488cf0064"
+dependencies = [
+ "convert_case",
+ "dioxus-rsx",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dioxus-core-types"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91a82fccfa48574eb7aa183e297769540904694844598433a9eb55896ad9f93b"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "dioxus-devtools"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712a7300f1e8181218187b03502044157eef04e0a25b518117c5ef9ae1096880"
+dependencies = [
+ "dioxus-core",
+ "dioxus-devtools-types",
+ "dioxus-signals",
+ "serde",
+ "serde_json",
+ "tracing",
+ "tungstenite",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-devtools-types"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f62434973c0c9c5a3bc42e9cd5e7070401c2062a437fb5528f318c3e42ebf4ff"
+dependencies = [
+ "dioxus-core",
+ "serde",
+]
+
+[[package]]
+name = "dioxus-document"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "802a2014d1662b6615eec0a275745822ee4fc66aacd9d0f2fb33d6c8da79b8f2"
+dependencies = [
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-core-types",
+ "dioxus-html",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "lazy-js-bundle",
+ "serde",
+ "serde_json",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-fullstack"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe99b48a1348eec385b5c4bd3e80fd863b0d3b47257d34e2ddc58754dec5d128"
+dependencies = [
+ "base64",
+ "bytes",
+ "ciborium",
+ "dioxus-devtools",
+ "dioxus-history",
+ "dioxus-lib",
+ "dioxus-web",
+ "dioxus_server_macro",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "once_cell",
+ "serde",
+ "server_fn",
+ "tracing",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus-history"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ae4e22616c698f35b60727313134955d885de2d32e83689258e586ebc9b7909"
+dependencies = [
+ "dioxus-core",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-hooks"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "948e2b3f20d9d4b2c300aaa60281b1755f3298684448920b27106da5841896d0"
+dependencies = [
+ "dioxus-core",
+ "dioxus-signals",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "rustversion",
+ "slab",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-html"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59c9a40e6fee20ce7990095492dedb6a753eebe05e67d28271a249de74dc796d"
+dependencies = [
+ "async-trait",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-core-types",
+ "dioxus-hooks",
+ "dioxus-html-internal-macro",
+ "enumset",
+ "euclid",
+ "futures-channel",
+ "generational-box",
+ "keyboard-types",
+ "lazy-js-bundle",
+ "rustversion",
+ "tracing",
+]
+
+[[package]]
+name = "dioxus-html-internal-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43ba87b53688a2c9f619ecdf4b3b955bc1f08bd0570a80a0d626c405f6d14a76"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dioxus-interpreter-js"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330707b10ca75cb0eb05f9e5f8d80217cd0d7e62116a8277ae363c1a09b57a22"
+dependencies = [
+ "js-sys",
+ "lazy-js-bundle",
+ "rustc-hash",
+ "sledgehammer_bindgen",
+ "sledgehammer_utils",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus-lib"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5405b71aa9b8b0c3e0d22728f12f34217ca5277792bd315878cc6ecab7301b72"
+dependencies = [
+ "dioxus-config-macro",
+ "dioxus-core",
+ "dioxus-core-macro",
+ "dioxus-document",
+ "dioxus-history",
+ "dioxus-hooks",
+ "dioxus-html",
+ "dioxus-rsx",
+ "dioxus-signals",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-logger"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "545961e752f6c8bf59c274951b3c8b18a106db6ad2f9e2035b29e1f2a3e899b1"
+dependencies = [
+ "console_error_panic_hook",
+ "dioxus-cli-config",
+ "tracing",
+ "tracing-subscriber",
+ "tracing-wasm",
+]
+
+[[package]]
+name = "dioxus-rsx"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eb588e05800b5a7eb90b2f40fca5bbd7626e823fb5e1ba21e011de649b45aa1"
+dependencies = [
+ "proc-macro2",
+ "proc-macro2-diagnostics",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dioxus-signals"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10e032dbb3a2c0386ec8b8ee59bc20b5aeb67038147c855801237b45b13d72ac"
+dependencies = [
+ "dioxus-core",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "once_cell",
+ "parking_lot",
+ "rustc-hash",
+ "tracing",
+ "warnings",
+]
+
+[[package]]
+name = "dioxus-web"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7e7c12475c3d360058b8afe1b68eb6dfc9cbb7dcd760aed37c5f85c561c83ed1"
+dependencies = [
+ "async-trait",
+ "ciborium",
+ "dioxus-cli-config",
+ "dioxus-core",
+ "dioxus-core-types",
+ "dioxus-devtools",
+ "dioxus-document",
+ "dioxus-history",
+ "dioxus-html",
+ "dioxus-interpreter-js",
+ "dioxus-signals",
+ "futures-channel",
+ "futures-util",
+ "generational-box",
+ "js-sys",
+ "lazy-js-bundle",
+ "rustc-hash",
+ "serde",
+ "serde-wasm-bindgen",
+ "serde_json",
+ "tracing",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "dioxus_server_macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "371a5b21989a06b53c5092e977b3f75d0e60a65a4c15a2aa1d07014c3b2dda97"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "server_fn_macro",
+ "syn",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "ec-web"
+version = "0.0.0"
+dependencies = [
+ "dioxus",
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "enumset"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25b07a8dfbbbfc0064c0a6bdf9edcf966de6b1c33ce344bdeca3b41615452634"
+dependencies = [
+ "enumset_derive",
+]
+
+[[package]]
+name = "enumset_derive"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f43e744e4ea338060faee68ed933e46e722fb7f3617e722a5772d7e856d8b3ce"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "euclid"
+version = "0.22.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df61bf483e837f88d5c2291dcf55c67be7e676b3a51acc48db3a7b163b91ed63"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "generational-box"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a673cf4fb0ea6a91aa86c08695756dfe875277a912cdbf33db9a9f62d47ed82b"
+dependencies = [
+ "parking_lot",
+ "tracing",
+]
+
+[[package]]
+name = "generic-array"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
+dependencies = [
+ "typenum",
+ "version_check",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "wasi",
+]
+
+[[package]]
+name = "gloo-net"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c06f627b1a58ca3d42b45d6104bf1e1a03799df472df00988b6ba21accc10580"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-sink",
+ "gloo-utils",
+ "http",
+ "js-sys",
+ "pin-project",
+ "serde",
+ "serde_json",
+ "thiserror",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "gloo-utils"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b5555354113b18c547c1d3a98fbf7fb32a9ff4f6fa112ce823a21641a0ba3aa"
+dependencies = [
+ "js-sys",
+ "serde",
+ "serde_json",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if",
+ "crunchy",
+ "zerocopy",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
+
+[[package]]
+name = "js-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "keyboard-types"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b750dcadc39a09dbadd74e118f6dd6598df77fa01df0cfcdc52c28dece74528a"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "lazy-js-bundle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e49596223b9d9d4947a14a25c142a6e7d8ab3f27eb3ade269d238bb8b5c267e2"
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.180"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "longest-increasing-subsequence"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3bd0dd2cd90571056fdb71f6275fada10131182f84899f4b2a916e565d81d86"
+
+[[package]]
+name = "manganis"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "317af44b15e7605b85f04525449a3bb631753040156c9b318e6cba8a3ea4ef73"
+dependencies = [
+ "const-serialize",
+ "manganis-core",
+ "manganis-macro",
+]
+
+[[package]]
+name = "manganis-core"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c38bee65cc725b2bba23b5dbb290f57c8be8fadbe2043fb7e2ce73022ea06519"
+dependencies = [
+ "const-serialize",
+ "dioxus-cli-config",
+ "dioxus-core-types",
+ "serde",
+]
+
+[[package]]
+name = "manganis-macro"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9f4f71310913c40174d9f0cfcbcb127dad0329ecdb3945678a120db22d3d065"
+dependencies = [
+ "dunce",
+ "manganis-core",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "memchr"
+version = "2.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pin-project"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "proc-macro2-diagnostics"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af066a9c399a26e020ada66a034357a868728e72cd426f3adcd35f80d88d88c8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "version_check",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-wasm-bindgen"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3b143e2833c57ab9ad3ea280d21fd34e285a42837aeb0ee301f4f41890fa00e"
+dependencies = [
+ "js-sys",
+ "serde",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_qs"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0431a35568651e363364210c91983c1da5eb29404d9f0928b67d4ebcfa7d330c"
+dependencies = [
+ "percent-encoding",
+ "serde",
+ "thiserror",
+]
+
+[[package]]
+name = "server_fn"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fae7a3038a32e5a34ba32c6c45eb4852f8affaf8b794ebfcd4b1099e2d62ebe"
+dependencies = [
+ "bytes",
+ "const_format",
+ "dashmap",
+ "futures",
+ "gloo-net",
+ "http",
+ "js-sys",
+ "once_cell",
+ "send_wrapper",
+ "serde",
+ "serde_json",
+ "serde_qs",
+ "server_fn_macro_default",
+ "thiserror",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "xxhash-rust",
+]
+
+[[package]]
+name = "server_fn_macro"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faaaf648c6967aef78177c0610478abb5a3455811f401f3c62d10ae9bd3901a1"
+dependencies = [
+ "const_format",
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "xxhash-rust",
+]
+
+[[package]]
+name = "server_fn_macro_default"
+version = "0.6.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f2aa8119b558a17992e0ac1fd07f080099564f24532858811ce04f742542440"
+dependencies = [
+ "server_fn_macro",
+ "syn",
+]
+
+[[package]]
+name = "sha1"
+version = "0.10.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
+
+[[package]]
+name = "sledgehammer_bindgen"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "49e83e178d176459c92bc129cfd0958afac3ced925471b889b3a75546cfc4133"
+dependencies = [
+ "sledgehammer_bindgen_macro",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "sledgehammer_bindgen_macro"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bb251b407f50028476a600541542b605bb864d35d9ee1de4f6cab45d88475e6d"
+dependencies = [
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "sledgehammer_utils"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "debdd4b83524961983cea3c55383b3910fd2f24fd13a188f5b091d2d504a61ae"
+dependencies = [
+ "rustc-hash",
+]
+
+[[package]]
+name = "slotmap"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdd58c3c93c3d278ca835519292445cb4b0d4dc59ccfdf7ceadaab3f8aeb4038"
+dependencies = [
+ "serde",
+ "version_check",
+]
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "syn"
+version = "2.0.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
+dependencies = [
+ "sharded-slab",
+ "thread_local",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-wasm"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4575c663a174420fa2d78f4108ff68f65bf2fbb7dd89f33749b6e826b3626e07"
+dependencies = [
+ "tracing",
+ "tracing-subscriber",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "tungstenite"
+version = "0.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e2ce1e47ed2994fd43b04c8f618008d4cabdd5ee34027cf14f9d918edd9c8"
+dependencies = [
+ "byteorder",
+ "bytes",
+ "data-encoding",
+ "http",
+ "httparse",
+ "log",
+ "rand",
+ "sha1",
+ "thiserror",
+ "utf-8",
+]
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf-8"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09cc8ee72d2a9becf2f2febe0205bbed8fc6615b7cb429ad062dc7b7ddd036a9"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "warnings"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64f68998838dab65727c9b30465595c6f7c953313559371ca8bf31759b3680ad"
+dependencies = [
+ "pin-project",
+ "tracing",
+ "warnings-macro",
+]
+
+[[package]]
+name = "warnings-macro"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59195a1db0e95b920366d949ba5e0d3fc0e70b67c09be15ce5abb790106b0571"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70a6e77fd0ae8029c9ea0063f87c46fde723e7d887703d74ad2616d792e51e6f"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "312e32e551d92129218ea9a2452120f4aabc03529ef03e4d0d82fb2780608598"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "xxhash-rust"
+version = "0.8.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdd20c5420375476fbd4394763288da7eb0cc0b8c11deed431a91562af7335d3"
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.39"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db6d35d663eadb6c932438e763b262fe1a70987f9ae936e60158176d710cae4a"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.39"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4122cd3169e94605190e77839c9a40d40ed048d305bfdc146e7df40ab0f3e517"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ff05f8caa9038894637571ae6b9e29466c1f4f829d26c9b28f869a29cbe3445"
diff --git a/apps/web/Cargo.toml b/apps/web/Cargo.toml
new file mode 100644
index 0000000..c6d714e
--- /dev/null
+++ b/apps/web/Cargo.toml
@@ -0,0 +1,14 @@
+[package]
+name = "ec-web"
+version = "0.0.0"
+edition = "2021"
+
+[dependencies]
+dioxus = { version = "0.6", features = ["web"] }
+js-sys = "0.3"
+serde = { version = "1", features = ["derive"] }
+wasm-bindgen = "0.2"
+wasm-bindgen-futures = "0.4"
+web-sys = { version = "0.3", features = ["Window", "Navigator", "Clipboard"] }
+
+[workspace]
diff --git a/apps/web/README.md b/apps/web/README.md
new file mode 100644
index 0000000..7aa20ec
--- /dev/null
+++ b/apps/web/README.md
@@ -0,0 +1,18 @@
+# every.channel web site (static)
+
+This is a static web site built in Rust with Dioxus and compiled to WASM.
+
+## Dev
+
+From repo root:
+
+```bash
+nix develop -c bash -lc 'cd apps/web && trunk serve --port 1421 --public-url /'
+```
+
+## Build
+
+```bash
+nix develop -c bash -lc 'cd apps/web && trunk build --release --public-url /'
+```
+
diff --git a/apps/web/Trunk.toml b/apps/web/Trunk.toml
new file mode 100644
index 0000000..3645c7e
--- /dev/null
+++ b/apps/web/Trunk.toml
@@ -0,0 +1,5 @@
+[build]
+target = "index.html"
+dist = "dist"
+public_url = "/"
+
diff --git a/apps/web/index.html b/apps/web/index.html
new file mode 100644
index 0000000..9ccd9ae
--- /dev/null
+++ b/apps/web/index.html
@@ -0,0 +1,17 @@
+<!DOCTYPE html>
+<html lang="en">
+  <head>
+    <meta charset="utf-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1" />
+    <title>every.channel</title>
+    <meta
+      name="description"
+      content="Watch and share free over-the-air TV. Local first, global when you want."
+    />
+    <link data-trunk rel="css" href="style.css" />
+    <link data-trunk rel="rust" data-wasm-opt="z" />
+  </head>
+  <body>
+    <div id="main"></div>
+  </body>
+</html>
diff --git a/apps/web/src/main.rs b/apps/web/src/main.rs
new file mode 100644
index 0000000..cab97d4
--- /dev/null
+++ b/apps/web/src/main.rs
@@ -0,0 +1,125 @@
+use dioxus::prelude::*;
+use wasm_bindgen_futures::JsFuture;
+
+fn main() {
+    dioxus::launch(App);
+}
+
+#[component]
+fn App() -> Element {
+    let mut link = use_signal(|| "".to_string());
+    let mut status = use_signal(|| "".to_string());
+
+    rsx! {
+        div { class: "page",
+            header { class: "top",
+                div { class: "brand",
+                    div { class: "brand-title", "every.channel" }
+                    div { class: "brand-subtitle",
+                        "Watch and share free over-the-air TV. Local first, global when you want."
+                    }
+                }
+                nav { class: "nav",
+                    a { href: "#watch", "Watch" }
+                    a { href: "#directory", "Directory" }
+                    a { href: "#join", "Join" }
+                    a { href: "#about", "Info" }
+                }
+            }
+
+            div { class: "grid",
+                section { class: "card section", id: "watch",
+                    div { class: "card-title", "Watch" }
+                    div { class: "h1", "Watch a link" }
+                    div { class: "p",
+                        "Got a link from a friend? Paste it here to copy, then open the desktop app."
+                    }
+                    div { class: "row",
+                        input {
+                            class: "input",
+                            placeholder: "every.channel://watch?...",
+                            value: "{link.read()}",
+                            oninput: move |evt| link.set(evt.value()),
+                        }
+                        button {
+                            class: "btn primary",
+                            onclick: move |_| {
+                                let value = link.read().trim().to_string();
+                                if value.is_empty() {
+                                    status.set("Paste a link first".to_string());
+                                    return;
+                                }
+                                let mut status = status.clone();
+                                spawn(async move {
+                                    match copy_to_clipboard(value).await {
+                                        Ok(_) => status.set("Copied! Open the app and paste under Watch a Link.".to_string()),
+                                        Err(err) => status.set(format!("Copy failed: {err}")),
+                                    }
+                                });
+                            },
+                            "Copy"
+                        }
+                    }
+                    if !status.read().is_empty() {
+                        div { class: "kicker",
+                            span { class: "dot" }
+                            span { "{status.read()}" }
+                        }
+                    }
+                }
+
+                section { class: "card section", id: "directory",
+                    div { class: "card-title", "Directory" }
+                    div { class: "h1", "Find channels from people you trust" }
+                    div { class: "p",
+                        "The directory is opt-in. You choose what to share and who to connect with."
+                    }
+                    div { class: "kicker",
+                        span { class: "dot" }
+                        span { "Enable Nearby or Public reach in the app to find others." }
+                    }
+                }
+
+                section { class: "card section", id: "join",
+                    div { class: "card-title", "Join" }
+                    div { class: "h1", "Run your own" }
+                    div { class: "p",
+                        "Anyone can watch, share, and relay. Works with HDHomeRun, Linux TV tuners, and live streams."
+                    }
+                    div { class: "kicker",
+                        span { class: "dot" }
+                        span { "Desktop app and CLI available now." }
+                    }
+                }
+
+                section { class: "card section", id: "about",
+                    div { class: "card-title", "About" }
+                    div { class: "h1", "A small promise" }
+                    div { class: "p",
+                        "TV signals are just waves in the air. This project makes it easier to pick them up and share them with others."
+                    }
+                    div { class: "kicker",
+                        span { class: "dot" }
+                        span { "Open source. No central server." }
+                    }
+                }
+            }
+
+            footer { class: "footer",
+                span { "AGPLv3" }
+                span { "every.channel" }
+                a { href: "https://every.channel", "every.channel" }
+            }
+        }
+    }
+}
+
+async fn copy_to_clipboard(text: String) -> Result<(), String> {
+    let window = web_sys::window().ok_or_else(|| "window unavailable".to_string())?;
+    let clipboard = window.navigator().clipboard();
+    let promise = clipboard.write_text(&text);
+    JsFuture::from(promise)
+        .await
+        .map_err(|err| format!("clipboard write rejected: {err:?}"))?;
+    Ok(())
+}
diff --git a/apps/web/style.css b/apps/web/style.css
new file mode 100644
index 0000000..919fae1
--- /dev/null
+++ b/apps/web/style.css
@@ -0,0 +1,285 @@
+@import url("https://fonts.googleapis.com/css2?family=Space+Grotesk:wght@400;500;600&family=IBM+Plex+Sans:wght@400;500&display=swap");
+
+:root {
+  color-scheme: light;
+  --bg: #f8f5f0;
+  --bg-muted: #f2ede5;
+  --card: rgba(255, 255, 255, 0.82);
+  --ink: #1a1814;
+  --ink-muted: #5c574d;
+  --border: rgba(26, 24, 20, 0.10);
+  --shadow: 0 16px 40px rgba(26, 24, 20, 0.10);
+  --accent: #18a89b;
+  --accent-ink: #0c6f68;
+  --warm: #d4915a;
+  --warm-muted: rgba(232, 160, 92, 0.12);
+  font-family: "Space Grotesk", "IBM Plex Sans", "Segoe UI", system-ui, sans-serif;
+  font-feature-settings: "ss01" 1;
+}
+
+* {
+  box-sizing: border-box;
+  margin: 0;
+  padding: 0;
+}
+
+body {
+  min-height: 100vh;
+  color: var(--ink);
+  background: linear-gradient(168deg, #fdfaf5 0%, #f8f5f0 35%, #f4f1ec 70%, #f0ece6 100%);
+}
+
+/* Subtle "old TV" nod: soft phosphor glow and faint scanlines */
+body::before {
+  content: "";
+  position: fixed;
+  inset: 0;
+  background-image:
+    radial-gradient(ellipse 80% 60% at 15% 10%, rgba(232, 160, 92, 0.08), transparent 50%),
+    radial-gradient(ellipse 60% 50% at 85% 15%, rgba(24, 168, 155, 0.06), transparent 45%),
+    radial-gradient(ellipse 70% 40% at 50% 90%, rgba(232, 160, 92, 0.05), transparent 50%),
+    repeating-linear-gradient(
+      0deg,
+      transparent 0px,
+      transparent 2px,
+      rgba(26, 24, 20, 0.012) 2px,
+      rgba(26, 24, 20, 0.012) 4px
+    );
+  pointer-events: none;
+  z-index: -1;
+}
+
+#main {
+  min-height: 100vh;
+}
+
+.page {
+  max-width: 1120px;
+  margin: 0 auto;
+  padding: 24px clamp(16px, 4vw, 40px) 40px;
+  display: flex;
+  flex-direction: column;
+  gap: 20px;
+  animation: fadeIn 0.5s ease-out;
+}
+
+.top {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+  flex-wrap: wrap;
+}
+
+.brand {
+  display: flex;
+  flex-direction: column;
+  gap: 4px;
+}
+
+.brand-title {
+  font-size: clamp(24px, 2.6vw, 30px);
+  font-weight: 600;
+  letter-spacing: -0.025em;
+  color: var(--ink);
+}
+
+.brand-subtitle {
+  font-size: 12px;
+  color: var(--ink-muted);
+  max-width: 44ch;
+  line-height: 1.4;
+}
+
+.nav {
+  display: flex;
+  gap: 5px;
+  flex-wrap: wrap;
+  justify-content: flex-end;
+}
+
+.nav a {
+  text-decoration: none;
+  color: var(--ink-muted);
+  font-size: 12px;
+  font-weight: 500;
+  padding: 6px 10px;
+  border-radius: 999px;
+  border: 1px solid var(--border);
+  background: rgba(255, 255, 255, 0.65);
+  transition: transform 120ms ease, box-shadow 120ms ease, background 120ms ease, color 120ms ease;
+}
+
+.nav a:hover {
+  transform: translateY(-1px);
+  background: rgba(255, 255, 255, 0.9);
+  color: var(--ink);
+  box-shadow: 0 8px 20px rgba(26, 24, 20, 0.06);
+}
+
+.grid {
+  display: grid;
+  grid-template-columns: repeat(2, 1fr);
+  gap: 14px;
+}
+
+@media (max-width: 720px) {
+  .grid {
+    grid-template-columns: 1fr;
+  }
+}
+
+.card {
+  border-radius: 16px;
+  border: 1px solid var(--border);
+  background: var(--card);
+  box-shadow: var(--shadow);
+  padding: 18px;
+  backdrop-filter: blur(12px);
+}
+
+.card-title {
+  font-size: 10px;
+  text-transform: uppercase;
+  letter-spacing: 0.12em;
+  color: var(--ink-muted);
+  margin-bottom: 8px;
+}
+
+.h1 {
+  font-size: clamp(16px, 1.8vw, 19px);
+  font-weight: 600;
+  letter-spacing: -0.015em;
+  margin-bottom: 8px;
+  line-height: 1.3;
+}
+
+.p {
+  font-size: 12px;
+  line-height: 1.5;
+  color: var(--ink-muted);
+}
+
+.row {
+  display: grid;
+  grid-template-columns: 1fr auto;
+  gap: 6px;
+  margin-top: 10px;
+}
+
+.input {
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 8px 10px;
+  font-size: 11px;
+  background: rgba(242, 237, 229, 0.6);
+  color: var(--ink);
+}
+
+.input:focus {
+  outline: none;
+  border-color: rgba(24, 168, 155, 0.4);
+  box-shadow: 0 0 0 3px rgba(24, 168, 155, 0.08);
+}
+
+.btn {
+  border: 1px solid var(--border);
+  border-radius: 10px;
+  padding: 8px 12px;
+  font-size: 11px;
+  font-weight: 500;
+  cursor: pointer;
+  background: rgba(255, 255, 255, 0.85);
+  color: var(--ink);
+  transition: transform 120ms ease, box-shadow 120ms ease, background 120ms ease;
+}
+
+.btn:hover {
+  transform: translateY(-1px);
+  box-shadow: 0 6px 16px rgba(26, 24, 20, 0.06);
+}
+
+.btn.primary {
+  background: var(--accent-ink);
+  color: #fff;
+  border-color: rgba(12, 111, 104, 0.3);
+}
+
+.btn.primary:hover {
+  box-shadow: 0 6px 16px rgba(12, 111, 104, 0.2);
+}
+
+.kicker {
+  margin-top: 8px;
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  padding: 6px 10px;
+  border-radius: 999px;
+  border: 1px solid var(--border);
+  background: var(--warm-muted);
+  color: var(--ink-muted);
+  font-size: 11px;
+}
+
+.dot {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: var(--warm);
+  box-shadow: 0 0 0 3px rgba(232, 160, 92, 0.2);
+}
+
+.section {
+  scroll-margin-top: 12px;
+}
+
+code {
+  font-family: "IBM Plex Mono", ui-monospace, monospace;
+  font-size: 0.9em;
+  background: rgba(26, 24, 20, 0.05);
+  padding: 2px 5px;
+  border-radius: 4px;
+}
+
+.footer {
+  margin-top: 6px;
+  padding-top: 12px;
+  border-top: 1px solid var(--border);
+  font-size: 10px;
+  color: var(--ink-muted);
+  display: flex;
+  flex-wrap: wrap;
+  gap: 10px;
+  justify-content: space-between;
+}
+
+.footer a {
+  color: var(--ink-muted);
+  text-decoration: none;
+}
+
+.footer a:hover {
+  color: var(--ink);
+}
+
+@keyframes fadeIn {
+  from {
+    opacity: 0;
+    transform: translateY(4px);
+  }
+  to {
+    opacity: 1;
+    transform: translateY(0);
+  }
+}
+
+@media (max-width: 720px) {
+  .top {
+    flex-direction: column;
+    align-items: stretch;
+  }
+  .nav {
+    justify-content: flex-start;
+  }
+}
diff --git a/crates/ec-chopper/Cargo.toml b/crates/ec-chopper/Cargo.toml
new file mode 100644
index 0000000..fba74b7
--- /dev/null
+++ b/crates/ec-chopper/Cargo.toml
@@ -0,0 +1,13 @@
+[package]
+name = "ec-chopper"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+ac-ffmpeg = "0.19.0"
+anyhow.workspace = true
+blake3.workspace = true
+ec-core = { path = "../ec-core" }
+ec-ts = { path = "../ec-ts" }
+serde.workspace = true
diff --git a/crates/ec-chopper/src/lib.rs b/crates/ec-chopper/src/lib.rs
new file mode 100644
index 0000000..790bfbe
--- /dev/null
+++ b/crates/ec-chopper/src/lib.rs
@@ -0,0 +1,899 @@
+//! Deterministic chunking and transcode scaffolding.
+
+use ac_ffmpeg::format::{
+    demuxer::Demuxer,
+    io::IO,
+    muxer::{Muxer, OutputFormat},
+};
+use anyhow::{anyhow, Context, Result};
+use ec_core::{
+    merkle_root_from_hashes, DeterminismProfile, ManifestBody, StreamId, StreamMetadata,
+};
+use ec_ts::{SectionAssembler, TimeSyncEngine, TimeSyncUpdate, TsReader};
+use serde::{Deserialize, Serialize};
+use std::fs;
+use std::io::{Read, Write};
+use std::path::{Path, PathBuf};
+use std::process::{Child, Command, Stdio};
+use std::time::Duration;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamProbe {
+    pub index: usize,
+    pub kind: String,
+    pub decoder: Option<String>,
+    pub width: Option<usize>,
+    pub height: Option<usize>,
+    pub sample_rate: Option<u32>,
+    pub channels: Option<u32>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub enum ChunkFormat {
+    Fmp4,
+    MpegTs,
+    Matroska,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ChunkerConfig {
+    pub output_dir: PathBuf,
+    pub segment_duration_ms: u64,
+    pub segment_template: String,
+    pub format: ChunkFormat,
+    pub profile: DeterminismProfile,
+}
+
+impl ChunkerConfig {
+    pub fn default_segment_template() -> String {
+        "segment_%06d.m4s".to_string()
+    }
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ChunkSegment {
+    pub index: usize,
+    pub path: PathBuf,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ChunkManifest {
+    pub output_dir: PathBuf,
+    pub segments: Vec<ChunkSegment>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TsChunk {
+    pub index: u64,
+    pub path: PathBuf,
+    pub timing: ChunkTiming,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct HashedTsChunk {
+    pub index: u64,
+    pub path: PathBuf,
+    pub timing: ChunkTiming,
+    pub hash: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct HashedTsChunkManifest {
+    pub output_dir: PathBuf,
+    pub chunks: Vec<HashedTsChunk>,
+    pub merkle_root: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ChunkTiming {
+    pub chunk_index: u64,
+    pub chunk_start_27mhz: Option<u64>,
+    pub chunk_duration_27mhz: u64,
+    pub utc_start_unix: Option<i64>,
+    pub sync_status: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TsChunkManifest {
+    pub output_dir: PathBuf,
+    pub chunks: Vec<TsChunk>,
+}
+
+#[derive(Debug, Clone)]
+pub enum ChunkerInput {
+    Url(String),
+    File(PathBuf),
+}
+
+#[derive(Debug)]
+pub struct SegmenterProcess {
+    pub child: Child,
+    pub output_dir: PathBuf,
+}
+
+#[derive(Debug, Clone)]
+pub struct FfmpegCliSegmenter {
+    pub ffmpeg_bin: PathBuf,
+}
+
+impl Default for FfmpegCliSegmenter {
+    fn default() -> Self {
+        Self {
+            ffmpeg_bin: PathBuf::from("ffmpeg"),
+        }
+    }
+}
+
+impl FfmpegCliSegmenter {
+    pub fn spawn(&self, input: ChunkerInput, config: &ChunkerConfig) -> Result<SegmenterProcess> {
+        fs::create_dir_all(&config.output_dir)
+            .with_context(|| format!("failed to create {}", config.output_dir.display()))?;
+
+        let input_arg = match input {
+            ChunkerInput::Url(url) => url,
+            ChunkerInput::File(path) => path
+                .to_str()
+                .ok_or_else(|| anyhow!("invalid input path"))?
+                .to_string(),
+        };
+
+        let segment_time = format!("{:.3}", config.segment_duration_ms as f64 / 1000.0);
+        let output_template = config.output_dir.join(&config.segment_template);
+        let output_template = output_template
+            .to_str()
+            .ok_or_else(|| anyhow!("invalid output template path"))?
+            .to_string();
+
+        let mut cmd = Command::new(&self.ffmpeg_bin);
+        cmd.arg("-hide_banner")
+            .arg("-loglevel")
+            .arg("error")
+            .arg("-nostdin")
+            .arg("-y")
+            .arg("-i")
+            .arg(&input_arg);
+
+        for arg in ffmpeg_profile_args(&config.profile) {
+            cmd.arg(arg);
+        }
+
+        cmd.arg("-f")
+            .arg("segment")
+            .arg("-segment_time")
+            .arg(segment_time)
+            .arg("-reset_timestamps")
+            .arg("1")
+            .arg("-segment_format")
+            .arg(segment_format_arg(&config.format))
+            .arg(&output_template)
+            .stdin(Stdio::null())
+            .stdout(Stdio::null())
+            .stderr(Stdio::inherit());
+
+        let child = cmd
+            .spawn()
+            .with_context(|| "failed to spawn ffmpeg".to_string())?;
+
+        Ok(SegmenterProcess {
+            child,
+            output_dir: config.output_dir.clone(),
+        })
+    }
+}
+
+pub fn collect_segments(output_dir: &Path) -> Result<ChunkManifest> {
+    let mut entries = fs::read_dir(output_dir)?
+        .filter_map(Result::ok)
+        .filter(|entry| entry.file_type().map(|t| t.is_file()).unwrap_or(false))
+        .map(|entry| entry.path())
+        .collect::<Vec<_>>();
+
+    entries.sort();
+
+    let segments = entries
+        .into_iter()
+        .enumerate()
+        .map(|(index, path)| ChunkSegment { index, path })
+        .collect();
+
+    Ok(ChunkManifest {
+        output_dir: output_dir.to_path_buf(),
+        segments,
+    })
+}
+
+pub fn probe_read_stream<T: Read>(stream: T) -> Result<Vec<StreamProbe>> {
+    let io = IO::from_read_stream(stream);
+    let demuxer = Demuxer::builder()
+        .build(io)
+        .map_err(|err| anyhow!(err.to_string()))?;
+    let demuxer = demuxer
+        .find_stream_info(Some(Duration::from_secs(2)))
+        .map_err(|(_, err)| anyhow!(err.to_string()))?;
+
+    let mut probes = Vec::new();
+    for (index, stream) in demuxer.streams().iter().enumerate() {
+        let params = stream.codec_parameters();
+        let mut probe = StreamProbe {
+            index,
+            kind: if params.is_video_codec() {
+                "video".to_string()
+            } else if params.is_audio_codec() {
+                "audio".to_string()
+            } else if params.is_subtitle_codec() {
+                "subtitle".to_string()
+            } else {
+                "data".to_string()
+            },
+            decoder: params.decoder_name().map(|name| name.to_string()),
+            width: None,
+            height: None,
+            sample_rate: None,
+            channels: None,
+        };
+
+        if let Some(video) = params.as_video_codec_parameters() {
+            probe.width = Some(video.width());
+            probe.height = Some(video.height());
+        }
+
+        if let Some(audio) = params.as_audio_codec_parameters() {
+            probe.sample_rate = Some(audio.sample_rate());
+            probe.channels = Some(audio.channel_layout().channels());
+        }
+
+        probes.push(probe);
+    }
+
+    Ok(probes)
+}
+
+pub fn analyze_ts_time<T: Read>(
+    stream: T,
+    chunk_duration_ms: u64,
+    max_events: usize,
+) -> Result<Vec<TimeSyncUpdate>> {
+    let mut reader = TsReader::new(stream);
+    let mut assembler = SectionAssembler::default();
+    let mut engine = TimeSyncEngine::new(chunk_duration_ms);
+    let mut events = Vec::new();
+
+    while let Some(packet) = reader.read_packet()? {
+        for update in engine.ingest_packet(&packet, &mut assembler) {
+            events.push(update);
+            if events.len() >= max_events {
+                return Ok(events);
+            }
+        }
+    }
+
+    Ok(events)
+}
+
+pub fn chunk_ts_stream<T: Read>(
+    stream: T,
+    output_dir: &Path,
+    chunk_duration_ms: u64,
+    max_chunks: Option<usize>,
+) -> Result<TsChunkManifest> {
+    let mut chunks = Vec::new();
+    chunk_ts_stream_live(stream, output_dir, chunk_duration_ms, max_chunks, |chunk| {
+        chunks.push(chunk);
+        Ok(())
+    })?;
+    Ok(TsChunkManifest {
+        output_dir: output_dir.to_path_buf(),
+        chunks,
+    })
+}
+
+pub fn chunk_ts_stream_live<T: Read, F: FnMut(TsChunk) -> Result<()>>(
+    stream: T,
+    output_dir: &Path,
+    chunk_duration_ms: u64,
+    max_chunks: Option<usize>,
+    mut on_chunk: F,
+) -> Result<()> {
+    fs::create_dir_all(output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))?;
+
+    let mut reader = TsReader::new(stream);
+    let mut assembler = SectionAssembler::default();
+    let mut engine = TimeSyncEngine::new(chunk_duration_ms);
+
+    let mut current_index: Option<u64> = None;
+    let mut current_file: Option<std::fs::File> = None;
+    let mut current_timing: Option<ChunkTiming> = None;
+    let mut emitted = 0usize;
+
+    let mut close_and_emit =
+        |index: u64, timing: ChunkTiming, file: std::fs::File| -> Result<bool> {
+            drop(file);
+            let path = chunk_path(output_dir, index);
+            on_chunk(TsChunk {
+                index,
+                path,
+                timing,
+            })?;
+            emitted += 1;
+            Ok(max_chunks.map(|limit| emitted >= limit).unwrap_or(false))
+        };
+
+    while let Some(packet) = reader.read_packet()? {
+        let updates = engine.ingest_packet(&packet, &mut assembler);
+        for update in updates {
+            if update.discontinuity {
+                if let (Some(index), Some(timing), Some(file)) = (
+                    current_index.take(),
+                    current_timing.take(),
+                    current_file.take(),
+                ) {
+                    if close_and_emit(index, timing, file)? {
+                        return Ok(());
+                    }
+                }
+            }
+
+            if let Some(index) = update.chunk_index {
+                if current_index != Some(index) {
+                    if let (Some(prev_index), Some(timing), Some(file)) = (
+                        current_index.take(),
+                        current_timing.take(),
+                        current_file.take(),
+                    ) {
+                        if close_and_emit(prev_index, timing, file)? {
+                            return Ok(());
+                        }
+                    }
+
+                    let path = chunk_path(output_dir, index);
+                    let file = std::fs::File::create(&path)
+                        .with_context(|| format!("failed to create {}", path.display()))?;
+                    current_file = Some(file);
+                    current_index = Some(index);
+                    current_timing = Some(ChunkTiming {
+                        chunk_index: index,
+                        chunk_start_27mhz: update.chunk_start_27mhz,
+                        chunk_duration_27mhz: chunk_duration_ms * 27_000,
+                        utc_start_unix: update.utc_start_unix,
+                        sync_status: if update.synced {
+                            "synced".to_string()
+                        } else {
+                            "unsynced".to_string()
+                        },
+                    });
+                }
+            }
+        }
+
+        if let Some(file) = current_file.as_mut() {
+            file.write_all(packet.as_bytes())?;
+        }
+    }
+
+    if let (Some(index), Some(timing), Some(file)) = (
+        current_index.take(),
+        current_timing.take(),
+        current_file.take(),
+    ) {
+        let _ = close_and_emit(index, timing, file);
+    }
+
+    Ok(())
+}
+
+fn chunk_path(output_dir: &Path, index: u64) -> PathBuf {
+    output_dir.join(format!("chunk_{index:010}.ts"))
+}
+
+pub fn hash_file_blake3(path: &Path) -> Result<String> {
+    let mut file =
+        fs::File::open(path).with_context(|| format!("failed to open {}", path.display()))?;
+    let mut hasher = blake3::Hasher::new();
+    let mut buffer = [0u8; 8192];
+    loop {
+        let read = file.read(&mut buffer)?;
+        if read == 0 {
+            break;
+        }
+        hasher.update(&buffer[..read]);
+    }
+    Ok(hasher.finalize().to_hex().to_string())
+}
+
+pub fn chunk_stream_ffmpeg<T: Read>(
+    stream: T,
+    output_dir: &Path,
+    chunk_duration_ms: u64,
+    max_chunks: Option<usize>,
+) -> Result<TsChunkManifest> {
+    fs::create_dir_all(output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))?;
+
+    let io = IO::from_read_stream(stream);
+    let demuxer = Demuxer::builder()
+        .build(io)
+        .map_err(|err| anyhow!(err.to_string()))?;
+    let demuxer = demuxer
+        .find_stream_info(Some(Duration::from_secs(2)))
+        .map_err(|(_, err)| anyhow!(err.to_string()))?;
+
+    let stream_info = demuxer
+        .streams()
+        .iter()
+        .map(|stream| (stream.codec_parameters(), stream.time_base()))
+        .collect::<Vec<_>>();
+
+    let mut demuxer = demuxer.into_demuxer();
+    let chunk_duration_micros = chunk_duration_ms as i64 * 1000;
+
+    let mut chunks = Vec::new();
+    let mut current_index: Option<u64> = None;
+    let mut current_muxer: Option<Muxer<std::fs::File>> = None;
+    let mut current_timing: Option<ChunkTiming> = None;
+
+    loop {
+        let Some(packet) = demuxer.take().map_err(|err| anyhow!(err.to_string()))? else {
+            break;
+        };
+
+        let ts = packet
+            .pts()
+            .as_micros()
+            .or_else(|| packet.dts().as_micros());
+
+        let chunk_index = ts
+            .and_then(|micros| {
+                if micros < 0 {
+                    None
+                } else {
+                    Some((micros / chunk_duration_micros) as u64)
+                }
+            })
+            .or(current_index);
+
+        if let Some(index) = chunk_index {
+            if current_index != Some(index) {
+                if let Some(mut muxer) = current_muxer.take() {
+                    muxer.flush().map_err(|err| anyhow!(err.to_string()))?;
+                    let _ = muxer.close();
+                }
+                if let (Some(prev_index), Some(timing)) =
+                    (current_index.take(), current_timing.take())
+                {
+                    chunks.push(TsChunk {
+                        index: prev_index,
+                        path: chunk_path(output_dir, prev_index),
+                        timing,
+                    });
+                }
+
+                let path = chunk_path(output_dir, index);
+                let file = std::fs::File::create(&path)
+                    .with_context(|| format!("failed to create {}", path.display()))?;
+                let io = IO::from_write_stream(file);
+                let mut builder = Muxer::builder();
+                for (params, _) in &stream_info {
+                    builder
+                        .add_stream(params)
+                        .map_err(|err| anyhow!(err.to_string()))?;
+                }
+                for (stream, (_, tb)) in builder.streams_mut().iter_mut().zip(stream_info.iter()) {
+                    stream.set_time_base(*tb);
+                }
+                let format = OutputFormat::find_by_name("mpegts")
+                    .ok_or_else(|| anyhow!("mpegts format not found"))?;
+                let muxer = builder
+                    .interleaved(true)
+                    .build(io, format)
+                    .map_err(|err| anyhow!(err.to_string()))?;
+
+                current_muxer = Some(muxer);
+                current_index = Some(index);
+                current_timing = Some(ChunkTiming {
+                    chunk_index: index,
+                    chunk_start_27mhz: ts.map(|micros| (micros as u64) * 27),
+                    chunk_duration_27mhz: chunk_duration_ms * 27_000,
+                    utc_start_unix: None,
+                    sync_status: "pts".to_string(),
+                });
+
+                if let Some(limit) = max_chunks {
+                    if chunks.len() >= limit {
+                        break;
+                    }
+                }
+            }
+        }
+
+        if let Some(muxer) = current_muxer.as_mut() {
+            let packet = packet.with_time_base(ac_ffmpeg::time::TimeBase::MICROSECONDS);
+            muxer.push(packet).map_err(|err| anyhow!(err.to_string()))?;
+        }
+    }
+
+    if let Some(mut muxer) = current_muxer.take() {
+        let _ = muxer.flush();
+        let _ = muxer.close();
+    }
+    if let (Some(index), Some(timing)) = (current_index.take(), current_timing.take()) {
+        chunks.push(TsChunk {
+            index,
+            path: chunk_path(output_dir, index),
+            timing,
+        });
+    }
+
+    Ok(TsChunkManifest {
+        output_dir: output_dir.to_path_buf(),
+        chunks,
+    })
+}
+
+pub fn hash_ts_chunks(manifest: &TsChunkManifest) -> Result<HashedTsChunkManifest> {
+    let mut ordered = manifest.chunks.clone();
+    ordered.sort_by_key(|chunk| chunk.index);
+
+    let mut hashes = Vec::with_capacity(ordered.len());
+    let mut chunks = Vec::with_capacity(ordered.len());
+    for chunk in ordered {
+        let hash = hash_file_blake3(&chunk.path)?;
+        hashes.push(hash.clone());
+        chunks.push(HashedTsChunk {
+            index: chunk.index,
+            path: chunk.path.clone(),
+            timing: chunk.timing.clone(),
+            hash,
+        });
+    }
+
+    let merkle_root = merkle_root_from_hashes(&hashes)?;
+    Ok(HashedTsChunkManifest {
+        output_dir: manifest.output_dir.clone(),
+        chunks,
+        merkle_root,
+    })
+}
+
+pub fn build_manifest_body_for_chunks(
+    stream_id: StreamId,
+    epoch_id: impl Into<String>,
+    chunk_duration_ms: u64,
+    chunk_start_index: u64,
+    encoder_profile_id: impl Into<String>,
+    created_unix_ms: u64,
+    metadata: Vec<StreamMetadata>,
+    chunk_hashes: &[String],
+) -> Result<ManifestBody> {
+    let merkle_root = merkle_root_from_hashes(chunk_hashes)?;
+    Ok(ManifestBody {
+        stream_id,
+        epoch_id: epoch_id.into(),
+        chunk_duration_ms,
+        total_chunks: chunk_hashes.len() as u64,
+        chunk_start_index,
+        encoder_profile_id: encoder_profile_id.into(),
+        merkle_root,
+        created_unix_ms,
+        metadata,
+        chunk_hashes: chunk_hashes.to_vec(),
+        variants: None,
+    })
+}
+
+pub fn manifest_for_ts_chunks(
+    stream_id: StreamId,
+    epoch_id: impl Into<String>,
+    chunk_duration_ms: u64,
+    chunk_start_index: u64,
+    encoder_profile_id: impl Into<String>,
+    created_unix_ms: u64,
+    metadata: Vec<StreamMetadata>,
+    manifest: &TsChunkManifest,
+) -> Result<(ManifestBody, HashedTsChunkManifest)> {
+    let hashed = hash_ts_chunks(manifest)?;
+    let chunk_hashes = hashed
+        .chunks
+        .iter()
+        .map(|chunk| chunk.hash.clone())
+        .collect::<Vec<_>>();
+    let body = build_manifest_body_for_chunks(
+        stream_id,
+        epoch_id,
+        chunk_duration_ms,
+        chunk_start_index,
+        encoder_profile_id,
+        created_unix_ms,
+        metadata,
+        &chunk_hashes,
+    )?;
+    Ok((body, hashed))
+}
+
+pub fn chunk_stream_ffmpeg_live<T: Read, F: FnMut(TsChunk) -> Result<()>>(
+    stream: T,
+    output_dir: &Path,
+    chunk_duration_ms: u64,
+    max_chunks: Option<usize>,
+    mut on_chunk: F,
+) -> Result<()> {
+    fs::create_dir_all(output_dir)
+        .with_context(|| format!("failed to create {}", output_dir.display()))?;
+
+    let io = IO::from_read_stream(stream);
+    let demuxer = Demuxer::builder()
+        .build(io)
+        .map_err(|err| anyhow!(err.to_string()))?;
+    let demuxer = demuxer
+        .find_stream_info(Some(Duration::from_secs(2)))
+        .map_err(|(_, err)| anyhow!(err.to_string()))?;
+
+    let stream_info = demuxer
+        .streams()
+        .iter()
+        .map(|stream| (stream.codec_parameters(), stream.time_base()))
+        .collect::<Vec<_>>();
+
+    let mut demuxer = demuxer.into_demuxer();
+    let chunk_duration_micros = chunk_duration_ms as i64 * 1000;
+
+    let mut current_index: Option<u64> = None;
+    let mut current_muxer: Option<Muxer<std::fs::File>> = None;
+    let mut current_timing: Option<ChunkTiming> = None;
+    let mut emitted = 0usize;
+
+    loop {
+        let Some(packet) = demuxer.take().map_err(|err| anyhow!(err.to_string()))? else {
+            break;
+        };
+
+        let ts = packet
+            .pts()
+            .as_micros()
+            .or_else(|| packet.dts().as_micros());
+
+        let chunk_index = ts
+            .and_then(|micros| {
+                if micros < 0 {
+                    None
+                } else {
+                    Some((micros / chunk_duration_micros) as u64)
+                }
+            })
+            .or(current_index);
+
+        if let Some(index) = chunk_index {
+            if current_index != Some(index) {
+                if let Some(mut muxer) = current_muxer.take() {
+                    muxer.flush().map_err(|err| anyhow!(err.to_string()))?;
+                    let _ = muxer.close();
+                }
+                if let (Some(prev_index), Some(timing)) =
+                    (current_index.take(), current_timing.take())
+                {
+                    let chunk = TsChunk {
+                        index: prev_index,
+                        path: chunk_path(output_dir, prev_index),
+                        timing,
+                    };
+                    on_chunk(chunk)?;
+                    emitted += 1;
+                    if let Some(limit) = max_chunks {
+                        if emitted >= limit {
+                            return Ok(());
+                        }
+                    }
+                }
+
+                let path = chunk_path(output_dir, index);
+                let file = std::fs::File::create(&path)
+                    .with_context(|| format!("failed to create {}", path.display()))?;
+                let io = IO::from_write_stream(file);
+                let mut builder = Muxer::builder();
+                for (params, _) in &stream_info {
+                    builder
+                        .add_stream(params)
+                        .map_err(|err| anyhow!(err.to_string()))?;
+                }
+                for (stream, (_, tb)) in builder.streams_mut().iter_mut().zip(stream_info.iter()) {
+                    stream.set_time_base(*tb);
+                }
+                let format = OutputFormat::find_by_name("mpegts")
+                    .ok_or_else(|| anyhow!("mpegts format not found"))?;
+                let muxer = builder
+                    .interleaved(true)
+                    .build(io, format)
+                    .map_err(|err| anyhow!(err.to_string()))?;
+
+                current_muxer = Some(muxer);
+                current_index = Some(index);
+                current_timing = Some(ChunkTiming {
+                    chunk_index: index,
+                    chunk_start_27mhz: ts.map(|micros| (micros as u64) * 27),
+                    chunk_duration_27mhz: chunk_duration_ms * 27_000,
+                    utc_start_unix: None,
+                    sync_status: "pts".to_string(),
+                });
+            }
+        }
+
+        if let Some(muxer) = current_muxer.as_mut() {
+            let packet = packet.with_time_base(ac_ffmpeg::time::TimeBase::MICROSECONDS);
+            muxer.push(packet).map_err(|err| anyhow!(err.to_string()))?;
+        }
+    }
+
+    if let Some(mut muxer) = current_muxer.take() {
+        let _ = muxer.flush();
+        let _ = muxer.close();
+    }
+    if let (Some(index), Some(timing)) = (current_index.take(), current_timing.take()) {
+        let chunk = TsChunk {
+            index,
+            path: chunk_path(output_dir, index),
+            timing,
+        };
+        on_chunk(chunk)?;
+    }
+
+    Ok(())
+}
+
+fn segment_format_arg(format: &ChunkFormat) -> &'static str {
+    match format {
+        ChunkFormat::Fmp4 => "mp4",
+        ChunkFormat::MpegTs => "mpegts",
+        ChunkFormat::Matroska => "matroska",
+    }
+}
+
+pub fn ffmpeg_profile_args(profile: &DeterminismProfile) -> Vec<String> {
+    let mut args = Vec::new();
+    if !profile.encoder.is_empty() {
+        args.push("-c:v".to_string());
+        args.push(profile.encoder.clone());
+    }
+    for arg in &profile.encoder_args {
+        args.push(arg.clone());
+    }
+    args
+}
+
+pub fn deterministic_h264_profile() -> DeterminismProfile {
+    DeterminismProfile {
+        name: "deterministic-h264-aac".to_string(),
+        description: "Single-threaded H.264 + AAC with fixed GOP and bitexact flags".to_string(),
+        encoder: "libx264".to_string(),
+        encoder_args: vec![
+            "-c:a".to_string(),
+            "aac".to_string(),
+            "-b:a".to_string(),
+            "128k".to_string(),
+            "-ac".to_string(),
+            "2".to_string(),
+            "-ar".to_string(),
+            "48000".to_string(),
+            "-pix_fmt".to_string(),
+            "yuv420p".to_string(),
+            "-g".to_string(),
+            "60".to_string(),
+            "-keyint_min".to_string(),
+            "60".to_string(),
+            "-sc_threshold".to_string(),
+            "0".to_string(),
+            "-bf".to_string(),
+            "0".to_string(),
+            "-threads".to_string(),
+            "1".to_string(),
+            "-fflags".to_string(),
+            "+bitexact".to_string(),
+            "-flags:v".to_string(),
+            "+bitexact".to_string(),
+            "-flags:a".to_string(),
+            "+bitexact".to_string(),
+        ],
+        chunk_duration_ms: 2000,
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::io::Cursor;
+
+    fn ts_packet_with_pcr(pid: u16, cc: u8, pcr_27mhz: u64) -> [u8; ec_ts::TS_PACKET_SIZE] {
+        // Match ec_ts parser expectations.
+        let base = pcr_27mhz / 300;
+        let ext = pcr_27mhz % 300;
+        let mut pcr = [0u8; 6];
+        pcr[0] = ((base >> 25) & 0xFF) as u8;
+        pcr[1] = ((base >> 17) & 0xFF) as u8;
+        pcr[2] = ((base >> 9) & 0xFF) as u8;
+        pcr[3] = ((base >> 1) & 0xFF) as u8;
+        pcr[4] = (((base & 0x1) << 7) as u8) | 0x7E | (((ext >> 8) & 0x1) as u8);
+        pcr[5] = (ext & 0xFF) as u8;
+
+        let mut data = [0u8; ec_ts::TS_PACKET_SIZE];
+        data[0] = 0x47;
+        data[1] = ((pid >> 8) as u8) & 0x1F;
+        data[2] = (pid & 0xFF) as u8;
+        data[3] = (2 << 4) | (cc & 0x0F); // adaptation only
+        data[4] = 7;
+        data[5] = 0x10;
+        data[6..12].copy_from_slice(&pcr);
+        data
+    }
+
+    #[test]
+    fn segment_format_mapping_is_correct() {
+        assert_eq!(segment_format_arg(&ChunkFormat::Fmp4), "mp4");
+        assert_eq!(segment_format_arg(&ChunkFormat::MpegTs), "mpegts");
+        assert_eq!(segment_format_arg(&ChunkFormat::Matroska), "matroska");
+    }
+
+    #[test]
+    fn deterministic_profile_args_are_single_threaded_and_bitexact() {
+        let profile = deterministic_h264_profile();
+        let args = ffmpeg_profile_args(&profile);
+        assert!(args.iter().any(|a| a == "-threads"));
+        assert!(args.iter().any(|a| a == "1"));
+        assert!(args.iter().any(|a| a == "+bitexact"));
+        assert!(args.iter().any(|a| a == "libx264"));
+    }
+
+    #[test]
+    fn hash_file_blake3_matches_direct_hash() {
+        let dir = std::env::temp_dir().join(format!("ec-chopper-hash-{}", std::process::id()));
+        let _ = fs::create_dir_all(&dir);
+        let path = dir.join("x.bin");
+        fs::write(&path, b"hello").unwrap();
+        let h = hash_file_blake3(&path).unwrap();
+        assert_eq!(h, blake3::hash(b"hello").to_hex().to_string());
+        let _ = fs::remove_file(&path);
+    }
+
+    #[test]
+    fn chunk_ts_stream_emits_expected_chunk_indices() {
+        let chunk_ms = 1000u64;
+        let dir = std::env::temp_dir().join(format!("ec-chopper-chunks-{}", std::process::id()));
+        let _ = fs::remove_dir_all(&dir);
+        fs::create_dir_all(&dir).unwrap();
+
+        let mut bytes = Vec::new();
+        bytes.extend_from_slice(&ts_packet_with_pcr(0x0100, 0, 0));
+        bytes.extend_from_slice(&ts_packet_with_pcr(0x0100, 1, 27_000_000));
+        bytes.extend_from_slice(&ts_packet_with_pcr(0x0100, 2, 54_000_000));
+
+        let manifest = chunk_ts_stream(Cursor::new(bytes), &dir, chunk_ms, None).unwrap();
+        let indices = manifest.chunks.iter().map(|c| c.index).collect::<Vec<_>>();
+        assert_eq!(indices, vec![0, 1, 2]);
+        for chunk in &manifest.chunks {
+            let data = fs::read(&chunk.path).unwrap();
+            assert_eq!(data.len() % ec_ts::TS_PACKET_SIZE, 0);
+        }
+
+        let _ = fs::remove_dir_all(&dir);
+    }
+
+    #[test]
+    fn hashed_manifest_merkle_root_matches_core() {
+        let dir = std::env::temp_dir().join(format!("ec-chopper-merkle-{}", std::process::id()));
+        let _ = fs::remove_dir_all(&dir);
+        fs::create_dir_all(&dir).unwrap();
+
+        let mut bytes = Vec::new();
+        bytes.extend_from_slice(&ts_packet_with_pcr(0x0100, 0, 0));
+        bytes.extend_from_slice(&ts_packet_with_pcr(0x0100, 1, 27_000_000));
+        let manifest = chunk_ts_stream(Cursor::new(bytes), &dir, 1000, None).unwrap();
+        let hashed = hash_ts_chunks(&manifest).unwrap();
+        let hashes = hashed
+            .chunks
+            .iter()
+            .map(|c| c.hash.clone())
+            .collect::<Vec<_>>();
+        let expected = ec_core::merkle_root_from_hashes(&hashes).unwrap();
+        assert_eq!(hashed.merkle_root, expected);
+
+        let _ = fs::remove_dir_all(&dir);
+    }
+}
diff --git a/crates/ec-cli/Cargo.toml b/crates/ec-cli/Cargo.toml
new file mode 100644
index 0000000..669048b
--- /dev/null
+++ b/crates/ec-cli/Cargo.toml
@@ -0,0 +1,17 @@
+[package]
+name = "ec-cli"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+blake3.workspace = true
+clap.workspace = true
+ec-chopper = { path = "../ec-chopper" }
+ec-core = { path = "../ec-core" }
+ec-hdhomerun = { path = "../ec-hdhomerun" }
+ec-linux-iptv = { path = "../ec-linux-iptv" }
+serde_json.workspace = true
+tracing.workspace = true
+tracing-subscriber.workspace = true
diff --git a/crates/ec-cli/src/main.rs b/crates/ec-cli/src/main.rs
new file mode 100644
index 0000000..9622919
--- /dev/null
+++ b/crates/ec-cli/src/main.rs
@@ -0,0 +1,379 @@
+use anyhow::{anyhow, Context, Result};
+use blake3;
+use clap::{Parser, Subcommand};
+use std::fs::{self, File};
+use std::io::{Read, Write};
+use std::path::PathBuf;
+
+#[derive(Parser, Debug)]
+#[command(name = "every.channel")]
+#[command(about = "CLI for the every.channel mesh", long_about = None)]
+struct Cli {
+    #[command(subcommand)]
+    command: Commands,
+}
+
+#[derive(Subcommand, Debug)]
+enum Commands {
+    /// Discover HDHomeRun devices on the network.
+    Discover,
+    /// Fetch channel lineup for a device.
+    Lineup {
+        /// Hostname or IP (e.g. 192.168.1.10 or hdhomerun.local).
+        #[arg(long)]
+        host: Option<String>,
+        /// Device ID (used as <deviceid>.local).
+        #[arg(long)]
+        device_id: Option<String>,
+    },
+    /// Parse lineup JSON from a file on disk.
+    LineupFile { path: String },
+    /// Open an HDHomeRun stream and dump MPEG-TS to a file.
+    StreamDump {
+        /// Hostname or IP (e.g. 192.168.1.10).
+        #[arg(long)]
+        host: Option<String>,
+        /// Device ID (used as <deviceid>.local).
+        #[arg(long)]
+        device_id: Option<String>,
+        /// Guide number (e.g. 8.1).
+        #[arg(long)]
+        channel: Option<String>,
+        /// Guide name (e.g. KQED).
+        #[arg(long)]
+        name: Option<String>,
+        /// Optional duration in seconds (if supported by the tuner URL).
+        #[arg(long)]
+        duration: Option<u32>,
+        /// Output path for the transport stream.
+        #[arg(long, default_value = "stream.ts")]
+        output: PathBuf,
+    },
+    /// Chunk an input stream using ffmpeg.
+    Chunk {
+        /// Input URL or file path.
+        input: String,
+        /// Output directory for segments.
+        output_dir: PathBuf,
+    },
+    /// Probe a media file using ac-ffmpeg.
+    Probe {
+        /// Input file path.
+        input: String,
+    },
+    /// Analyze TS timing and chunk boundaries.
+    TsSync {
+        /// Input TS file.
+        input: String,
+        /// Chunk duration in ms.
+        #[arg(long, default_value_t = 2000)]
+        chunk_ms: u64,
+        /// Maximum number of events to print.
+        #[arg(long, default_value_t = 50)]
+        max_events: usize,
+    },
+    /// Re-encode the same input multiple times and compare segment hashes.
+    DeterminismTest {
+        /// Input file path (TS or other supported by ffmpeg).
+        input: String,
+        /// Output directory root (runs will be placed under run-*/).
+        output_dir: PathBuf,
+        /// Number of runs to compare.
+        #[arg(long, default_value_t = 2)]
+        runs: usize,
+    },
+    /// Open a Linux DVB DVR device and dump MPEG-TS to a file.
+    LinuxDvbDump {
+        /// DVB adapter index.
+        #[arg(long, default_value_t = 0)]
+        adapter: u32,
+        /// DVR device index.
+        #[arg(long, default_value_t = 0)]
+        dvr: u32,
+        /// Optional tune command (repeat for each arg).
+        #[arg(long, allow_hyphen_values = true)]
+        tune_cmd: Vec<String>,
+        /// Optional tune wait (ms).
+        #[arg(long)]
+        tune_wait_ms: Option<u64>,
+        /// Output path for the transport stream.
+        #[arg(long, default_value = "linux-dvb.ts")]
+        output: PathBuf,
+    },
+}
+
+fn main() -> Result<()> {
+    tracing_subscriber::fmt().init();
+    let cli = Cli::parse();
+
+    match cli.command {
+        Commands::Discover => {
+            let devices = ec_hdhomerun::discover()?;
+            println!("{}", serde_json::to_string_pretty(&devices)?);
+        }
+        Commands::Lineup { host, device_id } => {
+            let device = resolve_device(host, device_id)?;
+            let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+            println!("{}", serde_json::to_string_pretty(&lineup)?);
+        }
+        Commands::LineupFile { path } => {
+            let bytes = fs::read(&path)?;
+            let lineup = ec_hdhomerun::lineup_from_json_bytes(&bytes, None)?;
+            println!("{}", serde_json::to_string_pretty(&lineup)?);
+        }
+        Commands::StreamDump {
+            host,
+            device_id,
+            channel,
+            name,
+            duration,
+            output,
+        } => {
+            let device = resolve_device(host, device_id)?;
+            let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+            let entry = if let Some(channel) = channel {
+                ec_hdhomerun::find_lineup_entry_by_number(&lineup, &channel)
+                    .or_else(|| ec_hdhomerun::find_lineup_entry_by_name(&lineup, &channel))
+                    .ok_or_else(|| anyhow!("channel not found: {channel}"))?
+            } else if let Some(name) = name {
+                ec_hdhomerun::find_lineup_entry_by_name(&lineup, &name)
+                    .ok_or_else(|| anyhow!("channel not found: {name}"))?
+            } else {
+                return Err(anyhow!("--channel or --name required"));
+            };
+
+            let mut stream = ec_hdhomerun::open_stream_entry(entry, duration)?;
+            let mut file = File::create(&output)
+                .with_context(|| format!("failed to create {}", output.display()))?;
+
+            let mut buf = [0u8; 8192];
+            loop {
+                let read = stream.read(&mut buf)?;
+                if read == 0 {
+                    break;
+                }
+                file.write_all(&buf[..read])?;
+            }
+        }
+        Commands::Chunk { input, output_dir } => {
+            let profile = ec_chopper::deterministic_h264_profile();
+            let config = ec_chopper::ChunkerConfig {
+                output_dir,
+                segment_duration_ms: profile.chunk_duration_ms,
+                segment_template: ec_chopper::ChunkerConfig::default_segment_template(),
+                format: ec_chopper::ChunkFormat::Fmp4,
+                profile,
+            };
+
+            let input = if input.starts_with("http://") || input.starts_with("https://") {
+                ec_chopper::ChunkerInput::Url(input)
+            } else {
+                ec_chopper::ChunkerInput::File(PathBuf::from(input))
+            };
+
+            let segmenter = ec_chopper::FfmpegCliSegmenter::default();
+            let mut process = segmenter.spawn(input, &config)?;
+            let status = process.child.wait()?;
+            if !status.success() {
+                return Err(anyhow!("ffmpeg exited with status {status}"));
+            }
+
+            let manifest = ec_chopper::collect_segments(&process.output_dir)?;
+            println!("{}", serde_json::to_string_pretty(&manifest)?);
+        }
+        Commands::Probe { input } => {
+            let file = File::open(&input).with_context(|| format!("failed to open {}", input))?;
+            let probes = ec_chopper::probe_read_stream(file)?;
+            println!("{}", serde_json::to_string_pretty(&probes)?);
+        }
+        Commands::TsSync {
+            input,
+            chunk_ms,
+            max_events,
+        } => {
+            let file = File::open(&input).with_context(|| format!("failed to open {}", input))?;
+            let events = ec_chopper::analyze_ts_time(file, chunk_ms, max_events)?;
+            println!("{}", serde_json::to_string_pretty(&events)?);
+        }
+        Commands::DeterminismTest {
+            input,
+            output_dir,
+            runs,
+        } => {
+            if runs < 1 {
+                return Err(anyhow!("runs must be >= 1"));
+            }
+
+            let profile = ec_chopper::deterministic_h264_profile();
+            let format = ec_chopper::ChunkFormat::Fmp4;
+            let template = ec_chopper::ChunkerConfig::default_segment_template();
+
+            let mut baseline: Option<Vec<String>> = None;
+            for run in 0..runs {
+                let run_dir = output_dir.join(format!("run-{}", run + 1));
+                let _ = fs::remove_dir_all(&run_dir);
+
+                let config = ec_chopper::ChunkerConfig {
+                    output_dir: run_dir.clone(),
+                    segment_duration_ms: profile.chunk_duration_ms,
+                    segment_template: template.clone(),
+                    format: format.clone(),
+                    profile: profile.clone(),
+                };
+
+                let input_spec = if input.starts_with("http://") || input.starts_with("https://") {
+                    ec_chopper::ChunkerInput::Url(input.clone())
+                } else {
+                    ec_chopper::ChunkerInput::File(PathBuf::from(&input))
+                };
+
+                let segmenter = ec_chopper::FfmpegCliSegmenter::default();
+                let mut process = segmenter.spawn(input_spec, &config)?;
+                let status = process.child.wait()?;
+                if !status.success() {
+                    return Err(anyhow!("ffmpeg exited with status {status}"));
+                }
+
+                let hashes = hash_segments(&process.output_dir)?;
+                match baseline.as_ref() {
+                    None => {
+                        baseline = Some(hashes);
+                        println!(
+                            "run {}: baseline ({}) segments",
+                            run + 1,
+                            baseline.as_ref().unwrap().len()
+                        );
+                    }
+                    Some(base) => {
+                        let mismatches = compare_hashes(base, &hashes);
+                        if mismatches > 0 {
+                            return Err(anyhow!(
+                                "determinism mismatch on run {} ({} mismatches)",
+                                run + 1,
+                                mismatches
+                            ));
+                        }
+                        println!("run {}: matched baseline", run + 1);
+                    }
+                }
+            }
+        }
+        Commands::LinuxDvbDump {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+            output,
+        } => {
+            let config = ec_linux_iptv::LinuxDvbConfig {
+                adapter,
+                frontend: 0,
+                dvr,
+                tune_command: if tune_cmd.is_empty() {
+                    None
+                } else {
+                    Some(tune_cmd)
+                },
+                tune_timeout_ms: tune_wait_ms,
+            };
+
+            let mut stream = ec_linux_iptv::open_stream(&config)?;
+            let mut file = File::create(&output)
+                .with_context(|| format!("failed to create {}", output.display()))?;
+
+            let mut buf = [0u8; 8192];
+            loop {
+                let read = stream.read(&mut buf)?;
+                if read == 0 {
+                    break;
+                }
+                file.write_all(&buf[..read])?;
+            }
+        }
+    }
+
+    Ok(())
+}
+
+fn hash_segments(output_dir: &PathBuf) -> Result<Vec<String>> {
+    let manifest = ec_chopper::collect_segments(output_dir)?;
+    let mut hashes = Vec::new();
+    for segment in manifest.segments {
+        let bytes = fs::read(&segment.path)
+            .with_context(|| format!("failed to read {}", segment.path.display()))?;
+        let hash = blake3::hash(&bytes);
+        hashes.push(hash.to_hex().to_string());
+    }
+    Ok(hashes)
+}
+
+fn compare_hashes(base: &[String], candidate: &[String]) -> usize {
+    let mut mismatches = 0usize;
+    let max_len = base.len().max(candidate.len());
+    for idx in 0..max_len {
+        let base_hash = base.get(idx);
+        let candidate_hash = candidate.get(idx);
+        if base_hash != candidate_hash {
+            mismatches += 1;
+        }
+    }
+    mismatches
+}
+
+fn resolve_device(
+    host: Option<String>,
+    device_id: Option<String>,
+) -> Result<ec_hdhomerun::HdhomerunDevice> {
+    if let Some(host) = host {
+        ec_hdhomerun::discover_from_host(&host)
+    } else if let Some(device_id) = device_id {
+        let host = format!("{device_id}.local");
+        ec_hdhomerun::discover_from_host(&host)
+    } else {
+        let mut devices = ec_hdhomerun::discover()?;
+        devices
+            .pop()
+            .ok_or_else(|| anyhow!("no HDHomeRun devices found"))
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use clap::Parser;
+
+    #[test]
+    fn clap_parses_common_subcommands() {
+        let cli = Cli::try_parse_from(["every.channel", "discover"]).unwrap();
+        matches!(cli.command, Commands::Discover);
+
+        let cli = Cli::try_parse_from([
+            "every.channel",
+            "ts-sync",
+            "input.ts",
+            "--chunk-ms",
+            "1000",
+            "--max-events",
+            "5",
+        ])
+        .unwrap();
+        matches!(cli.command, Commands::TsSync { .. });
+
+        let cli = Cli::try_parse_from([
+            "every.channel",
+            "linux-dvb-dump",
+            "--adapter",
+            "0",
+            "--dvr",
+            "0",
+            "--tune-cmd",
+            "dvbv5-zap",
+            "--tune-cmd",
+            "-r",
+            "--tune-cmd",
+            "KQED",
+        ])
+        .unwrap();
+        matches!(cli.command, Commands::LinuxDvbDump { .. });
+    }
+}
diff --git a/crates/ec-core/Cargo.toml b/crates/ec-core/Cargo.toml
new file mode 100644
index 0000000..df0eef2
--- /dev/null
+++ b/crates/ec-core/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "ec-core"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+serde.workspace = true
+blake3.workspace = true
+serde_json.workspace = true
diff --git a/crates/ec-core/src/lib.rs b/crates/ec-core/src/lib.rs
new file mode 100644
index 0000000..0b7c34b
--- /dev/null
+++ b/crates/ec-core/src/lib.rs
@@ -0,0 +1,463 @@
+//! Core types shared across every.channel.
+
+use serde::{Deserialize, Serialize};
+use std::fmt;
+
+#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
+pub struct ChannelId(pub String);
+
+#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
+pub struct DeviceId(pub String);
+
+#[derive(Debug, Clone, PartialEq, Eq, Hash, Serialize, Deserialize)]
+pub struct StreamId(pub String);
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamDescriptor {
+    pub id: StreamId,
+    pub title: String,
+    pub number: Option<String>,
+    pub source: String,
+    pub metadata: Vec<StreamMetadata>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamMetadata {
+    pub key: String,
+    pub value: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct BroadcastId {
+    pub standard: String,
+    pub transport_stream_id: Option<u16>,
+    pub program_number: Option<u16>,
+    pub callsign: Option<String>,
+    pub region: Option<String>,
+    pub frequency: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct SourceId {
+    pub kind: String,
+    pub device_id: Option<String>,
+    pub channel: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamKey {
+    pub version: u16,
+    pub broadcast: Option<BroadcastId>,
+    pub source: Option<SourceId>,
+    pub profile: Option<String>,
+    pub variant: Option<String>,
+}
+
+impl StreamKey {
+    pub fn to_stream_id(&self) -> StreamId {
+        let mut parts = vec![
+            "ec".to_string(),
+            "stream".to_string(),
+            format!("v{}", self.version),
+        ];
+
+        if let Some(broadcast) = &self.broadcast {
+            parts.push("broadcast".to_string());
+            parts.push(sanitize(&broadcast.standard));
+            if let Some(tsid) = broadcast.transport_stream_id {
+                parts.push(format!("tsid-{tsid}"));
+            }
+            if let Some(program) = broadcast.program_number {
+                parts.push(format!("program-{program}"));
+            }
+            if let Some(callsign) = &broadcast.callsign {
+                parts.push(format!("callsign-{}", sanitize(callsign)));
+            }
+            if let Some(region) = &broadcast.region {
+                parts.push(format!("region-{}", sanitize(region)));
+            }
+            if let Some(freq) = &broadcast.frequency {
+                parts.push(format!("freq-{}", sanitize(freq)));
+            }
+        } else if let Some(source) = &self.source {
+            parts.push("source".to_string());
+            parts.push(sanitize(&source.kind));
+            if let Some(device) = &source.device_id {
+                parts.push(format!("device-{}", sanitize(device)));
+            }
+            if let Some(channel) = &source.channel {
+                parts.push(format!("channel-{}", sanitize(channel)));
+            }
+        } else {
+            parts.push("unknown".to_string());
+        }
+
+        if let Some(profile) = &self.profile {
+            parts.push(format!("profile-{}", sanitize(profile)));
+        }
+        if let Some(variant) = &self.variant {
+            parts.push(format!("variant-{}", sanitize(variant)));
+        }
+
+        StreamId(parts.join("/"))
+    }
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Channel {
+    pub id: ChannelId,
+    pub name: String,
+    pub number: Option<String>,
+    pub program_id: Option<u16>,
+    pub metadata: Vec<ChannelMetadata>,
+}
+
+fn sanitize(value: &str) -> String {
+    value
+        .chars()
+        .map(|c| match c {
+            'a'..='z' | '0'..='9' | '-' | '_' => c,
+            'A'..='Z' => c.to_ascii_lowercase(),
+            _ => '_',
+        })
+        .collect()
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub enum ChannelMetadata {
+    Callsign(String),
+    Network(String),
+    Region(String),
+    Frequency(String),
+    Extra(String, String),
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct PacketDigest {
+    pub algorithm: String,
+    pub hex: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct DeterminismProfile {
+    pub name: String,
+    pub description: String,
+    pub encoder: String,
+    pub encoder_args: Vec<String>,
+    pub chunk_duration_ms: u64,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct NodeDescriptor {
+    pub node_id: String,
+    pub human_name: String,
+    pub location_hint: Option<String>,
+    pub capabilities: Vec<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamEncryptionInfo {
+    pub alg: String,
+    pub key_id: String,
+    pub nonce_scheme: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct MoqStreamDescriptor {
+    pub endpoint: String,
+    pub broadcast_name: String,
+    pub track_name: String,
+    pub encryption: Option<StreamEncryptionInfo>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamCatalogEntry {
+    pub stream: StreamDescriptor,
+    pub moq: Option<MoqStreamDescriptor>,
+    pub manifest: Option<ManifestSummary>,
+    pub updated_unix_ms: u64,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct StreamCatalog {
+    pub entries: Vec<StreamCatalogEntry>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ManifestSummary {
+    pub manifest_id: String,
+    pub merkle_root: String,
+    pub epoch_id: String,
+    pub total_chunks: u64,
+    pub chunk_start_index: u64,
+    pub encoder_profile_id: String,
+    pub signed_by: Vec<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ChunkId {
+    pub stream_id: StreamId,
+    pub epoch_id: String,
+    pub chunk_index: u64,
+    pub chunk_hash: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ManifestVariant {
+    pub variant_id: String,
+    pub stream_id: StreamId,
+    pub chunk_start_index: u64,
+    pub total_chunks: u64,
+    pub merkle_root: String,
+    pub chunk_hashes: Vec<String>,
+    #[serde(default)]
+    pub metadata: Vec<StreamMetadata>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ManifestBody {
+    pub stream_id: StreamId,
+    pub epoch_id: String,
+    pub chunk_duration_ms: u64,
+    pub total_chunks: u64,
+    pub chunk_start_index: u64,
+    pub encoder_profile_id: String,
+    pub merkle_root: String,
+    pub created_unix_ms: u64,
+    pub metadata: Vec<StreamMetadata>,
+    pub chunk_hashes: Vec<String>,
+    #[serde(default)]
+    pub variants: Option<Vec<ManifestVariant>>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ManifestSignature {
+    pub signer_id: String,
+    pub alg: String,
+    pub signature: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Manifest {
+    pub body: ManifestBody,
+    pub manifest_id: String,
+    pub signatures: Vec<ManifestSignature>,
+}
+
+impl Manifest {
+    pub fn summary(&self) -> ManifestSummary {
+        ManifestSummary {
+            manifest_id: self.manifest_id.clone(),
+            merkle_root: self.body.merkle_root.clone(),
+            epoch_id: self.body.epoch_id.clone(),
+            total_chunks: self.body.total_chunks,
+            chunk_start_index: self.body.chunk_start_index,
+            encoder_profile_id: self.body.encoder_profile_id.clone(),
+            signed_by: self
+                .signatures
+                .iter()
+                .map(|sig| sig.signer_id.clone())
+                .collect(),
+        }
+    }
+}
+
+#[derive(Debug, Clone)]
+pub enum ManifestError {
+    Empty,
+    InvalidHash(String),
+}
+
+impl fmt::Display for ManifestError {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        match self {
+            ManifestError::Empty => write!(f, "no chunk hashes supplied"),
+            ManifestError::InvalidHash(value) => write!(f, "invalid chunk hash: {value}"),
+        }
+    }
+}
+
+impl std::error::Error for ManifestError {}
+
+impl ManifestBody {
+    pub fn manifest_id(&self) -> Result<String, serde_json::Error> {
+        let bytes = serde_json::to_vec(self)?;
+        Ok(blake3::hash(&bytes).to_hex().to_string())
+    }
+}
+
+pub fn merkle_root_from_hashes(hashes: &[String]) -> Result<String, ManifestError> {
+    if hashes.is_empty() {
+        return Err(ManifestError::Empty);
+    }
+    let mut nodes: Vec<blake3::Hash> = Vec::with_capacity(hashes.len());
+    for hash in hashes {
+        let parsed = blake3::Hash::from_hex(hash.as_bytes())
+            .map_err(|_| ManifestError::InvalidHash(hash.clone()))?;
+        nodes.push(parsed);
+    }
+    while nodes.len() > 1 {
+        if nodes.len() % 2 == 1 {
+            if let Some(last) = nodes.last().cloned() {
+                nodes.push(last);
+            }
+        }
+        let mut parents = Vec::with_capacity(nodes.len() / 2);
+        for pair in nodes.chunks(2) {
+            let left = pair[0].as_bytes();
+            let right = pair[1].as_bytes();
+            let mut merged = [0u8; 64];
+            merged[..32].copy_from_slice(left);
+            merged[32..].copy_from_slice(right);
+            parents.push(blake3::hash(&merged));
+        }
+        nodes = parents;
+    }
+    Ok(nodes[0].to_hex().to_string())
+}
+
+pub fn merkle_proof_for_index(
+    hashes: &[String],
+    index: usize,
+) -> Result<Vec<String>, ManifestError> {
+    if hashes.is_empty() {
+        return Err(ManifestError::Empty);
+    }
+    if index >= hashes.len() {
+        return Err(ManifestError::InvalidHash(format!(
+            "index {index} out of bounds"
+        )));
+    }
+
+    let mut nodes: Vec<blake3::Hash> = Vec::with_capacity(hashes.len());
+    for hash in hashes {
+        let parsed = blake3::Hash::from_hex(hash.as_bytes())
+            .map_err(|_| ManifestError::InvalidHash(hash.clone()))?;
+        nodes.push(parsed);
+    }
+
+    let mut proof = Vec::new();
+    let mut pos = index;
+    while nodes.len() > 1 {
+        if nodes.len() % 2 == 1 {
+            if let Some(last) = nodes.last().cloned() {
+                nodes.push(last);
+            }
+        }
+
+        let sibling_index = if pos % 2 == 0 { pos + 1 } else { pos - 1 };
+        let sibling = nodes
+            .get(sibling_index)
+            .ok_or_else(|| ManifestError::InvalidHash("missing sibling".to_string()))?;
+        proof.push(sibling.to_hex().to_string());
+
+        let mut parents = Vec::with_capacity(nodes.len() / 2);
+        for pair in nodes.chunks(2) {
+            let left = pair[0].as_bytes();
+            let right = pair[1].as_bytes();
+            let mut merged = [0u8; 64];
+            merged[..32].copy_from_slice(left);
+            merged[32..].copy_from_slice(right);
+            parents.push(blake3::hash(&merged));
+        }
+        nodes = parents;
+        pos /= 2;
+    }
+
+    Ok(proof)
+}
+
+pub fn verify_merkle_proof(
+    leaf_hash: &str,
+    mut index: usize,
+    branch: &[String],
+    expected_root: &str,
+) -> bool {
+    let Ok(mut acc) = blake3::Hash::from_hex(leaf_hash.as_bytes()) else {
+        return false;
+    };
+    for sibling_hex in branch {
+        let Ok(sibling) = blake3::Hash::from_hex(sibling_hex.as_bytes()) else {
+            return false;
+        };
+        let (left, right) = if index % 2 == 0 {
+            (acc, sibling)
+        } else {
+            (sibling, acc)
+        };
+        let mut merged = [0u8; 64];
+        merged[..32].copy_from_slice(left.as_bytes());
+        merged[32..].copy_from_slice(right.as_bytes());
+        acc = blake3::hash(&merged);
+        index /= 2;
+    }
+    acc.to_hex().to_string() == expected_root
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn manifest_id_changes_with_body() {
+        let body = ManifestBody {
+            stream_id: StreamId("s".to_string()),
+            epoch_id: "e".to_string(),
+            chunk_duration_ms: 2000,
+            total_chunks: 1,
+            chunk_start_index: 0,
+            encoder_profile_id: "p".to_string(),
+            merkle_root: "00".repeat(32),
+            created_unix_ms: 1,
+            metadata: Vec::new(),
+            chunk_hashes: vec!["11".repeat(32)],
+            variants: None,
+        };
+        let id1 = body.manifest_id().unwrap();
+        let mut body2 = body.clone();
+        body2.created_unix_ms = 2;
+        let id2 = body2.manifest_id().unwrap();
+        assert_ne!(id1, id2);
+    }
+
+    #[test]
+    fn merkle_root_single_is_leaf() {
+        let leaf = blake3::hash(b"leaf").to_hex().to_string();
+        let root = merkle_root_from_hashes(&[leaf.clone()]).unwrap();
+        assert_eq!(root, leaf);
+    }
+
+    #[test]
+    fn merkle_root_rejects_invalid_hash() {
+        let err = merkle_root_from_hashes(&["not-hex".to_string()]).unwrap_err();
+        assert!(matches!(err, ManifestError::InvalidHash(_)));
+    }
+
+    #[test]
+    fn merkle_proof_roundtrip_small_sets() {
+        for size in 1..=9usize {
+            let leaves = (0..size)
+                .map(|i| blake3::hash(&[i as u8]).to_hex().to_string())
+                .collect::<Vec<_>>();
+            let root = merkle_root_from_hashes(&leaves).unwrap();
+            for idx in 0..size {
+                let proof = merkle_proof_for_index(&leaves, idx).unwrap();
+                assert!(
+                    verify_merkle_proof(&leaves[idx], idx, &proof, &root),
+                    "size {size} idx {idx} failed"
+                );
+            }
+        }
+    }
+
+    #[test]
+    fn merkle_proof_detects_tampering() {
+        let leaves = (0..4usize)
+            .map(|i| blake3::hash(&[i as u8]).to_hex().to_string())
+            .collect::<Vec<_>>();
+        let root = merkle_root_from_hashes(&leaves).unwrap();
+        let mut proof = merkle_proof_for_index(&leaves, 2).unwrap();
+        proof[0] = blake3::hash(b"evil").to_hex().to_string();
+        assert!(!verify_merkle_proof(&leaves[2], 2, &proof, &root));
+    }
+}
diff --git a/crates/ec-crypto/Cargo.toml b/crates/ec-crypto/Cargo.toml
new file mode 100644
index 0000000..7eff59a
--- /dev/null
+++ b/crates/ec-crypto/Cargo.toml
@@ -0,0 +1,12 @@
+[package]
+name = "ec-crypto"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+blake3 = "1"
+chacha20poly1305 = "0.10"
+ed25519-dalek = { version = "2", features = ["pkcs8"] }
+hex = "0.4"
+ec-core = { path = "../ec-core" }
diff --git a/crates/ec-crypto/src/lib.rs b/crates/ec-crypto/src/lib.rs
new file mode 100644
index 0000000..f29cbeb
--- /dev/null
+++ b/crates/ec-crypto/src/lib.rs
@@ -0,0 +1,227 @@
+//! Cryptographic helpers for every.channel.
+
+use chacha20poly1305::{aead::Aead, KeyInit, XChaCha20Poly1305, XNonce};
+use ec_core::ManifestSignature;
+use ed25519_dalek::{Signature, Signer, SigningKey, Verifier, VerifyingKey};
+use std::env;
+use std::fs;
+
+pub const MANIFEST_SIG_ALG: &str = "ed25519";
+
+pub const ENCRYPTION_ALG: &str = "xchacha20poly1305";
+
+/// Derive a stream encryption key from a stream id and optional network secret.
+///
+/// This is deterministic: identical stream ids produce identical keys.
+pub fn derive_stream_key(stream_id: &str, network_secret: Option<&[u8]>) -> [u8; 32] {
+    let mut input = Vec::new();
+    if let Some(secret) = network_secret {
+        input.extend_from_slice(secret);
+        input.push(0);
+    }
+    input.extend_from_slice(stream_id.as_bytes());
+
+    blake3::derive_key("every.channel stream key v1", &input)
+}
+
+/// Derive a deterministic nonce for a stream chunk.
+pub fn derive_stream_nonce(stream_id: &str, chunk_index: u64) -> [u8; 24] {
+    let mut hasher = blake3::Hasher::new();
+    hasher.update(b"every.channel stream nonce v1");
+    hasher.update(stream_id.as_bytes());
+    hasher.update(&chunk_index.to_be_bytes());
+    let hash = hasher.finalize();
+    let mut nonce = [0u8; 24];
+    nonce.copy_from_slice(&hash.as_bytes()[..24]);
+    nonce
+}
+
+#[derive(Debug, Clone)]
+pub struct EncryptedPayload {
+    pub ciphertext: Vec<u8>,
+    pub nonce: [u8; 24],
+    pub alg: &'static str,
+}
+
+pub fn encrypt_stream_data(
+    stream_id: &str,
+    chunk_index: u64,
+    plaintext: &[u8],
+    network_secret: Option<&[u8]>,
+) -> EncryptedPayload {
+    let key_bytes = derive_stream_key(stream_id, network_secret);
+    let cipher = XChaCha20Poly1305::new_from_slice(&key_bytes).expect("key size");
+    let nonce_bytes = derive_stream_nonce(stream_id, chunk_index);
+    let nonce = XNonce::from_slice(&nonce_bytes);
+    let ciphertext = cipher
+        .encrypt(nonce, plaintext)
+        .expect("encryption failure");
+
+    EncryptedPayload {
+        ciphertext,
+        nonce: nonce_bytes,
+        alg: ENCRYPTION_ALG,
+    }
+}
+
+pub fn decrypt_stream_data(
+    stream_id: &str,
+    chunk_index: u64,
+    ciphertext: &[u8],
+    network_secret: Option<&[u8]>,
+) -> Option<Vec<u8>> {
+    let key_bytes = derive_stream_key(stream_id, network_secret);
+    let cipher = XChaCha20Poly1305::new_from_slice(&key_bytes).expect("key size");
+    let nonce_bytes = derive_stream_nonce(stream_id, chunk_index);
+    let nonce = XNonce::from_slice(&nonce_bytes);
+    cipher.decrypt(nonce, ciphertext).ok()
+}
+
+#[derive(Debug, Clone)]
+pub struct ManifestKeypair {
+    pub signing_key: SigningKey,
+    pub verifying_key: VerifyingKey,
+}
+
+pub fn load_manifest_keypair_from_env() -> Result<Option<ManifestKeypair>, String> {
+    let value = match env::var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY") {
+        Ok(value) => value,
+        Err(env::VarError::NotPresent) => return Ok(None),
+        Err(err) => return Err(err.to_string()),
+    };
+    let trimmed = value.trim();
+    let key_bytes = if std::path::Path::new(trimmed).exists() {
+        let text = fs::read_to_string(trimmed).map_err(|err| err.to_string())?;
+        hex::decode(text.trim()).map_err(|err| err.to_string())?
+    } else {
+        hex::decode(trimmed).map_err(|err| err.to_string())?
+    };
+    let bytes = if key_bytes.len() == 32 {
+        key_bytes
+    } else if key_bytes.len() == 64 {
+        key_bytes[..32].to_vec()
+    } else {
+        return Err("manifest signing key must be 32 or 64 hex bytes".to_string());
+    };
+    let mut secret = [0u8; 32];
+    secret.copy_from_slice(&bytes[..32]);
+    let signing_key = SigningKey::from_bytes(&secret);
+    let verifying_key = signing_key.verifying_key();
+    Ok(Some(ManifestKeypair {
+        signing_key,
+        verifying_key,
+    }))
+}
+
+pub fn signer_id_from_key(key: &VerifyingKey) -> String {
+    format!("ed25519:{}", hex::encode(key.to_bytes()))
+}
+
+pub fn sign_manifest_id(manifest_id: &str, keypair: &ManifestKeypair) -> ManifestSignature {
+    let signature: Signature = keypair.signing_key.sign(manifest_id.as_bytes());
+    ManifestSignature {
+        signer_id: signer_id_from_key(&keypair.verifying_key),
+        alg: MANIFEST_SIG_ALG.to_string(),
+        signature: hex::encode(signature.to_bytes()),
+    }
+}
+
+pub fn verify_manifest_signature(manifest_id: &str, sig: &ManifestSignature) -> bool {
+    if sig.alg != MANIFEST_SIG_ALG {
+        return false;
+    }
+    let signer_id = sig
+        .signer_id
+        .strip_prefix("ed25519:")
+        .unwrap_or(&sig.signer_id);
+    let Ok(pk_bytes) = hex::decode(signer_id) else {
+        return false;
+    };
+    if pk_bytes.len() != 32 {
+        return false;
+    }
+    let mut pk = [0u8; 32];
+    pk.copy_from_slice(&pk_bytes);
+    let Ok(verifying_key) = VerifyingKey::from_bytes(&pk) else {
+        return false;
+    };
+    let Ok(sig_bytes) = hex::decode(&sig.signature) else {
+        return false;
+    };
+    let Ok(signature) = Signature::from_slice(&sig_bytes) else {
+        return false;
+    };
+    verifying_key
+        .verify(manifest_id.as_bytes(), &signature)
+        .is_ok()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn stream_key_is_deterministic_and_secret_sensitive() {
+        let k1 = derive_stream_key("s1", None);
+        let k2 = derive_stream_key("s1", None);
+        assert_eq!(k1, k2);
+        let k3 = derive_stream_key("s2", None);
+        assert_ne!(k1, k3);
+
+        let secret = [7u8; 32];
+        let ks1 = derive_stream_key("s1", Some(&secret));
+        assert_ne!(k1, ks1);
+        let ks2 = derive_stream_key("s1", Some(&secret));
+        assert_eq!(ks1, ks2);
+    }
+
+    #[test]
+    fn nonce_changes_per_chunk_index() {
+        let n1 = derive_stream_nonce("s", 1);
+        let n2 = derive_stream_nonce("s", 2);
+        assert_ne!(n1, n2);
+    }
+
+    #[test]
+    fn encrypt_decrypt_roundtrip() {
+        let plaintext = b"hello world";
+        let enc = encrypt_stream_data("s", 42, plaintext, None);
+        assert_ne!(enc.ciphertext, plaintext);
+        let out = decrypt_stream_data("s", 42, &enc.ciphertext, None).unwrap();
+        assert_eq!(out, plaintext);
+    }
+
+    #[test]
+    fn decrypt_fails_with_wrong_index() {
+        let plaintext = b"hello world";
+        let enc = encrypt_stream_data("s", 42, plaintext, None);
+        assert!(decrypt_stream_data("s", 43, &enc.ciphertext, None).is_none());
+    }
+
+    #[test]
+    fn manifest_sign_verify_roundtrip() {
+        let secret = [1u8; 32];
+        let signing_key = SigningKey::from_bytes(&secret);
+        let verifying_key = signing_key.verifying_key();
+        let keypair = ManifestKeypair {
+            signing_key,
+            verifying_key,
+        };
+        let sig = sign_manifest_id("m", &keypair);
+        assert!(verify_manifest_signature("m", &sig));
+        assert!(!verify_manifest_signature("evil", &sig));
+    }
+
+    #[test]
+    fn load_keypair_from_env_hex() {
+        let prev = env::var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY").ok();
+        env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", "00".repeat(32));
+        let loaded = load_manifest_keypair_from_env().unwrap().unwrap();
+        let id = signer_id_from_key(&loaded.verifying_key);
+        assert!(id.starts_with("ed25519:"));
+        match prev {
+            Some(value) => env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", value),
+            None => env::remove_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY"),
+        }
+    }
+}
diff --git a/crates/ec-direct/Cargo.toml b/crates/ec-direct/Cargo.toml
new file mode 100644
index 0000000..53a0b50
--- /dev/null
+++ b/crates/ec-direct/Cargo.toml
@@ -0,0 +1,16 @@
+[package]
+name = "ec-direct"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+base64 = "0.22"
+just-webrtc = { version = "0.2", default-features = true }
+serde.workspace = true
+serde_json.workspace = true
+
+[dev-dependencies]
+bytes = "1"
+tokio = { version = "1", features = ["rt-multi-thread", "macros", "time"] }
diff --git a/crates/ec-direct/src/lib.rs b/crates/ec-direct/src/lib.rs
new file mode 100644
index 0000000..476047a
--- /dev/null
+++ b/crates/ec-direct/src/lib.rs
@@ -0,0 +1,94 @@
+use anyhow::{anyhow, Context, Result};
+use base64::engine::general_purpose::URL_SAFE_NO_PAD;
+use base64::Engine;
+use just_webrtc::types::{ICECandidate, SessionDescription};
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
+pub struct DirectCodeV1 {
+    pub v: u8,
+    pub desc: SessionDescription,
+    pub candidates: Vec<ICECandidate>,
+    #[serde(default)]
+    pub label: Option<String>,
+}
+
+const PREFIX: &str = "every.channel://";
+
+pub fn encode_code(code: &DirectCodeV1) -> Result<String> {
+    let json = serde_json::to_vec(code)?;
+    Ok(URL_SAFE_NO_PAD.encode(json))
+}
+
+pub fn decode_code(code: &str) -> Result<DirectCodeV1> {
+    let bytes = URL_SAFE_NO_PAD
+        .decode(code.trim())
+        .context("invalid base64url code")?;
+    let parsed: DirectCodeV1 = serde_json::from_slice(&bytes).context("invalid code json")?;
+    if parsed.v != 1 {
+        return Err(anyhow!("unsupported direct code version {}", parsed.v));
+    }
+    Ok(parsed)
+}
+
+pub fn build_direct_link(code_b64: &str) -> String {
+    format!("every.channel://direct?c={code_b64}")
+}
+
+pub fn encode_direct_link(code: &DirectCodeV1) -> Result<String> {
+    let b64 = encode_code(code)?;
+    Ok(build_direct_link(&b64))
+}
+
+pub fn decode_direct_link(link_or_code: &str) -> Result<DirectCodeV1> {
+    let s = link_or_code.trim();
+    if !s.starts_with(PREFIX) {
+        return decode_code(s);
+    }
+    let rest = &s[PREFIX.len()..];
+    let (path, query) = rest.split_once('?').ok_or_else(|| anyhow!("missing '?'"))?;
+    if !path.eq_ignore_ascii_case("direct") {
+        return Err(anyhow!("not a direct link"));
+    }
+    for pair in query.split('&') {
+        let pair = pair.trim();
+        if pair.is_empty() {
+            continue;
+        }
+        let (k, v) = pair.split_once('=').unwrap_or((pair, ""));
+        if k.eq_ignore_ascii_case("c") {
+            return decode_code(v);
+        }
+    }
+    Err(anyhow!("missing code parameter"))
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use just_webrtc::types::SDPType;
+
+    #[test]
+    fn code_roundtrips() {
+        let code = DirectCodeV1 {
+            v: 1,
+            desc: SessionDescription {
+                sdp_type: SDPType::Offer,
+                sdp: "x".to_string(),
+            },
+            candidates: vec![ICECandidate {
+                candidate: "c".to_string(),
+                sdp_mid: Some("0".to_string()),
+                sdp_mline_index: Some(0),
+                username_fragment: None,
+            }],
+            label: Some("ec".to_string()),
+        };
+        let enc = encode_code(&code).unwrap();
+        let dec = decode_code(&enc).unwrap();
+        assert_eq!(dec, code);
+        let link = encode_direct_link(&code).unwrap();
+        let dec2 = decode_direct_link(&link).unwrap();
+        assert_eq!(dec2, code);
+    }
+}
diff --git a/crates/ec-direct/tests/e2e_loopback.rs b/crates/ec-direct/tests/e2e_loopback.rs
new file mode 100644
index 0000000..4e34c71
--- /dev/null
+++ b/crates/ec-direct/tests/e2e_loopback.rs
@@ -0,0 +1,134 @@
+use anyhow::{anyhow, Result};
+use bytes::Bytes;
+use ec_direct::{decode_direct_link, encode_direct_link, DirectCodeV1};
+use just_webrtc::types::{
+    DataChannelOptions, PeerConfiguration, PeerConnectionState, SessionDescription,
+};
+use just_webrtc::{DataChannelExt, PeerConnectionBuilder, PeerConnectionExt};
+
+async fn wait_connected(pc: &impl PeerConnectionExt) -> Result<()> {
+    tokio::time::timeout(std::time::Duration::from_secs(20), async {
+        loop {
+            match pc.state_change().await {
+                PeerConnectionState::Connected => break Ok(()),
+                PeerConnectionState::Failed => break Err(anyhow!("peer connection failed")),
+                PeerConnectionState::Closed => break Err(anyhow!("peer connection closed")),
+                _ => {}
+            }
+        }
+    })
+    .await
+    .map_err(|_| anyhow!("timed out waiting for peer connection"))?
+}
+
+// Ignored by default: WebRTC can be timing-sensitive on some hosts.
+#[tokio::test(flavor = "multi_thread", worker_threads = 2)]
+#[ignore]
+async fn e2e_direct_connect_loopback_sends_bytes() -> Result<()> {
+    // Avoid depending on external STUN servers in tests: use host candidates only.
+    let cfg = PeerConfiguration {
+        ice_servers: vec![],
+        ..Default::default()
+    };
+
+    let offerer = PeerConnectionBuilder::new()
+        .set_config(cfg.clone())
+        .with_channel_options(vec![(
+            "simple_channel_".to_string(),
+            DataChannelOptions::default(),
+        )])
+        .map_err(|e| anyhow!("{e:#}"))?
+        .build()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+
+    let offer_desc: SessionDescription = offerer
+        .get_local_description()
+        .await
+        .ok_or_else(|| anyhow!("missing offer local description"))?;
+    let offer_candidates = offerer
+        .collect_ice_candidates()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let offer_link = encode_direct_link(&DirectCodeV1 {
+        v: 1,
+        desc: offer_desc,
+        candidates: offer_candidates,
+        label: Some("every.channel0".to_string()),
+    })?;
+
+    let offer_code = decode_direct_link(&offer_link)?;
+    let answerer = PeerConnectionBuilder::new()
+        .set_config(cfg.clone())
+        .with_remote_offer(Some(offer_code.desc.clone()))
+        .map_err(|e| anyhow!("{e:#}"))?
+        .build()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    answerer
+        .add_ice_candidates(offer_code.candidates.clone())
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let answer_desc = answerer
+        .get_local_description()
+        .await
+        .ok_or_else(|| anyhow!("missing answer local description"))?;
+    let answer_candidates = answerer
+        .collect_ice_candidates()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let answer_link = encode_direct_link(&DirectCodeV1 {
+        v: 1,
+        desc: answer_desc,
+        candidates: answer_candidates,
+        label: Some("every.channel0".to_string()),
+    })?;
+
+    let answer_code = decode_direct_link(&answer_link)?;
+    offerer
+        .set_remote_description(answer_code.desc.clone())
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    offerer
+        .add_ice_candidates(answer_code.candidates.clone())
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+
+    // Wait for both peers to report a full connection before waiting for the data channel.
+    wait_connected(&offerer).await?;
+    wait_connected(&answerer).await?;
+
+    let offerer_ch = offerer
+        .receive_channel()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let answerer_ch = answerer
+        .receive_channel()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    offerer_ch.wait_ready().await;
+    answerer_ch.wait_ready().await;
+
+    let payload = Bytes::from_static(b"hello");
+    offerer_ch
+        .send(&payload)
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let got = tokio::time::timeout(std::time::Duration::from_secs(10), answerer_ch.receive())
+        .await
+        .map_err(|_| anyhow!("timed out waiting for receive"))?
+        .map_err(|e| anyhow!("{e:#}"))?;
+    assert_eq!(&got[..], b"hello");
+
+    // Confirm the reverse direction works too (this also guards against one-way readiness bugs).
+    answerer_ch
+        .send(&Bytes::from_static(b"world"))
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let got = tokio::time::timeout(std::time::Duration::from_secs(10), offerer_ch.receive())
+        .await
+        .map_err(|_| anyhow!("timed out waiting for receive"))?
+        .map_err(|e| anyhow!("{e:#}"))?;
+    assert_eq!(&got[..], b"world");
+    Ok(())
+}
diff --git a/crates/ec-hdhomerun/Cargo.toml b/crates/ec-hdhomerun/Cargo.toml
new file mode 100644
index 0000000..7d4df40
--- /dev/null
+++ b/crates/ec-hdhomerun/Cargo.toml
@@ -0,0 +1,14 @@
+[package]
+name = "ec-hdhomerun"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+ec-core = { path = "../ec-core" }
+crc32fast = "1"
+hex = "0.4"
+serde.workspace = true
+serde_json.workspace = true
+ureq = { version = "2", default-features = true, features = ["tls"] }
diff --git a/crates/ec-hdhomerun/src/lib.rs b/crates/ec-hdhomerun/src/lib.rs
new file mode 100644
index 0000000..73e87e9
--- /dev/null
+++ b/crates/ec-hdhomerun/src/lib.rs
@@ -0,0 +1,676 @@
+//! HDHomeRun discovery, lineup ingest, and stream scaffolding.
+
+use anyhow::{anyhow, Context, Result};
+use ec_core::{Channel, ChannelId, ChannelMetadata, DeviceId};
+use serde::{Deserialize, Serialize};
+use serde_json::Value;
+use std::io::Read;
+use std::net::{Ipv4Addr, SocketAddrV4, UdpSocket};
+use std::time::{Duration, Instant};
+
+const DISCOVER_UDP_PORT: u16 = 65001;
+const TYPE_DISCOVER_REQ: u16 = 0x0002;
+const TYPE_DISCOVER_RPY: u16 = 0x0003;
+
+const TAG_DEVICE_TYPE: u8 = 0x01;
+const TAG_DEVICE_ID: u8 = 0x02;
+const TAG_TUNER_COUNT: u8 = 0x10;
+const TAG_DEVICE_AUTH_BIN: u8 = 0x29;
+const TAG_BASE_URL: u8 = 0x2A;
+const TAG_DEVICE_AUTH_STR: u8 = 0x2B;
+
+const DEVICE_TYPE_TUNER: u32 = 0x00000001;
+const DEVICE_ID_WILDCARD: u32 = 0xFFFFFFFF;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct DeviceField {
+    pub key: String,
+    pub value: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct HdhomerunDevice {
+    pub id: DeviceId,
+    pub ip: String,
+    pub tuner_count: u8,
+    pub lineup_url: Option<String>,
+    pub discover_url: Option<String>,
+    pub base_url: Option<String>,
+    pub device_auth: Option<String>,
+    pub friendly_name: Option<String>,
+    pub model_number: Option<String>,
+    pub firmware_name: Option<String>,
+    pub firmware_version: Option<String>,
+    pub device_type: Option<String>,
+    pub discovery_tags: Vec<DeviceField>,
+    pub raw_discover_json: Option<Value>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LineupEntry {
+    pub channel: Channel,
+    pub stream_url: String,
+    pub tags: Vec<String>,
+    pub raw: Value,
+}
+
+pub struct HdhomerunStream {
+    pub url: String,
+    reader: Box<dyn Read + Send>,
+}
+
+impl std::fmt::Debug for HdhomerunStream {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+        f.debug_struct("HdhomerunStream")
+            .field("url", &self.url)
+            .finish_non_exhaustive()
+    }
+}
+
+impl Read for HdhomerunStream {
+    fn read(&mut self, buf: &mut [u8]) -> std::io::Result<usize> {
+        self.reader.read(buf)
+    }
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct DiscoverJson {
+    #[serde(rename = "DeviceID")]
+    device_id: Option<String>,
+    #[serde(rename = "DeviceAuth")]
+    device_auth: Option<String>,
+    #[serde(rename = "BaseURL")]
+    base_url: Option<String>,
+    #[serde(rename = "LineupURL")]
+    lineup_url: Option<String>,
+    #[serde(rename = "DiscoverURL")]
+    discover_url: Option<String>,
+    #[serde(rename = "FriendlyName")]
+    friendly_name: Option<String>,
+    #[serde(rename = "ModelNumber")]
+    model_number: Option<String>,
+    #[serde(rename = "FirmwareName")]
+    firmware_name: Option<String>,
+    #[serde(rename = "FirmwareVersion")]
+    firmware_version: Option<String>,
+    #[serde(rename = "DeviceType")]
+    device_type: Option<String>,
+    #[serde(rename = "TunerCount")]
+    tuner_count: Option<u8>,
+}
+
+#[derive(Debug, Clone, Deserialize)]
+struct LineupJsonEntry {
+    #[serde(rename = "GuideNumber")]
+    guide_number: Option<String>,
+    #[serde(rename = "GuideName")]
+    guide_name: Option<String>,
+    #[serde(rename = "Tags")]
+    tags: Option<String>,
+    #[serde(rename = "URL")]
+    url: Option<String>,
+}
+
+/// Discover devices using UDP broadcast, then hydrate with /discover.json when possible.
+pub fn discover() -> Result<Vec<HdhomerunDevice>> {
+    let mut devices = discover_udp(Duration::from_millis(400))?;
+
+    if devices.is_empty() {
+        if let Ok(device) = discover_from_host("hdhomerun.local") {
+            devices.push(device);
+        }
+    }
+
+    Ok(devices)
+}
+
+/// Discover a device by hostname or IP using the HTTP discover.json endpoint.
+pub fn discover_from_host(host: &str) -> Result<HdhomerunDevice> {
+    let base_url = format!("http://{host}");
+    let discover_url = format!("{base_url}/discover.json");
+    let json = fetch_json(&discover_url)?;
+    let discover: DiscoverJson = serde_json::from_value(json.clone())
+        .with_context(|| format!("invalid discover.json from {discover_url}"))?;
+
+    let device = HdhomerunDevice {
+        id: DeviceId(
+            discover
+                .device_id
+                .clone()
+                .unwrap_or_else(|| "unknown".to_string()),
+        ),
+        ip: host.to_string(),
+        tuner_count: discover.tuner_count.unwrap_or(0),
+        lineup_url: discover.lineup_url.clone(),
+        discover_url: discover.discover_url.clone().or(Some(discover_url)),
+        base_url: discover.base_url.clone().or(Some(base_url)),
+        device_auth: discover.device_auth.clone(),
+        friendly_name: discover.friendly_name.clone(),
+        model_number: discover.model_number.clone(),
+        firmware_name: discover.firmware_name.clone(),
+        firmware_version: discover.firmware_version.clone(),
+        device_type: discover.device_type.clone(),
+        discovery_tags: Vec::new(),
+        raw_discover_json: Some(json),
+    };
+
+    Ok(device)
+}
+
+/// Fetch and normalize lineup information for a device.
+pub fn fetch_lineup(device: &HdhomerunDevice) -> Result<Vec<LineupEntry>> {
+    let lineup_url = resolve_lineup_url(device)?;
+    let json = fetch_json(&lineup_url)?;
+    lineup_from_json_value(&json, Some(&device.id))
+        .with_context(|| format!("invalid lineup.json from {lineup_url}"))
+}
+
+/// Parse a lineup.json file already loaded into memory.
+pub fn lineup_from_json_bytes(
+    bytes: &[u8],
+    device_id: Option<&DeviceId>,
+) -> Result<Vec<LineupEntry>> {
+    let json: Value = serde_json::from_slice(bytes)?;
+    lineup_from_json_value(&json, device_id)
+}
+
+/// Open a raw MPEG-TS stream by channel ID (lineup lookup required).
+pub fn open_stream(device: &HdhomerunDevice, channel: &ChannelId) -> Result<HdhomerunStream> {
+    let lineup = fetch_lineup(device)?;
+    let entry = lineup
+        .into_iter()
+        .find(|entry| entry.channel.id == *channel)
+        .ok_or_else(|| anyhow!("channel {} not found in lineup", channel.0))?;
+    open_stream_entry(&entry, None)
+}
+
+/// Open a raw MPEG-TS stream from a lineup entry.
+pub fn open_stream_entry(
+    entry: &LineupEntry,
+    duration_secs: Option<u32>,
+) -> Result<HdhomerunStream> {
+    open_stream_url(&entry.stream_url, duration_secs)
+}
+
+/// Open a raw MPEG-TS stream by URL.
+pub fn open_stream_url(url: &str, duration_secs: Option<u32>) -> Result<HdhomerunStream> {
+    let url = if let Some(duration) = duration_secs {
+        append_query_param(url, "duration", &duration.to_string())
+    } else {
+        url.to_string()
+    };
+
+    // Streams can be long-lived. Only apply read timeout when the caller requests
+    // `duration=...` (useful for tests and short captures).
+    let mut agent_builder = ureq::AgentBuilder::new().timeout_connect(Duration::from_secs(3));
+    if let Some(duration) = duration_secs {
+        agent_builder = agent_builder.timeout_read(Duration::from_secs(duration as u64 + 10));
+    }
+    let agent = agent_builder.build();
+
+    let response = agent
+        .get(&url)
+        .call()
+        .with_context(|| format!("failed to open stream {url}"))?;
+    if response.status() < 200 || response.status() >= 300 {
+        return Err(anyhow!(
+            "stream returned http {} for {}",
+            response.status(),
+            url
+        ));
+    }
+
+    Ok(HdhomerunStream {
+        url,
+        reader: response.into_reader(),
+    })
+}
+
+pub fn find_lineup_entry_by_number<'a>(
+    lineup: &'a [LineupEntry],
+    guide_number: &str,
+) -> Option<&'a LineupEntry> {
+    lineup
+        .iter()
+        .find(|entry| entry.channel.number.as_deref() == Some(guide_number))
+}
+
+pub fn find_lineup_entry_by_name<'a>(
+    lineup: &'a [LineupEntry],
+    guide_name: &str,
+) -> Option<&'a LineupEntry> {
+    lineup.iter().find(|entry| entry.channel.name == guide_name)
+}
+
+fn discover_udp(timeout: Duration) -> Result<Vec<HdhomerunDevice>> {
+    let socket = UdpSocket::bind((Ipv4Addr::UNSPECIFIED, 0))?;
+    socket.set_broadcast(true)?;
+    socket.set_read_timeout(Some(Duration::from_millis(100)))?;
+
+    let packet = build_discover_packet()?;
+    let broadcast_addr = SocketAddrV4::new(Ipv4Addr::BROADCAST, DISCOVER_UDP_PORT);
+    socket.send_to(&packet, broadcast_addr)?;
+
+    let mut devices = Vec::new();
+    let start = Instant::now();
+    let mut buf = [0u8; 2048];
+
+    while start.elapsed() < timeout {
+        match socket.recv_from(&mut buf) {
+            Ok((len, addr)) => {
+                if let Ok(device) = parse_discover_response(&buf[..len], addr.ip().to_string()) {
+                    devices.push(device);
+                }
+            }
+            Err(err) if err.kind() == std::io::ErrorKind::WouldBlock => continue,
+            Err(err) if err.kind() == std::io::ErrorKind::TimedOut => continue,
+            Err(err) => return Err(err.into()),
+        }
+    }
+
+    for device in devices.iter_mut() {
+        if let Ok(json) = try_fetch_discover_json(&device.ip) {
+            apply_discover_json(device, json);
+        }
+    }
+
+    Ok(devices)
+}
+
+fn build_discover_packet() -> Result<Vec<u8>> {
+    let mut payload = Vec::new();
+    payload.extend(tlv(TAG_DEVICE_TYPE, &DEVICE_TYPE_TUNER.to_be_bytes()));
+    payload.extend(tlv(TAG_DEVICE_ID, &DEVICE_ID_WILDCARD.to_be_bytes()));
+
+    let mut packet = Vec::with_capacity(4 + payload.len() + 4);
+    packet.extend(TYPE_DISCOVER_REQ.to_be_bytes());
+    packet.extend((payload.len() as u16).to_be_bytes());
+    packet.extend(payload);
+
+    let crc = crc32fast::hash(&packet);
+    packet.extend(crc.to_le_bytes());
+    Ok(packet)
+}
+
+fn parse_discover_response(bytes: &[u8], ip: String) -> Result<HdhomerunDevice> {
+    if bytes.len() < 8 {
+        return Err(anyhow!("discover reply too short"));
+    }
+
+    let packet_type = u16::from_be_bytes([bytes[0], bytes[1]]);
+    if packet_type != TYPE_DISCOVER_RPY {
+        return Err(anyhow!("unexpected packet type"));
+    }
+
+    let payload_len = u16::from_be_bytes([bytes[2], bytes[3]]) as usize;
+    if bytes.len() < 4 + payload_len + 4 {
+        return Err(anyhow!("truncated discover reply"));
+    }
+
+    let payload = &bytes[4..4 + payload_len];
+    let expected_crc = u32::from_le_bytes([
+        bytes[4 + payload_len],
+        bytes[4 + payload_len + 1],
+        bytes[4 + payload_len + 2],
+        bytes[4 + payload_len + 3],
+    ]);
+    let actual_crc = crc32fast::hash(&bytes[..4 + payload_len]);
+    if expected_crc != actual_crc {
+        return Err(anyhow!("bad crc"));
+    }
+
+    let mut cursor = 0usize;
+    let mut device_id: Option<String> = None;
+    let mut tuner_count: Option<u8> = None;
+    let mut base_url: Option<String> = None;
+    let mut device_auth: Option<String> = None;
+    let mut tags: Vec<DeviceField> = Vec::new();
+
+    while cursor < payload.len() {
+        let tag = payload[cursor];
+        cursor += 1;
+
+        let (length, consumed) = read_varlen(&payload[cursor..])?;
+        cursor += consumed;
+
+        if cursor + length > payload.len() {
+            return Err(anyhow!("discover TLV length overflow"));
+        }
+
+        let value = &payload[cursor..cursor + length];
+        cursor += length;
+
+        match tag {
+            TAG_DEVICE_ID => {
+                if value.len() == 4 {
+                    let id = u32::from_be_bytes([value[0], value[1], value[2], value[3]]);
+                    device_id = Some(format!("{id:08X}"));
+                }
+            }
+            TAG_TUNER_COUNT => {
+                if let Some(first) = value.first() {
+                    tuner_count = Some(*first);
+                }
+            }
+            TAG_BASE_URL => {
+                if let Ok(text) = std::str::from_utf8(value) {
+                    base_url = Some(text.trim_end_matches('\0').to_string());
+                }
+            }
+            TAG_DEVICE_AUTH_STR => {
+                if let Ok(text) = std::str::from_utf8(value) {
+                    device_auth = Some(text.trim_end_matches('\0').to_string());
+                }
+            }
+            TAG_DEVICE_AUTH_BIN => {
+                tags.push(DeviceField {
+                    key: "device_auth_bin".to_string(),
+                    value: hex::encode(value),
+                });
+            }
+            TAG_DEVICE_TYPE => {
+                tags.push(DeviceField {
+                    key: "device_type".to_string(),
+                    value: hex::encode(value),
+                });
+            }
+            other => {
+                tags.push(DeviceField {
+                    key: format!("tag_{other:02X}"),
+                    value: hex::encode(value),
+                });
+            }
+        }
+    }
+
+    let id = device_id.unwrap_or_else(|| "unknown".to_string());
+    let device = HdhomerunDevice {
+        id: DeviceId(id),
+        ip,
+        tuner_count: tuner_count.unwrap_or(0),
+        lineup_url: None,
+        discover_url: None,
+        base_url,
+        device_auth,
+        friendly_name: None,
+        model_number: None,
+        firmware_name: None,
+        firmware_version: None,
+        device_type: None,
+        discovery_tags: tags,
+        raw_discover_json: None,
+    };
+
+    Ok(device)
+}
+
+fn read_varlen(buf: &[u8]) -> Result<(usize, usize)> {
+    if buf.is_empty() {
+        return Err(anyhow!("missing varlen"));
+    }
+
+    let first = buf[0];
+    if first & 0x80 == 0 {
+        Ok((first as usize, 1))
+    } else {
+        if buf.len() < 2 {
+            return Err(anyhow!("missing varlen second byte"));
+        }
+        let len = ((first & 0x7F) as usize) | ((buf[1] as usize) << 7);
+        Ok((len, 2))
+    }
+}
+
+fn tlv(tag: u8, value: &[u8]) -> Vec<u8> {
+    let mut out = Vec::with_capacity(2 + value.len());
+    out.push(tag);
+    out.extend(encode_varlen(value.len()));
+    out.extend(value);
+    out
+}
+
+fn encode_varlen(len: usize) -> Vec<u8> {
+    if len <= 0x7F {
+        vec![len as u8]
+    } else {
+        vec![((len & 0x7F) as u8) | 0x80, (len >> 7) as u8]
+    }
+}
+
+fn fetch_json(url: &str) -> Result<Value> {
+    let agent = ureq::AgentBuilder::new()
+        .timeout_connect(Duration::from_secs(3))
+        .timeout_read(Duration::from_secs(6))
+        .build();
+    let response = agent
+        .get(url)
+        .call()
+        .with_context(|| format!("request failed for {url}"))?;
+    if response.status() < 200 || response.status() >= 300 {
+        return Err(anyhow!("http {} for {url}", response.status()));
+    }
+    let mut body = String::new();
+    response
+        .into_reader()
+        .read_to_string(&mut body)
+        .with_context(|| format!("failed to read response body for {url}"))?;
+    Ok(serde_json::from_str::<Value>(&body)
+        .with_context(|| format!("invalid json body for {url}"))?)
+}
+
+fn try_fetch_discover_json(host: &str) -> Result<Value> {
+    let url = format!("http://{host}/discover.json");
+    fetch_json(&url)
+}
+
+fn apply_discover_json(device: &mut HdhomerunDevice, json: Value) {
+    if let Ok(discover) = serde_json::from_value::<DiscoverJson>(json.clone()) {
+        if let Some(device_id) = discover.device_id {
+            device.id = DeviceId(device_id);
+        }
+        if let Some(tuner_count) = discover.tuner_count {
+            device.tuner_count = tuner_count;
+        }
+        device.lineup_url = discover.lineup_url.or(device.lineup_url.take());
+        device.discover_url = discover.discover_url.or(device.discover_url.take());
+        device.base_url = discover.base_url.or(device.base_url.take());
+        device.device_auth = discover.device_auth.or(device.device_auth.take());
+        device.friendly_name = discover.friendly_name.or(device.friendly_name.take());
+        device.model_number = discover.model_number.or(device.model_number.take());
+        device.firmware_name = discover.firmware_name.or(device.firmware_name.take());
+        device.firmware_version = discover.firmware_version.or(device.firmware_version.take());
+        device.device_type = discover.device_type.or(device.device_type.take());
+    }
+
+    device.raw_discover_json = Some(json);
+}
+
+fn resolve_lineup_url(device: &HdhomerunDevice) -> Result<String> {
+    if let Some(lineup_url) = device.lineup_url.as_ref() {
+        return Ok(lineup_url.clone());
+    }
+
+    if let Some(base_url) = device.base_url.as_ref() {
+        return Ok(format!("{base_url}/lineup.json"));
+    }
+
+    if !device.ip.is_empty() {
+        return Ok(format!("http://{}/lineup.json", device.ip));
+    }
+
+    Err(anyhow!("no lineup URL available"))
+}
+
+fn append_query_param(url: &str, key: &str, value: &str) -> String {
+    if url.contains('?') {
+        format!("{url}&{key}={value}")
+    } else {
+        format!("{url}?{key}={value}")
+    }
+}
+
+fn lineup_from_json_value(json: &Value, device_id: Option<&DeviceId>) -> Result<Vec<LineupEntry>> {
+    let entries = json
+        .as_array()
+        .ok_or_else(|| anyhow!("lineup json is not an array"))?;
+
+    let mut output = Vec::with_capacity(entries.len());
+
+    for (index, entry) in entries.iter().enumerate() {
+        let parsed: LineupJsonEntry = serde_json::from_value(entry.clone())
+            .with_context(|| format!("invalid lineup entry at index {index}"))?;
+
+        let guide_number = parsed.guide_number.clone();
+        let guide_name = parsed
+            .guide_name
+            .clone()
+            .or_else(|| guide_number.clone())
+            .unwrap_or_else(|| format!("Channel {index}"));
+        let tags = parsed
+            .tags
+            .unwrap_or_default()
+            .split(',')
+            .map(|s| s.trim().to_string())
+            .filter(|s| !s.is_empty())
+            .collect::<Vec<_>>();
+        let url = parsed.url.clone().unwrap_or_else(|| "".to_string());
+
+        let id = match (device_id, guide_number.as_ref()) {
+            (Some(device_id), Some(guide_number)) => {
+                ChannelId(format!("hdhr:{}:{}", device_id.0, guide_number))
+            }
+            (_, Some(guide_number)) => ChannelId(guide_number.clone()),
+            (_, None) => ChannelId(format!("hdhr:unknown:{index}")),
+        };
+
+        let mut metadata = Vec::new();
+        for tag in &tags {
+            metadata.push(ChannelMetadata::Extra("tag".to_string(), tag.clone()));
+        }
+
+        if let Some(guide_number) = guide_number.clone() {
+            metadata.push(ChannelMetadata::Extra(
+                "guide_number".to_string(),
+                guide_number,
+            ));
+        }
+
+        if let Some(obj) = entry.as_object() {
+            for (key, value) in obj.iter() {
+                if key == "GuideNumber" || key == "GuideName" || key == "Tags" || key == "URL" {
+                    continue;
+                }
+                metadata.push(ChannelMetadata::Extra(key.clone(), value.to_string()));
+            }
+        }
+
+        let channel = Channel {
+            id,
+            name: guide_name,
+            number: parsed.guide_number,
+            program_id: None,
+            metadata,
+        };
+
+        output.push(LineupEntry {
+            channel,
+            stream_url: url,
+            tags,
+            raw: entry.clone(),
+        });
+    }
+
+    Ok(output)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn varlen_roundtrip_small_and_large() {
+        for len in [0usize, 1, 10, 127, 128, 200, 1024] {
+            let enc = encode_varlen(len);
+            let (decoded, consumed) = read_varlen(&enc).unwrap();
+            assert_eq!(decoded, len);
+            assert_eq!(consumed, enc.len());
+        }
+    }
+
+    #[test]
+    fn parse_discover_response_happy_path() {
+        let device_id = 0x10ACEBB9u32;
+        let ip = "192.0.2.10"; // RFC 5737 TEST-NET-1
+        let mut payload = Vec::new();
+        payload.extend(tlv(TAG_DEVICE_ID, &device_id.to_be_bytes()));
+        payload.extend(tlv(TAG_TUNER_COUNT, &[4u8]));
+        payload.extend(tlv(TAG_BASE_URL, b"http://192.0.2.10\0"));
+        payload.extend(tlv(TAG_DEVICE_AUTH_STR, b"auth-token\0"));
+        payload.extend(tlv(0x99, b"unknown"));
+
+        let mut packet = Vec::new();
+        packet.extend(TYPE_DISCOVER_RPY.to_be_bytes());
+        packet.extend((payload.len() as u16).to_be_bytes());
+        packet.extend(&payload);
+        let crc = crc32fast::hash(&packet);
+        packet.extend(crc.to_le_bytes());
+
+        let dev = parse_discover_response(&packet, ip.to_string()).unwrap();
+        assert_eq!(dev.id.0, "10ACEBB9");
+        assert_eq!(dev.ip, ip);
+        assert_eq!(dev.tuner_count, 4);
+        assert_eq!(dev.base_url.as_deref(), Some("http://192.0.2.10"));
+        assert_eq!(dev.device_auth.as_deref(), Some("auth-token"));
+        assert!(dev.discovery_tags.iter().any(|t| t.key == "tag_99"));
+    }
+
+    #[test]
+    fn parse_discover_response_rejects_bad_crc() {
+        let mut payload = Vec::new();
+        payload.extend(tlv(TAG_TUNER_COUNT, &[2u8]));
+        let mut packet = Vec::new();
+        packet.extend(TYPE_DISCOVER_RPY.to_be_bytes());
+        packet.extend((payload.len() as u16).to_be_bytes());
+        packet.extend(&payload);
+        let crc = crc32fast::hash(&packet);
+        packet.extend(crc.to_le_bytes());
+        // corrupt the last byte
+        *packet.last_mut().unwrap() ^= 0xFF;
+        assert!(parse_discover_response(&packet, "1.2.3.4".to_string()).is_err());
+    }
+
+    #[test]
+    fn lineup_parsing_generates_channel_ids_and_metadata() {
+        let device_id = DeviceId("ABCDEF01".to_string());
+        let json = serde_json::json!([
+            {
+                "GuideNumber": "2.1",
+                "GuideName": "KCBS-HD",
+                "Tags": "drm,encrypted,",
+                "URL": "http://hdhr/auto/v2.1",
+                "Foo": "Bar"
+            },
+            {
+                "GuideNumber": "2.2",
+                "GuideName": "StartTV",
+                "Tags": "",
+                "URL": "http://hdhr/auto/v2.2"
+            }
+        ]);
+        let entries = lineup_from_json_value(&json, Some(&device_id)).unwrap();
+        assert_eq!(entries.len(), 2);
+        assert_eq!(entries[0].channel.id.0, "hdhr:ABCDEF01:2.1");
+        assert_eq!(entries[0].channel.name, "KCBS-HD");
+        assert_eq!(entries[0].channel.number.as_deref(), Some("2.1"));
+        assert_eq!(entries[0].stream_url, "http://hdhr/auto/v2.1");
+        assert!(entries[0].tags.iter().any(|t| t == "drm"));
+        assert!(entries[0].channel.metadata.iter().any(|m| match m {
+            ChannelMetadata::Extra(key, value) => key == "guide_number" && value == "2.1",
+            _ => false,
+        }));
+        assert!(entries[0].channel.metadata.iter().any(|m| match m {
+            ChannelMetadata::Extra(key, _) => key == "Foo",
+            _ => false,
+        }));
+    }
+}
diff --git a/crates/ec-iroh/Cargo.toml b/crates/ec-iroh/Cargo.toml
new file mode 100644
index 0000000..6b76d63
--- /dev/null
+++ b/crates/ec-iroh/Cargo.toml
@@ -0,0 +1,16 @@
+[package]
+name = "ec-iroh"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+blake3 = "1"
+bytes = "1"
+ec-core = { path = "../ec-core" }
+futures-lite = "2"
+iroh = { version = "0.96", features = ["address-lookup-mdns", "address-lookup-pkarr-dht"] }
+iroh-gossip = { path = "../../third_party/iroh-org/iroh-gossip", features = ["net"] }
+serde_json.workspace = true
+tokio = { version = "1", features = ["time"] }
diff --git a/crates/ec-iroh/src/lib.rs b/crates/ec-iroh/src/lib.rs
new file mode 100644
index 0000000..1c8dddd
--- /dev/null
+++ b/crates/ec-iroh/src/lib.rs
@@ -0,0 +1,328 @@
+//! iroh transport scaffolding for every.channel.
+
+use anyhow::{Context, Result};
+use bytes::Bytes;
+use ec_core::StreamCatalogEntry;
+use futures_lite::StreamExt;
+use iroh::address_lookup::{
+    DhtAddressLookup, DiscoveryEvent, DnsAddressLookup, MdnsAddressLookup, PkarrPublisher, UserData,
+};
+use iroh::endpoint::RelayMode;
+use iroh::{
+    address_lookup::memory::MemoryLookup, protocol::Router, Endpoint, EndpointAddr, PublicKey,
+    SecretKey,
+};
+use iroh_gossip::{
+    api::{Event, GossipReceiver, GossipSender},
+    net::{Gossip, GOSSIP_ALPN},
+    proto::TopicId,
+};
+use std::collections::BTreeMap;
+use std::env;
+use std::time::{Duration, Instant};
+
+pub const ALPN_MOQ: &[u8] = b"every.channel/moq/0";
+pub const DEFAULT_CATALOG_TOPIC: &str = "every.channel/catalog/v1";
+pub const MDNS_USER_DATA: &str = "every.channel";
+
+#[derive(Debug, Clone)]
+pub struct TokenBucket {
+    capacity: u64,
+    tokens: f64,
+    refill_per_sec: f64,
+    last_refill: Instant,
+}
+
+impl TokenBucket {
+    pub fn new(capacity: u64, refill_per_sec: u64) -> Self {
+        let capacity = capacity.max(1);
+        let refill_per_sec = refill_per_sec.max(1) as f64;
+        Self {
+            capacity,
+            tokens: capacity as f64,
+            refill_per_sec,
+            last_refill: Instant::now(),
+        }
+    }
+
+    pub fn allow(&mut self, amount: u64) -> bool {
+        self.refill();
+        let amount = amount as f64;
+        if amount <= self.tokens {
+            self.tokens -= amount;
+            true
+        } else {
+            false
+        }
+    }
+
+    fn refill(&mut self) {
+        let now = Instant::now();
+        let elapsed = now.duration_since(self.last_refill).as_secs_f64();
+        if elapsed <= 0.0 {
+            return;
+        }
+        self.tokens = (self.tokens + elapsed * self.refill_per_sec).min(self.capacity as f64);
+        self.last_refill = now;
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn token_bucket_allows_and_refills() {
+        let mut bucket = TokenBucket::new(10, 10);
+        assert!(bucket.allow(7));
+        assert!(bucket.allow(3));
+        assert!(!bucket.allow(1));
+
+        // Force a refill without sleeping.
+        bucket.last_refill = Instant::now() - Duration::from_secs(1);
+        assert!(bucket.allow(1));
+    }
+}
+
+#[derive(Debug, Clone, Copy, Default)]
+pub struct DiscoveryConfig {
+    pub dht: bool,
+    pub mdns: bool,
+    pub dns: bool,
+}
+
+impl DiscoveryConfig {
+    pub fn from_env() -> Result<Self> {
+        match env::var("EVERY_CHANNEL_IROH_DISCOVERY") {
+            Ok(value) => Self::from_list(&value),
+            Err(env::VarError::NotPresent) => Ok(Self::default()),
+            Err(err) => Err(err.into()),
+        }
+    }
+
+    pub fn from_list(value: &str) -> Result<Self> {
+        let mut config = DiscoveryConfig::default();
+        for raw in value.split(|c: char| c == ',' || c == ';' || c.is_whitespace()) {
+            let token = raw.trim().to_ascii_lowercase();
+            if token.is_empty() {
+                continue;
+            }
+            match token.as_str() {
+                "dht" => config.dht = true,
+                "mdns" => config.mdns = true,
+                "dns" => config.dns = true,
+                "all" => {
+                    config.dht = true;
+                    config.mdns = true;
+                    config.dns = true;
+                }
+                "none" | "off" => {
+                    config = DiscoveryConfig::default();
+                }
+                _ => {
+                    return Err(anyhow::anyhow!("unknown discovery mode: {token}"));
+                }
+            }
+        }
+        Ok(config)
+    }
+}
+
+pub async fn build_endpoint(
+    secret: Option<SecretKey>,
+    discovery: DiscoveryConfig,
+) -> Result<Endpoint> {
+    let relay_mode = relay_mode_from_env().unwrap_or(RelayMode::Default);
+    let mut builder = Endpoint::empty_builder(relay_mode);
+    if let Some(secret) = secret {
+        builder = builder.secret_key(secret);
+    }
+    if discovery.dns {
+        builder = builder
+            .address_lookup(PkarrPublisher::n0_dns())
+            .address_lookup(DnsAddressLookup::n0_dns());
+    }
+    if discovery.dht {
+        builder = builder.address_lookup(DhtAddressLookup::builder());
+    }
+    if discovery.mdns {
+        builder = builder.address_lookup(MdnsAddressLookup::builder());
+    }
+    let endpoint = builder.bind().await?;
+    endpoint.set_alpns(vec![ALPN_MOQ.to_vec()]);
+    Ok(endpoint)
+}
+
+fn relay_mode_from_env() -> Result<RelayMode> {
+    let value = match env::var("EVERY_CHANNEL_IROH_RELAY") {
+        Ok(value) => value,
+        Err(env::VarError::NotPresent) => return Ok(RelayMode::Default),
+        Err(err) => return Err(err.into()),
+    };
+    match value.trim().to_ascii_lowercase().as_str() {
+        "" | "default" => Ok(RelayMode::Default),
+        "disabled" | "off" => Ok(RelayMode::Disabled),
+        other => Err(anyhow::anyhow!("unknown relay mode: {other}")),
+    }
+}
+
+pub async fn start_endpoint() -> Result<Endpoint> {
+    let discovery = DiscoveryConfig::from_env()?;
+    build_endpoint(None, discovery).await
+}
+
+pub fn catalog_topic() -> TopicId {
+    let hash = blake3::hash(DEFAULT_CATALOG_TOPIC.as_bytes());
+    TopicId::from_bytes(*hash.as_bytes())
+}
+
+pub fn parse_endpoint_addr(value: &str) -> Result<EndpointAddr> {
+    let value = value.trim();
+    if value.starts_with('{') {
+        let addr =
+            serde_json::from_str::<EndpointAddr>(value).context("invalid EndpointAddr json")?;
+        return Ok(addr);
+    }
+    let id = value.parse::<PublicKey>().context("invalid endpoint id")?;
+    Ok(EndpointAddr::new(id))
+}
+
+#[derive(Debug, Clone)]
+pub struct MdnsDiscovery {
+    mdns: MdnsAddressLookup,
+    endpoint_id: PublicKey,
+    user_data: Option<UserData>,
+}
+
+impl MdnsDiscovery {
+    pub async fn start(
+        endpoint: &Endpoint,
+        user_data: Option<&str>,
+        advertise: bool,
+    ) -> Result<Self> {
+        let mdns = MdnsAddressLookup::builder()
+            .advertise(advertise)
+            .build(endpoint.id())
+            .context("mdns address lookup failed")?;
+        endpoint.address_lookup().add(mdns.clone());
+
+        let user_data = if let Some(value) = user_data {
+            let data = UserData::try_from(value.to_string()).context("invalid mdns user data")?;
+            endpoint.set_user_data_for_address_lookup(Some(data.clone()));
+            Some(data)
+        } else {
+            None
+        };
+
+        Ok(Self {
+            mdns,
+            endpoint_id: endpoint.id(),
+            user_data,
+        })
+    }
+
+    pub async fn discover_peers(&self, timeout: Duration) -> Result<Vec<EndpointAddr>> {
+        let mut stream = self.mdns.subscribe().await;
+        let deadline = Instant::now() + timeout;
+        let mut peers: BTreeMap<PublicKey, EndpointAddr> = BTreeMap::new();
+
+        loop {
+            let now = Instant::now();
+            if now >= deadline {
+                break;
+            }
+            let remaining = deadline - now;
+            match tokio::time::timeout(remaining, stream.next()).await {
+                Ok(Some(DiscoveryEvent::Discovered { endpoint_info, .. })) => {
+                    if endpoint_info.endpoint_id == self.endpoint_id {
+                        continue;
+                    }
+                    if let Some(expected) = self.user_data.as_ref() {
+                        if endpoint_info.data.user_data() != Some(expected) {
+                            continue;
+                        }
+                    }
+                    let addr = EndpointAddr::from(endpoint_info);
+                    peers.insert(addr.id, addr);
+                }
+                Ok(Some(DiscoveryEvent::Expired { .. })) => {}
+                Ok(None) => break,
+                Err(_) => break,
+            }
+        }
+
+        Ok(peers.into_values().collect())
+    }
+}
+
+#[derive(Debug)]
+pub struct CatalogGossip {
+    sender: GossipSender,
+    receiver: GossipReceiver,
+    _router: Router,
+    _gossip: Gossip,
+    _memory_lookup: MemoryLookup,
+}
+
+impl CatalogGossip {
+    pub async fn join(endpoint: Endpoint, peers: &[String]) -> Result<Self> {
+        let memory_lookup = MemoryLookup::new();
+        endpoint.address_lookup().add(memory_lookup.clone());
+
+        let gossip = Gossip::builder().spawn(endpoint.clone());
+        let router = Router::builder(endpoint.clone())
+            .accept(GOSSIP_ALPN, gossip.clone())
+            .spawn();
+
+        let peer_addrs = peers
+            .iter()
+            .map(|peer| parse_endpoint_addr(peer))
+            .collect::<Result<Vec<_>, _>>()
+            .context("failed to parse gossip peer addr")?;
+        for peer in &peer_addrs {
+            memory_lookup.add_endpoint_info(peer.clone());
+        }
+        let peer_ids = peer_addrs
+            .iter()
+            .map(|addr| addr.id)
+            .collect::<Vec<PublicKey>>();
+
+        let (sender, receiver) = gossip
+            .subscribe_and_join(catalog_topic(), peer_ids)
+            .await?
+            .split();
+
+        Ok(Self {
+            sender,
+            receiver,
+            _router: router,
+            _gossip: gossip,
+            _memory_lookup: memory_lookup,
+        })
+    }
+
+    pub async fn announce(&mut self, entry: StreamCatalogEntry) -> Result<()> {
+        let bytes = serde_json::to_vec(&entry)?;
+        self.sender.broadcast(Bytes::from(bytes)).await?;
+        Ok(())
+    }
+
+    pub async fn next_entry(&mut self) -> Result<Option<StreamCatalogEntry>> {
+        while let Some(event) = self.receiver.try_next().await? {
+            if let Event::Received(msg) = event {
+                if let Ok(entry) = serde_json::from_slice::<StreamCatalogEntry>(&msg.content) {
+                    return Ok(Some(entry));
+                }
+            }
+        }
+        Ok(None)
+    }
+
+    /// Add peers after the gossip topic has already been joined. This enables
+    /// "nearby" discovery to continuously contribute new peers over time.
+    pub fn add_peers(&self, peers: Vec<EndpointAddr>) {
+        for peer in peers {
+            self._memory_lookup.add_endpoint_info(peer);
+        }
+    }
+}
diff --git a/crates/ec-linux-iptv/Cargo.toml b/crates/ec-linux-iptv/Cargo.toml
new file mode 100644
index 0000000..c5b1b54
--- /dev/null
+++ b/crates/ec-linux-iptv/Cargo.toml
@@ -0,0 +1,9 @@
+[package]
+name = "ec-linux-iptv"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+serde.workspace = true
diff --git a/crates/ec-linux-iptv/src/lib.rs b/crates/ec-linux-iptv/src/lib.rs
new file mode 100644
index 0000000..0180641
--- /dev/null
+++ b/crates/ec-linux-iptv/src/lib.rs
@@ -0,0 +1,292 @@
+//! Linux IPTV (LinuxDVB) ingest scaffolding.
+
+use anyhow::{anyhow, Result};
+use serde::{Deserialize, Serialize};
+use std::collections::BTreeSet;
+use std::fs;
+use std::fs::File;
+use std::io::Read;
+use std::path::{Path, PathBuf};
+use std::process::Child;
+
+#[cfg(target_os = "linux")]
+use std::{process::Command, time::Duration};
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LinuxDvbConfig {
+    pub adapter: u32,
+    pub frontend: u32,
+    pub dvr: u32,
+    pub tune_command: Option<Vec<String>>,
+    pub tune_timeout_ms: Option<u64>,
+}
+
+#[derive(Debug)]
+pub struct LinuxDvbStream {
+    file: File,
+    _tuner: Option<Child>,
+    pub path: PathBuf,
+}
+
+impl Read for LinuxDvbStream {
+    fn read(&mut self, buf: &mut [u8]) -> std::io::Result<usize> {
+        self.file.read(buf)
+    }
+}
+
+/// Open the Linux DVB DVR device. Optionally spawns a tune command (like dvbv5-zap).
+#[cfg(target_os = "linux")]
+pub fn open_stream(config: &LinuxDvbConfig) -> Result<LinuxDvbStream> {
+    let tuner = if let Some(cmd) = config.tune_command.clone() {
+        spawn_tune_command(cmd, config.tune_timeout_ms)?
+    } else {
+        None
+    };
+
+    let path = dvb_path(config.adapter, config.dvr);
+    let file =
+        File::open(&path).map_err(|err| anyhow!("failed to open {}: {err}", path.display()))?;
+
+    Ok(LinuxDvbStream {
+        file,
+        _tuner: tuner,
+        path,
+    })
+}
+
+#[cfg(not(target_os = "linux"))]
+pub fn open_stream(_config: &LinuxDvbConfig) -> Result<LinuxDvbStream> {
+    Err(anyhow!("Linux DVB support requires Linux"))
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct LinuxDvbAdapterInfo {
+    pub adapter: u32,
+    pub dvrs: Vec<u32>,
+    pub frontends: Vec<u32>,
+}
+
+pub fn list_adapters() -> Result<Vec<LinuxDvbAdapterInfo>> {
+    list_adapters_in(Path::new("/dev/dvb"))
+}
+
+fn list_adapters_in(root: &Path) -> Result<Vec<LinuxDvbAdapterInfo>> {
+    if !root.exists() {
+        return Ok(Vec::new());
+    }
+
+    let mut adapters = Vec::new();
+    for entry in fs::read_dir(root)? {
+        let entry = entry?;
+        if !entry.file_type()?.is_dir() {
+            continue;
+        }
+        let name = entry.file_name();
+        let name = name.to_string_lossy();
+        if !name.starts_with("adapter") {
+            continue;
+        }
+        let Ok(adapter) = name.trim_start_matches("adapter").parse::<u32>() else {
+            continue;
+        };
+        let path = entry.path();
+        let mut dvrs = BTreeSet::new();
+        let mut frontends = BTreeSet::new();
+        for dev in fs::read_dir(&path)? {
+            let dev = dev?;
+            let dev_name = dev.file_name().to_string_lossy().to_string();
+            if dev_name.starts_with("dvr") {
+                if let Ok(idx) = dev_name.trim_start_matches("dvr").parse::<u32>() {
+                    dvrs.insert(idx);
+                }
+            } else if dev_name.starts_with("frontend") {
+                if let Ok(idx) = dev_name.trim_start_matches("frontend").parse::<u32>() {
+                    frontends.insert(idx);
+                }
+            }
+        }
+        adapters.push(LinuxDvbAdapterInfo {
+            adapter,
+            dvrs: dvrs.into_iter().collect(),
+            frontends: frontends.into_iter().collect(),
+        });
+    }
+
+    adapters.sort_by_key(|info| info.adapter);
+    Ok(adapters)
+}
+
+pub fn channels_conf_candidates() -> Vec<PathBuf> {
+    // Prefer an explicit path for determinism and testability.
+    if let Ok(value) = std::env::var("EVERY_CHANNEL_DVB_CHANNELS_CONF") {
+        let value = value.trim();
+        if !value.is_empty() {
+            return vec![PathBuf::from(value)];
+        }
+    }
+
+    let home = std::env::var("HOME").ok().map(PathBuf::from);
+    let mut out = Vec::new();
+    if let Some(home) = home {
+        out.push(home.join(".dvb").join("channels.conf"));
+        out.push(home.join(".config").join("dvb").join("channels.conf"));
+    }
+    out.push(PathBuf::from("/etc/dvb/channels.conf"));
+    out
+}
+
+pub fn find_channels_conf() -> Option<PathBuf> {
+    for candidate in channels_conf_candidates() {
+        if candidate.exists() {
+            return Some(candidate);
+        }
+    }
+    None
+}
+
+pub fn parse_channels_conf(path: &Path) -> Result<Vec<String>> {
+    let text = fs::read_to_string(path)
+        .map_err(|err| anyhow!("failed to read {}: {err}", path.display()))?;
+    let mut channels = BTreeSet::new();
+    for line in text.lines() {
+        let line = line.trim();
+        if line.is_empty() || line.starts_with('#') {
+            continue;
+        }
+        if let Some((name, _)) = line.split_once(':') {
+            let name = name.trim();
+            if !name.is_empty() {
+                channels.insert(name.to_string());
+            }
+        }
+    }
+    Ok(channels.into_iter().collect())
+}
+
+pub fn default_zap_tune_command(adapter: u32, channels_conf: &Path, channel: &str) -> Vec<String> {
+    vec![
+        "dvbv5-zap".to_string(),
+        "-a".to_string(),
+        adapter.to_string(),
+        "-c".to_string(),
+        channels_conf.display().to_string(),
+        "-r".to_string(),
+        channel.to_string(),
+    ]
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn parse_channels_conf_extracts_names() {
+        let dir = std::env::temp_dir().join(format!("ec-channels-{}", std::process::id()));
+        let _ = fs::create_dir_all(&dir);
+        let path = dir.join("channels.conf");
+        fs::write(
+            &path,
+            "\
+# comment
+KQED:foo
+KQED:duplicate
+
+KCBS-HD:bar
+",
+        )
+        .unwrap();
+
+        let channels = parse_channels_conf(&path).unwrap();
+        assert_eq!(channels, vec!["KCBS-HD".to_string(), "KQED".to_string()]);
+        let _ = fs::remove_file(&path);
+    }
+
+    #[test]
+    fn default_zap_command_contains_adapter_and_channel() {
+        let conf = Path::new("/tmp/channels.conf");
+        let cmd = default_zap_tune_command(2, conf, "KQED");
+        assert_eq!(cmd[0], "dvbv5-zap");
+        assert!(cmd.iter().any(|arg| arg == "2"));
+        assert!(cmd.iter().any(|arg| arg == "KQED"));
+    }
+
+    #[test]
+    fn find_channels_conf_prefers_env_override() {
+        let dir = std::env::temp_dir().join(format!("ec-channels-env-{}", std::process::id()));
+        let _ = fs::create_dir_all(&dir);
+        let path = dir.join("channels.conf");
+        fs::write(&path, "KQED:foo\n").unwrap();
+
+        let prev = std::env::var("EVERY_CHANNEL_DVB_CHANNELS_CONF").ok();
+        std::env::set_var(
+            "EVERY_CHANNEL_DVB_CHANNELS_CONF",
+            path.display().to_string(),
+        );
+        let found = find_channels_conf().unwrap();
+        assert_eq!(found, path);
+
+        match prev {
+            Some(value) => std::env::set_var("EVERY_CHANNEL_DVB_CHANNELS_CONF", value),
+            None => std::env::remove_var("EVERY_CHANNEL_DVB_CHANNELS_CONF"),
+        }
+        let _ = fs::remove_file(&path);
+    }
+
+    #[test]
+    fn list_adapters_parses_fake_dev_tree() {
+        let root = std::env::temp_dir().join(format!("ec-dvb-root-{}", std::process::id()));
+        let _ = fs::remove_dir_all(&root);
+        fs::create_dir_all(root.join("adapter1")).unwrap();
+        fs::create_dir_all(root.join("adapter0")).unwrap();
+        fs::write(root.join("adapter0").join("dvr0"), "").unwrap();
+        fs::write(root.join("adapter0").join("frontend0"), "").unwrap();
+        fs::write(root.join("adapter1").join("dvr2"), "").unwrap();
+        fs::write(root.join("adapter1").join("frontend0"), "").unwrap();
+        fs::write(root.join("adapter1").join("frontend1"), "").unwrap();
+
+        let list = list_adapters_in(&root).unwrap();
+        assert_eq!(list.len(), 2);
+        assert_eq!(list[0].adapter, 0);
+        assert_eq!(list[0].dvrs, vec![0]);
+        assert_eq!(list[0].frontends, vec![0]);
+        assert_eq!(list[1].adapter, 1);
+        assert_eq!(list[1].dvrs, vec![2]);
+        assert_eq!(list[1].frontends, vec![0, 1]);
+
+        let _ = fs::remove_dir_all(&root);
+    }
+}
+
+#[cfg(target_os = "linux")]
+fn spawn_tune_command(command: Vec<String>, tune_timeout_ms: Option<u64>) -> Result<Option<Child>> {
+    if command.is_empty() {
+        return Ok(None);
+    }
+
+    let mut cmd = Command::new(&command[0]);
+    if command.len() > 1 {
+        cmd.args(&command[1..]);
+    }
+
+    let child = cmd.spawn()?;
+
+    if let Some(timeout_ms) = tune_timeout_ms {
+        std::thread::sleep(Duration::from_millis(timeout_ms));
+    }
+
+    Ok(Some(child))
+}
+
+#[cfg(not(target_os = "linux"))]
+fn spawn_tune_command(
+    _command: Vec<String>,
+    _tune_timeout_ms: Option<u64>,
+) -> Result<Option<Child>> {
+    Ok(None)
+}
+
+fn dvb_path(adapter: u32, dvr: u32) -> PathBuf {
+    Path::new("/dev/dvb")
+        .join(format!("adapter{adapter}"))
+        .join(format!("dvr{dvr}"))
+}
diff --git a/crates/ec-moq/Cargo.toml b/crates/ec-moq/Cargo.toml
new file mode 100644
index 0000000..a7f4c8c
--- /dev/null
+++ b/crates/ec-moq/Cargo.toml
@@ -0,0 +1,23 @@
+[package]
+name = "ec-moq"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+bytes = "1"
+ec-core = { path = "../ec-core" }
+ec-iroh = { path = "../ec-iroh" }
+iroh = "0.96"
+iroh-moq = { path = "../../third_party/iroh-live/iroh-moq" }
+moq-lite = "0.10.1"
+serde.workspace = true
+serde_json.workspace = true
+tokio = { version = "1", features = ["sync", "rt", "macros"] }
+tracing.workspace = true
+
+[dev-dependencies]
+blake3.workspace = true
+ec-crypto = { path = "../ec-crypto" }
+hex = "0.4"
diff --git a/crates/ec-moq/src/lib.rs b/crates/ec-moq/src/lib.rs
new file mode 100644
index 0000000..e198bb6
--- /dev/null
+++ b/crates/ec-moq/src/lib.rs
@@ -0,0 +1,832 @@
+//! Media over QUIC (MoQ) scaffolding.
+
+use anyhow::{anyhow, Context, Result};
+use bytes::Bytes;
+use ec_core::Manifest;
+use ec_iroh::DiscoveryConfig;
+use iroh::{protocol::Router, Endpoint, EndpointAddr, SecretKey};
+use moq_lite::{BroadcastConsumer, BroadcastProducer, Group, Track};
+use serde::{Deserialize, Serialize};
+use std::collections::HashMap;
+use std::fs;
+use std::path::PathBuf;
+use std::time::Duration;
+use tokio::sync::mpsc;
+use tokio::task::JoinHandle;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TrackName {
+    pub namespace: String,
+    pub name: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct GroupId(pub u64);
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ObjectId(pub u64);
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ObjectMeta {
+    pub created_unix_ms: u64,
+    pub content_type: String,
+    pub size_bytes: u64,
+    pub timing: Option<TimingMeta>,
+    pub encryption: Option<EncryptionMeta>,
+    pub chunk_hash: Option<String>,
+    pub chunk_hash_alg: Option<String>,
+    pub chunk_proof: Option<Vec<String>>,
+    pub chunk_proof_alg: Option<String>,
+    pub manifest_id: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct ObjectPayload {
+    pub meta: ObjectMeta,
+    pub data: Vec<u8>,
+}
+
+pub const DEFAULT_TRACK_NAME: &str = "chunks";
+pub const DEFAULT_MANIFEST_TRACK_NAME: &str = "manifests";
+
+pub trait Publisher {
+    fn publish_object(
+        &self,
+        track: &TrackName,
+        group: GroupId,
+        object: ObjectPayload,
+    ) -> Result<()>;
+}
+
+pub trait Subscriber {
+    fn subscribe_track(&self, track: &TrackName) -> Result<()>;
+}
+
+pub trait Relay {
+    fn announce_track(&self, track: &TrackName) -> Result<()>;
+    fn cache_object(&self, track: &TrackName, group: GroupId, object: ObjectPayload) -> Result<()>;
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TimingMeta {
+    pub chunk_index: u64,
+    pub chunk_start_27mhz: u64,
+    pub chunk_duration_27mhz: u64,
+    pub utc_start_unix: Option<i64>,
+    pub sync_status: String,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct EncryptionMeta {
+    pub alg: String,
+    pub key_id: String,
+    pub nonce_hex: String,
+}
+
+#[derive(Debug, Clone)]
+pub struct FileRelay {
+    root: PathBuf,
+}
+
+impl FileRelay {
+    pub fn new(root: impl Into<PathBuf>) -> Self {
+        Self { root: root.into() }
+    }
+
+    pub fn write_object(
+        &self,
+        track: &TrackName,
+        group: GroupId,
+        object_id: ObjectId,
+        object: &ObjectPayload,
+    ) -> Result<()> {
+        let base = self.object_dir(track, group, object_id);
+        fs::create_dir_all(&base)
+            .with_context(|| format!("failed to create {}", base.display()))?;
+
+        let data_path = base.join("data.bin");
+        let meta_path = base.join("meta.json");
+
+        fs::write(&data_path, &object.data)
+            .with_context(|| format!("failed to write {}", data_path.display()))?;
+        fs::write(&meta_path, serde_json::to_vec_pretty(&object.meta)?)
+            .with_context(|| format!("failed to write {}", meta_path.display()))?;
+
+        Ok(())
+    }
+
+    fn object_dir(&self, track: &TrackName, group: GroupId, object_id: ObjectId) -> PathBuf {
+        let namespace = sanitize_component(&track.namespace);
+        let name = sanitize_component(&track.name);
+        self.root
+            .join(namespace)
+            .join(name)
+            .join(format!("group-{}", group.0))
+            .join(format!("object-{}", object_id.0))
+    }
+}
+
+impl Relay for FileRelay {
+    fn announce_track(&self, _track: &TrackName) -> Result<()> {
+        Ok(())
+    }
+
+    fn cache_object(&self, track: &TrackName, group: GroupId, object: ObjectPayload) -> Result<()> {
+        self.write_object(track, group, ObjectId(0), &object)
+    }
+}
+
+fn sanitize_component(value: &str) -> String {
+    value
+        .chars()
+        .map(|c| match c {
+            'a'..='z' | '0'..='9' | '-' | '_' => c,
+            'A'..='Z' => c.to_ascii_lowercase(),
+            _ => '_',
+        })
+        .collect()
+}
+
+pub fn encode_object_frame(meta: &ObjectMeta, data: &[u8]) -> Result<Vec<u8>> {
+    let meta_bytes = serde_json::to_vec(meta)?;
+    let meta_len = u32::try_from(meta_bytes.len()).map_err(|_| anyhow!("object meta too large"))?;
+    let mut out = Vec::with_capacity(4 + meta_bytes.len() + data.len());
+    out.extend_from_slice(&meta_len.to_be_bytes());
+    out.extend_from_slice(&meta_bytes);
+    out.extend_from_slice(data);
+    Ok(out)
+}
+
+pub fn decode_object_frame(bytes: &[u8]) -> Result<ObjectPayload> {
+    if bytes.len() < 4 {
+        return Err(anyhow!("object frame too short"));
+    }
+    let meta_len = u32::from_be_bytes([bytes[0], bytes[1], bytes[2], bytes[3]]) as usize;
+    if bytes.len() < 4 + meta_len {
+        return Err(anyhow!("object frame missing metadata bytes"));
+    }
+    let meta = serde_json::from_slice(&bytes[4..4 + meta_len])?;
+    let data = bytes[4 + meta_len..].to_vec();
+    Ok(ObjectPayload { meta, data })
+}
+
+pub fn encode_manifest_frame(manifest: &Manifest) -> Result<Vec<u8>> {
+    Ok(serde_json::to_vec(manifest)?)
+}
+
+pub fn decode_manifest_frame(bytes: &[u8]) -> Result<Manifest> {
+    Ok(serde_json::from_slice(bytes)?)
+}
+
+#[derive(Debug)]
+pub struct MoqNode {
+    endpoint: Endpoint,
+    router: Router,
+    moq: iroh_moq::Moq,
+}
+
+impl MoqNode {
+    pub async fn bind(secret: Option<SecretKey>) -> Result<Self> {
+        let discovery = DiscoveryConfig::from_env()?;
+        Self::bind_with_discovery(secret, discovery).await
+    }
+
+    pub async fn bind_with_discovery(
+        secret: Option<SecretKey>,
+        discovery: DiscoveryConfig,
+    ) -> Result<Self> {
+        let endpoint = ec_iroh::build_endpoint(secret, discovery).await?;
+        let moq = iroh_moq::Moq::new(endpoint.clone());
+        let router = Router::builder(endpoint.clone())
+            .accept(iroh_moq::ALPN, moq.protocol_handler())
+            .spawn();
+        Ok(Self {
+            endpoint,
+            router,
+            moq,
+        })
+    }
+
+    pub fn endpoint(&self) -> &Endpoint {
+        &self.endpoint
+    }
+
+    pub fn endpoint_addr(&self) -> EndpointAddr {
+        self.router.endpoint().addr()
+    }
+
+    pub async fn publish_objects(
+        &self,
+        broadcast_name: impl Into<String>,
+        track_name: impl Into<String>,
+    ) -> Result<MoqPublisher> {
+        let broadcast_name = broadcast_name.into();
+        let track_name = track_name.into();
+        let mut broadcast = BroadcastProducer::default();
+        let track = broadcast.create_track(Track {
+            name: track_name.clone(),
+            priority: 0,
+        });
+        self.moq
+            .publish(broadcast_name.clone(), broadcast.clone())
+            .await?;
+        Ok(MoqPublisher {
+            broadcast_name,
+            track_name,
+            broadcast,
+            track,
+        })
+    }
+
+    /// Publish a broadcast containing multiple tracks, all created before publishing.
+    ///
+    /// This avoids subtle issues in some MoQ implementations where tracks added after the
+    /// initial publish are not reliably deliverable to subscribers.
+    pub async fn publish_track_set(
+        &self,
+        broadcast_name: impl Into<String>,
+        object_tracks: Vec<String>,
+        manifest_tracks: Vec<String>,
+    ) -> Result<MoqPublishSet> {
+        let broadcast_name = broadcast_name.into();
+        let mut broadcast = BroadcastProducer::default();
+
+        let mut object = HashMap::new();
+        for name in object_tracks {
+            let track = broadcast.create_track(Track {
+                name: name.clone(),
+                priority: 0,
+            });
+            object.insert(name, track);
+        }
+
+        let mut manifests = HashMap::new();
+        for name in manifest_tracks {
+            let track = broadcast.create_track(Track {
+                name: name.clone(),
+                priority: 0,
+            });
+            manifests.insert(name, track);
+        }
+
+        self.moq.publish(broadcast_name.clone(), broadcast).await?;
+        Ok(MoqPublishSet {
+            broadcast_name,
+            object,
+            manifests,
+        })
+    }
+
+    pub async fn subscribe_objects(
+        &self,
+        remote: EndpointAddr,
+        broadcast_name: impl Into<String>,
+        track_name: impl Into<String>,
+    ) -> Result<MoqObjectStream> {
+        let broadcast_name = broadcast_name.into();
+        let track_name = track_name.into();
+        let mut session = self.moq.connect(remote).await?;
+        let broadcast = session.subscribe(&broadcast_name).await?;
+        let track = subscribe_track(&broadcast, &track_name)?;
+        MoqObjectStream::spawn(session, track)
+    }
+
+    pub async fn subscribe_manifests(
+        &self,
+        remote: EndpointAddr,
+        broadcast_name: impl Into<String>,
+        track_name: impl Into<String>,
+    ) -> Result<MoqManifestStream> {
+        let broadcast_name = broadcast_name.into();
+        let track_name = track_name.into();
+        let mut session = self.moq.connect(remote).await?;
+        let broadcast = session.subscribe(&broadcast_name).await?;
+        let track = subscribe_track(&broadcast, &track_name)?;
+        MoqManifestStream::spawn(session, track)
+    }
+}
+
+pub struct MoqPublishSet {
+    broadcast_name: String,
+    object: HashMap<String, moq_lite::TrackProducer>,
+    manifests: HashMap<String, moq_lite::TrackProducer>,
+}
+
+impl MoqPublishSet {
+    pub fn publish_object(
+        &mut self,
+        track_name: &str,
+        group: GroupId,
+        object: ObjectPayload,
+    ) -> Result<()> {
+        let Some(track) = self.object.get_mut(track_name) else {
+            return Err(anyhow!("unknown object track {}", track_name));
+        };
+        let Some(mut group_writer) = track.create_group(Group { sequence: group.0 }) else {
+            return Err(anyhow!("group {} already published", group.0));
+        };
+        let frame = encode_object_frame(&object.meta, &object.data)?;
+        group_writer.write_frame(Bytes::from(frame));
+        group_writer.close();
+        Ok(())
+    }
+
+    pub fn publish_manifest(
+        &mut self,
+        track_name: &str,
+        sequence: u64,
+        manifest: &Manifest,
+    ) -> Result<()> {
+        let Some(track) = self.manifests.get_mut(track_name) else {
+            return Err(anyhow!("unknown manifest track {}", track_name));
+        };
+        let Some(mut group_writer) = track.create_group(Group { sequence }) else {
+            return Err(anyhow!("manifest group {} already published", sequence));
+        };
+        let frame = encode_manifest_frame(manifest)?;
+        group_writer.write_frame(Bytes::from(frame));
+        group_writer.close();
+        Ok(())
+    }
+
+    pub fn broadcast_name(&self) -> &str {
+        &self.broadcast_name
+    }
+}
+
+pub struct MoqPublisher {
+    broadcast_name: String,
+    track_name: String,
+    broadcast: BroadcastProducer,
+    track: moq_lite::TrackProducer,
+}
+
+impl MoqPublisher {
+    pub fn publish_object(&mut self, group: GroupId, object: ObjectPayload) -> Result<()> {
+        let Some(mut group_writer) = self.track.create_group(Group { sequence: group.0 }) else {
+            return Err(anyhow!("group {} already published", group.0));
+        };
+        let frame = encode_object_frame(&object.meta, &object.data)?;
+        group_writer.write_frame(Bytes::from(frame));
+        group_writer.close();
+        Ok(())
+    }
+
+    pub fn create_side_track(&mut self, track_name: impl Into<String>) -> Result<MoqSidePublisher> {
+        let track_name = track_name.into();
+        let track = self.broadcast.create_track(Track {
+            name: track_name.clone(),
+            priority: 0,
+        });
+        Ok(MoqSidePublisher { track_name, track })
+    }
+
+    pub fn create_manifest_track(
+        &mut self,
+        track_name: impl Into<String>,
+    ) -> Result<MoqManifestPublisher> {
+        let track_name = track_name.into();
+        let track = self.broadcast.create_track(Track {
+            name: track_name.clone(),
+            priority: 0,
+        });
+        Ok(MoqManifestPublisher { track_name, track })
+    }
+
+    pub fn broadcast_name(&self) -> &str {
+        &self.broadcast_name
+    }
+
+    pub fn track_name(&self) -> &str {
+        &self.track_name
+    }
+}
+
+pub struct MoqSidePublisher {
+    track_name: String,
+    track: moq_lite::TrackProducer,
+}
+
+impl MoqSidePublisher {
+    pub fn publish_object(&mut self, group: GroupId, object: ObjectPayload) -> Result<()> {
+        let Some(mut group_writer) = self.track.create_group(Group { sequence: group.0 }) else {
+            return Err(anyhow!("group {} already published", group.0));
+        };
+        let frame = encode_object_frame(&object.meta, &object.data)?;
+        group_writer.write_frame(Bytes::from(frame));
+        group_writer.close();
+        Ok(())
+    }
+
+    pub fn track_name(&self) -> &str {
+        &self.track_name
+    }
+}
+
+pub struct MoqManifestPublisher {
+    track_name: String,
+    track: moq_lite::TrackProducer,
+}
+
+impl MoqManifestPublisher {
+    pub fn publish_manifest(&mut self, sequence: u64, manifest: &Manifest) -> Result<()> {
+        let Some(mut group_writer) = self.track.create_group(Group { sequence }) else {
+            return Err(anyhow!("manifest group {} already published", sequence));
+        };
+        let frame = encode_manifest_frame(manifest)?;
+        group_writer.write_frame(Bytes::from(frame));
+        group_writer.close();
+        Ok(())
+    }
+
+    pub fn track_name(&self) -> &str {
+        &self.track_name
+    }
+}
+
+pub struct MoqObjectStream {
+    receiver: mpsc::Receiver<ObjectPayload>,
+    _task: JoinHandle<()>,
+    _session: iroh_moq::MoqSession,
+}
+
+impl MoqObjectStream {
+    fn spawn(session: iroh_moq::MoqSession, mut track: moq_lite::TrackConsumer) -> Result<Self> {
+        let (tx, rx) = mpsc::channel(32);
+        let task = tokio::spawn(async move {
+            loop {
+                let next_group = track.next_group().await;
+                let Some(mut group) = (match next_group {
+                    Ok(group) => group,
+                    Err(err) => {
+                        tracing::warn!("moq track error: {err:#}");
+                        break;
+                    }
+                }) else {
+                    break;
+                };
+
+                let mut buffer = Vec::new();
+                loop {
+                    match group.read_frame().await {
+                        Ok(Some(frame)) => buffer.extend_from_slice(&frame),
+                        Ok(None) => break,
+                        Err(err) => {
+                            tracing::warn!("moq group error: {err:#}");
+                            break;
+                        }
+                    }
+                }
+
+                if buffer.is_empty() {
+                    continue;
+                }
+                match decode_object_frame(&buffer) {
+                    Ok(object) => {
+                        if tx.send(object).await.is_err() {
+                            break;
+                        }
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to decode object frame: {err:#}");
+                    }
+                }
+            }
+        });
+        Ok(Self {
+            receiver: rx,
+            _task: task,
+            _session: session,
+        })
+    }
+
+    pub async fn recv(&mut self) -> Option<ObjectPayload> {
+        self.receiver.recv().await
+    }
+}
+
+pub struct MoqManifestStream {
+    receiver: mpsc::Receiver<Manifest>,
+    _task: JoinHandle<()>,
+    _session: iroh_moq::MoqSession,
+}
+
+impl MoqManifestStream {
+    fn spawn(session: iroh_moq::MoqSession, mut track: moq_lite::TrackConsumer) -> Result<Self> {
+        let (tx, rx) = mpsc::channel(8);
+        let task = tokio::spawn(async move {
+            loop {
+                let next_group = track.next_group().await;
+                let Some(mut group) = (match next_group {
+                    Ok(group) => group,
+                    Err(err) => {
+                        tracing::warn!("moq manifest track error: {err:#}");
+                        break;
+                    }
+                }) else {
+                    break;
+                };
+
+                let mut buffer = Vec::new();
+                loop {
+                    match group.read_frame().await {
+                        Ok(Some(frame)) => buffer.extend_from_slice(&frame),
+                        Ok(None) => break,
+                        Err(err) => {
+                            tracing::warn!("moq manifest group error: {err:#}");
+                            break;
+                        }
+                    }
+                }
+
+                if buffer.is_empty() {
+                    continue;
+                }
+                match decode_manifest_frame(&buffer) {
+                    Ok(manifest) => {
+                        if tx.send(manifest).await.is_err() {
+                            break;
+                        }
+                    }
+                    Err(err) => {
+                        tracing::warn!("failed to decode manifest frame: {err:#}");
+                    }
+                }
+            }
+        });
+        Ok(Self {
+            receiver: rx,
+            _task: task,
+            _session: session,
+        })
+    }
+
+    pub async fn recv(&mut self) -> Option<Manifest> {
+        self.receiver.recv().await
+    }
+}
+
+fn subscribe_track(broadcast: &BroadcastConsumer, name: &str) -> Result<moq_lite::TrackConsumer> {
+    let track = broadcast.subscribe_track(&Track::new(name));
+    Ok(track)
+}
+
+#[derive(Debug, Clone)]
+pub struct HlsWriter {
+    output_dir: PathBuf,
+    window: usize,
+    target_duration: f64,
+    init_filename: String,
+    segments: std::collections::VecDeque<HlsSegment>,
+}
+
+#[derive(Debug, Clone)]
+struct HlsSegment {
+    index: u64,
+    duration: f64,
+    filename: String,
+}
+
+impl HlsWriter {
+    pub fn new_cmaf(
+        output_dir: impl Into<PathBuf>,
+        target_duration: f64,
+        window: usize,
+    ) -> Result<Self> {
+        // CMAF-only writer: init.mp4 + segment_*.m4s + HLS playlist as a local compatibility artifact.
+        let output_dir = output_dir.into();
+        fs::create_dir_all(&output_dir)
+            .with_context(|| format!("failed to create {}", output_dir.display()))?;
+        Ok(Self {
+            output_dir,
+            window: window.max(1),
+            target_duration,
+            init_filename: "init.mp4".to_string(),
+            segments: std::collections::VecDeque::new(),
+        })
+    }
+
+    pub fn write_init_segment(&mut self, data: &[u8]) -> Result<PathBuf> {
+        let path = self.output_dir.join(&self.init_filename);
+        fs::write(&path, data).with_context(|| format!("failed to write {}", path.display()))?;
+        self.write_playlist()?;
+        Ok(path)
+    }
+
+    pub fn write_segment(&mut self, index: u64, duration: f64, data: &[u8]) -> Result<PathBuf> {
+        let filename = format!("segment_{index:06}.m4s");
+        let path = self.output_dir.join(&filename);
+        fs::write(&path, data).with_context(|| format!("failed to write {}", path.display()))?;
+
+        self.segments.push_back(HlsSegment {
+            index,
+            duration,
+            filename,
+        });
+        while self.segments.len() > self.window {
+            self.segments.pop_front();
+        }
+
+        self.write_playlist()?;
+        Ok(path)
+    }
+
+    fn write_playlist(&self) -> Result<()> {
+        let mut lines = Vec::new();
+        lines.push("#EXTM3U".to_string());
+        lines.push("#EXT-X-VERSION:7".to_string());
+        lines.push("#EXT-X-INDEPENDENT-SEGMENTS".to_string());
+        lines.push(format!("#EXT-X-MAP:URI=\"{}\"", self.init_filename));
+        let target = self.target_duration.ceil().max(1.0) as u64;
+        lines.push(format!("#EXT-X-TARGETDURATION:{target}"));
+        if let Some(first) = self.segments.front() {
+            lines.push(format!("#EXT-X-MEDIA-SEQUENCE:{}", first.index));
+        }
+        for seg in &self.segments {
+            lines.push(format!("#EXTINF:{:.3},", seg.duration));
+            lines.push(seg.filename.clone());
+        }
+        let playlist_path = self.output_dir.join("index.m3u8");
+        fs::write(&playlist_path, lines.join("\n") + "\n")
+            .with_context(|| format!("failed to write {}", playlist_path.display()))?;
+        Ok(())
+    }
+}
+
+pub fn chunk_duration_secs(meta: &ObjectMeta, fallback: Duration) -> f64 {
+    if let Some(timing) = &meta.timing {
+        let secs = timing.chunk_duration_27mhz as f64 / 27_000_000.0;
+        if secs > 0.0 {
+            return secs;
+        }
+    }
+    fallback.as_secs_f64()
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+    use std::env;
+
+    #[test]
+    fn sanitize_component_is_stable() {
+        assert_eq!(sanitize_component("Hello World!"), "hello_world_");
+        assert_eq!(sanitize_component("a-b_C9"), "a-b_c9");
+    }
+
+    #[test]
+    fn object_frame_roundtrip() {
+        let meta = ObjectMeta {
+            created_unix_ms: 1,
+            content_type: "application/octet-stream".to_string(),
+            size_bytes: 3,
+            timing: Some(TimingMeta {
+                chunk_index: 7,
+                chunk_start_27mhz: 0,
+                chunk_duration_27mhz: 54_000_000,
+                utc_start_unix: None,
+                sync_status: "synthetic".to_string(),
+            }),
+            encryption: None,
+            chunk_hash: Some("00".repeat(32)),
+            chunk_hash_alg: Some("blake3".to_string()),
+            chunk_proof: Some(vec!["00".repeat(32)]),
+            chunk_proof_alg: Some("merkle+blake3".to_string()),
+            manifest_id: Some("m".to_string()),
+        };
+        let data = b"abc".to_vec();
+        let frame = encode_object_frame(&meta, &data).unwrap();
+        let decoded = decode_object_frame(&frame).unwrap();
+        assert_eq!(decoded.data, data);
+        assert_eq!(decoded.meta.created_unix_ms, meta.created_unix_ms);
+        assert_eq!(
+            decoded.meta.timing.as_ref().unwrap().chunk_index,
+            meta.timing.as_ref().unwrap().chunk_index
+        );
+        assert_eq!(decoded.meta.manifest_id, meta.manifest_id);
+    }
+
+    #[test]
+    fn decode_rejects_short_frame() {
+        assert!(decode_object_frame(&[]).is_err());
+        assert!(decode_object_frame(&[0, 0, 0]).is_err());
+    }
+
+    #[test]
+    fn manifest_frame_roundtrip() {
+        let manifest = ec_core::Manifest {
+            body: ec_core::ManifestBody {
+                stream_id: ec_core::StreamId("s".to_string()),
+                epoch_id: "e".to_string(),
+                chunk_duration_ms: 2000,
+                total_chunks: 1,
+                chunk_start_index: 0,
+                encoder_profile_id: "p".to_string(),
+                merkle_root: "00".repeat(32),
+                created_unix_ms: 1,
+                metadata: Vec::new(),
+                chunk_hashes: vec!["11".repeat(32)],
+                variants: None,
+            },
+            manifest_id: "m".to_string(),
+            signatures: Vec::new(),
+        };
+        let bytes = encode_manifest_frame(&manifest).unwrap();
+        let decoded = decode_manifest_frame(&bytes).unwrap();
+        assert_eq!(decoded.manifest_id, "m");
+        assert_eq!(decoded.body.epoch_id, "e");
+    }
+
+    #[test]
+    fn manifest_frame_signed_roundtrip_verifies() {
+        let prev = env::var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY").ok();
+        env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", "11".repeat(32));
+        let keypair = ec_crypto::load_manifest_keypair_from_env()
+            .expect("load should not error")
+            .expect("keypair should exist");
+
+        let chunk_hashes = vec![blake3::hash(b"chunk0").to_hex().to_string()];
+        let merkle_root = ec_core::merkle_root_from_hashes(&chunk_hashes).unwrap();
+        let body = ec_core::ManifestBody {
+            stream_id: ec_core::StreamId("s".to_string()),
+            epoch_id: "e".to_string(),
+            chunk_duration_ms: 2000,
+            total_chunks: 1,
+            chunk_start_index: 0,
+            encoder_profile_id: "p".to_string(),
+            merkle_root,
+            created_unix_ms: 1,
+            metadata: Vec::new(),
+            chunk_hashes,
+            variants: None,
+        };
+        let manifest_id = body.manifest_id().unwrap();
+        let sig = ec_crypto::sign_manifest_id(&manifest_id, &keypair);
+        assert!(ec_crypto::verify_manifest_signature(&manifest_id, &sig));
+
+        let manifest = ec_core::Manifest {
+            body,
+            manifest_id: manifest_id.clone(),
+            signatures: vec![sig],
+        };
+        let bytes = encode_manifest_frame(&manifest).unwrap();
+        let decoded = decode_manifest_frame(&bytes).unwrap();
+        assert_eq!(decoded.manifest_id, manifest_id);
+        assert_eq!(decoded.signatures.len(), 1);
+        assert!(ec_crypto::verify_manifest_signature(
+            &decoded.manifest_id,
+            &decoded.signatures[0]
+        ));
+
+        match prev {
+            Some(value) => env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", value),
+            None => env::remove_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY"),
+        }
+    }
+
+    #[test]
+    fn object_frame_encrypt_decrypt_roundtrip_and_hash_matches_plaintext() {
+        let stream_id = "ec/stream/v1/source/test/device-a/channel-b";
+        let chunk_index = 7u64;
+        let plaintext = b"hello every.channel";
+        let expected_hash = blake3::hash(plaintext).to_hex().to_string();
+        let enc = ec_crypto::encrypt_stream_data(stream_id, chunk_index, plaintext, None);
+
+        let meta = ObjectMeta {
+            created_unix_ms: 1,
+            content_type: "application/octet-stream".to_string(),
+            size_bytes: enc.ciphertext.len() as u64,
+            timing: Some(TimingMeta {
+                chunk_index,
+                chunk_start_27mhz: 0,
+                chunk_duration_27mhz: 54_000_000,
+                utc_start_unix: None,
+                sync_status: "synthetic".to_string(),
+            }),
+            encryption: Some(EncryptionMeta {
+                alg: enc.alg.to_string(),
+                key_id: stream_id.to_string(),
+                nonce_hex: hex::encode(enc.nonce),
+            }),
+            chunk_hash: Some(expected_hash.clone()),
+            chunk_hash_alg: Some("blake3".to_string()),
+            chunk_proof: None,
+            chunk_proof_alg: None,
+            manifest_id: None,
+        };
+
+        let frame = encode_object_frame(&meta, &enc.ciphertext).unwrap();
+        let decoded = decode_object_frame(&frame).unwrap();
+        let out = ec_crypto::decrypt_stream_data(stream_id, chunk_index, &decoded.data, None)
+            .expect("decrypt should succeed");
+        assert_eq!(out, plaintext);
+        assert_eq!(
+            decoded.meta.chunk_hash.as_deref(),
+            Some(expected_hash.as_str())
+        );
+        assert_eq!(
+            blake3::hash(&out).to_hex().to_string(),
+            decoded.meta.chunk_hash.unwrap()
+        );
+    }
+}
diff --git a/crates/ec-node/Cargo.toml b/crates/ec-node/Cargo.toml
new file mode 100644
index 0000000..5f89eae
--- /dev/null
+++ b/crates/ec-node/Cargo.toml
@@ -0,0 +1,35 @@
+[package]
+name = "ec-node"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+blake3.workspace = true
+clap.workspace = true
+ec-core = { path = "../ec-core" }
+ec-crypto = { path = "../ec-crypto" }
+ec-direct = { path = "../ec-direct" }
+ec-moq = { path = "../ec-moq" }
+ec-chopper = { path = "../ec-chopper" }
+ec-hdhomerun = { path = "../ec-hdhomerun" }
+ec-iroh = { path = "../ec-iroh" }
+ec-linux-iptv = { path = "../ec-linux-iptv" }
+hex = "0.4"
+iroh = "0.96"
+just-webrtc = "0.2"
+bytes = "1"
+reqwest = { version = "0.12", default-features = false, features = ["json", "rustls-tls"] }
+urlencoding = "2"
+serde.workspace = true
+serde_json.workspace = true
+tokio = { version = "1", features = ["rt-multi-thread", "macros"] }
+tokio-tungstenite = { version = "0.24", default-features = false, features = ["connect", "rustls-tls-webpki-roots"] }
+futures-util = "0.3"
+tracing.workspace = true
+tracing-subscriber.workspace = true
+
+[dev-dependencies]
+headless_chrome = "1"
+which = "6"
diff --git a/crates/ec-node/src/main.rs b/crates/ec-node/src/main.rs
new file mode 100644
index 0000000..a5d2342
--- /dev/null
+++ b/crates/ec-node/src/main.rs
@@ -0,0 +1,4193 @@
+//! Node runner: orchestrates ingest, chunking, and MoQ publication.
+
+mod source;
+
+use anyhow::{anyhow, Context, Result};
+use blake3;
+use clap::ValueEnum;
+use clap::{Parser, Subcommand};
+use ec_chopper::{build_manifest_body_for_chunks, TsChunk};
+use ec_core::{
+    merkle_proof_for_index, verify_merkle_proof, Manifest, ManifestSummary, ManifestVariant,
+    MoqStreamDescriptor, StreamCatalogEntry, StreamDescriptor, StreamEncryptionInfo, StreamId,
+    StreamKey, StreamMetadata,
+};
+use ec_crypto::{
+    decrypt_stream_data, encrypt_stream_data, load_manifest_keypair_from_env, sign_manifest_id,
+    verify_manifest_signature, ENCRYPTION_ALG,
+};
+use ec_direct::{decode_direct_link, encode_direct_link, DirectCodeV1};
+use ec_iroh::DiscoveryConfig;
+use ec_moq::{
+    chunk_duration_secs, decode_object_frame, encode_object_frame, FileRelay, GroupId, HlsWriter,
+    MoqNode, MoqPublishSet, ObjectId, ObjectMeta, ObjectPayload, TimingMeta, TrackName,
+    DEFAULT_MANIFEST_TRACK_NAME, DEFAULT_TRACK_NAME,
+};
+use iroh::Watcher;
+use just_webrtc::types::{DataChannelOptions, ICEServer, PeerConfiguration, PeerConnectionState};
+use just_webrtc::{DataChannelExt, PeerConnectionBuilder, PeerConnectionExt};
+use source::{HdhrSource, HlsMode, HlsSource, LinuxDvbSource, StreamSource, TsSource};
+use std::collections::{BTreeMap, HashMap, HashSet};
+use std::fs;
+use std::fs::File;
+use std::future::Future;
+use std::io::Read;
+use std::path::{Path, PathBuf};
+use std::process::{Command, Stdio};
+use std::str::FromStr;
+use std::sync::{Arc, Mutex};
+use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
+use tokio_tungstenite::tungstenite::Message as WsMessage;
+use futures_util::{SinkExt, StreamExt};
+
+const DIRECT_WIRE_TAG_FRAME: u8 = 0x00;
+const DIRECT_WIRE_TAG_STREAM: u8 = 0x01;
+const DIRECT_WIRE_TAG_PING: u8 = 0x02;
+const DIRECT_HEARTBEAT_TIMEOUT: Duration = Duration::from_secs(8);
+// Conservatively under typical SCTP data channel max message sizes.
+const DIRECT_WIRE_CHUNK_BYTES: usize = 16 * 1024;
+use tokio::sync::mpsc;
+use tokio::sync::RwLock;
+
+#[derive(Parser, Debug)]
+#[command(name = "ec-node")]
+#[command(about = "every.channel node runner", long_about = None)]
+struct Cli {
+    #[command(subcommand)]
+    command: Commands,
+}
+
+#[derive(Subcommand, Debug)]
+enum Commands {
+    /// Ingest a source and publish MoQ objects into a local relay directory.
+    Ingest(IngestArgs),
+    /// Ingest a source and publish via MoQ over iroh.
+    MoqPublish(MoqPublishArgs),
+    /// Subscribe to a MoQ stream and write HLS segments locally.
+    MoqSubscribe(MoqSubscribeArgs),
+    /// Publish and subscribe to a MoQ stream locally, verifying chunk hashes.
+    MoqSelftest(MoqSelftestArgs),
+    /// Publish a stream over a direct WebRTC data channel (manual copy/paste connect code).
+    DirectPublish(DirectPublishArgs),
+    /// Subscribe to a direct WebRTC stream (directory or offer link) and optionally capture an .mp4 proof.
+    DirectSubscribe(DirectSubscribeArgs),
+    /// Publish a stream to the global one-to-many relay (`/api/stream/ws`) and keep the directory entry live.
+    WsPublish(WsPublishArgs),
+    /// Subscribe to the global one-to-many relay (`/api/stream/ws`) and capture CMAF fragments + an mp4 proof.
+    WsSubscribe(WsSubscribeArgs),
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, ValueEnum)]
+enum EncodeMode {
+    /// Publish/subscribe CMAF-style fragmented MP4 segments (HLS fMP4) encoded with x264/AAC.
+    Cmaf,
+}
+
+#[derive(Debug, Clone, Copy, PartialEq, Eq, ValueEnum)]
+enum CmafLadderPreset {
+    /// 3-rung ladder: 1080p@6000k, 720p@3000k, 480p@1200k (CBR-ish).
+    Hd3,
+}
+
+#[derive(Parser, Debug)]
+struct IngestArgs {
+    /// Output directory for temporary chunks.
+    #[arg(long, default_value = "./tmp/chunks")]
+    chunk_dir: PathBuf,
+    /// Relay directory to write MoQ objects.
+    #[arg(long, default_value = "./tmp/relay")]
+    relay_dir: PathBuf,
+    /// Chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// Maximum number of chunks to write.
+    #[arg(long)]
+    max_chunks: Option<usize>,
+    /// Optional stream id override.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Optional network secret (hex) for stream encryption.
+    #[arg(long)]
+    network_secret: Option<String>,
+    /// Enable deterministic transcode before chunking.
+    #[arg(long)]
+    deterministic: bool,
+    #[command(subcommand)]
+    source: IngestSource,
+}
+
+#[derive(Parser, Debug)]
+struct MoqPublishArgs {
+    /// Output directory for temporary chunks.
+    #[arg(long, default_value = "./tmp/chunks")]
+    chunk_dir: PathBuf,
+    /// Chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// Maximum number of chunks to write.
+    #[arg(long)]
+    max_chunks: Option<usize>,
+    /// Optional stream id override.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Optional network secret (hex) for stream encryption.
+    #[arg(long)]
+    network_secret: Option<String>,
+    /// Enable deterministic transcode before chunking.
+    #[arg(long)]
+    deterministic: bool,
+    /// Broadcast name override (defaults to stream id).
+    #[arg(long)]
+    broadcast_name: Option<String>,
+    /// Track name override.
+    #[arg(long, default_value = DEFAULT_TRACK_NAME)]
+    track_name: String,
+    /// Publish chunk objects on the main track.
+    #[arg(long, default_value_t = true, action = clap::ArgAction::Set)]
+    publish_chunks: bool,
+    /// Publish manifests alongside chunks.
+    #[arg(long)]
+    publish_manifests: bool,
+    /// Track name for manifest frames.
+    #[arg(long, default_value = DEFAULT_MANIFEST_TRACK_NAME)]
+    manifest_track: String,
+    /// Number of chunks per manifest epoch.
+    #[arg(long, default_value_t = 1)]
+    epoch_chunks: usize,
+    /// Optional iroh secret key (hex).
+    #[arg(long)]
+    iroh_secret: Option<String>,
+    /// Discovery modes to enable (comma-separated: dht, mdns, dns).
+    #[arg(long)]
+    discovery: Option<String>,
+    /// Announce catalog entries over iroh-gossip (requires peers).
+    #[arg(long)]
+    announce: bool,
+    /// Gossip peers to connect to (repeatable).
+    #[arg(long)]
+    gossip_peer: Vec<String>,
+    /// Optional startup delay (ms) after binding/publishing tracks, before ingest begins.
+    /// Useful for E2E tests that need time to connect subscribers.
+    #[arg(long)]
+    startup_delay_ms: Option<u64>,
+    /// Encoding/container mode.
+    #[arg(long, value_enum, default_value_t = EncodeMode::Cmaf)]
+    encode: EncodeMode,
+    /// Track name for CMAF init segment objects.
+    #[arg(long, default_value = "init")]
+    init_track: String,
+    /// Publish a CMAF ladder (multiple quality variants) using x264/AAC.
+    #[arg(long, value_enum)]
+    cmaf_ladder: Option<CmafLadderPreset>,
+    #[command(subcommand)]
+    source: IngestSource,
+}
+
+#[derive(Parser, Debug)]
+struct MoqSubscribeArgs {
+    /// Output directory for HLS segments.
+    #[arg(long, default_value = "./tmp/moq-hls")]
+    output_dir: PathBuf,
+    /// Fallback chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// HLS window size.
+    #[arg(long, default_value_t = 6)]
+    window: usize,
+    /// Optional stream id override (for decryption).
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Optional network secret (hex) for stream decryption.
+    #[arg(long)]
+    network_secret: Option<String>,
+    /// Remote endpoint address (iroh EndpointAddr).
+    #[arg(long)]
+    remote: String,
+    /// Optional remote endpoint address to fetch manifests from.
+    /// Defaults to `--remote` when not provided.
+    #[arg(long)]
+    remote_manifests: Option<String>,
+    /// Broadcast name to subscribe to.
+    #[arg(long)]
+    broadcast_name: String,
+    /// Track name to subscribe to.
+    #[arg(long, default_value = DEFAULT_TRACK_NAME)]
+    track_name: String,
+    /// Subscribe to manifest frames.
+    #[arg(long)]
+    subscribe_manifests: bool,
+    /// Require a manifest to accept chunk data.
+    #[arg(long)]
+    require_manifest: bool,
+    /// Track name for manifest frames.
+    #[arg(long, default_value = DEFAULT_MANIFEST_TRACK_NAME)]
+    manifest_track: String,
+    /// Allowed manifest signer ids (comma-separated).
+    #[arg(long)]
+    manifest_signers: Option<String>,
+    /// Maximum bytes per second to accept (anti-junk).
+    #[arg(long)]
+    max_bytes_per_sec: Option<u64>,
+    /// Maximum burst bytes before throttling.
+    #[arg(long)]
+    max_bytes_burst: Option<u64>,
+    /// Maximum invalid chunks before disconnect.
+    #[arg(long, default_value_t = 1)]
+    max_invalid_chunks: u32,
+    /// Stop after writing this many segments (useful for E2E tests).
+    #[arg(long)]
+    stop_after: Option<u64>,
+    /// Optional iroh secret key (hex).
+    #[arg(long)]
+    iroh_secret: Option<String>,
+    /// Discovery modes to enable (comma-separated: dht, mdns, dns).
+    #[arg(long)]
+    discovery: Option<String>,
+    /// Container mode for local HLS output.
+    #[arg(long, value_enum, default_value_t = EncodeMode::Cmaf)]
+    container: EncodeMode,
+    /// Track name to subscribe to for CMAF init segment objects.
+    #[arg(long, default_value = "init")]
+    init_track: String,
+    /// Subscribe to the init segment track (CMAF).
+    #[arg(long)]
+    subscribe_init: bool,
+    /// Write raw CMAF init+segments (no HLS playlist) to `--output-dir`.
+    #[arg(long)]
+    raw_cmaf: bool,
+}
+
+#[derive(Parser, Debug)]
+struct MoqSelftestArgs {
+    /// Input TS file or URL (e.g. http://HDHR_HOST/auto/v8.1).
+    input: String,
+    /// Output directory for temporary chunks.
+    #[arg(long, default_value = "./tmp/moq-selftest")]
+    chunk_dir: PathBuf,
+    /// Chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// Maximum number of chunks to publish/verify.
+    #[arg(long, default_value_t = 8)]
+    max_chunks: usize,
+    /// Optional stream id override.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Track name override.
+    #[arg(long, default_value = DEFAULT_TRACK_NAME)]
+    track_name: String,
+    /// Discovery modes to enable (comma-separated: dht, mdns, dns).
+    #[arg(long)]
+    discovery: Option<String>,
+}
+
+#[derive(Parser, Debug)]
+struct DirectPublishArgs {
+    /// Global stream id (used for directory/signaling). If omitted, a fresh id is generated.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Human-friendly title (used for directory listing).
+    #[arg(long, default_value = "Live channel")]
+    title: String,
+    /// Optional directory base URL (e.g. https://every.channel). When set, the publisher
+    /// announces the offer to `/api/announce` and polls `/api/answer`.
+    #[arg(long)]
+    directory_url: Option<String>,
+    /// Offer TTL (ms) when announcing to the directory.
+    #[arg(long, default_value_t = 20000)]
+    announce_ttl_ms: u64,
+    /// Output directory for temporary chunks.
+    #[arg(long, default_value = "./tmp/direct-chunks")]
+    chunk_dir: PathBuf,
+    /// Chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// Maximum number of media segments to send.
+    #[arg(long, default_value_t = 30)]
+    max_segments: usize,
+    /// Optional answer code/link to avoid interactive stdin.
+    #[arg(long)]
+    answer: Option<String>,
+    /// How long to wait for a browser answer when using `--directory-url` or stdin (seconds).
+    /// Set to 0 to wait indefinitely.
+    #[arg(long, default_value_t = 900)]
+    answer_timeout_secs: u64,
+    /// Ingest source.
+    #[command(subcommand)]
+    source: IngestSource,
+}
+
+#[derive(Parser, Debug)]
+struct DirectSubscribeArgs {
+    /// Directory base URL (e.g. https://every.channel). Used to locate offers by stream_id
+    /// and to POST answers back to the publisher.
+    #[arg(long, default_value = "https://every.channel")]
+    directory_url: String,
+    /// Stream id to locate in the directory.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Direct offer link/code to use instead of looking up a stream in the directory.
+    #[arg(long)]
+    offer: Option<String>,
+    /// Output directory for captured CMAF fragments (init+segments) and index.m3u8.
+    #[arg(long, default_value = "./tmp/direct-subscribe")]
+    out_dir: PathBuf,
+    /// Maximum number of media segments to capture (init not counted).
+    #[arg(long, default_value_t = 12)]
+    max_segments: usize,
+    /// Optional time limit (seconds). When set, capture stops after this duration even if `--max-segments` is not reached.
+    #[arg(long)]
+    duration_secs: Option<u64>,
+    /// If set, remux the captured playlist to this mp4 path (best-effort, `ffmpeg -c copy`).
+    #[arg(long)]
+    mp4: Option<PathBuf>,
+}
+
+#[derive(Parser, Debug)]
+struct WsPublishArgs {
+    /// Global stream id (used for directory listing + relay instance key). If omitted, a fresh id is generated.
+    #[arg(long)]
+    stream_id: Option<String>,
+    /// Human-friendly title (used for directory listing).
+    #[arg(long, default_value = "Live channel")]
+    title: String,
+    /// Directory base URL (e.g. https://every.channel). Used for listing at `/api/announce`,
+    /// and as the base for relay websocket URL (`/api/stream/ws`).
+    #[arg(long, default_value = "https://every.channel")]
+    directory_url: String,
+    /// Offer TTL (ms) when announcing to the directory.
+    #[arg(long, default_value_t = 20000)]
+    announce_ttl_ms: u64,
+    /// Output directory for temporary chunks.
+    #[arg(long, default_value = "./tmp/ws-chunks")]
+    chunk_dir: PathBuf,
+    /// Chunk duration in ms.
+    #[arg(long, default_value_t = 2000)]
+    chunk_ms: u64,
+    /// Maximum number of media segments to send (init not counted). Set high for "run forever" behavior.
+    #[arg(long, default_value_t = 1_000_000)]
+    max_segments: usize,
+    /// Ingest source.
+    #[command(subcommand)]
+    source: IngestSource,
+}
+
+#[derive(Parser, Debug)]
+struct WsSubscribeArgs {
+    /// Directory base URL (e.g. https://every.channel). Used for relay websocket URL (`/api/stream/ws`).
+    #[arg(long, default_value = "https://every.channel")]
+    directory_url: String,
+    /// Stream id to subscribe to.
+    #[arg(long)]
+    stream_id: String,
+    /// Output directory for captured CMAF fragments (init+segments) and index.m3u8.
+    #[arg(long, default_value = "./tmp/ws-subscribe")]
+    out_dir: PathBuf,
+    /// Maximum number of media segments to capture (init not counted).
+    #[arg(long, default_value_t = 12)]
+    max_segments: usize,
+    /// Optional time limit (seconds). When set, capture stops after this duration even if `--max-segments` is not reached.
+    #[arg(long)]
+    duration_secs: Option<u64>,
+    /// If set, remux the captured playlist to this mp4 path (best-effort, `ffmpeg -c copy`).
+    #[arg(long)]
+    mp4: Option<PathBuf>,
+}
+
+#[derive(Subcommand, Debug)]
+enum IngestSource {
+    /// Ingest from an HDHomeRun device.
+    Hdhr {
+        /// Hostname or IP (e.g. 192.168.1.10). If omitted, auto-discover.
+        #[arg(long)]
+        host: Option<String>,
+        /// Device ID (uses <deviceid>.local when host is omitted).
+        #[arg(long)]
+        device_id: Option<String>,
+        /// Channel number (e.g. 8.1).
+        #[arg(long)]
+        channel: Option<String>,
+        /// Channel name (e.g. KQED).
+        #[arg(long)]
+        name: Option<String>,
+        /// Prefer mDNS (hdhomerun.local) before UDP discovery.
+        #[arg(long)]
+        prefer_mdns: bool,
+    },
+    /// Ingest from an HLS playlist URL.
+    Hls {
+        /// HLS playlist URL.
+        url: String,
+        /// Ingest mode (passthrough, remux, transcode).
+        #[arg(long, value_enum, default_value_t = HlsMode::Passthrough)]
+        mode: HlsMode,
+    },
+    /// Ingest from a Linux DVB device.
+    LinuxDvb {
+        /// DVB adapter index.
+        #[arg(long, default_value_t = 0)]
+        adapter: u32,
+        /// DVR device index.
+        #[arg(long, default_value_t = 0)]
+        dvr: u32,
+        /// Optional tune command (repeat for each arg).
+        #[arg(long)]
+        tune_cmd: Vec<String>,
+        /// Optional tune wait (ms).
+        #[arg(long)]
+        tune_wait_ms: Option<u64>,
+    },
+    /// Ingest from a raw TS file or URL.
+    Ts {
+        /// Input TS file or URL.
+        input: String,
+    },
+}
+
+fn main() -> Result<()> {
+    // Keep stdout reserved for machine-readable output (endpoint addr, etc).
+    tracing_subscriber::fmt()
+        .with_writer(std::io::stderr)
+        .init();
+    let cli = Cli::parse();
+
+    match cli.command {
+        Commands::Ingest(args) => ingest(args)?,
+        Commands::MoqPublish(args) => run_async(moq_publish(args))?,
+        Commands::MoqSubscribe(args) => run_async(moq_subscribe(args))?,
+        Commands::MoqSelftest(args) => run_async(moq_selftest(args))?,
+        Commands::DirectPublish(args) => run_async(direct_publish(args))?,
+        Commands::DirectSubscribe(args) => run_async(direct_subscribe(args))?,
+        Commands::WsPublish(args) => run_async(ws_publish(args))?,
+        Commands::WsSubscribe(args) => run_async(ws_subscribe(args))?,
+    }
+
+    Ok(())
+}
+
+fn run_async<F>(future: F) -> Result<()>
+where
+    F: Future<Output = Result<()>>,
+{
+    let runtime = tokio::runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()?;
+    runtime.block_on(future)
+}
+
+fn ingest(args: IngestArgs) -> Result<()> {
+    fs::create_dir_all(&args.chunk_dir)
+        .with_context(|| format!("failed to create {}", args.chunk_dir.display()))?;
+
+    let deterministic = deterministic_enabled(args.deterministic);
+    let (source, _needs_transcode): (Box<dyn StreamSource>, bool) = match args.source {
+        IngestSource::Hls { url, mut mode } => {
+            if deterministic {
+                mode = HlsMode::Transcode;
+            }
+            (Box::new(HlsSource { url, mode }), false)
+        }
+        IngestSource::Hdhr {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        } => (
+            Box::new(HdhrSource {
+                host,
+                device_id,
+                channel,
+                name,
+                prefer_mdns,
+            }),
+            deterministic,
+        ),
+        IngestSource::LinuxDvb {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        } => (
+            Box::new(LinuxDvbSource {
+                adapter,
+                dvr,
+                tune_cmd,
+                tune_wait_ms,
+            }),
+            deterministic,
+        ),
+        IngestSource::Ts { input } => (Box::new(TsSource { input }), deterministic),
+    };
+
+    let source_id = source.source_id();
+    let source_id_for_stream = source_id.clone();
+    let reader = source.open_stream()?;
+    let encoder_profile_id = if deterministic {
+        "deterministic-h264-aac".to_string()
+    } else {
+        // NOTE: We still normalize into CMAF for interoperability, even when determinism is off.
+        "h264-aac".to_string()
+    };
+
+    // CMAF-only: segment into init.mp4 + segment_*.m4s via ffmpeg.
+    let out_dir = args.chunk_dir.join("cmaf");
+    let (init_path, segments) = chunk_stream_cmaf_ffmpeg(
+        reader,
+        &out_dir,
+        args.chunk_ms,
+        args.max_chunks.unwrap_or(usize::MAX),
+        deterministic,
+    )?;
+    let mut chunk_hashes = Vec::with_capacity(1 + segments.len());
+    // Chunk index 0 is always init.mp4; segments are 1..N.
+    let (init_bytes, init_hash) = read_chunk_bytes_and_hash(&init_path)?;
+    chunk_hashes.push(init_hash);
+    let mut segment_meta = Vec::with_capacity(segments.len());
+    for seg_path in &segments {
+        let (bytes, hash) = read_chunk_bytes_and_hash(seg_path)?;
+        chunk_hashes.push(hash.clone());
+        segment_meta.push((seg_path.clone(), bytes, hash));
+    }
+    let chunk_start_index = 0u64;
+    let created_unix_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis() as u64;
+    let relay = FileRelay::new(args.relay_dir);
+    let track = TrackName {
+        namespace: "every.channel".to_string(),
+        name: args.stream_id.unwrap_or_else(|| {
+            StreamKey {
+                version: 1,
+                broadcast: None,
+                source: Some(source_id_for_stream),
+                profile: Some(format!("chunk-{}ms", args.chunk_ms)),
+                variant: None,
+            }
+            .to_stream_id()
+            .0
+        }),
+    };
+    let stream_id = StreamId(track.name.clone());
+    let manifest_payload = build_manifest(
+        stream_id,
+        format!("epoch-{created_unix_ms}"),
+        args.chunk_ms,
+        chunk_start_index,
+        encoder_profile_id,
+        created_unix_ms,
+        vec![StreamMetadata {
+            key: "source_kind".to_string(),
+            value: source_id.kind.clone(),
+        }],
+        chunk_hashes,
+    )?;
+    let manifest_id = manifest_payload.manifest_id.clone();
+    let manifest_path = args.chunk_dir.join("manifest.json");
+    fs::write(
+        &manifest_path,
+        serde_json::to_vec_pretty(&manifest_payload)?,
+    )?;
+
+    let network_secret = parse_network_secret(args.network_secret)?;
+
+    // Publish init at chunk_index 0 to avoid colliding with segment_000000.
+    publish_chunk_file(
+        &relay,
+        &track,
+        TsChunk {
+            index: 0,
+            path: init_path,
+            timing: ec_chopper::ChunkTiming {
+                chunk_index: 0,
+                chunk_start_27mhz: None,
+                chunk_duration_27mhz: 0,
+                utc_start_unix: None,
+                sync_status: "init".to_string(),
+            },
+        },
+        "video/mp4",
+        Some(init_bytes),
+        network_secret.as_deref(),
+        Some(&manifest_id),
+    )?;
+    for (i, (seg_path, bytes, _hash)) in segment_meta.into_iter().enumerate() {
+        let chunk_index = (i as u64) + 1;
+        publish_chunk_file(
+            &relay,
+            &track,
+            TsChunk {
+                index: chunk_index,
+                path: seg_path,
+                timing: ec_chopper::ChunkTiming {
+                    chunk_index,
+                    chunk_start_27mhz: None,
+                    chunk_duration_27mhz: args.chunk_ms * 27_000,
+                    utc_start_unix: None,
+                    sync_status: "cmaf".to_string(),
+                },
+            },
+            "video/iso.segment",
+            Some(bytes),
+            network_secret.as_deref(),
+            Some(&manifest_id),
+        )?;
+    }
+
+    Ok(())
+}
+
+fn publish_chunk_file(
+    relay: &FileRelay,
+    track: &TrackName,
+    chunk: TsChunk,
+    content_type: &str,
+    data_override: Option<Vec<u8>>,
+    network_secret: Option<&[u8]>,
+    manifest_id: Option<&str>,
+) -> Result<()> {
+    let (data, chunk_hash) = match data_override {
+        Some(bytes) => {
+            let hash = blake3::hash(&bytes).to_hex().to_string();
+            (bytes, hash)
+        }
+        None => read_chunk_bytes_and_hash(&chunk.path)?,
+    };
+    let object = build_object(
+        chunk,
+        data,
+        chunk_hash,
+        None,
+        network_secret,
+        manifest_id,
+        content_type,
+        &track.name,
+    )?;
+    relay.write_object(
+        track,
+        GroupId(
+            object
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_index)
+                .unwrap_or(0),
+        ),
+        ObjectId(
+            object
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_index)
+                .unwrap_or(0),
+        ),
+        &object,
+    )
+}
+
+fn chunk_stream_cmaf_ffmpeg(
+    mut reader: Box<dyn Read + Send>,
+    out_dir: &std::path::Path,
+    chunk_ms: u64,
+    max_segments: usize,
+    deterministic: bool,
+) -> Result<(std::path::PathBuf, Vec<std::path::PathBuf>)> {
+    let _ = fs::remove_dir_all(out_dir);
+    fs::create_dir_all(out_dir)
+        .with_context(|| format!("failed to create {}", out_dir.display()))?;
+
+    let profile = if deterministic {
+        Some(ec_chopper::deterministic_h264_profile())
+    } else {
+        // For now, keep encoder args stable even when determinism is off.
+        Some(ec_chopper::deterministic_h264_profile())
+    };
+
+    let mut cmd = Command::new("ffmpeg");
+    cmd.current_dir(out_dir);
+    cmd.arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-i")
+        .arg("pipe:0")
+        // Keep stream mapping predictable.
+        .arg("-map")
+        .arg("0:v:0")
+        .arg("-map")
+        .arg("0:a:0?")
+        .arg("-sn")
+        .arg("-dn")
+        .arg("-map_metadata")
+        .arg("-1")
+        // Reduce opportunities for non-deterministic scheduling in filters/decoders.
+        .arg("-filter_threads")
+        .arg("1")
+        .arg("-filter_complex_threads")
+        .arg("1")
+        .arg("-threads")
+        .arg("1");
+
+    if let Some(profile) = profile {
+        for arg in ec_chopper::ffmpeg_profile_args(&profile) {
+            cmd.arg(arg);
+        }
+    }
+
+    let seg_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+    cmd.arg("-f")
+        .arg("hls")
+        .arg("-hls_time")
+        .arg(seg_time)
+        .arg("-hls_list_size")
+        .arg("0")
+        .arg("-hls_segment_type")
+        .arg("fmp4")
+        .arg("-hls_flags")
+        .arg("independent_segments")
+        .arg("-hls_fmp4_init_filename")
+        .arg("init.mp4")
+        .arg("-hls_segment_filename")
+        .arg("segment_%06d.m4s")
+        .arg("index.m3u8")
+        .stdin(Stdio::piped())
+        .stdout(Stdio::null())
+        .stderr(Stdio::inherit());
+
+    let mut child = cmd.spawn().with_context(|| "failed to spawn ffmpeg")?;
+    let mut stdin = child
+        .stdin
+        .take()
+        .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+    let writer = std::thread::spawn(move || -> Result<()> {
+        std::io::copy(&mut reader, &mut stdin)?;
+        Ok(())
+    });
+
+    let init_path = out_dir.join("init.mp4");
+    wait_for_stable_file(&init_path, Duration::from_secs(20))?;
+
+    let mut segments = Vec::new();
+    for i in 0..max_segments {
+        let seg_path = out_dir.join(format!("segment_{i:06}.m4s"));
+        match wait_for_stable_file(&seg_path, Duration::from_secs(30)) {
+            Ok(()) => segments.push(seg_path),
+            Err(err) => {
+                // If ffmpeg ended cleanly, stop; otherwise bubble the error.
+                if let Ok(Some(status)) = child.try_wait() {
+                    if status.success() {
+                        break;
+                    }
+                    return Err(anyhow!("ffmpeg exited with {status} ({err:#})"));
+                }
+                return Err(err);
+            }
+        }
+    }
+
+    let _ = child.kill();
+    let _ = child.wait();
+    let _ = writer.join();
+
+    Ok((init_path, segments))
+}
+
+fn parse_network_secret(value: Option<String>) -> Result<Option<Vec<u8>>> {
+    let value = value.or_else(|| std::env::var("EVERY_CHANNEL_NETWORK_SECRET").ok());
+    let Some(value) = value else { return Ok(None) };
+    let bytes = hex::decode(value).context("network secret must be hex")?;
+    Ok(Some(bytes))
+}
+
+fn deterministic_enabled(flag: bool) -> bool {
+    if flag {
+        return true;
+    }
+    std::env::var("EVERY_CHANNEL_DETERMINISTIC")
+        .ok()
+        .map(|value| {
+            let value = value.trim().to_ascii_lowercase();
+            value == "1" || value == "true" || value == "yes" || value == "on"
+        })
+        .unwrap_or(false)
+}
+
+fn read_chunk_bytes_and_hash(path: &std::path::Path) -> Result<(Vec<u8>, String)> {
+    let data = fs::read(path).with_context(|| format!("failed to read {}", path.display()))?;
+    let hash = blake3::hash(&data).to_hex().to_string();
+    Ok((data, hash))
+}
+
+fn build_manifest(
+    stream_id: StreamId,
+    epoch_id: impl Into<String>,
+    chunk_duration_ms: u64,
+    chunk_start_index: u64,
+    encoder_profile_id: impl Into<String>,
+    created_unix_ms: u64,
+    metadata: Vec<StreamMetadata>,
+    chunk_hashes: Vec<String>,
+) -> Result<Manifest> {
+    let body = build_manifest_body_for_chunks(
+        stream_id,
+        epoch_id,
+        chunk_duration_ms,
+        chunk_start_index,
+        encoder_profile_id,
+        created_unix_ms,
+        metadata,
+        &chunk_hashes,
+    )?;
+    let manifest_id = body.manifest_id()?;
+    let mut signatures = Vec::new();
+    if let Some(keypair) = load_manifest_keypair_from_env().map_err(|err| anyhow!(err))? {
+        signatures.push(sign_manifest_id(&manifest_id, &keypair));
+    }
+    Ok(Manifest {
+        body,
+        manifest_id,
+        signatures,
+    })
+}
+
+#[derive(Debug, Clone)]
+struct CmafVariantSpec {
+    id: String,
+    width: u32,
+    height: u32,
+    video_bitrate_kbps: u32,
+}
+
+fn cmaf_ladder_variants(preset: CmafLadderPreset) -> Vec<CmafVariantSpec> {
+    match preset {
+        CmafLadderPreset::Hd3 => vec![
+            CmafVariantSpec {
+                id: "1080p".to_string(),
+                width: 1920,
+                height: 1080,
+                video_bitrate_kbps: 6000,
+            },
+            CmafVariantSpec {
+                id: "720p".to_string(),
+                width: 1280,
+                height: 720,
+                video_bitrate_kbps: 3000,
+            },
+            CmafVariantSpec {
+                id: "480p".to_string(),
+                width: 854,
+                height: 480,
+                video_bitrate_kbps: 1200,
+            },
+        ],
+    }
+}
+
+fn sanitize_component(value: &str) -> String {
+    value
+        .chars()
+        .map(|c| match c {
+            'a'..='z' | '0'..='9' | '-' | '_' | '/' => c,
+            'A'..='Z' => c.to_ascii_lowercase(),
+            _ => '_',
+        })
+        .collect()
+}
+
+fn derive_variant_stream_id(base_stream_id: &str, variant_id: &str) -> String {
+    // Match StreamKey encoding style (`variant-...`) without requiring we reconstruct StreamKey.
+    let v = sanitize_component(variant_id);
+    format!("{}/variant-{}", base_stream_id.trim_end_matches('/'), v)
+}
+
+fn build_multi_variant_manifest(
+    base_stream_id: StreamId,
+    epoch_id: String,
+    chunk_duration_ms: u64,
+    chunk_start_index: u64,
+    encoder_profile_id: String,
+    created_unix_ms: u64,
+    metadata: Vec<StreamMetadata>,
+    variants: &[CmafVariantSpec],
+    variant_chunk_start_index: u64,
+    per_variant_hash: Vec<(String, String)>,
+) -> Result<Manifest> {
+    let mut entries = Vec::new();
+    for variant in variants {
+        let Some((_, hash)) = per_variant_hash.iter().find(|(id, _)| id == &variant.id) else {
+            return Err(anyhow!("missing hash for variant {}", variant.id));
+        };
+        let chunk_hashes = vec![hash.clone()];
+        let merkle_root =
+            ec_core::merkle_root_from_hashes(&chunk_hashes).map_err(|err| anyhow!("{err}"))?;
+        let stream_id = StreamId(derive_variant_stream_id(&base_stream_id.0, &variant.id));
+        entries.push(ManifestVariant {
+            variant_id: variant.id.clone(),
+            stream_id,
+            chunk_start_index: variant_chunk_start_index,
+            total_chunks: 1,
+            merkle_root,
+            chunk_hashes,
+            metadata: vec![
+                StreamMetadata {
+                    key: "width".to_string(),
+                    value: variant.width.to_string(),
+                },
+                StreamMetadata {
+                    key: "height".to_string(),
+                    value: variant.height.to_string(),
+                },
+                StreamMetadata {
+                    key: "video_bitrate_kbps".to_string(),
+                    value: variant.video_bitrate_kbps.to_string(),
+                },
+            ],
+        });
+    }
+    entries.sort_by(|a, b| a.variant_id.cmp(&b.variant_id));
+    let roots = entries
+        .iter()
+        .map(|v| v.merkle_root.clone())
+        .collect::<Vec<_>>();
+    let body_root = ec_core::merkle_root_from_hashes(&roots).map_err(|err| anyhow!("{err}"))?;
+    let body = ec_core::ManifestBody {
+        stream_id: base_stream_id,
+        epoch_id,
+        chunk_duration_ms,
+        total_chunks: 1,
+        chunk_start_index,
+        encoder_profile_id,
+        merkle_root: body_root,
+        created_unix_ms,
+        metadata,
+        chunk_hashes: Vec::new(),
+        variants: Some(entries),
+    };
+    let manifest_id = body.manifest_id()?;
+    let mut signatures = Vec::new();
+    if let Some(keypair) = load_manifest_keypair_from_env().map_err(|err| anyhow!(err))? {
+        signatures.push(sign_manifest_id(&manifest_id, &keypair));
+    }
+    Ok(Manifest {
+        body,
+        manifest_id,
+        signatures,
+    })
+}
+
+struct EpochBuffer {
+    capacity: usize,
+    chunks: Vec<TsChunk>,
+    data: Vec<Option<Vec<u8>>>,
+    hashes: Vec<String>,
+    start_index: Option<u64>,
+}
+
+impl EpochBuffer {
+    fn new(capacity: usize) -> Self {
+        Self {
+            capacity: capacity.max(1),
+            chunks: Vec::new(),
+            data: Vec::new(),
+            hashes: Vec::new(),
+            start_index: None,
+        }
+    }
+
+    fn push(&mut self, chunk: TsChunk, data: Option<Vec<u8>>, hash: String) {
+        if self.start_index.is_none() {
+            self.start_index = Some(chunk.timing.chunk_index);
+        }
+        self.chunks.push(chunk);
+        self.data.push(data);
+        self.hashes.push(hash);
+    }
+
+    fn is_full(&self) -> bool {
+        self.chunks.len() >= self.capacity
+    }
+
+    fn is_empty(&self) -> bool {
+        self.chunks.is_empty()
+    }
+
+    fn start_index(&self) -> u64 {
+        self.start_index.unwrap_or(0)
+    }
+
+    fn take(&mut self) -> (Vec<TsChunk>, Vec<Option<Vec<u8>>>, Vec<String>) {
+        self.start_index = None;
+        let chunks = std::mem::take(&mut self.chunks);
+        let data = std::mem::take(&mut self.data);
+        let hashes = std::mem::take(&mut self.hashes);
+        (chunks, data, hashes)
+    }
+}
+
+fn parse_manifest_allowlist(value: Option<&str>) -> Option<HashSet<String>> {
+    let value = value?.trim();
+    if value.is_empty() {
+        return None;
+    }
+    let set = value
+        .split(|c: char| c == ',' || c == ';' || c.is_whitespace())
+        .filter_map(|token| {
+            let trimmed = token.trim();
+            if trimmed.is_empty() {
+                None
+            } else {
+                Some(trimmed.to_string())
+            }
+        })
+        .collect::<HashSet<_>>();
+    if set.is_empty() {
+        None
+    } else {
+        Some(set)
+    }
+}
+
+fn validate_manifest(manifest: &Manifest, allowlist: Option<&HashSet<String>>) -> bool {
+    let body_id = match manifest.body.manifest_id() {
+        Ok(id) => id,
+        Err(_) => return false,
+    };
+    if body_id != manifest.manifest_id {
+        return false;
+    }
+    if let Some(variants) = manifest.body.variants.as_ref().filter(|v| !v.is_empty()) {
+        // Multi-variant: validate each variant and ensure body merkle_root commits to per-variant roots.
+        let mut roots = Vec::with_capacity(variants.len());
+        for variant in variants {
+            if variant.chunk_hashes.len() != variant.total_chunks as usize {
+                return false;
+            }
+            match ec_core::merkle_root_from_hashes(&variant.chunk_hashes) {
+                Ok(root) if root == variant.merkle_root => {}
+                _ => return false,
+            }
+            roots.push((variant.variant_id.clone(), variant.merkle_root.clone()));
+        }
+        roots.sort_by(|a, b| a.0.cmp(&b.0));
+        let ordered = roots.into_iter().map(|(_, root)| root).collect::<Vec<_>>();
+        match ec_core::merkle_root_from_hashes(&ordered) {
+            Ok(root) if root == manifest.body.merkle_root => {}
+            _ => return false,
+        }
+    } else if !manifest.body.chunk_hashes.is_empty() {
+        if manifest.body.chunk_hashes.len() != manifest.body.total_chunks as usize {
+            return false;
+        }
+        match ec_core::merkle_root_from_hashes(&manifest.body.chunk_hashes) {
+            Ok(root) if root == manifest.body.merkle_root => {}
+            _ => return false,
+        }
+    }
+
+    if let Some(allowlist) = allowlist {
+        return manifest.signatures.iter().any(|sig| {
+            verify_manifest_signature(&manifest.manifest_id, sig)
+                && allowlist.contains(&sig.signer_id)
+        });
+    }
+
+    if manifest.signatures.is_empty() {
+        // Unsigned manifests are only acceptable when they include full hashes for verification.
+        return !manifest.body.chunk_hashes.is_empty()
+            || manifest
+                .body
+                .variants
+                .as_ref()
+                .is_some_and(|v| !v.is_empty());
+    }
+    manifest
+        .signatures
+        .iter()
+        .any(|sig| verify_manifest_signature(&manifest.manifest_id, sig))
+}
+
+fn strip_init_suffix(key_id: &str) -> &str {
+    key_id.strip_suffix("/init").unwrap_or(key_id)
+}
+
+fn manifest_hash_for_chunk(
+    manifest: &Manifest,
+    stream_id: &str,
+    chunk_index: u64,
+) -> Option<String> {
+    if let Some(variants) = manifest.body.variants.as_ref() {
+        let variant = variants.iter().find(|v| v.stream_id.0 == stream_id)?;
+        if chunk_index < variant.chunk_start_index {
+            return None;
+        }
+        let offset = (chunk_index - variant.chunk_start_index) as usize;
+        return variant.chunk_hashes.get(offset).cloned();
+    }
+
+    // Legacy single-variant manifests.
+    if manifest.body.stream_id.0 != stream_id {
+        return None;
+    }
+    if chunk_index < manifest.body.chunk_start_index {
+        return None;
+    }
+    let offset = (chunk_index - manifest.body.chunk_start_index) as usize;
+    manifest.body.chunk_hashes.get(offset).cloned()
+}
+
+fn manifest_covers_stream_index(manifest: &Manifest, stream_id: &str, chunk_index: u64) -> bool {
+    if let Some(variants) = manifest.body.variants.as_ref() {
+        let Some(variant) = variants.iter().find(|v| v.stream_id.0 == stream_id) else {
+            return false;
+        };
+        if chunk_index < variant.chunk_start_index {
+            return false;
+        }
+        let end = variant
+            .chunk_start_index
+            .saturating_add(variant.total_chunks as u64);
+        return chunk_index < end;
+    }
+
+    if manifest.body.stream_id.0 != stream_id {
+        return false;
+    }
+    if chunk_index < manifest.body.chunk_start_index {
+        return false;
+    }
+    let end = manifest
+        .body
+        .chunk_start_index
+        .saturating_add(manifest.body.total_chunks as u64);
+    chunk_index < end
+}
+
+fn find_manifest_for_stream_index(
+    store: &HashMap<String, Manifest>,
+    stream_id: &str,
+    chunk_index: u64,
+) -> Option<Manifest> {
+    // Prefer the latest manifest whose range covers the index for this stream.
+    let mut best: Option<&Manifest> = None;
+    for manifest in store.values() {
+        if !manifest_covers_stream_index(manifest, stream_id, chunk_index) {
+            continue;
+        }
+        match best {
+            None => best = Some(manifest),
+            Some(current) => {
+                if manifest.body.chunk_start_index >= current.body.chunk_start_index {
+                    best = Some(manifest);
+                }
+            }
+        }
+    }
+    best.cloned()
+}
+
+fn build_object(
+    chunk: TsChunk,
+    data: Vec<u8>,
+    chunk_hash: String,
+    chunk_proof: Option<Vec<String>>,
+    network_secret: Option<&[u8]>,
+    manifest_id: Option<&str>,
+    content_type: &str,
+    key_id: &str,
+) -> Result<ObjectPayload> {
+    let created_unix_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis() as u64;
+
+    let timing = TimingMeta {
+        chunk_index: chunk.timing.chunk_index,
+        chunk_start_27mhz: chunk.timing.chunk_start_27mhz.unwrap_or(0),
+        chunk_duration_27mhz: chunk.timing.chunk_duration_27mhz,
+        utc_start_unix: chunk.timing.utc_start_unix,
+        sync_status: chunk.timing.sync_status.clone(),
+    };
+
+    let encrypted = encrypt_stream_data(key_id, chunk.timing.chunk_index, &data, network_secret);
+    let meta = ObjectMeta {
+        created_unix_ms,
+        content_type: content_type.to_string(),
+        size_bytes: encrypted.ciphertext.len() as u64,
+        timing: Some(timing),
+        encryption: Some(ec_moq::EncryptionMeta {
+            alg: encrypted.alg.to_string(),
+            key_id: key_id.to_string(),
+            nonce_hex: hex::encode(encrypted.nonce),
+        }),
+        chunk_hash: Some(chunk_hash),
+        chunk_hash_alg: Some("blake3".to_string()),
+        chunk_proof,
+        chunk_proof_alg: Some("merkle+blake3".to_string()),
+        manifest_id: manifest_id.map(|value| value.to_string()),
+    };
+
+    Ok(ObjectPayload {
+        meta,
+        data: encrypted.ciphertext,
+    })
+}
+
+fn flush_epoch_publish(
+    publish_set: &mut MoqPublishSet,
+    object_track_name: &str,
+    manifest_track_name: &str,
+    publish_chunks: bool,
+    publish_manifests: bool,
+    epoch_buffer: &mut EpochBuffer,
+    stream_id_value: &StreamId,
+    chunk_ms: u64,
+    encoder_profile_id: &str,
+    source_kind: &str,
+    network_secret: Option<&[u8]>,
+    segment_content_type: &str,
+    key_id: &str,
+    object_sequence: &mut u64,
+    manifest_sequence: &mut u64,
+    announce_tx: Option<&tokio::sync::mpsc::UnboundedSender<ManifestSummary>>,
+) -> Result<()> {
+    if epoch_buffer.is_empty() {
+        return Ok(());
+    }
+
+    let (chunks, datas, hashes) = epoch_buffer.take();
+    let start_index = chunks
+        .first()
+        .map(|chunk| chunk.timing.chunk_index)
+        .unwrap_or_else(|| epoch_buffer.start_index());
+    let created_unix_ms = SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis() as u64;
+
+    let mut manifest_id = None;
+    if publish_manifests {
+        let manifest = build_manifest(
+            stream_id_value.clone(),
+            format!("epoch-{start_index}"),
+            chunk_ms,
+            start_index,
+            encoder_profile_id.to_string(),
+            created_unix_ms,
+            vec![StreamMetadata {
+                key: "source_kind".to_string(),
+                value: source_kind.to_string(),
+            }],
+            hashes.clone(),
+        )?;
+        manifest_id = Some(manifest.manifest_id.clone());
+        publish_set.publish_manifest(manifest_track_name, *manifest_sequence, &manifest)?;
+        *manifest_sequence += 1;
+        if let Some(tx) = announce_tx {
+            let _ = tx.send(manifest.summary());
+        }
+    }
+
+    // Compute per-chunk Merkle proofs so subscribers can validate membership
+    // even if future manifests omit the full chunk hash list.
+    let mut proofs = Vec::with_capacity(hashes.len());
+    for (offset, _) in hashes.iter().enumerate() {
+        proofs.push(merkle_proof_for_index(&hashes, offset)?);
+    }
+
+    if publish_chunks {
+        for (((chunk, data), hash), proof) in chunks.into_iter().zip(datas).zip(hashes).zip(proofs)
+        {
+            let Some(data) = data else {
+                return Err(anyhow!("missing chunk data for publish"));
+            };
+            let object = build_object(
+                chunk,
+                data,
+                hash,
+                Some(proof),
+                network_secret,
+                manifest_id.as_deref(),
+                segment_content_type,
+                key_id,
+            )?;
+            tracing::info!(
+                "publish segment chunk_index={} bytes={} content_type={}",
+                object
+                    .meta
+                    .timing
+                    .as_ref()
+                    .map(|t| t.chunk_index)
+                    .unwrap_or(0),
+                object.data.len(),
+                object.meta.content_type
+            );
+            publish_set.publish_object(object_track_name, GroupId(*object_sequence), object)?;
+            *object_sequence += 1;
+        }
+    }
+
+    Ok(())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn parse_manifest_allowlist_splits_and_trims() {
+        let set = parse_manifest_allowlist(Some(" a,b ; c\t d  ")).unwrap();
+        assert!(set.contains("a"));
+        assert!(set.contains("b"));
+        assert!(set.contains("c"));
+        assert!(set.contains("d"));
+    }
+
+    #[test]
+    fn deterministic_enabled_reads_env() {
+        let prev = std::env::var("EVERY_CHANNEL_DETERMINISTIC").ok();
+        std::env::set_var("EVERY_CHANNEL_DETERMINISTIC", "true");
+        assert!(deterministic_enabled(false));
+        std::env::set_var("EVERY_CHANNEL_DETERMINISTIC", "0");
+        assert!(!deterministic_enabled(false));
+        match prev {
+            Some(value) => std::env::set_var("EVERY_CHANNEL_DETERMINISTIC", value),
+            None => std::env::remove_var("EVERY_CHANNEL_DETERMINISTIC"),
+        }
+    }
+
+    #[test]
+    fn parse_network_secret_accepts_hex_and_rejects_invalid() {
+        let out = parse_network_secret(Some("00".repeat(8))).unwrap().unwrap();
+        assert_eq!(out.len(), 8);
+        assert!(parse_network_secret(Some("not-hex".to_string())).is_err());
+    }
+
+    fn build_valid_manifest(unsigned: bool) -> Manifest {
+        let chunk_hashes = vec![
+            blake3::hash(b"c0").to_hex().to_string(),
+            blake3::hash(b"c1").to_hex().to_string(),
+        ];
+        let body = build_manifest_body_for_chunks(
+            StreamId("s".to_string()),
+            "epoch-1",
+            2000,
+            10,
+            "p",
+            1,
+            Vec::new(),
+            &chunk_hashes,
+        )
+        .unwrap();
+        let manifest_id = body.manifest_id().unwrap();
+        let signatures = if unsigned {
+            Vec::new()
+        } else {
+            let prev = std::env::var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY").ok();
+            std::env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", "11".repeat(32));
+            let keypair = load_manifest_keypair_from_env().unwrap().unwrap();
+            let sig = sign_manifest_id(&manifest_id, &keypair);
+            match prev {
+                Some(value) => std::env::set_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", value),
+                None => std::env::remove_var("EVERY_CHANNEL_MANIFEST_SIGNING_KEY"),
+            }
+            vec![sig]
+        };
+
+        Manifest {
+            body,
+            manifest_id,
+            signatures,
+        }
+    }
+
+    #[test]
+    fn validate_manifest_accepts_unsigned_only_with_hashes() {
+        let mut manifest = build_valid_manifest(true);
+        assert!(validate_manifest(&manifest, None));
+
+        // Remove hashes: unsigned should be rejected.
+        manifest.body.chunk_hashes.clear();
+        manifest.body.total_chunks = 0;
+        manifest.body.merkle_root = "00".repeat(32);
+        manifest.manifest_id = manifest.body.manifest_id().unwrap();
+        assert!(!validate_manifest(&manifest, None));
+    }
+
+    #[test]
+    fn validate_manifest_accepts_signed_and_obeys_allowlist() {
+        let manifest = build_valid_manifest(false);
+        assert!(validate_manifest(&manifest, None));
+        let signer = manifest.signatures[0].signer_id.clone();
+        let allow = HashSet::from([signer.clone()]);
+        assert!(validate_manifest(&manifest, Some(&allow)));
+        let deny = HashSet::from(["other".to_string()]);
+        assert!(!validate_manifest(&manifest, Some(&deny)));
+    }
+
+    #[test]
+    fn manifest_hash_for_chunk_indexes_into_hash_list() {
+        let manifest = build_valid_manifest(true);
+        let sid = manifest.body.stream_id.0.as_str();
+        assert!(manifest_hash_for_chunk(&manifest, sid, 9).is_none());
+        assert_eq!(
+            manifest_hash_for_chunk(&manifest, sid, 10).as_deref(),
+            Some(manifest.body.chunk_hashes[0].as_str())
+        );
+        assert_eq!(
+            manifest_hash_for_chunk(&manifest, sid, 11).as_deref(),
+            Some(manifest.body.chunk_hashes[1].as_str())
+        );
+        assert!(manifest_hash_for_chunk(&manifest, sid, 12).is_none());
+    }
+}
+
+async fn moq_publish(args: MoqPublishArgs) -> Result<()> {
+    fs::create_dir_all(&args.chunk_dir)
+        .with_context(|| format!("failed to create {}", args.chunk_dir.display()))?;
+
+    let deterministic = deterministic_enabled(args.deterministic);
+    let (source, _needs_transcode): (Box<dyn StreamSource + Send>, bool) = match args.source {
+        IngestSource::Hls { url, mut mode } => {
+            if deterministic {
+                mode = HlsMode::Transcode;
+            }
+            (Box::new(HlsSource { url, mode }), false)
+        }
+        IngestSource::Hdhr {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        } => (
+            Box::new(HdhrSource {
+                host,
+                device_id,
+                channel,
+                name,
+                prefer_mdns,
+            }),
+            deterministic,
+        ),
+        IngestSource::LinuxDvb {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        } => (
+            Box::new(LinuxDvbSource {
+                adapter,
+                dvr,
+                tune_cmd,
+                tune_wait_ms,
+            }),
+            deterministic,
+        ),
+        IngestSource::Ts { input } => (Box::new(TsSource { input }), deterministic),
+    };
+
+    let source_id = source.source_id();
+    let source_id_for_stream = source_id.clone();
+
+    let stream_id = args.stream_id.unwrap_or_else(|| {
+        StreamKey {
+            version: 1,
+            broadcast: None,
+            source: Some(source_id_for_stream),
+            profile: Some(format!("chunk-{}ms", args.chunk_ms)),
+            variant: None,
+        }
+        .to_stream_id()
+        .0
+    });
+
+    let broadcast_name = args.broadcast_name.unwrap_or_else(|| stream_id.clone());
+    let track_name = args.track_name.clone();
+
+    let secret = parse_iroh_secret(args.iroh_secret)?;
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let node = MoqNode::bind_with_discovery(secret, discovery).await?;
+
+    // Wait briefly for direct addresses so "remote" can connect without needing discovery.
+    let mut endpoint_addr = node.endpoint_addr();
+    if endpoint_addr.addrs.is_empty() {
+        let mut watcher = node.endpoint().watch_addr();
+        let start = Instant::now();
+        while endpoint_addr.addrs.is_empty() && start.elapsed() < Duration::from_secs(3) {
+            tokio::time::sleep(Duration::from_millis(200)).await;
+            endpoint_addr = watcher.get();
+        }
+    }
+
+    println!("moq endpoint id: {}", node.endpoint().id());
+    if let Ok(addr_json) = serde_json::to_string(&endpoint_addr) {
+        println!("moq endpoint addr: {}", addr_json);
+    }
+    println!("moq broadcast: {}", broadcast_name);
+    println!("moq track: {}", track_name);
+
+    let publish_chunks = args.publish_chunks;
+    let ladder = args.cmaf_ladder;
+    let ladder_variants = ladder.map(cmaf_ladder_variants);
+
+    let mut object_tracks = Vec::new();
+    if let Some(variants) = ladder_variants.as_ref() {
+        if !publish_chunks {
+            return Err(anyhow!("--cmaf-ladder requires --publish-chunks true"));
+        }
+        for variant in variants {
+            object_tracks.push(format!("{}/{}", track_name, variant.id));
+            object_tracks.push(format!("{}/{}", args.init_track, variant.id));
+        }
+    } else {
+        object_tracks.push(track_name.clone());
+        if publish_chunks {
+            object_tracks.push(args.init_track.clone());
+        }
+    }
+    let mut manifest_tracks = Vec::new();
+    if args.publish_manifests {
+        manifest_tracks.push(args.manifest_track.clone());
+    }
+    let mut publish_set = node
+        .publish_track_set(&broadcast_name, object_tracks, manifest_tracks)
+        .await?;
+
+    if let Some(ms) = args.startup_delay_ms {
+        tokio::time::sleep(Duration::from_millis(ms)).await;
+    }
+
+    let network_secret = parse_network_secret(args.network_secret)?;
+
+    let track = TrackName {
+        namespace: "every.channel".to_string(),
+        name: stream_id.clone(),
+    };
+    let stream_id_value = StreamId(track.name.clone());
+    let source_kind = source_id.kind.clone();
+    let encoder_profile_id = "deterministic-h264-aac".to_string();
+
+    if let Some(variants) = ladder_variants {
+        if args.epoch_chunks != 1 {
+            return Err(anyhow!("--cmaf-ladder currently requires --epoch-chunks 1"));
+        }
+        if !args.publish_manifests {
+            return Err(anyhow!(
+                "--cmaf-ladder currently requires --publish-manifests"
+            ));
+        }
+
+        #[derive(Debug)]
+        enum PendingPublish {
+            Object {
+                track: String,
+                group: u64,
+                object: ObjectPayload,
+            },
+            Manifest {
+                track: String,
+                sequence: u64,
+                manifest: Manifest,
+            },
+        }
+
+        let (tx, mut rx) = mpsc::channel::<PendingPublish>(16);
+        let chunk_ms = args.chunk_ms;
+        let max_chunks = args.max_chunks.unwrap_or(usize::MAX);
+        let out_dir = args.chunk_dir.join("cmaf-ladder");
+        let init_track_prefix = args.init_track.clone();
+        let chunk_track_prefix = track_name.clone();
+        let manifest_track = args.manifest_track.clone();
+        let publish_manifests = args.publish_manifests;
+        let source_kind = source_id.kind.clone();
+        let base_stream_id = stream_id.clone();
+        let network_secret_bytes = network_secret.clone();
+        let startup_delay_ms = args.startup_delay_ms;
+
+        let chunk_task = tokio::task::spawn_blocking(move || -> Result<()> {
+            let _ = fs::remove_dir_all(&out_dir);
+            fs::create_dir_all(&out_dir)
+                .with_context(|| format!("failed to create {}", out_dir.display()))?;
+            for variant in &variants {
+                fs::create_dir_all(out_dir.join(&variant.id))?;
+            }
+
+            let mut cmd = Command::new("ffmpeg");
+            cmd.current_dir(&out_dir);
+            cmd.arg("-hide_banner")
+                .arg("-loglevel")
+                .arg("error")
+                .arg("-nostdin")
+                .arg("-y")
+                .arg("-i")
+                .arg("pipe:0")
+                // Reduce opportunities for non-deterministic scheduling in filters/decoders.
+                .arg("-filter_threads")
+                .arg("1")
+                .arg("-filter_complex_threads")
+                .arg("1")
+                .arg("-threads")
+                .arg("1")
+                .arg("-map")
+                .arg("0:v:0")
+                .arg("-map")
+                .arg("0:a:0?")
+                .arg("-sn")
+                .arg("-dn")
+                .arg("-map_metadata")
+                .arg("-1");
+
+            // Build a split+scale filter graph for all variants.
+            // NOTE: We keep it simple: split video N ways, then scale each output.
+            let mut filter = String::new();
+            filter.push_str(&format!("[0:v]split={}", variants.len()));
+            for (i, _) in variants.iter().enumerate() {
+                filter.push_str(&format!("[v{i}]"));
+            }
+            filter.push(';');
+            for (i, variant) in variants.iter().enumerate() {
+                // Scale flags influence quality but should be deterministic.
+                filter.push_str(&format!(
+                    "[v{i}]scale=w={}:h={}:flags=bicubic[v{i}o];",
+                    variant.width, variant.height
+                ));
+            }
+            cmd.arg("-filter_complex").arg(filter);
+
+            let seg_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+            for (i, variant) in variants.iter().enumerate() {
+                let v_bitrate = format!("{}k", variant.video_bitrate_kbps);
+                let bufsize = format!("{}k", variant.video_bitrate_kbps.saturating_mul(2));
+                let out_variant_dir = out_dir.join(&variant.id);
+                let seg_template = out_variant_dir.join("segment_%06d.m4s");
+                let seg_template = seg_template
+                    .to_str()
+                    .ok_or_else(|| anyhow!("invalid segment template path"))?
+                    .to_string();
+
+                cmd.arg("-map")
+                    .arg(format!("[v{i}o]"))
+                    .arg("-map")
+                    .arg("0:a:0?")
+                    .arg("-c:v")
+                    .arg("libx264")
+                    // Force keyframes aligned to segment boundaries (chunk_ms).
+                    .arg("-force_key_frames")
+                    .arg(format!(
+                        "expr:gte(t,n_forced*{:.3})",
+                        chunk_ms as f64 / 1000.0
+                    ))
+                    .arg("-b:v")
+                    .arg(&v_bitrate)
+                    .arg("-minrate")
+                    .arg(&v_bitrate)
+                    .arg("-maxrate")
+                    .arg(&v_bitrate)
+                    .arg("-bufsize")
+                    .arg(&bufsize)
+                    .arg("-c:a")
+                    .arg("aac")
+                    .arg("-b:a")
+                    .arg("128k")
+                    .arg("-ac")
+                    .arg("2")
+                    .arg("-ar")
+                    .arg("48000")
+                    .arg("-pix_fmt")
+                    .arg("yuv420p")
+                    .arg("-g")
+                    .arg("60")
+                    .arg("-keyint_min")
+                    .arg("60")
+                    .arg("-sc_threshold")
+                    .arg("0")
+                    .arg("-bf")
+                    .arg("0")
+                    .arg("-threads")
+                    .arg("1")
+                    .arg("-fflags")
+                    .arg("+bitexact")
+                    .arg("-flags:v")
+                    .arg("+bitexact")
+                    .arg("-flags:a")
+                    .arg("+bitexact")
+                    .arg("-f")
+                    .arg("hls")
+                    .arg("-hls_time")
+                    .arg(&seg_time)
+                    .arg("-hls_list_size")
+                    .arg("0")
+                    .arg("-hls_segment_type")
+                    .arg("fmp4")
+                    .arg("-hls_flags")
+                    .arg("independent_segments")
+                    .arg("-hls_fmp4_init_filename")
+                    .arg("init.mp4")
+                    .arg("-hls_segment_filename")
+                    .arg(seg_template)
+                    .arg(out_variant_dir.join("index.m3u8"));
+            }
+
+            cmd.stdin(Stdio::piped())
+                .stdout(Stdio::null())
+                .stderr(Stdio::inherit());
+
+            let mut child = cmd.spawn().with_context(|| "failed to spawn ffmpeg")?;
+            let mut stdin = child
+                .stdin
+                .take()
+                .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+            let mut reader = source.open_stream()?;
+            let writer = std::thread::spawn(move || -> Result<()> {
+                std::io::copy(&mut reader, &mut stdin)?;
+                Ok(())
+            });
+
+            // Optional startup delay to allow subscribers to connect.
+            if let Some(ms) = startup_delay_ms {
+                std::thread::sleep(Duration::from_millis(ms));
+            }
+
+            // Publish init per variant as soon as they exist.
+            for variant in &variants {
+                let init_path = out_dir.join(&variant.id).join("init.mp4");
+                wait_for_stable_file(&init_path, Duration::from_secs(20))?;
+                let data = fs::read(&init_path)?;
+                let hash = blake3::hash(&data).to_hex().to_string();
+                let key_id = format!(
+                    "{}/init",
+                    derive_variant_stream_id(&base_stream_id, &variant.id)
+                );
+                let object = build_object(
+                    TsChunk {
+                        index: 0,
+                        path: init_path,
+                        timing: ec_chopper::ChunkTiming {
+                            chunk_index: 0,
+                            chunk_start_27mhz: None,
+                            chunk_duration_27mhz: 0,
+                            utc_start_unix: None,
+                            sync_status: "init".to_string(),
+                        },
+                    },
+                    data,
+                    hash,
+                    None,
+                    network_secret_bytes.as_deref(),
+                    None,
+                    "video/mp4",
+                    &key_id,
+                )?;
+                tx.blocking_send(PendingPublish::Object {
+                    track: format!("{}/{}", init_track_prefix, variant.id),
+                    group: 0,
+                    object,
+                })
+                .map_err(|_| anyhow!("publish channel closed"))?;
+            }
+
+            let mut manifest_seq: u64 = 0;
+            for index in 0..max_chunks {
+                // Wait for each variant's segment for this index.
+                let mut per_variant_segments = Vec::with_capacity(variants.len());
+                let mut per_variant_hashes = Vec::with_capacity(variants.len());
+                for variant in &variants {
+                    let seg_path = out_dir
+                        .join(&variant.id)
+                        .join(format!("segment_{index:06}.m4s"));
+                    wait_for_stable_file(&seg_path, Duration::from_secs(30))?;
+                    let data = fs::read(&seg_path)?;
+                    let hash = blake3::hash(&data).to_hex().to_string();
+                    per_variant_segments.push((variant, seg_path, data, hash.clone()));
+                    per_variant_hashes.push((variant, hash));
+                }
+
+                let created_unix_ms = SystemTime::now()
+                    .duration_since(UNIX_EPOCH)
+                    .unwrap_or_default()
+                    .as_millis() as u64;
+                let epoch_id = format!("epoch-{created_unix_ms}");
+
+                let manifest = if publish_manifests {
+                    build_multi_variant_manifest(
+                        StreamId(base_stream_id.clone()),
+                        epoch_id,
+                        chunk_ms,
+                        index as u64,
+                        encoder_profile_id.clone(),
+                        created_unix_ms,
+                        vec![StreamMetadata {
+                            key: "source_kind".to_string(),
+                            value: source_kind.clone(),
+                        }],
+                        &variants,
+                        index as u64,
+                        per_variant_hashes
+                            .iter()
+                            .map(|(v, h)| (v.id.clone(), h.clone()))
+                            .collect(),
+                    )?
+                } else {
+                    // Still build an unsigned manifest for internal linkage if desired.
+                    build_multi_variant_manifest(
+                        StreamId(base_stream_id.clone()),
+                        epoch_id,
+                        chunk_ms,
+                        index as u64,
+                        encoder_profile_id.clone(),
+                        created_unix_ms,
+                        vec![StreamMetadata {
+                            key: "source_kind".to_string(),
+                            value: source_kind.clone(),
+                        }],
+                        &variants,
+                        index as u64,
+                        per_variant_hashes
+                            .iter()
+                            .map(|(v, h)| (v.id.clone(), h.clone()))
+                            .collect(),
+                    )?
+                };
+
+                tx.blocking_send(PendingPublish::Manifest {
+                    track: manifest_track.clone(),
+                    sequence: manifest_seq,
+                    manifest: manifest.clone(),
+                })
+                .map_err(|_| anyhow!("publish channel closed"))?;
+                manifest_seq += 1;
+
+                // Publish segment objects for each variant, linked to the manifest.
+                for (variant, seg_path, data, hash) in per_variant_segments {
+                    let key_id = derive_variant_stream_id(&base_stream_id, &variant.id);
+                    let chunk = TsChunk {
+                        index: index as u64,
+                        path: seg_path,
+                        timing: ec_chopper::ChunkTiming {
+                            chunk_index: index as u64,
+                            chunk_start_27mhz: None,
+                            chunk_duration_27mhz: chunk_ms * 27_000,
+                            utc_start_unix: None,
+                            sync_status: "cmaf".to_string(),
+                        },
+                    };
+                    let object = build_object(
+                        chunk,
+                        data,
+                        hash,
+                        None,
+                        network_secret_bytes.as_deref(),
+                        Some(&manifest.manifest_id),
+                        "video/iso.segment",
+                        &key_id,
+                    )?;
+                    tx.blocking_send(PendingPublish::Object {
+                        track: format!("{}/{}", chunk_track_prefix, variant.id),
+                        group: (index as u64) + 1,
+                        object,
+                    })
+                    .map_err(|_| anyhow!("publish channel closed"))?;
+                }
+            }
+
+            let _ = child.kill();
+            let _ = child.wait();
+            let _ = writer.join();
+            Ok(())
+        });
+
+        while let Some(item) = rx.recv().await {
+            match item {
+                PendingPublish::Object {
+                    track,
+                    group,
+                    object,
+                } => {
+                    publish_set.publish_object(&track, GroupId(group), object)?;
+                }
+                PendingPublish::Manifest {
+                    track,
+                    sequence,
+                    manifest,
+                } => {
+                    publish_set.publish_manifest(&track, sequence, &manifest)?;
+                }
+            }
+        }
+
+        chunk_task
+            .await
+            .map_err(|err| anyhow!("chunk task join error: {err}"))??;
+
+        return Ok(());
+    }
+    let needs_init_track = publish_chunks;
+    let mut epoch_buffer = EpochBuffer::new(args.epoch_chunks);
+    // Some early MoQ implementations have surprising assumptions around group sequence ids.
+    // In CMAF mode we reserve group 0 for the init segment on the init track and start
+    // segment groups at 1 to avoid any potential cross-track collisions.
+    let mut object_sequence: u64 = if needs_init_track { 1 } else { 0 };
+    let mut manifest_sequence: u64 = 0;
+
+    let announce_tx = if args.announce {
+        Some(
+            spawn_catalog_announcer(
+                &node,
+                &track,
+                &broadcast_name,
+                &track_name,
+                args.gossip_peer.clone(),
+            )
+            .await?,
+        )
+    } else {
+        None
+    };
+
+    #[derive(Debug)]
+    enum PendingKind {
+        Init,
+        Segment,
+    }
+
+    #[derive(Debug)]
+    struct PendingChunk {
+        kind: PendingKind,
+        chunk: TsChunk,
+        data: Option<Vec<u8>>,
+        hash: String,
+    }
+
+    let segment_content_type = "video/iso.segment";
+
+    // Chunking is CPU and IO heavy and must not block the async runtime.
+    // We do ingest + chunking on a blocking thread and feed finalized chunks
+    // to the async publisher over a channel.
+    let (tx, mut rx) = mpsc::channel::<PendingChunk>(8);
+    let chunk_dir = args.chunk_dir.clone();
+    let chunk_ms = args.chunk_ms;
+    let max_chunks = args.max_chunks;
+    let chunk_task = tokio::task::spawn_blocking(move || -> Result<()> {
+        let out_dir = chunk_dir.join("cmaf");
+        let _ = fs::remove_dir_all(&out_dir);
+        fs::create_dir_all(&out_dir)
+            .with_context(|| format!("failed to create {}", out_dir.display()))?;
+
+        let profile = ec_chopper::deterministic_h264_profile();
+        let mut cmd = std::process::Command::new("ffmpeg");
+        cmd.current_dir(&out_dir);
+        cmd.arg("-hide_banner")
+            .arg("-loglevel")
+            .arg("error")
+            .arg("-nostdin")
+            .arg("-y")
+            .arg("-i")
+            .arg("pipe:0");
+
+        // Reduce non-determinism and "surprise streams" (data/subtitles, extra audio).
+        // We intentionally pick the first video stream and (optionally) the first audio stream.
+        cmd.arg("-map").arg("0:v:0");
+        cmd.arg("-map").arg("0:a:0?");
+        cmd.arg("-sn").arg("-dn");
+        cmd.arg("-map_metadata").arg("-1");
+
+        for arg in ec_chopper::ffmpeg_profile_args(&profile) {
+            cmd.arg(arg);
+        }
+        let seg_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+        let seg_template = "segment_%06d.m4s".to_string();
+        let init_filename = "init.mp4".to_string();
+        let playlist = "index.m3u8".to_string();
+
+        cmd.arg("-f")
+            .arg("hls")
+            .arg("-hls_time")
+            .arg(seg_time)
+            .arg("-hls_list_size")
+            .arg("0")
+            .arg("-hls_segment_type")
+            .arg("fmp4")
+            .arg("-hls_flags")
+            .arg("independent_segments")
+            .arg("-hls_fmp4_init_filename")
+            .arg(init_filename)
+            .arg("-hls_segment_filename")
+            .arg(seg_template)
+            .arg(playlist)
+            .stdin(std::process::Stdio::piped())
+            .stdout(std::process::Stdio::null())
+            .stderr(std::process::Stdio::inherit());
+
+        let mut child = cmd
+            .spawn()
+            .with_context(|| "failed to spawn ffmpeg".to_string())?;
+        let mut stdin = child
+            .stdin
+            .take()
+            .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+        let mut reader = source.open_stream()?;
+        let writer = std::thread::spawn(move || -> Result<()> {
+            std::io::copy(&mut reader, &mut stdin)?;
+            Ok(())
+        });
+
+        let init_path = out_dir.join("init.mp4");
+        if publish_chunks {
+            wait_for_stable_file(&init_path, Duration::from_secs(10))?;
+            let data = fs::read(&init_path)?;
+            let hash = blake3::hash(&data).to_hex().to_string();
+            let chunk = TsChunk {
+                index: 0,
+                path: init_path.clone(),
+                timing: ec_chopper::ChunkTiming {
+                    chunk_index: 0,
+                    chunk_start_27mhz: None,
+                    chunk_duration_27mhz: 0,
+                    utc_start_unix: None,
+                    sync_status: "init".to_string(),
+                },
+            };
+            tx.blocking_send(PendingChunk {
+                kind: PendingKind::Init,
+                chunk,
+                data: Some(data),
+                hash,
+            })
+            .map_err(|_| anyhow!("publish channel closed"))?;
+        }
+
+        let limit = max_chunks.unwrap_or(usize::MAX);
+        for index in 0..limit {
+            let seg_path = out_dir.join(format!("segment_{index:06}.m4s"));
+            // If the segment never appears and ffmpeg exited, we are done (short input).
+            // If the segment never appears and ffmpeg is still running, treat as error.
+            match wait_for_stable_file(&seg_path, Duration::from_secs(20)) {
+                Ok(()) => {}
+                Err(err) => {
+                    if let Ok(Some(status)) = child.try_wait() {
+                        if status.success() {
+                            break;
+                        }
+                        return Err(anyhow!("ffmpeg exited with {status} ({err:#})"));
+                    }
+                    return Err(err);
+                }
+            }
+            let data = if publish_chunks {
+                Some(fs::read(&seg_path)?)
+            } else {
+                None
+            };
+            let hash = if let Some(ref bytes) = data {
+                blake3::hash(bytes).to_hex().to_string()
+            } else {
+                ec_chopper::hash_file_blake3(&seg_path)?
+            };
+
+            let chunk = TsChunk {
+                index: index as u64,
+                path: seg_path.clone(),
+                timing: ec_chopper::ChunkTiming {
+                    chunk_index: index as u64,
+                    chunk_start_27mhz: None,
+                    chunk_duration_27mhz: chunk_ms * 27_000,
+                    utc_start_unix: None,
+                    sync_status: "cmaf".to_string(),
+                },
+            };
+
+            tx.blocking_send(PendingChunk {
+                kind: PendingKind::Segment,
+                chunk,
+                data,
+                hash,
+            })
+            .map_err(|_| anyhow!("publish channel closed"))?;
+        }
+
+        let _ = child.kill();
+        let _ = child.wait();
+        let _ = writer.join();
+        Ok(())
+    });
+
+    while let Some(pending) = rx.recv().await {
+        match pending.kind {
+            PendingKind::Init => {
+                let Some(data) = pending.data else {
+                    continue;
+                };
+                let key_id = format!("{}/init", track.name);
+                let object = build_object(
+                    pending.chunk,
+                    data,
+                    pending.hash,
+                    None,
+                    network_secret.as_deref(),
+                    None,
+                    "video/mp4",
+                    &key_id,
+                )?;
+                tracing::info!(
+                    "publish init bytes={} track={}",
+                    object.data.len(),
+                    args.init_track
+                );
+                publish_set.publish_object(&args.init_track, GroupId(0), object)?;
+            }
+            PendingKind::Segment => {
+                epoch_buffer.push(pending.chunk, pending.data, pending.hash);
+                if epoch_buffer.is_full() {
+                    flush_epoch_publish(
+                        &mut publish_set,
+                        &track_name,
+                        &args.manifest_track,
+                        publish_chunks,
+                        args.publish_manifests,
+                        &mut epoch_buffer,
+                        &stream_id_value,
+                        args.chunk_ms,
+                        &encoder_profile_id,
+                        &source_kind,
+                        network_secret.as_deref(),
+                        segment_content_type,
+                        &track.name,
+                        &mut object_sequence,
+                        &mut manifest_sequence,
+                        announce_tx.as_ref(),
+                    )?;
+                }
+            }
+        }
+    }
+
+    // Ensure chunking completed successfully.
+    chunk_task
+        .await
+        .map_err(|err| anyhow!("chunk task join error: {err}"))??;
+
+    flush_epoch_publish(
+        &mut publish_set,
+        &track_name,
+        &args.manifest_track,
+        publish_chunks,
+        args.publish_manifests,
+        &mut epoch_buffer,
+        &stream_id_value,
+        args.chunk_ms,
+        &encoder_profile_id,
+        &source_kind,
+        network_secret.as_deref(),
+        segment_content_type,
+        &track.name,
+        &mut object_sequence,
+        &mut manifest_sequence,
+        announce_tx.as_ref(),
+    )?;
+
+    Ok(())
+}
+
+async fn moq_subscribe(args: MoqSubscribeArgs) -> Result<()> {
+    if args.require_manifest && !args.subscribe_manifests {
+        return Err(anyhow!("--require-manifest requires --subscribe-manifests"));
+    }
+    let secret = parse_iroh_secret(args.iroh_secret)?;
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let node = MoqNode::bind_with_discovery(secret, discovery).await?;
+    let remote = ec_iroh::parse_endpoint_addr(&args.remote)?;
+    let remote_manifests = if let Some(value) = args.remote_manifests.as_deref() {
+        ec_iroh::parse_endpoint_addr(value)?
+    } else {
+        remote.clone()
+    };
+    let mut stream = node
+        .subscribe_objects(remote.clone(), &args.broadcast_name, &args.track_name)
+        .await?;
+
+    let manifest_allowlist = parse_manifest_allowlist(args.manifest_signers.as_deref());
+    let manifest_store = if args.subscribe_manifests || args.require_manifest {
+        let mut manifest_stream = node
+            .subscribe_manifests(remote_manifests, &args.broadcast_name, &args.manifest_track)
+            .await?;
+        let store = Arc::new(RwLock::new(HashMap::new()));
+        let store_clone = Arc::clone(&store);
+        let allowlist = manifest_allowlist.clone();
+        tokio::spawn(async move {
+            while let Some(manifest) = manifest_stream.recv().await {
+                if !validate_manifest(&manifest, allowlist.as_ref()) {
+                    tracing::warn!("rejected manifest {}", manifest.manifest_id);
+                    continue;
+                }
+                let manifest_id = manifest.manifest_id.clone();
+                store_clone.write().await.insert(manifest_id, manifest);
+            }
+        });
+        Some(store)
+    } else {
+        None
+    };
+
+    let network_secret = parse_network_secret(args.network_secret)?;
+
+    let mut hls =
+        HlsWriter::new_cmaf(&args.output_dir, args.chunk_ms as f64 / 1000.0, args.window)?;
+
+    let needs_init = args.subscribe_init;
+    let mut init_ready = !needs_init;
+    let mut buffered_segments: Vec<(u64, f64, Vec<u8>)> = Vec::new();
+
+    let mut init_rx = if needs_init {
+        let (tx, rx) = tokio::sync::oneshot::channel::<Result<Vec<u8>>>();
+        let mut init_stream = node
+            .subscribe_objects(remote.clone(), &args.broadcast_name, &args.init_track)
+            .await?;
+        let remote_str = args.remote.clone();
+        let init_track = args.init_track.clone();
+        let secret = network_secret.clone();
+        tokio::spawn(async move {
+            let deadline = Instant::now() + Duration::from_secs(60);
+            while Instant::now() < deadline {
+                let remaining = deadline.saturating_duration_since(Instant::now());
+                let recv =
+                    tokio::time::timeout(remaining.min(Duration::from_secs(2)), init_stream.recv())
+                        .await;
+                let Ok(Some(object)) = recv else { continue };
+
+                let init_index = object
+                    .meta
+                    .timing
+                    .as_ref()
+                    .map(|t| t.chunk_index)
+                    .unwrap_or(0);
+
+                let data = if let Some(enc) = &object.meta.encryption {
+                    if enc.alg != ENCRYPTION_ALG {
+                        tracing::warn!("init: unsupported encryption {}", enc.alg);
+                        continue;
+                    }
+                    tracing::info!(
+                        "init: received encrypted object bytes={} key_id={} chunk_index={}",
+                        object.data.len(),
+                        enc.key_id,
+                        init_index
+                    );
+                    match decrypt_stream_data(
+                        &enc.key_id,
+                        init_index,
+                        &object.data,
+                        secret.as_deref(),
+                    ) {
+                        Some(plaintext) => plaintext,
+                        None => {
+                            tracing::warn!(
+                                "init: decryption failed key_id={} chunk_index={}",
+                                enc.key_id,
+                                init_index
+                            );
+                            continue;
+                        }
+                    }
+                } else {
+                    tracing::info!(
+                        "init: received plaintext object bytes={} chunk_index={}",
+                        object.data.len(),
+                        init_index
+                    );
+                    object.data
+                };
+                let _ = tx.send(Ok(data));
+                return;
+            }
+            let _ = tx.send(Err(anyhow!(
+                "timed out waiting for CMAF init segment on track '{}' from {}",
+                init_track,
+                remote_str
+            )));
+        });
+        Some(rx)
+    } else {
+        None
+    };
+
+    let fallback = Duration::from_millis(args.chunk_ms);
+    let mut fallback_index = 0u64;
+    let mut invalid_chunks = 0u32;
+    let mut written_chunks = 0u64;
+    let mut quota = args.max_bytes_per_sec.map(|rate| {
+        let burst = args.max_bytes_burst.unwrap_or(rate.saturating_mul(2));
+        ec_iroh::TokenBucket::new(burst, rate)
+    });
+
+    loop {
+        tokio::select! {
+            biased;
+            init_res = async { if let Some(rx) = init_rx.as_mut() { Some(rx.await) } else { None } }, if init_rx.is_some() => {
+                let Some(init_res) = init_res else { continue };
+                let init = match init_res {
+                    Ok(inner) => inner?,
+                    Err(_) => return Err(anyhow!("init receiver task cancelled")),
+                };
+                if args.raw_cmaf {
+                    fs::create_dir_all(&args.output_dir)?;
+                    fs::write(args.output_dir.join("init.mp4"), &init)?;
+                } else {
+                    let _ = hls.write_init_segment(&init)?;
+                }
+                init_ready = true;
+                init_rx = None;
+
+                // Flush any segments we buffered while waiting for init.
+                buffered_segments.sort_by_key(|(idx, _, _)| *idx);
+                for (idx, dur, bytes) in buffered_segments.drain(..) {
+                    if args.raw_cmaf {
+                        fs::create_dir_all(&args.output_dir)?;
+                        fs::write(args.output_dir.join(format!("segment_{idx:06}.m4s")), &bytes)?;
+                    } else {
+                        let _ = hls.write_segment(idx, dur, &bytes)?;
+                    }
+                    written_chunks += 1;
+                    if let Some(limit) = args.stop_after {
+                        if written_chunks >= limit {
+                            return Ok(());
+                        }
+                    }
+                }
+                continue;
+            }
+            object = stream.recv() => {
+                let Some(object) = object else { break };
+        if let Some(bucket) = quota.as_mut() {
+            if !bucket.allow(object.data.len() as u64) {
+                tracing::warn!("quota exceeded; dropping chunk");
+                continue;
+            }
+        }
+        let stream_id_for_manifest = object
+            .meta
+            .encryption
+            .as_ref()
+            .map(|enc| strip_init_suffix(enc.key_id.as_str()).to_string());
+        let index = object
+            .meta
+            .timing
+            .as_ref()
+            .map(|t| t.chunk_index)
+            .unwrap_or_else(|| {
+                let current = fallback_index;
+                fallback_index += 1;
+                current
+            });
+        let stream_id = args
+            .stream_id
+            .as_deref()
+            .or_else(|| object.meta.encryption.as_ref().map(|enc| enc.key_id.as_str()));
+
+        let data = if let Some(enc) = &object.meta.encryption {
+            if enc.alg != ENCRYPTION_ALG {
+                tracing::warn!("unsupported encryption {}", enc.alg);
+                continue;
+            }
+            let Some(stream_id) = stream_id else {
+                tracing::warn!("missing stream id for decryption");
+                continue;
+            };
+            match decrypt_stream_data(stream_id, index, &object.data, network_secret.as_deref()) {
+                Some(plaintext) => plaintext,
+                None => {
+                    tracing::warn!("decryption failed for chunk {}", index);
+                    continue;
+                }
+            }
+        } else {
+            object.data
+        };
+
+        if let Some(store) = manifest_store.as_ref() {
+            let manifest = {
+                let store = store.read().await;
+                if let Some(manifest_id) = object.meta.manifest_id.as_ref() {
+                    store.get(manifest_id).cloned()
+                } else {
+                    if let Some(stream_id) = stream_id_for_manifest.as_deref() {
+                        find_manifest_for_stream_index(&store, stream_id, index)
+                    } else {
+                        None
+                    }
+                }
+            };
+
+            if let Some(manifest) = manifest {
+                    let expected = stream_id_for_manifest
+                        .as_deref()
+                        .and_then(|sid| manifest_hash_for_chunk(&manifest, sid, index));
+                    if let Some(expected) = expected {
+                        if let Some(meta_hash) = object.meta.chunk_hash.as_ref() {
+                            if expected != *meta_hash {
+                                tracing::warn!(
+                                    "manifest mismatch for chunk {} (expected {}, got {})",
+                                    index,
+                                    expected,
+                                    meta_hash
+                                );
+                                invalid_chunks += 1;
+                                if invalid_chunks > args.max_invalid_chunks {
+                                    tracing::warn!("too many invalid chunks; closing");
+                                    break;
+                                }
+                                continue;
+                            }
+                        } else if args.require_manifest {
+                            tracing::warn!("missing chunk hash for manifest");
+                            invalid_chunks += 1;
+                            if invalid_chunks > args.max_invalid_chunks {
+                                tracing::warn!("too many invalid chunks; closing");
+                                break;
+                            }
+                            continue;
+                        }
+                    } else {
+                        // If the manifest doesn't include hash lists, fall back to Merkle proof.
+                        if let (Some(meta_hash), Some(proof)) =
+                            (object.meta.chunk_hash.as_ref(), object.meta.chunk_proof.as_ref())
+                        {
+                            let offset = (index - manifest.body.chunk_start_index) as usize;
+                            if !verify_merkle_proof(
+                                meta_hash,
+                                offset,
+                                proof,
+                                &manifest.body.merkle_root,
+                            ) {
+                                tracing::warn!("chunk {} proof invalid for manifest", index);
+                                invalid_chunks += 1;
+                                if invalid_chunks > args.max_invalid_chunks {
+                                    tracing::warn!("too many invalid chunks; closing");
+                                    break;
+                                }
+                                continue;
+                            }
+                        } else if args.require_manifest {
+                            tracing::warn!("chunk {} outside manifest", index);
+                            invalid_chunks += 1;
+                            if invalid_chunks > args.max_invalid_chunks {
+                                tracing::warn!("too many invalid chunks; closing");
+                                break;
+                            }
+                            continue;
+                        }
+                    }
+            } else if args.require_manifest {
+                tracing::warn!("missing manifest covering chunk {}", index);
+                continue;
+            }
+        }
+
+        if let Some(expected) = object.meta.chunk_hash.as_ref() {
+            let actual = blake3::hash(&data).to_hex().to_string();
+            if &actual != expected {
+                tracing::warn!(
+                    "chunk {} hash mismatch (expected {}, got {})",
+                    index,
+                    expected,
+                    actual
+                );
+                invalid_chunks += 1;
+                if invalid_chunks > args.max_invalid_chunks {
+                    tracing::warn!("too many invalid chunks; closing");
+                    break;
+                }
+                continue;
+            }
+        }
+
+        let duration = chunk_duration_secs(&object.meta, fallback);
+        if !init_ready {
+            // Keep draining the MoQ track to avoid flow-control stalls while init is pending.
+            buffered_segments.push((index, duration, data));
+        } else {
+            if args.raw_cmaf {
+                fs::create_dir_all(&args.output_dir)?;
+                fs::write(args.output_dir.join(format!("segment_{index:06}.m4s")), &data)?;
+            } else {
+                let _ = hls.write_segment(index, duration, &data)?;
+            }
+            written_chunks += 1;
+        }
+        if let Some(limit) = args.stop_after {
+            if written_chunks >= limit {
+                break;
+            }
+        }
+            }
+        }
+    }
+
+    if needs_init && !init_ready {
+        return Err(anyhow!(
+            "stream ended before receiving CMAF init segment on track '{}' from {}",
+            args.init_track,
+            args.remote
+        ));
+    }
+
+    Ok(())
+}
+
+async fn moq_selftest(args: MoqSelftestArgs) -> Result<()> {
+    let discovery = parse_discovery(args.discovery.as_deref())?;
+    let publisher_node = MoqNode::bind_with_discovery(None, discovery).await?;
+    let subscriber_node = MoqNode::bind_with_discovery(None, discovery).await?;
+
+    publisher_node.endpoint().online().await;
+    subscriber_node.endpoint().online().await;
+
+    let stream_id = args.stream_id.unwrap_or_else(|| {
+        let ts = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_millis();
+        format!("selftest-{ts}")
+    });
+    let broadcast_name = stream_id.clone();
+    let track_name = args.track_name.clone();
+
+    let mut publisher = publisher_node
+        .publish_objects(&broadcast_name, &track_name)
+        .await?;
+    let mut endpoint_addr = publisher_node.endpoint().addr();
+    if endpoint_addr.addrs.is_empty() {
+        let mut watcher = publisher_node.endpoint().watch_addr();
+        let start = Instant::now();
+        while endpoint_addr.addrs.is_empty() && start.elapsed() < Duration::from_secs(3) {
+            tokio::time::sleep(Duration::from_millis(200)).await;
+            endpoint_addr = watcher.get();
+        }
+    }
+    if endpoint_addr.addrs.is_empty() {
+        tracing::warn!(
+            "publisher endpoint has no direct addrs; selftest may rely on discovery/relays"
+        );
+    }
+
+    let mut stream = subscriber_node
+        .subscribe_objects(endpoint_addr, &broadcast_name, &track_name)
+        .await?;
+
+    let expected: Arc<Mutex<BTreeMap<u64, blake3::Hash>>> = Arc::new(Mutex::new(BTreeMap::new()));
+    let (done_tx, mut done_rx) = tokio::sync::watch::channel(0usize);
+    let (progress_tx, mut progress_rx) = tokio::sync::mpsc::channel::<u64>(8);
+
+    let subscriber_task = tokio::spawn(async move {
+        let mut received: BTreeMap<u64, blake3::Hash> = BTreeMap::new();
+        loop {
+            tokio::select! {
+                item = stream.recv() => {
+                    match item {
+                        Some(object) => {
+                            let index = object
+                                .meta
+                                .timing
+                                .as_ref()
+                                .map(|timing| timing.chunk_index)
+                                .unwrap_or(0);
+                            let hash = blake3::hash(&object.data);
+                            received.insert(index, hash);
+                            let _ = progress_tx.send(index).await;
+                            let expected_total = *done_rx.borrow();
+                            if expected_total > 0 && received.len() >= expected_total {
+                                break;
+                            }
+                        }
+                        None => break,
+                    }
+                }
+                _ = done_rx.changed() => {
+                    let expected_total = *done_rx.borrow();
+                    if expected_total > 0 && received.len() >= expected_total {
+                        break;
+                    }
+                }
+            }
+        }
+        Ok::<_, anyhow::Error>(received)
+    });
+
+    let chunk_dir = args.chunk_dir.clone();
+    let input = args.input.clone();
+    let max_chunks = args.max_chunks;
+    let track = TrackName {
+        namespace: "every.channel".to_string(),
+        name: stream_id.clone(),
+    };
+
+    let objects =
+        tokio::task::spawn_blocking(move || -> Result<Vec<(u64, ObjectPayload, blake3::Hash)>> {
+            let _ = fs::remove_dir_all(&chunk_dir);
+            fs::create_dir_all(&chunk_dir)
+                .with_context(|| format!("failed to create {}", chunk_dir.display()))?;
+
+            let reader: Box<dyn Read + Send> = if input.starts_with("http://")
+                || input.starts_with("https://")
+            {
+                Box::new(ec_hdhomerun::open_stream_url(&input, None)?)
+            } else {
+                Box::new(File::open(&input).with_context(|| format!("failed to open {}", input))?)
+            };
+
+            let mut objects = Vec::new();
+            let out_dir = chunk_dir.join("cmaf");
+            let (init_path, segments) =
+                chunk_stream_cmaf_ffmpeg(reader, &out_dir, args.chunk_ms, max_chunks, true)?;
+
+            // Index 0: init.mp4
+            let (init_bytes, init_hash) = read_chunk_bytes_and_hash(&init_path)?;
+            let init_chunk = TsChunk {
+                index: 0,
+                path: init_path,
+                timing: ec_chopper::ChunkTiming {
+                    chunk_index: 0,
+                    chunk_start_27mhz: None,
+                    chunk_duration_27mhz: 0,
+                    utc_start_unix: None,
+                    sync_status: "init".to_string(),
+                },
+            };
+            let object = build_object(
+                init_chunk,
+                init_bytes,
+                init_hash,
+                None,
+                None,
+                None,
+                "video/mp4",
+                &track.name,
+            )?;
+            let hash = blake3::hash(&object.data);
+            objects.push((0, object, hash));
+
+            // Index 1..N: segments
+            for (i, seg_path) in segments.into_iter().enumerate() {
+                let index = (i as u64) + 1;
+                let (bytes, hash_hex) = read_chunk_bytes_and_hash(&seg_path)?;
+                let chunk = TsChunk {
+                    index,
+                    path: seg_path,
+                    timing: ec_chopper::ChunkTiming {
+                        chunk_index: index,
+                        chunk_start_27mhz: None,
+                        chunk_duration_27mhz: args.chunk_ms * 27_000,
+                        utc_start_unix: None,
+                        sync_status: "cmaf".to_string(),
+                    },
+                };
+                let object = build_object(
+                    chunk,
+                    bytes,
+                    hash_hex,
+                    None,
+                    None,
+                    None,
+                    "video/iso.segment",
+                    &track.name,
+                )?;
+                let hash = blake3::hash(&object.data);
+                objects.push((index, object, hash));
+            }
+
+            Ok(objects)
+        })
+        .await
+        .map_err(|err| anyhow!("chunking task failed: {err}"))??;
+
+    {
+        let mut map = expected.lock().expect("mutex poisoned");
+        for (index, _, hash) in &objects {
+            map.insert(*index, *hash);
+        }
+        let _ = done_tx.send(map.len());
+    }
+
+    tokio::time::sleep(Duration::from_millis(250)).await;
+
+    for (index, object, _) in objects {
+        publisher.publish_object(GroupId(index), object)?;
+        match tokio::time::timeout(Duration::from_secs(2), progress_rx.recv()).await {
+            Ok(Some(received)) if received == index => {}
+            Ok(Some(received)) => {
+                tracing::warn!("selftest received chunk {received} while waiting for {index}");
+            }
+            Ok(None) => {
+                return Err(anyhow!("selftest subscriber closed before chunk {index}"));
+            }
+            Err(_) => {
+                return Err(anyhow!("selftest timed out waiting for chunk {index}"));
+            }
+        }
+    }
+
+    let received = tokio::time::timeout(Duration::from_secs(20), subscriber_task)
+        .await
+        .map_err(|_| anyhow!("selftest timed out waiting for subscriber"))?
+        .map_err(|err| anyhow!("subscriber task failed: {err}"))??;
+
+    let expected_map = expected.lock().expect("mutex poisoned");
+    let mut mismatches = 0usize;
+
+    for (index, expected_hash) in expected_map.iter() {
+        match received.get(index) {
+            Some(actual) if actual == expected_hash => {}
+            Some(_) => {
+                mismatches += 1;
+                tracing::warn!("hash mismatch at chunk {index}");
+            }
+            None => {
+                mismatches += 1;
+                tracing::warn!("missing chunk {index}");
+            }
+        }
+    }
+
+    if received.len() > expected_map.len() {
+        mismatches += received.len() - expected_map.len();
+        tracing::warn!(
+            "received extra chunks ({})",
+            received.len() - expected_map.len()
+        );
+    }
+
+    if mismatches > 0 {
+        return Err(anyhow!("moq selftest failed with {mismatches} mismatches"));
+    }
+
+    println!(
+        "moq selftest ok: {} chunks verified (broadcast {}, track {})",
+        expected_map.len(),
+        broadcast_name,
+        track_name
+    );
+
+    Ok(())
+}
+
+#[derive(serde::Deserialize)]
+struct TurnResp {
+    ice_servers: Vec<ICEServer>,
+}
+
+async fn fetch_turn_ice_servers(client: &reqwest::Client, dir: &str) -> Option<Vec<ICEServer>> {
+    let base = dir.trim_end_matches('/');
+    let url = format!("{base}/api/turn");
+    let res = client.get(url).send().await.ok()?;
+    if !res.status().is_success() {
+        return None;
+    }
+    let body: TurnResp = res.json().await.ok()?;
+    if body.ice_servers.is_empty() {
+        return None;
+    }
+    Some(body.ice_servers)
+}
+
+async fn direct_publish(args: DirectPublishArgs) -> Result<()> {
+    fs::create_dir_all(&args.chunk_dir)
+        .with_context(|| format!("failed to create {}", args.chunk_dir.display()))?;
+
+    // For browser interop, we currently always normalize into deterministic H.264/AAC CMAF.
+    // This also keeps the codec stable for MSE playback.
+    let deterministic = true;
+
+    let source: Box<dyn StreamSource + Send> = match args.source {
+        IngestSource::Hls { url, .. } => Box::new(HlsSource {
+            url,
+            mode: HlsMode::Transcode,
+        }),
+        IngestSource::Hdhr {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        } => Box::new(HdhrSource {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        }),
+        IngestSource::LinuxDvb {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        } => Box::new(LinuxDvbSource {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        }),
+        IngestSource::Ts { input } => Box::new(TsSource { input }),
+    };
+
+    fn normalize_base(url: &str) -> String {
+        url.trim_end_matches('/').to_string()
+    }
+
+    let directory_url = args.directory_url.as_deref().map(normalize_base);
+    let client = reqwest::Client::builder()
+        .timeout(Duration::from_secs(8))
+        .build()
+        .with_context(|| "failed to build http client")?;
+
+    let mut cfg = PeerConfiguration::default();
+    if let Some(dir) = directory_url.as_deref() {
+        if let Some(ice) = fetch_turn_ice_servers(&client, dir).await {
+            cfg.ice_servers = ice;
+        }
+    }
+
+    let stream_id = args.stream_id.clone().unwrap_or_else(|| {
+        let ts = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_millis();
+        format!("every.channel/direct/{ts}")
+    });
+
+    #[derive(serde::Serialize)]
+    struct AnnounceReq<'a> {
+        stream_id: &'a str,
+        title: &'a str,
+        offer: &'a str,
+        expires_ms: u64,
+    }
+
+    #[derive(serde::Deserialize)]
+    struct AnswerResp {
+        answer: String,
+    }
+    let title = args.title.clone();
+    let out_dir = args.chunk_dir.join("cmaf");
+    let chunk_ms = args.chunk_ms;
+    let max_segments = args.max_segments;
+    let answer_override = args.answer.clone();
+
+    loop {
+        // New offerer per session so viewers can reconnect (or a new viewer can take over).
+        let offerer = PeerConnectionBuilder::new()
+            .set_config(cfg.clone())
+            .with_channel_options(vec![(
+                "simple_channel_".to_string(),
+                DataChannelOptions {
+                    ordered: Some(true),
+                    ..Default::default()
+                },
+            )])
+            .map_err(|e| anyhow!("{e:#}"))?
+            .build()
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+
+        let offer_desc = offerer
+            .get_local_description()
+            .await
+            .ok_or_else(|| anyhow!("missing local offer description"))?;
+        let offer_candidates = offerer
+            .collect_ice_candidates()
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+        let offer_link = encode_direct_link(&DirectCodeV1 {
+            v: 1,
+            desc: offer_desc,
+            candidates: offer_candidates,
+            label: Some("every.channel0".to_string()),
+        })?;
+
+        println!("{offer_link}");
+
+        let stop_refresh = tokio::sync::watch::channel(false);
+        if let Some(dir) = directory_url.as_deref() {
+            let now = SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis() as u64;
+            let req = AnnounceReq {
+                stream_id: &stream_id,
+                title: &title,
+                offer: &offer_link,
+                expires_ms: now.saturating_add(args.announce_ttl_ms),
+            };
+            let url = format!("{dir}/api/announce");
+            let res = client.post(url).json(&req).send().await?;
+            if !res.status().is_success() {
+                tracing::warn!("directory announce failed: {}", res.status());
+            } else {
+                tracing::info!("announced offer for {}", stream_id);
+            }
+
+            // Best-effort refresh while waiting for an answer (stops when the session starts).
+            let mut stop_rx = stop_refresh.1.clone();
+            let client2 = client.clone();
+            let dir2 = dir.to_string();
+            let stream_id2 = stream_id.clone();
+            let title2 = title.clone();
+            let offer2 = offer_link.clone();
+            let ttl = args.announce_ttl_ms;
+            tokio::spawn(async move {
+                loop {
+                    if *stop_rx.borrow() {
+                        break;
+                    }
+                    tokio::time::sleep(Duration::from_millis(ttl.saturating_mul(3) / 4)).await;
+                    if *stop_rx.borrow() {
+                        break;
+                    }
+                    let now = SystemTime::now()
+                        .duration_since(UNIX_EPOCH)
+                        .unwrap_or_default()
+                        .as_millis() as u64;
+                    let req = AnnounceReq {
+                        stream_id: &stream_id2,
+                        title: &title2,
+                        offer: &offer2,
+                        expires_ms: now.saturating_add(ttl),
+                    };
+                    let url = format!("{dir2}/api/announce");
+                    let fut = client2.post(url).json(&req).send();
+                    let _ = tokio::time::timeout(Duration::from_secs(5), fut).await;
+                }
+            });
+        }
+
+        let answer = if let Some(answer) = answer_override.clone() {
+            answer
+        } else if let Some(dir) = directory_url.as_deref() {
+            eprintln!("waiting for browser answer via {dir}/api/answer?stream_id=...");
+            let url = format!(
+                "{dir}/api/answer?stream_id={}",
+                urlencoding::encode(&stream_id)
+            );
+            let deadline = if args.answer_timeout_secs == 0 {
+                None
+            } else {
+                Some(Instant::now() + Duration::from_secs(args.answer_timeout_secs))
+            };
+            loop {
+                if deadline.is_some_and(|d| Instant::now() > d) {
+                    return Err(anyhow!(
+                        "timed out waiting for answer for stream_id {stream_id}"
+                    ));
+                }
+                match client.get(&url).send().await {
+                    Ok(res) if res.status().is_success() => {
+                        let body: AnswerResp = res.json().await?;
+                        break body.answer;
+                    }
+                    _ => {
+                        tokio::time::sleep(Duration::from_millis(300)).await;
+                    }
+                }
+            }
+        } else {
+            eprintln!("paste direct answer link/code, then press enter:");
+            let mut line = String::new();
+            std::io::stdin().read_line(&mut line)?;
+            line
+        };
+
+        // Stop refreshing announcements. If we keep the listing live while connected, people
+        // will try to join and silently fail (this direct path is 1:1 today).
+        let _ = stop_refresh.0.send(true);
+
+        let answer = decode_direct_link(&answer)?;
+        offerer
+            .set_remote_description(answer.desc)
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+        offerer
+            .add_ice_candidates(answer.candidates)
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+
+        let channel = offerer
+            .receive_channel()
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+        channel.wait_ready().await;
+        eprintln!("direct channel open: {}", channel.label());
+
+        // Detect viewer disconnect promptly. Relying only on `channel.send` errors can lag
+        // (depending on buffering), leaving the directory entry effectively "stuck".
+        let (pc_dead_tx, mut pc_dead_rx) = tokio::sync::oneshot::channel::<PeerConnectionState>();
+        let (pc_stop_tx, mut pc_stop_rx) = tokio::sync::watch::channel(false);
+        tokio::spawn(async move {
+            loop {
+                tokio::select! {
+                    _ = pc_stop_rx.changed() => {
+                        if *pc_stop_rx.borrow() {
+                            break;
+                        }
+                    }
+                    st = offerer.state_change() => {
+                        if matches!(
+                            st,
+                            PeerConnectionState::Disconnected | PeerConnectionState::Failed | PeerConnectionState::Closed
+                        ) {
+                            let _ = pc_dead_tx.send(st);
+                            break;
+                        }
+                    }
+                }
+            }
+        });
+
+        // Expire the listing quickly now that we have a live session.
+        if let Some(dir) = directory_url.as_deref() {
+            let now = SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis() as u64;
+            let req = AnnounceReq {
+                stream_id: &stream_id,
+                title: &title,
+                offer: &offer_link,
+                expires_ms: now.saturating_add(1500),
+            };
+            let url = format!("{dir}/api/announce");
+            let _ = client.post(url).json(&req).send().await;
+        }
+
+        enum ChunkItem {
+            Init(Vec<u8>),
+            Segment { index: u64, bytes: Vec<u8> },
+        }
+
+        let (tx, mut rx) = mpsc::channel::<ChunkItem>(8);
+        let reader = source.open_stream()?;
+        let out_dir2 = out_dir.clone();
+        let chunk_task = tokio::task::spawn_blocking(move || -> Result<()> {
+            let _ = fs::remove_dir_all(&out_dir2);
+            fs::create_dir_all(&out_dir2)
+                .with_context(|| format!("failed to create {}", out_dir2.display()))?;
+
+            let profile = if deterministic {
+                ec_chopper::deterministic_h264_profile()
+            } else {
+                ec_chopper::deterministic_h264_profile()
+            };
+
+            let mut cmd = Command::new("ffmpeg");
+            cmd.current_dir(&out_dir2);
+            cmd.arg("-hide_banner")
+                .arg("-loglevel")
+                .arg("error")
+                .arg("-nostdin")
+                .arg("-y")
+                .arg("-i")
+                .arg("pipe:0")
+                // predictable mapping
+                .arg("-map")
+                .arg("0:v:0")
+                .arg("-map")
+                .arg("0:a:0?")
+                .arg("-sn")
+                .arg("-dn")
+                .arg("-map_metadata")
+                .arg("-1")
+                // reduce scheduling nondeterminism
+                .arg("-filter_threads")
+                .arg("1")
+                .arg("-filter_complex_threads")
+                .arg("1")
+                .arg("-threads")
+                .arg("1");
+
+            for arg in ec_chopper::ffmpeg_profile_args(&profile) {
+                cmd.arg(arg);
+            }
+
+            let seg_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+            cmd.arg("-f")
+                .arg("hls")
+                .arg("-hls_time")
+                .arg(seg_time)
+                .arg("-hls_list_size")
+                .arg("0")
+                .arg("-hls_segment_type")
+                .arg("fmp4")
+                .arg("-hls_flags")
+                .arg("independent_segments")
+                .arg("-hls_fmp4_init_filename")
+                .arg("init.mp4")
+                .arg("-hls_segment_filename")
+                .arg("segment_%06d.m4s")
+                .arg("index.m3u8")
+                .stdin(Stdio::piped())
+                .stdout(Stdio::null())
+                .stderr(Stdio::inherit());
+
+            let mut child = cmd.spawn().with_context(|| "failed to spawn ffmpeg")?;
+            let mut stdin = child
+                .stdin
+                .take()
+                .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+            let mut reader = reader;
+            let writer = std::thread::spawn(move || -> Result<()> {
+                std::io::copy(&mut reader, &mut stdin)?;
+                Ok(())
+            });
+
+            let init_path = out_dir2.join("init.mp4");
+            wait_for_stable_file(&init_path, Duration::from_secs(20))?;
+            let init = fs::read(&init_path)?;
+            tx.blocking_send(ChunkItem::Init(init))
+                .map_err(|_| anyhow!("receiver closed"))?;
+
+            for i in 0..max_segments {
+                let seg_path = out_dir2.join(format!("segment_{i:06}.m4s"));
+                match wait_for_stable_file(&seg_path, Duration::from_secs(30)) {
+                    Ok(()) => {}
+                    Err(err) => {
+                        if let Ok(Some(status)) = child.try_wait() {
+                            if status.success() {
+                                break;
+                            }
+                            return Err(anyhow!("ffmpeg exited with {status} ({err:#})"));
+                        }
+                        return Err(err);
+                    }
+                }
+                let bytes = fs::read(&seg_path)?;
+                tx.blocking_send(ChunkItem::Segment {
+                    index: (i as u64) + 1,
+                    bytes,
+                })
+                .map_err(|_| anyhow!("receiver closed"))?;
+            }
+
+            let _ = child.kill();
+            let _ = child.wait();
+            let _ = writer.join();
+            Ok(())
+        });
+
+        let mut send_failed = false;
+        let mut have_heartbeat = false;
+        let mut last_heartbeat = Instant::now();
+        let mut heartbeat_check = tokio::time::interval(Duration::from_secs(1));
+        heartbeat_check.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Skip);
+        loop {
+            tokio::select! {
+                biased;
+                st = (&mut pc_dead_rx) => {
+                    match st {
+                        Ok(st) => tracing::info!("peer connection ended ({st:?}); restarting session"),
+                        Err(_) => tracing::info!("peer connection ended; restarting session"),
+                    }
+                    send_failed = true;
+                    break;
+                }
+                _ = heartbeat_check.tick() => {
+                    if have_heartbeat && last_heartbeat.elapsed() > DIRECT_HEARTBEAT_TIMEOUT {
+                        tracing::info!("direct session heartbeat timed out; restarting session");
+                        send_failed = true;
+                        break;
+                    }
+                }
+                msg = channel.receive() => {
+                    match msg {
+                        Ok(b) => {
+                            // Any message from the subscriber counts as a heartbeat today.
+                            // (We reserve DIRECT_WIRE_TAG_PING for explicit pings, but don't require it.)
+                            have_heartbeat = true;
+                            last_heartbeat = Instant::now();
+                            if !b.is_empty() && b[0] == DIRECT_WIRE_TAG_PING {
+                                // ignore
+                            }
+                        }
+                        Err(_) => {
+                            send_failed = true;
+                            break;
+                        }
+                    }
+                }
+                item = rx.recv() => {
+                    let Some(item) = item else { break };
+                    let (index, content_type, bytes, duration_27mhz, sync_status) = match item {
+                        ChunkItem::Init(bytes) => (0u64, "video/mp4", bytes, 0u64, "init"),
+                        ChunkItem::Segment { index, bytes } => {
+                            (index, "video/iso.segment", bytes, chunk_ms * 27_000, "cmaf")
+                        }
+                    };
+                    if index == 0 {
+                        tracing::info!("direct send: init.mp4 ({} bytes)", bytes.len());
+                    } else if index % 5 == 0 {
+                        tracing::info!("direct send: segment {index} ({} bytes)", bytes.len());
+                    }
+                    let hash = blake3::hash(&bytes).to_hex().to_string();
+                    let meta = ObjectMeta {
+                        created_unix_ms: SystemTime::now()
+                            .duration_since(UNIX_EPOCH)
+                            .unwrap_or_default()
+                            .as_millis() as u64,
+                        content_type: content_type.to_string(),
+                        size_bytes: bytes.len() as u64,
+                        timing: Some(TimingMeta {
+                            chunk_index: index,
+                            chunk_start_27mhz: 0,
+                            chunk_duration_27mhz: duration_27mhz,
+                            utc_start_unix: None,
+                            sync_status: sync_status.to_string(),
+                        }),
+                        encryption: None,
+                        chunk_hash: Some(hash),
+                        chunk_hash_alg: Some("blake3".to_string()),
+                        chunk_proof: None,
+                        chunk_proof_alg: None,
+                        manifest_id: None,
+                    };
+                    let frame = encode_object_frame(&meta, &bytes)?;
+                    match tokio::time::timeout(
+                        Duration::from_secs(5),
+                        direct_wire_send_frame(&channel, &frame),
+                    )
+                    .await
+                    {
+                        Ok(Ok(())) => {}
+                        Ok(Err(err)) => {
+                            tracing::warn!("direct send failed (restarting session): {err:#}");
+                            send_failed = true;
+                            break;
+                        }
+                        Err(_) => {
+                            tracing::warn!("direct send timed out (restarting session)");
+                            send_failed = true;
+                            break;
+                        }
+                    }
+                }
+            }
+        }
+
+        // Ensure the peer connection is dropped if we restart for non-ICE reasons (e.g. ffmpeg end).
+        let _ = pc_stop_tx.send(true);
+
+        drop(rx);
+        match chunk_task.await {
+            Ok(Ok(())) => {}
+            Ok(Err(err)) => {
+                // Common when the viewer disconnects: the receiver is dropped and the
+                // blocking sender errors out. Treat as a reconnect.
+                tracing::debug!("chunk task ended: {err:#}");
+            }
+            Err(err) => tracing::debug!("chunk task join error: {err}"),
+        }
+
+        if answer_override.is_some() {
+            // For manual mode, we can't reasonably loop.
+            break;
+        }
+        if !send_failed {
+            // ffmpeg ended or source ended; try again.
+            tokio::time::sleep(Duration::from_millis(500)).await;
+        }
+    }
+
+    Ok(())
+}
+
+async fn direct_wire_send_frame(channel: &impl DataChannelExt, frame: &[u8]) -> Result<()> {
+    let len = u32::try_from(frame.len()).map_err(|_| anyhow!("frame too large"))?;
+    let mut stream = Vec::with_capacity(4 + frame.len());
+    stream.extend_from_slice(&len.to_be_bytes());
+    stream.extend_from_slice(frame);
+
+    for chunk in stream.chunks(DIRECT_WIRE_CHUNK_BYTES) {
+        let mut msg = Vec::with_capacity(1 + chunk.len());
+        msg.push(DIRECT_WIRE_TAG_STREAM);
+        msg.extend_from_slice(chunk);
+        channel
+            .send(&bytes::Bytes::from(msg))
+            .await
+            .map_err(|e| anyhow!("{e:#}"))?;
+    }
+    Ok(())
+}
+
+#[derive(Debug, Default)]
+struct DirectWireDecoder {
+    buf: Vec<u8>,
+    pos: usize,
+    want: Option<usize>,
+}
+
+impl DirectWireDecoder {
+    fn push(&mut self, msg: &[u8]) -> Result<Vec<Vec<u8>>> {
+        if msg.is_empty() {
+            return Ok(Vec::new());
+        }
+
+        match msg[0] {
+            DIRECT_WIRE_TAG_FRAME => return Ok(vec![msg[1..].to_vec()]),
+            DIRECT_WIRE_TAG_STREAM => {
+                self.buf.extend_from_slice(&msg[1..]);
+            }
+            DIRECT_WIRE_TAG_PING => {
+                // Control message; ignore.
+                return Ok(Vec::new());
+            }
+            _ => {
+                // Unknown tag: treat as legacy "whole frame per message".
+                return Ok(vec![msg.to_vec()]);
+            }
+        }
+
+        let mut out = Vec::new();
+        loop {
+            if self.want.is_none() {
+                if self.buf.len().saturating_sub(self.pos) < 4 {
+                    break;
+                }
+                let start = self.pos;
+                let meta = &self.buf[start..start + 4];
+                let len = u32::from_be_bytes([meta[0], meta[1], meta[2], meta[3]]) as usize;
+                self.pos += 4;
+                self.want = Some(len);
+            }
+
+            let Some(want) = self.want else { break };
+            if self.buf.len().saturating_sub(self.pos) < want {
+                break;
+            }
+            let start = self.pos;
+            let end = start + want;
+            out.push(self.buf[start..end].to_vec());
+            self.pos = end;
+            self.want = None;
+
+            // Avoid unbounded growth: occasionally compact the buffer.
+            if self.pos > 64 * 1024 {
+                self.buf.drain(0..self.pos);
+                self.pos = 0;
+            }
+        }
+        Ok(out)
+    }
+}
+
+async fn direct_subscribe(args: DirectSubscribeArgs) -> Result<()> {
+    fs::create_dir_all(&args.out_dir)
+        .with_context(|| format!("failed to create {}", args.out_dir.display()))?;
+
+    #[derive(serde::Deserialize)]
+    struct DirectoryResp {
+        entries: Vec<DirectoryEntry>,
+    }
+
+    #[derive(serde::Deserialize)]
+    struct DirectoryEntry {
+        stream_id: String,
+        title: String,
+        offer: String,
+        #[allow(dead_code)]
+        expires_ms: Option<u64>,
+    }
+
+    fn normalize_base(url: &str) -> String {
+        url.trim_end_matches('/').to_string()
+    }
+
+    let dir = normalize_base(&args.directory_url);
+    let client = reqwest::Client::builder()
+        .timeout(Duration::from_secs(8))
+        .build()
+        .with_context(|| "failed to build http client")?;
+
+    let (stream_id, offer_link) = match (args.stream_id.clone(), args.offer.clone()) {
+        (_, Some(offer)) => (args.stream_id.clone(), offer),
+        (Some(stream_id), None) => {
+            let url = format!("{dir}/api/directory");
+            let res = client.get(&url).send().await?;
+            if !res.status().is_success() {
+                return Err(anyhow!("directory GET failed: {}", res.status()));
+            }
+            let body: DirectoryResp = res.json().await?;
+            let entry = body
+                .entries
+                .into_iter()
+                .find(|e| e.stream_id == stream_id)
+                .ok_or_else(|| anyhow!("stream_id not found in directory: {stream_id}"))?;
+            (Some(stream_id), entry.offer)
+        }
+        (None, None) => {
+            return Err(anyhow!("either --offer or --stream-id is required"));
+        }
+    };
+
+    let offer = decode_direct_link(&offer_link)?;
+    let mut cfg = PeerConfiguration::default();
+    if let Some(ice) = fetch_turn_ice_servers(&client, &dir).await {
+        cfg.ice_servers = ice;
+    }
+    let pc = PeerConnectionBuilder::new()
+        .set_config(cfg)
+        .with_remote_offer(Some(offer.desc))
+        .map_err(|e| anyhow!("{e:#}"))?
+        .build()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    pc.add_ice_candidates(offer.candidates)
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+
+    // Build our answer link (used both for directory POST and manual copy/paste).
+    let desc = pc
+        .get_local_description()
+        .await
+        .ok_or_else(|| anyhow!("missing local answer description"))?;
+    let candidates = pc
+        .collect_ice_candidates()
+        .await
+        .map_err(|e| anyhow!("{e:#}"))?;
+    let answer_link = encode_direct_link(&DirectCodeV1 {
+        v: 1,
+        desc,
+        candidates,
+        label: Some("every.channel0".to_string()),
+    })?;
+
+    if let Some(stream_id) = stream_id.as_deref() {
+        #[derive(serde::Serialize)]
+        struct AnswerReq<'a> {
+            stream_id: &'a str,
+            answer: &'a str,
+        }
+        let url = format!("{dir}/api/answer");
+        let res = client
+            .post(url)
+            .json(&AnswerReq {
+                stream_id,
+                answer: &answer_link,
+            })
+            .send()
+            .await?;
+        if !res.status().is_success() {
+            return Err(anyhow!(
+                "directory POST /api/answer failed: {}",
+                res.status()
+            ));
+        }
+    } else {
+        eprintln!("answer link (paste into publisher):\n{answer_link}");
+    }
+
+    let ch = pc.receive_channel().await.map_err(|e| anyhow!("{e:#}"))?;
+    ch.wait_ready().await;
+    eprintln!("direct channel open: {}", ch.label());
+
+    let cmaf_dir = args.out_dir.join("cmaf");
+    fs::create_dir_all(&cmaf_dir)
+        .with_context(|| format!("failed to create {}", cmaf_dir.display()))?;
+
+    let mut init_written = false;
+    let mut durations = Vec::<f64>::new();
+    let mut captured_segments = 0usize;
+    let mut decoder = DirectWireDecoder::default();
+
+    let mut ping = tokio::time::interval(Duration::from_secs(1));
+    ping.set_missed_tick_behavior(tokio::time::MissedTickBehavior::Skip);
+
+    let deadline = args
+        .duration_secs
+        .map(|s| Instant::now() + Duration::from_secs(s));
+    while captured_segments < args.max_segments {
+        if deadline.is_some_and(|d| Instant::now() > d) {
+            break;
+        }
+        let msg = tokio::select! {
+            _ = ping.tick() => {
+                // Heartbeat to help the publisher detect disconnects promptly.
+                let _ = ch.send(&bytes::Bytes::from(vec![DIRECT_WIRE_TAG_PING])).await;
+                continue;
+            }
+            msg = ch.receive() => msg.map_err(|e| anyhow!("{e:#}"))?,
+        };
+        for frame in decoder.push(&msg)? {
+            let payload = decode_object_frame(&frame)?;
+            let idx = payload
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_index)
+                .unwrap_or(0);
+
+            if idx == 0 {
+                tracing::info!("direct recv: init.mp4 ({} bytes)", payload.data.len());
+                let path = cmaf_dir.join("init.mp4");
+                fs::write(&path, &payload.data)
+                    .with_context(|| format!("failed to write {}", path.display()))?;
+                init_written = true;
+                continue;
+            }
+
+            if !init_written {
+                // Ignore segments until init arrives.
+                continue;
+            }
+
+            // Publisher indexes segments starting at 1; our filenames start at 0.
+            let seg = idx.saturating_sub(1);
+            let path = cmaf_dir.join(format!("segment_{seg:06}.m4s"));
+            fs::write(&path, &payload.data)
+                .with_context(|| format!("failed to write {}", path.display()))?;
+            tracing::info!("direct recv: segment {idx} ({} bytes)", payload.data.len());
+
+            let dur = payload
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_duration_27mhz as f64 / 27_000_000.0)
+                .unwrap_or(2.0);
+            durations.push(dur);
+            captured_segments += 1;
+            if captured_segments >= args.max_segments {
+                break;
+            }
+        }
+    }
+
+    if !init_written || durations.is_empty() {
+        return Err(anyhow!("no media captured (missing init or segments)"));
+    }
+
+    // Write a VOD playlist so ffmpeg can remux the fragments.
+    let target = durations
+        .iter()
+        .copied()
+        .fold(0.0_f64, f64::max)
+        .ceil()
+        .max(1.0) as u64;
+    let mut m3u8 = String::new();
+    m3u8.push_str("#EXTM3U\n");
+    m3u8.push_str("#EXT-X-VERSION:7\n");
+    m3u8.push_str(&format!("#EXT-X-TARGETDURATION:{target}\n"));
+    m3u8.push_str("#EXT-X-PLAYLIST-TYPE:VOD\n");
+    m3u8.push_str("#EXT-X-INDEPENDENT-SEGMENTS\n");
+    m3u8.push_str("#EXT-X-MAP:URI=\"init.mp4\"\n");
+    for (i, dur) in durations.iter().enumerate() {
+        m3u8.push_str(&format!("#EXTINF:{:.3},\n", dur));
+        m3u8.push_str(&format!("segment_{i:06}.m4s\n"));
+    }
+    m3u8.push_str("#EXT-X-ENDLIST\n");
+    let playlist_path = cmaf_dir.join("index.m3u8");
+    fs::write(&playlist_path, m3u8)
+        .with_context(|| format!("failed to write {}", playlist_path.display()))?;
+
+    let mp4_path = args
+        .mp4
+        .clone()
+        .unwrap_or_else(|| args.out_dir.join("capture.mp4"));
+    let status = Command::new("ffmpeg")
+        .arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-protocol_whitelist")
+        .arg("file,crypto,data")
+        .arg("-i")
+        .arg(&playlist_path)
+        .arg("-c")
+        .arg("copy")
+        .arg(&mp4_path)
+        .status();
+    match status {
+        Ok(s) if s.success() => {
+            println!("{}", mp4_path.display());
+        }
+        Ok(s) => {
+            eprintln!("ffmpeg remux failed: {s}");
+            println!("{}", playlist_path.display());
+        }
+        Err(err) => {
+            eprintln!("failed to run ffmpeg: {err}");
+            println!("{}", playlist_path.display());
+        }
+    }
+
+    Ok(())
+}
+
+fn ws_url_for(base: &str, stream_id: &str, role: &str) -> String {
+    let base = base.trim_end_matches('/');
+    let ws_base = if let Some(rest) = base.strip_prefix("https://") {
+        format!("wss://{rest}")
+    } else if let Some(rest) = base.strip_prefix("http://") {
+        format!("ws://{rest}")
+    } else if base.starts_with("ws://") || base.starts_with("wss://") {
+        base.to_string()
+    } else {
+        format!("wss://{base}")
+    };
+    format!(
+        "{ws_base}/api/stream/ws?stream_id={}&role={role}",
+        urlencoding::encode(stream_id)
+    )
+}
+
+async fn ws_send_frame(
+    ws: &mut tokio_tungstenite::WebSocketStream<tokio_tungstenite::MaybeTlsStream<tokio::net::TcpStream>>,
+    frame: &[u8],
+) -> Result<()> {
+    let len = u32::try_from(frame.len()).map_err(|_| anyhow!("frame too large"))?;
+    let mut stream = Vec::with_capacity(4 + frame.len());
+    stream.extend_from_slice(&len.to_be_bytes());
+    stream.extend_from_slice(frame);
+    for chunk in stream.chunks(DIRECT_WIRE_CHUNK_BYTES) {
+        let mut msg = Vec::with_capacity(1 + chunk.len());
+        msg.push(DIRECT_WIRE_TAG_STREAM);
+        msg.extend_from_slice(chunk);
+        ws.send(WsMessage::Binary(msg)).await?;
+    }
+    Ok(())
+}
+
+async fn ws_publish(args: WsPublishArgs) -> Result<()> {
+    fs::create_dir_all(&args.chunk_dir)
+        .with_context(|| format!("failed to create {}", args.chunk_dir.display()))?;
+
+    // For browser interop, we currently always normalize into deterministic H.264/AAC CMAF.
+    let deterministic = true;
+
+    let source: Box<dyn StreamSource + Send> = match args.source {
+        IngestSource::Hls { url, .. } => Box::new(HlsSource {
+            url,
+            mode: HlsMode::Transcode,
+        }),
+        IngestSource::Hdhr {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        } => Box::new(HdhrSource {
+            host,
+            device_id,
+            channel,
+            name,
+            prefer_mdns,
+        }),
+        IngestSource::LinuxDvb {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        } => Box::new(LinuxDvbSource {
+            adapter,
+            dvr,
+            tune_cmd,
+            tune_wait_ms,
+        }),
+        IngestSource::Ts { input } => Box::new(TsSource { input }),
+    };
+
+    fn normalize_base(url: &str) -> String {
+        url.trim_end_matches('/').to_string()
+    }
+
+    let directory_url = normalize_base(&args.directory_url);
+    let client = reqwest::Client::builder()
+        .timeout(Duration::from_secs(8))
+        .build()
+        .with_context(|| "failed to build http client")?;
+
+    let stream_id = args.stream_id.clone().unwrap_or_else(|| {
+        let ts = SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_millis();
+        format!("every.channel/ws/{ts}")
+    });
+    let title = args.title.clone();
+
+    #[derive(serde::Serialize)]
+    struct AnnounceReq<'a> {
+        stream_id: &'a str,
+        title: &'a str,
+        offer: &'a str,
+        expires_ms: u64,
+    }
+
+    // Directory listing is still "offer"-shaped today; keep a non-empty placeholder for legacy clients.
+    let offer_placeholder = format!("every.channel://watch?stream_id={}", stream_id);
+
+    // Refresh listing forever while publishing (one-to-many relay supports multiple viewers).
+    let ttl = args.announce_ttl_ms;
+    let client2 = client.clone();
+    let dir2 = directory_url.clone();
+    let stream_id2 = stream_id.clone();
+    let title2 = title.clone();
+    let offer2 = offer_placeholder.clone();
+    tokio::spawn(async move {
+        loop {
+            let now = SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis() as u64;
+            let req = AnnounceReq {
+                stream_id: &stream_id2,
+                title: &title2,
+                offer: &offer2,
+                expires_ms: now.saturating_add(ttl),
+            };
+            let url = format!("{dir2}/api/announce");
+            let _ = tokio::time::timeout(Duration::from_secs(5), client2.post(url).json(&req).send()).await;
+            tokio::time::sleep(Duration::from_millis(ttl.saturating_mul(3) / 4)).await;
+        }
+    });
+
+    // Connect to relay websocket as publisher.
+    let ws_url = ws_url_for(&directory_url, &stream_id, "pub");
+    eprintln!("ws publish: {stream_id}");
+    eprintln!("ws url: {ws_url}");
+    let (mut ws, _resp) = tokio_tungstenite::connect_async(&ws_url).await?;
+
+    enum ChunkItem {
+        Init(Vec<u8>),
+        Segment { index: u64, bytes: Vec<u8> },
+    }
+    let out_dir = args.chunk_dir.join("cmaf");
+    let chunk_ms = args.chunk_ms;
+    let max_segments = args.max_segments;
+
+    let (tx, mut rx) = mpsc::channel::<ChunkItem>(8);
+    let reader = source.open_stream()?;
+    let out_dir2 = out_dir.clone();
+    let chunk_task = tokio::task::spawn_blocking(move || -> Result<()> {
+        let _ = fs::remove_dir_all(&out_dir2);
+        fs::create_dir_all(&out_dir2)
+            .with_context(|| format!("failed to create {}", out_dir2.display()))?;
+
+        let profile = if deterministic {
+            ec_chopper::deterministic_h264_profile()
+        } else {
+            ec_chopper::deterministic_h264_profile()
+        };
+
+        let mut cmd = Command::new("ffmpeg");
+        cmd.current_dir(&out_dir2);
+        cmd.arg("-hide_banner")
+            .arg("-loglevel")
+            .arg("error")
+            .arg("-nostdin")
+            .arg("-y")
+            .arg("-i")
+            .arg("pipe:0")
+            // predictable mapping
+            .arg("-map")
+            .arg("0:v:0")
+            .arg("-map")
+            .arg("0:a:0?")
+            .arg("-sn")
+            .arg("-dn")
+            .arg("-map_metadata")
+            .arg("-1")
+            // reduce scheduling nondeterminism
+            .arg("-filter_threads")
+            .arg("1")
+            .arg("-filter_complex_threads")
+            .arg("1")
+            .arg("-threads")
+            .arg("1");
+
+        for arg in ec_chopper::ffmpeg_profile_args(&profile) {
+            cmd.arg(arg);
+        }
+
+        let seg_time = format!("{:.3}", chunk_ms as f64 / 1000.0);
+        cmd.arg("-f")
+            .arg("hls")
+            .arg("-hls_time")
+            .arg(seg_time)
+            .arg("-hls_list_size")
+            .arg("0")
+            .arg("-hls_segment_type")
+            .arg("fmp4")
+            .arg("-hls_flags")
+            .arg("independent_segments")
+            .arg("-hls_fmp4_init_filename")
+            .arg("init.mp4")
+            .arg("-hls_segment_filename")
+            .arg("segment_%06d.m4s")
+            .arg("index.m3u8")
+            .stdin(Stdio::piped())
+            .stdout(Stdio::null())
+            .stderr(Stdio::inherit());
+
+        let mut child = cmd.spawn().with_context(|| "failed to spawn ffmpeg")?;
+        let mut stdin = child
+            .stdin
+            .take()
+            .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+        let mut reader = reader;
+        let writer = std::thread::spawn(move || -> Result<()> {
+            std::io::copy(&mut reader, &mut stdin)?;
+            Ok(())
+        });
+
+        let init_path = out_dir2.join("init.mp4");
+        wait_for_stable_file(&init_path, Duration::from_secs(20))?;
+        let init = fs::read(&init_path)?;
+        tx.blocking_send(ChunkItem::Init(init))
+            .map_err(|_| anyhow!("receiver closed"))?;
+
+        for i in 0..max_segments {
+            let seg_path = out_dir2.join(format!("segment_{i:06}.m4s"));
+            match wait_for_stable_file(&seg_path, Duration::from_secs(30)) {
+                Ok(()) => {}
+                Err(err) => {
+                    if let Ok(Some(status)) = child.try_wait() {
+                        if status.success() {
+                            break;
+                        }
+                        return Err(anyhow!("ffmpeg exited with {status} ({err:#})"));
+                    }
+                    return Err(err);
+                }
+            }
+            let bytes = fs::read(&seg_path)?;
+            tx.blocking_send(ChunkItem::Segment {
+                index: (i as u64) + 1,
+                bytes,
+            })
+            .map_err(|_| anyhow!("receiver closed"))?;
+        }
+
+        let _ = child.kill();
+        let _ = child.wait();
+        let _ = writer.join();
+        Ok(())
+    });
+
+    while let Some(item) = rx.recv().await {
+        let (index, content_type, bytes, duration_27mhz, sync_status) = match item {
+            ChunkItem::Init(bytes) => (0u64, "video/mp4", bytes, 0u64, "init"),
+            ChunkItem::Segment { index, bytes } => {
+                (index, "video/iso.segment", bytes, chunk_ms * 27_000, "cmaf")
+            }
+        };
+        if index == 0 {
+            tracing::info!("ws send: init.mp4 ({} bytes)", bytes.len());
+        } else if index % 10 == 0 {
+            tracing::info!("ws send: segment {index} ({} bytes)", bytes.len());
+        }
+
+        let hash = blake3::hash(&bytes).to_hex().to_string();
+        let meta = ObjectMeta {
+            created_unix_ms: SystemTime::now()
+                .duration_since(UNIX_EPOCH)
+                .unwrap_or_default()
+                .as_millis() as u64,
+            content_type: content_type.to_string(),
+            size_bytes: bytes.len() as u64,
+            timing: Some(TimingMeta {
+                chunk_index: index,
+                chunk_start_27mhz: 0,
+                chunk_duration_27mhz: duration_27mhz,
+                utc_start_unix: None,
+                sync_status: sync_status.to_string(),
+            }),
+            encryption: None,
+            chunk_hash: Some(hash),
+            chunk_hash_alg: Some("blake3".to_string()),
+            chunk_proof: None,
+            chunk_proof_alg: None,
+            manifest_id: None,
+        };
+        let frame = encode_object_frame(&meta, &bytes)?;
+        tokio::time::timeout(Duration::from_secs(5), ws_send_frame(&mut ws, &frame)).await??;
+    }
+
+    match chunk_task.await {
+        Ok(Ok(())) => Ok(()),
+        Ok(Err(err)) => Err(err),
+        Err(err) => Err(anyhow!("chunk task join error: {err}")),
+    }
+}
+
+async fn ws_subscribe(args: WsSubscribeArgs) -> Result<()> {
+    fs::create_dir_all(&args.out_dir)
+        .with_context(|| format!("failed to create {}", args.out_dir.display()))?;
+
+    let ws_url = ws_url_for(&args.directory_url, &args.stream_id, "sub");
+    eprintln!("ws subscribe: {} ({ws_url})", args.stream_id);
+    let (mut ws, _resp) = tokio_tungstenite::connect_async(&ws_url).await?;
+
+    let cmaf_dir = args.out_dir.join("cmaf");
+    fs::create_dir_all(&cmaf_dir)
+        .with_context(|| format!("failed to create {}", cmaf_dir.display()))?;
+
+    let mut init_written = false;
+    let mut durations = Vec::<f64>::new();
+    let mut captured_segments = 0usize;
+    let mut decoder = DirectWireDecoder::default();
+
+    let deadline = args
+        .duration_secs
+        .map(|s| Instant::now() + Duration::from_secs(s));
+
+    while captured_segments < args.max_segments {
+        if deadline.is_some_and(|d| Instant::now() > d) {
+            break;
+        }
+        let next = ws.next().await.ok_or_else(|| anyhow!("websocket closed"))??;
+        let bytes = match next {
+            WsMessage::Binary(b) => b,
+            WsMessage::Close(_) => break,
+            _ => continue,
+        };
+        for frame in decoder.push(&bytes)? {
+            let payload = decode_object_frame(&frame)?;
+            let idx = payload
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_index)
+                .unwrap_or(0);
+
+            if idx == 0 {
+                tracing::info!("ws recv: init.mp4 ({} bytes)", payload.data.len());
+                let path = cmaf_dir.join("init.mp4");
+                fs::write(&path, &payload.data)
+                    .with_context(|| format!("failed to write {}", path.display()))?;
+                init_written = true;
+                continue;
+            }
+
+            if !init_written {
+                continue;
+            }
+
+            let seg = idx.saturating_sub(1);
+            let path = cmaf_dir.join(format!("segment_{seg:06}.m4s"));
+            fs::write(&path, &payload.data)
+                .with_context(|| format!("failed to write {}", path.display()))?;
+            if idx % 10 == 0 {
+                tracing::info!("ws recv: segment {idx} ({} bytes)", payload.data.len());
+            }
+
+            let dur = payload
+                .meta
+                .timing
+                .as_ref()
+                .map(|t| t.chunk_duration_27mhz as f64 / 27_000_000.0)
+                .unwrap_or(2.0);
+            durations.push(dur);
+            captured_segments += 1;
+            if captured_segments >= args.max_segments {
+                break;
+            }
+        }
+    }
+
+    if !init_written || durations.is_empty() {
+        return Err(anyhow!("no media captured (missing init or segments)"));
+    }
+
+    let target = durations
+        .iter()
+        .copied()
+        .fold(0.0_f64, f64::max)
+        .ceil()
+        .max(1.0) as u64;
+    let mut m3u8 = String::new();
+    m3u8.push_str("#EXTM3U\n");
+    m3u8.push_str("#EXT-X-VERSION:7\n");
+    m3u8.push_str(&format!("#EXT-X-TARGETDURATION:{target}\n"));
+    m3u8.push_str("#EXT-X-PLAYLIST-TYPE:VOD\n");
+    m3u8.push_str("#EXT-X-INDEPENDENT-SEGMENTS\n");
+    m3u8.push_str("#EXT-X-MAP:URI=\"init.mp4\"\n");
+    for (i, dur) in durations.iter().enumerate() {
+        m3u8.push_str(&format!("#EXTINF:{:.3},\n", dur));
+        m3u8.push_str(&format!("segment_{i:06}.m4s\n"));
+    }
+    m3u8.push_str("#EXT-X-ENDLIST\n");
+    let playlist_path = cmaf_dir.join("index.m3u8");
+    fs::write(&playlist_path, m3u8)
+        .with_context(|| format!("failed to write {}", playlist_path.display()))?;
+
+    let mp4_path = args
+        .mp4
+        .clone()
+        .unwrap_or_else(|| args.out_dir.join("capture.mp4"));
+    let status = Command::new("ffmpeg")
+        .arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-protocol_whitelist")
+        .arg("file,crypto,data")
+        .arg("-i")
+        .arg(&playlist_path)
+        .arg("-c")
+        .arg("copy")
+        .arg(&mp4_path)
+        .status();
+    match status {
+        Ok(s) if s.success() => {
+            println!("{}", mp4_path.display());
+        }
+        Ok(s) => {
+            eprintln!("ffmpeg remux failed: {s}");
+            println!("{}", playlist_path.display());
+        }
+        Err(err) => {
+            eprintln!("failed to run ffmpeg: {err}");
+            println!("{}", playlist_path.display());
+        }
+    }
+
+    Ok(())
+}
+
+fn parse_iroh_secret(value: Option<String>) -> Result<Option<iroh::SecretKey>> {
+    let value = value.or_else(|| std::env::var("IROH_SECRET").ok());
+    let Some(value) = value else { return Ok(None) };
+    let secret =
+        iroh::SecretKey::from_str(&value).with_context(|| "failed to parse IROH_SECRET")?;
+    Ok(Some(secret))
+}
+
+fn parse_discovery(value: Option<&str>) -> Result<DiscoveryConfig> {
+    match value {
+        Some(value) => DiscoveryConfig::from_list(value),
+        None => DiscoveryConfig::from_env(),
+    }
+}
+
+async fn spawn_catalog_announcer(
+    node: &MoqNode,
+    track: &TrackName,
+    broadcast_name: &str,
+    track_name: &str,
+    peers: Vec<String>,
+) -> Result<tokio::sync::mpsc::UnboundedSender<ManifestSummary>> {
+    let endpoint = serde_json::to_string(&node.endpoint_addr())
+        .unwrap_or_else(|_| node.endpoint().id().to_string());
+    let track = track.clone();
+    let broadcast_name = broadcast_name.to_string();
+    let track_name = track_name.to_string();
+    let (tx, mut rx) = tokio::sync::mpsc::unbounded_channel::<ManifestSummary>();
+    let endpoint_clone = endpoint.clone();
+    let node_endpoint = node.endpoint().clone();
+
+    tokio::spawn(async move {
+        let mut gossip = match ec_iroh::CatalogGossip::join(node_endpoint, &peers).await {
+            Ok(gossip) => gossip,
+            Err(err) => {
+                tracing::warn!("catalog gossip join failed: {err:#}");
+                return;
+            }
+        };
+        let entry = build_catalog_entry(
+            endpoint_clone.clone(),
+            &track,
+            &broadcast_name,
+            &track_name,
+            None,
+        );
+        if let Err(err) = gossip.announce(entry).await {
+            tracing::warn!("catalog announce failed: {err:#}");
+        }
+        while let Some(summary) = rx.recv().await {
+            let entry = build_catalog_entry(
+                endpoint_clone.clone(),
+                &track,
+                &broadcast_name,
+                &track_name,
+                Some(summary),
+            );
+            if let Err(err) = gossip.announce(entry).await {
+                tracing::warn!("catalog update failed: {err:#}");
+            }
+        }
+    });
+
+    Ok(tx)
+}
+
+fn build_catalog_entry(
+    endpoint: String,
+    track: &TrackName,
+    broadcast_name: &str,
+    track_name: &str,
+    manifest: Option<ManifestSummary>,
+) -> StreamCatalogEntry {
+    let stream = StreamDescriptor {
+        id: StreamId(track.name.clone()),
+        title: track.name.clone(),
+        number: None,
+        source: "moq".to_string(),
+        metadata: vec![StreamMetadata {
+            key: "broadcast".to_string(),
+            value: broadcast_name.to_string(),
+        }],
+    };
+
+    let encryption = StreamEncryptionInfo {
+        alg: ENCRYPTION_ALG.to_string(),
+        key_id: track.name.clone(),
+        nonce_scheme: "stream-id+chunk-index".to_string(),
+    };
+
+    let moq = MoqStreamDescriptor {
+        endpoint,
+        broadcast_name: broadcast_name.to_string(),
+        track_name: track_name.to_string(),
+        encryption: Some(encryption),
+    };
+
+    StreamCatalogEntry {
+        stream,
+        moq: Some(moq),
+        manifest,
+        updated_unix_ms: SystemTime::now()
+            .duration_since(UNIX_EPOCH)
+            .unwrap_or_default()
+            .as_millis() as u64,
+    }
+}
+
+fn wait_for_stable_file(path: &Path, timeout: Duration) -> Result<()> {
+    let start = Instant::now();
+    let mut last_len: Option<u64> = None;
+    let mut stable_ms: u64 = 0;
+
+    // We want "write is done" behavior. File size staying constant for a few polls
+    // is a pragmatic signal that ffmpeg is done producing the segment.
+    while start.elapsed() < timeout {
+        if let Ok(meta) = fs::metadata(path) {
+            let len = meta.len();
+            if len > 0 {
+                if Some(len) == last_len {
+                    stable_ms += 100;
+                    if stable_ms >= 300 {
+                        return Ok(());
+                    }
+                } else {
+                    last_len = Some(len);
+                    stable_ms = 0;
+                }
+            }
+        }
+        std::thread::sleep(Duration::from_millis(100));
+    }
+
+    Err(anyhow!(
+        "timed out waiting for stable file {} after {:?}",
+        path.display(),
+        timeout
+    ))
+}
diff --git a/crates/ec-node/src/source.rs b/crates/ec-node/src/source.rs
new file mode 100644
index 0000000..3482c93
--- /dev/null
+++ b/crates/ec-node/src/source.rs
@@ -0,0 +1,283 @@
+use anyhow::{anyhow, Result};
+use clap::ValueEnum;
+use ec_chopper::{deterministic_h264_profile, ffmpeg_profile_args};
+use ec_core::SourceId;
+use ec_hdhomerun::{find_lineup_entry_by_name, find_lineup_entry_by_number};
+use ec_linux_iptv::LinuxDvbConfig;
+use std::io::Read;
+use std::process::{Child, Command, Stdio};
+use std::thread;
+
+pub trait StreamSource: Send {
+    fn open_stream(&self) -> Result<Box<dyn Read + Send>>;
+    fn source_id(&self) -> SourceId;
+}
+
+#[derive(Debug, Clone)]
+pub struct HdhrSource {
+    pub host: Option<String>,
+    pub device_id: Option<String>,
+    pub channel: Option<String>,
+    pub name: Option<String>,
+    pub prefer_mdns: bool,
+}
+
+impl StreamSource for HdhrSource {
+    fn open_stream(&self) -> Result<Box<dyn Read + Send>> {
+        let device = resolve_hdhr_device(self)?;
+        let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+        let entry = if let Some(channel) = &self.channel {
+            find_lineup_entry_by_number(&lineup, channel)
+                .or_else(|| find_lineup_entry_by_name(&lineup, channel))
+                .ok_or_else(|| anyhow!("channel not found: {channel}"))?
+        } else if let Some(name) = &self.name {
+            find_lineup_entry_by_name(&lineup, name)
+                .ok_or_else(|| anyhow!("channel not found: {name}"))?
+        } else {
+            return Err(anyhow!("--channel or --name required for hdhr"));
+        };
+
+        Ok(Box::new(ec_hdhomerun::open_stream_entry(entry, None)?))
+    }
+
+    fn source_id(&self) -> SourceId {
+        let device_id = self.device_id.clone().or_else(|| self.host.clone());
+        SourceId {
+            kind: "hdhr".to_string(),
+            device_id,
+            channel: self.channel.clone().or_else(|| self.name.clone()),
+        }
+    }
+}
+
+fn resolve_hdhr_device(source: &HdhrSource) -> Result<ec_hdhomerun::HdhomerunDevice> {
+    if let Some(host) = &source.host {
+        return ec_hdhomerun::discover_from_host(host);
+    }
+
+    if let Some(device_id) = &source.device_id {
+        let host = format!("{device_id}.local");
+        return ec_hdhomerun::discover_from_host(&host);
+    }
+
+    if source.prefer_mdns {
+        if let Ok(device) = ec_hdhomerun::discover_from_host("hdhomerun.local") {
+            return Ok(device);
+        }
+    }
+
+    let mut devices = ec_hdhomerun::discover()?;
+    devices
+        .pop()
+        .ok_or_else(|| anyhow!("no HDHomeRun devices found"))
+}
+
+#[derive(Debug, Clone)]
+pub struct LinuxDvbSource {
+    pub adapter: u32,
+    pub dvr: u32,
+    pub tune_cmd: Vec<String>,
+    pub tune_wait_ms: Option<u64>,
+}
+
+impl StreamSource for LinuxDvbSource {
+    fn open_stream(&self) -> Result<Box<dyn Read + Send>> {
+        let config = LinuxDvbConfig {
+            adapter: self.adapter,
+            frontend: 0,
+            dvr: self.dvr,
+            tune_command: if self.tune_cmd.is_empty() {
+                None
+            } else {
+                Some(self.tune_cmd.clone())
+            },
+            tune_timeout_ms: self.tune_wait_ms,
+        };
+        Ok(Box::new(ec_linux_iptv::open_stream(&config)?))
+    }
+
+    fn source_id(&self) -> SourceId {
+        SourceId {
+            kind: "linux-dvb".to_string(),
+            device_id: Some(format!("adapter{}:dvr{}", self.adapter, self.dvr)),
+            channel: None,
+        }
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct TsSource {
+    pub input: String,
+}
+
+impl StreamSource for TsSource {
+    fn open_stream(&self) -> Result<Box<dyn Read + Send>> {
+        if self.input.starts_with("http://") || self.input.starts_with("https://") {
+            Ok(Box::new(ec_hdhomerun::open_stream_url(&self.input, None)?))
+        } else {
+            Ok(Box::new(std::fs::File::open(&self.input)?))
+        }
+    }
+
+    fn source_id(&self) -> SourceId {
+        SourceId {
+            kind: "ts".to_string(),
+            device_id: None,
+            channel: None,
+        }
+    }
+}
+
+#[derive(Debug, Clone, Copy, ValueEnum)]
+pub enum HlsMode {
+    Passthrough,
+    Remux,
+    Transcode,
+}
+
+impl Default for HlsMode {
+    fn default() -> Self {
+        HlsMode::Passthrough
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct HlsSource {
+    pub url: String,
+    pub mode: HlsMode,
+}
+
+impl StreamSource for HlsSource {
+    fn open_stream(&self) -> Result<Box<dyn Read + Send>> {
+        let mut cmd = Command::new("ffmpeg");
+        cmd.arg("-hide_banner")
+            .arg("-loglevel")
+            .arg("error")
+            .arg("-nostdin")
+            .arg("-i")
+            .arg(&self.url);
+
+        match self.mode {
+            HlsMode::Passthrough => {
+                cmd.arg("-c").arg("copy");
+            }
+            HlsMode::Remux => {
+                cmd.arg("-fflags").arg("+genpts").arg("-c").arg("copy");
+            }
+            HlsMode::Transcode => {
+                let profile = deterministic_h264_profile();
+                for arg in ffmpeg_profile_args(&profile) {
+                    cmd.arg(arg);
+                }
+            }
+        }
+
+        cmd.arg("-f")
+            .arg("mpegts")
+            .arg("pipe:1")
+            .stdout(Stdio::piped())
+            .stderr(Stdio::inherit());
+
+        let mut child = cmd
+            .spawn()
+            .map_err(|err| anyhow!("failed to spawn ffmpeg: {err}"))?;
+        let stdout = child
+            .stdout
+            .take()
+            .ok_or_else(|| anyhow!("ffmpeg stdout unavailable"))?;
+        Ok(Box::new(FfmpegChildStream { child, stdout }))
+    }
+
+    fn source_id(&self) -> SourceId {
+        SourceId {
+            kind: "hls".to_string(),
+            device_id: None,
+            channel: Some(self.url.clone()),
+        }
+    }
+}
+
+struct FfmpegChildStream {
+    child: Child,
+    stdout: std::process::ChildStdout,
+}
+
+impl Read for FfmpegChildStream {
+    fn read(&mut self, buf: &mut [u8]) -> std::io::Result<usize> {
+        self.stdout.read(buf)
+    }
+}
+
+impl Drop for FfmpegChildStream {
+    fn drop(&mut self) {
+        let _ = self.child.kill();
+    }
+}
+
+pub fn deterministic_transcode_stream(
+    reader: Box<dyn Read + Send>,
+) -> Result<Box<dyn Read + Send>> {
+    let profile = deterministic_h264_profile();
+    let mut cmd = Command::new("ffmpeg");
+    cmd.arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-i")
+        .arg("pipe:0");
+
+    for arg in ffmpeg_profile_args(&profile) {
+        cmd.arg(arg);
+    }
+
+    cmd.arg("-f")
+        .arg("mpegts")
+        .arg("pipe:1")
+        .stdin(Stdio::piped())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut child = cmd
+        .spawn()
+        .map_err(|err| anyhow!("failed to spawn ffmpeg: {err}"))?;
+    let mut stdin = child
+        .stdin
+        .take()
+        .ok_or_else(|| anyhow!("ffmpeg stdin unavailable"))?;
+    let stdout = child
+        .stdout
+        .take()
+        .ok_or_else(|| anyhow!("ffmpeg stdout unavailable"))?;
+
+    let writer = thread::spawn(move || {
+        let mut reader = reader;
+        let _ = std::io::copy(&mut reader, &mut stdin);
+    });
+
+    Ok(Box::new(FfmpegTranscodeStream {
+        child,
+        stdout,
+        writer: Some(writer),
+    }))
+}
+
+struct FfmpegTranscodeStream {
+    child: Child,
+    stdout: std::process::ChildStdout,
+    writer: Option<thread::JoinHandle<()>>,
+}
+
+impl Read for FfmpegTranscodeStream {
+    fn read(&mut self, buf: &mut [u8]) -> std::io::Result<usize> {
+        self.stdout.read(buf)
+    }
+}
+
+impl Drop for FfmpegTranscodeStream {
+    fn drop(&mut self) {
+        let _ = self.child.kill();
+        if let Some(writer) = self.writer.take() {
+            let _ = writer.join();
+        }
+    }
+}
diff --git a/crates/ec-node/tests/determinism_cmaf_ladder.rs b/crates/ec-node/tests/determinism_cmaf_ladder.rs
new file mode 100644
index 0000000..69c7669
--- /dev/null
+++ b/crates/ec-node/tests/determinism_cmaf_ladder.rs
@@ -0,0 +1,308 @@
+use std::io::{BufRead, BufReader};
+use std::path::Path;
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn wait_for_line_prefix(
+    lines: &mut dyn Iterator<Item = std::io::Result<String>>,
+    prefix: &str,
+    timeout: Duration,
+) -> Option<String> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        match lines.next() {
+            Some(Ok(line)) => {
+                if let Some(rest) = line.strip_prefix(prefix) {
+                    return Some(rest.trim().to_string());
+                }
+            }
+            Some(Err(_)) => continue,
+            None => break,
+        }
+    }
+    None
+}
+
+fn blake3_hex(path: &Path) -> anyhow::Result<String> {
+    let bytes = std::fs::read(path)?;
+    Ok(blake3::hash(&bytes).to_hex().to_string())
+}
+
+fn concat_init_and_segment(init: &Path, seg: &Path, out: &Path) -> anyhow::Result<()> {
+    let init_bytes = std::fs::read(init)?;
+    let seg_bytes = std::fs::read(seg)?;
+    let mut bytes = Vec::with_capacity(init_bytes.len() + seg_bytes.len());
+    bytes.extend_from_slice(&init_bytes);
+    bytes.extend_from_slice(&seg_bytes);
+    std::fs::write(out, bytes)?;
+    Ok(())
+}
+
+fn first_video_frame_keyframe_flag(mp4: &Path) -> anyhow::Result<u32> {
+    if Command::new("ffprobe")
+        .arg("-version")
+        .stdout(Stdio::null())
+        .stderr(Stdio::null())
+        .status()
+        .is_err()
+    {
+        // Cross-OS environments might not have ffprobe installed; treat as skip.
+        return Ok(1);
+    }
+    // Read only the first decoded frame record. For fMP4 this works reliably if we concat init+seg.
+    let out = Command::new("ffprobe")
+        .arg("-v")
+        .arg("error")
+        .arg("-select_streams")
+        .arg("v:0")
+        .arg("-show_frames")
+        .arg("-read_intervals")
+        .arg("%+#1")
+        .arg("-show_entries")
+        .arg("frame=key_frame")
+        .arg("-of")
+        .arg("csv=p=0")
+        .arg(mp4)
+        .output()?;
+    if !out.status.success() {
+        anyhow::bail!("ffprobe failed: {}", String::from_utf8_lossy(&out.stderr));
+    }
+    let s = String::from_utf8_lossy(&out.stdout);
+    let first = s.lines().next().unwrap_or("").trim();
+    // Some ffprobe builds may append extra columns (e.g. side data) even with restricted
+    // `-show_entries`. We only care about the first token.
+    let token = first.split(',').next().unwrap_or("").trim();
+    let flag: u32 = token
+        .parse()
+        .map_err(|_| anyhow::anyhow!("unexpected ffprobe output: {first:?}"))?;
+    Ok(flag)
+}
+
+fn write_deterministic_ts(out_path: &Path) -> anyhow::Result<()> {
+    // Deterministic synthetic A/V source: 30fps CFR with a fixed sine audio tone.
+    // Output: MPEG-TS, constrained to a stable keyframe cadence (g=60 -> 2s GOP).
+    let status = Command::new("ffmpeg")
+        .arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("testsrc2=size=1280x720:rate=30")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("sine=frequency=1000:sample_rate=48000")
+        .arg("-t")
+        .arg("10")
+        .arg("-map")
+        .arg("0:v:0")
+        .arg("-map")
+        .arg("1:a:0")
+        .arg("-c:v")
+        .arg("libx264")
+        .arg("-pix_fmt")
+        .arg("yuv420p")
+        .arg("-g")
+        .arg("60")
+        .arg("-keyint_min")
+        .arg("60")
+        .arg("-sc_threshold")
+        .arg("0")
+        .arg("-bf")
+        .arg("0")
+        .arg("-threads")
+        .arg("1")
+        .arg("-fflags")
+        .arg("+bitexact")
+        .arg("-flags:v")
+        .arg("+bitexact")
+        .arg("-c:a")
+        .arg("aac")
+        .arg("-b:a")
+        .arg("128k")
+        .arg("-ac")
+        .arg("2")
+        .arg("-ar")
+        .arg("48000")
+        .arg("-flags:a")
+        .arg("+bitexact")
+        .arg("-f")
+        .arg("mpegts")
+        .arg(out_path)
+        .status()?;
+    if !status.success() {
+        anyhow::bail!("ffmpeg synthetic TS generation failed with {status}");
+    }
+    Ok(())
+}
+
+fn run_ladder(ec_node: &Path, input_ts: &Path, out_dir: &Path) -> anyhow::Result<()> {
+    let signing_key = "11".repeat(32);
+    let network_secret = "22".repeat(32);
+    let stream_id = "every.channel/determinism/cmaf-ladder";
+    let broadcast_name = "every.channel/determinism/cmaf-ladder";
+
+    let mut cmd = Command::new(ec_node);
+    cmd.env("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", &signing_key)
+        .arg("moq-publish")
+        .arg("--publish-manifests")
+        .arg("--encode")
+        .arg("cmaf")
+        .arg("--cmaf-ladder")
+        .arg("hd3")
+        .arg("--epoch-chunks")
+        .arg("1")
+        .arg("--max-chunks")
+        .arg("3")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(stream_id)
+        .arg("--broadcast-name")
+        .arg(broadcast_name)
+        .arg("--track-name")
+        .arg("chunks")
+        .arg("--init-track")
+        .arg("init")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(out_dir)
+        .arg("--startup-delay-ms")
+        .arg("0")
+        .arg("ts")
+        .arg(input_ts)
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    // This will run until --max-chunks is reached, then exit.
+    let mut child = cmd.spawn()?;
+    let stdout = child.stdout.take().expect("publisher stdout missing");
+    let mut lines = BufReader::new(stdout).lines();
+    let _remote = wait_for_line_prefix(&mut lines, "moq endpoint addr: ", Duration::from_secs(10))
+        .ok_or_else(|| anyhow::anyhow!("publisher did not print endpoint addr"))?;
+
+    let status = child.wait()?;
+    if !status.success() {
+        anyhow::bail!("publisher failed: {status}");
+    }
+    Ok(())
+}
+
+#[test]
+#[ignore]
+fn deterministic_cmaf_ladder_outputs_match_across_runs() {
+    let ec_node = ec_node_path();
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let tmp = std::env::temp_dir().join(format!("ec-determinism-cmaf-ladder-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+
+    let input_ts = tmp.join("input.ts");
+    write_deterministic_ts(&input_ts).expect("write deterministic TS");
+
+    let run1 = tmp.join("run1");
+    let run2 = tmp.join("run2");
+    let _ = std::fs::remove_dir_all(&run1);
+    let _ = std::fs::remove_dir_all(&run2);
+    std::fs::create_dir_all(&run1).unwrap();
+    std::fs::create_dir_all(&run2).unwrap();
+
+    run_ladder(&ec_node, &input_ts, &run1).expect("run ladder 1");
+    run_ladder(&ec_node, &input_ts, &run2).expect("run ladder 2");
+
+    for variant in ["1080p", "720p", "480p"] {
+        let v1 = run1.join("cmaf-ladder").join(variant);
+        let v2 = run2.join("cmaf-ladder").join(variant);
+
+        let init1 = v1.join("init.mp4");
+        let init2 = v2.join("init.mp4");
+        assert!(
+            init1.exists() && init2.exists(),
+            "missing init for {variant}"
+        );
+        assert_eq!(
+            blake3_hex(&init1).unwrap(),
+            blake3_hex(&init2).unwrap(),
+            "init differs for {variant}"
+        );
+
+        for idx in 0..3 {
+            let s1 = v1.join(format!("segment_{idx:06}.m4s"));
+            let s2 = v2.join(format!("segment_{idx:06}.m4s"));
+            assert!(
+                s1.exists() && s2.exists(),
+                "missing segment {idx} for {variant}"
+            );
+            assert_eq!(
+                blake3_hex(&s1).unwrap(),
+                blake3_hex(&s2).unwrap(),
+                "segment {idx} differs for {variant}"
+            );
+        }
+    }
+}
+
+#[test]
+#[ignore]
+fn cmaf_ladder_segments_start_with_keyframes() {
+    let ec_node = ec_node_path();
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let tmp = std::env::temp_dir().join(format!("ec-determinism-cmaf-ladder-kf-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+
+    let input_ts = tmp.join("input.ts");
+    write_deterministic_ts(&input_ts).expect("write deterministic TS");
+
+    let run = tmp.join("run");
+    let _ = std::fs::remove_dir_all(&run);
+    std::fs::create_dir_all(&run).unwrap();
+    run_ladder(&ec_node, &input_ts, &run).expect("run ladder");
+
+    for variant in ["1080p", "720p", "480p"] {
+        let v = run.join("cmaf-ladder").join(variant);
+        let init = v.join("init.mp4");
+        assert!(init.exists(), "missing init for {variant}");
+
+        for idx in 0..3 {
+            let seg = v.join(format!("segment_{idx:06}.m4s"));
+            assert!(seg.exists(), "missing segment {idx} for {variant}");
+
+            let stitched = tmp.join(format!("stitched-{variant}-{idx:06}.mp4"));
+            concat_init_and_segment(&init, &seg, &stitched).unwrap();
+            let keyflag = first_video_frame_keyframe_flag(&stitched).unwrap();
+            assert_eq!(
+                keyflag, 1,
+                "segment {idx} not keyframe-aligned for {variant}"
+            );
+        }
+    }
+}
diff --git a/crates/ec-node/tests/e2e_cmaf_ladder.rs b/crates/ec-node/tests/e2e_cmaf_ladder.rs
new file mode 100644
index 0000000..6970c70
--- /dev/null
+++ b/crates/ec-node/tests/e2e_cmaf_ladder.rs
@@ -0,0 +1,231 @@
+use std::io::{BufRead, BufReader, Read};
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+const TS_PACKET_SIZE: usize = 188;
+
+fn env_required(key: &str) -> Option<String> {
+    std::env::var(key)
+        .ok()
+        .map(|v| v.trim().to_string())
+        .filter(|v| !v.is_empty())
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn wait_for_line_prefix(
+    lines: &mut dyn Iterator<Item = std::io::Result<String>>,
+    prefix: &str,
+    timeout: Duration,
+) -> Option<String> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        match lines.next() {
+            Some(Ok(line)) => {
+                if let Some(rest) = line.strip_prefix(prefix) {
+                    return Some(rest.trim().to_string());
+                }
+            }
+            Some(Err(_)) => continue,
+            None => break,
+        }
+    }
+    None
+}
+
+fn write_short_ts_recording(
+    host: &str,
+    channel: &str,
+    out_path: &std::path::Path,
+) -> anyhow::Result<()> {
+    // Use lineup to resolve name -> number, but capture from the provided host.
+    // (OrbStack/Linux may not resolve the lineup URL's mDNS hostname.)
+    let device = ec_hdhomerun::discover_from_host(host)?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+    let entry = ec_hdhomerun::find_lineup_entry_by_number(&lineup, channel)
+        .or_else(|| ec_hdhomerun::find_lineup_entry_by_name(&lineup, channel))
+        .ok_or_else(|| anyhow::anyhow!("channel not found in lineup: {channel}"))?;
+
+    let guide_number = entry.channel.number.as_deref().unwrap_or(channel);
+    let capture_url = format!("http://{host}:5004/auto/v{guide_number}");
+
+    // Capture a short TS sample directly from the HDHR.
+    // Retry a few times to handle "no tuner available" 5xx responses.
+    let mut last_err: Option<anyhow::Error> = None;
+    for attempt in 0..10 {
+        match ec_hdhomerun::open_stream_url(&capture_url, Some(14)) {
+            Ok(mut stream) => {
+                let mut file = std::fs::File::create(out_path)?;
+                std::io::copy(&mut stream, &mut file)?;
+                last_err = None;
+                break;
+            }
+            Err(err) => {
+                last_err = Some(err);
+                std::thread::sleep(Duration::from_millis(400 * (attempt + 1) as u64));
+                continue;
+            }
+        }
+    }
+    if let Some(err) = last_err {
+        return Err(err);
+    }
+
+    let mut file = std::fs::File::open(out_path)?;
+    let mut bytes = Vec::new();
+    file.read_to_end(&mut bytes)?;
+    let mut len = bytes.len();
+    let rem = len % TS_PACKET_SIZE;
+    if rem != 0 {
+        len -= rem;
+        std::fs::write(out_path, &bytes[..len])?;
+    }
+    if len < 188 * 200 {
+        anyhow::bail!("recorded TS too small ({} bytes) from HDHR {}", len, host);
+    }
+    Ok(())
+}
+
+#[test]
+#[ignore]
+fn e2e_cmaf_ladder_one_publisher_three_subscribers_verify_manifests() {
+    let host = match env_required("EVERY_CHANNEL_E2E_HDHR_HOST") {
+        Some(v) => v,
+        None => return, // skip
+    };
+    let channel = match env_required("EVERY_CHANNEL_E2E_HDHR_CHANNEL") {
+        Some(v) => v,
+        None => return, // skip
+    };
+
+    let ec_node = ec_node_path();
+
+    // Keep secrets deterministic for reproducibility.
+    let signing_key = "11".repeat(32);
+    let network_secret = "22".repeat(32);
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let stream_id = format!("every.channel/e2e/cmaf-ladder/{ts}");
+    let broadcast_name = stream_id.clone();
+
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-cmaf-ladder-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+    let input_ts = tmp.join("input.ts");
+
+    write_short_ts_recording(&host, &channel, &input_ts).expect("failed to record TS from HDHR");
+
+    let mut publisher = Command::new(&ec_node);
+    publisher
+        .env("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", &signing_key)
+        .arg("moq-publish")
+        .arg("--publish-manifests")
+        .arg("--encode")
+        .arg("cmaf")
+        .arg("--cmaf-ladder")
+        .arg("hd3")
+        .arg("--epoch-chunks")
+        .arg("1")
+        .arg("--max-chunks")
+        .arg("3")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("chunks")
+        .arg("--init-track")
+        .arg("init")
+        .arg("--manifest-track")
+        .arg("manifests")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(tmp.join("pub-chunks"))
+        .arg("--startup-delay-ms")
+        .arg("4000")
+        .arg("ts")
+        .arg(input_ts.to_string_lossy().to_string())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut pub_child = publisher.spawn().expect("spawn publisher");
+    let pub_stdout = pub_child.stdout.take().expect("publisher stdout missing");
+    let mut pub_lines = BufReader::new(pub_stdout).lines();
+    let remote = wait_for_line_prefix(
+        &mut pub_lines,
+        "moq endpoint addr: ",
+        Duration::from_secs(10),
+    )
+    .expect("publisher did not print endpoint addr");
+
+    let variants = ["1080p", "720p", "480p"];
+    let mut subscribers = Vec::new();
+    for variant in variants {
+        let out_dir = tmp.join(format!("sub-{variant}"));
+        let mut sub = Command::new(&ec_node);
+        sub.arg("moq-subscribe")
+            .arg("--remote")
+            .arg(&remote)
+            .arg("--remote-manifests")
+            .arg(&remote)
+            .arg("--broadcast-name")
+            .arg(&broadcast_name)
+            .arg("--track-name")
+            .arg(format!("chunks/{variant}"))
+            .arg("--subscribe-manifests")
+            .arg("--require-manifest")
+            .arg("--manifest-track")
+            .arg("manifests")
+            .arg("--container")
+            .arg("cmaf")
+            .arg("--subscribe-init")
+            .arg("--init-track")
+            .arg(format!("init/{variant}"))
+            .arg("--raw-cmaf")
+            .arg("--stop-after")
+            .arg("2")
+            .arg("--network-secret")
+            .arg(&network_secret)
+            .arg("--output-dir")
+            .arg(&out_dir)
+            .stdout(Stdio::inherit())
+            .stderr(Stdio::inherit());
+        subscribers.push((
+            variant.to_string(),
+            out_dir,
+            sub.spawn().expect("spawn subscriber"),
+        ));
+    }
+
+    for (variant, out_dir, mut child) in subscribers {
+        let status = child.wait().expect("wait subscriber");
+        assert!(status.success(), "subscriber {variant} failed: {status}");
+        let init = out_dir.join("init.mp4");
+        assert!(init.exists(), "subscriber {variant} missing init.mp4");
+        let seg0 = out_dir.join("segment_000000.m4s");
+        assert!(seg0.exists(), "subscriber {variant} missing first segment");
+    }
+
+    let _ = pub_child.kill();
+}
diff --git a/crates/ec-node/tests/e2e_hdhr.rs b/crates/ec-node/tests/e2e_hdhr.rs
new file mode 100644
index 0000000..f540bf5
--- /dev/null
+++ b/crates/ec-node/tests/e2e_hdhr.rs
@@ -0,0 +1,211 @@
+use std::io::{BufRead, BufReader};
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+fn env_required(key: &str) -> Option<String> {
+    std::env::var(key)
+        .ok()
+        .map(|v| v.trim().to_string())
+        .filter(|v| !v.is_empty())
+}
+
+fn looks_drm(value: &str) -> bool {
+    let value = value.to_lowercase();
+    value.contains("drm")
+        || value.contains("encrypted")
+        || value.contains("protected")
+        || value.contains("copy")
+        || value.contains("widevine")
+}
+
+fn autodiscover_hdhr_host_and_channel() -> Option<(String, String)> {
+    let devices = ec_hdhomerun::discover().ok()?;
+    let device = devices.into_iter().next()?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device).ok()?;
+    let entry = lineup.iter().find(|e| {
+        let tag_drm = e.tags.iter().any(|t| looks_drm(t));
+        let raw_drm = e
+            .raw
+            .as_object()
+            .map(|obj| {
+                obj.iter()
+                    .any(|(k, v)| looks_drm(k) || looks_drm(&v.to_string()))
+            })
+            .unwrap_or(false);
+        !tag_drm && !raw_drm && e.channel.number.as_deref().unwrap_or("").trim() != ""
+    })?;
+    let host = device.ip.clone();
+    let channel = entry
+        .channel
+        .number
+        .clone()
+        .or_else(|| Some(entry.channel.name.clone()))
+        .unwrap_or_else(|| "2.1".to_string());
+    Some((host, channel))
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    // Fallback: assume a standard cargo target layout.
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    let bin = debug_dir.join("ec-node");
+    bin
+}
+
+#[test]
+#[ignore]
+fn e2e_hdhr_publish_then_subscribe_with_manifest_and_encryption() {
+    let host = env_required("EVERY_CHANNEL_E2E_HDHR_HOST");
+    let channel = env_required("EVERY_CHANNEL_E2E_HDHR_CHANNEL");
+    let (host, channel) = match (host, channel) {
+        (Some(host), Some(channel)) => (host, channel),
+        _ => match autodiscover_hdhr_host_and_channel() {
+            Some(v) => v,
+            None => return, // skip
+        },
+    };
+
+    let ec_node = ec_node_path();
+
+    // Keep secrets deterministic for reproducibility.
+    let signing_key = "11".repeat(32);
+    let network_secret = "22".repeat(32);
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let broadcast_name = format!("every.channel/e2e/{ts}");
+
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-hdhr-{ts}"));
+    let publish_chunks = tmp.join("publish-chunks");
+    let subscribe_out = tmp.join("subscribe-out");
+
+    let mut publisher = Command::new(&ec_node);
+    publisher
+        .env("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", &signing_key)
+        .arg("moq-publish")
+        .arg("--publish-manifests")
+        .arg("--epoch-chunks")
+        .arg("1")
+        .arg("--max-chunks")
+        .arg("8")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(&publish_chunks)
+        .arg("hdhr")
+        .arg("--host")
+        .arg(&host)
+        .arg("--channel")
+        .arg(&channel)
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut child = publisher.spawn().expect("failed to spawn publisher");
+    let stdout = child.stdout.take().expect("publisher stdout missing");
+    let mut lines = BufReader::new(stdout).lines();
+
+    let mut remote: Option<String> = None;
+    let mut track: Option<String> = None;
+    let deadline = Instant::now() + Duration::from_secs(10);
+    while Instant::now() < deadline {
+        let line = match lines.next() {
+            Some(Ok(line)) => line,
+            Some(Err(_)) => continue,
+            None => break,
+        };
+        if let Some(rest) = line.strip_prefix("moq endpoint addr: ") {
+            remote = Some(rest.trim().to_string());
+        } else if let Some(rest) = line.strip_prefix("moq track: ") {
+            track = Some(rest.trim().to_string());
+        }
+        if remote.is_some() && track.is_some() {
+            break;
+        }
+    }
+
+    let remote = remote.expect("publisher did not print endpoint addr in time");
+    let track = track.expect("publisher did not print track in time");
+
+    let mut subscriber = Command::new(&ec_node);
+    subscriber
+        .arg("moq-subscribe")
+        .arg("--remote")
+        .arg(&remote)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg(&track)
+        .arg("--subscribe-manifests")
+        .arg("--require-manifest")
+        .arg("--max-invalid-chunks")
+        .arg("0")
+        .arg("--stop-after")
+        .arg("3")
+        .arg("--output-dir")
+        .arg(&subscribe_out)
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .stdout(Stdio::inherit())
+        .stderr(Stdio::inherit());
+
+    let mut sub_child = subscriber.spawn().expect("failed to spawn subscriber");
+    let start = Instant::now();
+    loop {
+        if let Ok(Some(status)) = sub_child.try_wait() {
+            assert!(status.success(), "subscriber exited with {status}");
+            break;
+        }
+        if start.elapsed() > Duration::from_secs(30) {
+            let _ = sub_child.kill();
+            panic!("subscriber timed out");
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+
+    // Publisher should exit after max chunks; don't hang forever.
+    let start = Instant::now();
+    loop {
+        if let Ok(Some(status)) = child.try_wait() {
+            assert!(status.success(), "publisher exited with {status}");
+            break;
+        }
+        if start.elapsed() > Duration::from_secs(30) {
+            let _ = child.kill();
+            panic!("publisher timed out");
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+
+    let playlist = subscribe_out.join("index.m3u8");
+    assert!(
+        playlist.exists(),
+        "missing playlist at {}",
+        playlist.display()
+    );
+    let segments = std::fs::read_dir(&subscribe_out)
+        .unwrap()
+        .filter_map(|e| e.ok())
+        .filter(|e| e.file_name().to_string_lossy().starts_with("segment_"))
+        .count();
+    assert!(segments >= 1, "expected at least one segment");
+}
diff --git a/crates/ec-node/tests/e2e_mesh_split.rs b/crates/ec-node/tests/e2e_mesh_split.rs
new file mode 100644
index 0000000..9b80764
--- /dev/null
+++ b/crates/ec-node/tests/e2e_mesh_split.rs
@@ -0,0 +1,305 @@
+use std::io::{BufRead, BufReader, Read, Write};
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+const TS_PACKET_SIZE: usize = 188;
+
+fn env_required(key: &str) -> Option<String> {
+    std::env::var(key)
+        .ok()
+        .map(|v| v.trim().to_string())
+        .filter(|v| !v.is_empty())
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn wait_for_line_prefix(
+    lines: &mut dyn Iterator<Item = std::io::Result<String>>,
+    prefix: &str,
+    timeout: Duration,
+) -> Option<String> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        match lines.next() {
+            Some(Ok(line)) => {
+                if let Some(rest) = line.strip_prefix(prefix) {
+                    return Some(rest.trim().to_string());
+                }
+            }
+            Some(Err(_)) => continue,
+            None => break,
+        }
+    }
+    None
+}
+
+fn write_short_ts_recording(
+    host: &str,
+    channel: &str,
+    out_path: &std::path::Path,
+) -> anyhow::Result<()> {
+    // Use the lineup's stream URL so we get the correct host/port (often :5004).
+    // HDHomeRun supports `duration=...` on the stream URL on many models.
+    // We also cap by time/bytes to avoid hanging if duration is ignored.
+    let device = ec_hdhomerun::discover_from_host(host)?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+    let entry = ec_hdhomerun::find_lineup_entry_by_number(&lineup, channel)
+        .or_else(|| ec_hdhomerun::find_lineup_entry_by_name(&lineup, channel))
+        .ok_or_else(|| anyhow::anyhow!("channel not found in lineup: {channel}"))?;
+
+    // Tuner allocation can transiently fail (503) if another client is using all tuners.
+    // Retry briefly; we only need a short capture.
+    let mut last_err: Option<anyhow::Error> = None;
+    let mut stream = loop {
+        match ec_hdhomerun::open_stream_entry(entry, Some(8)) {
+            Ok(stream) => break stream,
+            Err(err) => {
+                let msg = format!("{err:#}");
+                last_err = Some(err);
+                if msg.contains("503") {
+                    std::thread::sleep(Duration::from_millis(500));
+                    continue;
+                }
+                return Err(last_err.unwrap());
+            }
+        }
+    };
+
+    let mut file = std::fs::File::create(out_path)?;
+    let start = Instant::now();
+    let mut bytes = 0usize;
+    let mut buf = [0u8; 64 * 1024];
+    loop {
+        let n = stream.read(&mut buf)?;
+        if n == 0 {
+            break;
+        }
+        file.write_all(&buf[..n])?;
+        bytes += n;
+        if bytes >= 8 * 1024 * 1024 {
+            break;
+        }
+        if start.elapsed() > Duration::from_secs(6) {
+            break;
+        }
+    }
+    file.flush()?;
+    // Ensure the TS file ends on a packet boundary.
+    let len = file.metadata()?.len();
+    let rem = (len as usize) % TS_PACKET_SIZE;
+    if rem != 0 {
+        file.set_len(len - rem as u64)?;
+        bytes = (len as usize) - rem;
+    }
+    if bytes < 188 * 20 {
+        anyhow::bail!("recorded TS too small ({} bytes) from HDHR {}", bytes, host);
+    }
+    Ok(())
+}
+
+#[test]
+#[ignore]
+fn e2e_split_sources_manifests_from_one_peer_objects_from_another() {
+    let host = match env_required("EVERY_CHANNEL_E2E_HDHR_HOST") {
+        Some(v) => v,
+        None => return, // skip
+    };
+    let channel = match env_required("EVERY_CHANNEL_E2E_HDHR_CHANNEL") {
+        Some(v) => v,
+        None => return, // skip
+    };
+
+    let ec_node = ec_node_path();
+
+    // Keep secrets deterministic for reproducibility.
+    let signing_key = "11".repeat(32);
+    let network_secret = "22".repeat(32);
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let stream_id = format!("every.channel/e2e/mesh/{ts}");
+    let broadcast_name = stream_id.clone();
+
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-mesh-split-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+    let input_ts = tmp.join("input.ts");
+    let manifest_chunks = tmp.join("chunks-manifests");
+    let object_chunks = tmp.join("chunks-objects");
+    let subscribe_out = tmp.join("subscribe-out");
+
+    write_short_ts_recording(&host, &channel, &input_ts).expect("failed to record TS from HDHR");
+
+    // Publisher A: leader/signer, publishes manifests only.
+    // Give subscribers time to connect before ingest starts.
+    let mut pub_manifests = Command::new(&ec_node);
+    pub_manifests
+        .env("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", &signing_key)
+        .arg("moq-publish")
+        .arg("--publish-manifests")
+        .arg("--publish-chunks")
+        .arg("false")
+        .arg("--epoch-chunks")
+        .arg("1")
+        .arg("--max-chunks")
+        .arg("6")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("noop")
+        .arg("--manifest-track")
+        .arg("manifests")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(&manifest_chunks)
+        .arg("--startup-delay-ms")
+        .arg("5000")
+        .arg("ts")
+        .arg(input_ts.to_string_lossy().to_string())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut pub_a = pub_manifests.spawn().expect("spawn manifest publisher");
+    let a_stdout = pub_a
+        .stdout
+        .take()
+        .expect("manifest publisher stdout missing");
+    let mut a_lines = BufReader::new(a_stdout).lines();
+    let remote_manifests =
+        wait_for_line_prefix(&mut a_lines, "moq endpoint addr: ", Duration::from_secs(10))
+            .expect("manifest publisher did not print endpoint addr");
+
+    // Publisher B: relay/data, publishes chunk objects only.
+    // Delay longer than the manifest publisher so the subscriber can receive manifests first.
+    let mut pub_objects = Command::new(&ec_node);
+    pub_objects
+        .arg("moq-publish")
+        .arg("--publish-chunks")
+        .arg("true")
+        .arg("--max-chunks")
+        .arg("6")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("objects")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(&object_chunks)
+        .arg("--startup-delay-ms")
+        .arg("9000")
+        .arg("ts")
+        .arg(input_ts.to_string_lossy().to_string())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut pub_b = pub_objects.spawn().expect("spawn object publisher");
+    let b_stdout = pub_b
+        .stdout
+        .take()
+        .expect("object publisher stdout missing");
+    let mut b_lines = BufReader::new(b_stdout).lines();
+    let remote_objects =
+        wait_for_line_prefix(&mut b_lines, "moq endpoint addr: ", Duration::from_secs(10))
+            .expect("object publisher did not print endpoint addr");
+
+    // Subscriber: stitch objects from B with manifests from A.
+    let mut subscriber = Command::new(&ec_node);
+    subscriber
+        .arg("moq-subscribe")
+        .arg("--remote")
+        .arg(&remote_objects)
+        .arg("--remote-manifests")
+        .arg(&remote_manifests)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("objects")
+        .arg("--manifest-track")
+        .arg("manifests")
+        .arg("--subscribe-manifests")
+        .arg("--require-manifest")
+        .arg("--max-invalid-chunks")
+        .arg("0")
+        .arg("--stop-after")
+        .arg("2")
+        .arg("--output-dir")
+        .arg(&subscribe_out)
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .stdout(Stdio::inherit())
+        .stderr(Stdio::inherit());
+
+    let mut sub_child = subscriber.spawn().expect("failed to spawn subscriber");
+    let start = Instant::now();
+    loop {
+        if let Ok(Some(status)) = sub_child.try_wait() {
+            assert!(status.success(), "subscriber exited with {status}");
+            break;
+        }
+        if start.elapsed() > Duration::from_secs(30) {
+            let _ = sub_child.kill();
+            panic!("subscriber timed out");
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+
+    // Ensure publishers exit after max chunks.
+    for child in [&mut pub_a, &mut pub_b] {
+        let start = Instant::now();
+        loop {
+            if let Ok(Some(status)) = child.try_wait() {
+                assert!(status.success(), "publisher exited with {status}");
+                break;
+            }
+            if start.elapsed() > Duration::from_secs(30) {
+                let _ = child.kill();
+                panic!("publisher timed out");
+            }
+            std::thread::sleep(Duration::from_millis(200));
+        }
+    }
+
+    let playlist = subscribe_out.join("index.m3u8");
+    assert!(
+        playlist.exists(),
+        "missing playlist at {}",
+        playlist.display()
+    );
+    let segments = std::fs::read_dir(&subscribe_out)
+        .unwrap()
+        .filter_map(|e| e.ok())
+        .filter(|e| e.file_name().to_string_lossy().starts_with("segment_"))
+        .count();
+    assert!(segments >= 1, "expected at least one segment");
+}
diff --git a/crates/ec-node/tests/e2e_mesh_split_cmaf.rs b/crates/ec-node/tests/e2e_mesh_split_cmaf.rs
new file mode 100644
index 0000000..77f000f
--- /dev/null
+++ b/crates/ec-node/tests/e2e_mesh_split_cmaf.rs
@@ -0,0 +1,345 @@
+use std::io::{BufRead, BufReader, Read};
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+const TS_PACKET_SIZE: usize = 188;
+
+fn env_required(key: &str) -> Option<String> {
+    std::env::var(key)
+        .ok()
+        .map(|v| v.trim().to_string())
+        .filter(|v| !v.is_empty())
+}
+
+fn looks_drm(value: &str) -> bool {
+    let value = value.to_lowercase();
+    value.contains("drm")
+        || value.contains("encrypted")
+        || value.contains("protected")
+        || value.contains("copy")
+        || value.contains("widevine")
+}
+
+fn autodiscover_hdhr_host_and_channel() -> Option<(String, String)> {
+    let devices = ec_hdhomerun::discover().ok()?;
+    let device = devices.into_iter().next()?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device).ok()?;
+    let entry = lineup.iter().find(|e| {
+        // Prefer a likely-clear channel to avoid false negatives in E2E.
+        let tag_drm = e.tags.iter().any(|t| looks_drm(t));
+        let raw_drm = e
+            .raw
+            .as_object()
+            .map(|obj| {
+                obj.iter()
+                    .any(|(k, v)| looks_drm(k) || looks_drm(&v.to_string()))
+            })
+            .unwrap_or(false);
+        !tag_drm && !raw_drm && e.channel.number.as_deref().unwrap_or("").trim() != ""
+    })?;
+    let host = device.ip.clone();
+    let channel = entry
+        .channel
+        .number
+        .clone()
+        .or_else(|| Some(entry.channel.name.clone()))
+        .unwrap_or_else(|| "2.1".to_string());
+    Some((host, channel))
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn wait_for_line_prefix(
+    lines: &mut dyn Iterator<Item = std::io::Result<String>>,
+    prefix: &str,
+    timeout: Duration,
+) -> Option<String> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        match lines.next() {
+            Some(Ok(line)) => {
+                if let Some(rest) = line.strip_prefix(prefix) {
+                    return Some(rest.trim().to_string());
+                }
+            }
+            Some(Err(_)) => continue,
+            None => break,
+        }
+    }
+    None
+}
+
+fn write_short_ts_recording(
+    host: &str,
+    channel: &str,
+    out_path: &std::path::Path,
+) -> anyhow::Result<()> {
+    // Use lineup to resolve name -> number, but capture from the provided host.
+    // (OrbStack/Linux may not resolve the lineup URL's mDNS hostname.)
+    let device = ec_hdhomerun::discover_from_host(host)?;
+    let lineup = ec_hdhomerun::fetch_lineup(&device)?;
+    let entry = ec_hdhomerun::find_lineup_entry_by_number(&lineup, channel)
+        .or_else(|| ec_hdhomerun::find_lineup_entry_by_name(&lineup, channel))
+        .ok_or_else(|| anyhow::anyhow!("channel not found in lineup: {channel}"))?;
+
+    let guide_number = entry.channel.number.as_deref().unwrap_or(channel);
+    let capture_url = format!("http://{host}:5004/auto/v{guide_number}");
+
+    // Capture a short TS sample directly from the HDHR.
+    // Retry a few times to handle "no tuner available" 5xx responses.
+    let mut last_err: Option<anyhow::Error> = None;
+    for attempt in 0..10 {
+        match ec_hdhomerun::open_stream_url(&capture_url, Some(12)) {
+            Ok(mut stream) => {
+                let mut file = std::fs::File::create(out_path)?;
+                std::io::copy(&mut stream, &mut file)?;
+                last_err = None;
+                break;
+            }
+            Err(err) => {
+                last_err = Some(err);
+                std::thread::sleep(Duration::from_millis(400 * (attempt + 1) as u64));
+                continue;
+            }
+        }
+    }
+    if let Some(err) = last_err {
+        return Err(err);
+    }
+
+    let mut file = std::fs::File::open(out_path)?;
+    let mut bytes = Vec::new();
+    file.read_to_end(&mut bytes)?;
+    let mut len = bytes.len();
+    // Ensure the TS file ends on a packet boundary.
+    let rem = len % TS_PACKET_SIZE;
+    if rem != 0 {
+        len -= rem;
+        std::fs::write(out_path, &bytes[..len])?;
+    }
+    if len < 188 * 200 {
+        anyhow::bail!("recorded TS too small ({} bytes) from HDHR {}", len, host);
+    }
+    Ok(())
+}
+
+#[test]
+#[ignore]
+fn e2e_split_sources_cmaf_init_from_objects_peer_segments_verified_by_manifests_peer() {
+    let host = env_required("EVERY_CHANNEL_E2E_HDHR_HOST");
+    let channel = env_required("EVERY_CHANNEL_E2E_HDHR_CHANNEL");
+    let (host, channel) = match (host, channel) {
+        (Some(host), Some(channel)) => (host, channel),
+        _ => match autodiscover_hdhr_host_and_channel() {
+            Some(v) => v,
+            None => return, // skip
+        },
+    };
+
+    let ec_node = ec_node_path();
+
+    // Keep secrets deterministic for reproducibility.
+    let signing_key = "11".repeat(32);
+    let network_secret = "22".repeat(32);
+
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let stream_id = format!("every.channel/e2e/mesh-cmaf/{ts}");
+    let broadcast_name = stream_id.clone();
+
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-mesh-split-cmaf-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+    let input_ts = tmp.join("input.ts");
+    let manifest_chunks = tmp.join("chunks-manifests");
+    let object_chunks = tmp.join("chunks-objects");
+    let subscribe_out = tmp.join("subscribe-out");
+
+    write_short_ts_recording(&host, &channel, &input_ts).expect("failed to record TS from HDHR");
+
+    // Publisher A: leader/signer, publishes manifests only (for CMAF segments).
+    let mut pub_manifests = Command::new(&ec_node);
+    pub_manifests
+        .env("EVERY_CHANNEL_MANIFEST_SIGNING_KEY", &signing_key)
+        .arg("moq-publish")
+        .arg("--publish-manifests")
+        .arg("--publish-chunks")
+        .arg("false")
+        .arg("--encode")
+        .arg("cmaf")
+        .arg("--epoch-chunks")
+        .arg("1")
+        .arg("--max-chunks")
+        .arg("4")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("noop")
+        .arg("--manifest-track")
+        .arg("manifests")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(&manifest_chunks)
+        .arg("--startup-delay-ms")
+        .arg("6000")
+        .arg("ts")
+        .arg(input_ts.to_string_lossy().to_string())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut pub_a = pub_manifests.spawn().expect("spawn manifest publisher");
+    let a_stdout = pub_a
+        .stdout
+        .take()
+        .expect("manifest publisher stdout missing");
+    let mut a_lines = BufReader::new(a_stdout).lines();
+    let remote_manifests =
+        wait_for_line_prefix(&mut a_lines, "moq endpoint addr: ", Duration::from_secs(10))
+            .expect("manifest publisher did not print endpoint addr");
+
+    // Publisher B: publishes init + segments as objects only.
+    let mut pub_objects = Command::new(&ec_node);
+    pub_objects
+        .arg("moq-publish")
+        .arg("--publish-chunks")
+        .arg("true")
+        .arg("--encode")
+        .arg("cmaf")
+        .arg("--init-track")
+        .arg("init")
+        .arg("--max-chunks")
+        .arg("4")
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("objects")
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .arg("--chunk-dir")
+        .arg(&object_chunks)
+        .arg("--startup-delay-ms")
+        .arg("10000")
+        .arg("ts")
+        .arg(input_ts.to_string_lossy().to_string())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit());
+
+    let mut pub_b = pub_objects.spawn().expect("spawn object publisher");
+    let b_stdout = pub_b
+        .stdout
+        .take()
+        .expect("object publisher stdout missing");
+    let mut b_lines = BufReader::new(b_stdout).lines();
+    let remote_objects =
+        wait_for_line_prefix(&mut b_lines, "moq endpoint addr: ", Duration::from_secs(10))
+            .expect("object publisher did not print endpoint addr");
+
+    // Subscriber: init+segments from B, manifests from A.
+    let mut subscriber = Command::new(&ec_node);
+    subscriber
+        .arg("moq-subscribe")
+        .arg("--remote")
+        .arg(&remote_objects)
+        .arg("--remote-manifests")
+        .arg(&remote_manifests)
+        .arg("--broadcast-name")
+        .arg(&broadcast_name)
+        .arg("--track-name")
+        .arg("objects")
+        .arg("--manifest-track")
+        .arg("manifests")
+        .arg("--subscribe-manifests")
+        .arg("--require-manifest")
+        .arg("--max-invalid-chunks")
+        .arg("0")
+        .arg("--container")
+        .arg("cmaf")
+        .arg("--subscribe-init")
+        .arg("--init-track")
+        .arg("init")
+        .arg("--stop-after")
+        .arg("2")
+        .arg("--output-dir")
+        .arg(&subscribe_out)
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--network-secret")
+        .arg(&network_secret)
+        .stdout(Stdio::inherit())
+        .stderr(Stdio::inherit());
+
+    let mut sub_child = subscriber.spawn().expect("failed to spawn subscriber");
+    let start = Instant::now();
+    loop {
+        if let Ok(Some(status)) = sub_child.try_wait() {
+            assert!(status.success(), "subscriber exited with {status}");
+            break;
+        }
+        if start.elapsed() > Duration::from_secs(60) {
+            let _ = sub_child.kill();
+            panic!("subscriber timed out");
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+
+    // Ensure publishers exit after max chunks.
+    for child in [&mut pub_a, &mut pub_b] {
+        let start = Instant::now();
+        loop {
+            if let Ok(Some(status)) = child.try_wait() {
+                assert!(status.success(), "publisher exited with {status}");
+                break;
+            }
+            if start.elapsed() > Duration::from_secs(90) {
+                let _ = child.kill();
+                panic!("publisher timed out");
+            }
+            std::thread::sleep(Duration::from_millis(200));
+        }
+    }
+
+    let playlist = subscribe_out.join("index.m3u8");
+    assert!(
+        playlist.exists(),
+        "missing playlist at {}",
+        playlist.display()
+    );
+
+    let init = subscribe_out.join("init.mp4");
+    assert!(init.exists(), "missing init segment at {}", init.display());
+
+    let segments = std::fs::read_dir(&subscribe_out)
+        .unwrap()
+        .filter_map(|e| e.ok())
+        .filter(|e| e.file_name().to_string_lossy().ends_with(".m4s"))
+        .count();
+    assert!(segments >= 1, "expected at least one .m4s segment");
+}
diff --git a/crates/ec-node/tests/e2e_remote_website_direct.rs b/crates/ec-node/tests/e2e_remote_website_direct.rs
new file mode 100644
index 0000000..19c3924
--- /dev/null
+++ b/crates/ec-node/tests/e2e_remote_website_direct.rs
@@ -0,0 +1,314 @@
+use std::ffi::OsStr;
+use std::io::{BufRead, BufReader, Write};
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+fn which(cmd: &str) -> Option<std::path::PathBuf> {
+    if let Ok(path) = which::which(cmd) {
+        return Some(path);
+    }
+    None
+}
+
+fn chrome_path() -> Option<std::path::PathBuf> {
+    // Prefer the standard macOS Chrome app bundle.
+    let mac =
+        std::path::PathBuf::from("/Applications/Google Chrome.app/Contents/MacOS/Google Chrome");
+    if mac.exists() {
+        return Some(mac);
+    }
+    which("google-chrome")
+        .or_else(|| which("google-chrome-stable"))
+        .or_else(|| which("chromium"))
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn read_line_with_timeout(
+    lines: &mut dyn Iterator<Item = std::io::Result<String>>,
+    timeout: Duration,
+) -> Option<String> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        match lines.next() {
+            Some(Ok(line)) => {
+                let line = line.trim().to_string();
+                if !line.is_empty() {
+                    return Some(line);
+                }
+            }
+            Some(Err(_)) => continue,
+            None => break,
+        }
+    }
+    None
+}
+
+fn generate_ts_fixture(out: &std::path::Path) -> anyhow::Result<()> {
+    // Deterministic-ish fixture: single-threaded x264, fixed GOP, sine audio.
+    let status = Command::new("ffmpeg")
+        .arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("testsrc2=size=1280x720:rate=30")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("sine=frequency=1000:sample_rate=48000")
+        .arg("-t")
+        .arg("12")
+        .arg("-map")
+        .arg("0:v:0")
+        .arg("-map")
+        .arg("1:a:0")
+        .arg("-c:v")
+        .arg("libx264")
+        .arg("-pix_fmt")
+        .arg("yuv420p")
+        .arg("-g")
+        .arg("60")
+        .arg("-keyint_min")
+        .arg("60")
+        .arg("-sc_threshold")
+        .arg("0")
+        .arg("-bf")
+        .arg("0")
+        .arg("-threads")
+        .arg("1")
+        .arg("-c:a")
+        .arg("aac")
+        .arg("-b:a")
+        .arg("128k")
+        .arg("-ac")
+        .arg("2")
+        .arg("-ar")
+        .arg("48000")
+        .arg("-f")
+        .arg("mpegts")
+        .arg(out)
+        .status()?;
+    if !status.success() {
+        anyhow::bail!("ffmpeg fixture generation failed with {status}");
+    }
+    Ok(())
+}
+
+fn click_button_by_text(tab: &headless_chrome::Tab, text: &str) -> anyhow::Result<()> {
+    let js = format!(
+        r#"(function() {{
+  let btns = Array.from(document.querySelectorAll('button'));
+  let btn = btns.find(b => (b.innerText || '').trim() === {t});
+  if (!btn) return false;
+  btn.click();
+  return true;
+}})();"#,
+        t = serde_json::to_string(text).unwrap()
+    );
+    let v = tab.evaluate(&js, false)?;
+    let ok = v.value.and_then(|v| v.as_bool()).unwrap_or(false);
+    if !ok {
+        anyhow::bail!("button not found: {text}");
+    }
+    Ok(())
+}
+
+fn fill_input_by_placeholder(
+    tab: &headless_chrome::Tab,
+    placeholder: &str,
+    value: &str,
+) -> anyhow::Result<()> {
+    let js = format!(
+        r#"(function() {{
+  let input = document.querySelector('input[placeholder={p}]');
+  if (!input) return false;
+  input.focus();
+  input.value = {v};
+  input.dispatchEvent(new Event('input', {{ bubbles: true }}));
+  input.dispatchEvent(new Event('change', {{ bubbles: true }}));
+  return true;
+}})();"#,
+        p = serde_json::to_string(placeholder).unwrap(),
+        v = serde_json::to_string(value).unwrap()
+    );
+    let v = tab.evaluate(&js, false)?;
+    let ok = v.value.and_then(|v| v.as_bool()).unwrap_or(false);
+    if !ok {
+        anyhow::bail!("input not found for placeholder: {placeholder}");
+    }
+    Ok(())
+}
+
+fn get_reply_link(tab: &headless_chrome::Tab) -> anyhow::Result<Option<String>> {
+    // Read the last readonly input inside the add menu; this is where we render the reply code.
+    let js = r#"(function() {
+  let menu = document.querySelector('.source-menu');
+  if (!menu) return null;
+  let inputs = Array.from(menu.querySelectorAll('input.source-menu-input[readonly]'));
+  if (!inputs.length) return null;
+  return inputs[inputs.length - 1].value || null;
+})();"#;
+    let v = tab.evaluate(js, false)?;
+    Ok(v.value.and_then(|v| v.as_str().map(|s| s.to_string())))
+}
+
+fn wait_for_text(
+    tab: &headless_chrome::Tab,
+    needle: &str,
+    timeout: Duration,
+) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = format!(
+            r#"(function() {{
+  return document.body && (document.body.innerText || '').includes({n});
+}})();"#,
+            n = serde_json::to_string(needle).unwrap()
+        );
+        let v = tab.evaluate(&js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for text: {needle}");
+}
+
+fn wait_for_blob_video(tab: &headless_chrome::Tab, timeout: Duration) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = r#"(function() {
+  let v = document.querySelector('video');
+  if (!v) return false;
+  if (typeof v.src !== 'string') return false;
+  return v.src.startsWith('blob:');
+})();"#;
+        let v = tab.evaluate(js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for video blob src");
+}
+
+#[test]
+#[ignore]
+fn e2e_remote_website_connects_to_local_direct_publisher() -> anyhow::Result<()> {
+    if which("ffmpeg").is_none() {
+        return Ok(()); // skip
+    }
+    let chrome = match chrome_path() {
+        Some(p) => p,
+        None => return Ok(()), // skip
+    };
+
+    let site_url = std::env::var("EVERY_CHANNEL_SITE_URL")
+        .unwrap_or_else(|_| "https://every.channel/".to_string());
+
+    let ec_node = ec_node_path();
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-remote-website-direct-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+    let input_ts = tmp.join("input.ts");
+    let chunk_dir = tmp.join("chunks");
+    generate_ts_fixture(&input_ts)?;
+
+    let mut pub_child = Command::new(&ec_node)
+        .arg("direct-publish")
+        .arg("--chunk-dir")
+        .arg(&chunk_dir)
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--max-segments")
+        .arg("6")
+        .arg("ts")
+        .arg(&input_ts)
+        .stdin(Stdio::piped())
+        .stdout(Stdio::piped())
+        .stderr(Stdio::inherit())
+        .spawn()?;
+
+    let stdout = pub_child.stdout.take().expect("publisher stdout missing");
+    let mut lines = BufReader::new(stdout).lines();
+    let offer = read_line_with_timeout(&mut lines, Duration::from_secs(60))
+        .ok_or_else(|| anyhow::anyhow!("publisher did not print offer link in time"))?;
+    if !offer.starts_with("every.channel://direct?c=") {
+        anyhow::bail!("unexpected offer link: {offer}");
+    }
+
+    let launch_options = headless_chrome::LaunchOptionsBuilder::default()
+        .path(Some(chrome))
+        .headless(true)
+        .args(vec![
+            OsStr::new("--autoplay-policy=no-user-gesture-required"),
+            OsStr::new("--mute-audio"),
+        ])
+        .build()
+        .unwrap();
+    let browser = headless_chrome::Browser::new(launch_options)?;
+    let tab = browser.new_tab()?;
+    tab.navigate_to(&site_url)?;
+    tab.wait_until_navigated()?;
+
+    // Open the add menu via class selector (stable).
+    tab.wait_for_element("button.add-source")?.click()?;
+    tab.wait_for_element(".source-menu")?;
+
+    // Use Watch a link flow.
+    fill_input_by_placeholder(&tab, "every.channel://watch?...", &offer)?;
+    click_button_by_text(&tab, "Parse link")?;
+    click_button_by_text(&tab, "Tune in")?;
+
+    // Poll for reply link.
+    let deadline = Instant::now() + Duration::from_secs(60);
+    let reply = loop {
+        if let Some(v) = get_reply_link(&tab)? {
+            if v.starts_with("every.channel://direct?c=") {
+                break v;
+            }
+        }
+        if Instant::now() > deadline {
+            anyhow::bail!("timed out waiting for reply link in UI");
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    };
+
+    // Feed reply back to publisher.
+    let stdin = pub_child.stdin.as_mut().expect("publisher stdin missing");
+    writeln!(stdin, "{reply}")?;
+    stdin.flush()?;
+
+    // Website should go Live and show a blob video source.
+    wait_for_text(&tab, "Live", Duration::from_secs(60))?;
+    wait_for_blob_video(&tab, Duration::from_secs(60))?;
+
+    // Cleanup.
+    let _ = pub_child.kill();
+    let _ = pub_child.wait();
+    let _ = std::fs::remove_dir_all(&tmp);
+    Ok(())
+}
diff --git a/crates/ec-node/tests/e2e_remote_website_directory.rs b/crates/ec-node/tests/e2e_remote_website_directory.rs
new file mode 100644
index 0000000..77af8c8
--- /dev/null
+++ b/crates/ec-node/tests/e2e_remote_website_directory.rs
@@ -0,0 +1,243 @@
+use std::ffi::OsStr;
+use std::process::{Command, Stdio};
+use std::time::{Duration, Instant};
+
+fn which(cmd: &str) -> Option<std::path::PathBuf> {
+    which::which(cmd).ok()
+}
+
+fn chrome_path() -> Option<std::path::PathBuf> {
+    // Prefer the standard macOS Chrome app bundle.
+    let mac =
+        std::path::PathBuf::from("/Applications/Google Chrome.app/Contents/MacOS/Google Chrome");
+    if mac.exists() {
+        return Some(mac);
+    }
+    which("google-chrome")
+        .or_else(|| which("google-chrome-stable"))
+        .or_else(|| which("chromium"))
+}
+
+fn ec_node_path() -> std::path::PathBuf {
+    if let Ok(value) = std::env::var("EC_NODE_BIN") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec_node") {
+        return value.into();
+    }
+    if let Ok(value) = std::env::var("CARGO_BIN_EXE_ec-node") {
+        return value.into();
+    }
+    let exe = std::env::current_exe().expect("current_exe");
+    let debug_dir = exe
+        .parent()
+        .and_then(|p| p.parent())
+        .expect("expected target/debug/deps");
+    debug_dir.join("ec-node")
+}
+
+fn generate_ts_fixture(out: &std::path::Path) -> anyhow::Result<()> {
+    // Deterministic-ish fixture: single-threaded x264, fixed GOP, sine audio.
+    let status = Command::new("ffmpeg")
+        .arg("-hide_banner")
+        .arg("-loglevel")
+        .arg("error")
+        .arg("-nostdin")
+        .arg("-y")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("testsrc2=size=1280x720:rate=30")
+        .arg("-f")
+        .arg("lavfi")
+        .arg("-i")
+        .arg("sine=frequency=1000:sample_rate=48000")
+        .arg("-t")
+        .arg("12")
+        .arg("-map")
+        .arg("0:v:0")
+        .arg("-map")
+        .arg("1:a:0")
+        .arg("-c:v")
+        .arg("libx264")
+        .arg("-pix_fmt")
+        .arg("yuv420p")
+        .arg("-g")
+        .arg("60")
+        .arg("-keyint_min")
+        .arg("60")
+        .arg("-sc_threshold")
+        .arg("0")
+        .arg("-bf")
+        .arg("0")
+        .arg("-threads")
+        .arg("1")
+        .arg("-c:a")
+        .arg("aac")
+        .arg("-b:a")
+        .arg("128k")
+        .arg("-ac")
+        .arg("2")
+        .arg("-ar")
+        .arg("48000")
+        .arg("-f")
+        .arg("mpegts")
+        .arg(out)
+        .status()?;
+    if !status.success() {
+        anyhow::bail!("ffmpeg fixture generation failed with {status}");
+    }
+    Ok(())
+}
+
+fn click_css(tab: &headless_chrome::Tab, css: &str) -> anyhow::Result<()> {
+    tab.wait_for_element(css)?.click()?;
+    Ok(())
+}
+
+fn wait_for_text(
+    tab: &headless_chrome::Tab,
+    needle: &str,
+    timeout: Duration,
+) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = format!(
+            r#"(function() {{
+  return document.body && (document.body.innerText || '').includes({n});
+}})();"#,
+            n = serde_json::to_string(needle).unwrap()
+        );
+        let v = tab.evaluate(&js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for text: {needle}");
+}
+
+fn wait_for_blob_video(tab: &headless_chrome::Tab, timeout: Duration) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = r#"(function() {
+  let v = document.querySelector('video');
+  if (!v) return false;
+  if (typeof v.src !== 'string') return false;
+  return v.src.startsWith('blob:');
+})();"#;
+        let v = tab.evaluate(js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for video blob src");
+}
+
+fn click_global_watch(tab: &headless_chrome::Tab, stream_id: &str) -> anyhow::Result<bool> {
+    let js = format!(
+        r#"(function() {{
+  let target = {sid};
+  let btn = document.querySelector(`button[data-stream-id="${{target}}"]`)
+        || document.querySelector(`button[data_stream_id="${{target}}"]`);
+  if (!btn) return false;
+  btn.click();
+  return true;
+}})();"#,
+        sid = serde_json::to_string(stream_id).unwrap()
+    );
+    let v = tab.evaluate(&js, false)?;
+    Ok(v.value.and_then(|v| v.as_bool()).unwrap_or(false))
+}
+
+#[test]
+#[ignore]
+fn e2e_remote_website_directory_connects_to_local_direct_publisher() -> anyhow::Result<()> {
+    if which("ffmpeg").is_none() {
+        return Ok(()); // skip
+    }
+    let chrome = match chrome_path() {
+        Some(p) => p,
+        None => return Ok(()), // skip
+    };
+
+    let site_url = std::env::var("EVERY_CHANNEL_SITE_URL")
+        .unwrap_or_else(|_| "https://every.channel/".to_string());
+    let directory_url = std::env::var("EVERY_CHANNEL_DIRECTORY_URL")
+        .unwrap_or_else(|_| "https://every.channel".to_string());
+
+    let ec_node = ec_node_path();
+    let ts = std::time::SystemTime::now()
+        .duration_since(std::time::UNIX_EPOCH)
+        .unwrap_or_default()
+        .as_millis();
+    let stream_id = format!("every.channel/e2e/{ts}");
+    let title = format!("E2E {ts}");
+
+    let tmp = std::env::temp_dir().join(format!("ec-e2e-remote-website-directory-{ts}"));
+    let _ = std::fs::create_dir_all(&tmp);
+    let input_ts = tmp.join("input.ts");
+    let chunk_dir = tmp.join("chunks");
+    generate_ts_fixture(&input_ts)?;
+
+    let mut pub_child = Command::new(&ec_node)
+        .arg("direct-publish")
+        .arg("--directory-url")
+        .arg(&directory_url)
+        .arg("--stream-id")
+        .arg(&stream_id)
+        .arg("--title")
+        .arg(&title)
+        .arg("--chunk-dir")
+        .arg(&chunk_dir)
+        .arg("--chunk-ms")
+        .arg("2000")
+        .arg("--max-segments")
+        .arg("6")
+        .arg("ts")
+        .arg(&input_ts)
+        .stdin(Stdio::null())
+        .stdout(Stdio::null())
+        .stderr(Stdio::inherit())
+        .spawn()?;
+
+    let launch_options = headless_chrome::LaunchOptionsBuilder::default()
+        .path(Some(chrome))
+        .headless(true)
+        .args(vec![
+            OsStr::new("--autoplay-policy=no-user-gesture-required"),
+            OsStr::new("--mute-audio"),
+        ])
+        .build()
+        .unwrap();
+    let browser = headless_chrome::Browser::new(launch_options)?;
+    let tab = browser.new_tab()?;
+    tab.navigate_to(&site_url)?;
+    tab.wait_until_navigated()?;
+
+    // Refresh public list and watch our stream_id.
+    click_css(&tab, "button[data-testid='global-refresh']")?;
+
+    let deadline = Instant::now() + Duration::from_secs(60);
+    loop {
+        if click_global_watch(&tab, &stream_id)? {
+            break;
+        }
+        if Instant::now() > deadline {
+            anyhow::bail!("timed out waiting for stream_id to appear in global list");
+        }
+        std::thread::sleep(Duration::from_millis(250));
+        let _ = click_global_watch(&tab, &stream_id)?;
+    }
+
+    // Website should go Live and show a blob video source.
+    wait_for_text(&tab, "Live", Duration::from_secs(60))?;
+    wait_for_blob_video(&tab, Duration::from_secs(60))?;
+
+    // Cleanup.
+    let _ = pub_child.kill();
+    let _ = pub_child.wait();
+    let _ = std::fs::remove_dir_all(&tmp);
+    Ok(())
+}
diff --git a/crates/ec-node/tests/e2e_remote_website_watch_existing.rs b/crates/ec-node/tests/e2e_remote_website_watch_existing.rs
new file mode 100644
index 0000000..668e7b6
--- /dev/null
+++ b/crates/ec-node/tests/e2e_remote_website_watch_existing.rs
@@ -0,0 +1,174 @@
+use std::ffi::OsStr;
+use std::time::{Duration, Instant};
+
+fn which(cmd: &str) -> Option<std::path::PathBuf> {
+    which::which(cmd).ok()
+}
+
+fn chrome_path() -> Option<std::path::PathBuf> {
+    let mac =
+        std::path::PathBuf::from("/Applications/Google Chrome.app/Contents/MacOS/Google Chrome");
+    if mac.exists() {
+        return Some(mac);
+    }
+    which("google-chrome")
+        .or_else(|| which("google-chrome-stable"))
+        .or_else(|| which("chromium"))
+}
+
+fn click_css(tab: &headless_chrome::Tab, css: &str) -> anyhow::Result<()> {
+    tab.wait_for_element(css)?.click()?;
+    Ok(())
+}
+
+fn wait_for_text(
+    tab: &headless_chrome::Tab,
+    needle: &str,
+    timeout: Duration,
+) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = format!(
+            r#"(function() {{
+  return document.body && (document.body.innerText || '').includes({n});
+}})();"#,
+            n = serde_json::to_string(needle).unwrap()
+        );
+        let v = tab.evaluate(&js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for text: {needle}");
+}
+
+fn wait_for_blob_video(tab: &headless_chrome::Tab, timeout: Duration) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = r#"(function() {
+  let v = document.querySelector('video');
+  if (!v) return false;
+  if (typeof v.src !== 'string') return false;
+  return v.src.startsWith('blob:');
+})();"#;
+        let v = tab.evaluate(js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for video blob src");
+}
+
+fn wait_for_video_element(tab: &headless_chrome::Tab, timeout: Duration) -> anyhow::Result<()> {
+    let deadline = Instant::now() + timeout;
+    while Instant::now() < deadline {
+        let js = r#"(function() {
+  return !!document.querySelector('video');
+})();"#;
+        let v = tab.evaluate(js, false)?;
+        if v.value.and_then(|v| v.as_bool()).unwrap_or(false) {
+            return Ok(());
+        }
+        std::thread::sleep(Duration::from_millis(200));
+    }
+    anyhow::bail!("timed out waiting for <video> element");
+}
+
+fn debug_player_state(tab: &headless_chrome::Tab) -> anyhow::Result<String> {
+    let js = r#"(function() {
+  let v = document.querySelector('video');
+  let src = v ? (v.src || '') : null;
+  let placeholder = document.querySelector('.placeholder');
+  let placeholderText = placeholder ? (placeholder.innerText || '') : null;
+  let status = document.querySelector('.source-status');
+  let statusText = status ? (status.innerText || '') : null;
+  let sources = Array.from(document.querySelectorAll('button[data-testid="global-watch"]')).length;
+  return JSON.stringify({ hasVideo: !!v, videoSrc: src, placeholderText, statusText, sources });
+})();"#;
+    let v = tab.evaluate(js, false)?;
+    Ok(v.value
+        .and_then(|v| v.as_str().map(|s| s.to_string()))
+        .unwrap_or_default())
+}
+
+fn click_global_watch(tab: &headless_chrome::Tab, stream_id: &str) -> anyhow::Result<bool> {
+    let js = format!(
+        r#"(function() {{
+  let target = {sid};
+  let btn = document.querySelector(`button[data-stream-id="${{target}}"]`);
+  if (!btn) return false;
+  // Some SPA frameworks attach delegated listeners; dispatch a real click event.
+  btn.dispatchEvent(new MouseEvent('click', {{ bubbles: true, cancelable: true, view: window }}));
+  return true;
+}})();"#,
+        sid = serde_json::to_string(stream_id).unwrap()
+    );
+    let v = tab.evaluate(&js, false)?;
+    Ok(v.value.and_then(|v| v.as_bool()).unwrap_or(false))
+}
+
+#[test]
+#[ignore]
+fn e2e_remote_website_watch_existing_stream_id() -> anyhow::Result<()> {
+    let chrome = match chrome_path() {
+        Some(p) => p,
+        None => return Ok(()), // skip
+    };
+    // We still want ffmpeg around for parity with other E2Es (and to discourage "works only without media tools").
+    if which("ffmpeg").is_none() {
+        return Ok(()); // skip
+    }
+
+    let site_url = std::env::var("EVERY_CHANNEL_SITE_URL")
+        .unwrap_or_else(|_| "https://every.channel/".to_string());
+    let stream_id = match std::env::var("EVERY_CHANNEL_STREAM_ID") {
+        Ok(v) if !v.trim().is_empty() => v,
+        _ => return Ok(()), // skip
+    };
+
+    let launch_options = headless_chrome::LaunchOptionsBuilder::default()
+        .path(Some(chrome))
+        .headless(true)
+        .args(vec![
+            OsStr::new("--autoplay-policy=no-user-gesture-required"),
+            OsStr::new("--mute-audio"),
+            OsStr::new("--disable-application-cache"),
+            OsStr::new("--disable-service-worker"),
+            OsStr::new("--disk-cache-size=0"),
+        ])
+        .build()
+        .unwrap();
+    let browser = headless_chrome::Browser::new(launch_options)?;
+    let tab = browser.new_tab()?;
+    tab.navigate_to(&site_url)?;
+    tab.wait_until_navigated()?;
+
+    click_css(&tab, "button[data-testid='global-refresh']")?;
+
+    let deadline = Instant::now() + Duration::from_secs(60);
+    loop {
+        if click_global_watch(&tab, &stream_id)? {
+            break;
+        }
+        if Instant::now() > deadline {
+            anyhow::bail!("timed out waiting for stream_id to appear in global list");
+        }
+        std::thread::sleep(Duration::from_millis(250));
+    }
+
+    // Ensure the player is instantiated.
+    if let Err(err) = wait_for_video_element(&tab, Duration::from_secs(90)) {
+        let st = debug_player_state(&tab).unwrap_or_default();
+        anyhow::bail!("{err}\nplayer_state={st}");
+    }
+
+    // We consider playback "started" when the video uses a blob: URL (MSE).
+    if let Err(err) = wait_for_blob_video(&tab, Duration::from_secs(90)) {
+        let st = debug_player_state(&tab).unwrap_or_default();
+        anyhow::bail!("{err}\nplayer_state={st}");
+    }
+
+    Ok(())
+}
diff --git a/crates/ec-ts/Cargo.toml b/crates/ec-ts/Cargo.toml
new file mode 100644
index 0000000..d79e7a8
--- /dev/null
+++ b/crates/ec-ts/Cargo.toml
@@ -0,0 +1,10 @@
+[package]
+name = "ec-ts"
+version = "0.0.0"
+edition.workspace = true
+license.workspace = true
+
+[dependencies]
+anyhow.workspace = true
+serde.workspace = true
+serde-big-array = "0.5"
diff --git a/crates/ec-ts/src/lib.rs b/crates/ec-ts/src/lib.rs
new file mode 100644
index 0000000..6daf5ee
--- /dev/null
+++ b/crates/ec-ts/src/lib.rs
@@ -0,0 +1,648 @@
+//! Minimal MPEG-TS parsing for timing and table extraction.
+
+use anyhow::{anyhow, Result};
+use serde::{Deserialize, Serialize};
+use serde_big_array::BigArray;
+use std::collections::HashMap;
+use std::io::Read;
+
+pub const TS_PACKET_SIZE: usize = 188;
+pub const PID_ATSC_PSIP: u16 = 0x1FFB;
+pub const PID_DVB_TDT_TOT: u16 = 0x0014;
+
+const SYNC_BYTE: u8 = 0x47;
+const TABLE_ID_ATSC_STT: u8 = 0xCD;
+const TABLE_ID_DVB_TDT: u8 = 0x70;
+const TABLE_ID_DVB_TOT: u8 = 0x73;
+
+const GPS_EPOCH_TO_UNIX: i64 = 315964800;
+const MJD_UNIX_EPOCH: i64 = 40587;
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TsPacket {
+    #[serde(with = "BigArray")]
+    data: [u8; TS_PACKET_SIZE],
+    pub pid: u16,
+    pub payload_unit_start: bool,
+    pub continuity_counter: u8,
+    pub discontinuity: bool,
+    pub pcr_27mhz: Option<u64>,
+    payload_offset: usize,
+    payload_len: usize,
+}
+
+impl TsPacket {
+    pub fn payload(&self) -> &[u8] {
+        &self.data[self.payload_offset..self.payload_offset + self.payload_len]
+    }
+
+    pub fn as_bytes(&self) -> &[u8; TS_PACKET_SIZE] {
+        &self.data
+    }
+}
+
+pub struct TsReader<R> {
+    reader: R,
+}
+
+impl<R: Read> TsReader<R> {
+    pub fn new(reader: R) -> Self {
+        Self { reader }
+    }
+
+    pub fn read_packet(&mut self) -> Result<Option<TsPacket>> {
+        let mut data = [0u8; TS_PACKET_SIZE];
+        let mut read = 0usize;
+        while read < TS_PACKET_SIZE {
+            let n = self.reader.read(&mut data[read..])?;
+            if n == 0 {
+                if read == 0 {
+                    return Ok(None);
+                }
+                return Err(anyhow!("truncated TS packet"));
+            }
+            read += n;
+        }
+
+        let packet = parse_packet(data)?;
+        Ok(Some(packet))
+    }
+}
+
+pub fn parse_packet(data: [u8; TS_PACKET_SIZE]) -> Result<TsPacket> {
+    if data[0] != SYNC_BYTE {
+        return Err(anyhow!("missing sync byte"));
+    }
+
+    let payload_unit_start = (data[1] & 0x40) != 0;
+    let pid = ((data[1] as u16 & 0x1F) << 8) | data[2] as u16;
+    let continuity_counter = data[3] & 0x0F;
+    let adaptation_control = (data[3] >> 4) & 0x03;
+    let has_adaptation = adaptation_control == 2 || adaptation_control == 3;
+    let has_payload = adaptation_control == 1 || adaptation_control == 3;
+
+    let mut offset = 4usize;
+    let mut discontinuity = false;
+    let mut pcr_27mhz = None;
+
+    if has_adaptation {
+        let length = data[offset] as usize;
+        offset += 1;
+        if offset + length > TS_PACKET_SIZE {
+            return Err(anyhow!("invalid adaptation field length"));
+        }
+        if length > 0 {
+            let flags = data[offset];
+            discontinuity = (flags & 0x80) != 0;
+            let pcr_flag = (flags & 0x10) != 0;
+            if pcr_flag && length >= 7 {
+                let pcr_bytes = &data[offset + 1..offset + 7];
+                pcr_27mhz = Some(parse_pcr_27mhz(pcr_bytes));
+            }
+        }
+        offset += length;
+    }
+
+    let payload_len = if has_payload && offset <= TS_PACKET_SIZE {
+        TS_PACKET_SIZE - offset
+    } else {
+        0
+    };
+
+    Ok(TsPacket {
+        data,
+        pid,
+        payload_unit_start,
+        continuity_counter,
+        discontinuity,
+        pcr_27mhz,
+        payload_offset: offset,
+        payload_len,
+    })
+}
+
+fn parse_pcr_27mhz(data: &[u8]) -> u64 {
+    let base = ((data[0] as u64) << 25)
+        | ((data[1] as u64) << 17)
+        | ((data[2] as u64) << 9)
+        | ((data[3] as u64) << 1)
+        | ((data[4] as u64) >> 7);
+    let ext = (((data[4] as u64) & 0x01) << 8) | data[5] as u64;
+    base * 300 + ext
+}
+
+pub fn parse_pts_90khz(packet: &TsPacket) -> Option<u64> {
+    if !packet.payload_unit_start {
+        return None;
+    }
+    let payload = packet.payload();
+    if payload.len() < 14 {
+        return None;
+    }
+    if payload[0] != 0 || payload[1] != 0 || payload[2] != 1 {
+        return None;
+    }
+    let flags = payload[7];
+    let pts_dts_flags = (flags >> 6) & 0x03;
+    if pts_dts_flags == 0 {
+        return None;
+    }
+    let header_length = payload[8] as usize;
+    let pts_start = 9usize;
+    if header_length < 5 || payload.len() < pts_start + 5 {
+        return None;
+    }
+    let b = &payload[pts_start..pts_start + 5];
+    let pts = ((b[0] as u64 & 0x0E) << 29)
+        | ((b[1] as u64) << 22)
+        | ((b[2] as u64 & 0xFE) << 14)
+        | ((b[3] as u64) << 7)
+        | ((b[4] as u64) >> 1);
+    Some(pts)
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct Section {
+    pub pid: u16,
+    pub table_id: u8,
+    pub data: Vec<u8>,
+}
+
+#[derive(Debug, Default)]
+pub struct SectionAssembler {
+    buffers: HashMap<u16, SectionBuffer>,
+}
+
+#[derive(Debug)]
+struct SectionBuffer {
+    expected_len: usize,
+    data: Vec<u8>,
+}
+
+impl SectionAssembler {
+    pub fn push_packet(&mut self, packet: &TsPacket) -> Vec<Section> {
+        let mut sections = Vec::new();
+        let payload = packet.payload();
+        if payload.is_empty() {
+            return sections;
+        }
+
+        if packet.payload_unit_start {
+            let pointer = payload[0] as usize;
+            if pointer + 1 > payload.len() {
+                return sections;
+            }
+            let mut idx = 1 + pointer;
+            while idx + 3 <= payload.len() {
+                let table_id = payload[idx];
+                let section_length =
+                    (((payload[idx + 1] & 0x0F) as usize) << 8) | payload[idx + 2] as usize;
+                let total_len = 3 + section_length;
+                if idx + total_len <= payload.len() {
+                    let data = payload[idx..idx + total_len].to_vec();
+                    sections.push(Section {
+                        pid: packet.pid,
+                        table_id,
+                        data,
+                    });
+                    idx += total_len;
+                } else {
+                    let data = payload[idx..].to_vec();
+                    self.buffers.insert(
+                        packet.pid,
+                        SectionBuffer {
+                            expected_len: total_len,
+                            data,
+                        },
+                    );
+                    break;
+                }
+            }
+        } else if let Some(buffer) = self.buffers.get_mut(&packet.pid) {
+            buffer.data.extend_from_slice(payload);
+            if buffer.data.len() >= buffer.expected_len {
+                let data = buffer.data[..buffer.expected_len].to_vec();
+                let table_id = data[0];
+                sections.push(Section {
+                    pid: packet.pid,
+                    table_id,
+                    data,
+                });
+                self.buffers.remove(&packet.pid);
+            }
+        }
+
+        sections
+    }
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub enum TimeSource {
+    AtscStt,
+    DvbTdt,
+    DvbTot,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct BroadcastUtc {
+    pub unix_seconds: i64,
+    pub source: TimeSource,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+pub struct TimeSyncUpdate {
+    pub pcr_27mhz: Option<u64>,
+    pub utc_unix_seconds: Option<i64>,
+    pub chunk_index: Option<u64>,
+    pub chunk_start_27mhz: Option<u64>,
+    pub utc_start_unix: Option<i64>,
+    pub synced: bool,
+    pub discontinuity: bool,
+}
+
+#[derive(Debug)]
+pub struct TimeSyncEngine {
+    chunk_ticks: u64,
+    last_pcr: Option<u64>,
+    utc_offset_ticks: Option<i64>,
+    synced: bool,
+    last_chunk_index: Option<u64>,
+}
+
+impl TimeSyncEngine {
+    pub fn new(chunk_duration_ms: u64) -> Self {
+        let chunk_ticks = chunk_duration_ms * 27_000;
+        Self {
+            chunk_ticks,
+            last_pcr: None,
+            utc_offset_ticks: None,
+            synced: false,
+            last_chunk_index: None,
+        }
+    }
+
+    pub fn ingest_packet(
+        &mut self,
+        packet: &TsPacket,
+        assembler: &mut SectionAssembler,
+    ) -> Vec<TimeSyncUpdate> {
+        let mut updates = Vec::new();
+
+        if packet.discontinuity {
+            self.last_pcr = None;
+            self.utc_offset_ticks = None;
+            self.synced = false;
+            self.last_chunk_index = None;
+            updates.push(TimeSyncUpdate {
+                pcr_27mhz: packet.pcr_27mhz,
+                utc_unix_seconds: None,
+                chunk_index: None,
+                chunk_start_27mhz: None,
+                utc_start_unix: None,
+                synced: false,
+                discontinuity: true,
+            });
+        }
+
+        for section in assembler.push_packet(packet) {
+            if let Some(utc) = parse_time_section(&section) {
+                if let Some(pcr) = self.last_pcr {
+                    let utc_ticks = utc.unix_seconds.saturating_mul(27_000_000);
+                    let offset = utc_ticks - pcr as i64;
+                    self.utc_offset_ticks = Some(offset);
+                    self.synced = true;
+                }
+                updates.push(TimeSyncUpdate {
+                    pcr_27mhz: self.last_pcr,
+                    utc_unix_seconds: Some(utc.unix_seconds),
+                    chunk_index: self.current_chunk_index(),
+                    chunk_start_27mhz: self.current_chunk_start_27mhz(),
+                    utc_start_unix: self.current_chunk_utc_start(),
+                    synced: self.synced,
+                    discontinuity: false,
+                });
+            }
+        }
+
+        if let Some(pcr) = packet.pcr_27mhz {
+            self.last_pcr = Some(pcr);
+            let chunk_index = self.current_chunk_index();
+            if chunk_index != self.last_chunk_index {
+                self.last_chunk_index = chunk_index;
+                updates.push(TimeSyncUpdate {
+                    pcr_27mhz: Some(pcr),
+                    utc_unix_seconds: self.current_utc_seconds(),
+                    chunk_index,
+                    chunk_start_27mhz: self.current_chunk_start_27mhz(),
+                    utc_start_unix: self.current_chunk_utc_start(),
+                    synced: self.synced,
+                    discontinuity: false,
+                });
+            }
+        }
+
+        updates
+    }
+
+    fn current_utc_seconds(&self) -> Option<i64> {
+        let pcr = self.last_pcr? as i64;
+        let offset = self.utc_offset_ticks?;
+        Some((pcr + offset) / 27_000_000)
+    }
+
+    fn current_chunk_index(&self) -> Option<u64> {
+        let pcr = self.last_pcr? as i128;
+        let offset = self.utc_offset_ticks.unwrap_or(0) as i128;
+        let t = pcr + offset;
+        if t < 0 {
+            return None;
+        }
+        Some((t as u128 / self.chunk_ticks as u128) as u64)
+    }
+
+    fn current_chunk_start_27mhz(&self) -> Option<u64> {
+        let chunk_index = self.current_chunk_index()? as i128;
+        let offset = self.utc_offset_ticks.unwrap_or(0) as i128;
+        let anchored = chunk_index * self.chunk_ticks as i128;
+        let pcr = anchored - offset;
+        if pcr < 0 {
+            return None;
+        }
+        Some(pcr as u64)
+    }
+
+    fn current_chunk_utc_start(&self) -> Option<i64> {
+        let _ = self.utc_offset_ticks?;
+        let chunk_index = self.current_chunk_index()? as i128;
+        let anchored = chunk_index * self.chunk_ticks as i128;
+        Some((anchored / 27_000_000) as i64)
+    }
+}
+
+pub fn parse_time_section(section: &Section) -> Option<BroadcastUtc> {
+    match section.table_id {
+        TABLE_ID_ATSC_STT if section.pid == PID_ATSC_PSIP => {
+            parse_atsc_stt(&section.data).map(|utc| BroadcastUtc {
+                unix_seconds: utc,
+                source: TimeSource::AtscStt,
+            })
+        }
+        TABLE_ID_DVB_TDT if section.pid == PID_DVB_TDT_TOT => {
+            parse_dvb_time(&section.data).map(|utc| BroadcastUtc {
+                unix_seconds: utc,
+                source: TimeSource::DvbTdt,
+            })
+        }
+        TABLE_ID_DVB_TOT if section.pid == PID_DVB_TDT_TOT => {
+            parse_dvb_time(&section.data).map(|utc| BroadcastUtc {
+                unix_seconds: utc,
+                source: TimeSource::DvbTot,
+            })
+        }
+        _ => None,
+    }
+}
+
+fn parse_atsc_stt(data: &[u8]) -> Option<i64> {
+    if data.len() < 3 + 1 + 4 + 1 {
+        return None;
+    }
+    let system_time = u32::from_be_bytes([data[4], data[5], data[6], data[7]]) as i64;
+    let gps_utc_offset = data[8] as i64;
+    let utc_since_1980 = system_time - gps_utc_offset;
+    Some(utc_since_1980 - GPS_EPOCH_TO_UNIX)
+}
+
+fn parse_dvb_time(data: &[u8]) -> Option<i64> {
+    if data.len() < 8 {
+        return None;
+    }
+    let mjd = u16::from_be_bytes([data[3], data[4]]);
+    let hour = bcd_to_dec(data[5])?;
+    let minute = bcd_to_dec(data[6])?;
+    let second = bcd_to_dec(data[7])?;
+
+    let days = mjd as i64 - MJD_UNIX_EPOCH;
+    Some(days * 86_400 + hour as i64 * 3_600 + minute as i64 * 60 + second as i64)
+}
+
+fn bcd_to_dec(value: u8) -> Option<u32> {
+    let high = (value >> 4) & 0x0F;
+    let low = value & 0x0F;
+    if high > 9 || low > 9 {
+        return None;
+    }
+    Some((high as u32) * 10 + low as u32)
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    fn build_ts_packet_with_adaptation_pcr(
+        pid: u16,
+        continuity_counter: u8,
+        pcr_27mhz: u64,
+    ) -> [u8; TS_PACKET_SIZE] {
+        // Encode PCR into base (90kHz) and extension (27MHz remainder).
+        let base = pcr_27mhz / 300;
+        let ext = pcr_27mhz % 300;
+        let mut pcr = [0u8; 6];
+        pcr[0] = ((base >> 25) & 0xFF) as u8;
+        pcr[1] = ((base >> 17) & 0xFF) as u8;
+        pcr[2] = ((base >> 9) & 0xFF) as u8;
+        pcr[3] = ((base >> 1) & 0xFF) as u8;
+        pcr[4] = (((base & 0x1) << 7) as u8) | 0x7E | (((ext >> 8) & 0x1) as u8);
+        pcr[5] = (ext & 0xFF) as u8;
+
+        let mut data = [0u8; TS_PACKET_SIZE];
+        data[0] = SYNC_BYTE;
+        data[1] = ((pid >> 8) as u8) & 0x1F;
+        data[2] = (pid & 0xFF) as u8;
+        // adaptation only (no payload): adaptation_control=2
+        data[3] = (2 << 4) | (continuity_counter & 0x0F);
+        // adaptation length: 1 byte flags + 6 bytes PCR = 7
+        data[4] = 7;
+        // flags: PCR flag
+        data[5] = 0x10;
+        data[6..12].copy_from_slice(&pcr);
+        data
+    }
+
+    fn encode_pts_90khz(pts: u64) -> [u8; 5] {
+        let mut b = [0u8; 5];
+        b[0] = 0x20 | ((((pts >> 30) & 0x07) as u8) << 1) | 1;
+        b[1] = ((pts >> 22) & 0xFF) as u8;
+        b[2] = ((((pts >> 15) & 0x7F) as u8) << 1) | 1;
+        b[3] = ((pts >> 7) & 0xFF) as u8;
+        b[4] = (((pts & 0x7F) as u8) << 1) | 1;
+        b
+    }
+
+    #[test]
+    fn parse_packet_extracts_pid_and_payload() {
+        let pid = 0x0033u16;
+        let mut data = [0u8; TS_PACKET_SIZE];
+        data[0] = SYNC_BYTE;
+        data[1] = 0x40 | (((pid >> 8) as u8) & 0x1F); // payload_unit_start
+        data[2] = (pid & 0xFF) as u8;
+        data[3] = (1 << 4) | 0x0A; // payload only
+        data[4] = 0xAA;
+        let pkt = parse_packet(data).unwrap();
+        assert_eq!(pkt.pid, pid);
+        assert!(pkt.payload_unit_start);
+        assert_eq!(pkt.continuity_counter, 0x0A);
+        assert_eq!(pkt.payload()[0], 0xAA);
+    }
+
+    #[test]
+    fn parse_packet_rejects_bad_sync() {
+        let mut data = [0u8; TS_PACKET_SIZE];
+        data[0] = 0;
+        assert!(parse_packet(data).is_err());
+    }
+
+    #[test]
+    fn parse_packet_rejects_invalid_adaptation_length() {
+        let pid = 0x0011u16;
+        let mut data = [0u8; TS_PACKET_SIZE];
+        data[0] = SYNC_BYTE;
+        data[1] = ((pid >> 8) as u8) & 0x1F;
+        data[2] = (pid & 0xFF) as u8;
+        data[3] = (3 << 4) | 0x00; // adaptation + payload
+        data[4] = 250; // too large
+        assert!(parse_packet(data).is_err());
+    }
+
+    #[test]
+    fn parse_packet_reads_pcr_27mhz() {
+        let pcr = 54_000_123u64;
+        let data = build_ts_packet_with_adaptation_pcr(0x0100, 0, pcr);
+        let pkt = parse_packet(data).unwrap();
+        assert_eq!(pkt.pcr_27mhz, Some(pcr));
+    }
+
+    #[test]
+    fn parse_pts_extracts_expected_value() {
+        let pid = 0x0020u16;
+        let pts = 90_000u64 * 3;
+        let pts_bytes = encode_pts_90khz(pts);
+
+        let mut data = [0u8; TS_PACKET_SIZE];
+        data[0] = SYNC_BYTE;
+        data[1] = 0x40 | (((pid >> 8) as u8) & 0x1F);
+        data[2] = (pid & 0xFF) as u8;
+        data[3] = (1 << 4) | 0x00; // payload only
+
+        // Minimal PES header with PTS.
+        let payload = &mut data[4..];
+        payload[0..3].copy_from_slice(&[0, 0, 1]);
+        payload[3] = 0xE0;
+        payload[7] = 0x80; // pts_dts_flags = 2
+        payload[8] = 5; // header length
+        payload[9..14].copy_from_slice(&pts_bytes);
+
+        let pkt = parse_packet(data).unwrap();
+        let parsed = parse_pts_90khz(&pkt).unwrap();
+        assert_eq!(parsed, pts);
+    }
+
+    #[test]
+    fn section_assembler_reassembles_across_packets() {
+        let pid = 0x0014u16;
+        let table_id = TABLE_ID_DVB_TDT;
+
+        // A tiny "section" with declared length 10 (3 + 10 = 13 bytes total).
+        let total_len = 13usize;
+        let section_length = (total_len - 3) as u16;
+        let mut section = vec![0u8; total_len];
+        section[0] = table_id;
+        section[1] = 0x00 | (((section_length >> 8) as u8) & 0x0F);
+        section[2] = (section_length & 0xFF) as u8;
+        for i in 3..total_len {
+            section[i] = i as u8;
+        }
+
+        // Packet 1: payload is intentionally short (via a large adaptation field) so the assembler
+        // must buffer until packet 2 arrives.
+        let mut pkt1 = [0u8; TS_PACKET_SIZE];
+        pkt1[0] = SYNC_BYTE;
+        pkt1[1] = 0x40 | (((pid >> 8) as u8) & 0x1F);
+        pkt1[2] = (pid & 0xFF) as u8;
+        pkt1[3] = (3 << 4) | 0; // adaptation + payload
+        let payload_len_1 = 8usize; // 1 pointer + 7 bytes of section
+        let adaptation_len_1 = (TS_PACKET_SIZE - 5) - payload_len_1;
+        pkt1[4] = adaptation_len_1 as u8;
+        // adaptation flags at pkt1[5] left as 0; rest is stuffing 0.
+        let payload_start_1 = 4 + 1 + adaptation_len_1;
+        pkt1[payload_start_1] = 0; // pointer = 0
+        pkt1[payload_start_1 + 1..payload_start_1 + 1 + 7].copy_from_slice(&section[..7]);
+
+        let mut pkt2 = [0u8; TS_PACKET_SIZE];
+        pkt2[0] = SYNC_BYTE;
+        pkt2[1] = ((pid >> 8) as u8) & 0x1F;
+        pkt2[2] = (pid & 0xFF) as u8;
+        pkt2[3] = (1 << 4) | 1; // payload only
+        pkt2[4..4 + (total_len - 7)].copy_from_slice(&section[7..]);
+
+        let p1 = parse_packet(pkt1).unwrap();
+        let p2 = parse_packet(pkt2).unwrap();
+
+        let mut asm = SectionAssembler::default();
+        assert!(asm.push_packet(&p1).is_empty());
+        let out = asm.push_packet(&p2);
+        assert_eq!(out.len(), 1);
+        assert_eq!(out[0].pid, pid);
+        assert_eq!(out[0].table_id, table_id);
+        assert_eq!(out[0].data.len(), total_len);
+        assert_eq!(out[0].data[3], 3u8);
+    }
+
+    #[test]
+    fn parse_time_sections_for_dvb_and_atsc_epoch() {
+        // DVB TDT at UNIX epoch.
+        let mut dvb = vec![0u8; 8];
+        dvb[0] = TABLE_ID_DVB_TDT;
+        dvb[3] = 0x9E;
+        dvb[4] = 0x8B; // MJD 40587
+        dvb[5] = 0x00;
+        dvb[6] = 0x00;
+        dvb[7] = 0x00;
+        let section = Section {
+            pid: PID_DVB_TDT_TOT,
+            table_id: TABLE_ID_DVB_TDT,
+            data: dvb,
+        };
+        let utc = parse_time_section(&section).unwrap();
+        assert_eq!(utc.unix_seconds, 0);
+
+        // ATSC STT at UNIX epoch according to our parser logic.
+        let mut atsc = vec![0u8; 9];
+        atsc[0] = TABLE_ID_ATSC_STT;
+        let system_time = GPS_EPOCH_TO_UNIX as u32;
+        atsc[4..8].copy_from_slice(&system_time.to_be_bytes());
+        atsc[8] = 0;
+        let section = Section {
+            pid: PID_ATSC_PSIP,
+            table_id: TABLE_ID_ATSC_STT,
+            data: atsc,
+        };
+        let utc = parse_time_section(&section).unwrap();
+        assert_eq!(utc.unix_seconds, 0);
+    }
+
+    #[test]
+    fn time_sync_engine_emits_chunk_boundaries_from_pcr() {
+        let mut engine = TimeSyncEngine::new(1000);
+        let mut asm = SectionAssembler::default();
+
+        let p0 = parse_packet(build_ts_packet_with_adaptation_pcr(0x0100, 0, 0)).unwrap();
+        let p1 = parse_packet(build_ts_packet_with_adaptation_pcr(0x0100, 1, 27_000_000)).unwrap();
+
+        let u0 = engine.ingest_packet(&p0, &mut asm);
+        assert!(u0.iter().any(|u| u.chunk_index == Some(0)));
+
+        let u1 = engine.ingest_packet(&p1, &mut asm);
+        assert!(u1.iter().any(|u| u.chunk_index == Some(1)));
+    }
+}
diff --git a/deploy/cloudflare-worker/.dockerignore b/deploy/cloudflare-worker/.dockerignore
new file mode 100644
index 0000000..877eaf3
--- /dev/null
+++ b/deploy/cloudflare-worker/.dockerignore
@@ -0,0 +1,5 @@
+**
+
+# Only include the container build context we need.
+!containers/
+!containers/**
diff --git a/deploy/cloudflare-worker/containers/ec-api/Cargo.toml b/deploy/cloudflare-worker/containers/ec-api/Cargo.toml
new file mode 100644
index 0000000..1193af6
--- /dev/null
+++ b/deploy/cloudflare-worker/containers/ec-api/Cargo.toml
@@ -0,0 +1,19 @@
+[package]
+name = "ec-cf-bootstrap-api"
+version = "0.0.0"
+edition = "2021"
+license = "AGPL-3.0-only"
+
+[dependencies]
+anyhow = "1"
+axum = { version = "0.7", features = ["json"] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+tokio = { version = "1", features = ["macros", "rt-multi-thread", "signal"] }
+tower-http = { version = "0.6", features = ["trace"] }
+tracing = "0.1"
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
+
+# Keep this out of the workspace; it's built in a container image.
+[workspace]
+
diff --git a/deploy/cloudflare-worker/containers/ec-api/Dockerfile b/deploy/cloudflare-worker/containers/ec-api/Dockerfile
new file mode 100644
index 0000000..0583c53
--- /dev/null
+++ b/deploy/cloudflare-worker/containers/ec-api/Dockerfile
@@ -0,0 +1,18 @@
+# Cloudflare Containers build: compile a small, portable Rust HTTP server.
+# This container only serves the bootstrap /api/* endpoints used for WebRTC rendezvous.
+
+FROM rust:1.86-bookworm AS build
+WORKDIR /app
+
+# Pre-copy manifest to prime dependency caching.
+COPY Cargo.toml /app/Cargo.toml
+COPY src /app/src
+
+RUN cargo build --release
+
+FROM debian:bookworm-slim
+WORKDIR /app
+COPY --from=build /app/target/release/ec-cf-bootstrap-api /app/ec-cf-bootstrap-api
+ENV RUST_LOG=info
+EXPOSE 8080
+CMD ["/app/ec-cf-bootstrap-api"]
diff --git a/deploy/cloudflare-worker/containers/ec-api/src/main.rs b/deploy/cloudflare-worker/containers/ec-api/src/main.rs
new file mode 100644
index 0000000..f3d2313
--- /dev/null
+++ b/deploy/cloudflare-worker/containers/ec-api/src/main.rs
@@ -0,0 +1,252 @@
+use axum::{
+    extract::Query,
+    http::{HeaderMap, StatusCode},
+    response::IntoResponse,
+    routing::{get, post},
+    Json, Router,
+};
+use serde::{Deserialize, Serialize};
+use std::{
+    collections::HashMap,
+    net::SocketAddr,
+    sync::Arc,
+    time::{Duration, SystemTime, UNIX_EPOCH},
+};
+use tokio::sync::RwLock;
+use tower_http::trace::TraceLayer;
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+struct DirectoryEntry {
+    stream_id: String,
+    title: String,
+    offer: String,
+    updated_ms: u64,
+    expires_ms: u64,
+}
+
+#[derive(Clone, Debug, Serialize, Deserialize)]
+struct AnswerEntry {
+    stream_id: String,
+    answer: String,
+    updated_ms: u64,
+    expires_ms: u64,
+}
+
+#[derive(Clone, Debug, Serialize)]
+struct DirectoryList {
+    now_ms: u64,
+    entries: Vec<DirectoryEntry>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+struct HealthResp {
+    ok: bool,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct AnnounceReq {
+    stream_id: String,
+    title: String,
+    offer: String,
+    expires_ms: Option<u64>,
+}
+
+#[derive(Clone, Debug, Serialize)]
+struct AnnounceResp {
+    ok: bool,
+    ttl_ms: u64,
+    entry: DirectoryEntry,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct AnswerPostReq {
+    stream_id: String,
+    answer: String,
+}
+
+#[derive(Clone, Debug, Deserialize)]
+struct AnswerGetReq {
+    stream_id: String,
+}
+
+#[derive(Default)]
+struct State {
+    entries: HashMap<String, DirectoryEntry>,
+    answers: HashMap<String, AnswerEntry>,
+}
+
+fn now_ms() -> u64 {
+    SystemTime::now()
+        .duration_since(UNIX_EPOCH)
+        .unwrap_or(Duration::from_secs(0))
+        .as_millis() as u64
+}
+
+fn clamp_str(mut s: String, max_len: usize) -> String {
+    if s.len() <= max_len {
+        return s;
+    }
+    s.truncate(max_len);
+    s
+}
+
+fn json_headers() -> HeaderMap {
+    let mut headers = HeaderMap::new();
+    headers.insert("content-type", "application/json; charset=utf-8".parse().unwrap());
+    headers.insert("cache-control", "no-store".parse().unwrap());
+    headers
+}
+
+fn prune_state(state: &mut State, now: u64) {
+    state.entries.retain(|_, v| v.expires_ms > now);
+    state.answers.retain(|_, v| v.expires_ms > now);
+
+    // Cap growth defensively. This is not spam-resistant; it's a bootstrap rendezvous.
+    if state.entries.len() > 200 {
+        let mut items = state.entries.values().cloned().collect::<Vec<_>>();
+        items.sort_by_key(|e| std::cmp::Reverse(e.updated_ms));
+        items.truncate(200);
+        state.entries = items.into_iter().map(|e| (e.stream_id.clone(), e)).collect();
+    }
+    if state.answers.len() > 500 {
+        let mut items = state.answers.values().cloned().collect::<Vec<_>>();
+        items.sort_by_key(|e| std::cmp::Reverse(e.updated_ms));
+        items.truncate(500);
+        state.answers = items.into_iter().map(|e| (e.stream_id.clone(), e)).collect();
+    }
+}
+
+async fn health() -> impl IntoResponse {
+    (json_headers(), Json(HealthResp { ok: true }))
+}
+
+async fn directory(state: axum::extract::State<Arc<RwLock<State>>>) -> impl IntoResponse {
+    let now = now_ms();
+    let mut guard = state.write().await;
+    prune_state(&mut guard, now);
+    let mut entries = guard.entries.values().cloned().collect::<Vec<_>>();
+    entries.sort_by_key(|e| std::cmp::Reverse(e.updated_ms));
+    (json_headers(), Json(DirectoryList { now_ms: now, entries }))
+}
+
+async fn announce(
+    state: axum::extract::State<Arc<RwLock<State>>>,
+    Json(body): Json<AnnounceReq>,
+) -> impl IntoResponse {
+    let now = now_ms();
+
+    if body.stream_id.is_empty() || body.title.is_empty() || body.offer.is_empty() {
+        let resp = serde_json::json!({ "error": "missing stream_id/title/offer" });
+        return (StatusCode::BAD_REQUEST, json_headers(), Json(resp)).into_response();
+    }
+    if body.offer.len() > 64_000 {
+        let resp = serde_json::json!({ "error": "offer too large" });
+        return (StatusCode::PAYLOAD_TOO_LARGE, json_headers(), Json(resp)).into_response();
+    }
+
+    let requested_expires = body.expires_ms.unwrap_or(now + 20_000);
+    let requested_ttl = requested_expires.saturating_sub(now);
+    let ttl_ms = requested_ttl.clamp(5_000, 60_000);
+
+    let entry = DirectoryEntry {
+        stream_id: clamp_str(body.stream_id, 256),
+        title: clamp_str(body.title, 128),
+        offer: body.offer,
+        updated_ms: now,
+        expires_ms: now + ttl_ms,
+    };
+
+    let mut guard = state.write().await;
+    prune_state(&mut guard, now);
+    guard.entries.insert(entry.stream_id.clone(), entry.clone());
+
+    (
+        json_headers(),
+        Json(AnnounceResp {
+            ok: true,
+            ttl_ms,
+            entry,
+        }),
+    )
+        .into_response()
+}
+
+async fn post_answer(
+    state: axum::extract::State<Arc<RwLock<State>>>,
+    Json(body): Json<AnswerPostReq>,
+) -> impl IntoResponse {
+    let now = now_ms();
+    if body.stream_id.is_empty() || body.answer.is_empty() {
+        let resp = serde_json::json!({ "error": "missing stream_id/answer" });
+        return (StatusCode::BAD_REQUEST, json_headers(), Json(resp)).into_response();
+    }
+    if body.answer.len() > 64_000 {
+        let resp = serde_json::json!({ "error": "answer too large" });
+        return (StatusCode::PAYLOAD_TOO_LARGE, json_headers(), Json(resp)).into_response();
+    }
+
+    let entry = AnswerEntry {
+        stream_id: clamp_str(body.stream_id, 256),
+        answer: body.answer,
+        updated_ms: now,
+        expires_ms: now + 2 * 60_000,
+    };
+
+    let mut guard = state.write().await;
+    prune_state(&mut guard, now);
+    guard.answers.insert(entry.stream_id.clone(), entry);
+
+    (json_headers(), Json(serde_json::json!({ "ok": true }))).into_response()
+}
+
+async fn get_answer(
+    state: axum::extract::State<Arc<RwLock<State>>>,
+    Query(q): Query<AnswerGetReq>,
+) -> impl IntoResponse {
+    let now = now_ms();
+    if q.stream_id.is_empty() {
+        let resp = serde_json::json!({ "error": "missing stream_id" });
+        return (StatusCode::BAD_REQUEST, json_headers(), Json(resp)).into_response();
+    }
+
+    let mut guard = state.write().await;
+    prune_state(&mut guard, now);
+
+    // One-shot: first reader consumes.
+    let Some(answer) = guard.answers.remove(&q.stream_id) else {
+        let resp = serde_json::json!({ "error": "not found" });
+        return (StatusCode::NOT_FOUND, json_headers(), Json(resp)).into_response();
+    };
+
+    (json_headers(), Json(answer)).into_response()
+}
+
+#[tokio::main]
+async fn main() -> anyhow::Result<()> {
+    tracing_subscriber::fmt()
+        .with_env_filter(
+            std::env::var("RUST_LOG").unwrap_or_else(|_| "info,tower_http=info".to_string()),
+        )
+        .init();
+
+    let state = Arc::new(RwLock::new(State::default()));
+    let app = Router::new()
+        .route("/api/health", get(health))
+        .route("/api/directory", get(directory))
+        .route("/api/announce", post(announce))
+        .route("/api/answer", post(post_answer).get(get_answer))
+        .with_state(state)
+        .layer(TraceLayer::new_for_http());
+
+    let addr: SocketAddr = "0.0.0.0:8080".parse().unwrap();
+    tracing::info!("ec-cf-bootstrap-api listening on {}", addr);
+    let listener = tokio::net::TcpListener::bind(addr).await?;
+    axum::serve(listener, app)
+        .with_graceful_shutdown(shutdown_signal())
+        .await?;
+    Ok(())
+}
+
+async fn shutdown_signal() {
+    let _ = tokio::signal::ctrl_c().await;
+}
diff --git a/deploy/cloudflare-worker/package-lock.json b/deploy/cloudflare-worker/package-lock.json
new file mode 100644
index 0000000..9fcee09
--- /dev/null
+++ b/deploy/cloudflare-worker/package-lock.json
@@ -0,0 +1,1519 @@
+{
+  "name": "every-channel-site",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "every-channel-site",
+      "devDependencies": {
+        "typescript": "5.9.3",
+        "wrangler": "^4.63.0"
+      }
+    },
+    "node_modules/@cloudflare/kv-asset-handler": {
+      "version": "0.4.2",
+      "resolved": "https://registry.npmjs.org/@cloudflare/kv-asset-handler/-/kv-asset-handler-0.4.2.tgz",
+      "integrity": "sha512-SIOD2DxrRRwQ+jgzlXCqoEFiKOFqaPjhnNTGKXSRLvp1HiOvapLaFG2kEr9dYQTYe8rKrd9uvDUzmAITeNyaHQ==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/@cloudflare/unenv-preset": {
+      "version": "2.12.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/unenv-preset/-/unenv-preset-2.12.0.tgz",
+      "integrity": "sha512-NK4vN+2Z/GbfGS4BamtbbVk1rcu5RmqaYGiyHJQrA09AoxdZPHDF3W/EhgI0YSK8p3vRo/VNCtbSJFPON7FWMQ==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "peerDependencies": {
+        "unenv": "2.0.0-rc.24",
+        "workerd": "^1.20260115.0"
+      },
+      "peerDependenciesMeta": {
+        "workerd": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/@cloudflare/workerd-darwin-64": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-64/-/workerd-darwin-64-1.20260205.0.tgz",
+      "integrity": "sha512-ToOItqcirmWPwR+PtT+Q4bdjTn/63ZxhJKEfW4FNn7FxMTS1Tw5dml0T0mieOZbCpcvY8BdvPKFCSlJuI8IVHQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-darwin-arm64": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-darwin-arm64/-/workerd-darwin-arm64-1.20260205.0.tgz",
+      "integrity": "sha512-402ZqLz+LrG0NDXp7Hn7IZbI0DyhjNfjAlVenb0K3yod9KCuux0u3NksNBvqJx0mIGHvVR4K05h+jfT5BTHqGA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-linux-64": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-64/-/workerd-linux-64-1.20260205.0.tgz",
+      "integrity": "sha512-rz9jBzazIA18RHY+osa19hvsPfr0LZI1AJzIjC6UqkKKphcTpHBEQ25Xt8cIA34ivMIqeENpYnnmpDFesLkfcQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-linux-arm64": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-linux-arm64/-/workerd-linux-arm64-1.20260205.0.tgz",
+      "integrity": "sha512-jr6cKpMM/DBEbL+ATJ9rYue758CKp0SfA/nXt5vR32iINVJrb396ye9iat2y9Moa/PgPKnTrFgmT6urUmG3IUg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cloudflare/workerd-windows-64": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/@cloudflare/workerd-windows-64/-/workerd-windows-64-1.20260205.0.tgz",
+      "integrity": "sha512-SMPW5jCZYOG7XFIglSlsgN8ivcl0pCrSAYxCwxtWvZ88whhcDB/aISNtiQiDZujPH8tIo2hE5dEkxW7tGEwc3A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=16"
+      }
+    },
+    "node_modules/@cspotcode/source-map-support": {
+      "version": "0.8.1",
+      "resolved": "https://registry.npmjs.org/@cspotcode/source-map-support/-/source-map-support-0.8.1.tgz",
+      "integrity": "sha512-IchNf6dN4tHoMFIn/7OE8LWZ19Y6q/67Bmf6vnGREv8RSbBVb9LPJxEcnwrcwX6ixSvaiGoomAUvu4YSxXrVgw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/trace-mapping": "0.3.9"
+      },
+      "engines": {
+        "node": ">=12"
+      }
+    },
+    "node_modules/@emnapi/runtime": {
+      "version": "1.8.1",
+      "resolved": "https://registry.npmjs.org/@emnapi/runtime/-/runtime-1.8.1.tgz",
+      "integrity": "sha512-mehfKSMWjjNol8659Z8KxEMrdSJDDot5SXMq00dM8BN4o+CLNXQ0xH2V7EchNHV4RmbZLmmPdEaXZc5H2FXmDg==",
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "dependencies": {
+        "tslib": "^2.4.0"
+      }
+    },
+    "node_modules/@esbuild/aix-ppc64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/aix-ppc64/-/aix-ppc64-0.27.0.tgz",
+      "integrity": "sha512-KuZrd2hRjz01y5JK9mEBSD3Vj3mbCvemhT466rSuJYeE/hjuBrHfjjcjMdTm/sz7au+++sdbJZJmuBwQLuw68A==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "aix"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm/-/android-arm-0.27.0.tgz",
+      "integrity": "sha512-j67aezrPNYWJEOHUNLPj9maeJte7uSMM6gMoxfPC9hOg8N02JuQi/T7ewumf4tNvJadFkvLZMlAq73b9uwdMyQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-arm64/-/android-arm64-0.27.0.tgz",
+      "integrity": "sha512-CC3vt4+1xZrs97/PKDkl0yN7w8edvU2vZvAFGD16n9F0Cvniy5qvzRXjfO1l94efczkkQE6g1x0i73Qf5uthOQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/android-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/android-x64/-/android-x64-0.27.0.tgz",
+      "integrity": "sha512-wurMkF1nmQajBO1+0CJmcN17U4BP6GqNSROP8t0X/Jiw2ltYGLHpEksp9MpoBqkrFR3kv2/te6Sha26k3+yZ9Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-arm64/-/darwin-arm64-0.27.0.tgz",
+      "integrity": "sha512-uJOQKYCcHhg07DL7i8MzjvS2LaP7W7Pn/7uA0B5S1EnqAirJtbyw4yC5jQ5qcFjHK9l6o/MX9QisBg12kNkdHg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/darwin-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/darwin-x64/-/darwin-x64-0.27.0.tgz",
+      "integrity": "sha512-8mG6arH3yB/4ZXiEnXof5MK72dE6zM9cDvUcPtxhUZsDjESl9JipZYW60C3JGreKCEP+p8P/72r69m4AZGJd5g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-arm64/-/freebsd-arm64-0.27.0.tgz",
+      "integrity": "sha512-9FHtyO988CwNMMOE3YIeci+UV+x5Zy8fI2qHNpsEtSF83YPBmE8UWmfYAQg6Ux7Gsmd4FejZqnEUZCMGaNQHQw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/freebsd-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/freebsd-x64/-/freebsd-x64-0.27.0.tgz",
+      "integrity": "sha512-zCMeMXI4HS/tXvJz8vWGexpZj2YVtRAihHLk1imZj4efx1BQzN76YFeKqlDr3bUWI26wHwLWPd3rwh6pe4EV7g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm/-/linux-arm-0.27.0.tgz",
+      "integrity": "sha512-t76XLQDpxgmq2cNXKTVEB7O7YMb42atj2Re2Haf45HkaUpjM2J0UuJZDuaGbPbamzZ7bawyGFUkodL+zcE+jvQ==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-arm64/-/linux-arm64-0.27.0.tgz",
+      "integrity": "sha512-AS18v0V+vZiLJyi/4LphvBE+OIX682Pu7ZYNsdUHyUKSoRwdnOsMf6FDekwoAFKej14WAkOef3zAORJgAtXnlQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ia32": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ia32/-/linux-ia32-0.27.0.tgz",
+      "integrity": "sha512-Mz1jxqm/kfgKkc/KLHC5qIujMvnnarD9ra1cEcrs7qshTUSksPihGrWHVG5+osAIQ68577Zpww7SGapmzSt4Nw==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-loong64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-loong64/-/linux-loong64-0.27.0.tgz",
+      "integrity": "sha512-QbEREjdJeIreIAbdG2hLU1yXm1uu+LTdzoq1KCo4G4pFOLlvIspBm36QrQOar9LFduavoWX2msNFAAAY9j4BDg==",
+      "cpu": [
+        "loong64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-mips64el": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-mips64el/-/linux-mips64el-0.27.0.tgz",
+      "integrity": "sha512-sJz3zRNe4tO2wxvDpH/HYJilb6+2YJxo/ZNbVdtFiKDufzWq4JmKAiHy9iGoLjAV7r/W32VgaHGkk35cUXlNOg==",
+      "cpu": [
+        "mips64el"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-ppc64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-ppc64/-/linux-ppc64-0.27.0.tgz",
+      "integrity": "sha512-z9N10FBD0DCS2dmSABDBb5TLAyF1/ydVb+N4pi88T45efQ/w4ohr/F/QYCkxDPnkhkp6AIpIcQKQ8F0ANoA2JA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-riscv64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-riscv64/-/linux-riscv64-0.27.0.tgz",
+      "integrity": "sha512-pQdyAIZ0BWIC5GyvVFn5awDiO14TkT/19FTmFcPdDec94KJ1uZcmFs21Fo8auMXzD4Tt+diXu1LW1gHus9fhFQ==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-s390x": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-s390x/-/linux-s390x-0.27.0.tgz",
+      "integrity": "sha512-hPlRWR4eIDDEci953RI1BLZitgi5uqcsjKMxwYfmi4LcwyWo2IcRP+lThVnKjNtk90pLS8nKdroXYOqW+QQH+w==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/linux-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/linux-x64/-/linux-x64-0.27.0.tgz",
+      "integrity": "sha512-1hBWx4OUJE2cab++aVZ7pObD6s+DK4mPGpemtnAORBvb5l/g5xFGk0vc0PjSkrDs0XaXj9yyob3d14XqvnQ4gw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-arm64/-/netbsd-arm64-0.27.0.tgz",
+      "integrity": "sha512-6m0sfQfxfQfy1qRuecMkJlf1cIzTOgyaeXaiVaaki8/v+WB+U4hc6ik15ZW6TAllRlg/WuQXxWj1jx6C+dfy3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/netbsd-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/netbsd-x64/-/netbsd-x64-0.27.0.tgz",
+      "integrity": "sha512-xbbOdfn06FtcJ9d0ShxxvSn2iUsGd/lgPIO2V3VZIPDbEaIj1/3nBBe1AwuEZKXVXkMmpr6LUAgMkLD/4D2PPA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "netbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-arm64/-/openbsd-arm64-0.27.0.tgz",
+      "integrity": "sha512-fWgqR8uNbCQ/GGv0yhzttj6sU/9Z5/Sv/VGU3F5OuXK6J6SlriONKrQ7tNlwBrJZXRYk5jUhuWvF7GYzGguBZQ==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openbsd-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openbsd-x64/-/openbsd-x64-0.27.0.tgz",
+      "integrity": "sha512-aCwlRdSNMNxkGGqQajMUza6uXzR/U0dIl1QmLjPtRbLOx3Gy3otfFu/VjATy4yQzo9yFDGTxYDo1FfAD9oRD2A==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openbsd"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/openharmony-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/openharmony-arm64/-/openharmony-arm64-0.27.0.tgz",
+      "integrity": "sha512-nyvsBccxNAsNYz2jVFYwEGuRRomqZ149A39SHWk4hV0jWxKM0hjBPm3AmdxcbHiFLbBSwG6SbpIcUbXjgyECfA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/sunos-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/sunos-x64/-/sunos-x64-0.27.0.tgz",
+      "integrity": "sha512-Q1KY1iJafM+UX6CFEL+F4HRTgygmEW568YMqDA5UV97AuZSm21b7SXIrRJDwXWPzr8MGr75fUZPV67FdtMHlHA==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "sunos"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-arm64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-arm64/-/win32-arm64-0.27.0.tgz",
+      "integrity": "sha512-W1eyGNi6d+8kOmZIwi/EDjrL9nxQIQ0MiGqe/AWc6+IaHloxHSGoeRgDRKHFISThLmsewZ5nHFvGFWdBYlgKPg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-ia32": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-ia32/-/win32-ia32-0.27.0.tgz",
+      "integrity": "sha512-30z1aKL9h22kQhilnYkORFYt+3wp7yZsHWus+wSKAJR8JtdfI76LJ4SBdMsCopTR3z/ORqVu5L1vtnHZWVj4cQ==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@esbuild/win32-x64": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/@esbuild/win32-x64/-/win32-x64-0.27.0.tgz",
+      "integrity": "sha512-aIitBcjQeyOhMTImhLZmtxfdOcuNRpwlPNmlFKPcHQYPhEssw75Cl1TSXJXpMkzaua9FUetx/4OQKq7eJul5Cg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/colour": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/@img/colour/-/colour-1.0.0.tgz",
+      "integrity": "sha512-A5P/LfWGFSl6nsckYtjw9da+19jB8hkJ6ACTGcDfEJ0aE+l2n2El7dsVM7UVHZQ9s2lmYMWlrS21YLy2IR1LUw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/@img/sharp-darwin-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-arm64/-/sharp-darwin-arm64-0.34.5.tgz",
+      "integrity": "sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-darwin-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-darwin-x64/-/sharp-darwin-x64-0.34.5.tgz",
+      "integrity": "sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-darwin-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-arm64/-/sharp-libvips-darwin-arm64-1.2.4.tgz",
+      "integrity": "sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-darwin-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-darwin-x64/-/sharp-libvips-darwin-x64-1.2.4.tgz",
+      "integrity": "sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm/-/sharp-libvips-linux-arm-1.2.4.tgz",
+      "integrity": "sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-arm64/-/sharp-libvips-linux-arm64-1.2.4.tgz",
+      "integrity": "sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-ppc64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-ppc64/-/sharp-libvips-linux-ppc64-1.2.4.tgz",
+      "integrity": "sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-riscv64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-riscv64/-/sharp-libvips-linux-riscv64-1.2.4.tgz",
+      "integrity": "sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-s390x": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-s390x/-/sharp-libvips-linux-s390x-1.2.4.tgz",
+      "integrity": "sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linux-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linux-x64/-/sharp-libvips-linux-x64-1.2.4.tgz",
+      "integrity": "sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-arm64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-arm64/-/sharp-libvips-linuxmusl-arm64-1.2.4.tgz",
+      "integrity": "sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-libvips-linuxmusl-x64": {
+      "version": "1.2.4",
+      "resolved": "https://registry.npmjs.org/@img/sharp-libvips-linuxmusl-x64/-/sharp-libvips-linuxmusl-x64-1.2.4.tgz",
+      "integrity": "sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm/-/sharp-linux-arm-0.34.5.tgz",
+      "integrity": "sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-arm64/-/sharp-linux-arm64-0.34.5.tgz",
+      "integrity": "sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-ppc64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-ppc64/-/sharp-linux-ppc64-0.34.5.tgz",
+      "integrity": "sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-ppc64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-riscv64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-riscv64/-/sharp-linux-riscv64-0.34.5.tgz",
+      "integrity": "sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-riscv64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-s390x": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-s390x/-/sharp-linux-s390x-0.34.5.tgz",
+      "integrity": "sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-s390x": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linux-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linux-x64/-/sharp-linux-x64-0.34.5.tgz",
+      "integrity": "sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linux-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-arm64/-/sharp-linuxmusl-arm64-0.34.5.tgz",
+      "integrity": "sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-linuxmusl-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-linuxmusl-x64/-/sharp-linuxmusl-x64-0.34.5.tgz",
+      "integrity": "sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-libvips-linuxmusl-x64": "1.2.4"
+      }
+    },
+    "node_modules/@img/sharp-wasm32": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-wasm32/-/sharp-wasm32-0.34.5.tgz",
+      "integrity": "sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==",
+      "cpu": [
+        "wasm32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later AND MIT",
+      "optional": true,
+      "dependencies": {
+        "@emnapi/runtime": "^1.7.0"
+      },
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-arm64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-arm64/-/sharp-win32-arm64-0.34.5.tgz",
+      "integrity": "sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-ia32": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-ia32/-/sharp-win32-ia32-0.34.5.tgz",
+      "integrity": "sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@img/sharp-win32-x64": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/@img/sharp-win32-x64/-/sharp-win32-x64-0.34.5.tgz",
+      "integrity": "sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "Apache-2.0 AND LGPL-3.0-or-later",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      }
+    },
+    "node_modules/@jridgewell/resolve-uri": {
+      "version": "3.1.2",
+      "resolved": "https://registry.npmjs.org/@jridgewell/resolve-uri/-/resolve-uri-3.1.2.tgz",
+      "integrity": "sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6.0.0"
+      }
+    },
+    "node_modules/@jridgewell/sourcemap-codec": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@jridgewell/sourcemap-codec/-/sourcemap-codec-1.5.5.tgz",
+      "integrity": "sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@jridgewell/trace-mapping": {
+      "version": "0.3.9",
+      "resolved": "https://registry.npmjs.org/@jridgewell/trace-mapping/-/trace-mapping-0.3.9.tgz",
+      "integrity": "sha512-3Belt6tdc8bPgAtbcmdtNJlirVoTmEb5e2gC94PnkwEW9jI6CAHUeoG85tjWP5WquqfavoMtMwiG4P926ZKKuQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jridgewell/resolve-uri": "^3.0.3",
+        "@jridgewell/sourcemap-codec": "^1.4.10"
+      }
+    },
+    "node_modules/@poppinss/colors": {
+      "version": "4.1.6",
+      "resolved": "https://registry.npmjs.org/@poppinss/colors/-/colors-4.1.6.tgz",
+      "integrity": "sha512-H9xkIdFswbS8n1d6vmRd8+c10t2Qe+rZITbbDHHkQixH5+2x1FDGmi/0K+WgWiqQFKPSlIYB7jlH6Kpfn6Fleg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "kleur": "^4.1.5"
+      }
+    },
+    "node_modules/@poppinss/dumper": {
+      "version": "0.6.5",
+      "resolved": "https://registry.npmjs.org/@poppinss/dumper/-/dumper-0.6.5.tgz",
+      "integrity": "sha512-NBdYIb90J7LfOI32dOewKI1r7wnkiH6m920puQ3qHUeZkxNkQiFnXVWoE6YtFSv6QOiPPf7ys6i+HWWecDz7sw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/colors": "^4.1.5",
+        "@sindresorhus/is": "^7.0.2",
+        "supports-color": "^10.0.0"
+      }
+    },
+    "node_modules/@poppinss/exception": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/@poppinss/exception/-/exception-1.2.3.tgz",
+      "integrity": "sha512-dCED+QRChTVatE9ibtoaxc+WkdzOSjYTKi/+uacHWIsfodVfpsueo3+DKpgU5Px8qXjgmXkSvhXvSCz3fnP9lw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@sindresorhus/is": {
+      "version": "7.2.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-7.2.0.tgz",
+      "integrity": "sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sindresorhus/is?sponsor=1"
+      }
+    },
+    "node_modules/@speed-highlight/core": {
+      "version": "1.2.14",
+      "resolved": "https://registry.npmjs.org/@speed-highlight/core/-/core-1.2.14.tgz",
+      "integrity": "sha512-G4ewlBNhUtlLvrJTb88d2mdy2KRijzs4UhnlrOSRT4bmjh/IqNElZa3zkrZ+TC47TwtlDWzVLFADljF1Ijp5hA==",
+      "dev": true,
+      "license": "CC0-1.0"
+    },
+    "node_modules/blake3-wasm": {
+      "version": "2.1.5",
+      "resolved": "https://registry.npmjs.org/blake3-wasm/-/blake3-wasm-2.1.5.tgz",
+      "integrity": "sha512-F1+K8EbfOZE49dtoPtmxUQrpXaBIl3ICvasLh+nJta0xkz+9kF/7uet9fLnwKqhDrmj6g+6K3Tw9yQPUg2ka5g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/cookie": {
+      "version": "1.1.1",
+      "resolved": "https://registry.npmjs.org/cookie/-/cookie-1.1.1.tgz",
+      "integrity": "sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "type": "opencollective",
+        "url": "https://opencollective.com/express"
+      }
+    },
+    "node_modules/detect-libc": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/detect-libc/-/detect-libc-2.1.2.tgz",
+      "integrity": "sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/error-stack-parser-es": {
+      "version": "1.0.5",
+      "resolved": "https://registry.npmjs.org/error-stack-parser-es/-/error-stack-parser-es-1.0.5.tgz",
+      "integrity": "sha512-5qucVt2XcuGMcEGgWI7i+yZpmpByQ8J1lHhcL7PwqCwu9FPP3VUXzT4ltHe5i2z9dePwEHcDVOAfSnHsOlCXRA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/antfu"
+      }
+    },
+    "node_modules/esbuild": {
+      "version": "0.27.0",
+      "resolved": "https://registry.npmjs.org/esbuild/-/esbuild-0.27.0.tgz",
+      "integrity": "sha512-jd0f4NHbD6cALCyGElNpGAOtWxSq46l9X/sWB0Nzd5er4Kz2YTm+Vl0qKFT9KUJvD8+fiO8AvoHhFvEatfVixA==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "bin": {
+        "esbuild": "bin/esbuild"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "optionalDependencies": {
+        "@esbuild/aix-ppc64": "0.27.0",
+        "@esbuild/android-arm": "0.27.0",
+        "@esbuild/android-arm64": "0.27.0",
+        "@esbuild/android-x64": "0.27.0",
+        "@esbuild/darwin-arm64": "0.27.0",
+        "@esbuild/darwin-x64": "0.27.0",
+        "@esbuild/freebsd-arm64": "0.27.0",
+        "@esbuild/freebsd-x64": "0.27.0",
+        "@esbuild/linux-arm": "0.27.0",
+        "@esbuild/linux-arm64": "0.27.0",
+        "@esbuild/linux-ia32": "0.27.0",
+        "@esbuild/linux-loong64": "0.27.0",
+        "@esbuild/linux-mips64el": "0.27.0",
+        "@esbuild/linux-ppc64": "0.27.0",
+        "@esbuild/linux-riscv64": "0.27.0",
+        "@esbuild/linux-s390x": "0.27.0",
+        "@esbuild/linux-x64": "0.27.0",
+        "@esbuild/netbsd-arm64": "0.27.0",
+        "@esbuild/netbsd-x64": "0.27.0",
+        "@esbuild/openbsd-arm64": "0.27.0",
+        "@esbuild/openbsd-x64": "0.27.0",
+        "@esbuild/openharmony-arm64": "0.27.0",
+        "@esbuild/sunos-x64": "0.27.0",
+        "@esbuild/win32-arm64": "0.27.0",
+        "@esbuild/win32-ia32": "0.27.0",
+        "@esbuild/win32-x64": "0.27.0"
+      }
+    },
+    "node_modules/fsevents": {
+      "version": "2.3.3",
+      "resolved": "https://registry.npmjs.org/fsevents/-/fsevents-2.3.3.tgz",
+      "integrity": "sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^8.16.0 || ^10.6.0 || >=11.0.0"
+      }
+    },
+    "node_modules/kleur": {
+      "version": "4.1.5",
+      "resolved": "https://registry.npmjs.org/kleur/-/kleur-4.1.5.tgz",
+      "integrity": "sha512-o+NO+8WrRiQEE4/7nwRJhN1HWpVmJm511pBHUxPLtp0BUISzlBplORYSmTclCnJvQq2tKu/sgl3xVpkc7ZWuQQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=6"
+      }
+    },
+    "node_modules/miniflare": {
+      "version": "4.20260205.0",
+      "resolved": "https://registry.npmjs.org/miniflare/-/miniflare-4.20260205.0.tgz",
+      "integrity": "sha512-jG1TknEDeFqcq/z5gsOm1rKeg4cNG7ruWxEuiPxl3pnQumavxo8kFpeQC6XKVpAhh2PI9ODGyIYlgd77sTHl5g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@cspotcode/source-map-support": "0.8.1",
+        "sharp": "^0.34.5",
+        "undici": "7.18.2",
+        "workerd": "1.20260205.0",
+        "ws": "8.18.0",
+        "youch": "4.1.0-beta.10"
+      },
+      "bin": {
+        "miniflare": "bootstrap.js"
+      },
+      "engines": {
+        "node": ">=18.0.0"
+      }
+    },
+    "node_modules/path-to-regexp": {
+      "version": "6.3.0",
+      "resolved": "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-6.3.0.tgz",
+      "integrity": "sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/semver": {
+      "version": "7.7.4",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
+      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "dev": true,
+      "license": "ISC",
+      "bin": {
+        "semver": "bin/semver.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/sharp": {
+      "version": "0.34.5",
+      "resolved": "https://registry.npmjs.org/sharp/-/sharp-0.34.5.tgz",
+      "integrity": "sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@img/colour": "^1.0.0",
+        "detect-libc": "^2.1.2",
+        "semver": "^7.7.3"
+      },
+      "engines": {
+        "node": "^18.17.0 || ^20.3.0 || >=21.0.0"
+      },
+      "funding": {
+        "url": "https://opencollective.com/libvips"
+      },
+      "optionalDependencies": {
+        "@img/sharp-darwin-arm64": "0.34.5",
+        "@img/sharp-darwin-x64": "0.34.5",
+        "@img/sharp-libvips-darwin-arm64": "1.2.4",
+        "@img/sharp-libvips-darwin-x64": "1.2.4",
+        "@img/sharp-libvips-linux-arm": "1.2.4",
+        "@img/sharp-libvips-linux-arm64": "1.2.4",
+        "@img/sharp-libvips-linux-ppc64": "1.2.4",
+        "@img/sharp-libvips-linux-riscv64": "1.2.4",
+        "@img/sharp-libvips-linux-s390x": "1.2.4",
+        "@img/sharp-libvips-linux-x64": "1.2.4",
+        "@img/sharp-libvips-linuxmusl-arm64": "1.2.4",
+        "@img/sharp-libvips-linuxmusl-x64": "1.2.4",
+        "@img/sharp-linux-arm": "0.34.5",
+        "@img/sharp-linux-arm64": "0.34.5",
+        "@img/sharp-linux-ppc64": "0.34.5",
+        "@img/sharp-linux-riscv64": "0.34.5",
+        "@img/sharp-linux-s390x": "0.34.5",
+        "@img/sharp-linux-x64": "0.34.5",
+        "@img/sharp-linuxmusl-arm64": "0.34.5",
+        "@img/sharp-linuxmusl-x64": "0.34.5",
+        "@img/sharp-wasm32": "0.34.5",
+        "@img/sharp-win32-arm64": "0.34.5",
+        "@img/sharp-win32-ia32": "0.34.5",
+        "@img/sharp-win32-x64": "0.34.5"
+      }
+    },
+    "node_modules/supports-color": {
+      "version": "10.2.2",
+      "resolved": "https://registry.npmjs.org/supports-color/-/supports-color-10.2.2.tgz",
+      "integrity": "sha512-SS+jx45GF1QjgEXQx4NJZV9ImqmO2NPz5FNsIHrsDjh2YsHnawpan7SNQ1o8NuhrbHZy9AZhIoCUiCeaW/C80g==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/chalk/supports-color?sponsor=1"
+      }
+    },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "dev": true,
+      "license": "0BSD",
+      "optional": true
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/undici": {
+      "version": "7.18.2",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-7.18.2.tgz",
+      "integrity": "sha512-y+8YjDFzWdQlSE9N5nzKMT3g4a5UBX1HKowfdXh0uvAnTaqqwqB92Jt4UXBAeKekDs5IaDKyJFR4X1gYVCgXcw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=20.18.1"
+      }
+    },
+    "node_modules/unenv": {
+      "version": "2.0.0-rc.24",
+      "resolved": "https://registry.npmjs.org/unenv/-/unenv-2.0.0-rc.24.tgz",
+      "integrity": "sha512-i7qRCmY42zmCwnYlh9H2SvLEypEFGye5iRmEMKjcGi7zk9UquigRjFtTLz0TYqr0ZGLZhaMHl/foy1bZR+Cwlw==",
+      "dev": true,
+      "license": "MIT",
+      "peer": true,
+      "dependencies": {
+        "pathe": "^2.0.3"
+      }
+    },
+    "node_modules/workerd": {
+      "version": "1.20260205.0",
+      "resolved": "https://registry.npmjs.org/workerd/-/workerd-1.20260205.0.tgz",
+      "integrity": "sha512-CcMH5clHwrH8VlY7yWS9C/G/C8g9czIz1yU3akMSP9Z3CkEMFSoC3GGdj5G7Alw/PHEeez1+1IrlYger4pwu+w==",
+      "dev": true,
+      "hasInstallScript": true,
+      "license": "Apache-2.0",
+      "peer": true,
+      "bin": {
+        "workerd": "bin/workerd"
+      },
+      "engines": {
+        "node": ">=16"
+      },
+      "optionalDependencies": {
+        "@cloudflare/workerd-darwin-64": "1.20260205.0",
+        "@cloudflare/workerd-darwin-arm64": "1.20260205.0",
+        "@cloudflare/workerd-linux-64": "1.20260205.0",
+        "@cloudflare/workerd-linux-arm64": "1.20260205.0",
+        "@cloudflare/workerd-windows-64": "1.20260205.0"
+      }
+    },
+    "node_modules/wrangler": {
+      "version": "4.63.0",
+      "resolved": "https://registry.npmjs.org/wrangler/-/wrangler-4.63.0.tgz",
+      "integrity": "sha512-+R04jF7Eb8K3KRMSgoXpcIdLb8GC62eoSGusYh1pyrSMm/10E0hbKkd7phMJO4HxXc6R7mOHC5SSoX9eof30Uw==",
+      "dev": true,
+      "license": "MIT OR Apache-2.0",
+      "dependencies": {
+        "@cloudflare/kv-asset-handler": "0.4.2",
+        "@cloudflare/unenv-preset": "2.12.0",
+        "blake3-wasm": "2.1.5",
+        "esbuild": "0.27.0",
+        "miniflare": "4.20260205.0",
+        "path-to-regexp": "6.3.0",
+        "unenv": "2.0.0-rc.24",
+        "workerd": "1.20260205.0"
+      },
+      "bin": {
+        "wrangler": "bin/wrangler.js",
+        "wrangler2": "bin/wrangler.js"
+      },
+      "engines": {
+        "node": ">=20.0.0"
+      },
+      "optionalDependencies": {
+        "fsevents": "~2.3.2"
+      },
+      "peerDependencies": {
+        "@cloudflare/workers-types": "^4.20260205.0"
+      },
+      "peerDependenciesMeta": {
+        "@cloudflare/workers-types": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/ws": {
+      "version": "8.18.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
+      "integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/youch": {
+      "version": "4.1.0-beta.10",
+      "resolved": "https://registry.npmjs.org/youch/-/youch-4.1.0-beta.10.tgz",
+      "integrity": "sha512-rLfVLB4FgQneDr0dv1oddCVZmKjcJ6yX6mS4pU82Mq/Dt9a3cLZQ62pDBL4AUO+uVrCvtWz3ZFUL2HFAFJ/BXQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/colors": "^4.1.5",
+        "@poppinss/dumper": "^0.6.4",
+        "@speed-highlight/core": "^1.2.7",
+        "cookie": "^1.0.2",
+        "youch-core": "^0.3.3"
+      }
+    },
+    "node_modules/youch-core": {
+      "version": "0.3.3",
+      "resolved": "https://registry.npmjs.org/youch-core/-/youch-core-0.3.3.tgz",
+      "integrity": "sha512-ho7XuGjLaJ2hWHoK8yFnsUGy2Y5uDpqSTq1FkHLK4/oqKtyUU1AFbOOxY4IpC9f0fTLjwYbslUz0Po5BpD1wrA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@poppinss/exception": "^1.2.2",
+        "error-stack-parser-es": "^1.0.5"
+      }
+    }
+  }
+}
diff --git a/deploy/cloudflare-worker/package.json b/deploy/cloudflare-worker/package.json
new file mode 100644
index 0000000..a1006b2
--- /dev/null
+++ b/deploy/cloudflare-worker/package.json
@@ -0,0 +1,15 @@
+{
+  "name": "every-channel-site",
+  "private": true,
+  "type": "module",
+  "dependencies": {},
+  "devDependencies": {
+    "typescript": "5.9.3",
+    "wrangler": "^4.63.0"
+  },
+  "scripts": {
+    "cf-typegen": "wrangler types",
+    "dev": "wrangler dev --local --port 8787",
+    "deploy": "wrangler deploy"
+  }
+}
diff --git a/deploy/cloudflare-worker/src/index.ts b/deploy/cloudflare-worker/src/index.ts
new file mode 100644
index 0000000..52bace6
--- /dev/null
+++ b/deploy/cloudflare-worker/src/index.ts
@@ -0,0 +1,575 @@
+function json(data: unknown, init?: ResponseInit): Response {
+  return new Response(JSON.stringify(data), {
+    ...init,
+    headers: {
+      "content-type": "application/json; charset=utf-8",
+      ...(init?.headers ?? {}),
+    },
+  });
+}
+
+function jsonNoStore(data: unknown, init?: ResponseInit): Response {
+  return json(data, {
+    ...init,
+    headers: {
+      "cache-control": "no-store",
+      ...(init?.headers ?? {}),
+    },
+  });
+}
+
+async function hmacBase64(
+  secret: string,
+  msg: string,
+  hash: "SHA-1" | "SHA-256",
+): Promise<string> {
+  const enc = new TextEncoder();
+  const key = await crypto.subtle.importKey(
+    "raw",
+    enc.encode(secret),
+    { name: "HMAC", hash: { name: hash } },
+    false,
+    ["sign"],
+  );
+  const sig = await crypto.subtle.sign("HMAC", key, enc.encode(msg));
+  const bytes = new Uint8Array(sig);
+  let s = "";
+  for (const b of bytes) s += String.fromCharCode(b);
+  return btoa(s);
+}
+
+async function handleTurn(env: Env): Promise<Response> {
+  // Always provide STUN. TURN is optional and requires a shared secret.
+  // Response shape is compatible with `just-webrtc` types.
+  const ice_servers: Array<{
+    urls: string[];
+    username: string;
+    credential: string;
+    // `just-webrtc` uses serde defaults on enum variants (Password/Oauth).
+    credential_type: "Password" | "Oauth";
+  }> = [];
+
+  ice_servers.push({
+    urls: [
+      "stun:stun.cloudflare.com:3478",
+      "stun:stun.l.google.com:19302",
+      "stun:stun1.l.google.com:19302",
+    ],
+    username: "",
+    credential: "",
+    credential_type: "Password",
+  });
+
+  const shared = env.EC_TURN_SHARED_SECRET?.trim();
+  if (shared) {
+    const ttlSec = Number(env.EC_TURN_TTL_SECS ?? "3600") || 3600;
+    const exp = Math.floor(Date.now() / 1000) + Math.max(60, ttlSec);
+    const prefix = (env.EC_TURN_USER_PREFIX ?? "every.channel").trim();
+    const username = `${exp}:${prefix}`;
+    const hash = (env.EC_TURN_HMAC ?? "sha1").toLowerCase() === "sha256" ? "SHA-256" : "SHA-1";
+    const credential = await hmacBase64(shared, username, hash);
+
+    const host = (env.EC_TURN_HOST ?? "turn.cloudflare.com").trim();
+    ice_servers.push({
+      urls: [
+        `turn:${host}:3478?transport=udp`,
+        `turn:${host}:3478?transport=tcp`,
+        `turns:${host}:5349?transport=tcp`,
+      ],
+      username,
+      credential,
+      credential_type: "Password",
+    });
+  }
+
+  return json({ ice_servers });
+}
+
+export default {
+  async fetch(request: Request, env: Env): Promise<Response> {
+    const url = new URL(request.url);
+
+    // ICE bootstrap for WebRTC clients (browser + native).
+    if (url.pathname === "/api/turn") {
+      return handleTurn(env);
+    }
+
+    // Stream relay (one-to-many) for CMAF object frames transported via direct-wire chunks.
+    // This is a bootstrap relay so browsers can watch live streams without direct P2P.
+    if (url.pathname === "/api/stream/ws") {
+      const stream_id = url.searchParams.get("stream_id") ?? "";
+      if (!stream_id) {
+        return jsonNoStore({ error: "missing stream_id" }, { status: 400 });
+      }
+      const id = env.EC_STREAM.idFromName(stream_id);
+      const stub = env.EC_STREAM.get(id);
+      return stub.fetch(request);
+    }
+
+    // Minimal bootstrap API: proxy /api/* to a single durable object instance ("global").
+    // This exists only to rendezvous WebRTC offers/answers and list "live" entries.
+    if (url.pathname.startsWith("/api/")) {
+      const id = env.EC_API.idFromName("global");
+      const stub = env.EC_API.get(id);
+      return stub.fetch(request);
+    }
+
+    // Serve static assets from the Worker Assets binding.
+    // SPA fallback: unknown paths serve the app shell (`/index.html`).
+    const assets = (env as unknown as { ASSETS?: Fetcher }).ASSETS;
+    if (!assets || typeof (assets as any).fetch !== "function") {
+      return new Response("Assets binding not configured", { status: 500 });
+    }
+
+    const res = await assets.fetch(request);
+    if (res.status !== 404) return res;
+
+    url.pathname = "/index.html";
+    return assets.fetch(new Request(url.toString(), request));
+  },
+};
+
+interface Env {
+  ASSETS: Fetcher;
+  EC_API: DurableObjectNamespace;
+  EC_STREAM: DurableObjectNamespace;
+  // Optional TURN REST shared secret (Worker secret). When set, `/api/turn` includes TURN URLs
+  // with short-lived credentials derived from this shared secret.
+  EC_TURN_SHARED_SECRET?: string;
+  EC_TURN_TTL_SECS?: string;
+  EC_TURN_USER_PREFIX?: string;
+  EC_TURN_HOST?: string;
+  EC_TURN_HMAC?: string;
+}
+
+type DirectoryEntry = {
+  stream_id: string;
+  title: string;
+  offer: string;
+  updated_ms: number;
+  expires_ms: number;
+};
+
+type AnswerEntry = {
+  stream_id: string;
+  answer: string;
+  updated_ms: number;
+  expires_ms: number;
+};
+
+type DirectoryList = {
+  now_ms: number;
+  entries: DirectoryEntry[];
+};
+
+function nowMs(): number {
+  return Date.now();
+}
+
+function clampStr(s: string, maxLen: number): string {
+  if (s.length <= maxLen) return s;
+  return s.slice(0, maxLen);
+}
+
+function entryKey(streamId: string): string {
+  return `e:${streamId}`;
+}
+
+function answerKey(streamId: string): string {
+  return `a:${streamId}`;
+}
+
+async function listWithPrefix<T>(
+  storage: DurableObjectStorage,
+  prefix: string,
+): Promise<Array<[string, T]>> {
+  const out: Array<[string, T]> = [];
+  // Pull in small pages; this is a bootstrap rendezvous, not a global index.
+  let cursor: string | undefined = undefined;
+  for (;;) {
+    const page = await storage.list<T>({ prefix, cursor, limit: 256 });
+    for (const [k, v] of page) out.push([k, v]);
+    if (page.cursor) cursor = page.cursor;
+    else break;
+  }
+  return out;
+}
+
+async function pruneAndCap(
+  storage: DurableObjectStorage,
+  now: number,
+): Promise<void> {
+  const entries = await listWithPrefix<DirectoryEntry>(storage, "e:");
+  const answers = await listWithPrefix<AnswerEntry>(storage, "a:");
+
+  const toDelete: string[] = [];
+  for (const [k, v] of entries) if (v.expires_ms <= now) toDelete.push(k);
+  for (const [k, v] of answers) if (v.expires_ms <= now) toDelete.push(k);
+
+  // Cap growth defensively. This is not spam-resistant; it's a bootstrap rendezvous.
+  if (entries.length > 200) {
+    const sorted = entries
+      .map(([, v]) => v)
+      .sort((a, b) => b.updated_ms - a.updated_ms)
+      .slice(0, 200);
+    const keep = new Set(sorted.map((e) => entryKey(e.stream_id)));
+    for (const [k] of entries) if (!keep.has(k)) toDelete.push(k);
+  }
+  if (answers.length > 500) {
+    const sorted = answers
+      .map(([, v]) => v)
+      .sort((a, b) => b.updated_ms - a.updated_ms)
+      .slice(0, 500);
+    const keep = new Set(sorted.map((a) => answerKey(a.stream_id)));
+    for (const [k] of answers) if (!keep.has(k)) toDelete.push(k);
+  }
+
+  if (toDelete.length > 0) {
+    // Delete in chunks to avoid oversized requests.
+    for (let i = 0; i < toDelete.length; i += 128) {
+      await storage.delete(toDelete.slice(i, i + 128));
+    }
+  }
+}
+
+type AnnounceReq = {
+  stream_id: string;
+  title: string;
+  offer: string;
+  expires_ms?: number;
+};
+
+type AnswerPostReq = {
+  stream_id: string;
+  answer: string;
+};
+
+// Minimal bootstrap API Durable Object. The binding name is historical; we keep it stable so
+// existing migrations and wrangler config remain valid while removing Cloudflare Containers.
+export class EcApiContainer implements DurableObject {
+  private state: DurableObjectState;
+
+  constructor(state: DurableObjectState) {
+    this.state = state;
+  }
+
+  async fetch(request: Request): Promise<Response> {
+    const url = new URL(request.url);
+    const now = nowMs();
+
+    // Best-effort pruning on any request.
+    await pruneAndCap(this.state.storage, now);
+
+    if (url.pathname === "/api/health") {
+      return jsonNoStore({ ok: true });
+    }
+
+    if (url.pathname === "/api/directory") {
+      const items = await listWithPrefix<DirectoryEntry>(this.state.storage, "e:");
+      const entries = items
+        .map(([, v]) => v)
+        .filter((v) => v.expires_ms > now)
+        .sort((a, b) => b.updated_ms - a.updated_ms);
+      const resp: DirectoryList = { now_ms: now, entries };
+      return jsonNoStore(resp);
+    }
+
+    if (url.pathname === "/api/announce") {
+      if (request.method !== "POST") {
+        return jsonNoStore({ error: "method not allowed" }, { status: 405 });
+      }
+      let body: AnnounceReq;
+      try {
+        body = (await request.json()) as AnnounceReq;
+      } catch {
+        return jsonNoStore({ error: "invalid json" }, { status: 400 });
+      }
+
+      if (!body.stream_id || !body.title || !body.offer) {
+        return jsonNoStore({ error: "missing stream_id/title/offer" }, { status: 400 });
+      }
+      if (body.offer.length > 64_000) {
+        return jsonNoStore({ error: "offer too large" }, { status: 413 });
+      }
+
+      const requestedExpires = body.expires_ms ?? now + 20_000;
+      const requestedTtl = Math.max(0, requestedExpires - now);
+      const ttlMs = Math.min(60_000, Math.max(5_000, requestedTtl));
+
+      const entry: DirectoryEntry = {
+        stream_id: clampStr(body.stream_id, 256),
+        title: clampStr(body.title, 128),
+        offer: body.offer,
+        updated_ms: now,
+        expires_ms: now + ttlMs,
+      };
+
+      await this.state.storage.put(entryKey(entry.stream_id), entry);
+      return jsonNoStore({ ok: true, ttl_ms: ttlMs, entry });
+    }
+
+    if (url.pathname === "/api/answer") {
+      if (request.method === "POST") {
+        let body: AnswerPostReq;
+        try {
+          body = (await request.json()) as AnswerPostReq;
+        } catch {
+          return jsonNoStore({ error: "invalid json" }, { status: 400 });
+        }
+        if (!body.stream_id || !body.answer) {
+          return jsonNoStore({ error: "missing stream_id/answer" }, { status: 400 });
+        }
+        if (body.answer.length > 64_000) {
+          return jsonNoStore({ error: "answer too large" }, { status: 413 });
+        }
+        const entry: AnswerEntry = {
+          stream_id: clampStr(body.stream_id, 256),
+          answer: body.answer,
+          updated_ms: now,
+          expires_ms: now + 2 * 60_000,
+        };
+        await this.state.storage.put(answerKey(entry.stream_id), entry);
+        return jsonNoStore({ ok: true });
+      }
+
+      if (request.method === "GET") {
+        const streamId = url.searchParams.get("stream_id") ?? "";
+        if (!streamId) {
+          return jsonNoStore({ error: "missing stream_id" }, { status: 400 });
+        }
+        const key = answerKey(streamId);
+        const ans = await this.state.storage.get<AnswerEntry>(key);
+        if (!ans || ans.expires_ms <= now) {
+          await this.state.storage.delete(key);
+          return jsonNoStore({ error: "not found" }, { status: 404 });
+        }
+        // One-shot: first reader consumes.
+        await this.state.storage.delete(key);
+        return jsonNoStore(ans);
+      }
+
+      return jsonNoStore({ error: "method not allowed" }, { status: 405 });
+    }
+
+    return jsonNoStore({ error: "not found" }, { status: 404 });
+  }
+}
+
+// Historical class referenced by older migrations. It is not bound anymore,
+// but exporting it keeps workerd/wrangler happy if migrations mention it.
+export class DirectoryDO implements DurableObject {
+  async fetch(): Promise<Response> {
+    return new Response("gone", { status: 410 });
+  }
+}
+
+const DIRECT_WIRE_TAG_FRAME = 0x00;
+const DIRECT_WIRE_TAG_STREAM = 0x01;
+const DIRECT_WIRE_TAG_PING = 0x02;
+const DIRECT_WIRE_CHUNK_BYTES = 16 * 1024;
+
+type TimingMeta = {
+  chunk_index: number;
+};
+
+type ObjectMeta = {
+  content_type: string;
+  timing?: TimingMeta;
+};
+
+// One-to-many fanout for direct-wire message chunks. Publisher sends direct-wire messages,
+// subscribers receive the same stream, plus a buffered init + recent segments upon join.
+export class StreamRelayDO implements DurableObject {
+  private publisher: WebSocket | null = null;
+  private subs = new Set<WebSocket>();
+
+  // Reassemble publisher STREAM chunks into full object frames for buffering.
+  private buf = new Uint8Array(0);
+  private want: number | null = null;
+
+  private initFrame: Uint8Array | null = null;
+  private segFrames = new Map<number, Uint8Array>();
+  private maxSegments = 12;
+
+  async fetch(request: Request): Promise<Response> {
+    const upgrade = request.headers.get("Upgrade")?.toLowerCase();
+    if (upgrade !== "websocket") {
+      return json({ error: "expected websocket" }, { status: 400 });
+    }
+
+    const url = new URL(request.url);
+    const role = (url.searchParams.get("role") ?? "sub").toLowerCase();
+
+    // eslint-disable-next-line @typescript-eslint/no-explicit-any
+    const pair = new (WebSocketPair as any)();
+    const client: WebSocket = pair[0];
+    const server: WebSocket = pair[1];
+    server.accept();
+
+    if (role === "pub") {
+      if (this.publisher) {
+        try {
+          this.publisher.close(1013, "publisher replaced");
+        } catch {}
+      }
+      this.publisher = server;
+    } else {
+      this.subs.add(server);
+      // Best-effort fast start: send init + last segments.
+      try {
+        if (this.initFrame) {
+          this.sendFrame(server, this.initFrame);
+        }
+        const idxs = Array.from(this.segFrames.keys()).sort((a, b) => a - b);
+        for (const idx of idxs) {
+          const fr = this.segFrames.get(idx);
+          if (fr) this.sendFrame(server, fr);
+        }
+      } catch {}
+    }
+
+    server.addEventListener("message", (evt: MessageEvent) => {
+      const data = evt.data;
+      if (!(data instanceof ArrayBuffer)) {
+        return;
+      }
+      const msg = new Uint8Array(data);
+
+      if (role === "pub") {
+        // Fanout immediately (no buffering delay).
+        for (const sub of this.subs) {
+          try {
+            sub.send(data);
+          } catch {}
+        }
+        // Also decode for buffered join.
+        this.handlePublisherMsg(msg);
+      } else {
+        // Subscribers can send pings; ignore.
+        if (msg.length > 0 && msg[0] === DIRECT_WIRE_TAG_PING) {
+          return;
+        }
+      }
+    });
+
+    server.addEventListener("close", () => {
+      if (server === this.publisher) {
+        this.publisher = null;
+        // Keep buffered init/segments; publisher may reconnect soon.
+      }
+      this.subs.delete(server);
+    });
+
+    server.addEventListener("error", () => {
+      if (server === this.publisher) {
+        this.publisher = null;
+      }
+      this.subs.delete(server);
+    });
+
+    return new Response(null, { status: 101, webSocket: client });
+  }
+
+  private handlePublisherMsg(msg: Uint8Array) {
+    if (msg.length === 0) return;
+    const tag = msg[0];
+    if (tag === DIRECT_WIRE_TAG_PING) return;
+    if (tag === DIRECT_WIRE_TAG_FRAME) {
+      const frame = msg.subarray(1);
+      this.bufferFrame(frame);
+      return;
+    }
+    if (tag !== DIRECT_WIRE_TAG_STREAM) {
+      // Legacy: assume the whole thing is a frame.
+      this.bufferFrame(msg);
+      return;
+    }
+
+    // Append to reassembly buffer.
+    const chunk = msg.subarray(1);
+    this.buf = concatU8(this.buf, chunk);
+
+    // Pull as many framed payloads as possible:
+    // [u32be len][frame bytes...]
+    // The `frame` bytes are `encode_object_frame(meta, data)`.
+    while (true) {
+      if (this.want === null) {
+        if (this.buf.length < 4) return;
+        this.want =
+          (this.buf[0] << 24) | (this.buf[1] << 16) | (this.buf[2] << 8) | this.buf[3];
+        this.buf = this.buf.subarray(4);
+      }
+      const want = this.want ?? 0;
+      if (this.buf.length < want) return;
+      const frame = this.buf.subarray(0, want);
+      this.buf = this.buf.subarray(want);
+      this.want = null;
+      this.bufferFrame(frame);
+
+      // Avoid unbounded growth if publisher sends junk.
+      if (this.buf.length > 4 * 1024 * 1024) {
+        this.buf = new Uint8Array(0);
+        this.want = null;
+        return;
+      }
+    }
+  }
+
+  private bufferFrame(frame: Uint8Array) {
+    const meta = tryDecodeObjectMeta(frame);
+    const idx = meta?.timing?.chunk_index;
+    if (typeof idx !== "number") return;
+    if (idx === 0) {
+      this.initFrame = frame.slice();
+      return;
+    }
+
+    this.segFrames.set(idx, frame.slice());
+    while (this.segFrames.size > this.maxSegments) {
+      const oldest = Math.min(...this.segFrames.keys());
+      this.segFrames.delete(oldest);
+    }
+  }
+
+  private sendFrame(ws: WebSocket, frame: Uint8Array) {
+    // Mirror the Rust `direct_wire_send_frame` format:
+    // Stream bytes are [u32be frame_len][frame]
+    const out = new Uint8Array(4 + frame.length);
+    const len = frame.length >>> 0;
+    out[0] = (len >>> 24) & 0xff;
+    out[1] = (len >>> 16) & 0xff;
+    out[2] = (len >>> 8) & 0xff;
+    out[3] = len & 0xff;
+    out.set(frame, 4);
+
+    for (let i = 0; i < out.length; i += DIRECT_WIRE_CHUNK_BYTES) {
+      const chunk = out.subarray(i, Math.min(out.length, i + DIRECT_WIRE_CHUNK_BYTES));
+      const msg = new Uint8Array(1 + chunk.length);
+      msg[0] = DIRECT_WIRE_TAG_STREAM;
+      msg.set(chunk, 1);
+      ws.send(msg);
+    }
+  }
+}
+
+function concatU8(a: Uint8Array, b: Uint8Array): Uint8Array {
+  if (a.length === 0) return b.slice();
+  if (b.length === 0) return a.slice();
+  const out = new Uint8Array(a.length + b.length);
+  out.set(a, 0);
+  out.set(b, a.length);
+  return out;
+}
+
+function tryDecodeObjectMeta(frame: Uint8Array): ObjectMeta | null {
+  if (frame.length < 4) return null;
+  const metaLen = (frame[0] << 24) | (frame[1] << 16) | (frame[2] << 8) | frame[3];
+  if (metaLen < 2 || frame.length < 4 + metaLen) return null;
+  const metaBytes = frame.subarray(4, 4 + metaLen);
+  try {
+    const txt = new TextDecoder().decode(metaBytes);
+    return JSON.parse(txt) as ObjectMeta;
+  } catch {
+    return null;
+  }
+}
diff --git a/deploy/cloudflare-worker/wrangler.toml b/deploy/cloudflare-worker/wrangler.toml
new file mode 100644
index 0000000..804e185
--- /dev/null
+++ b/deploy/cloudflare-worker/wrangler.toml
@@ -0,0 +1,37 @@
+name = "every-channel-site"
+main = "src/index.ts"
+compatibility_date = "2026-02-08"
+workers_dev = false
+account_id = "9a54fd76c3d5d9abac437382a9027e9b"
+
+# Bind this worker to the every.channel zone.
+# This uses Workers Custom Domains (not "routes to an origin"), so it can serve the site without
+# an application server behind it.
+routes = [
+  { pattern = "every.channel", custom_domain = true },
+  { pattern = "www.every.channel", custom_domain = true },
+]
+
+# Static assets built by Trunk (apps/tauri/ui -> apps/tauri/dist)
+[assets]
+directory = "../../apps/tauri/dist"
+
+[[durable_objects.bindings]]
+name = "EC_API"
+class_name = "EcApiContainer"
+
+[[durable_objects.bindings]]
+name = "EC_STREAM"
+class_name = "StreamRelayDO"
+
+[[migrations]]
+tag = "v2"
+new_sqlite_classes = ["DirectoryDO"] # historical; safe to keep (namespace already created)
+
+[[migrations]]
+tag = "v3"
+new_sqlite_classes = ["EcApiContainer"]
+
+[[migrations]]
+tag = "v4"
+new_sqlite_classes = ["StreamRelayDO"]
diff --git a/docs/ARCHITECTURE.md b/docs/ARCHITECTURE.md
new file mode 100644
index 0000000..47052b1
--- /dev/null
+++ b/docs/ARCHITECTURE.md
@@ -0,0 +1,57 @@
+# Architecture
+
+## Layers
+
+1. Capture
+
+- Hardware: ATSC antennas -> HDHomeRun or Linux IPTV capture devices.
+- Output: MPEG-TS or ATSC 3.0 streams.
+
+2. Normalize
+
+- Demux and normalize timestamps.
+- Select program IDs and identify audio/video tracks.
+
+3. Deterministic transcode
+
+- Encode with a fixed profile (codec, GOP, bitrate, keyframe cadence).
+- Emit fixed-duration chunks with stable ordering.
+- Hash chunks to produce content identifiers.
+
+4. MoQ publish
+
+- Map each channel to a track namespace.
+- Each chunk becomes a MoQ object in a group.
+- Objects are named and addressed deterministically.
+
+5. Relay mesh
+
+- Relays cache objects and announce tracks.
+- iroh provides programmable topology and peer routing.
+- Multiple relays can serve identical objects.
+
+6. Playback
+
+- Desktop: Tauri app that subscribes to tracks.
+- CLI: debugging, inspection, and headless clients.
+- Web: static site that connects to a relay gateway.
+
+## Roles
+
+- Runner: owns capture + transcode + publish.
+- Chopper: executes deterministic chunking profiles.
+- Relay: stores and forwards MoQ objects.
+- Manager: configures nodes and applies policy.
+- Provisioner: bootstraps nodes and manages deployment.
+
+## Determinism
+
+- The same input with the same profile should yield identical chunks.
+- Chunk hashes are the primitive for availability and de-duplication.
+- Deterministic names allow relays to converge without coordination.
+
+## Time synchronization
+
+- Chunk boundaries are derived from PCR and, when available, broadcast UTC (ATSC STT / DVB TDT/TOT).
+- Unsynced sources remain source-scoped until broadcast time is present.
+- Discontinuities force a new chunk group boundary.
diff --git a/docs/BABY_STEPS.md b/docs/BABY_STEPS.md
new file mode 100644
index 0000000..4b820d0
--- /dev/null
+++ b/docs/BABY_STEPS.md
@@ -0,0 +1,57 @@
+# Baby steps
+
+These are the smallest useful steps to get a real MoQ pipeline running end-to-end.
+
+1. Capture and inspect transport streams
+
+- Confirm HDHomeRun discovery on the local network.
+- Fetch lineup JSON and map it to `ec-core::Channel`.
+- Open a raw MPEG-TS stream for a single channel and write it to disk.
+
+2. Deterministic transcode + chunking
+
+- Choose a reference ffmpeg profile (encoder, GOP, keyframe cadence).
+- Emit fixed-duration chunks with deterministic timestamps.
+- Hash chunks and verify that repeated runs are byte-identical.
+
+3. MoQ object model
+
+- Model track/group/object IDs and object metadata in `ec-moq`.
+- Map each chunk to a MoQ object with deterministic naming.
+- Validate that object IDs are stable across runs.
+
+4. Single-node publish + replay
+
+- Build a local relay that stores objects on disk.
+- Publish from the chopper to the relay.
+- Replay stored objects to a local subscriber and validate playback.
+
+5. Multi-node relay mesh
+
+- Integrate iroh for node discovery and routing.
+- Replicate objects between two relays.
+- Verify that a subscriber can pull from either relay.
+
+6. Client surfaces
+
+- Tauri shell that lists available tracks and plays one.
+- CLI that can subscribe and dump objects for inspection.
+- Static web UI that connects to a relay gateway.
+
+7. Time-synchronized chunking
+
+- Parse PCR + STT/TDT/TOT to anchor chunk boundaries to broadcast UTC.
+- Emit deterministic TS chunks with sync metadata.
+- Promote source-scoped streams to broadcast-scoped streams when synced.
+
+8. MoQ publish path
+
+- Wrap time-aligned chunks as MoQ objects (timing metadata attached).
+- Write objects to the local relay store.
+- Wire to iroh transport once MoQ session adapters are stable.
+
+7. Production hardening
+
+- Crash recovery and backfill.
+- Observability: tracing, metrics, object retention.
+- Network policies for DMCA resilience and takedown mitigation.
diff --git a/docs/CLAUDE_CODE_DESIGN_PROMPT.md b/docs/CLAUDE_CODE_DESIGN_PROMPT.md
new file mode 100644
index 0000000..c430197
--- /dev/null
+++ b/docs/CLAUDE_CODE_DESIGN_PROMPT.md
@@ -0,0 +1,45 @@
+# Claude Code prompt (opus-4.6): design + IA pass
+
+Goal: Do a design pass on the every.channel web site and apply the same information architecture and language to the desktop app UI.
+
+Constraints:
+
+- Keep it clean and minimal, but warmer (a subtle nod to old TV).
+- Do not use protocol jargon in user-facing labels. Avoid words like "MoQ", "mDNS", "DHT", "endpoint", "broadcast", "track", "gossip", "pkarr".
+- Prefer plain language:
+  - "Watch a link"
+  - "Nearby (same Wi-Fi)"
+  - "Public (internet)"
+  - "Directory"
+  - "Sharing key"
+- Keep layout readable on mobile and desktop.
+- Reuse the existing visual direction (soft gradient background, rounded cards) but tighten typography and spacing.
+- Preserve existing functionality. This is a design and IA pass, not a behavior rewrite.
+
+Scope:
+
+1. Web site IA and design
+  - Implemented site lives at `apps/web/`:
+    - `apps/web/src/main.rs`
+    - `apps/web/style.css`
+    - `apps/web/index.html`
+  - Improve the IA and copy, but keep the same sections: Watch, Directory, Participate, About.
+  - Make the top nav and sections feel cohesive and calm.
+  - Add small touches that feel "old TV" without being kitsch. Very subtle scanlines/noise is OK.
+
+2. App UI IA and design alignment
+  - Desktop UI lives at:
+    - `apps/tauri/ui/src/main.rs`
+    - `apps/tauri/ui/style.css`
+  - Ensure the same language and IA as the web site.
+  - Hide advanced fields. Default flows should be link-first.
+  - Make the Directory controls read like product features, not network plumbing.
+
+3. Deliverables
+  - Update CSS and UI copy.
+  - If you add new components, keep them in the same files for now.
+  - Keep changes reversible and minimal in surface area.
+  - Provide a short summary of what changed and why.
+
+Please edit the repo directly.
+
diff --git a/docs/COVERAGE.md b/docs/COVERAGE.md
new file mode 100644
index 0000000..07312b6
--- /dev/null
+++ b/docs/COVERAGE.md
@@ -0,0 +1,31 @@
+# Coverage
+
+every.channel uses `cargo-llvm-cov` to produce formal coverage reports.
+
+## Run (Recommended: Nix)
+
+```sh
+direnv allow
+./scripts/coverage.sh
+```
+
+To run the unit-subset coverage (does not require FFmpeg headers):
+
+```sh
+./scripts/coverage.sh unit
+```
+
+Artifacts:
+
+- `tmp/coverage/workspace.lcov`
+- `tmp/coverage/workspace.summary.txt`
+- `tmp/coverage/workspace-html/index.html`
+
+## Run (Inside nix develop)
+
+If you are already in `nix develop`, you can use:
+
+```sh
+just cov-workspace
+just cov-workspace-html
+```
diff --git a/docs/DEPLOY_CLOUDFLARE.md b/docs/DEPLOY_CLOUDFLARE.md
new file mode 100644
index 0000000..6993c60
--- /dev/null
+++ b/docs/DEPLOY_CLOUDFLARE.md
@@ -0,0 +1,22 @@
+# Cloudflare Deploy (Forgejo Actions)
+
+This repo deploys `https://every.channel` via Wrangler.
+
+## Prereqs
+
+- Forgejo Actions enabled on the repo.
+- A Cloudflare API token stored as a Forgejo Actions secret:
+  - name: `CLOUDFLARE_API_TOKEN`
+
+The workflow is defined in `.forgejo/workflows/deploy-cloudflare.yml`.
+
+## Manual deploy (local)
+
+```sh
+cd apps/tauri/ui
+trunk build --release --public-url /
+
+cd deploy/cloudflare-worker
+npm ci
+npm run deploy
+```
diff --git a/docs/IROH_EXAMPLES.md b/docs/IROH_EXAMPLES.md
new file mode 100644
index 0000000..86499de
--- /dev/null
+++ b/docs/IROH_EXAMPLES.md
@@ -0,0 +1,46 @@
+# iroh examples and references
+
+Cloned under `third_party/iroh-org/` for local inspection.
+
+## iroh-examples
+
+- **browser-chat**: gossip‑based chat in browser + CLI.
+- **browser-blobs**: running iroh‑blobs in WebAssembly.
+- **custom-router**: manual protocol routing by ALPN.
+- **dumbpipe-web**: HTTP forwarding over iroh.
+- **tauri-todos**: Tauri + iroh documents.
+
+## iroh-experiments
+
+- **content-discovery**: tracker + pkarr discovery flow.
+- **h3-iroh**: HTTP/3 over iroh connections.
+- **iroh-pkarr-naming-system**: IPNS‑style naming experiment.
+
+## dumbpipe
+
+- P2P stream forwarding via iroh (good reference for live media piping).
+
+## iroh-gossip
+
+- Pub/sub swarm model with topic IDs; ALPN routing examples.
+
+## iroh-docs
+
+- Shows how to layer blobs + gossip + docs into a protocol stack with Router.
+
+## iroh-willow
+
+- Confidential sync + encryption concepts relevant to swarm security.
+
+## callme / iroh-live
+
+- Audio/video streaming examples over iroh (already cloned in `third_party/`).
+
+## Recent iroh blog + changelog highlights
+
+- The changelog lists releases through 0.33.0 (Feb 24, 2025) with browser/Wasm support, discovery data publishing, and 0-RTT connections.
+- 0.32.0 added browser alpha, Quic Address Discovery (QAD) on relays, and the n0-future crate.
+- 0.29.0 rebranded `iroh-net` to `iroh` and removed the bundled Node in favor of endpoints + routers (protocols moved to separate crates).
+- Sources:
+  - https://iroh.computer/changelog
+  - https://iroh.computer/blog/iroh-0-29
diff --git a/docs/IROH_NOTES.md b/docs/IROH_NOTES.md
new file mode 100644
index 0000000..1b6c871
--- /dev/null
+++ b/docs/IROH_NOTES.md
@@ -0,0 +1,13 @@
+# iroh notes
+
+## Recent highlights (from the iroh blog)
+
+- iroh 0.96.0 focuses on QUIC multipaths on the road to 1.0.
+- Custom transports (including Tor via `iroh-tor`) can be used to establish anonymous connections.
+- Address lookup migration to a new DNS system (`N0Dns`) is underway.
+
+## Implications for every.channel
+
+- Multipath QUIC aligns with our resilience goals.
+- Tor transport is a strong fit for anti-takedown posture.
+- Endpoint discovery and DNS naming should be designed to tolerate evolution in iroh’s discovery infrastructure.
diff --git a/docs/MOQ_IMPLEMENTATIONS.md b/docs/MOQ_IMPLEMENTATIONS.md
new file mode 100644
index 0000000..5865267
--- /dev/null
+++ b/docs/MOQ_IMPLEMENTATIONS.md
@@ -0,0 +1,16 @@
+# MoQ implementations (Rust)
+
+## moq-rs (kixelated/moq)
+
+- Rust implementation of Media over QUIC.
+- Includes `moq-lite` and `hang` catalog components.
+
+## iroh-live
+
+- Uses `moq-rs` with iroh connections via `web-transport-iroh` and `iroh-moq` adapters.
+- Provides publish/watch examples for media streams over iroh.
+
+## callme (iroh-roq)
+
+- Audio-only proof that low-latency media over iroh works at scale.
+- Useful reference for handshake and session management patterns.
diff --git a/docs/MOQ_NOTES.md b/docs/MOQ_NOTES.md
new file mode 100644
index 0000000..07bf305
--- /dev/null
+++ b/docs/MOQ_NOTES.md
@@ -0,0 +1,16 @@
+# MoQ notes
+
+Reference: https://blog.cloudflare.com/moq
+
+- MoQ (Media over QUIC) is a publish/subscribe protocol for media on QUIC.
+- The data model uses track namespaces, tracks, groups, and objects.
+- Relays can cache and forward objects to many subscribers.
+- MoQ is designed to bridge low-latency media delivery with scalable distribution.
+- Browsers are expected to connect via WebTransport.
+
+## Mapping to every.channel
+
+- Each channel becomes a track namespace with tracks for video/audio.
+- Each chunk is a MoQ object with deterministic IDs.
+- Relays store objects and can serve them from any location.
+- Object metadata includes optional timing fields (chunk index, PCR/UTC anchors) to support convergence.
diff --git a/docs/USAGE.md b/docs/USAGE.md
new file mode 100644
index 0000000..1d421a8
--- /dev/null
+++ b/docs/USAGE.md
@@ -0,0 +1,279 @@
+# Usage
+
+## Tauri viewer (local)
+
+If `trunk` or `cargo-tauri` is missing, enter the nix shell (or install the tools manually).
+`direnv allow` also sets `EVERY_CHANNEL_ROOT` so Tauri can find the UI folder.
+
+```sh
+direnv allow
+cd apps/tauri
+cargo tauri dev
+```
+
+If you want deterministic transcoding instead of stream copy:
+
+```sh
+EVERY_CHANNEL_TRANSCODE=1 cargo tauri dev
+```
+
+For node ingest/MoQ publish, you can force deterministic transcode with:
+
+```sh
+EVERY_CHANNEL_DETERMINISTIC=1 cargo run -p ec-node -- ingest hdhr --channel 8.1
+```
+
+iroh discovery is opt-in (DNS discovery is off by default). Enable DHT and/or mDNS like this:
+
+```sh
+EVERY_CHANNEL_IROH_DISCOVERY=dht,mdns cargo tauri dev
+```
+
+In the Tauri app, use **Add stream** to add an HDHomeRun host, a direct HLS URL, or a yt-dlp supported URL (e.g. YouTube Live). The flow rejects non-live sources.
+
+Linux DVB sources can be added with a URL like:
+
+```
+linux-dvb://localhost?adapter=0&dvr=0&tune=dvbv5-zap&tune=-r&tune=Channel%20Name
+```
+
+On Linux, if `/dev/dvb` exists and a `channels.conf` is found, Linux DVB channels are auto-listed in the Channels panel.
+You can override the `channels.conf` path with `EVERY_CHANNEL_DVB_CHANNELS_CONF=/path/to/channels.conf`.
+
+In the UI, you can still type `linux-dvb` in the Add stream field to open the Linux DVB picker (adapter, channels.conf, channel).
+
+Select a channel and click **Share** to start a MoQ publisher. The share bundle (endpoint addr, broadcast, track) appears under the viewer panel and can be pasted into **Manual MoQ connect** on another node.
+
+For gossip announcements, you can provide peers in the UI or set `EVERY_CHANNEL_GOSSIP_PEERS` (comma-separated). mDNS peer discovery is used on LANs to supplement the peer list when available.
+
+## Coverage
+
+See `docs/COVERAGE.md`.
+
+## HDHomeRun E2E Test (Local Network)
+
+This runs two local `ec-node` processes (publish then subscribe) against a real HDHomeRun source and validates that:
+chunks are encrypted, manifests are required, and the subscriber produces a playable HLS output directory.
+
+Requires Nix (so `ac-ffmpeg` finds FFmpeg headers):
+
+```sh
+./scripts/e2e-hdhr.sh --host <HDHR_HOST> --channel <CHANNEL>
+```
+
+## Mesh E2E Test (Split Sources)
+
+This runs two publishers over the same broadcast:
+- peer A publishes **manifests only** (`--publish-chunks=false`)
+- peer B publishes **objects only**
+
+The subscriber fetches objects from peer B and manifests from peer A using `--remote-manifests`.
+
+```sh
+./scripts/e2e-mesh-split.sh --host <HDHR_HOST> --channel <CHANNEL>
+```
+
+### yt-dlp bundling (YouTube Live URLs)
+
+To enable the “Add stream (yt-dlp)” UI flow, bundle the Python runtime + yt-dlp into the app resources:
+
+```sh
+scripts/vendor-yt-dlp.sh
+```
+
+The app will use the bundled runtime under `apps/tauri/resources/yt-dlp/<platform>/venv`. You can override with `EVERY_CHANNEL_YTDLP_PYTHON`.
+
+## Node ingest (MoQ file relay)
+
+### HDHomeRun
+
+```sh
+cargo run -p ec-node -- ingest hdhr --channel 8.1
+```
+
+Enable deterministic transcode:
+
+```sh
+cargo run -p ec-node -- ingest hdhr --channel 8.1 --deterministic
+```
+
+Use a specific device:
+
+```sh
+cargo run -p ec-node -- ingest hdhr --device-id <DEVICE_ID> --channel 8.1
+```
+
+### Linux DVB
+
+```sh
+cargo run -p ec-node -- ingest linux-dvb --adapter 0 --dvr 0 --tune-cmd dvbv5-zap --tune-cmd -r --tune-cmd "Channel Name"
+```
+
+### HLS playlist
+
+```sh
+cargo run -p ec-node -- ingest hls --url https://example.com/live.m3u8
+```
+
+Use deterministic transcode if needed:
+
+```sh
+cargo run -p ec-node -- ingest hls --url https://example.com/live.m3u8 --mode transcode
+```
+
+### Raw TS file or URL
+
+```sh
+cargo run -p ec-node -- ingest ts --input /path/to/stream.ts
+```
+
+## Time sync inspection
+
+```sh
+cargo run -p ec-cli -- ts-sync /path/to/stream.ts --chunk-ms 2000 --max-events 50
+```
+
+## MoQ publish over iroh
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --channel 8.1
+```
+
+Publish with deterministic transcode:
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --channel 8.1 --deterministic
+```
+
+Use a specific device:
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --device-id <DEVICE_ID> --channel 8.1
+```
+
+Publish an HLS source:
+
+```sh
+cargo run -p ec-node -- moq-publish hls --url https://example.com/live.m3u8
+```
+
+Set a stable identity:
+
+```sh
+IROH_SECRET=<hex> cargo run -p ec-node -- moq-publish ts --input /path/to/stream.ts
+```
+
+Enable discovery (DHT + mDNS):
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --channel 8.1 \\
+  --discovery dht,mdns
+```
+
+Announce to catalog gossip:
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --channel 8.1 \\
+  --announce --gossip-peer <ENDPOINT_ADDR>
+```
+
+Publish per-chunk manifests alongside chunks:
+
+```sh
+EVERY_CHANNEL_MANIFEST_SIGNING_KEY=<hex> cargo run -p ec-node -- moq-publish hdhr --channel 8.1 \\
+  --publish-manifests --announce --gossip-peer <ENDPOINT_ADDR>
+```
+
+Batch multiple chunks per manifest (epoch):
+
+```sh
+cargo run -p ec-node -- moq-publish hdhr --channel 8.1 \\
+  --publish-manifests --epoch-chunks 8
+```
+
+## MoQ subscribe (HLS output)
+
+```sh
+cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID>
+```
+
+Enable discovery (DHT + mDNS):
+
+```sh
+cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID> \\
+  --discovery dht,mdns
+```
+
+Segments and `index.m3u8` will be written to `./tmp/moq-hls` by default.
+
+Subscribe to manifests and require them for validation:
+
+```sh
+cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID> \\
+  --subscribe-manifests --require-manifest
+```
+
+Restrict to a manifest signer:
+
+```sh
+cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID> \\
+  --subscribe-manifests --require-manifest \\
+  --manifest-signers ed25519:<hex>
+```
+
+Throttle incoming data:
+
+```sh
+cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID> \\
+  --max-bytes-per-sec 5000000 --max-bytes-burst 10000000
+```
+
+If the stream is encrypted, pass the same network secret used by the publisher:
+
+```sh
+EVERY_CHANNEL_NETWORK_SECRET=<hex> cargo run -p ec-node -- moq-subscribe \\
+  --remote <ENDPOINT_ADDR> \\
+  --broadcast-name <STREAM_ID>
+```
+
+## MoQ self-test (local round trip)
+
+```sh
+cargo run -p ec-node -- moq-selftest /path/to/stream.ts
+```
+
+Pass a URL (for HDHomeRun):
+
+```sh
+cargo run -p ec-node -- moq-selftest http://<hdhr>/auto/v8.1 --max-chunks 8
+```
+
+## Determinism test (libx264 single-thread)
+
+```sh
+cargo run -p ec-cli -- determinism-test /path/to/stream.ts ./tmp/determinism --runs 3
+```
+
+## Tests and coverage
+
+Run the core unit tests:
+
+```sh
+just test-core
+```
+
+Generate a coverage report (requires `nix develop` so ffmpeg headers are visible to `ac-ffmpeg`):
+
+```sh
+just cov-core-html
+```
diff --git a/docs/allowed_signers b/docs/allowed_signers
new file mode 100644
index 0000000..dff1fe2
--- /dev/null
+++ b/docs/allowed_signers
@@ -0,0 +1 @@
+founder@every.channel ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIJCBTSEEcBOhOkf3WF1e8xmblAZHvgTibFsqck2GY8D/
diff --git a/evolution/proposals/ECP-0001-ecp-process.md b/evolution/proposals/ECP-0001-ecp-process.md
new file mode 100644
index 0000000..ce4b3b4
--- /dev/null
+++ b/evolution/proposals/ECP-0001-ecp-process.md
@@ -0,0 +1,56 @@
+# ECP-0001: every.channel proposals process
+
+Status: Draft
+
+## Problem
+
+We need a lightweight, consistent way to propose and review changes while keeping the constitution focused on long-lived principles.
+
+## Decision
+
+Adopt ECP (every.channel proposals) as the primary decision record.
+
+Each ECP is a short, versioned document in `evolution/proposals/` that records context, decisions, and rollout steps.
+
+### Required sections
+
+- Title and status
+- Problem / context
+- Decision
+- Alternatives considered
+- Rollout / teardown plan
+- Open questions (optional)
+
+### Status values
+
+- Draft
+- Accepted
+- Implemented
+- Superseded
+- Rejected
+
+### Numbering
+
+- `ECP-0001` is this process.
+- New ECPs increment by 1 and use a short, descriptive slug.
+
+### Review and acceptance
+
+- Non-trivial changes require an ECP.
+- The founder is the final reviewer and sign-off authority.
+- Once accepted, implementation may proceed or continue.
+
+### Identity and signing
+
+- Commits must be signed with SSH or age identities (minimum: SSH-signed commits).
+- If signing is not configured, implementation pauses until clarified.
+
+## Alternatives considered
+
+- Free-form issues: rejected due to loss of decision history.
+- Heavyweight RFCs: rejected due to unnecessary overhead.
+
+## Rollout / teardown
+
+- Add this process and create initial ECPs.
+- If ECPs become too heavy, supersede this with a lighter process.
diff --git a/evolution/proposals/ECP-0002-initial-technical-direction.md b/evolution/proposals/ECP-0002-initial-technical-direction.md
new file mode 100644
index 0000000..b276cef
--- /dev/null
+++ b/evolution/proposals/ECP-0002-initial-technical-direction.md
@@ -0,0 +1,30 @@
+# ECP-0002: initial technical direction
+
+Status: Draft
+
+## Problem
+
+We need a coherent starting stack that aligns with the constitution and can evolve without locking the project into fragile dependencies.
+
+## Decision
+
+Adopt the following initial technical direction:
+
+- Rust-first core for protocol and node runtime.
+- Media over QUIC (MoQ) for publish/subscribe media delivery.
+- Deterministic chunking profiles to support de-duplication and availability.
+- iroh as the programmable mesh substrate for peer routing.
+- Client surfaces: Tauri desktop app, CLI, and static web UI.
+
+These are starting points, not immutable commitments. They may be revised by later ECPs.
+
+## Alternatives considered
+
+- HLS/DASH for primary delivery: rejected due to mismatch with low-latency pub/sub goals.
+- Centralized relay only: rejected due to resilience and user sovereignty goals.
+- Non-Rust core: deferred to keep early integration cohesive.
+
+## Rollout / teardown
+
+- Scaffold crates and documentation that align with this direction.
+- Revisit once MoQ implementations and browser support stabilize.
diff --git a/evolution/proposals/ECP-0003-hdhomerun-ingest.md b/evolution/proposals/ECP-0003-hdhomerun-ingest.md
new file mode 100644
index 0000000..15954b5
--- /dev/null
+++ b/evolution/proposals/ECP-0003-hdhomerun-ingest.md
@@ -0,0 +1,29 @@
+# ECP-0003: HDHomeRun discovery and lineup ingest
+
+Status: Draft
+
+## Problem
+
+We need a reliable way to discover HDHomeRun devices on a LAN and ingest their channel lineups (including all fields) so we can map channels into every.channel.
+
+## Decision
+
+Implement a two-path discovery and ingest flow:
+
+1. UDP discovery broadcast to port 65001 using the HDHomeRun TLV packet format, wildcard device ID, and tuner device type filter.
+2. HTTP hydration using `/discover.json` and `/lineup.json` for full metadata.
+
+The UDP response supplies the IP and base capabilities, while the HTTP endpoints provide rich metadata and lineup entries. The ingest layer stores all unknown fields as raw JSON to keep future flexibility.
+
+Where mDNS is available, allow host-based discovery via `hdhomerun.local` or `<deviceid>.local` by fetching `http://<host>/discover.json`.
+
+## Alternatives considered
+
+- mDNS-only discovery: rejected because UDP discovery is the documented primary path and does not depend on mDNS configuration.
+- Manual IP entry only: rejected because it prevents zero-config onboarding.
+
+## Rollout / teardown
+
+- Add discovery and lineup ingestion to `ec-hdhomerun`.
+- Expose CLI commands for discovery and lineup JSON parsing.
+- If discovery proves unreliable on some platforms, add interface-specific broadcast addresses or a user-provided host override.
diff --git a/evolution/proposals/ECP-0004-global-stream-identifiers.md b/evolution/proposals/ECP-0004-global-stream-identifiers.md
new file mode 100644
index 0000000..676923a
--- /dev/null
+++ b/evolution/proposals/ECP-0004-global-stream-identifiers.md
@@ -0,0 +1,54 @@
+# ECP-0004: global stream identifiers and swarms
+
+Status: Draft
+
+## Problem
+
+We need a global, deterministic way to identify streams so that identical broadcasts from different antennas can converge in the same swarm without coordination.
+
+## Decision
+
+Adopt a two-layer identifier scheme:
+
+1. **Broadcast identity**: a logical identifier derived from broadcast metadata (PSIP/ATSC) such as transport stream ID and program number. This is the primary convergence key.
+2. **Source identity**: a physical identifier used when broadcast identity is not yet available (e.g., early ingestion). This is a fallback.
+
+A canonical stream ID string will be generated as:
+
+`ec/stream/v1/<scope>/<fields...>/profile-<profile>/variant-<variant>`
+
+Where `<scope>` is `broadcast` or `source`.
+
+### Broadcast scope fields
+
+- `standard` (e.g., `atsc`)
+- `tsid-<transport_stream_id>` (when known)
+- `program-<program_number>` (when known)
+- optional `callsign-<callsign>` and `region-<region>` as hints
+
+### Source scope fields
+
+- `kind` (e.g., `hdhr` or `linux-dvb`)
+- `device-<device_id>` when available
+- `channel-<channel_reference>` when available
+
+### Profile and variant
+
+- `profile` identifies the deterministic encoding profile.
+- `variant` identifies audio language, resolution, or alternate tracks.
+
+## Consequences
+
+- The network can converge on the same stream even when multiple relays ingest the same broadcast.
+- Early ingestion may start with `source` scope and migrate to `broadcast` scope once PSIP metadata is parsed.
+
+## Alternatives considered
+
+- Single opaque UUID per stream: rejected because it prevents convergence without coordination.
+- Content hash as stream ID: deferred; may be layered later as an availability primitive.
+
+## Rollout / teardown
+
+- Implement `StreamKey` in `ec-core`.
+- Extend ingest pipeline to parse PSIP/ATSC IDs and promote `source` to `broadcast` IDs.
+- Revise once PSIP parsing is in place.
diff --git a/evolution/proposals/ECP-0005-deterministic-chunking-pipeline.md b/evolution/proposals/ECP-0005-deterministic-chunking-pipeline.md
new file mode 100644
index 0000000..d628f5a
--- /dev/null
+++ b/evolution/proposals/ECP-0005-deterministic-chunking-pipeline.md
@@ -0,0 +1,30 @@
+# ECP-0005: deterministic chunking pipeline
+
+Status: Draft
+
+## Problem
+
+We need a deterministic encoding and chunking pipeline so that identical broadcasts produce identical objects across relays.
+
+## Decision
+
+Adopt a deterministic chunking profile with the following constraints:
+
+- Single-threaded encoding by default.
+- Fixed GOP cadence and keyframe placement.
+- Bitexact flags enabled wherever possible.
+- Fixed chunk duration (default 2 seconds) and stable object naming.
+
+Initial implementation uses ffmpeg CLI piping into the ac-ffmpeg chunker for rapid iteration, while the primary goal is to move to libav bindings for deeper control and determinism validation.
+
+## Alternatives considered
+
+- Multithreaded encoders: rejected because they reduce reproducibility.
+- Hardware encoders: deferred because determinism is uncertain.
+- HLS segmentation: rejected as the primary format; MoQ objects will be derived directly.
+
+## Rollout / teardown
+
+- Introduce `ec-chopper` with a deterministic profile and ffmpeg-based segmenter.
+- Measure determinism with repeated runs.
+- Replace the CLI with libav bindings once the control surface is verified.
diff --git a/evolution/proposals/ECP-0006-linux-iptv-ingest.md b/evolution/proposals/ECP-0006-linux-iptv-ingest.md
new file mode 100644
index 0000000..0d56cbd
--- /dev/null
+++ b/evolution/proposals/ECP-0006-linux-iptv-ingest.md
@@ -0,0 +1,27 @@
+# ECP-0006: Linux IPTV (LinuxDVB) ingest
+
+Status: Draft
+
+## Problem
+
+We need a second ingest source beyond HDHomeRun so that Linux tuner stacks can participate in the relay mesh.
+
+## Decision
+
+Provide a LinuxDVB ingest module that:
+
+- Opens `/dev/dvb/adapterX/dvrY` as a byte stream.
+- Optionally spawns a tuning command (e.g., `dvbv5-zap -r`) before opening the DVR stream.
+- Enumerates local adapters from `/dev/dvb` to support "zero config" device discovery in the UI.
+- Optionally reads channel names from a `channels.conf` file (common locations like `~/.dvb/channels.conf`) to populate pickers without scanning.
+- Runs on Linux only, returning an explicit error on other platforms.
+
+## Alternatives considered
+
+- Raw ioctl tuning in Rust: deferred due to complexity and lack of immediate testing hardware.
+- IPTV UDP-only ingest: deferred to a later proposal.
+
+## Rollout / teardown
+
+- Add `ec-linux-iptv` crate.
+- Expand with ioctl tuning once hardware is available.
diff --git a/evolution/proposals/ECP-0007-tauri-dioxus-viewer.md b/evolution/proposals/ECP-0007-tauri-dioxus-viewer.md
new file mode 100644
index 0000000..ab77732
--- /dev/null
+++ b/evolution/proposals/ECP-0007-tauri-dioxus-viewer.md
@@ -0,0 +1,30 @@
+# ECP-0007: Tauri + Dioxus viewer bridge
+
+Status: Draft
+
+## Problem
+
+We need a macOS-ready viewer so we can watch every.channel streams while MoQ playback matures.
+
+## Decision
+
+Ship an embedded Dioxus web frontend inside a Tauri shell. The viewer lists generic stream descriptors (no HDHomeRun-specific UI) and plays a selected stream via a local HTTP bridge.
+
+The bridge:
+
+- Spawns ffmpeg to transcode a stream URL into short CMAF-style HLS segments (fMP4).
+- Serves the generated playlist and segments from a local HTTP server.
+- Returns a playback URL to the frontend.
+
+This preserves the stream abstraction while providing a pragmatic playback path on macOS (WebKit/HLS).
+
+## Alternatives considered
+
+- Wait for MoQ playback: rejected for now because it blocks local iteration.
+- Native AVFoundation player: deferred to keep UI portable and simple.
+
+## Rollout / teardown
+
+- Implement `list_streams` + `start_stream` commands in the Tauri backend.
+- Add Dioxus frontend with channel list and player.
+- Replace the HLS bridge with MoQ playback when the transport stack stabilizes.
diff --git a/evolution/proposals/ECP-0008-iroh-discovery-transport.md b/evolution/proposals/ECP-0008-iroh-discovery-transport.md
new file mode 100644
index 0000000..ce19d57
--- /dev/null
+++ b/evolution/proposals/ECP-0008-iroh-discovery-transport.md
@@ -0,0 +1,33 @@
+# ECP-0008: iroh discovery + transport design
+
+Status: Draft
+
+## Problem
+
+We need a discovery and transport layer that can survive hostile networks, reduce central points of failure, and support stream swarms across independently hosted relays.
+
+## Decision
+
+Adopt iroh as the mesh substrate with the following design:
+
+- **Dial by public key**: every node has an iroh endpoint identity; connections are established by endpoint id with automatic hole punching and relay fallback.
+- **MoQ over iroh**: run MoQ sessions over iroh QUIC connections using a dedicated ALPN (e.g. `every.channel/moq/0`).
+- **Discovery via gossip**: use iroh-gossip to disseminate stream catalogs and track announcements, keyed by `StreamId`.
+- **Transport flexibility**: support iroh custom transports (e.g. Tor) for nodes that need anonymity or censorship resistance.
+- **Multipath first**: leverage iroh’s multipath QUIC capabilities to increase resilience and adapt to changing network conditions.
+
+## Consequences
+
+- Nodes can join the swarm with minimal configuration and no centralized registry.
+- The mesh can degrade gracefully under takedown pressure by routing through relays or Tor.
+
+## Alternatives considered
+
+- Centralized rendezvous servers: rejected due to fragility and governance risk.
+- Manual peer lists: rejected due to onboarding friction.
+
+## Rollout / teardown
+
+- Add an iroh transport crate that exposes a `connect` API for MoQ sessions.
+- Implement gossip-based stream catalog synchronization.
+- Add optional Tor transport profile for high-risk regions.
diff --git a/evolution/proposals/ECP-0009-moq-implementation-selection.md b/evolution/proposals/ECP-0009-moq-implementation-selection.md
new file mode 100644
index 0000000..1615f7e
--- /dev/null
+++ b/evolution/proposals/ECP-0009-moq-implementation-selection.md
@@ -0,0 +1,36 @@
+# ECP-0009: MoQ implementation selection
+
+Status: Draft
+
+## Problem
+
+We need a practical MoQ implementation to begin integration with iroh while the protocol evolves.
+
+## Survey (Rust implementations)
+
+- **moq-dev/moq**: MoQ reference repository with Rust crates including `moq-lite`, `moq-relay`, and `hang` catalogs.
+  - https://github.com/moq-dev/moq
+- **cloudflare/moq-rs**: Rust implementation of the IETF MoQ Transport draft.
+  - https://github.com/cloudflare/moq-rs
+
+## Decision
+
+Start with `moq-lite` (from moq-dev/moq) and reuse the adapters proven by `iroh-live`:
+
+- `web-transport-iroh` for WebTransport-style bindings over iroh.
+- `iroh-moq` for creating MoQ sessions over iroh connections.
+
+Track `cloudflare/moq-rs` in parallel for standards-aligned MoQ Transport and schedule
+interoperability tests once we have live relays.
+
+## Alternatives considered
+
+- Building a fresh MoQ stack: rejected due to duplication and slow iteration.
+- Waiting for browser-native MoQ: rejected because it delays core network validation.
+- Starting directly on cloudflare/moq-rs: deferred until we need draft-accurate transport.
+
+## Rollout / teardown
+
+- Vendor or depend on `moq-rs` crates.
+- Implement a minimal publish/subscribe pipeline over iroh.
+- Re-evaluate once MoQ standardization and browser support stabilize.
diff --git a/evolution/proposals/ECP-0010-time-synchronized-chunking.md b/evolution/proposals/ECP-0010-time-synchronized-chunking.md
new file mode 100644
index 0000000..90ad430
--- /dev/null
+++ b/evolution/proposals/ECP-0010-time-synchronized-chunking.md
@@ -0,0 +1,46 @@
+# ECP-0010: time-synchronized chunking
+
+Status: Draft
+
+## Problem
+
+To achieve byte-identical chunks across uncoordinated antennas, we need a shared timeline for chunk boundaries. If chunk boundaries are derived from local capture start time, identical broadcasts will diverge.
+
+## Decision
+
+Define a **time-synchronized chunking model** based on broadcast clocks:
+
+1. **Primary clock: PCR**
+   - Use MPEG-TS PCR (27 MHz) as the canonical timeline for chunk boundaries.
+2. **UTC anchor (when available)**
+   - ATSC: use PSIP STT to compute UTC time.
+   - DVB: use TDT/TOT to compute UTC time.
+3. **Chunk boundary rule**
+   - Compute `chunk_index = floor((t_anchor) / D)` where `t_anchor` is UTC time when available, otherwise PCR time.
+   - `D` is fixed chunk duration (e.g., 2000 ms).
+4. **Alignment policy**
+   - On ingest, drop data until the next full boundary.
+   - Each chunk contains frames/packets whose PTS fall within `[chunk_start, chunk_end)`.
+5. **Discontinuity handling**
+   - If PCR/PTS discontinuity is detected, close the current group and start a new one at the next boundary.
+6. **Sync status**
+   - Streams with UTC anchor are marked `synced` and eligible for swarm convergence.
+   - Streams without UTC anchor are `unsynced` and remain source-scoped.
+
+## Consequences
+
+- Identical broadcasts on different antennas converge to the same chunk boundaries and can produce byte-identical object streams.
+- Early ingestion can begin unsynced and promote to synced when broadcast time appears.
+- Chunk IDs become deterministic functions of (UTC or PCR timeline, duration).
+
+## Alternatives considered
+
+- Local wall clock (NTP/PTP): rejected as primary anchor because it is not broadcast-authoritative and varies between hosts.
+- Capture-start-based chunking: rejected because it prevents convergence without coordination.
+
+## Rollout / teardown
+
+- Add a time model to the ingest pipeline (PCR + optional UTC anchor).
+- Require chunkers to align to the computed boundary.
+- Promote `StreamId` from source scope to broadcast scope only when `synced`.
+- Supersede this ECP if MoQ introduces a standardized global timeline.
diff --git a/evolution/proposals/ECP-0011-stream-encryption.md b/evolution/proposals/ECP-0011-stream-encryption.md
new file mode 100644
index 0000000..a44fc61
--- /dev/null
+++ b/evolution/proposals/ECP-0011-stream-encryption.md
@@ -0,0 +1,33 @@
+# ECP-0011: stream encryption keys
+
+Status: Draft
+
+## Problem
+
+We need a consistent encryption model so streams can be protected in transit while remaining discoverable by stream id.
+
+## Decision
+
+Derive a symmetric stream key deterministically from the stream id, with an optional network secret:
+
+- `stream_key = BLAKE3-derive("every.channel stream key v1", network_secret || 0x00 || stream_id)`
+- If `network_secret` is absent, the key is public and provides obfuscation only.
+- If `network_secret` is present, the stream is private to holders of the secret.
+
+Encryption will be applied at the object layer (MoQ objects), not at the transport layer. This allows relays to store and forward encrypted objects without visibility.
+
+## Consequences
+
+- Streams can be encrypted deterministically without coordination.
+- Private swarms can be created by sharing a network secret.
+
+## Alternatives considered
+
+- Per-session negotiated keys: rejected because it prevents deterministic convergence.
+- PKI per stream: deferred due to operational complexity.
+
+## Rollout / teardown
+
+- Add key derivation helper in `ec-crypto`.
+- Implement object-layer encryption in the MoQ publisher.
+- Add configuration for network secret.
diff --git a/evolution/proposals/ECP-0012-moq-object-wire-format.md b/evolution/proposals/ECP-0012-moq-object-wire-format.md
new file mode 100644
index 0000000..f525c8c
--- /dev/null
+++ b/evolution/proposals/ECP-0012-moq-object-wire-format.md
@@ -0,0 +1,42 @@
+# ECP-0012: MoQ object wire format + track mapping
+
+Status: Draft
+
+## Problem
+
+We need a concrete, interoperable way to represent every.channel chunk objects over MoQ tracks so that publishers and subscribers can exchange data without relying on file relay conventions.
+
+## Constraints
+
+- Works over `moq-lite` tracks with group/frame semantics.
+- Must carry both metadata (timing, encryption) and chunk bytes.
+- Should be simple to parse and deterministic.
+
+## Decision
+
+- **Broadcast name**: the canonical stream id (e.g. `ec/stream/v1/...`).
+- **Track name**: fixed `chunks` track for object payloads.
+- **Group sequence**: use `chunk_index` (u64) as the group sequence.
+- **Frame payload**: a single frame per group containing:
+  - 4-byte big-endian length prefix for JSON metadata
+  - JSON-encoded `ObjectMeta`
+  - raw chunk bytes (ciphertext or plaintext)
+
+This yields a deterministic, self-contained payload with minimal framing and easy debugging.
+
+`ObjectMeta` may include optional integrity helpers:
+
+- `chunk_hash` (blake3 of plaintext chunk bytes)
+- `chunk_proof` (Merkle branch proving membership in an epoch manifest)
+
+## Alternatives considered
+
+- Separate meta/data frames: rejected due to ordering ambiguity and more framing.
+- Binary codec (postcard/bincode): deferred until interop is proven.
+
+## Rollout / teardown
+
+- Implement encode/decode helpers in `ec-moq`.
+- Update publisher to emit one frame per chunk group.
+- Update subscriber to decode into `ObjectPayload`.
+- If superseded, provide a compatibility adapter in `ec-moq`.
diff --git a/evolution/proposals/ECP-0013-stream-catalog-gossip.md b/evolution/proposals/ECP-0013-stream-catalog-gossip.md
new file mode 100644
index 0000000..aac37a2
--- /dev/null
+++ b/evolution/proposals/ECP-0013-stream-catalog-gossip.md
@@ -0,0 +1,30 @@
+# ECP-0013: stream catalog gossip for discovery
+
+Status: Draft
+
+## Problem
+
+We need a decentralized way to discover live streams and their MoQ endpoints without a central registry.
+
+## Constraints
+
+- Must work over iroh transports (QUIC, relays).
+- Should be encrypted at the transport layer and signed by endpoint identities.
+- Lightweight enough to broadcast frequently.
+
+## Decision
+
+- Introduce a `StreamCatalogEntry` structure that pairs a `StreamDescriptor` with MoQ transport metadata and optional encryption parameters.
+- Publish catalog entries over `iroh-gossip` on a well-known topic derived from `every.channel/catalog/v1`.
+- `ec-node` can optionally announce entries when publishing a stream.
+
+## Alternatives considered
+
+- Centralized HTTP registry: rejected due to resilience and governance risks.
+- Static peer lists only: rejected due to poor discoverability.
+
+## Rollout / teardown
+
+- Add catalog types to `ec-core` and gossip helpers to `ec-iroh`.
+- Add CLI flags to `ec-node` to announce catalog entries.
+- Defer full catalog sync/merge semantics until initial interoperability is validated.
diff --git a/evolution/proposals/ECP-0014-in-app-sharing.md b/evolution/proposals/ECP-0014-in-app-sharing.md
new file mode 100644
index 0000000..9e1c1fc
--- /dev/null
+++ b/evolution/proposals/ECP-0014-in-app-sharing.md
@@ -0,0 +1,37 @@
+# ECP-0014: In-app MoQ sharing (relay-first)
+
+## Status
+Draft
+
+## Context
+We need a low-friction way for a viewer node to share a live stream with other nodes. Today the CLI can publish MoQ streams, but the Tauri app cannot initiate a publish session or surface share details. Early adoption needs a quick path to “click Share, send details.”
+
+We also need a near-term relay path that works across NATs without extra configuration. iroh provides default public relays; we can use those until we add custom relay selection.
+
+## Decision
+Add an in-app MoQ publish path for the currently selected channel. When a user clicks **Share**, the app starts a MoQ publisher and returns a share bundle (endpoint addr, broadcast, track). The bundle is shown in the UI for copy/paste and can be used by any MoQ subscriber.
+
+For now, the publish flow relies on iroh’s default relay configuration (relay-first). A later ECP can formalize relay selection and custom relay registries.
+
+## Details
+- New `start_moq_publish` Tauri command that:
+  - Opens the selected stream source.
+  - Chunks with the existing ffmpeg pipeline.
+  - Publishes objects over MoQ with deterministic encryption metadata.
+  - Returns a share bundle: `{ endpoint_addr, broadcast_name, track_name, stream_id }`.
+- The viewer UI shows a **Share** button in the Viewer panel and surfaces the share bundle.
+- Manual MoQ connect stays available in the **Add source** menu for now.
+
+## Consequences
+- Sharing a stream consumes a tuner when the source is a live HDHomeRun stream.
+- Publishing is long-lived; the app keeps a MoQ node alive until exit.
+- The share bundle is ephemeral unless a stable iroh secret is configured.
+
+## Risks
+- Relay capacity and policy may change; a future ECP should specify relay configuration and redundancy.
+- DRM-protected streams may fail to publish or play; UI should surface DRM hints.
+
+## Follow-ups
+- Add stable identity and share token signing.
+- Add catalog gossip announcements for published streams.
+- Provide a web gateway (MoQ -> HLS/MSE) for browsers without MoQ support.
diff --git a/evolution/proposals/ECP-0015-gossip-announce-toggle.md b/evolution/proposals/ECP-0015-gossip-announce-toggle.md
new file mode 100644
index 0000000..cffd073
--- /dev/null
+++ b/evolution/proposals/ECP-0015-gossip-announce-toggle.md
@@ -0,0 +1,23 @@
+# ECP-0015: Gossip announce toggle and bootstrap peers
+
+## Status
+Draft
+
+## Context
+Sharing a stream should optionally announce it into the global catalog so other nodes can discover it. Today gossip requires explicit peers, and there is no UI surface for managing announcements.
+
+## Decision
+Add an "Announce on share" toggle and a "Gossip peers" field to the viewer UI. When enabled, the app sends a catalog announcement over iroh-gossip immediately after a share begins. Peers can be supplied in-app or via `EVERY_CHANNEL_GOSSIP_PEERS` (comma-separated).
+
+## Details
+- `start_moq_publish` accepts `announce` and `gossip_peers`.
+- If `announce` is true and no peers are provided, we fall back to `EVERY_CHANNEL_GOSSIP_PEERS`.
+- The share card surfaces announce status (announced / error).
+
+## Consequences
+- Announcements remain opt-in and require at least one peer.
+- Users can keep their share local by leaving announce off.
+
+## Follow-ups
+- Add local peer discovery via mDNS to remove manual peer entry for LANs.
+- Add public bootstrap peer lists and relay selection once governance approves.
diff --git a/evolution/proposals/ECP-0016-mdns-peer-discovery.md b/evolution/proposals/ECP-0016-mdns-peer-discovery.md
new file mode 100644
index 0000000..ed6abec
--- /dev/null
+++ b/evolution/proposals/ECP-0016-mdns-peer-discovery.md
@@ -0,0 +1,24 @@
+# ECP-0016: mDNS peer discovery for gossip
+
+## Status
+Draft
+
+## Context
+Manual gossip peers are a barrier for LAN onboarding. iroh already supports an mDNS-based address lookup, which can discover endpoints on the local network without external infrastructure.
+
+## Decision
+Enable iroh's mDNS address lookup and use it as a peer discovery layer for catalog gossip. When gossip starts (or sharing announces), we probe mDNS for a short window and merge any discovered endpoints into the peer list.
+
+## Details
+- Enable iroh feature `address-lookup-mdns`.
+- Advertise `UserData = "every.channel"` for local discovery filtering.
+- When gossip is started, probe for ~2 seconds and merge discovered endpoints with configured peers.
+- mDNS discovery is best-effort; failures should not block manual peers.
+
+## Consequences
+- LAN nodes can connect and discover each other without copying addresses.
+- Global discovery still requires at least one public peer.
+
+## Follow-ups
+- Add a UI indicator when mDNS peers are found.
+- Evaluate relay-less LAN mode and mDNS-only sessions for local-first setups.
diff --git a/evolution/proposals/ECP-0017-dht-mdns-discovery.md b/evolution/proposals/ECP-0017-dht-mdns-discovery.md
new file mode 100644
index 0000000..473c109
--- /dev/null
+++ b/evolution/proposals/ECP-0017-dht-mdns-discovery.md
@@ -0,0 +1,25 @@
+# ECP-0017: opt-in DHT + mDNS discovery (DNS off by default)
+
+## Status
+Draft
+
+## Context
+The current iroh endpoint setup uses default DNS-based discovery implicitly. We want discovery to be explicit and privacy-preserving by default, while still supporting decentralized discovery when users opt in. DHT discovery provides global, decentralized rendezvous; mDNS handles local networks without external infrastructure.
+
+## Decision
+Switch endpoint construction to `Endpoint::empty_builder` with no discovery providers by default. Add opt-in discovery modes for DHT and mDNS. DNS discovery is disabled unless explicitly added in a future ECP.
+
+## Details
+- Add a discovery config that can be set via `EVERY_CHANNEL_IROH_DISCOVERY` (comma-separated: `dht`, `mdns`, `dns`).
+- Use iroh address lookup providers: `DhtAddressLookup` for `dht`, `MdnsAddressLookup` for `mdns`, and `PkarrPublisher` + `DnsAddressLookup` for `dns` (when explicitly enabled).
+- Keep existing mDNS peer discovery (address-lookup) for LAN gossip bootstrapping.
+- If discovery is disabled, peer addresses must include relay/address info (e.g., share bundle JSON).
+
+## Consequences
+- DNS-based discovery is no longer automatic; opt-in discovery is required for ID-only dialing.
+- Privacy improves by default (no implicit DNS publishing).
+- Operators can enable decentralized DHT discovery when they want global reach.
+
+## Follow-ups
+- Consider an explicit `dns` discovery mode if needed.
+- Add UI toggles for discovery modes (for non-CLI users).
diff --git a/evolution/proposals/ECP-0018-ui-discovery-toggles.md b/evolution/proposals/ECP-0018-ui-discovery-toggles.md
new file mode 100644
index 0000000..3f3268c
--- /dev/null
+++ b/evolution/proposals/ECP-0018-ui-discovery-toggles.md
@@ -0,0 +1,20 @@
+# ECP-0018: discovery mode toggles in Tauri UI
+
+## Status
+Draft
+
+## Context
+Discovery is now opt-in (DHT/mDNS with DNS disabled by default). Users need an in-app way to enable discovery without setting environment variables.
+
+## Decision
+Add a discovery settings section to the Tauri viewer UI with toggles for DHT, mDNS, and DNS (pkarr relay). The selected modes are sent with MoQ connect, share, and catalog discovery commands.
+
+## Details
+- UI stores discovery state (DHT/mDNS/DNS) and emits a comma-separated string (e.g. `dht,mdns`).
+- Manual MoQ connect, catalog discovery, and Share use the selected discovery config.
+- If no modes are enabled, discovery remains off and share bundles must include full endpoint addresses.
+
+## Consequences
+- Users can opt in to decentralized discovery without env vars.
+- DNS discovery remains explicit and off by default.
+
diff --git a/evolution/proposals/ECP-0019-hdhr-by-host-ui.md b/evolution/proposals/ECP-0019-hdhr-by-host-ui.md
new file mode 100644
index 0000000..cadf439
--- /dev/null
+++ b/evolution/proposals/ECP-0019-hdhr-by-host-ui.md
@@ -0,0 +1,20 @@
+# ECP-0019: add HDHomeRun by host/IP in Tauri UI
+
+## Status
+Draft
+
+## Context
+Auto-discovery is great, but users sometimes only have a device IP/hostname. We need a direct add flow to attach HDHomeRun devices to the local catalog without relying on UDP discovery.
+
+## Decision
+Add a manual HDHomeRun host/IP input in the Tauri “Add source” menu. The backend will resolve `discover.json`, fetch the lineup, and add the streams/sources to the local catalog.
+
+## Details
+- New Tauri command `add_hdhr_source` takes a host/IP and hydrates channels.
+- Manual devices are kept alongside auto-discovered devices; refresh does not delete manual sources.
+- Manual streams and sources are merged into the local catalog and startable like auto-discovered streams.
+- Manual host list is normalized (strips scheme/path, trims slashes) and persisted under the app config directory for reuse across restarts.
+
+## Consequences
+- Users can onboard a device without UDP discovery.
+- Manual entries survive restarts but can be managed by editing/removing the saved host list if needed.
diff --git a/evolution/proposals/ECP-0020-determinism-moq-selftest.md b/evolution/proposals/ECP-0020-determinism-moq-selftest.md
new file mode 100644
index 0000000..cd11aae
--- /dev/null
+++ b/evolution/proposals/ECP-0020-determinism-moq-selftest.md
@@ -0,0 +1,20 @@
+# ECP-0020: deterministic encode checks + MoQ self-test CLI
+
+## Status
+Draft
+
+## Context
+We need a repeatable way to validate deterministic encoding and to verify MoQ publish/subscribe flows from the CLI without the UI.
+
+## Decision
+Add CLI tooling for (1) deterministic re-encoding checks using the libx264 single-thread profile, and (2) a local MoQ round-trip self-test that compares object hashes.
+
+## Details
+- `ec-cli determinism-test` re-encodes the same input multiple times using `deterministic_h264_profile` and compares segment hashes.
+- `ec-node moq-selftest` publishes a chunked stream and subscribes to it using a second endpoint, verifying object hashes per chunk index.
+- The self-test waits for the subscriber to acknowledge each published chunk to avoid MoQ track drops, and waits briefly for endpoint addresses to appear.
+- Defaults are conservative: single-thread x264, bitexact flags, fixed GOP.
+
+## Consequences
+- Determinism regressions are detectable early.
+- MoQ path can be validated headlessly without the Tauri app.
diff --git a/evolution/proposals/ECP-0021-relay-mode-toggle.md b/evolution/proposals/ECP-0021-relay-mode-toggle.md
new file mode 100644
index 0000000..d0e9175
--- /dev/null
+++ b/evolution/proposals/ECP-0021-relay-mode-toggle.md
@@ -0,0 +1,19 @@
+# ECP-0021: relay mode environment toggle
+
+## Status
+Draft
+
+## Context
+Local testing (and some restricted networks) fail when iroh relays are unreachable. We need a simple way to disable relays without changing code, especially for self-tests.
+
+## Decision
+Add `EVERY_CHANNEL_IROH_RELAY` to select relay mode when building endpoints. Supported values: `default` (current behavior) and `disabled` (no relay use).
+
+## Details
+- The endpoint builder reads `EVERY_CHANNEL_IROH_RELAY`.
+- Invalid values fail fast with a clear error.
+
+## Consequences
+- Local testing can run without relay connectivity.
+- Default behavior remains unchanged.
+
diff --git a/evolution/proposals/ECP-0022-swarm-availability-anti-junk.md b/evolution/proposals/ECP-0022-swarm-availability-anti-junk.md
new file mode 100644
index 0000000..0ec9878
--- /dev/null
+++ b/evolution/proposals/ECP-0022-swarm-availability-anti-junk.md
@@ -0,0 +1,114 @@
+# ECP-0022: swarm availability, signed manifests, anti-junk controls
+
+Status: Draft
+
+## Problem / context
+
+We need to scale distribution without turning every node into a dump pipe. The primary threat is denial via junk data: a peer can join and send invalid chunks that waste bandwidth and compute. We also need a model for multi-party signing and divergent encodes without inventing a full blockchain.
+
+## Decision
+
+Adopt a pull-based swarm model centered on signed manifests and content-addressed chunks:
+
+- Chunks are immutable and referenced by hash.
+- A manifest commits to a chunk set via a Merkle root and is signed by one or more identities.
+- Peers only serve chunks that match a manifest they recognize and that a requester explicitly asks for.
+- Junk is rejected by hash before decode, and peers are rate-limited and penalized for bad data.
+
+Multi-root signing is handled through **attestations**: multiple signers may publish distinct manifest roots for the same stream/time slice, and clients decide which roots are acceptable based on policy.
+
+## Details
+
+### Objects
+
+- `ChunkId`:
+  - `stream_id`
+  - `epoch_id` (time window / slice)
+  - `chunk_index`
+  - `chunk_hash` (blake3 of raw chunk bytes)
+- `ManifestBody`:
+  - `stream_id`
+  - `epoch_id`
+  - `chunk_duration_ms`
+  - `total_chunks`
+  - `chunk_start_index`
+  - `encoder_profile_id`
+  - `merkle_root` (over ordered chunk_hash list)
+  - `created_unix_ms`
+  - `metadata` (optional, e.g. channel title, guide hints)
+  - `chunk_hashes` (ordered list for now; proofs can come later)
+- `Manifest`:
+  - `body`
+  - `manifest_id` = `blake3(body)`
+  - `signatures`: list of `(signer_id, sig_over_manifest_id)`
+
+### Pull-only data flow
+
+- A peer first obtains a manifest (via gossip, direct share, or local catalog).
+- The peer requests specific chunks by `ChunkId`.
+- Providers return bytes **only** if they can supply exact hash bytes and have quota available.
+
+### Anti-junk measures
+
+- Validate `chunk_hash` before decode; invalid bytes are dropped.
+- Require the requester to supply `manifest_id` + `chunk_index` + expected `chunk_hash`.
+- Token-bucket quotas per peer:
+  - max bytes/sec
+  - max concurrent chunk responses
+  - max outstanding requests
+- Penalize peers:
+  - invalid hash → immediate disconnect + temporary ban
+  - repeated invalid requests → throttle or blacklist
+
+### Multi-root signing (not blockchain)
+
+Multiple manifests may exist for the same `stream_id + epoch_id`. We treat them as **parallel attestations**, not consensus. Clients choose a policy, e.g.:
+
+- accept a manifest if signed by `>=1` trusted key
+- or `>=N` signatures from a trust set
+- or “self + any one other”
+
+If two manifests conflict (different `merkle_root`), clients may:
+
+- select the one with the most trusted signatures
+- fall back to local preference
+- display “split availability” without forcing global consensus
+
+### Relay behavior
+
+Relays cache hot chunks by `ChunkId` and serve on request only. They do not push data to peers. Relays enforce the same quota and validation rules as peers.
+
+### MoQ transport notes (initial)
+
+- Track `chunks` carries object payloads as in ECP-0012.
+- Track `manifests` carries JSON-encoded `Manifest` entries, one per group.
+- For live streams we start with **per-chunk manifests** (epoch size = 1) so every chunk can be validated immediately. Multi-chunk epochs and Merkle proofs can replace this later.
+
+### Chunk membership proofs (incremental)
+
+To avoid sending full `chunk_hashes` forever, object metadata may include a Merkle branch proving that `chunk_hash` is included in the manifest's `merkle_root` for the epoch.
+
+- `ObjectMeta.chunk_proof`: list of sibling hashes from leaf to root.
+- Verification uses the chunk offset within the epoch: `offset = chunk_index - chunk_start_index`.
+
+## Alternatives considered
+
+- Push-only streams: rejected (amplifies junk and DDoS risk).
+- Global consensus / blockchain for manifests: rejected as overkill for now.
+- Accepting arbitrary chunks without hashes: rejected (no integrity).
+
+## Rollout / teardown plan
+
+1. Define `ManifestBody`, `Manifest`, and `ChunkId` in `ec-core`.
+2. Implement signing + verification in `ec-crypto` (age/ssh).
+3. Add manifest publication and request protocol in `ec-moq`.
+4. Enforce per-peer quotas and ban lists in `ec-iroh` transport layer.
+5. Update catalog gossip to advertise manifests, not raw chunks.
+
+Teardown: revert to direct MoQ stream subscriptions (current behavior) if manifest flow blocks progress.
+
+## Open questions
+
+- What default trust policy should the UI use for manifests?
+- Should relays require proof-of-work for public manifest announcements?
+- Do we embed encoder profile parameters directly in `encoder_profile_id` or reference a registry?
diff --git a/evolution/proposals/ECP-0023-hls-ingest.md b/evolution/proposals/ECP-0023-hls-ingest.md
new file mode 100644
index 0000000..36e5934
--- /dev/null
+++ b/evolution/proposals/ECP-0023-hls-ingest.md
@@ -0,0 +1,54 @@
+# ECP-0023: HLS ingest pipeline
+
+Status: Draft
+
+## Problem / context
+
+Some broadcasters and community relays expose HLS playlists directly. If two peers ingest the same HLS origin and the bytes are identical, we can dedupe and swarm immediately. We need a first-class ingest path for HLS that plugs into the deterministic chunking pipeline.
+
+## Decision
+
+Add HLS as a supported ingest source. The ingest path:
+
+- Uses ffmpeg/libav demuxing (no custom parsers).
+- Normalizes input into our deterministic chunker.
+- Treats identical origin bytes as a fast path for dedupe; if bytes vary, re-encode deterministically.
+
+## Details
+
+### Ingest modes
+
+- **Pass-through**: If the HLS origin serves MPEG-TS segments that are already deterministic and stable, chunk the byte stream as-is.
+- **Normalize**: If the origin uses fMP4 or inconsistent segmenting, remux via ffmpeg into a stable TS stream before chunking.
+- **Deterministic re-encode**: If byte identity isn’t stable (e.g. ad insertion, timestamps), re-encode with the deterministic profile.
+
+Initial implementation note: use ffmpeg (CLI) to output a continuous MPEG-TS stream which is then chunked by the ac-ffmpeg path. This keeps parsing inside ffmpeg and avoids custom HLS logic.
+
+### Encryption
+
+- If the HLS stream is encrypted with clear AES-128 and a key is provided, the ingest pipeline can decrypt and then re-encrypt using our stream encryption (stream id + chunk index + optional network secret).
+- DRM (Widevine/PlayReady) is out of scope for now; ingest will skip or mark as protected.
+- Our chunk encryption remains independent of HLS origin encryption.
+
+### Identifiers
+
+- HLS sources map to a `StreamKey` with `source.kind = "hls"` and `source.channel = <url-or-name>`.
+- `StreamId` is derived as usual from `StreamKey`.
+
+## Alternatives considered
+
+- Directly serving HLS playlists to peers: rejected (pushes HLS semantics to every client).
+- Custom HLS parser: rejected (ffmpeg already solves it).
+
+## Rollout / teardown plan
+
+1. Add `HlsSource` to `ec-node` ingest CLI and `ec-core` source typing.
+2. Add ffmpeg/libav HLS ingest path to `ec-chopper`.
+3. Wire HLS ingest into MoQ publisher and manifest pipeline.
+
+Teardown: disable HLS ingest and fall back to HDHR/IPTV sources.
+
+## Open questions
+
+- Which HLS modes should default to remux vs re-encode?
+- Should HLS playlist metadata (program info) be carried into stream metadata?
diff --git a/evolution/proposals/ECP-0024-zktls-manifest-provenance.md b/evolution/proposals/ECP-0024-zktls-manifest-provenance.md
new file mode 100644
index 0000000..43c558c
--- /dev/null
+++ b/evolution/proposals/ECP-0024-zktls-manifest-provenance.md
@@ -0,0 +1,55 @@
+# ECP-0024: zkTLS provenance proofs for HTTPS-derived manifests
+
+Status: Draft
+
+## Problem / context
+
+We want optional provenance for manifests derived from HTTPS origins (e.g. HLS), without relying on the origin to sign our data. zkTLS can prove that a manifest was derived from a TLS session to a given origin, while keeping the session private.
+
+## Decision
+
+Add an optional zkTLS attestation per epoch:
+
+- Produce a zkTLS proof that the manifest’s chunk hashes (or their Merkle root) were derived from bytes fetched over HTTPS from a specific origin.
+- Attach the proof metadata to the manifest as provenance, without replacing our own signatures.
+
+## Details
+
+### Provenance model
+
+- zkTLS is used **once per epoch** and applies to a specific manifest body.
+- The proof binds:
+  - HTTPS origin hostname
+  - time window / epoch id
+  - manifest_id (or merkle_root)
+- The manifest remains signed by local identities; zkTLS does **not** replace signing.
+
+### Data placement
+
+- Manifest `metadata` includes a provenance entry, e.g.:
+  - `provenance.zktls.origin = https://example.com`
+  - `provenance.zktls.proof_ref = <hash-or-uri>`
+  - `provenance.zktls.scope = merkle_root|manifest_id`
+
+### Verification
+
+- Clients may ignore zkTLS (default) or require it for certain origins.
+- Verification is a policy decision, not a consensus rule.
+
+## Alternatives considered
+
+- TLS handshake signatures for data integrity: rejected (TLS does not sign application bytes).
+- Forcing all origins to sign manifests: rejected (not feasible for public broadcasters).
+
+## Rollout / teardown plan
+
+1. Define provenance metadata fields in `ec-core`.
+2. Add a proof attachment path in the ingest pipeline.
+3. Integrate a zkTLS provider behind a feature flag.
+
+Teardown: omit provenance metadata and continue using signed manifests.
+
+## Open questions
+
+- Which zkTLS system to integrate first (TLSNotary-style, zkTLS SDK, or custom)?
+- Should provenance be per-epoch only, or per-manifest revision?
diff --git a/evolution/proposals/ECP-0025-ytdlp-adapter-bundling.md b/evolution/proposals/ECP-0025-ytdlp-adapter-bundling.md
new file mode 100644
index 0000000..8c250d2
--- /dev/null
+++ b/evolution/proposals/ECP-0025-ytdlp-adapter-bundling.md
@@ -0,0 +1,45 @@
+# ECP-0025: yt-dlp adapter + bundled runtime
+
+Status: Draft
+
+## Problem / context
+
+We want to paste a YouTube Live (or other supported site) URL into the app and ingest it as a stream. This requires resolving the URL to an HLS playlist or direct stream URL. We also want the app to be self-contained (no external Python install).
+
+## Decision
+
+Ship a bundled yt-dlp runtime inside the Tauri app and expose a Tauri command that resolves a URL to a stream URL via yt-dlp. The resolved URL is then treated like any other ingest source and sent through our ffmpeg-based pipeline.
+
+## Details
+
+### Bundling
+
+- Bundle a Python runtime + `yt-dlp` inside the app resources directory.
+- Prefer the bundled runtime at runtime; fallback to a system `yt-dlp` only if explicitly configured.
+- Use a `scripts/vendor-yt-dlp.sh` helper to build the bundled environment per platform.
+
+### Tauri integration
+
+- Add a `add_ytdlp_source` command that:
+  - Executes `python -m yt_dlp -J --no-playlist <url>`.
+  - Selects a suitable HLS URL from the JSON.
+  - Creates a `StreamDescriptor` and `StreamSource`.
+- The UI provides a URL input in the “Add source” menu.
+
+### Security / policy
+
+- The app only resolves URLs; it does not automate login or cookie handling.
+- The resolved URL is treated as untrusted; playback uses existing safeguards.
+
+## Alternatives considered
+
+- External yt-dlp dependency: rejected (not self-contained).
+- Browser-based extraction: rejected (too brittle).
+
+## Rollout / teardown plan
+
+1. Add bundling layout and helper script.
+2. Add backend command and UI input.
+3. Add docs for building the bundled runtime.
+
+Teardown: remove the command and UI input, keep HLS ingest via direct URLs.
diff --git a/evolution/proposals/ECP-0026-agplv3-license.md b/evolution/proposals/ECP-0026-agplv3-license.md
new file mode 100644
index 0000000..3daa239
--- /dev/null
+++ b/evolution/proposals/ECP-0026-agplv3-license.md
@@ -0,0 +1,28 @@
+# ECP-0026: adopt AGPLv3 licensing
+
+Status: Draft
+
+## Problem / context
+
+We want copyleft protections that apply to network use, ensuring improvements to the networked code path remain open.
+
+## Decision
+
+Adopt the GNU Affero General Public License v3.0 (AGPLv3) for the repository.
+
+## Details
+
+- Update workspace license metadata to `AGPL-3.0-only`.
+- Add a top-level `LICENSE` file with the full AGPLv3 text.
+
+## Alternatives considered
+
+- MIT/Apache-2.0: rejected (insufficient copyleft for network deployment).
+- GPLv3: rejected (does not cover SaaS/network use).
+
+## Rollout / teardown plan
+
+1. Update license metadata + add LICENSE.
+2. Communicate licensing change in README or release notes.
+
+Teardown: supersede with a future ECP if the license changes again.
diff --git a/evolution/proposals/ECP-0027-unified-add-stream-flow.md b/evolution/proposals/ECP-0027-unified-add-stream-flow.md
new file mode 100644
index 0000000..34ad55f
--- /dev/null
+++ b/evolution/proposals/ECP-0027-unified-add-stream-flow.md
@@ -0,0 +1,60 @@
+# ECP-0027: unified add-stream flow (live-only, ytdlp options, persistence)
+
+Status: Draft
+
+## Problem / context
+
+We currently have separate add flows for HDHomeRun and yt-dlp. Users want a single “Add stream” entry point that accepts an IP/host or URL and handles detection automatically. The flow must reject non-live content, provide yt-dlp options when relevant, and persist manual entries across restarts.
+
+## Decision
+
+Introduce a unified add-stream flow with:
+
+- A single URL/host input in the UI.
+- A probe step that detects HDHomeRun, HLS, or yt-dlp sources.
+- Live-only enforcement for HLS and yt-dlp.
+- Optional yt-dlp format selection + live-from-start toggle before starting.
+- Unified persistence for all manual sources.
+- Stream list tags showing the source kind.
+
+## Details
+
+### Probe + add flow
+
+- New commands:
+  - `probe_stream` returns detection results and yt-dlp options (if needed).
+  - `add_stream` executes the resolved ingest path.
+- HDHomeRun detection is attempted for local/`.local` hosts or private IPs.
+- HLS detection is triggered for `.m3u8` URLs.
+- yt-dlp is used for remaining HTTP(S) URLs.
+
+### Live-only enforcement
+
+- HLS playlists with `#EXT-X-ENDLIST` or `#EXT-X-PLAYLIST-TYPE:VOD` are rejected.
+- yt-dlp sources require `is_live == true` or `live_status == "is_live"`.
+
+### Persistence
+
+- Replace `manual_hdhomerun.json` with `manual_sources.json`.
+- Each entry stores `kind`, `input`, and optional options (e.g. ytdlp format).
+- Legacy HDHomeRun hosts are migrated on load.
+
+### UI
+
+- One “Add stream” button + input.
+- If yt-dlp is detected, show format choices and “live from start” toggle before proceeding.
+- Channel list shows a source badge (e.g. `hdhr`, `ytdlp`, `hls`, `moq`).
+
+## Alternatives considered
+
+- Keep separate add buttons: rejected (clutters flow).
+- Allow VOD: rejected (violates live-only requirement).
+
+## Rollout / teardown plan
+
+1. Add unified probe/add commands + detection logic in the backend.
+2. Update UI flow + add yt-dlp options panel.
+3. Persist manual sources and migrate legacy entries.
+4. Add source tags to stream list.
+
+Teardown: keep legacy add commands if needed; disable unified flow in UI.
diff --git a/evolution/proposals/ECP-0028-testing-and-coverage.md b/evolution/proposals/ECP-0028-testing-and-coverage.md
new file mode 100644
index 0000000..5af9fdd
--- /dev/null
+++ b/evolution/proposals/ECP-0028-testing-and-coverage.md
@@ -0,0 +1,86 @@
+# ECP-0028: test strategy + coverage gates
+
+Status: Draft
+
+## Problem / context
+
+every.channel is security and integrity sensitive. Before we scale ingestion and relaying, we need a test suite that makes protocol regressions obvious and makes junk injection difficult to accidentally enable.
+
+We also want coverage as a forcing function to keep logic in testable libraries, not buried in binaries or UI glue.
+
+## Decision
+
+Adopt a layered test strategy and a coverage gate:
+
+- **Unit tests** for pure logic (hashing, manifests, proofs, encryption, quotas, URL parsing).
+- **Integration tests** for cross-crate invariants (manifest <-> object meta compatibility, Merkle membership validation, catalog entry semantics).
+- **End to end tests** for “single node publish + subscribe” flows, with deterministic fixtures and explicit opt-in for tests that require external dependencies (ffmpeg headers, OS devices).
+
+Coverage goals are defined per layer:
+
+- `ec-core`, `ec-crypto`, `ec-moq`, `ec-iroh`, `ec-linux-iptv`: target **100% line coverage** (excluding third_party).
+- Node runner + Tauri backend: target **high coverage** for shared logic modules; binary-only glue may be excluded, but the glue must be minimal by policy.
+- UI: target **behavioral tests for state transitions** (not full DOM snapshots).
+
+## Tooling
+
+- Use `cargo llvm-cov` for coverage measurement.
+- Coverage is run per-crate and per-workspace in the nix dev shell so `ac-ffmpeg` can find ffmpeg headers.
+
+## Test matrix
+
+Unit tests (must be deterministic)
+
+- `ec-core`
+  - Manifest ID determinism and change sensitivity.
+  - Merkle root correctness.
+  - Merkle proof generation + verification (including tamper detection).
+- `ec-crypto`
+  - Stream key/nonce derivation determinism.
+  - Encrypt/decrypt roundtrip and mismatch failures.
+  - Manifest signature sign/verify and allowlist behavior.
+- `ec-moq`
+  - Object frame encode/decode roundtrip.
+  - Manifest frame encode/decode roundtrip.
+  - File relay sanitization stability.
+- `ec-iroh`
+  - Token bucket throttling/refill behavior (no sleeps).
+- `ec-linux-iptv`
+  - `channels.conf` parsing (unique/sorted, ignore comments).
+  - Default tune command construction.
+
+Integration tests (cross-crate invariants)
+
+- Manifest root validates object `chunk_hash` either by direct hash list or by Merkle proof.
+- Encrypted objects preserve integrity checks (hash is over plaintext).
+- Catalog entries carry manifest summaries consistently.
+
+End to end tests (opt-in / platform dependent)
+
+- `moq` publish/subscribe loopback tests with epoch manifests:
+  - publish N chunks, subscribe and verify acceptance/rejection paths.
+- Linux DVB discovery tests:
+  - run only when `/dev/dvb` exists; otherwise skip.
+
+## Policy implications
+
+- New protocol logic should land in libraries, not binaries.
+- Any feature that changes integrity behavior (hashing, proofs, signing, validation, quotas) must add tests proving:
+  - positive path (accept)
+  - negative path (reject)
+  - no panics on malformed inputs
+
+## Alternatives considered
+
+- “Only E2E tests”: rejected (slow and flaky).
+- “Only unit tests”: rejected (cross-crate breakages are likely).
+
+## Rollout / teardown
+
+1. Add unit tests to core crates until 100% coverage is achievable.
+2. Refactor binary logic into testable modules when coverage shows dead zones.
+3. Add integration tests for manifest and object invariants.
+4. Add opt-in E2E tests for ffmpeg and device-bound pipelines.
+
+Teardown: if llvm-cov becomes too costly locally, keep tests and make coverage gates advisory, but retain per-crate coverage reports.
+
diff --git a/evolution/proposals/ECP-0029-linux-dvb-auto-discovery.md b/evolution/proposals/ECP-0029-linux-dvb-auto-discovery.md
new file mode 100644
index 0000000..3d75ddb
--- /dev/null
+++ b/evolution/proposals/ECP-0029-linux-dvb-auto-discovery.md
@@ -0,0 +1,33 @@
+# ECP-0029: Linux DVB Auto-Discovery (Adapters and Channels)
+
+Status: Draft
+
+## Problem
+
+Linux DVB tuners should participate with minimal manual configuration. Requiring users to type `linux-dvb` and then fill out adapter, DVR, and channel options adds friction and hides available tuners from the "what can I watch right now" view.
+
+## Decision
+
+On Linux only:
+
+- Auto-discover local DVB adapters by enumerating `/dev/dvb/adapter*`.
+- If a `channels.conf` is available, auto-expose each channel as a selectable stream in the main Channels list without requiring Add Stream input.
+- Support an explicit `channels.conf` override via `EVERY_CHANNEL_DVB_CHANNELS_CONF` to keep discovery deterministic and testable.
+
+No scanning is introduced here. Auto-discovered channels come only from an existing `channels.conf`.
+
+## Details
+
+- Stream IDs use `StreamKey { source: linux-dvb, device_id: adapterX:dvrY, channel: <name> }` and remain a source-scope fallback until broadcast-scope IDs exist.
+- Tuning is performed via a `dvbv5-zap` command embedded into the `linux-dvb://` URL (same mechanism as the Linux DVB picker).
+
+## Consequences
+
+- Linux nodes show their tuner channels "by default" when they already have a `channels.conf`, improving discoverability.
+- Non-Linux builds remain unchanged (no `/dev/dvb`, no auto-listed Linux DVB streams).
+
+## Alternatives Considered
+
+- Full frequency scan (`dvbv5-scan`) on first run: rejected for now because it is slow, region-dependent, and hard to test deterministically.
+- ioctl-based tuning: deferred until we can validate behavior across real hardware.
+
diff --git a/evolution/proposals/ECP-0030-workspace-coverage-reporting.md b/evolution/proposals/ECP-0030-workspace-coverage-reporting.md
new file mode 100644
index 0000000..fd02043
--- /dev/null
+++ b/evolution/proposals/ECP-0030-workspace-coverage-reporting.md
@@ -0,0 +1,36 @@
+# ECP-0030: Workspace Coverage Reporting
+
+Status: Draft
+
+## Problem
+
+We want high-confidence changes across the entire codebase, not only the newest crates. Today, we have unit tests in a subset of crates and no standardized, reproducible, formal coverage artifact.
+
+## Decision
+
+- Adopt workspace-level coverage as a first-class artifact using `cargo-llvm-cov`.
+- Provide repeatable `just` commands that generate:
+  - LCOV (`tmp/coverage/workspace.lcov`)
+  - HTML report (`tmp/coverage/workspace-html/index.html`)
+  - A short summary (`tmp/coverage/workspace.summary.txt`)
+- Prefer running coverage via `nix develop` so `ac-ffmpeg` builds consistently (FFmpeg headers/libs present).
+
+## Details
+
+Commands:
+
+- `just test-workspace`
+- `just cov-workspace` / `just cov-workspace-html` (when `cargo llvm-cov` is available, typically inside `nix develop`)
+- `just cov-workspace-nix` / `just cov-workspace-html-nix` (self-contained, runs through `nix develop`)
+- `cargo llvm-cov -p ec-core -p ec-crypto -p ec-hdhomerun -p ec-iroh -p ec-linux-iptv -p ec-moq -p ec-ts` (unit-coverage subset that doesn't require FFmpeg headers)
+
+Coverage excludes:
+
+- `third_party/`
+- `target/`
+- `tmp/`
+
+## Consequences
+
+- Contributors can review regressions with an objective report, not only "tests passed".
+- Running coverage outside Nix may not work on macOS/Linux unless FFmpeg dev headers are installed; the Nix path is the canonical one.
diff --git a/evolution/proposals/ECP-0031-hdhr-e2e-test.md b/evolution/proposals/ECP-0031-hdhr-e2e-test.md
new file mode 100644
index 0000000..360610c
--- /dev/null
+++ b/evolution/proposals/ECP-0031-hdhr-e2e-test.md
@@ -0,0 +1,39 @@
+# ECP-0031: HDHomeRun End-to-End Test (Single Host, Two Nodes)
+
+Status: Draft
+
+## Problem
+
+We need a real end-to-end test that exercises the full ingestion and transport path against a real HDHomeRun on the LAN. Unit tests cover a lot of logic, but they cannot validate:
+
+- live TS ingest from the tuner
+- chunking on real packets
+- manifest creation/signing
+- stream encryption/decryption
+- MoQ publish/subscribe over QUIC between two nodes
+- subscriber verification and HLS write-out
+
+## Decision
+
+Add an ignored integration test that:
+
+- spawns `ec-node moq-publish hdhr ...` against a user-provided HDHomeRun host and channel
+- reads the publisher's printed endpoint addr, broadcast name, and track name
+- spawns `ec-node moq-subscribe ... --subscribe-manifests --require-manifest --network-secret ...`
+- asserts that the subscriber writes `index.m3u8` and at least one `segment_*` file
+
+The test is opt-in and runs only when environment variables are present:
+
+- `EVERY_CHANNEL_E2E_HDHR_HOST`
+- `EVERY_CHANNEL_E2E_HDHR_CHANNEL`
+
+## Details
+
+- Publisher uses `--publish-manifests --epoch-chunks 1 --network-secret <hex>`.
+- Subscriber uses `--require-manifest --max-invalid-chunks 0` to enforce verification.
+- A new subscriber flag `--stop-after N` allows deterministic termination.
+
+## Consequences
+
+- Local developers can validate true end-to-end behavior before sharing builds.
+- CI remains unaffected unless explicitly enabled.
diff --git a/evolution/proposals/ECP-0032-split-source-moq-mesh.md b/evolution/proposals/ECP-0032-split-source-moq-mesh.md
new file mode 100644
index 0000000..032f0c2
--- /dev/null
+++ b/evolution/proposals/ECP-0032-split-source-moq-mesh.md
@@ -0,0 +1,56 @@
+# ECP-0032: Split-Source MoQ Mesh (Manifests vs Objects)
+
+## Goal
+
+Prove that an every.channel stream can be served by multiple uncoordinated nodes without turning the system into a single dump-pipe.
+
+Minimum useful split:
+- One node acts as a leader/signer: publishes signed manifests (and optionally nothing else).
+- One or more nodes act as availability relays: publish chunk objects only.
+- A subscriber can fetch manifests from one peer and objects from another, enforcing manifest verification before accepting data.
+
+This is a stepping stone to broader swarming and anti-junk mechanics (ECP-0022).
+
+## Non-Goals
+
+- Full multi-source reconciliation between two independently captured live antennas.
+- DHT routing, relay selection, or peer scoring.
+- Byzantine consensus on manifests.
+
+## Design
+
+### CLI surface
+
+`ec-node moq-publish` gains:
+- `--publish-chunks=[true|false]` (default `true`): allow “manifests-only” publishers.
+- `--startup-delay-ms <ms>` (optional): test helper to delay ingest until subscribers connect.
+
+`ec-node moq-subscribe` gains:
+- `--remote-manifests <EndpointAddr>` (optional): fetch manifests from a different peer than objects.
+
+### Semantics
+
+- The subscriber enforces `--require-manifest` as before, but manifest lookup comes from `--remote-manifests` when provided.
+- Manifests remain the authority for object acceptance (hash match and/or Merkle proof).
+- Objects remain encrypted per stream id (no change).
+
+### E2E Test
+
+Add an ignored integration test that:
+1. Captures a short TS recording from a real HDHomeRun (duration query).
+2. Starts two publishers over the same broadcast:
+   - publisher A: `--publish-manifests --publish-chunks=false` (leader/signer)
+   - publisher B: `--publish-chunks=true` (objects only)
+3. Starts one subscriber using:
+   - `--remote` pointing at publisher B
+   - `--remote-manifests` pointing at publisher A
+   - `--subscribe-manifests --require-manifest`
+4. Asserts that HLS output is produced and the process exits via `--stop-after`.
+
+This verifies split-source compatibility and the “no manifests, no data” invariant in a multi-peer setting.
+
+## Rollout
+
+- Land CLI flags and the ignored E2E test.
+- Document running the E2E in `docs/USAGE.md`.
+- Future: extend to true multi-source live capture by aligning epochs and negotiating canonical chunk boundaries.
diff --git a/evolution/proposals/ECP-0033-x264-cmaf-fmp4.md b/evolution/proposals/ECP-0033-x264-cmaf-fmp4.md
new file mode 100644
index 0000000..ecaf86d
--- /dev/null
+++ b/evolution/proposals/ECP-0033-x264-cmaf-fmp4.md
@@ -0,0 +1,65 @@
+# ECP-0033: Deterministic x264 + CMAF(fMP4) Segment Mode
+
+## Summary
+
+Add an optional stream mode that publishes HLS-compatible CMAF-style fragmented MP4 segments (`.m4s`) encoded with single-threaded `libx264` + AAC, alongside a separate init segment (`init.mp4`). The init segment is published on a dedicated MoQ side-track so subscribers can start playback without out-of-band files.
+
+This is an incremental step toward a MoQ-native media pipeline while keeping browser playback practical via standard HLS fMP4 semantics.
+
+## Goals
+
+- Provide a "mature codec path" for experimentation: `libx264` + AAC.
+- Make output more browser-friendly than raw MPEG-TS while staying simple.
+- Preserve deterministic encoding constraints where feasible:
+  - single-threaded encoder
+  - `+bitexact` flags
+  - fixed GOP
+- Keep the change reversible:
+  - default remains raw TS chunk publication
+  - CMAF mode is opt-in via CLI
+
+## Non-Goals
+
+- Full CMAF compliance validation across players.
+- Multi-track audio language selection.
+- End-to-end determinism across independent antennas (this requires timebase normalization and additional constraints).
+- MoQ wire-level media standardization (that belongs in a later ECP).
+
+## Design
+
+- Publisher (`ec-node moq-publish`) adds `--encode {ts|cmaf}`.
+- In `cmaf` mode:
+  - ingest bytes from the source (TS file/HDHR/iptv adapter)
+  - invoke `ffmpeg` to encode and segment to HLS fMP4:
+    - writes `init.mp4` and `segment_%06d.m4s`
+  - publish:
+    - `init.mp4` as a single MoQ object on `--init-track` (default: `init`)
+    - `.m4s` segments as MoQ objects on the main track
+  - all MoQ tracks (objects, init, manifests) are created before the broadcast is published
+    to avoid implementation quirks where late-added tracks are not deliverable
+  - manifests remain per-epoch over the segment objects only (init is out-of-manifest for now)
+- Subscriber (`ec-node moq-subscribe`) adds:
+  - `--container {ts|cmaf}`
+  - `--subscribe-init` to fetch `init.mp4` from `--init-track`
+  - local output becomes:
+    - `index.m3u8` with `#EXT-X-MAP:URI="init.mp4"`
+    - `init.mp4`
+    - rolling window of `segment_*.m4s`
+
+## Rationale
+
+- fMP4 (CMAF-style) is broadly supported by modern HLS implementations and aligns with future MoQ media layouts.
+- `libx264` is stable and widely available, making it a pragmatic baseline for determinism experiments.
+- Publishing init as a side-track avoids special cases in the primary segment stream and keeps the UI/receiver model "a stream is a stream".
+
+## Risks
+
+- MP4 muxers can embed non-deterministic metadata (timestamps/brands). We mitigate by:
+  - `+bitexact` flags and single-threaded encoding
+  - stripping container metadata where feasible (future follow-up may be needed)
+- Segment boundaries are time-based and depend on timestamps/keyframes; cross-antenna byte equality is not guaranteed yet.
+
+## Rollout
+
+- Land CMAF mode behind `--encode cmaf` and `--container cmaf`.
+- Add an ignored HDHomeRun E2E test that exercises split-source mesh in CMAF mode.
diff --git a/evolution/proposals/ECP-0034-raw-cmaf-output.md b/evolution/proposals/ECP-0034-raw-cmaf-output.md
new file mode 100644
index 0000000..a71612f
--- /dev/null
+++ b/evolution/proposals/ECP-0034-raw-cmaf-output.md
@@ -0,0 +1,46 @@
+# ECP-0034: Raw CMAF Output (CMAF-First, Playlist-Optional)
+
+Status: Draft
+Author: Codex
+Reviewers: founder@every.channel
+Created: 2026-02-07
+
+## Decision
+
+Treat CMAF artifacts (init segment + fMP4 media fragments) as the canonical transport payload for low-latency video in every.channel.
+
+Add a subscriber option to write *raw CMAF* files to disk without generating an HLS playlist:
+
+- `ec-node moq-subscribe --container cmaf --subscribe-init --raw-cmaf`
+  - writes `init.mp4`
+  - writes `segment_%06d.m4s`
+
+HLS (and any other playlist formats) become optional *views* over those CMAF bytes, generated by a separate component when needed.
+
+## Motivation
+
+- CMAF is the common denominator for modern streaming and is the right level of abstraction for MoQ object transport.
+- Keeping the transport canonical at "init + fragments" avoids hard coupling the core to HLS/DASH playlist semantics.
+- Determinism experiments should focus on fragment bytes, not playlist formatting.
+
+## Scope
+
+In scope:
+- Raw CMAF sink for `ec-node moq-subscribe`.
+- Keep the existing HLS writer for local playback workflows.
+
+Out of scope:
+- MPEG-DASH support (explicitly not pursued here).
+- Browser-native playback pipeline (still expected to use a view layer like HLS/MSE).
+
+## Implementation Notes
+
+- `ec-node` already publishes CMAF init on a dedicated MoQ track (`init`) and publishes segments on the main chunks track.
+- `--raw-cmaf` is only valid with `--container cmaf` and errors otherwise.
+- Naming is stable and deterministic for tests and downstream proxies.
+
+## Reversibility
+
+- This change is additive and gated behind a flag.
+- If we later standardize a manifest-driven playlist format, `--raw-cmaf` can remain as a debug and interoperability mode.
+
diff --git a/evolution/proposals/ECP-0035-multi-variant-streams.md b/evolution/proposals/ECP-0035-multi-variant-streams.md
new file mode 100644
index 0000000..5d468a8
--- /dev/null
+++ b/evolution/proposals/ECP-0035-multi-variant-streams.md
@@ -0,0 +1,65 @@
+# ECP-0035: Multi-Variant Streams (Quality Pools)
+
+Status: Draft
+Author: Codex
+Reviewers: founder@every.channel
+Created: 2026-02-07
+
+## Decision
+
+Support multiple quality variants per logical channel/stream (bitrate, resolution, codec profile) by:
+
+- Encoding/publishing each variant as its own `StreamId` (using `StreamKey.variant`).
+- Advertising the variant set in the stream catalog so receivers can pick one (or switch).
+- Keeping the transport canonical at CMAF init + fMP4 fragments; playlists (HLS) are optional views.
+
+## Motivation
+
+- Scaling: low-bitrate variants are cheaper to relay and friendlier to mobile.
+- Interop: many origins already provide ABR ladders (HLS/DASH); we should preserve that structure.
+- Determinism experiments: variants bound the encoding parameters so byte-equivalence is testable.
+
+## Scope
+
+In scope:
+- Catalog representation for variants.
+- CLI/UI selection of a variant for playback/subscription.
+- Optional "encode ladder" mode for local sources (HDHR/DVB) using x264 in deterministic settings.
+
+Out of scope:
+- Full ABR switching heuristics.
+- Distributed, consensus-driven variant negotiation.
+
+## Proposed Data Model
+
+Add to `ec-core` (names illustrative):
+
+- `StreamVariant`:
+  - `variant_id` (string, stable, e.g. `v1-1080p2500k`)
+  - `stream_id` (StreamId)
+  - `codec` (e.g. `h264`)
+  - `container` (e.g. `cmaf/fmp4`)
+  - `width/height` (optional)
+  - `bitrate` (optional)
+  - `fps` (optional)
+  - `audio` (optional fields)
+
+Add to `StreamCatalogEntry`:
+
+- `variants: Vec<StreamVariant>` (optional; empty implies single-variant legacy)
+
+## Publishing Strategy
+
+- For live sources (HDHR/DVB): spawn one encoder per variant (separate ffmpeg processes initially).
+- For HLS origins with ABR: map each origin rendition to a variant and (initially) republish bytes as-is when possible.
+
+## Determinism Notes
+
+- Determinism is only expected within the same `variant_id` and encoder profile.
+- Single-threaded x264 settings remain the baseline deterministic profile for now.
+
+## Reversibility
+
+- This is additive to the catalog and backwards compatible (single-variant streams remain valid).
+- Variant publishing can be introduced incrementally per source type.
+
diff --git a/evolution/proposals/ECP-0036-multi-variant-manifests.md b/evolution/proposals/ECP-0036-multi-variant-manifests.md
new file mode 100644
index 0000000..ccd02a7
--- /dev/null
+++ b/evolution/proposals/ECP-0036-multi-variant-manifests.md
@@ -0,0 +1,72 @@
+# ECP-0036: Multi-Variant Manifests (One Epoch, Many Variants)
+
+Status: Draft
+Author: Codex
+Reviewers: founder@every.channel
+Created: 2026-02-07
+
+## Decision
+
+Extend `ec-core` manifests to optionally carry *multiple* variant hash-lists in a single signed manifest object.
+
+One manifest epoch can describe:
+
+- the "master" logical stream id (base)
+- N variants, each with:
+  - variant id
+  - variant stream id
+  - chunk index range
+  - per-chunk hashes
+  - per-variant merkle root
+
+Subscribers verify chunks by selecting the variant entry matching the chunk's `stream_id` (derived from encryption `key_id`).
+
+## Motivation
+
+- Quality pools (ABR ladders) need coordination: all variants should share epoch boundaries and be verifiable under one signed statement.
+- One manifest object per epoch reduces gossip/chattiness vs per-variant manifests.
+- Makes it easy to proxy to playlist-based views (HLS) without coupling the transport to playlists.
+
+## Data Model
+
+Add to `ec-core`:
+
+- `ManifestVariant` (new)
+  - `variant_id: String`
+  - `stream_id: StreamId`
+  - `chunk_start_index: u64`
+  - `total_chunks: u64`
+  - `merkle_root: String`
+  - `chunk_hashes: Vec<String>`
+  - `metadata: Vec<StreamMetadata>` (variant-specific; optional but useful)
+
+Extend `ManifestBody`:
+
+- `variants: Option<Vec<ManifestVariant>>`
+
+Rules:
+
+- Legacy manifests keep using `chunk_hashes` (single-variant).
+- Multi-variant manifests set `chunk_hashes` empty and populate `variants`.
+- `ManifestBody.merkle_root` becomes:
+  - legacy: merkle root of `chunk_hashes`
+  - multi-variant: merkle root of ordered `variants[].merkle_root` (sorted by `variant_id`)
+
+## Publishing
+
+- `ec-node moq-publish` can publish a CMAF ladder: one track per variant, one init track per variant.
+- After each epoch, publish a single manifest frame containing all variants' hashes for that epoch.
+
+## Subscribing
+
+- Subscriber requires manifests as today.
+- To validate a chunk:
+  - identify `stream_id` from `object.meta.encryption.key_id` (strip `/init` suffix if present)
+  - find a manifest in store that covers `(stream_id, chunk_index)`
+  - compare expected hash from the matching `ManifestVariant`.
+
+## Reversibility
+
+- Backwards compatible: old readers ignore `variants`, new readers accept both formats.
+- If later we move to per-variant manifests, we can keep multi-variant as an optimization.
+
diff --git a/evolution/proposals/ECP-0037-cross-os-determinism.md b/evolution/proposals/ECP-0037-cross-os-determinism.md
new file mode 100644
index 0000000..5ae4074
--- /dev/null
+++ b/evolution/proposals/ECP-0037-cross-os-determinism.md
@@ -0,0 +1,50 @@
+# ECP-0037: Cross-OS Determinism Testing (macOS + Linux)
+
+Status: Draft
+Author: Codex
+Reviewers: founder@every.channel
+Created: 2026-02-07
+
+## Decision
+
+Add an explicit cross-OS determinism test workflow for the CMAF ladder pipeline.
+
+We will treat the determinism target as:
+
+- identical output bytes for `init.mp4` and `segment_*.m4s` for the same synthetic input,
+- given the same ffmpeg/x264 build and the same every.channel version,
+- across macOS and Linux.
+
+## Motivation
+
+- Our core thesis depends on multiple independent nodes producing byte-identical artifacts.
+- Without automated cross-OS checks, determinism will silently regress.
+
+## Scope
+
+In scope:
+- Keep an ignored Rust test that produces a deterministic synthetic TS and verifies:
+  - bit-identical outputs across two runs on one host,
+  - keyframe alignment at segment boundaries.
+- Add a script that exports a canonical test input and compares outputs from two machines.
+
+Out of scope:
+- Perfect determinism across different ffmpeg/x264 versions.
+- Hardware encoder determinism.
+
+## Implementation
+
+- Local test: `crates/ec-node/tests/determinism_cmaf_ladder.rs`
+- Cross-OS procedure:
+  1. On macOS and Linux, run the same nix flake dev environment (pins ffmpeg).
+  2. Run `cargo test -p ec-node --test determinism_cmaf_ladder -- --ignored --nocapture`.
+  3. Emit a JSON summary of sha256s per variant (init + segments) into `tmp/determinism/<os>.json`.
+  4. Compare the JSON across OS.
+
+## Notes
+
+- Even with pinned ffmpeg, Apple vs Linux libc may still perturb behavior.
+- If cross-OS byte equality fails but in-host determinism holds, we can treat it as:
+  - still useful for availability (single-encoder determinism),
+  - but not sufficient for multi-source "same bytes" dedupe.
+
diff --git a/evolution/proposals/ECP-0038-share-links.md b/evolution/proposals/ECP-0038-share-links.md
new file mode 100644
index 0000000..906f56b
--- /dev/null
+++ b/evolution/proposals/ECP-0038-share-links.md
@@ -0,0 +1,58 @@
+# ECP-0038: Share Links (every.channel://watch) and UI Share Controls
+
+Status: Draft
+
+## Problem
+
+Sharing currently exposes a raw MoQ bundle (endpoint addr JSON, broadcast, track) which is copy/paste friendly for developers but awkward for regular users. We also need explicit UI controls for:
+
+- Sharing via a single link.
+- Sharing to nearby nodes (mDNS).
+- Sharing publicly (DHT address lookup), while still requiring explicit gossip bootstrap peers.
+
+## Decision
+
+Introduce a compact share link format:
+
+`every.channel://watch?...`
+
+and add UI affordances to copy and consume this link.
+
+The link is a convenience wrapper around existing MoQ parameters. No new trust model is introduced here.
+
+## Link Format (v1)
+
+Scheme and path:
+
+- `every.channel://watch`
+
+Query parameters:
+
+- `remote` (required): iroh `EndpointAddr` JSON string (or id-only string when discovery is enabled).
+- `broadcast` (required): MoQ broadcast name.
+- `track` (optional): MoQ track name (default remains `chunks` in the app).
+- `stream_id` (optional): key id override (rare; for debugging).
+- `secret` (optional): network secret hex (only when the publisher used one).
+- `discovery` (optional): comma-separated discovery modes, currently `mdns`, `dht`, `dns`.
+
+## UI (user-facing language)
+
+- Share card includes:
+  - Copyable share link.
+  - Copyable node id.
+- Viewer panel exposes:
+  - "Nearby (same Wi-Fi)"
+  - "Public (internet)"
+  - "Show in directory"
+  - optional "directory contacts" and "sharing key"
+- "Watch a link" accepts a share link and can parse it to fill hidden advanced fields.
+
+## Consequences
+
+- Sharing becomes one-string shareable without asking recipients to understand the underlying bundle structure.
+- Public announcements still require bootstrap peers; DHT only provides address lookup.
+
+## Follow-ups
+
+- Add an explicit public bootstrap peer list mechanism (governance-controlled).
+- Add optional signing of share links (identity binding) once stream signing is enforced.
diff --git a/evolution/proposals/ECP-0039-web-ia.md b/evolution/proposals/ECP-0039-web-ia.md
new file mode 100644
index 0000000..b300923
--- /dev/null
+++ b/evolution/proposals/ECP-0039-web-ia.md
@@ -0,0 +1,48 @@
+# ECP-0039: Web Site IA (minimal, warm) and Shared Language
+
+Status: Draft
+
+## Problem
+
+We need a friendly public entry point that explains:
+
+- What every.channel is.
+- How to watch (link-first).
+- How to find streams (directory).
+- How to participate (run a node).
+
+The current UI is app-shaped. The repo has `apps/web/` but no actual site yet.
+
+## Decision
+
+Add a minimal static site in `apps/web/` (Dioxus + Trunk) with a clear information architecture:
+
+- Watch
+- Directory
+- Participate
+- About
+
+Use plain language consistent with the app:
+
+- "Watch a link"
+- "Nearby (same Wi-Fi)"
+- "Public (internet)"
+- "Directory"
+- "Sharing key"
+
+## Design Notes
+
+- Clean and minimal, but warm.
+- A subtle nod to old TV (very light scanlines / glow).
+- No protocol terms in user-facing copy.
+
+## Consequences
+
+- Provides a coherent landing page and language baseline for the app.
+- The site is static and does not attempt to play streams in-browser yet.
+
+## Follow-ups
+
+- Add an install section once we have stable releases.
+- Add a real directory browsing UI when the gateway story is ready.
+
diff --git a/evolution/proposals/ECP-0040-ui-ia-polish.md b/evolution/proposals/ECP-0040-ui-ia-polish.md
new file mode 100644
index 0000000..fcaffb3
--- /dev/null
+++ b/evolution/proposals/ECP-0040-ui-ia-polish.md
@@ -0,0 +1,23 @@
+# ECP-0040: IA and Copy Alignment (Web + Desktop)
+
+## Why
+
+every.channel needs a consistent, friendly surface that does not require users to understand networking concepts. The same words should mean the same thing across the web site and the desktop app, and advanced details should stay out of the default path.
+
+## Decisions
+
+- Adopt plain-language labels across web + desktop.
+- Prefer a link-first flow for watching (paste a link; details optional).
+- Use "Devices" for tuners/adapters and "Now Playing" for the active viewer panel.
+- Describe DRM/conditional access as "Protected" (a user-facing expectation, not a technical claim).
+- Keep the design warm/minimal with a subtle "old TV" nod, but avoid kitsch.
+
+## Scope
+
+- Copy and layout tightening only (CSS, titles, labels).
+- No behavior changes to streaming, discovery, or sharing.
+
+## Reversibility
+
+Fully reversible: this proposal only changes UI strings and styling.
+
diff --git a/evolution/proposals/ECP-0041-cmaf-only.md b/evolution/proposals/ECP-0041-cmaf-only.md
new file mode 100644
index 0000000..db95d43
--- /dev/null
+++ b/evolution/proposals/ECP-0041-cmaf-only.md
@@ -0,0 +1,22 @@
+# ECP-0041: CMAF-Only Chunking (Canonical Container)
+
+## Why
+
+We want a single canonical chunk container so relays, caches, signatures, and verification can be consistent across sources. Multiple container codepaths (TS chunks, ad-hoc HLS, etc.) make determinism and validation harder, and complicate interop between ingest modules.
+
+## Decisions
+
+- The canonical chunk container is CMAF (fMP4): `init.mp4` plus numbered `segment_*.m4s`.
+- All ingest pipelines normalize into CMAF segments.
+- Legacy TS chunking is removed from the default pipeline.
+- HLS playlists may still be generated as a local playback compatibility artifact, but the network objects and manifests are CMAF segments.
+  - Implementation note: when publishing over a single object track (e.g. local file relay), we reserve chunk index `0` for `init.mp4` and start media segments at index `1` to avoid collisions.
+
+## Scope
+
+- `ec-node` and the desktop app converge on CMAF output.
+- Existing manifest + object hashing/signing remains, but now hashes refer to CMAF bytes.
+
+## Reversibility
+
+Medium. Reintroducing TS chunking later is possible behind a feature flag, but the default stays CMAF-only.
diff --git a/evolution/proposals/ECP-0042-variants-and-auto.md b/evolution/proposals/ECP-0042-variants-and-auto.md
new file mode 100644
index 0000000..6a657f9
--- /dev/null
+++ b/evolution/proposals/ECP-0042-variants-and-auto.md
@@ -0,0 +1,24 @@
+# ECP-0042: Multi-Variant Publishing and Automatic Selection
+
+## Why
+
+Different networks and devices need different bitrates/resolutions. A single stream quality forces either wasted bandwidth or playback stalls. We also need a consistent representation of variants so multiple peers can publish/verify the same logical channel.
+
+## Decisions
+
+- A "channel" may have multiple *variants* (e.g. `1080p`, `720p`, `480p`) produced from the same timing grid.
+- Manifests include per-variant metadata (resolution/bitrate) and per-variant chunk hashes for the same chunk index.
+- Viewers implement automatic selection:
+  - Prefer the highest variant that keeps steady playback.
+  - Step down quickly on sustained stalls; step up conservatively.
+- Where available, the desktop app may present variants via a master playlist so the platform player can do ABR; protocol objects remain per-variant CMAF.
+  - Initial implementation may subscribe to all variants concurrently and let the player switch locally. More efficient "switch by resubscribe" can come later.
+
+## Non-Goals (for this ECP)
+
+- Global policy/quotas/anti-junk (separate proposal).
+- Hardware encode determinism guarantees (separate proposal).
+
+## Reversibility
+
+High. Variant publishing and selection policies can evolve without breaking base single-variant streams.
diff --git a/evolution/proposals/ECP-0043-browser-webrtc-bridge.md b/evolution/proposals/ECP-0043-browser-webrtc-bridge.md
new file mode 100644
index 0000000..8d5b6ad
--- /dev/null
+++ b/evolution/proposals/ECP-0043-browser-webrtc-bridge.md
@@ -0,0 +1,31 @@
+# ECP-0043: Browser Participation via WebRTC DataChannel Bridge (Exploration)
+
+## Why
+
+Browsers cannot currently join the same QUIC-based transport stack directly (constraints around raw QUIC, UDP, and custom discovery). We still want web viewers and lightweight web relays to participate without central servers.
+
+## Proposal
+
+- Add an optional "browser bridge" transport implemented with WebRTC DataChannels.
+- A native node can act as a bridge:
+  - It speaks the native transport with other peers.
+  - It speaks WebRTC DataChannel with browsers.
+  - It forwards encrypted objects/manifests between the two worlds.
+- Signaling starts as manual copy/paste (offer/answer) to avoid a required central service.
+  - Later: directory-assisted rendezvous can be layered without changing the data plane.
+
+## Scope (initial)
+
+- Watch-only in browser (receive + play CMAF) using DataChannel + MSE.
+- Native bridge CLI command to generate offers / accept answers.
+
+## Open Questions
+
+- How to represent reachability in the directory without exposing protocol terms.
+- Rate limits and anti-junk enforcement at the bridge boundary.
+- Best-effort determinism when browsers become publishers (likely not guaranteed).
+
+## Reversibility
+
+High. WebRTC bridge is an adapter layer; core protocol stays unchanged.
+
diff --git a/evolution/proposals/ECP-0044-cloudflare-workers-static-site.md b/evolution/proposals/ECP-0044-cloudflare-workers-static-site.md
new file mode 100644
index 0000000..5bd35fa
--- /dev/null
+++ b/evolution/proposals/ECP-0044-cloudflare-workers-static-site.md
@@ -0,0 +1,34 @@
+# ECP-0044: Cloudflare Workers Static Site Deployment
+
+## Why
+
+We want a fast, globally cached, no-backend website at `every.channel` that:
+- serves the viewer UI (PWA-capable),
+- can be deployed reproducibly from this repo,
+- does not require a centralized application server.
+
+Cloudflare Workers + static Assets gives us:
+- global edge caching and TLS,
+- a simple deploy story (`wrangler deploy`),
+- the option to add small edge logic later (redirects, headers, SPA fallback).
+
+## Proposal
+
+- Treat `apps/tauri/ui` as the canonical website source (Dioxus web build).
+- Treat `apps/tauri/dist` as the deployment artifact.
+- Add a Cloudflare Worker project under `deploy/cloudflare-worker/` that serves `apps/tauri/dist`.
+- Implement SPA fallback: if an asset path 404s, serve `/index.html`.
+- Keep deployment logic in a script:
+  - build: `trunk build --release`
+  - deploy: `wrangler deploy`
+
+## Scope (initial)
+
+- One worker that only serves static assets + SPA fallback.
+- No API, no auth, no server-side state.
+- Domain mapping to `every.channel` is declared in `wrangler.toml` via Workers Custom Domains.
+  - This requires appropriate Cloudflare account permissions for `wrangler deploy` to attach the domain.
+
+## Reversibility
+
+High. The worker is a thin wrapper over static assets. We can migrate to Pages, another CDN, or self-hosted static with minimal changes.
diff --git a/evolution/proposals/ECP-0045-remote-website-e2e-direct.md b/evolution/proposals/ECP-0045-remote-website-e2e-direct.md
new file mode 100644
index 0000000..9d6680e
--- /dev/null
+++ b/evolution/proposals/ECP-0045-remote-website-e2e-direct.md
@@ -0,0 +1,35 @@
+# ECP-0045: Remote Website E2E Test Against Local Direct Publisher
+
+## Why
+
+We ship a static website at `every.channel`, but the critical path is still end-to-end playback:
+- a local node publishes a live CMAF stream, and
+- the deployed website can connect and play it.
+
+Unit tests and local trunk builds do not validate this “real site + real browser engine” path.
+
+## Proposal
+
+Add an ignored, automated E2E harness that (on macOS using installed Chrome):
+1. Generates a short deterministic A/V MPEG-TS fixture (ffmpeg lavfi).
+2. Starts `ec-node direct-publish` locally and captures the offer link.
+3. Launches headless Chrome via DevTools and opens `https://every.channel`.
+4. Pastes the offer link into the UI, triggers “Parse link” and “Tune in”.
+5. Extracts the reply link from the UI and feeds it back to the publisher stdin.
+6. Asserts the website transitions to “Live” and a `<video>` element is present with a `blob:` src.
+
+This validates:
+- deployed asset correctness,
+- the web WebRTC answerer path,
+- MSE append and playback wiring,
+- the direct publisher output framing.
+
+## Scope (initial)
+
+- Rust E2E test using a headless Chrome DevTools client, marked `#[ignore]`.
+- Runs in `nix develop` to ensure `ffmpeg` and `cargo` exist; uses the system Chrome app on macOS.
+- Default `SITE_URL=https://every.channel`, overridable for staging.
+
+## Reversibility
+
+High. The harness is external to core codepaths and can be removed without protocol impact.
diff --git a/evolution/proposals/ECP-0046-web-directory-and-signaling.md b/evolution/proposals/ECP-0046-web-directory-and-signaling.md
new file mode 100644
index 0000000..b5c0c2e
--- /dev/null
+++ b/evolution/proposals/ECP-0046-web-directory-and-signaling.md
@@ -0,0 +1,49 @@
+# ECP-0046: Web Directory + WebRTC Signaling via Workers (Interim)
+
+## Why
+
+The deployed website at `every.channel` is static and cannot yet join the QUIC/MoQ mesh directly.
+We still need a practical way for web viewers to:
+- see a global list of available live channels, and
+- connect to one without manual copy/paste.
+
+Browsers do support WebRTC DataChannels. We already use them as a bridge transport (ECP-0043),
+but we need a rendezvous mechanism for offers/answers and a directory that the website can query.
+
+## Proposal
+
+Add a small `/api/*` surface to the existing Cloudflare Worker (same origin as the website):
+- `/api/directory` (GET): list announced live channels (short TTL).
+- `/api/announce` (POST): publish a channel entry `{stream_id,title,offer}` with a TTL.
+- `/api/answer` (POST/GET): store and retrieve WebRTC answers for a given `stream_id`.
+
+Add an `ec-node` mode that:
+- creates a WebRTC offer,
+- announces it to `/api/announce`,
+- polls `/api/answer?stream_id=...` until a browser answers,
+- streams CMAF objects once connected.
+
+Update the website UI to:
+- fetch `/api/directory`,
+- show a global list with a basic liveness heuristic (TTL),
+- on selection, generate a WebRTC answer and POST it to `/api/answer`.
+
+## Notes / Risks
+
+- This is intentionally **centralized** for discovery/signaling. Data still flows P2P once connected.
+- Answers are treated as **one-shot** (first reader consumes) since one WebRTC offer maps to one peer connection.
+- Entries and answers are aggressively TTL'd and size-capped; this is not a spam-resistant directory.
+- Anti-junk / rate limiting / signing is not implemented in this ECP; it must be addressed before
+  relying on this API for open public use.
+- This does not replace the long-term goal of native MoQ mesh discovery.
+
+## Deployment Notes
+
+- Cloudflare requires a `workers.dev` subdomain to be created for the account even if we only use custom domains.
+  If `wrangler deploy` fails with code `10063`, open the Workers landing page once in the Cloudflare dashboard,
+  then retry deploy.
+
+## Reversibility
+
+High. The API is an interim adapter to bridge web constraints. It can be removed or replaced by
+decentralized rendezvous without changing the core stream objects.
diff --git a/evolution/proposals/ECP-0047-coverage-reporting.md b/evolution/proposals/ECP-0047-coverage-reporting.md
new file mode 100644
index 0000000..7829cb9
--- /dev/null
+++ b/evolution/proposals/ECP-0047-coverage-reporting.md
@@ -0,0 +1,25 @@
+# ECP-0047: Coverage Reporting (cargo-llvm-cov)
+
+## Why
+
+We want high confidence in stream processing, transport, and cryptographic verification code.
+That requires:
+- repeatable coverage measurement, and
+- a visible baseline so we can drive coverage up without guessing.
+
+## Proposal
+
+Adopt `cargo llvm-cov` as the canonical Rust coverage tool in this repo (already provided by `flake.nix`).
+
+Add:
+- `scripts/coverage.sh` to generate an HTML report and write a summary table to `tmp/coverage/summary.txt`.
+
+Notes:
+- `#[ignore]` E2E tests are excluded by default and do not contribute to coverage.
+- We will expand unit and non-ignored integration tests in the crates that matter most for correctness
+  (chunk framing, manifest validation, encryption, ingest adapters).
+
+## Reversibility
+
+High. This adds a script and a convention; it does not change runtime behavior.
+
diff --git a/evolution/proposals/ECP-0048-bootstrap-api-via-containers.md b/evolution/proposals/ECP-0048-bootstrap-api-via-containers.md
new file mode 100644
index 0000000..c770736
--- /dev/null
+++ b/evolution/proposals/ECP-0048-bootstrap-api-via-containers.md
@@ -0,0 +1,36 @@
+# ECP-0048: Bootstrap WebRTC Directory API via Cloudflare Containers
+
+## Why
+
+The website at `every.channel` is static, but we still need a minimal rendezvous surface so browsers can:
+- see a public list of live streams, and
+- exchange WebRTC offers/answers without copy/paste.
+
+We already have a `/api/*` shape (ECP-0046). The intent is explicitly limited: **bootstrap WebRTC only**.
+
+Using a Container lets us serve those endpoints from a normal Rust HTTP server (portable, no Workers-specific runtime),
+while keeping the main site static and keeping the surface area small.
+
+## Proposal
+
+Keep the public `/api/*` endpoints, but implement them as:
+- a single named Cloudflare Container instance (`global`) running a tiny Rust server; and
+- a Worker Durable Object wrapper (implemented via `@cloudflare/containers`) that forwards `/api/*` requests into the container on port `8080`.
+
+Endpoints (unchanged):
+- `GET /api/health`
+- `GET /api/directory`
+- `POST /api/announce` `{stream_id,title,offer,expires_ms?}`
+- `POST /api/answer` `{stream_id,answer}`
+- `GET /api/answer?stream_id=...` (one-shot consume)
+
+Constraints:
+- TTL + size caps.
+- No additional API endpoints.
+- Container internet egress disabled.
+- This is not spam-resistant or censorship-resistant; it is an interim bootstrap.
+
+## Reversibility
+
+High. The website and node code depend on the `/api/*` shape, not the backing implementation.
+We can replace this with a decentralized rendezvous or native browser transport later.
diff --git a/evolution/proposals/ECP-0049-ts-ingest-cmaf-canonical.md b/evolution/proposals/ECP-0049-ts-ingest-cmaf-canonical.md
new file mode 100644
index 0000000..a0f5e00
--- /dev/null
+++ b/evolution/proposals/ECP-0049-ts-ingest-cmaf-canonical.md
@@ -0,0 +1,28 @@
+# ECP-0049: TS Ingest, CMAF Canonical (Enforcement)
+
+## Why
+
+HDHomeRun (and many tuner stacks) output MPEG-TS. We still want first-class, native ingest of TS sources.
+
+Separately, the network needs a single canonical chunk container so that hashing, signing, verification, relaying,
+and multi-variant manifests stay consistent. That canonical container is CMAF (fMP4).
+
+This ECP clarifies the boundary so "CMAF-only" does not get misread as "no TS support".
+
+## Decisions
+
+- TS is an **ingest input** format.
+- CMAF (fMP4) is the **only** on-disk and on-wire chunk container inside every.channel:
+  - `init.mp4` + `segment_*.m4s`
+- HLS playlists (`index.m3u8`) are allowed only as a **local playback compatibility artifact**.
+  - They must reference the CMAF fragments above; playlists are not network objects.
+
+## Implementation Notes
+
+- `ec-node ingest hdhr|linux-dvb|ts|hls` reads whatever the source provides and normalizes to CMAF fragments.
+- `ec-moq::HlsWriter` is CMAF-only (no TS segment writer).
+
+## Reversibility
+
+Medium. Reintroducing TS chunks later would require explicit opt-in and a new manifest/object mode, but the default remains CMAF.
+
diff --git a/evolution/proposals/ECP-0050-delete-ts-chunk-cli.md b/evolution/proposals/ECP-0050-delete-ts-chunk-cli.md
new file mode 100644
index 0000000..11cca11
--- /dev/null
+++ b/evolution/proposals/ECP-0050-delete-ts-chunk-cli.md
@@ -0,0 +1,22 @@
+# ECP-0050: Delete `ts-chunk` CLI Command
+
+## Why
+
+`ts-chunk` produces and persists TS chunks, which violates the CMAF-canonical constraint (ECP-0041, ECP-0049).
+We want fewer codepaths that accidentally become "real" over time.
+
+If we need to debug TS timing, we keep `ts-sync` (analysis) and `stream-dump` (capture), but we do not keep a TS
+chunking/publishing workflow.
+
+## Decision
+
+- Remove the `every.channel ts-chunk` command from `ec-cli`.
+
+## Scope
+
+- CLI surface only. Node ingest still supports TS as an input format.
+
+## Reversibility
+
+High. We can reintroduce a debugging tool later behind an explicit non-default feature flag if needed.
+
diff --git a/evolution/proposals/ECP-0051-direct-publish-answer-timeout.md b/evolution/proposals/ECP-0051-direct-publish-answer-timeout.md
new file mode 100644
index 0000000..b7ba97f
--- /dev/null
+++ b/evolution/proposals/ECP-0051-direct-publish-answer-timeout.md
@@ -0,0 +1,17 @@
+# ECP-0051: Direct Publish Answer Timeout Control
+
+## Why
+
+`ec-node direct-publish` is used for "send a link to someone and have them connect later".
+A hard-coded short answer timeout makes this brittle and fails the "works for mom" usability bar.
+
+## Decision
+
+- Add `--answer-timeout-secs` to `ec-node direct-publish`.
+- Default: 900 seconds (15 minutes).
+- `0` means wait indefinitely.
+
+## Reversibility
+
+High. CLI-only behavior change.
+
diff --git a/evolution/proposals/ECP-0052-direct-subscribe-cli.md b/evolution/proposals/ECP-0052-direct-subscribe-cli.md
new file mode 100644
index 0000000..62a291f
--- /dev/null
+++ b/evolution/proposals/ECP-0052-direct-subscribe-cli.md
@@ -0,0 +1,47 @@
+# ECP-0052: Direct Subscribe CLI (WebRTC Directory Mode)
+
+Status: Draft
+
+## Goal
+
+Allow a non-Tauri node to **subscribe** to a `direct-publish` stream using the same WebRTC data-channel protocol used by the website, so we can:
+
+- validate end-to-end connectivity (publisher -> every.channel bootstrap -> subscriber),
+- capture a short proof artifact (CMAF fragments and/or an `.mp4` remux),
+- debug issues without opening a browser.
+
+## Non-Goals
+
+- This is not MoQ transport.
+- This is not a long-lived relay/mesh node.
+- This does not implement signatures / merkle manifests / anti-junk policy.
+
+## Proposal
+
+Add a new `ec-node direct-subscribe` command that:
+
+1. Locates an offer either:
+   - from `--offer` (an `every.channel://direct?c=...` link), or
+   - from `--directory-url` + `--stream-id` (fetch `/api/directory`, find matching `stream_id`).
+2. Creates a WebRTC *answerer* connection using `just-webrtc` (`SimpleRemotePeerConnection`).
+3. If operating via directory:
+   - POSTs the answer to `/api/answer` with `{ stream_id, answer }`.
+4. Receives object frames on the data channel, decodes via `ec-moq::decode_object_frame`,
+   and writes CMAF artifacts to disk:
+   - `cmaf/init.mp4`
+   - `cmaf/segment_000000.m4s` ... `cmaf/segment_XXXXXX.m4s`
+   - `cmaf/index.m3u8` (VOD playlist, `#EXT-X-ENDLIST`)
+5. Optionally remuxes the captured playlist to an `.mp4` using `ffmpeg -c copy`.
+
+## Why Now
+
+We need a reproducible harness to verify:
+
+- a remote publisher (e.g. a node near an HDHomeRun) can be watched from a distant network,
+- directory announcement/answer flow works without manual copy/paste,
+- received CMAF fragments are valid enough to remux and play.
+
+## Rollout / Reversibility
+
+- Additive CLI only; no protocol changes.
+- Can be removed without affecting existing publish/web paths.
diff --git a/evolution/proposals/ECP-0053-direct-wire-framing.md b/evolution/proposals/ECP-0053-direct-wire-framing.md
new file mode 100644
index 0000000..de035c8
--- /dev/null
+++ b/evolution/proposals/ECP-0053-direct-wire-framing.md
@@ -0,0 +1,49 @@
+# ECP-0053: Direct WebRTC Wire Framing (Chunked Frames)
+
+Status: Draft
+
+## Problem
+
+`direct-publish` currently sends each CMAF object (init or `.m4s` fragment) as a single WebRTC
+data-channel message (`encode_object_frame(meta, data)`).
+
+Real OTA CMAF fragments routinely exceed typical data-channel maximum message sizes, causing
+runtime failure like:
+
+- `Error: outbound packet larger than maximum message size`
+
+This blocks real-world HDHomeRun end-to-end streaming via `https://every.channel`.
+
+## Goal
+
+Make direct WebRTC transport robust by supporting large objects while keeping:
+
+- ordered delivery,
+- simple decoding in the website and CLI,
+- no additional servers beyond the existing bootstrap API.
+
+## Proposal
+
+Define a minimal application-layer framing over WebRTC data-channel messages:
+
+- Each data-channel message begins with a 1-byte tag:
+  - `0x00`: legacy "whole object frame in one message" (optional compatibility)
+  - `0x01`: stream-chunk bytes (new default)
+- In `0x01` mode, bytes carry a length-prefixed stream:
+  - `[u32_be length][frame bytes]` repeated
+  - `frame bytes` are exactly the existing `encode_object_frame(meta, data)` output
+- Publishers MUST:
+  - use `0x01` mode,
+  - split the stream into safe message payloads (e.g. 16 KiB chunks)
+- Subscribers SHOULD:
+  - accept both `0x01` and `0x00` to ease rollout.
+
+## Rollout
+
+- Update `ec-node direct-publish`, the website receiver, and `ec-node direct-subscribe`.
+- Redeploy static site assets; bootstrap API unchanged.
+
+## Reversibility
+
+- The change is localized to `direct-*` and can be removed or replaced without touching MoQ.
+
diff --git a/evolution/proposals/ECP-0054-remote-website-watch-e2e.md b/evolution/proposals/ECP-0054-remote-website-watch-e2e.md
new file mode 100644
index 0000000..e7efcc1
--- /dev/null
+++ b/evolution/proposals/ECP-0054-remote-website-watch-e2e.md
@@ -0,0 +1,23 @@
+# ECP-0054: Remote Website E2E (Watch Existing Stream)
+
+Status: Draft
+
+## Goal
+
+Add an ignored E2E test that validates the deployed `https://every.channel` website can:
+
+- fetch the public directory,
+- select a specific `stream_id`,
+- establish a WebRTC connection,
+- start playback (video element `src` becomes `blob:`).
+
+This is complementary to existing remote-site tests that spawn a *local* publisher.
+
+## Proposal
+
+Add `crates/ec-node/tests/e2e_remote_website_watch_existing.rs`:
+
+- reads `EVERY_CHANNEL_STREAM_ID` (required),
+- opens `EVERY_CHANNEL_SITE_URL` (default `https://every.channel/`),
+- clicks refresh, clicks Watch on the matching listing, waits for blob video.
+
diff --git a/evolution/proposals/ECP-0055-directory-timeouts.md b/evolution/proposals/ECP-0055-directory-timeouts.md
new file mode 100644
index 0000000..b3b0082
--- /dev/null
+++ b/evolution/proposals/ECP-0055-directory-timeouts.md
@@ -0,0 +1,17 @@
+# ECP-0055: Directory HTTP Timeouts For Direct-Publish
+
+Status: Draft
+
+## Problem
+
+`ec-node direct-publish` keeps directory listings alive by periodically POSTing to `/api/announce`.
+If a single refresh POST hangs indefinitely (no client timeout), the refresh loop can stall and the
+listing expires, making streams undiscoverable.
+
+## Proposal
+
+- Build a `reqwest::Client` with a small default timeout (e.g. 8s) for directory operations.
+- Wrap periodic refresh POSTs in an additional short `tokio::time::timeout` guard.
+
+This keeps directory liveness resilient under intermittent connectivity.
+
diff --git a/evolution/proposals/ECP-0056-turn-ice-bootstrap.md b/evolution/proposals/ECP-0056-turn-ice-bootstrap.md
new file mode 100644
index 0000000..7bb136e
--- /dev/null
+++ b/evolution/proposals/ECP-0056-turn-ice-bootstrap.md
@@ -0,0 +1,38 @@
+# ECP-0056: TURN ICE Bootstrap Endpoint
+
+Status: Draft
+
+## Problem
+
+WebRTC connectivity is unreliable across diverse NAT / firewall environments when we rely only on
+public STUN servers. For "send a link to mom" reliability, viewers need TURN available.
+
+We also need a single, stable place for the web app and native CLI to fetch ICE server config
+without exposing implementation details in the UI.
+
+## Proposal
+
+- Add `GET /api/turn` on `every.channel`.
+- Response returns a `just-webrtc` compatible `PeerConfiguration` subset:
+  - `ice_servers`: array of STUN/TURN servers.
+- Default behavior:
+  - Always include STUN servers (Cloudflare STUN + Google STUN fallback).
+  - If a TURN shared secret is configured in the Worker environment, also include TURN servers
+    with short-lived credentials generated via the TURN REST pattern (HMAC-based).
+
+This keeps the container DO offline (`enableInternet=false`) and centralizes "how to TURN" in the
+Worker, while clients remain generic.
+
+## Security / Abuse Notes
+
+- TURN credentials are short-lived (hour-scale) and only usable against the TURN provider.
+- We do not log or persist TURN credentials.
+- The shared secret is stored as a Worker secret (not in git).
+
+## Rollout
+
+1. Deploy Worker with `/api/turn`.
+2. Update web viewer + `ec-node` direct publish/subscribe to fetch and use `/api/turn`.
+3. If/when Cloudflare Calls TURN keys are enabled for the account, store the Calls TURN key as the
+   shared secret in the Worker and turn on TURN at the edge.
+
diff --git a/evolution/proposals/ECP-0057-direct-publish-session-reconnect.md b/evolution/proposals/ECP-0057-direct-publish-session-reconnect.md
new file mode 100644
index 0000000..0008c27
--- /dev/null
+++ b/evolution/proposals/ECP-0057-direct-publish-session-reconnect.md
@@ -0,0 +1,34 @@
+# ECP-0057: Direct-Publish Session Reconnect + Busy Listing Semantics
+
+Status: Draft
+
+## Problem
+
+`ec-node direct-publish` (direct WebRTC + CMAF over DataChannel) is currently a 1:1 stream.
+
+Two concrete issues hurt reliability:
+
+1. Directory entries can remain visible while a session is already connected, causing new viewers to
+   click "Watch" and silently fail.
+2. If a viewer disconnects (reload, laptop sleeps, etc), the publisher has no way to accept a new
+   viewer without restarting the process.
+
+## Proposal
+
+- Make `direct-publish` a session loop:
+  - Create a fresh PeerConnection offer.
+  - Announce it to the directory.
+  - Wait for one answer.
+  - Stream until send fails / ffmpeg ends.
+  - Restart with a new offer.
+- Once a session is connected, stop refreshing announcements and quickly expire the directory entry
+  (so the directory reflects joinable streams only).
+
+This preserves the current 1:1 nature while making reconnection and "send a link" behavior much
+more robust.
+
+## Non-Goals (For Now)
+
+- True 1:many fanout / relaying for direct streams.
+- Multi-viewer, simultaneous subscriptions to the same publisher connection.
+
diff --git a/evolution/proposals/ECP-0058-ws-relay-one-to-many-bootstrap.md b/evolution/proposals/ECP-0058-ws-relay-one-to-many-bootstrap.md
new file mode 100644
index 0000000..ba70154
--- /dev/null
+++ b/evolution/proposals/ECP-0058-ws-relay-one-to-many-bootstrap.md
@@ -0,0 +1,76 @@
+# ECP-0058: One-to-Many Web Bootstrap via Stream Relay DO (WebSocket)
+
+Status: Draft
+
+## Problem
+
+Our initial web viewer path used a direct WebRTC data channel between publisher and viewer.
+That path is fundamentally 1:1: once one viewer consumes the offer/answer, additional viewers
+cannot join, which breaks the "send a link to mom" requirement and contradicts the project's
+one-to-many goal.
+
+TURN improves NAT traversal but does not change the 1:1 nature of WebRTC offers/answers.
+
+We need a bootstrap path that:
+- is one-to-many by construction
+- works in a normal browser without plugins
+- carries the same CMAF object stream the native pipeline already produces
+- remains obviously replaceable by MoQ/WebTransport later (no long-term lock-in)
+
+## Proposal
+
+Add a per-stream fanout relay implemented as a Durable Object:
+
+- `GET /api/stream/ws?stream_id=<id>&role=sub|pub`
+  - Upgrades to a WebSocket.
+  - `role=pub` registers a single publisher for the stream.
+  - `role=sub` registers a subscriber.
+
+Publisher behavior:
+- Connect once to the relay DO (`role=pub`).
+- Send the CMAF object stream as "direct-wire" chunked messages (same framing as the existing
+  WebRTC direct path).
+- Continue to refresh the directory listing while publishing (multiple viewers are supported).
+
+Subscriber behavior:
+- Connect to the relay DO (`role=sub`).
+- Receive the live message stream.
+- On connect, receive a buffered init segment (`chunk_index=0`) plus a small ring buffer of recent
+  segments so playback can start immediately.
+
+Web app behavior:
+- The global live list (`/api/directory`) remains the discovery surface.
+- "Watch" connects by `stream_id` to the relay websocket and plays via MSE.
+
+## Wire Framing
+
+We reuse the existing "direct-wire" message format:
+
+- Each WebSocket message is binary and begins with a 1-byte tag:
+  - `0x01` = STREAM chunk (payload is a slice of `[u32be frame_len][frame_bytes...]`)
+  - `0x00` = FRAME (optional; not required)
+  - `0x02` = PING (ignored)
+- `frame_bytes` is `ec-moq::encode_object_frame(meta_json, data)`:
+  - `[u32be meta_len][meta_json_bytes][data_bytes...]`
+
+The relay DO decodes publisher STREAM chunks into frames only for buffering (to identify init vs
+segments). For live fanout, it forwards publisher messages to subscribers as-is.
+
+## Limits / Abuse Notes
+
+This is not spam-resistant. It is a bootstrap relay.
+
+Defensive bounds:
+- Buffer only `init` plus the last N segments (currently 12) per stream DO.
+- If publisher reassembly buffer grows beyond a few MiB (garbage input), reset it.
+
+Future ECPs cover signatures/manifests/merkle/anti-junk.
+
+## Rollout
+
+1. Deploy Worker changes:
+   - add Durable Object binding/class `StreamRelayDO`
+   - route `/api/stream/ws` to it
+2. Add `ec-node ws-publish` / `ec-node ws-subscribe`.
+3. Update the web viewer to prefer the relay path for global watching.
+
diff --git a/evolution/proposals/ECP-0059-bootstrap-api-durable-object.md b/evolution/proposals/ECP-0059-bootstrap-api-durable-object.md
new file mode 100644
index 0000000..d474d03
--- /dev/null
+++ b/evolution/proposals/ECP-0059-bootstrap-api-durable-object.md
@@ -0,0 +1,51 @@
+# ECP-0059: Bootstrap API as Durable Object (No Containers)
+
+Status: Draft
+
+## Goal
+
+Keep `https://every.channel` deployable with the smallest possible Cloudflare surface area while still supporting:
+
+- a global "directory" of live offers (short-lived),
+- one-shot answers for WebRTC rendezvous,
+- no secrets in-repo (use Forgejo/CI secrets),
+- minimal operational dependencies (avoid Docker/containers for deploy).
+
+## Non-Goals
+
+- This is not a long-term global index.
+- This is not spam-resistant.
+- This is not the eventual mesh transport (MoQ / iroh / etc).
+
+## Proposal
+
+Replace the Cloudflare Containers-backed bootstrap API (ECP-0048) with a single Durable Object class:
+
+- `EcApiContainer` remains the binding name for compatibility, but becomes a standard Durable Object.
+- The Worker routes `/api/*` to a single instance name `"global"`.
+
+Endpoints (unchanged):
+
+- `GET /api/health` -> `{ ok: true }`
+- `GET /api/directory` -> `{ now_ms, entries[] }` (sorted by recency)
+- `POST /api/announce` -> `{ ok, ttl_ms, entry }`
+- `POST /api/answer` -> `{ ok: true }`
+- `GET /api/answer?stream_id=...` -> one-shot answer (consumed on first read)
+
+State constraints:
+
+- Offers TTL clamped to `[5s, 60s]`
+- Answers TTL `~2m`
+- Hard caps: `<=200` offers, `<=500` answers (prune by recency)
+
+## Rationale
+
+Cloudflare Containers in CI adds Docker/build complexity and increases the number of moving parts.
+For a bootstrap rendezvous, a Durable Object is sufficient and simpler to deploy and audit.
+
+## Rollout / Reversibility
+
+- No UI changes required.
+- Keep existing durable object class name to avoid binding churn.
+- Reversible: we can reintroduce Containers later if justified by load/compute needs.
+
diff --git a/evolution/proposals/ECP-0060-repo-sanitization-and-authorship.md b/evolution/proposals/ECP-0060-repo-sanitization-and-authorship.md
new file mode 100644
index 0000000..cc58a76
--- /dev/null
+++ b/evolution/proposals/ECP-0060-repo-sanitization-and-authorship.md
@@ -0,0 +1,40 @@
+# ECP-0060: Repository Sanitization and Authorship Baseline
+
+Status: Draft
+
+## Goal
+
+Establish a privacy-safe public repository baseline:
+
+- remove accidental personal identifiers from the tree,
+- standardize commit authorship as `every.channel <founder@every.channel>`,
+- require SSH-signed commits and provide a verifiable allowed-signers file.
+
+## Non-Goals
+
+- This does not attempt to preserve detailed early commit history.
+- This does not define identity beyond commit signatures.
+
+## Proposal
+
+1. Sanitize the working tree:
+   - replace private LAN IP literals in tests with documentation IPs (RFC 5737),
+   - avoid location-specific examples in ECPs/docs.
+2. Configure SSH commit signing:
+   - `gpg.format = ssh`
+   - `commit.gpgsign = true`
+   - `gpg.ssh.allowedSignersFile = docs/allowed_signers`
+3. Rewrite history to a clean baseline:
+   - publish a new `main` history consisting of a small number of signed commits
+   - no private keys or tokens committed
+
+## Rationale
+
+This project is explicitly designed to be resilient and decentralized. That starts with a repository
+that does not leak personal identifiers and has a single, verifiable contributor identity.
+
+## Rollout / Reversibility
+
+- Tree sanitization is additive and low-risk.
+- History rewrite is disruptive but acceptable early; after the baseline, avoid rewrites.
+
diff --git a/evolution/proposals/README.md b/evolution/proposals/README.md
new file mode 100644
index 0000000..3d6a52c
--- /dev/null
+++ b/evolution/proposals/README.md
@@ -0,0 +1,9 @@
+# Proposals
+
+ECP (every.channel proposals) live here. Use a short, descriptive filename and include:
+
+- Problem statement
+- Constraints
+- Alternatives considered
+- Decision
+- Rollout/teardown plan
diff --git a/flake.lock b/flake.lock
new file mode 100644
index 0000000..6912c8f
--- /dev/null
+++ b/flake.lock
@@ -0,0 +1,96 @@
+{
+  "nodes": {
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1731533236,
+        "narHash": "sha256-l0KFg5HjrsfsO/JpG+r7fRrqm12kzFHyUHqHCVpMMbI=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "11707dc2f618dd54ca8739b309ec4fc024de578b",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1769789167,
+        "narHash": "sha256-kKB3bqYJU5nzYeIROI82Ef9VtTbu4uA3YydSk/Bioa8=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "62c8382960464ceb98ea593cb8321a2cf8f9e3e5",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "nixpkgs_2": {
+      "locked": {
+        "lastModified": 1744536153,
+        "narHash": "sha256-awS2zRgF4uTwrOKwwiJcByDzDOdo3Q1rPZbiHQg/N38=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "18dd725c29603f582cf1900e0d25f9f1063dbf11",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixpkgs-unstable",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": "nixpkgs",
+        "rust-overlay": "rust-overlay"
+      }
+    },
+    "rust-overlay": {
+      "inputs": {
+        "nixpkgs": "nixpkgs_2"
+      },
+      "locked": {
+        "lastModified": 1769915446,
+        "narHash": "sha256-f1F/umtX3ZD7fF9DHSloVHc0mnAT0ry0YK2jI/6E0aI=",
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "rev": "bc00300f010275e46feb3c3974df6587ff7b7808",
+        "type": "github"
+      },
+      "original": {
+        "owner": "oxalica",
+        "repo": "rust-overlay",
+        "type": "github"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/flake.nix b/flake.nix
new file mode 100644
index 0000000..5a5447f
--- /dev/null
+++ b/flake.nix
@@ -0,0 +1,87 @@
+{
+  description = "every.channel development environment";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-unstable";
+    flake-utils.url = "github:numtide/flake-utils";
+    rust-overlay.url = "github:oxalica/rust-overlay";
+  };
+
+  outputs = { self, nixpkgs, flake-utils, rust-overlay }:
+    flake-utils.lib.eachDefaultSystem (system:
+      let
+        pkgs = import nixpkgs {
+          inherit system;
+          overlays = [ (import rust-overlay) ];
+        };
+        rust = pkgs.rust-bin.stable.latest.default.override {
+          targets = [ "wasm32-unknown-unknown" ];
+        };
+        webkitgtk =
+          if pkgs ? webkitgtk_4_1 then pkgs.webkitgtk_4_1
+          else if pkgs ? webkitgtk_4_0 then pkgs.webkitgtk_4_0
+          else throw "nixpkgs is missing webkitgtk_4_1/webkitgtk_4_0 (required for tauri on Linux)";
+        linuxTauriDeps = with pkgs; [
+          gtk3
+          webkitgtk
+          librsvg
+          libappindicator
+          libsoup_3
+          glib
+          pango
+          gdk-pixbuf
+        ];
+      in
+      {
+        devShells.default = pkgs.mkShell {
+          buildInputs = with pkgs; [
+            rust
+            cargo
+            cargo-tauri
+            cargo-llvm-cov
+            llvmPackages.llvm
+            clang
+            pkg-config
+            openssl
+            ffmpeg
+            nodejs_22
+            nodePackages.wrangler
+            uv
+            git
+            just
+            cargo-watch
+            wasm-bindgen-cli
+            trunk
+          ] ++ lib.optionals stdenv.isLinux linuxTauriDeps;
+
+          shellHook = ''
+            export FFMPEG_INCLUDE_DIR=${pkgs.ffmpeg.dev}/include
+            export FFMPEG_LIB_DIR=${pkgs.ffmpeg.lib}/lib
+            export LLVM_COV=${pkgs.llvmPackages.llvm}/bin/llvm-cov
+            export LLVM_PROFDATA=${pkgs.llvmPackages.llvm}/bin/llvm-profdata
+          '';
+        };
+
+        # Minimal shell for headless publishers/relays (e.g. remote boxes).
+        # Avoid pulling in node/wrangler/trunk/tauri deps.
+        devShells.rust = pkgs.mkShell {
+          buildInputs = with pkgs; [
+            rust
+            cargo
+            llvmPackages.llvm
+            clang
+            pkg-config
+            openssl
+            ffmpeg
+            git
+          ];
+
+          shellHook = ''
+            export FFMPEG_INCLUDE_DIR=${pkgs.ffmpeg.dev}/include
+            export FFMPEG_LIB_DIR=${pkgs.ffmpeg.lib}/lib
+            export LLVM_COV=${pkgs.llvmPackages.llvm}/bin/llvm-cov
+            export LLVM_PROFDATA=${pkgs.llvmPackages.llvm}/bin/llvm-profdata
+          '';
+        };
+      });
+}
diff --git a/justfile b/justfile
new file mode 100644
index 0000000..4c6b8e3
--- /dev/null
+++ b/justfile
@@ -0,0 +1,48 @@
+set shell := ["bash", "-eu", "-o", "pipefail", "-c"]
+
+default:
+  @just --list
+
+test-core:
+  cargo test -p ec-core -p ec-crypto -p ec-moq -p ec-iroh -p ec-linux-iptv
+
+test-workspace:
+  cargo test --workspace
+
+cov-core:
+  mkdir -p tmp/coverage
+  cargo llvm-cov -p ec-core -p ec-crypto -p ec-moq -p ec-iroh -p ec-linux-iptv \
+    --ignore-filename-regex 'third_party|target' \
+    --lcov --output-path tmp/coverage/core.lcov
+
+cov-core-html:
+  mkdir -p tmp/coverage/html
+  cargo llvm-cov -p ec-core -p ec-crypto -p ec-moq -p ec-iroh -p ec-linux-iptv \
+    --ignore-filename-regex 'third_party|target' \
+    --html --output-dir tmp/coverage/html
+
+cov-workspace:
+  mkdir -p tmp/coverage
+  cargo llvm-cov --workspace \
+    --ignore-filename-regex 'third_party|target|tmp' \
+    --lcov --output-path tmp/coverage/workspace.lcov
+  ./scripts/coverage-summary.sh tmp/coverage/workspace.lcov > tmp/coverage/workspace.summary.txt
+
+cov-workspace-html:
+  mkdir -p tmp/coverage/workspace-html
+  cargo llvm-cov --workspace \
+    --ignore-filename-regex 'third_party|target|tmp' \
+    --html --output-dir tmp/coverage/workspace-html
+
+cov-workspace-nix:
+  mkdir -p tmp/coverage
+  nix develop --accept-flake-config -c cargo llvm-cov --workspace \
+    --ignore-filename-regex 'third_party|target|tmp' \
+    --lcov --output-path tmp/coverage/workspace.lcov
+  ./scripts/coverage-summary.sh tmp/coverage/workspace.lcov > tmp/coverage/workspace.summary.txt
+
+cov-workspace-html-nix:
+  mkdir -p tmp/coverage/workspace-html
+  nix develop --accept-flake-config -c cargo llvm-cov --workspace \
+    --ignore-filename-regex 'third_party|target|tmp' \
+    --html --output-dir tmp/coverage/workspace-html
diff --git a/scripts/build-web.sh b/scripts/build-web.sh
new file mode 100755
index 0000000..a73eda6
--- /dev/null
+++ b/scripts/build-web.sh
@@ -0,0 +1,10 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+# Trunk breaks if NO_COLOR is set to "1" in some environments.
+cd apps/tauri/ui
+exec nix develop --accept-flake-config -c env -u NO_COLOR trunk build --release --public-url /
+
diff --git a/scripts/coverage-summary.sh b/scripts/coverage-summary.sh
new file mode 100755
index 0000000..00cce06
--- /dev/null
+++ b/scripts/coverage-summary.sh
@@ -0,0 +1,23 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+lcov_path="${1:-}"
+if [[ -z "${lcov_path}" || ! -f "${lcov_path}" ]]; then
+  echo "usage: $0 <path/to/file.lcov>" >&2
+  exit 2
+fi
+
+# lcov format includes per-file LF (lines found) and LH (lines hit). Sum those.
+awk '
+  /^LF:/ { lf += substr($0, 4) }
+  /^LH:/ { lh += substr($0, 4) }
+  END {
+    if (lf == 0) {
+      printf("lines: 0/0 (0.00%%)\n")
+      exit 0
+    }
+    pct = (lh * 100.0) / lf
+    printf("lines: %d/%d (%.2f%%)\n", lh, lf, pct)
+  }
+' "${lcov_path}"
+
diff --git a/scripts/coverage.sh b/scripts/coverage.sh
new file mode 100755
index 0000000..0b26ee2
--- /dev/null
+++ b/scripts/coverage.sh
@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+out_dir="${root}/tmp/coverage"
+mkdir -p "${out_dir}"
+
+# Generates an HTML coverage report + a single-line summary.
+# (llvm-cov doesn't allow --summary-only together with --html, so we do LCOV + HTML.)
+exec nix develop --accept-flake-config -c bash -lc "
+  set -euo pipefail
+  cargo llvm-cov --workspace --lcov --output-path '${out_dir}/coverage.lcov'
+  '${root}/scripts/coverage-summary.sh' '${out_dir}/coverage.lcov' | tee '${out_dir}/summary.txt'
+  cargo llvm-cov --workspace --html --output-dir '${out_dir}/html'
+"
diff --git a/scripts/deploy-workers.sh b/scripts/deploy-workers.sh
new file mode 100755
index 0000000..6eef35b
--- /dev/null
+++ b/scripts/deploy-workers.sh
@@ -0,0 +1,30 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+# Load Cloudflare deploy credentials from the founder's Vault by default, but never commit secrets.
+# Override paths via EVERY_CHANNEL_CF_TOKEN_FILE / EVERY_CHANNEL_CF_ACCOUNT_FILE, or set env vars directly.
+token_file="${EVERY_CHANNEL_CF_TOKEN_FILE:-$HOME/Vault/Secrets/ecp-cf-token.txt}"
+account_file="${EVERY_CHANNEL_CF_ACCOUNT_FILE:-$HOME/Vault/Secrets/ecp-cf-account.txt}"
+
+if [[ -z "${CLOUDFLARE_API_TOKEN:-}" && -f "${token_file}" ]]; then
+  export CLOUDFLARE_API_TOKEN
+  CLOUDFLARE_API_TOKEN="$(cat "${token_file}")"
+fi
+
+if [[ -z "${CLOUDFLARE_ACCOUNT_ID:-}" && -f "${account_file}" ]]; then
+  export CLOUDFLARE_ACCOUNT_ID
+  CLOUDFLARE_ACCOUNT_ID="$(cat "${account_file}")"
+fi
+
+if [[ -z "${CLOUDFLARE_API_TOKEN:-}" ]]; then
+  echo "error: CLOUDFLARE_API_TOKEN is not set (set env var or provide ${token_file})" >&2
+  exit 2
+fi
+
+./scripts/build-web.sh
+
+cd deploy/cloudflare-worker
+exec nix develop --accept-flake-config -c bash -lc 'npm ci && wrangler deploy'
diff --git a/scripts/determinism-cmaf.sh b/scripts/determinism-cmaf.sh
new file mode 100755
index 0000000..c612794
--- /dev/null
+++ b/scripts/determinism-cmaf.sh
@@ -0,0 +1,108 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+input=""
+seconds="6"
+chunk_ms="2000"
+
+usage() {
+  cat >&2 <<'EOF'
+usage:
+  scripts/determinism-cmaf.sh --input <TS_FILE_OR_URL> [--seconds N] [--chunk-ms MS]
+
+what it does:
+  - runs the CMAF (HLS fMP4) encoder/segmenter twice with the deterministic x264 profile
+  - compares sha256 of init + segments to check byte-for-byte determinism
+
+notes:
+  - requires `ffmpeg` on PATH
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --input)
+      input="${2:-}"
+      shift 2
+      ;;
+    --seconds)
+      seconds="${2:-}"
+      shift 2
+      ;;
+    --chunk-ms)
+      chunk_ms="${2:-}"
+      shift 2
+      ;;
+    -h|--help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "error: unknown arg: $1" >&2
+      usage
+      exit 2
+      ;;
+  esac
+done
+
+if [[ -z "${input}" ]]; then
+  echo "error: --input is required" >&2
+  usage
+  exit 2
+fi
+
+tmp="$(mktemp -d)"
+trap 'rm -rf "$tmp"' EXIT
+
+ts="$input"
+if [[ "${input}" == http://* || "${input}" == https://* ]]; then
+  ts="$tmp/in.ts"
+  ffmpeg -hide_banner -loglevel error -nostdin -y \
+    -t "${seconds}" -i "${input}" -c copy -f mpegts "${ts}"
+fi
+
+seg_secs="$(python3 - <<PY
+ms=int("${chunk_ms}")
+print(f"{ms/1000:.3f}")
+PY
+)"
+
+run_one() {
+  out="$1"
+  rm -rf "$out"
+  mkdir -p "$out"
+  (cd "$out" && ffmpeg -hide_banner -loglevel error -nostdin -y \
+    -i "pipe:0" \
+    -map 0:v:0 -map 0:a:0? -sn -dn -map_metadata -1 \
+    -c:v libx264 \
+    -c:a aac -b:a 128k -ac 2 -ar 48000 \
+    -pix_fmt yuv420p -g 60 -keyint_min 60 -sc_threshold 0 -bf 0 \
+    -threads 1 \
+    -fflags +bitexact -flags:v +bitexact -flags:a +bitexact \
+    -f hls \
+    -hls_time "${seg_secs}" \
+    -hls_list_size 0 \
+    -hls_segment_type fmp4 \
+    -hls_flags independent_segments \
+    -hls_fmp4_init_filename init.mp4 \
+    -hls_segment_filename segment_%06d.m4s \
+    index.m3u8 < "$ts")
+}
+
+run_one "$tmp/a"
+run_one "$tmp/b"
+
+(cd "$tmp/a" && shasum -a 256 init.mp4 segment_*.m4s | sort) > "$tmp/a.sha"
+(cd "$tmp/b" && shasum -a 256 init.mp4 segment_*.m4s | sort) > "$tmp/b.sha"
+
+if diff -u "$tmp/a.sha" "$tmp/b.sha" >/dev/null; then
+  echo "OK: deterministic (init + segments match)"
+else
+  echo "DIFF: non-deterministic output"
+  diff -u "$tmp/a.sha" "$tmp/b.sha" || true
+  exit 1
+fi
+
diff --git a/scripts/e2e-hdhr.sh b/scripts/e2e-hdhr.sh
new file mode 100755
index 0000000..a2a27e9
--- /dev/null
+++ b/scripts/e2e-hdhr.sh
@@ -0,0 +1,53 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+host="${EVERY_CHANNEL_E2E_HDHR_HOST:-}"
+channel="${EVERY_CHANNEL_E2E_HDHR_CHANNEL:-}"
+
+usage() {
+  cat >&2 <<'EOF'
+usage:
+  scripts/e2e-hdhr.sh --host <HDHR_HOST> --channel <CHANNEL>
+
+notes:
+  - runs inside `nix develop` so FFmpeg headers are present for ac-ffmpeg
+  - test is ignored by default; this script enables it
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --host)
+      host="${2:-}"
+      shift 2
+      ;;
+    --channel)
+      channel="${2:-}"
+      shift 2
+      ;;
+    -h|--help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "error: unknown arg: $1" >&2
+      usage
+      exit 2
+      ;;
+  esac
+done
+
+if [[ -z "${host}" || -z "${channel}" ]]; then
+  echo "error: --host and --channel are required" >&2
+  usage
+  exit 2
+fi
+
+export EVERY_CHANNEL_E2E_HDHR_HOST="${host}"
+export EVERY_CHANNEL_E2E_HDHR_CHANNEL="${channel}"
+
+nix develop --accept-flake-config -c \
+  bash -lc 'cargo test -p ec-node --test e2e_hdhr -- --ignored --nocapture'
diff --git a/scripts/e2e-mesh-split-cmaf.sh b/scripts/e2e-mesh-split-cmaf.sh
new file mode 100755
index 0000000..31fbef1
--- /dev/null
+++ b/scripts/e2e-mesh-split-cmaf.sh
@@ -0,0 +1,57 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+host="${EVERY_CHANNEL_E2E_HDHR_HOST:-}"
+channel="${EVERY_CHANNEL_E2E_HDHR_CHANNEL:-}"
+
+usage() {
+  cat >&2 <<'EOF'
+usage:
+  scripts/e2e-mesh-split-cmaf.sh --host <HDHR_HOST> --channel <CHANNEL>
+
+what it does:
+  - runs an ignored E2E test that publishes CMAF init+segments as objects from one peer
+  - publishes manifests from another peer
+  - subscriber stitches the two streams and enforces --require-manifest
+
+notes:
+  - runs inside `nix develop`
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --host)
+      host="${2:-}"
+      shift 2
+      ;;
+    --channel)
+      channel="${2:-}"
+      shift 2
+      ;;
+    -h|--help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "error: unknown arg: $1" >&2
+      usage
+      exit 2
+      ;;
+  esac
+done
+
+if [[ -z "${host}" || -z "${channel}" ]]; then
+  echo "error: --host and --channel are required" >&2
+  usage
+  exit 2
+fi
+
+export EVERY_CHANNEL_E2E_HDHR_HOST="${host}"
+export EVERY_CHANNEL_E2E_HDHR_CHANNEL="${channel}"
+
+nix develop --accept-flake-config -c \
+  bash -lc 'cargo test -p ec-node --test e2e_mesh_split_cmaf -- --ignored --nocapture'
diff --git a/scripts/e2e-mesh-split.sh b/scripts/e2e-mesh-split.sh
new file mode 100755
index 0000000..2151ab9
--- /dev/null
+++ b/scripts/e2e-mesh-split.sh
@@ -0,0 +1,56 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+host="${EVERY_CHANNEL_E2E_HDHR_HOST:-}"
+channel="${EVERY_CHANNEL_E2E_HDHR_CHANNEL:-}"
+
+usage() {
+  cat >&2 <<'EOF'
+usage:
+  scripts/e2e-mesh-split.sh --host <HDHR_HOST> --channel <CHANNEL>
+
+what it does:
+  - runs an ignored E2E test that publishes manifests from one peer and objects from another
+  - subscriber stitches the two streams and enforces --require-manifest
+
+notes:
+  - runs inside `nix develop` so FFmpeg headers are present for ac-ffmpeg
+EOF
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --host)
+      host="${2:-}"
+      shift 2
+      ;;
+    --channel)
+      channel="${2:-}"
+      shift 2
+      ;;
+    -h|--help)
+      usage
+      exit 0
+      ;;
+    *)
+      echo "error: unknown arg: $1" >&2
+      usage
+      exit 2
+      ;;
+  esac
+done
+
+if [[ -z "${host}" || -z "${channel}" ]]; then
+  echo "error: --host and --channel are required" >&2
+  usage
+  exit 2
+fi
+
+export EVERY_CHANNEL_E2E_HDHR_HOST="${host}"
+export EVERY_CHANNEL_E2E_HDHR_CHANNEL="${channel}"
+
+nix develop --accept-flake-config -c \
+  bash -lc 'cargo test -p ec-node --test e2e_mesh_split -- --ignored --nocapture'
diff --git a/scripts/e2e-remote-website-direct.sh b/scripts/e2e-remote-website-direct.sh
new file mode 100755
index 0000000..b0c68e0
--- /dev/null
+++ b/scripts/e2e-remote-website-direct.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+# Runs the ignored Rust E2E that drives https://every.channel via headless Chrome
+# and connects to a local `ec-node direct-publish` process.
+exec nix develop --accept-flake-config -c \
+  bash -lc 'cargo test -p ec-node --test e2e_remote_website_direct -- --ignored --nocapture'
+
diff --git a/scripts/e2e-remote-website-directory.sh b/scripts/e2e-remote-website-directory.sh
new file mode 100755
index 0000000..0e65d68
--- /dev/null
+++ b/scripts/e2e-remote-website-directory.sh
@@ -0,0 +1,11 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+root="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+cd "${root}"
+
+# Runs the ignored Rust E2E that drives https://every.channel via headless Chrome
+# and connects to a local `ec-node direct-publish --directory-url ...` process.
+exec nix develop --accept-flake-config -c \
+  bash -lc 'cargo test -p ec-node --test e2e_remote_website_directory -- --ignored --nocapture'
+
diff --git a/scripts/vendor-yt-dlp.sh b/scripts/vendor-yt-dlp.sh
new file mode 100755
index 0000000..68c4eb7
--- /dev/null
+++ b/scripts/vendor-yt-dlp.sh
@@ -0,0 +1,34 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
+
+case "$(uname -s)" in
+  Darwin) platform="macos" ;;
+  Linux) platform="linux" ;;
+  MINGW*|MSYS*|CYGWIN*) platform="windows" ;;
+  *) platform="unknown" ;;
+esac
+
+if [[ "${platform}" == "unknown" ]]; then
+  echo "Unsupported platform for bundling yt-dlp" >&2
+  exit 1
+fi
+
+DEST="${ROOT}/apps/tauri/resources/yt-dlp/${platform}/venv"
+
+if command -v uv >/dev/null 2>&1; then
+  uv venv "${DEST}" --python 3.12
+  "${DEST}/bin/python" -m pip install --upgrade pip
+  "${DEST}/bin/python" -m pip install --upgrade yt-dlp
+else
+  if ! command -v python3 >/dev/null 2>&1; then
+    echo "python3 not found; install python or uv" >&2
+    exit 1
+  fi
+  python3 -m venv "${DEST}"
+  "${DEST}/bin/python" -m pip install --upgrade pip
+  "${DEST}/bin/python" -m pip install --upgrade yt-dlp
+fi
+
+echo "yt-dlp bundled at ${DEST}"
diff --git a/third_party/iroh-live/.cargo/config.toml b/third_party/iroh-live/.cargo/config.toml
new file mode 100644
index 0000000..a807d1d
--- /dev/null
+++ b/third_party/iroh-live/.cargo/config.toml
@@ -0,0 +1,7 @@
+[env]
+SDKROOT = "/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk"
+LLVM_CONFIG_PATH = "/opt/homebrew/opt/llvm/bin/llvm-config"
+BINDGEN_EXTRA_CLANG_ARGS = "-I/Applications/Xcode.app/Contents/Developer/Platforms/MacOSX.platform/Developer/SDKs/MacOSX.sdk/usr/include"
+
+[target.aarch64-apple-darwin]
+rustflags = []
diff --git a/third_party/iroh-live/.gitignore b/third_party/iroh-live/.gitignore
new file mode 100644
index 0000000..8e6c17a
--- /dev/null
+++ b/third_party/iroh-live/.gitignore
@@ -0,0 +1,3 @@
+/target
+SANDBOX
+target
diff --git a/third_party/iroh-live/Cargo.lock b/third_party/iroh-live/Cargo.lock
new file mode 100644
index 0000000..05686b0
--- /dev/null
+++ b/third_party/iroh-live/Cargo.lock
@@ -0,0 +1,9665 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "ab_glyph"
+version = "0.2.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "01c0457472c38ea5bd1c3b5ada5e368271cb550be7a4ca4a0b4634e9913f6cc2"
+dependencies = [
+ "ab_glyph_rasterizer",
+ "owned_ttf_parser",
+]
+
+[[package]]
+name = "ab_glyph_rasterizer"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "366ffbaa4442f4684d91e2cd7c5ea7c4ed8add41959a31447066e279e432b618"
+
+[[package]]
+name = "accesskit"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf203f9d3bd8f29f98833d1fbef628df18f759248a547e7e01cfbf63cda36a99"
+
+[[package]]
+name = "accesskit_atspi_common"
+version = "0.14.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "890d241cf51fc784f0ac5ac34dfc847421f8d39da6c7c91a0fcc987db62a8267"
+dependencies = [
+ "accesskit",
+ "accesskit_consumer",
+ "atspi-common",
+ "serde",
+ "thiserror 1.0.69",
+ "zvariant",
+]
+
+[[package]]
+name = "accesskit_consumer"
+version = "0.31.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db81010a6895d8707f9072e6ce98070579b43b717193d2614014abd5cb17dd43"
+dependencies = [
+ "accesskit",
+ "hashbrown 0.15.5",
+]
+
+[[package]]
+name = "accesskit_macos"
+version = "0.22.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0089e5c0ac0ca281e13ea374773898d9354cc28d15af9f0f7394d44a495b575"
+dependencies = [
+ "accesskit",
+ "accesskit_consumer",
+ "hashbrown 0.15.5",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "accesskit_unix"
+version = "0.17.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "301e55b39cfc15d9c48943ce5f572204a551646700d0e8efa424585f94fec528"
+dependencies = [
+ "accesskit",
+ "accesskit_atspi_common",
+ "async-channel",
+ "async-executor",
+ "async-task",
+ "atspi",
+ "futures-lite",
+ "futures-util",
+ "serde",
+ "zbus",
+]
+
+[[package]]
+name = "accesskit_windows"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2d63dd5041e49c363d83f5419a896ecb074d309c414036f616dc0b04faca971"
+dependencies = [
+ "accesskit",
+ "accesskit_consumer",
+ "hashbrown 0.15.5",
+ "static_assertions",
+ "windows 0.61.3",
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "accesskit_winit"
+version = "0.29.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c8cfabe59d0eaca7412bfb1f70198dd31e3b0496fee7e15b066f9c36a1a140a0"
+dependencies = [
+ "accesskit",
+ "accesskit_macos",
+ "accesskit_unix",
+ "accesskit_windows",
+ "raw-window-handle",
+ "winit",
+]
+
+[[package]]
+name = "adler2"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
+
+[[package]]
+name = "aead"
+version = "0.6.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac8202ab55fcbf46ca829833f347a82a2a4ce0596f0304ac322c2d100030cd56"
+dependencies = [
+ "bytes",
+ "crypto-common",
+ "inout",
+]
+
+[[package]]
+name = "ahash"
+version = "0.7.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "891477e0c6a8957309ee5c45a6368af3ae14bb510732d2684ffa19af310920f9"
+dependencies = [
+ "getrandom 0.2.16",
+ "once_cell",
+ "version_check",
+]
+
+[[package]]
+name = "ahash"
+version = "0.8.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
+dependencies = [
+ "cfg-if 1.0.4",
+ "getrandom 0.3.4",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
+[[package]]
+name = "alsa"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed7572b7ba83a31e20d1b48970ee402d2e3e0537dcfe0a3ff4d6eb7508617d43"
+dependencies = [
+ "alsa-sys",
+ "bitflags 2.10.0",
+ "cfg-if 1.0.4",
+ "libc",
+]
+
+[[package]]
+name = "alsa-sys"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db8fee663d06c4e303404ef5f40488a53e062f89ba8bfed81f42325aafad1527"
+dependencies = [
+ "libc",
+ "pkg-config",
+]
+
+[[package]]
+name = "android-activity"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef6978589202a00cd7e118380c448a08b6ed394c3a8df3a430d0898e3a42d046"
+dependencies = [
+ "android-properties",
+ "bitflags 2.10.0",
+ "cc",
+ "cesu8",
+ "jni",
+ "jni-sys",
+ "libc",
+ "log",
+ "ndk",
+ "ndk-context",
+ "ndk-sys",
+ "num_enum",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "android-properties"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7eb209b1518d6bb87b283c20095f5228ecda460da70b44f0802523dea6da04"
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "annotate-snippets"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccaf7e9dfbb6ab22c82e473cd1a8a7bd313c19a5b7e40970f3d89ef5a5c9e81e"
+dependencies = [
+ "unicode-width 0.1.14",
+ "yansi-term",
+]
+
+[[package]]
+name = "anstream"
+version = "0.6.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+
+[[package]]
+name = "arboard"
+version = "3.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0348a1c054491f4bfe6ab86a7b6ab1e44e45d899005de92f58b3df180b36ddaf"
+dependencies = [
+ "clipboard-win",
+ "image",
+ "log",
+ "objc2 0.6.3",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-foundation 0.3.2",
+ "parking_lot",
+ "percent-encoding",
+ "windows-sys 0.60.2",
+ "x11rb",
+]
+
+[[package]]
+name = "archery"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70e0a5f99dfebb87bb342d0f53bb92c81842e100bbb915223e38349580e5441d"
+dependencies = [
+ "triomphe",
+]
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
+
+[[package]]
+name = "as-raw-xcb-connection"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175571dd1d178ced59193a6fc02dde1b972eb0bc56c892cde9beeceac5bf0f6b"
+
+[[package]]
+name = "ash"
+version = "0.38.0+1.3.281"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bb44936d800fea8f016d7f2311c6a4f97aebd5dc86f09906139ec848cf3a46f"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "asn1-rs"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56624a96882bb8c26d61312ae18cb45868e5a9992ea73c58e45c3101e56a1e60"
+dependencies = [
+ "asn1-rs-derive",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 2.0.17",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "assert_type_match"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f548ad2c4031f2902e3edc1f29c29e835829437de49562d8eb5dc5584d3a1043"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "async-broadcast"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "435a87a52755b8f27fcf321ac4f04b2802e337c8c4872923137471ec39c37532"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-channel"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "924ed96dd52d1b75e9c1a3e6275715fd320f5f9439fb5a4a11fa51f4221158d2"
+dependencies = [
+ "concurrent-queue",
+ "event-listener-strategy",
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-compat"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1ba85bc55464dcbf728b56d97e119d673f4cf9062be330a9a26f3acf504a590"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "once_cell",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "async-executor"
+version = "1.13.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "497c00e0fd83a72a79a39fcbd8e3e2f055d6f6c7e025f3b3d91f4f8e76527fb8"
+dependencies = [
+ "async-task",
+ "concurrent-queue",
+ "fastrand",
+ "futures-lite",
+ "pin-project-lite",
+ "slab",
+]
+
+[[package]]
+name = "async-io"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "456b8a8feb6f42d237746d4b3e9a178494627745c3c56c6ea55d92ba50d026fc"
+dependencies = [
+ "autocfg",
+ "cfg-if 1.0.4",
+ "concurrent-queue",
+ "futures-io",
+ "futures-lite",
+ "parking",
+ "polling",
+ "rustix 1.1.2",
+ "slab",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "async-lock"
+version = "3.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5fd03604047cee9b6ce9de9f70c6cd540a0520c813cbd49bae61f33ab80ed1dc"
+dependencies = [
+ "event-listener",
+ "event-listener-strategy",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "async-process"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc50921ec0055cdd8a16de48773bfeec5c972598674347252c0399676be7da75"
+dependencies = [
+ "async-channel",
+ "async-io",
+ "async-lock",
+ "async-signal",
+ "async-task",
+ "blocking",
+ "cfg-if 1.0.4",
+ "event-listener",
+ "futures-lite",
+ "rustix 1.1.2",
+]
+
+[[package]]
+name = "async-recursion"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "async-signal"
+version = "0.2.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43c070bbf59cd3570b6b2dd54cd772527c7c3620fce8be898406dd3ed6adc64c"
+dependencies = [
+ "async-io",
+ "async-lock",
+ "atomic-waker",
+ "cfg-if 1.0.4",
+ "futures-core",
+ "futures-io",
+ "rustix 1.1.2",
+ "signal-hook-registry",
+ "slab",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "async-task"
+version = "4.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b75356056920673b02621b35afd0f7dda9306d03c79a30f5c56c44cf256e3de"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "async_io_stream"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d7b9decdf35d8908a7e3ef02f64c5e9b1695e230154c0e8de3969142d9b94c"
+dependencies = [
+ "futures",
+ "pharos",
+ "rustc_version",
+]
+
+[[package]]
+name = "atomic-polyfill"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cf2bce30dfe09ef0bfaef228b9d414faaf7e563035494d7fe092dba54b300f4"
+dependencies = [
+ "critical-section",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "atspi"
+version = "0.25.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c83247582e7508838caf5f316c00791eee0e15c0bf743e6880585b867e16815c"
+dependencies = [
+ "atspi-common",
+ "atspi-connection",
+ "atspi-proxies",
+]
+
+[[package]]
+name = "atspi-common"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33dfc05e7cdf90988a197803bf24f5788f94f7c94a69efa95683e8ffe76cfdfb"
+dependencies = [
+ "enumflags2",
+ "serde",
+ "static_assertions",
+ "zbus",
+ "zbus-lockstep",
+ "zbus-lockstep-macros",
+ "zbus_names",
+ "zvariant",
+]
+
+[[package]]
+name = "atspi-connection"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4193d51303d8332304056ae0004714256b46b6635a5c556109b319c0d3784938"
+dependencies = [
+ "atspi-common",
+ "atspi-proxies",
+ "futures-lite",
+ "zbus",
+]
+
+[[package]]
+name = "atspi-proxies"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2eebcb9e7e76f26d0bcfd6f0295e1cd1e6f33bedbc5698a971db8dc43d7751c"
+dependencies = [
+ "atspi-common",
+ "serde",
+ "zbus",
+]
+
+[[package]]
+name = "attohttpc"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16e2cdb6d5ed835199484bb92bb8b3edd526effe995c61732580439c1a67e2e9"
+dependencies = [
+ "base64",
+ "http",
+ "log",
+ "url",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "autotools"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef941527c41b0fc0dd48511a8154cd5fc7e29200a0ff8b7203c5d777dbc795cf"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "backon"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cffb0e931875b666fc4fcb20fee52e9bbd1ef836fd9e9e04ec21555f9f85f7ef"
+dependencies = [
+ "fastrand",
+ "gloo-timers",
+ "tokio",
+]
+
+[[package]]
+name = "base16ct"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b59d472eab27ade8d770dcb11da7201c11234bef9f82ce7aa517be028d462b"
+
+[[package]]
+name = "base32"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0e050f626429857a27ddccb31e0aca21356bfa709c04041aefddac081a8f068a"
+
+[[package]]
+name = "bevy_ecs"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a7dd5229dd00d00e70ac6b2fc0a139961252f6ce07d3d268cfcac0da86d5bde4"
+dependencies = [
+ "arrayvec",
+ "bevy_ecs_macros",
+ "bevy_platform",
+ "bevy_ptr",
+ "bevy_reflect",
+ "bevy_tasks",
+ "bevy_utils",
+ "bitflags 2.10.0",
+ "bumpalo",
+ "concurrent-queue",
+ "derive_more 2.1.0",
+ "fixedbitset",
+ "indexmap 2.12.1",
+ "log",
+ "nonmax",
+ "serde",
+ "slotmap",
+ "smallvec",
+ "thiserror 2.0.17",
+ "variadics_please",
+]
+
+[[package]]
+name = "bevy_ecs_macros"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4d83bdd2285af4867e76c691406e0a4b55611b583d0c45b6ac7bcec1b45fd48"
+dependencies = [
+ "bevy_macro_utils",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "bevy_macro_utils"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62d984f9f8bd0f0d9fb020492a955e641e30e7a425f3588bf346cb3e61fec3c3"
+dependencies = [
+ "parking_lot",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "toml_edit 0.23.10+spec-1.0.0",
+]
+
+[[package]]
+name = "bevy_platform"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4691af6d7cfd1b5deb2fc926a43a180a546cdc3fe1e5a013fcee60db9bb2c81f"
+dependencies = [
+ "critical-section",
+ "foldhash 0.2.0",
+ "futures-channel",
+ "hashbrown 0.16.1",
+ "js-sys",
+ "portable-atomic",
+ "portable-atomic-util",
+ "serde",
+ "spin 0.10.0",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "bevy_ptr"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17d24d7906c7de556033168b3485de36c59049fbaef0c2c44c715a23e0329b10"
+
+[[package]]
+name = "bevy_reflect"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b5472b91928c0f3e4e3988c0d036b00719f19520f53a0c3f8c2af72f00e693c5"
+dependencies = [
+ "assert_type_match",
+ "bevy_platform",
+ "bevy_ptr",
+ "bevy_reflect_derive",
+ "bevy_utils",
+ "derive_more 2.1.0",
+ "disqualified",
+ "downcast-rs 2.0.2",
+ "erased-serde",
+ "foldhash 0.2.0",
+ "glam 0.30.9",
+ "serde",
+ "smallvec",
+ "smol_str",
+ "thiserror 2.0.17",
+ "uuid",
+ "variadics_please",
+ "wgpu-types 26.0.0",
+]
+
+[[package]]
+name = "bevy_reflect_derive"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "083784255162fa39960aa3cf3c23af0e515db2daa7f2e796ae34df993f4d3f6c"
+dependencies = [
+ "bevy_macro_utils",
+ "indexmap 2.12.1",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "uuid",
+]
+
+[[package]]
+name = "bevy_tasks"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcbbfa5a58a16c4228434d3018c23fde3d78dcd76ec5f5b2b482a21f4b158dd3"
+dependencies = [
+ "async-channel",
+ "async-task",
+ "atomic-waker",
+ "bevy_platform",
+ "crossbeam-queue",
+ "derive_more 2.1.0",
+ "futures-lite",
+ "heapless 0.8.0",
+ "pin-project",
+]
+
+[[package]]
+name = "bevy_utils"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "789d04f88c764877a4552e07745b402dbc45f5d0545e6d102558f2f1752a1d89"
+dependencies = [
+ "bevy_platform",
+ "disqualified",
+ "thread_local",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.65.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfdf7b466f9a4903edc73f95d6d2bcd5baf8ae620638762244d3f60143643cc5"
+dependencies = [
+ "bitflags 1.3.2",
+ "cexpr",
+ "clang-sys",
+ "lazy_static",
+ "lazycell",
+ "log",
+ "peeking_take_while",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 1.1.0",
+ "shlex",
+ "syn 2.0.111",
+ "which",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.69.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "271383c67ccabffb7381723dea0672a673f292304fcb45c01cc648c7a8d58088"
+dependencies = [
+ "annotate-snippets",
+ "bitflags 2.10.0",
+ "cexpr",
+ "clang-sys",
+ "itertools",
+ "lazy_static",
+ "lazycell",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 1.1.0",
+ "shlex",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "bindgen"
+version = "0.72.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
+dependencies = [
+ "bitflags 2.10.0",
+ "cexpr",
+ "clang-sys",
+ "itertools",
+ "log",
+ "prettyplease",
+ "proc-macro2",
+ "quote",
+ "regex",
+ "rustc-hash 2.1.1",
+ "shlex",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "bit-set"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
+dependencies = [
+ "bit-vec",
+]
+
+[[package]]
+name = "bit-vec"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
+
+[[package]]
+name = "bitflags"
+version = "1.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "bitvec"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bc2832c24239b0141d5674bb9174f9d68a8b5b3f2753311927c172ca46f7e9c"
+dependencies = [
+ "funty",
+ "radium",
+ "tap",
+ "wyz",
+]
+
+[[package]]
+name = "blake3"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3888aaa89e4b2a40fca9848e400f6a658a5a3978de7be858e209cafa8be9a4a0"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if 1.0.4",
+ "constant_time_eq",
+]
+
+[[package]]
+name = "block"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d8c1fef690941d3e7788d328517591fecc684c084084702d6ff1641e993699a"
+
+[[package]]
+name = "block-buffer"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96eb4cdd6cf1b31d671e9efe75c5d1ec614776856cefbe109ca373554a6d514f"
+dependencies = [
+ "hybrid-array",
+ "zeroize",
+]
+
+[[package]]
+name = "block2"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c132eebf10f5cad5289222520a4a058514204aed6d791f1cf4fe8088b82d15f"
+dependencies = [
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2 0.6.3",
+]
+
+[[package]]
+name = "blocking"
+version = "1.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e83f8d02be6967315521be875afa792a316e28d57b5a2d401897e2a7921b7f21"
+dependencies = [
+ "async-channel",
+ "async-task",
+ "futures-io",
+ "futures-lite",
+ "piper",
+]
+
+[[package]]
+name = "borsh"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1da5ab77c1437701eeff7c88d968729e7766172279eab0676857b3d63af7a6f"
+dependencies = [
+ "borsh-derive",
+ "cfg_aliases",
+]
+
+[[package]]
+name = "borsh-derive"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0686c856aa6aac0c4498f936d7d6a02df690f614c03e4d906d1018062b5c5e2c"
+dependencies = [
+ "once_cell",
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "buf-list"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6b175f9cf8fffedd4c4b18bcfef092356e952b81f596e148f18e98280994593"
+dependencies = [
+ "bytes",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
+
+[[package]]
+name = "byte-unit"
+version = "5.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c6d47a4e2961fb8721bcfc54feae6455f2f64e7054f9bc67e875f0e77f4c58d"
+dependencies = [
+ "rust_decimal",
+ "schemars 1.1.0",
+ "serde",
+ "utf8-width",
+]
+
+[[package]]
+name = "bytecheck"
+version = "0.6.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23cdc57ce23ac53c931e88a43d06d070a6fd142f2617be5855eb75efc9beb1c2"
+dependencies = [
+ "bytecheck_derive",
+ "ptr_meta",
+ "simdutf8",
+]
+
+[[package]]
+name = "bytecheck_derive"
+version = "0.6.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3db406d29fbcd95542e92559bed4d8ad92636d1ca8b3b72ede10b4bcc010e659"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "bytemuck"
+version = "1.24.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fbdf580320f38b612e485521afda1ee26d10cc9884efaaa750d383e13e3c5f4"
+dependencies = [
+ "bytemuck_derive",
+]
+
+[[package]]
+name = "bytemuck_derive"
+version = "1.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9abbd1bc6865053c427f7198e6af43bfdedc55ab791faed4fbd361d789575ff"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "byteorder-lite"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f1fe948ff07f4bd06c30984e69f5b4899c516a3ef74f34df92a2df2ab535495"
+
+[[package]]
+name = "bytes"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "calloop"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b99da2f8558ca23c71f4fd15dc57c906239752dd27ff3c00a1d56b685b7cbfec"
+dependencies = [
+ "bitflags 2.10.0",
+ "log",
+ "polling",
+ "rustix 0.38.44",
+ "slab",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "calloop"
+version = "0.14.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb9f6e1368bd4621d2c86baa7e37de77a938adf5221e5dd3d6133340101b309e"
+dependencies = [
+ "bitflags 2.10.0",
+ "polling",
+ "rustix 1.1.2",
+ "slab",
+ "tracing",
+]
+
+[[package]]
+name = "calloop-wayland-source"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "95a66a987056935f7efce4ab5668920b5d0dac4a7c99991a67395f13702ddd20"
+dependencies = [
+ "calloop 0.13.0",
+ "rustix 0.38.44",
+ "wayland-backend",
+ "wayland-client",
+]
+
+[[package]]
+name = "calloop-wayland-source"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "138efcf0940a02ebf0cc8d1eff41a1682a46b431630f4c52450d6265876021fa"
+dependencies = [
+ "calloop 0.14.3",
+ "rustix 1.1.2",
+ "wayland-backend",
+ "wayland-client",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.49"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "90583009037521a116abf44494efecd645ba48b6622457080f080b85544e2215"
+dependencies = [
+ "find-msvc-tools",
+ "jobserver",
+ "libc",
+ "shlex",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cexpr"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "cfg-expr"
+version = "0.15.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d067ad48b8650848b989a59a86c6c36a995d02d2bf778d45c3c5d57bc2718f02"
+dependencies = [
+ "smallvec",
+ "target-lexicon",
+]
+
+[[package]]
+name = "cfg-if"
+version = "0.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4785bdd1c96b2a846b2bd7cc02e86b6b3dbf14e7e53446c4f54c92a361040822"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "cgl"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ced0551234e87afee12411d535648dd89d2e7f34c78b753395567aff3d447ff"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "chacha20"
+version = "0.10.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9bd162f2b8af3e0639d83f28a637e4e55657b7a74508dba5a9bf4da523d5c9e9"
+dependencies = [
+ "cfg-if 1.0.4",
+ "cipher",
+ "cpufeatures",
+ "zeroize",
+]
+
+[[package]]
+name = "chrono"
+version = "0.4.42"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "145052bdd345b87320e369255277e3fb5152762ad123a901ef5c262dd38fe8d2"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "cipher"
+version = "0.5.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e12a13eb01ded5d32ee9658d94f553a19e804204f2dc811df69ab4d9e0cb8c7"
+dependencies = [
+ "block-buffer",
+ "crypto-common",
+ "inout",
+ "zeroize",
+]
+
+[[package]]
+name = "clang-sys"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b023947811758c97c59bf9d1c188fd619ad4718dcaa767947df1cadb14f39f4"
+dependencies = [
+ "glob",
+ "libc",
+ "libloading",
+]
+
+[[package]]
+name = "clap"
+version = "4.5.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9e340e012a1bf4935f5282ed1436d1489548e8f72308207ea5df0e23d2d03f8"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.5.53"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d76b5d13eaa18c901fd2f7fca939fefe3a0727a953561fefdf3b2922b8569d00"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.5.49"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a0b5487afeab2deb2ff4e03a807ad1a03ac532ff5a2cee5d86884440c7f7671"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "clap_lex"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1d728cc89cf3aee9ff92b05e62b19ee65a02b5702cff7d5a377e32c6ae29d8d"
+
+[[package]]
+name = "clipboard-win"
+version = "5.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bde03770d3df201d4fb868f2c9c59e66a3e4e2bd06692a0fe701e7103c7e84d4"
+dependencies = [
+ "error-code",
+]
+
+[[package]]
+name = "cobs"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1"
+dependencies = [
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "cocoa"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c49e86fc36d5704151f5996b7b3795385f50ce09e3be0f47a0cfde869681cf8"
+dependencies = [
+ "bitflags 1.3.2",
+ "block",
+ "core-foundation 0.7.0",
+ "core-graphics 0.19.2",
+ "foreign-types 0.3.2",
+ "libc",
+ "objc",
+]
+
+[[package]]
+name = "cocoa-foundation"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "81411967c50ee9a1fc11365f8c585f863a22a9697c89239c452292c40ba79b0d"
+dependencies = [
+ "bitflags 2.10.0",
+ "block",
+ "core-foundation 0.10.1",
+ "core-graphics-types 0.2.0",
+ "objc",
+]
+
+[[package]]
+name = "codespan-reporting"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe6d2e5af09e8c8ad56c969f2157a3d4238cebc7c55f0a517728c38f7b200f81"
+dependencies = [
+ "serde",
+ "termcolor",
+ "unicode-width 0.2.2",
+]
+
+[[package]]
+name = "colorchoice"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "concurrent-queue"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ca0197aee26d1ae37445ee532fefce43251d24cc7c166799f4d46817f1d3973"
+dependencies = [
+ "crossbeam-utils",
+ "portable-atomic",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0dabb6555f92fb9ee4140454eb5dcd14c7960e1225c6d1a6cc361f032947713e"
+
+[[package]]
+name = "constant_time_eq"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c74b8349d32d297c9134b8c88677813a227df8f779daa29bfc29c183fe3dca6"
+
+[[package]]
+name = "convert_case"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec182b0ca2f35d8fc196cf3404988fd8b8c739a4d270ff118a398feb0cbec1ca"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cookie-factory"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9885fa71e26b8ab7855e2ec7cae6e9b380edff76cd052e07c683a0319d51b3a2"
+dependencies = [
+ "futures",
+]
+
+[[package]]
+name = "cordyceps"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "688d7fbb8092b8de775ef2536f36c8c31f2bc4006ece2e8d8ad2d17d00ce0a2a"
+dependencies = [
+ "loom",
+ "tracing",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57d24c7a13c43e870e37c1556b74555437870a04514f7685f5b354e090567171"
+dependencies = [
+ "core-foundation-sys 0.7.0",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.9.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
+dependencies = [
+ "core-foundation-sys 0.8.7",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys 0.8.7",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3a71ab494c0b5b860bdc8407ae08978052417070c2ced38573a9157ad75b8ac"
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "core-graphics"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3889374e6ea6ab25dba90bb5d96202f61108058361f6dc72e8b03e6f8bbe923"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.7.0",
+ "foreign-types 0.3.2",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics"
+version = "0.23.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c07782be35f9e1140080c6b96f0d44b739e2278479f64e02fdab4e32dfd8b081"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "core-graphics-types 0.1.3",
+ "foreign-types 0.5.0",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "45390e6114f68f718cc7a830514a96f903cccd70d02a8f6d9f643ac4ba45afaf"
+dependencies = [
+ "bitflags 1.3.2",
+ "core-foundation 0.9.4",
+ "libc",
+]
+
+[[package]]
+name = "core-graphics-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation 0.10.1",
+ "libc",
+]
+
+[[package]]
+name = "core-media-sys"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "273bf3fc5bf51fd06a7766a84788c1540b6527130a0bce39e00567d6ab9f31f1"
+dependencies = [
+ "cfg-if 0.1.10",
+ "core-foundation-sys 0.7.0",
+ "libc",
+]
+
+[[package]]
+name = "core-video-sys"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34ecad23610ad9757664d644e369246edde1803fcb43ed72876565098a5d3828"
+dependencies = [
+ "cfg-if 0.1.10",
+ "core-foundation-sys 0.7.0",
+ "core-graphics 0.19.2",
+ "libc",
+ "metal 0.18.0",
+ "objc",
+]
+
+[[package]]
+name = "coreaudio-rs"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1aae284fbaf7d27aa0e292f7677dfbe26503b0d555026f702940805a630eac17"
+dependencies = [
+ "bitflags 1.3.2",
+ "libc",
+ "objc2-audio-toolbox",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "cpal"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbd307f43cc2a697e2d1f8bc7a1d824b5269e052209e28883e5bc04d095aaa3f"
+dependencies = [
+ "alsa",
+ "coreaudio-rs",
+ "dasp_sample",
+ "jni",
+ "js-sys",
+ "libc",
+ "mach2",
+ "ndk",
+ "ndk-context",
+ "num-derive",
+ "num-traits",
+ "objc2-audio-toolbox",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "windows 0.54.0",
+]
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "crc32fast"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
+dependencies = [
+ "cfg-if 1.0.4",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-queue"
+version = "0.3.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0f58bbc28f91df819d0aa2a2c00cd19754769c2fad90579b3592b1c9ba7a3115"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crunchy"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
+
+[[package]]
+name = "crypto-common"
+version = "0.2.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a8235645834fbc6832939736ce2f2d08192652269e11010a6240f61b908a1c6"
+dependencies = [
+ "hybrid-array",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "crypto_box"
+version = "0.10.0-pre.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bda4de3e070830cf3a27a394de135b6709aefcc54d1e16f2f029271254a6ed9"
+dependencies = [
+ "aead",
+ "chacha20",
+ "crypto_secretbox",
+ "curve25519-dalek",
+ "salsa20",
+ "serdect",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "crypto_secretbox"
+version = "0.2.0-pre.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54532aae6546084a52cef855593daf9555945719eeeda9974150e0def854873e"
+dependencies = [
+ "aead",
+ "chacha20",
+ "cipher",
+ "hybrid-array",
+ "poly1305",
+ "salsa20",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "cursor-icon"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f27ae1dd37df86211c42e150270f82743308803d90a6f6e6651cd730d5e1732f"
+
+[[package]]
+name = "curve25519-dalek"
+version = "5.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f9200d1d13637f15a6acb71e758f64624048d85b31a5fdbfd8eca1e2687d0b7"
+dependencies = [
+ "cfg-if 1.0.4",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "digest",
+ "fiat-crypto",
+ "rand_core 0.9.3",
+ "rustc_version",
+ "serde",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "darling"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9cdf337090841a411e2a7f3deb9187445851f91b309c0c0a29e05f74a00a48c0"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1247195ecd7e3c85f83c8d2a366e4210d588e802133e1e355180a9870b517ea4"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d38308df82d1080de0afee5d069fa14b0326a88c14f15c5ccda35b4a6c414c81"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "dasp_sample"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c87e182de0887fd5361989c677c4e8f5000cd9491d6d563161a8f3a5519fc7f"
+
+[[package]]
+name = "data-encoding"
+version = "2.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a2330da5de22e8a3cb63252ce2abb30116bf5265e89c0e01bc17015ce30a476"
+
+[[package]]
+name = "der"
+version = "0.8.0-rc.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02c1d73e9668ea6b6a28172aa55f3ebec38507131ce179051c8033b5c6037653"
+dependencies = [
+ "const-oid",
+ "pem-rfc7468",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "10.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6"
+dependencies = [
+ "asn1-rs",
+ "displaydoc",
+ "nom",
+ "num-bigint",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
+dependencies = [
+ "powerfmt",
+ "serde_core",
+]
+
+[[package]]
+name = "derive_more"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a9b99b9cbbe49445b21764dc0625032a89b145a2642e67603e1c936f5458d05"
+dependencies = [
+ "derive_more-impl 1.0.0",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10b768e943bed7bf2cab53df09f4bc34bfd217cdb57d971e769874c9a6710618"
+dependencies = [
+ "derive_more-impl 2.1.0",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb7330aeadfbe296029522e6c40f315320aba36fc43a5b3632f3795348f3bd22"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "unicode-xid",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d286bfdaf75e988b4a78e013ecd79c581e06399ab53fbacd2d916c2f904f30b"
+dependencies = [
+ "convert_case 0.10.0",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn 2.0.111",
+ "unicode-xid",
+]
+
+[[package]]
+name = "diatomic-waker"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab03c107fafeb3ee9f5925686dbb7a73bc76e3932abb0d2b365cb64b169cf04c"
+
+[[package]]
+name = "digest"
+version = "0.11.0-rc.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dac89f8a64533a9b0eaa73a68e424db0fb1fd6271c74cc0125336a05f090568d"
+dependencies = [
+ "block-buffer",
+ "const-oid",
+ "crypto-common",
+]
+
+[[package]]
+name = "dispatch"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd0c93bb4b0c6d9b77f4435b0ae98c24d17f1c45b2ff844c6151a07256ca923b"
+
+[[package]]
+name = "dispatch2"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89a09f22a6c6069a18470eb92d2298acf25463f14256d24778e1230d789a2aec"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.3",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "disqualified"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c9c272297e804878a2a4b707cfcfc6d2328b5bb936944613b4fdf2b9269afdfd"
+
+[[package]]
+name = "dlib"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "330c60081dcc4c72131f8eb70510f1ac07223e5d4163db481a04a0befcffa412"
+dependencies = [
+ "libloading",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09b4f5f101177ff01b8ec4ecc81eead416a8aa42819a2869311b3420fa114ffa"
+dependencies = [
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "downcast-rs"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75b325c5dbd37f80359721ad39aca5a29fb04c89279657cffdda8736d0c0b9d2"
+
+[[package]]
+name = "downcast-rs"
+version = "2.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "117240f60069e65410b3ae1bb213295bd828f707b5bec6596a1afc8793ce0cbc"
+
+[[package]]
+name = "dpi"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b14ccef22fc6f5a8f4d7d768562a182c04ce9a3b3157b91390b52ddfdf1a76"
+
+[[package]]
+name = "drm"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "80bc8c5c6c2941f70a55c15f8d9f00f9710ebda3ffda98075f996a0e6c92756f"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytemuck",
+ "drm-ffi",
+ "drm-fourcc",
+ "libc",
+ "rustix 0.38.44",
+]
+
+[[package]]
+name = "drm-ffi"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8e41459d99a9b529845f6d2c909eb9adf3b6d2f82635ae40be8de0601726e8b"
+dependencies = [
+ "drm-sys",
+ "rustix 0.38.44",
+]
+
+[[package]]
+name = "drm-fourcc"
+version = "2.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0aafbcdb8afc29c1a7ee5fbe53b5d62f4565b35a042a662ca9fecd0b54dae6f4"
+
+[[package]]
+name = "drm-sys"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bafb66c8dbc944d69e15cfcc661df7e703beffbaec8bd63151368b06c5f9858c"
+dependencies = [
+ "libc",
+ "linux-raw-sys 0.6.5",
+]
+
+[[package]]
+name = "dunce"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "ecolor"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "71ddb8ac7643d1dba1bb02110e804406dd459a838efcb14011ced10556711a8e"
+dependencies = [
+ "bytemuck",
+ "emath",
+]
+
+[[package]]
+name = "ed25519"
+version = "3.0.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "594435fe09e345ee388e4e8422072ff7dfeca8729389fbd997b3f5504c44cd47"
+dependencies = [
+ "pkcs8",
+ "serde",
+ "signature",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "3.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad207ed88a133091f83224265eac21109930db09bedcad05d5252f2af2de20a1"
+dependencies = [
+ "curve25519-dalek",
+ "ed25519",
+ "rand_core 0.9.3",
+ "serde",
+ "sha2",
+ "signature",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "eframe"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "457481173e6db5ca9fa2be93a58df8f4c7be639587aeb4853b526c6cf87db4e6"
+dependencies = [
+ "ahash 0.8.12",
+ "bytemuck",
+ "document-features",
+ "egui",
+ "egui-wgpu",
+ "egui-winit",
+ "egui_glow",
+ "glow",
+ "glutin",
+ "glutin-winit",
+ "image",
+ "js-sys",
+ "log",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+ "parking_lot",
+ "percent-encoding",
+ "profiling",
+ "raw-window-handle",
+ "static_assertions",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "web-time",
+ "windows-sys 0.61.2",
+ "winit",
+]
+
+[[package]]
+name = "egui"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a9b567d356674e9a5121ed3fedfb0a7c31e059fe71f6972b691bcd0bfc284e3"
+dependencies = [
+ "accesskit",
+ "ahash 0.8.12",
+ "bitflags 2.10.0",
+ "emath",
+ "epaint",
+ "log",
+ "nohash-hasher",
+ "profiling",
+ "smallvec",
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "egui-wgpu"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e4d209971c84b2352a06174abdba701af1e552ce56b144d96f2bd50a3c91236"
+dependencies = [
+ "ahash 0.8.12",
+ "bytemuck",
+ "document-features",
+ "egui",
+ "epaint",
+ "log",
+ "profiling",
+ "thiserror 2.0.17",
+ "type-map",
+ "web-time",
+ "wgpu",
+ "winit",
+]
+
+[[package]]
+name = "egui-winit"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec6687e5bb551702f4ad10ac428bab12acf9d53047ebb1082d4a0ed8c6251a29"
+dependencies = [
+ "accesskit_winit",
+ "arboard",
+ "bytemuck",
+ "egui",
+ "log",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-ui-kit",
+ "profiling",
+ "raw-window-handle",
+ "smithay-clipboard",
+ "web-time",
+ "webbrowser",
+ "winit",
+]
+
+[[package]]
+name = "egui_glow"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6420863ea1d90e750f75075231a260030ad8a9f30a7cef82cdc966492dc4c4eb"
+dependencies = [
+ "bytemuck",
+ "egui",
+ "glow",
+ "log",
+ "memoffset",
+ "profiling",
+ "wasm-bindgen",
+ "web-sys",
+ "winit",
+]
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "emath"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "491bdf728bf25ddd9ad60d4cf1c48588fa82c013a2440b91aa7fc43e34a07c32"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "embedded-io"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
+
+[[package]]
+name = "embedded-io"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edd0f118536f44f5ccd48bcb8b111bdc3de888b58c74639dfb034a357d0f206d"
+
+[[package]]
+name = "encoding_rs"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75030f3c4f45dafd7586dd6780965a8c7e8e285a5ecb86713e63a79c5b2766f3"
+dependencies = [
+ "cfg-if 1.0.4",
+]
+
+[[package]]
+name = "endi"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "66b7e2430c6dff6a955451e2cfc438f09cea1965a9d6f87f7e3b90decc014099"
+
+[[package]]
+name = "enum-as-inner"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "enumflags2"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1027f7680c853e056ebcec683615fb6fbbc07dbaa13b4d5d9442b146ded4ecef"
+dependencies = [
+ "enumflags2_derive",
+ "serde",
+]
+
+[[package]]
+name = "enumflags2_derive"
+version = "0.7.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67c78a4d8fdf9953a5c9d458f9efe940fd97a0cab0941c075a813ac594733827"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "epaint"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "009d0dd3c2163823a0abdb899451ecbc78798dec545ee91b43aff1fa790bab62"
+dependencies = [
+ "ab_glyph",
+ "ahash 0.8.12",
+ "bytemuck",
+ "ecolor",
+ "emath",
+ "epaint_default_fonts",
+ "log",
+ "nohash-hasher",
+ "parking_lot",
+ "profiling",
+]
+
+[[package]]
+name = "epaint_default_fonts"
+version = "0.33.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c4fbe202b6578d3d56428fa185cdf114a05e49da05f477b3c7f0fbb221f1862"
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "erased-serde"
+version = "0.4.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89e8918065695684b2b0702da20382d5ae6065cf3327bc2d6436bd49a71ce9f3"
+dependencies = [
+ "serde",
+ "serde_core",
+ "typeid",
+]
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "error-code"
+version = "3.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dea2df4cf52843e0452895c455a1a2cfbb842a1e7329671acf418fdc53ed4c59"
+
+[[package]]
+name = "event-listener"
+version = "5.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e13b66accf52311f30a0db42147dadea9850cb48cd070028831ae5f5d4b856ab"
+dependencies = [
+ "concurrent-queue",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "event-listener-strategy"
+version = "0.5.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8be9f3dfaaffdae2972880079a491a1a8bb7cbed0b8dd7a347f668b4150a3b93"
+dependencies = [
+ "event-listener",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "fast-interleave"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0a5ab837f0983c0a9210d7847931f64e3be67fcb0ab93d625f7845a0132c825"
+
+[[package]]
+name = "fastrand"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
+
+[[package]]
+name = "fax"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f05de7d48f37cd6730705cbca900770cab77a89f413d23e100ad7fad7795a0ab"
+dependencies = [
+ "fax_derive",
+]
+
+[[package]]
+name = "fax_derive"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0aca10fb742cb43f9e7bb8467c91aa9bcb8e3ffbc6a6f7389bb93ffc920577d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "fdeflate"
+version = "0.3.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e6853b52649d4ac5c0bd02320cddc5ba956bdb407c4b75a2c6b75bf51500f8c"
+dependencies = [
+ "simd-adler32",
+]
+
+[[package]]
+name = "ffmpeg-next"
+version = "8.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d658424d233cbd993a972dd73a66ca733acd12a494c68995c9ac32ae1fe65b40"
+dependencies = [
+ "bitflags 2.10.0",
+ "ffmpeg-sys-next",
+ "libc",
+]
+
+[[package]]
+name = "ffmpeg-sys-next"
+version = "8.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9bca20aa4ee774fe384c2490096c122b0b23cf524a9910add0686691003d797b"
+dependencies = [
+ "bindgen 0.72.1",
+ "cc",
+ "libc",
+ "num_cpus",
+ "pkg-config",
+ "vcpkg",
+]
+
+[[package]]
+name = "fiat-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3a3076410a55c90011c298b04d0cfa770b00fa04e1e3c97d3f6c9de105a03844"
+
+[[package]]
+name = "firewheel"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4a3247a4004d294962675375b2f539fb31990563261a385e7ef1353c1addd60"
+dependencies = [
+ "firewheel-core",
+ "firewheel-cpal",
+ "firewheel-graph",
+ "firewheel-nodes",
+ "firewheel-pool",
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "firewheel-core"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9d57ae9ba24554846916e77affb2c9efea35f6d7f39ae2f56329db309f8396a9"
+dependencies = [
+ "arrayvec",
+ "bevy_ecs",
+ "bevy_platform",
+ "bevy_reflect",
+ "bitflags 2.10.0",
+ "firewheel-macros",
+ "fixed-resample",
+ "glam 0.29.3",
+ "glam 0.30.9",
+ "log",
+ "num-traits",
+ "portable-atomic",
+ "ringbuf",
+ "rtgc",
+ "smallvec",
+ "symphonium",
+ "thiserror 2.0.17",
+ "thunderdome",
+ "wmidi",
+]
+
+[[package]]
+name = "firewheel-cpal"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f561251f37171d143922c3b8e45c102f9d79fd9ce4bd6faaa62550af1c5b2b1d"
+dependencies = [
+ "bevy_platform",
+ "cpal",
+ "fast-interleave",
+ "firewheel-core",
+ "firewheel-graph",
+ "fixed-resample",
+ "log",
+ "ringbuf",
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "firewheel-graph"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7730621467abd9aa6a945c6aa11447d5334d9427f0e51699c391e2648b8bc0c8"
+dependencies = [
+ "arrayvec",
+ "bevy_platform",
+ "bevy_reflect",
+ "firewheel-core",
+ "log",
+ "num-traits",
+ "ringbuf",
+ "smallvec",
+ "thiserror 2.0.17",
+ "thunderdome",
+ "triple_buffer",
+]
+
+[[package]]
+name = "firewheel-macros"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34833b22730fd510e34b07df943ce4e1495bc4f1d738a959cb31c0431f938b46"
+dependencies = [
+ "bevy_macro_utils",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "toml_edit 0.23.10+spec-1.0.0",
+]
+
+[[package]]
+name = "firewheel-nodes"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0513d8c83c24108b8dd8e28f572d5c90a87d085ca81929adb0cff2a62eff0863"
+dependencies = [
+ "bevy_ecs",
+ "bevy_platform",
+ "bevy_reflect",
+ "firewheel-core",
+ "fixed-resample",
+ "num-traits",
+ "smallvec",
+]
+
+[[package]]
+name = "firewheel-pool"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57b3f2122f632fcaff37d9c42e3b33d050199c180d8c13161f9f808a47b009f9"
+dependencies = [
+ "bevy_platform",
+ "firewheel-core",
+ "firewheel-graph",
+ "firewheel-nodes",
+ "smallvec",
+ "thiserror 2.0.17",
+ "thunderdome",
+]
+
+[[package]]
+name = "fixed-resample"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e548b80c8a294b230847d73ae8e53d1b2d5b407a1a9ec51c9698a761c4610b1"
+dependencies = [
+ "arrayvec",
+ "fast-interleave",
+ "ringbuf",
+ "rubato",
+]
+
+[[package]]
+name = "fixedbitset"
+version = "0.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d674e81391d1e1ab681a28d99df07927c6d4aa5b027d7da16ba32d1d21ecd99"
+
+[[package]]
+name = "flate2"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfe33edd8e85a12a67454e37f8c75e730830d83e313556ab9ebf9ee7fbeb3bfb"
+dependencies = [
+ "crc32fast",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "flume"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da0e4dd2a88388a1f4ccc7c9ce104604dab68d9f408dc34cd45823d5a9069095"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+ "nanorand",
+ "spin 0.9.8",
+]
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "foreign-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6f339eb8adc052cd2ca78910fda869aefa38d22d5cb648e6485e4d3fc06f3b1"
+dependencies = [
+ "foreign-types-shared 0.1.1",
+]
+
+[[package]]
+name = "foreign-types"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d737d9aa519fb7b749cbc3b962edcf310a8dd1f4b67c91c4f83975dbdd17d965"
+dependencies = [
+ "foreign-types-macros",
+ "foreign-types-shared 0.3.1",
+]
+
+[[package]]
+name = "foreign-types-macros"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a5c6c585bc94aaf2c7b51dd4c2ba22680844aba4c687be581871a6f518c5742"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00b0228411908ca8685dba7fc2cdd70ec9990a6e753e89b6ac91a84c40fbaf4b"
+
+[[package]]
+name = "foreign-types-shared"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "aa9a19cbb55df58761df49b23516a86d432839add4af60fc256da840f66ed35b"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "fs_extra"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
+
+[[package]]
+name = "funty"
+version = "2.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
+
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-buffered"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8e0e1f38ec07ba4abbde21eed377082f17ccb988be9d988a5adbf4bafc118fd"
+dependencies = [
+ "cordyceps",
+ "diatomic-waker",
+ "futures-core",
+ "pin-project-lite",
+ "spin 0.10.0",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-concurrency"
+version = "7.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eb68017df91f2e477ed4bea586c59eaecaa47ed885a770d0444e21e62572cd2"
+dependencies = [
+ "fixedbitset",
+ "futures-buffered",
+ "futures-core",
+ "futures-lite",
+ "pin-project",
+ "slab",
+ "smallvec",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "gbm"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce852e998d3ca5e4a97014fb31c940dc5ef344ec7d364984525fd11e8a547e6a"
+dependencies = [
+ "bitflags 2.10.0",
+ "drm",
+ "drm-fourcc",
+ "gbm-sys",
+ "libc",
+ "wayland-backend",
+ "wayland-server",
+]
+
+[[package]]
+name = "gbm-sys"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c13a5f2acc785d8fb6bf6b7ab6bfb0ef5dad4f4d97e8e70bb8e470722312f76f"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "generator"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f04ae4152da20c76fe800fa48659201d5cf627c5149ca0b707b69d7eef6cf9"
+dependencies = [
+ "cc",
+ "cfg-if 1.0.4",
+ "libc",
+ "log",
+ "rustversion",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+]
+
+[[package]]
+name = "gethostname"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1bd49230192a3797a9a4d6abe9b3eed6f7fa4c8a8a4947977c6f80025f92cbd8"
+dependencies = [
+ "rustix 1.1.2",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "335ff9f135e4384c8150d6f27c6daed433577f86b4750418338c01a1a2528592"
+dependencies = [
+ "cfg-if 1.0.4",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if 1.0.4",
+ "js-sys",
+ "libc",
+ "r-efi",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "gl"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a94edab108827d67608095e269cf862e60d920f144a5026d3dbcfd8b877fb404"
+dependencies = [
+ "gl_generator",
+]
+
+[[package]]
+name = "gl_generator"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a95dfc23a2b4a9a2f5ab41d194f8bfda3cabec42af4e39f08c339eb2a0c124d"
+dependencies = [
+ "khronos_api",
+ "log",
+ "xml-rs",
+]
+
+[[package]]
+name = "glam"
+version = "0.29.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8babf46d4c1c9d92deac9f7be466f76dfc4482b6452fc5024b5e8daf6ffeb3ee"
+
+[[package]]
+name = "glam"
+version = "0.30.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd47b05dddf0005d850e5644cae7f2b14ac3df487979dbfff3b56f20b1a6ae46"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "glob"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
+
+[[package]]
+name = "gloo-timers"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbb143cf96099802033e0d4f4963b19fd2e0b728bcf076cd9cf7f6634f092994"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "glow"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e5ea60d70410161c8bf5da3fdfeaa1c72ed2c15f8bbb9d19fe3a4fad085f08"
+dependencies = [
+ "js-sys",
+ "slotmap",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "glutin"
+version = "0.32.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12124de845cacfebedff80e877bb37b5b75c34c5a4c89e47e1cdd67fb6041325"
+dependencies = [
+ "bitflags 2.10.0",
+ "cfg_aliases",
+ "cgl",
+ "dispatch2",
+ "glutin_egl_sys",
+ "glutin_glx_sys",
+ "glutin_wgl_sys",
+ "libloading",
+ "objc2 0.6.3",
+ "objc2-app-kit 0.3.2",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+ "once_cell",
+ "raw-window-handle",
+ "wayland-sys",
+ "windows-sys 0.52.0",
+ "x11-dl",
+]
+
+[[package]]
+name = "glutin-winit"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85edca7075f8fc728f28cb8fbb111a96c3b89e930574369e3e9c27eb75d3788f"
+dependencies = [
+ "cfg_aliases",
+ "glutin",
+ "raw-window-handle",
+ "winit",
+]
+
+[[package]]
+name = "glutin_egl_sys"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c4680ba6195f424febdc3ba46e7a42a0e58743f2edb115297b86d7f8ecc02d2"
+dependencies = [
+ "gl_generator",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "glutin_glx_sys"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a7bb2938045a88b612499fbcba375a77198e01306f52272e692f8c1f3751185"
+dependencies = [
+ "gl_generator",
+ "x11-dl",
+]
+
+[[package]]
+name = "glutin_wgl_sys"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c4ee00b289aba7a9e5306d57c2d05499b2e5dc427f84ac708bd2c090212cf3e"
+dependencies = [
+ "gl_generator",
+]
+
+[[package]]
+name = "gpu-alloc"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fbcd2dba93594b227a1f57ee09b8b9da8892c34d55aa332e034a228d0fe6a171"
+dependencies = [
+ "bitflags 2.10.0",
+ "gpu-alloc-types",
+]
+
+[[package]]
+name = "gpu-alloc-types"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "98ff03b468aa837d70984d55f5d3f846f6ec31fe34bbb97c4f85219caeee1ca4"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "gpu-allocator"
+version = "0.27.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c151a2a5ef800297b4e79efa4f4bec035c5f51d5ae587287c9b952bdf734cacd"
+dependencies = [
+ "log",
+ "presser",
+ "thiserror 1.0.69",
+ "windows 0.58.0",
+]
+
+[[package]]
+name = "gpu-descriptor"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b89c83349105e3732062a895becfc71a8f921bb71ecbbdd8ff99263e3b53a0ca"
+dependencies = [
+ "bitflags 2.10.0",
+ "gpu-descriptor-types",
+ "hashbrown 0.15.5",
+]
+
+[[package]]
+name = "gpu-descriptor-types"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdf242682df893b86f33a73828fb09ca4b2d3bb6cc95249707fc684d27484b91"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3c0b69cfcb4e1b9f1bf2f53f95f766e4661169728ec61cd3fe5a0166f2d1386"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap 2.12.1",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "h264-parser"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab2f85be813ce08f0569fcd816f256c6f4287c975d69a9a14ceacc309f1de967"
+
+[[package]]
+name = "half"
+version = "2.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
+dependencies = [
+ "cfg-if 1.0.4",
+ "crunchy",
+ "num-traits",
+ "zerocopy",
+]
+
+[[package]]
+name = "hang"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b4ffdb9c72ec7f06cacea47589d3b2d71452e85cdb780033d99fbb00e46c98f"
+dependencies = [
+ "anyhow",
+ "buf-list",
+ "bytes",
+ "derive_more 2.1.0",
+ "futures",
+ "h264-parser",
+ "hex",
+ "lazy_static",
+ "moq-lite",
+ "mp4-atom",
+ "num_enum",
+ "regex",
+ "serde",
+ "serde_json",
+ "serde_with",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "hash32"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0c35f58762feb77d74ebe43bdbc3210f09be9fe6742234d573bacc26ed92b67"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hash32"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47d60b12902ba28e2730cd37e95b8c9223af2808df9e902d4df49588d1470606"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8a9ee70c43aaf417c914396645a0fa852624801b24ebb7ae78fe8272889ac888"
+dependencies = [
+ "ahash 0.7.8",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.15.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
+dependencies = [
+ "foldhash 0.1.5",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash 0.2.0",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "heapless"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
+dependencies = [
+ "atomic-polyfill",
+ "hash32 0.2.1",
+ "rustc_version",
+ "serde",
+ "spin 0.9.8",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heapless"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bfb9eb618601c89945a70e254898da93b13be0388091d42117462b265bb3fad"
+dependencies = [
+ "hash32 0.3.1",
+ "portable-atomic",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hermit-abi"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc0fef456e4baa96da950455cd02c081ca953b141298e41db3fc7e36b1da849c"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hexf-parse"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfa686283ad6dd069f105e5ab091b04c62850d3e4cf5d67debad1933f55023df"
+
+[[package]]
+name = "hickory-proto"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8a6fe56c0038198998a6f217ca4e7ef3a5e51f46163bd6dd60b5c71ca6c6502"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "cfg-if 1.0.4",
+ "data-encoding",
+ "enum-as-inner",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "h2",
+ "http",
+ "idna",
+ "ipnet",
+ "once_cell",
+ "rand 0.9.2",
+ "ring",
+ "rustls",
+ "thiserror 2.0.17",
+ "tinyvec",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "hickory-resolver"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a"
+dependencies = [
+ "cfg-if 1.0.4",
+ "futures-util",
+ "hickory-proto",
+ "ipconfig",
+ "moka",
+ "once_cell",
+ "parking_lot",
+ "rand 0.9.2",
+ "resolv-conf",
+ "rustls",
+ "smallvec",
+ "thiserror 2.0.17",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+]
+
+[[package]]
+name = "home"
+version = "0.5.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc627f471c528ff0c4a49e1d5e60450c8f6461dd6d10ba9dcd3a61d3dff7728d"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f471e0a81b2f90ffc0cb2f951ae04da57de8baa46fa99112b062a5173a5088d0"
+dependencies = [
+ "typenum",
+ "zeroize",
+]
+
+[[package]]
+name = "hyper"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "pin-utils",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "727805d60e7938b76b826a6ef209eb70eaa1812794f9424d4a4e2d740662df5f"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2 0.6.1",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.64"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "33e57f83510bb73707521ebaffa789ec8caf86f9657cad665b092b581d40e9fb"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys 0.8.7",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "igd-next"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "516893339c97f6011282d5825ac94fc1c7aad5cad26bdc2d0cee068c0bf97f97"
+dependencies = [
+ "async-trait",
+ "attohttpc",
+ "bytes",
+ "futures",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "log",
+ "rand 0.9.2",
+ "tokio",
+ "url",
+ "xmltree",
+]
+
+[[package]]
+name = "image"
+version = "0.25.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6506c6c10786659413faa717ceebcb8f70731c0a60cbae39795fdf114519c1a"
+dependencies = [
+ "bytemuck",
+ "byteorder-lite",
+ "moxcms",
+ "num-traits",
+ "png",
+ "tiff",
+]
+
+[[package]]
+name = "indexmap"
+version = "1.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bd070e393353796e801d209ad339e89596eb4c8d430d18ede6a1cced8fafbd99"
+dependencies = [
+ "autocfg",
+ "hashbrown 0.12.3",
+ "serde",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ad4bb2b565bca0645f4d68c5c9af97fba094e9791da685bf83cb5f3ce74acf2"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "inout"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7357b6e7aa75618c7864ebd0634b115a7218b0615f4cb1df33ac3eca23943d4"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "instant"
+version = "0.1.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0242819d153cba4b4b05a5a8f2a7e9bbf97b6055b2a002b395c96b5ff3c0222"
+dependencies = [
+ "cfg-if 1.0.4",
+ "js-sys",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "ipconfig"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f"
+dependencies = [
+ "socket2 0.5.10",
+ "widestring",
+ "windows-sys 0.48.0",
+ "winreg",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "iri-string"
+version = "0.7.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4f867b9d1d896b67beb18518eda36fdb77a32ea590de864f1325b294a6d14397"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "iroh"
+version = "0.95.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2374ba3cdaac152dc6ada92d971f7328e6408286faab3b7350842b2ebbed4789"
+dependencies = [
+ "aead",
+ "backon",
+ "bytes",
+ "cfg_aliases",
+ "crypto_box",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "ed25519-dalek",
+ "futures-util",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "igd-next",
+ "instant",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp",
+ "iroh-relay",
+ "n0-error",
+ "n0-future 0.3.1",
+ "n0-watcher 0.5.0",
+ "netdev",
+ "netwatch",
+ "pin-project",
+ "pkarr",
+ "pkcs8",
+ "portmapper",
+ "rand 0.9.2",
+ "reqwest",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-platform-verifier",
+ "rustls-webpki",
+ "serde",
+ "smallvec",
+ "strum",
+ "time",
+ "tokio",
+ "tokio-stream",
+ "tokio-util",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+ "webpki-roots",
+ "z32",
+]
+
+[[package]]
+name = "iroh-base"
+version = "0.95.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "25a8c5fb1cc65589f0d7ab44269a76f615a8c4458356952c9b0ef1c93ea45ff8"
+dependencies = [
+ "curve25519-dalek",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "ed25519-dalek",
+ "n0-error",
+ "rand_core 0.9.3",
+ "serde",
+ "url",
+ "zeroize",
+ "zeroize_derive",
+]
+
+[[package]]
+name = "iroh-gossip"
+version = "0.95.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "026dd31b487ec5e80ac0240f4eb70cd6c0a2800f6ef44beca5329443c194bb22"
+dependencies = [
+ "blake3",
+ "bytes",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "ed25519-dalek",
+ "futures-concurrency",
+ "futures-lite",
+ "futures-util",
+ "hex",
+ "indexmap 2.12.1",
+ "iroh",
+ "iroh-base",
+ "iroh-metrics",
+ "irpc",
+ "n0-error",
+ "n0-future 0.3.1",
+ "postcard",
+ "rand 0.9.2",
+ "serde",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-live"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "buf-list",
+ "byte-unit",
+ "bytemuck",
+ "bytes",
+ "clap",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "eframe",
+ "ffmpeg-next",
+ "ffmpeg-sys-next",
+ "firewheel",
+ "hang",
+ "image",
+ "iroh",
+ "iroh-gossip",
+ "iroh-moq",
+ "iroh-smol-kv",
+ "iroh-tickets",
+ "moq-lite",
+ "moq-media",
+ "n0-error",
+ "n0-future 0.3.1",
+ "n0-watcher 0.6.0",
+ "nokhwa",
+ "postcard",
+ "rand 0.9.2",
+ "serde",
+ "strum",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "tracing-subscriber",
+ "webrtc-audio-processing",
+ "xcap",
+]
+
+[[package]]
+name = "iroh-metrics"
+version = "0.37.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "79e3381da7c93c12d353230c74bba26131d1c8bf3a4d8af0fec041546454582e"
+dependencies = [
+ "iroh-metrics-derive",
+ "itoa",
+ "n0-error",
+ "postcard",
+ "ryu",
+ "serde",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-metrics-derive"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e12bd0763fd16062f5cc5e8db15dd52d26e75a8af4c7fb57ccee3589b344b8"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "iroh-moq"
+version = "0.1.0"
+dependencies = [
+ "iroh",
+ "moq-lite",
+ "n0-error",
+ "n0-future 0.3.1",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "url",
+ "web-transport-iroh",
+]
+
+[[package]]
+name = "iroh-quinn"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde160ebee7aabede6ae887460cd303c8b809054224815addf1469d54a6fcf7"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp",
+ "pin-project-lite",
+ "rustc-hash 2.1.1",
+ "rustls",
+ "socket2 0.5.10",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-proto"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "929d5d8fa77d5c304d3ee7cae9aede31f13908bd049f9de8c7c0094ad6f7c535"
+dependencies = [
+ "bytes",
+ "getrandom 0.2.16",
+ "rand 0.8.5",
+ "ring",
+ "rustc-hash 2.1.1",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-platform-verifier",
+ "slab",
+ "thiserror 2.0.17",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-udp"
+version = "0.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c53afaa1049f7c83ea1331f5ebb9e6ebc5fdd69c468b7a22dd598b02c9bcc973"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2 0.5.10",
+ "tracing",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "iroh-relay"
+version = "0.95.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43fbdf2aeffa7d6ede1a31f6570866c2199b1cee96a0b563994623795d1bac2c"
+dependencies = [
+ "blake3",
+ "bytes",
+ "cfg_aliases",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "lru 0.16.2",
+ "n0-error",
+ "n0-future 0.3.1",
+ "num_enum",
+ "pin-project",
+ "pkarr",
+ "postcard",
+ "rand 0.9.2",
+ "reqwest",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_bytes",
+ "sha1",
+ "strum",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tokio-websockets",
+ "tracing",
+ "url",
+ "webpki-roots",
+ "ws_stream_wasm",
+ "z32",
+]
+
+[[package]]
+name = "iroh-smol-kv"
+version = "0.3.1"
+source = "git+https://github.com/Frando/iroh-smol-kv?branch=iroh-095#ac8a084599b7bf81d7b9f96c7dab7c7c0c7a9f3e"
+dependencies = [
+ "bytes",
+ "ed25519-dalek",
+ "hex",
+ "iroh",
+ "iroh-gossip",
+ "irpc",
+ "n0-error",
+ "n0-future 0.2.0",
+ "postcard",
+ "rand 0.9.2",
+ "rpds",
+ "serde",
+ "serde-big-array",
+ "sync_wrapper",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-tickets"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a322053cacddeca222f0999ce3cf6aa45c64ae5ad8c8911eac9b66008ffbaa5"
+dependencies = [
+ "data-encoding",
+ "derive_more 2.1.0",
+ "iroh-base",
+ "n0-error",
+ "postcard",
+ "serde",
+]
+
+[[package]]
+name = "irpc"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bee97aaa18387c4f0aae61058195dc9f9dea3e41c0e272973fe3e9bf611563d"
+dependencies = [
+ "futures-buffered",
+ "futures-util",
+ "iroh-quinn",
+ "irpc-derive",
+ "n0-error",
+ "n0-future 0.3.1",
+ "postcard",
+ "rcgen",
+ "rustls",
+ "serde",
+ "smallvec",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "irpc-derive"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58148196d2230183c9679431ac99b57e172000326d664e8456fa2cd27af6505a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itertools"
+version = "0.12.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba291022dbbd398a455acf126c1e341954079855bc60dfdda641363bd6922569"
+dependencies = [
+ "either",
+]
+
+[[package]]
+name = "itoa"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4a5f13b858c8d314ee3e8f639011f7ccefe71f97f96e50151fb991f267928e2c"
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if 1.0.4",
+ "combine",
+ "jni-sys",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8eaf4bc02d17cbdd7ff4c7438cafcdf7fb9a4613313ad11b4f8fefe7d3fa0130"
+
+[[package]]
+name = "jobserver"
+version = "0.1.34"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9afb3de4395d6b3e67a780b6de64b51c978ecf11cb9a462c66be7d4ca9039d33"
+dependencies = [
+ "getrandom 0.3.4",
+ "libc",
+]
+
+[[package]]
+name = "js-sys"
+version = "0.3.83"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "464a3709c7f55f1f721e5389aa6ea4e3bc6aba669353300af094b29ffbdde1d8"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "khronos-egl"
+version = "6.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6aae1df220ece3c0ada96b8153459b67eebe9ae9212258bb0134ae60416fdf76"
+dependencies = [
+ "libc",
+ "libloading",
+ "pkg-config",
+]
+
+[[package]]
+name = "khronos_api"
+version = "3.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2db585e1d738fc771bf08a151420d3ed193d9d895a36df7f6f8a9456b911ddc"
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "lazycell"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "830d08ce1d1d941e6b30645f1a0eb5643013d835ce3779a5fc208261dbe10f55"
+
+[[package]]
+name = "libc"
+version = "0.2.178"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37c93d8daa9d8a012fd8ab92f088405fb202ea0b6ab73ee2482ae66af4f42091"
+
+[[package]]
+name = "libloading"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
+dependencies = [
+ "cfg-if 1.0.4",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "libm"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f9fbbcab51052fe104eb5e5d351cf728d30a5be1fe14d9be8a3b097481fb97de"
+
+[[package]]
+name = "libredox"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df15f6eac291ed1cf25865b1ee60399f57e7c227e7f51bdbd4c5270396a9ed50"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+ "redox_syscall 0.6.0",
+]
+
+[[package]]
+name = "libspa"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65f3a4b81b2a2d8c7f300643676202debd1b7c929dbf5c9bb89402ea11d19810"
+dependencies = [
+ "bitflags 2.10.0",
+ "cc",
+ "convert_case 0.6.0",
+ "cookie-factory",
+ "libc",
+ "libspa-sys",
+ "nix 0.27.1",
+ "nom",
+ "system-deps",
+]
+
+[[package]]
+name = "libspa-sys"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf0d9716420364790e85cbb9d3ac2c950bde16a7dd36f3209b7dfdfc4a24d01f"
+dependencies = [
+ "bindgen 0.69.5",
+ "cc",
+ "system-deps",
+]
+
+[[package]]
+name = "libwayshot-xcap"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "558a3a7ca16a17a14adf8f051b3adcd7766d397532f5f6d6a48034db11e54c22"
+dependencies = [
+ "drm",
+ "gbm",
+ "gl",
+ "image",
+ "khronos-egl",
+ "memmap2",
+ "rustix 1.1.2",
+ "thiserror 2.0.17",
+ "tracing",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-protocols-wlr",
+]
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.4.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a385b1be4e5c3e362ad2ffa73c392e53f031eaa5b7d648e64cd87f27f6063d7"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if 1.0.4",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "lru"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "227748d55f2f0ab4735d87fd623798cb6b664512fe979705f829c9f81c934465"
+
+[[package]]
+name = "lru"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96051b46fc183dc9cd4a223960ef37b9af631b55191852a8274bfef064cda20f"
+dependencies = [
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "mach2"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d640282b302c0bb0a2a8e0233ead9035e3bed871f0b7e81fe4a1ec829765db44"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "malloc_buf"
+version = "0.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "62bb907fe88d54d8d9ce32a3cceab4218ed2f6b7d35617cafe9adf84e43919cb"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "memchr"
+version = "2.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
+
+[[package]]
+name = "memmap2"
+version = "0.9.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "744133e4a0e0a658e1374cf3bf8e415c4052a15a111acd372764c55b4177d490"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "memoffset"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "488016bfae457b036d996092f6cb448677611ce4449e970ceaf42695203f218a"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "metal"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e198a0ee42bdbe9ef2c09d0b9426f3b2b47d90d93a4a9b0395c4cea605e92dc0"
+dependencies = [
+ "bitflags 1.3.2",
+ "block",
+ "cocoa",
+ "core-graphics 0.19.2",
+ "foreign-types 0.3.2",
+ "log",
+ "objc",
+]
+
+[[package]]
+name = "metal"
+version = "0.32.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00c15a6f673ff72ddcc22394663290f870fb224c1bfce55734a75c414150e605"
+dependencies = [
+ "bitflags 2.10.0",
+ "block",
+ "core-graphics-types 0.2.0",
+ "foreign-types 0.5.0",
+ "log",
+ "objc",
+ "paste",
+]
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "miniz_oxide"
+version = "0.8.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
+dependencies = [
+ "adler2",
+ "simd-adler32",
+]
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "moka"
+version = "0.12.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8261cd88c312e0004c1d51baad2980c66528dfdb2bee62003e643a4d8f86b077"
+dependencies = [
+ "crossbeam-channel",
+ "crossbeam-epoch",
+ "crossbeam-utils",
+ "equivalent",
+ "parking_lot",
+ "portable-atomic",
+ "rustc_version",
+ "smallvec",
+ "tagptr",
+ "uuid",
+]
+
+[[package]]
+name = "moq-lite"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2c2258f990ddd8465f8dcf343bd00714927cd8b8b81784b153020ca24e47898f"
+dependencies = [
+ "async-channel",
+ "bytes",
+ "futures",
+ "hex",
+ "num_enum",
+ "serde",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+ "web-async",
+ "web-transport-trait",
+]
+
+[[package]]
+name = "moq-media"
+version = "0.1.0"
+dependencies = [
+ "anyhow",
+ "buf-list",
+ "byte-unit",
+ "bytemuck",
+ "bytes",
+ "clap",
+ "data-encoding",
+ "derive_more 2.1.0",
+ "eframe",
+ "ffmpeg-next",
+ "ffmpeg-sys-next",
+ "firewheel",
+ "hang",
+ "image",
+ "moq-lite",
+ "n0-error",
+ "n0-future 0.3.1",
+ "n0-watcher 0.6.0",
+ "nokhwa",
+ "postcard",
+ "rand 0.9.2",
+ "serde",
+ "strum",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "tracing-subscriber",
+ "webrtc-audio-processing",
+ "xcap",
+]
+
+[[package]]
+name = "moxcms"
+version = "0.7.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac9557c559cd6fc9867e122e20d2cbefc9ca29d80d027a8e39310920ed2f0a97"
+dependencies = [
+ "num-traits",
+ "pxfm",
+]
+
+[[package]]
+name = "mozjpeg"
+version = "0.10.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7891b80aaa86097d38d276eb98b3805d6280708c4e0a1e6f6aed9380c51fec9"
+dependencies = [
+ "arrayvec",
+ "bytemuck",
+ "libc",
+ "mozjpeg-sys",
+ "rgb",
+]
+
+[[package]]
+name = "mozjpeg-sys"
+version = "2.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f0dc668bf9bf888c88e2fb1ab16a406d2c380f1d082b20d51dd540ab2aa70c1"
+dependencies = [
+ "cc",
+ "dunce",
+ "libc",
+ "nasm-rs",
+]
+
+[[package]]
+name = "mp4-atom"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58b9fcf396d53fdf1c43a9afd38953412b9d782d11391807b473927317bb28f9"
+dependencies = [
+ "bytes",
+ "derive_more 2.1.0",
+ "num",
+ "paste",
+ "serde",
+ "thiserror 1.0.69",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "n0-error"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7d5969a2f40e9d9ed121a789c415f4114ac2b28e5731c080bdefee217d3b3fb"
+dependencies = [
+ "anyhow",
+ "n0-error-macros",
+ "spez",
+]
+
+[[package]]
+name = "n0-error-macros"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a6908df844696d9af91c7c3950d50e52d67df327d02a95367f95bbf177d6556"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "n0-future"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89d7dd42bd0114c9daa9c4f2255d692a73bba45767ec32cf62892af6fe5d31f6"
+dependencies = [
+ "cfg_aliases",
+ "derive_more 1.0.0",
+ "futures-buffered",
+ "futures-lite",
+ "futures-util",
+ "js-sys",
+ "pin-project",
+ "send_wrapper",
+ "tokio",
+ "tokio-util",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-time",
+]
+
+[[package]]
+name = "n0-future"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c0709ac8235ce13b82bc4d180ee3c42364b90c1a8a628c3422d991d75a728b5"
+dependencies = [
+ "cfg_aliases",
+ "derive_more 1.0.0",
+ "futures-buffered",
+ "futures-lite",
+ "futures-util",
+ "js-sys",
+ "pin-project",
+ "send_wrapper",
+ "tokio",
+ "tokio-util",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-time",
+]
+
+[[package]]
+name = "n0-tracing-test"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "274dc19cfda091561b364e4f61b39aa959ade203232f9794884f1911022e8e59"
+dependencies = [
+ "n0-tracing-test-macro",
+ "tracing-core",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "n0-tracing-test-macro"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab691281e87f2453a860e76dde99157f4464df18cb7cb3eb9c3847161ccc4ce1"
+dependencies = [
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "n0-watcher"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38acf13c1ddafc60eb7316d52213467f8ccb70b6f02b65e7d97f7799b1f50be4"
+dependencies = [
+ "derive_more 2.1.0",
+ "n0-error",
+ "n0-future 0.3.1",
+]
+
+[[package]]
+name = "n0-watcher"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba717c22ceec021ace0ff7674bf8fd60c9394605740a8201678fc1cb3a7398f6"
+dependencies = [
+ "derive_more 2.1.0",
+ "n0-error",
+ "n0-future 0.3.1",
+]
+
+[[package]]
+name = "naga"
+version = "27.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "066cf25f0e8b11ee0df221219010f213ad429855f57c494f995590c861a9a7d8"
+dependencies = [
+ "arrayvec",
+ "bit-set",
+ "bitflags 2.10.0",
+ "cfg-if 1.0.4",
+ "cfg_aliases",
+ "codespan-reporting",
+ "half",
+ "hashbrown 0.16.1",
+ "hexf-parse",
+ "indexmap 2.12.1",
+ "libm",
+ "log",
+ "num-traits",
+ "once_cell",
+ "rustc-hash 1.1.0",
+ "spirv",
+ "thiserror 2.0.17",
+ "unicode-ident",
+]
+
+[[package]]
+name = "nanorand"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6a51313c5820b0b02bd422f4b44776fbf47961755c74ce64afc73bfad10226c3"
+dependencies = [
+ "getrandom 0.2.16",
+]
+
+[[package]]
+name = "nasm-rs"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34f676553b60ccbb76f41f9ae8f2428dac3f259ff8f1c2468a174778d06a1af9"
+dependencies = [
+ "jobserver",
+ "log",
+]
+
+[[package]]
+name = "ndk"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3f42e7bbe13d351b6bead8286a43aac9534b82bd3cc43e47037f012ebfd62d4"
+dependencies = [
+ "bitflags 2.10.0",
+ "jni-sys",
+ "log",
+ "ndk-sys",
+ "num_enum",
+ "raw-window-handle",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "ndk-context"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27b02d87554356db9e9a873add8782d4ea6e3e58ea071a9adb9a2e8ddb884a8b"
+
+[[package]]
+name = "ndk-sys"
+version = "0.6.0+11769913"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee6cda3051665f1fb8d9e08fc35c96d5a244fb1be711a03b71118828afc9a873"
+dependencies = [
+ "jni-sys",
+]
+
+[[package]]
+name = "netdev"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67ab878b4c90faf36dab10ea51d48c69ae9019bcca47c048a7c9b273d5d7a823"
+dependencies = [
+ "dlopen2",
+ "ipnet",
+ "libc",
+ "netlink-packet-core",
+ "netlink-packet-route",
+ "netlink-sys",
+ "once_cell",
+ "system-configuration",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "netlink-packet-core"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3463cbb78394cb0141e2c926b93fc2197e473394b761986eca3b9da2c63ae0f4"
+dependencies = [
+ "paste",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ec2f5b6839be2a19d7fa5aab5bc444380f6311c2b693551cb80f45caaa7b5ef"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-proto"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b65d130ee111430e47eed7896ea43ca693c387f097dd97376bffafbf25812128"
+dependencies = [
+ "bytes",
+ "futures",
+ "log",
+ "netlink-packet-core",
+ "netlink-sys",
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "netlink-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16c903aa70590cb93691bf97a767c8d1d6122d2cc9070433deb3bbf36ce8bd23"
+dependencies = [
+ "bytes",
+ "futures",
+ "libc",
+ "log",
+ "tokio",
+]
+
+[[package]]
+name = "netwatch"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26f2acd376ef48b6c326abf3ba23c449e0cb8aa5c2511d189dd8a8a3bfac889b"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "cfg_aliases",
+ "derive_more 2.1.0",
+ "iroh-quinn-udp",
+ "js-sys",
+ "libc",
+ "n0-error",
+ "n0-future 0.3.1",
+ "n0-watcher 0.5.0",
+ "netdev",
+ "netlink-packet-core",
+ "netlink-packet-route",
+ "netlink-proto",
+ "netlink-sys",
+ "pin-project-lite",
+ "serde",
+ "socket2 0.6.1",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "web-sys",
+ "windows 0.62.2",
+ "windows-result 0.4.1",
+ "wmi",
+]
+
+[[package]]
+name = "nix"
+version = "0.27.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2eb04e9c688eff1c89d72b407f168cf79bb9e867a9d3323ed6c01519eb9cc053"
+dependencies = [
+ "bitflags 2.10.0",
+ "cfg-if 1.0.4",
+ "libc",
+]
+
+[[package]]
+name = "nix"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
+dependencies = [
+ "bitflags 2.10.0",
+ "cfg-if 1.0.4",
+ "cfg_aliases",
+ "libc",
+ "memoffset",
+]
+
+[[package]]
+name = "nohash-hasher"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bf50223579dc7cdcfb3bfcacf7069ff68243f8c363f62ffa99cf000a6b9c451"
+
+[[package]]
+name = "nokhwa"
+version = "0.10.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4cae50786bfa1214ed441f98addbea51ca1b9aaa9e4bf5369cda36654b3efaa"
+dependencies = [
+ "flume",
+ "image",
+ "nokhwa-bindings-linux",
+ "nokhwa-bindings-macos",
+ "nokhwa-bindings-windows",
+ "nokhwa-core",
+ "parking_lot",
+ "paste",
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "nokhwa-bindings-linux"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4bd666aaa41d14357817bd9a981773a73c4d00b34d344cfc244e47ebd397b1ec"
+dependencies = [
+ "nokhwa-core",
+ "v4l",
+]
+
+[[package]]
+name = "nokhwa-bindings-macos"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "de78eb4a2d47a68f490899aa0516070d7a972f853ec2bb374ab53be0bd39b60f"
+dependencies = [
+ "block",
+ "cocoa-foundation",
+ "core-foundation 0.10.1",
+ "core-media-sys",
+ "core-video-sys",
+ "flume",
+ "nokhwa-core",
+ "objc",
+ "once_cell",
+]
+
+[[package]]
+name = "nokhwa-bindings-windows"
+version = "0.4.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899799275c93ef69bbe8cb888cf6f8249abe751cbc50be5299105022aec14a1c"
+dependencies = [
+ "nokhwa-core",
+ "once_cell",
+ "windows 0.62.2",
+]
+
+[[package]]
+name = "nokhwa-core"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "109975552bbd690894f613bce3d408222911e317197c72b2e8b9a1912dc261ae"
+dependencies = [
+ "bytes",
+ "image",
+ "mozjpeg",
+ "thiserror 2.0.17",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "nonmax"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "610a5acd306ec67f907abe5567859a3c693fb9886eb1f012ab8f2a47bef3db51"
+
+[[package]]
+name = "ntimestamp"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c50f94c405726d3e0095e89e72f75ce7f6587b94a8bd8dc8054b73f65c0fd68c"
+dependencies = [
+ "base32",
+ "document-features",
+ "getrandom 0.2.16",
+ "httpdate",
+ "js-sys",
+ "once_cell",
+ "serde",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "35bd024e8b2ff75562e5f34e7f4905839deb4b22955ef5e73d2fea1b9813cb23"
+dependencies = [
+ "num-bigint",
+ "num-complex",
+ "num-integer",
+ "num-iter",
+ "num-rational",
+ "num-traits",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-complex"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73f88a1307638156682bada9d7604135552957b7818057dcef22705b4d509495"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "51d515d32fb182ee37cda2ccdcb92950d6a3c2893aa280e540671c2cd0f3b1d9"
+
+[[package]]
+name = "num-derive"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed3955f1a9c7c0c15e092f9c887db08b1fc683305fdf6eb6684f22555355e202"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-iter"
+version = "0.1.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1429034a0490724d0075ebb2bc9e875d6503c3cf69e235a8941aa757d83ef5bf"
+dependencies = [
+ "autocfg",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-rational"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f83d14da390562dca69fc84082e73e548e1ad308d24accdedd2720017cb37824"
+dependencies = [
+ "num-bigint",
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+ "libm",
+]
+
+[[package]]
+name = "num_cpus"
+version = "1.17.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91df4bbde75afed763b708b7eee1e8e7651e02d97f6d5dd763e89367e957b23b"
+dependencies = [
+ "hermit-abi",
+ "libc",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1207a7e20ad57b847bbddc6776b968420d38292bbfe2089accff5e19e82454c"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff32365de1b6743cb203b710788263c44a03de03802daf96092f2da4fe6ba4d7"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "objc"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "915b1b472bc21c53464d6c8461c9d3af805ba1ef837e1cac254428f4a77177b1"
+dependencies = [
+ "malloc_buf",
+ "objc_exception",
+]
+
+[[package]]
+name = "objc-sys"
+version = "0.3.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdb91bdd390c7ce1a8607f35f3ca7151b65afc0ff5ff3b34fa350f7d7c7e4310"
+
+[[package]]
+name = "objc2"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "46a785d4eeff09c14c487497c162e92766fbb3e4059a71840cecc03d9a50b804"
+dependencies = [
+ "objc-sys",
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c2599ce0ec54857b29ce62166b0ed9b4f6f1a70ccc9a71165b6154caca8c05"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e4e89ad9e3d7d297152b17d39ed92cd50ca8063a89a9fa569046d41568891eff"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "libc",
+ "objc2 0.5.2",
+ "objc2-core-data 0.2.2",
+ "objc2-core-image 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-quartz-core 0.2.2",
+]
+
+[[package]]
+name = "objc2-app-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d49e936b501e5c5bf01fda3a9452ff86dc3ea98ad5f283e1455153142d97518c"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.3",
+ "objc2-cloud-kit 0.3.2",
+ "objc2-core-data 0.3.2",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image 0.3.2",
+ "objc2-core-text",
+ "objc2-core-video",
+ "objc2-foundation 0.3.2",
+ "objc2-quartz-core 0.3.2",
+]
+
+[[package]]
+name = "objc2-audio-toolbox"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6948501a91121d6399b79abaa33a8aa4ea7857fe019f341b8c23ad6e81b79b08"
+dependencies = [
+ "bitflags 2.10.0",
+ "libc",
+ "objc2 0.6.3",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-av-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "478ae33fcac9df0a18db8302387c666b8ef08a3e2d62b510ca4fc278a384b6c0"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "dispatch2",
+ "objc2 0.6.3",
+ "objc2-avf-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-image 0.3.2",
+ "objc2-core-video",
+ "objc2-foundation 0.3.2",
+ "objc2-image-io",
+ "objc2-media-toolbox",
+ "objc2-quartz-core 0.3.2",
+]
+
+[[package]]
+name = "objc2-avf-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13a380031deed8e99db00065c45937da434ca987c034e13b87e4441f9e4090be"
+dependencies = [
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "74dd3b56391c7a0596a295029734d3c1c5e7e510a4cb30245f8221ccea96b009"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-cloud-kit"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "73ad74d880bb43877038da939b7427bba67e9dd42004a18b809ba7d87cee241c"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-contacts"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5ff520e9c33812fd374d8deecef01d4a840e7b41862d849513de77e44aa4889"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-audio"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1eebcea8b0dbff5f7c8504f3107c68fc061a3eb44932051c8cf8a68d969c3b2"
+dependencies = [
+ "dispatch2",
+ "objc2 0.6.3",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-core-audio-types"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a89f2ec274a0cf4a32642b2991e8b351a404d290da87bb6a9a9d8632490bd1c"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "617fbf49e071c178c0b24c080767db52958f716d9eabdf0890523aeae54773ef"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-data"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b402a653efbb5e82ce4df10683b6b28027616a2715e90009947d50b8dd298fa"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "dispatch2",
+ "libc",
+ "objc2 0.6.3",
+]
+
+[[package]]
+name = "objc2-core-graphics"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e022c9d066895efa1345f8e33e584b9f958da2fd4cd116792e15e07e4720a807"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "dispatch2",
+ "libc",
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+ "objc2-io-surface",
+ "objc2-metal 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55260963a527c99f1819c4f8e3b47fe04f9650694ef348ffd2227e8196d34c80"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-image"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5d563b38d2b97209f8e861173de434bd0214cf020e3423a52624cd1d989f006"
+dependencies = [
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-core-location"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "000cfee34e683244f284252ee206a27953279d370e309649dc3ee317b37e5781"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-contacts",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-core-media"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05ec576860167a15dd9fce7fbee7512beb4e31f532159d3482d1f9c6caedf31d"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "dispatch2",
+ "objc2 0.6.3",
+ "objc2-core-audio",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-core-video",
+]
+
+[[package]]
+name = "objc2-core-text"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0cde0dfb48d25d2b4862161a4d5fcc0e3c24367869ad306b0c9ec0073bfed92d"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-core-video"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d425caf1df73233f29fd8a5c3e5edbc30d2d4307870f802d18f00d83dc5141a6"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-io-surface",
+ "objc2-metal 0.3.2",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-foundation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ee638a5da3799329310ad4cfa62fbf045d5f56e3ef5ba4149e7452dcf89d5a8"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "dispatch",
+ "libc",
+ "objc2 0.5.2",
+]
+
+[[package]]
+name = "objc2-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3e0adef53c21f888deb4fa59fc59f7eb17404926ee8a6f59f5df0fd7f9f3272"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.6.2",
+ "libc",
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-image-io"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32b0446e98cf4a784cc7a0177715ff317eeaa8463841c616cfc78aa4f953c4ea"
+dependencies = [
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+]
+
+[[package]]
+name = "objc2-io-surface"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "180788110936d59bab6bd83b6060ffdfffb3b922ba1396b312ae795e1de9d81d"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-link-presentation"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1a1ae721c5e35be65f01a03b6d2ac13a54cb4fa70d8a5da293d7b0020261398"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-media-toolbox"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edd9fdde720df3da7046bb9097811000c1e7ab5cd579fa89d96b27d56781fb30"
+dependencies = [
+ "objc2 0.6.3",
+ "objc2-core-audio-types",
+ "objc2-core-foundation",
+ "objc2-core-media",
+]
+
+[[package]]
+name = "objc2-metal"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd0cba1276f6023976a406a14ffa85e1fdd19df6b0f737b063b95f6c8c7aadd6"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-metal"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a0125f776a10d00af4152d74616409f0d4a2053a6f57fa5b7d6aa2854ac04794"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e42bee7bff906b14b167da2bac5efe6b6a07e6f7c0a21a7308d40c960242dc7a"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+ "objc2-metal 0.2.2",
+]
+
+[[package]]
+name = "objc2-quartz-core"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c1358452b371bf9f104e21ec536d37a650eb10f7ee379fff67d2e08d537f1f"
+dependencies = [
+ "bitflags 2.10.0",
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+]
+
+[[package]]
+name = "objc2-symbols"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0a684efe3dec1b305badae1a28f6555f6ddd3bb2c2267896782858d5a78404dc"
+dependencies = [
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-ui-kit"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8bb46798b20cd6b91cbd113524c490f1686f4c4e8f49502431415f3512e2b6f"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-cloud-kit 0.2.2",
+ "objc2-core-data 0.2.2",
+ "objc2-core-image 0.2.2",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+ "objc2-link-presentation",
+ "objc2-quartz-core 0.2.2",
+ "objc2-symbols",
+ "objc2-uniform-type-identifiers",
+ "objc2-user-notifications",
+]
+
+[[package]]
+name = "objc2-uniform-type-identifiers"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44fa5f9748dbfe1ca6c0b79ad20725a11eca7c2218bceb4b005cb1be26273bfe"
+dependencies = [
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc2-user-notifications"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76cfcbf642358e8689af64cee815d139339f3ed8ad05103ed5eaf73db8d84cb3"
+dependencies = [
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "objc2 0.5.2",
+ "objc2-core-location",
+ "objc2-foundation 0.2.2",
+]
+
+[[package]]
+name = "objc_exception"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad970fb455818ad6cba4c122ad012fae53ae8b4795f86378bce65e4f6bab2ca4"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7"
+dependencies = [
+ "asn1-rs",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+dependencies = [
+ "critical-section",
+ "portable-atomic",
+]
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "openssl-probe"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d05e27ee213611ffe7d6348b942e8f942b37114c00cc03cec254295a4a17852e"
+
+[[package]]
+name = "orbclient"
+version = "0.3.49"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "247ad146e19b9437f8604c21f8652423595cf710ad108af40e77d3ae6e96b827"
+dependencies = [
+ "libredox",
+]
+
+[[package]]
+name = "ordered-float"
+version = "5.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f4779c6901a562440c3786d08192c6fbda7c1c2060edd10006b05ee35d10f2d"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "ordered-stream"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aa2b01e1d916879f73a53d01d1d6cee68adbb31d6d9177a8cfce093cced1d50"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "owned_ttf_parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36820e9051aca1014ddc75770aab4d68bc1e9e632f0f5627c4086bc216fb583b"
+dependencies = [
+ "ttf-parser",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if 1.0.4",
+ "libc",
+ "redox_syscall 0.5.18",
+ "smallvec",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "peeking_take_while"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19b17cddbe7ec3f8bc800887bab5e717348c95ea2ca0b1bf0837fb964dc67099"
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6305423e0e7738146434843d1694d621cce767262b2a86910beab705e4493d9"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pharos"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9567389417feee6ce15dd6527a8a1ecac205ef62c2932bcf3d9f6fc5b78b414"
+dependencies = [
+ "futures",
+ "rustc_version",
+]
+
+[[package]]
+name = "pin-project"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "piper"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96c8c490f422ef9a4efd2cb5b42b76c8613d7e7dfc1caf667b8a3350a5acc066"
+dependencies = [
+ "atomic-waker",
+ "fastrand",
+ "futures-io",
+]
+
+[[package]]
+name = "pipewire"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08e645ba5c45109106d56610b3ee60eb13a6f2beb8b74f8dc8186cf261788dda"
+dependencies = [
+ "anyhow",
+ "bitflags 2.10.0",
+ "libc",
+ "libspa",
+ "libspa-sys",
+ "nix 0.27.1",
+ "once_cell",
+ "pipewire-sys",
+ "thiserror 1.0.69",
+]
+
+[[package]]
+name = "pipewire-sys"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "849e188f90b1dda88fe2bfe1ad31fe5f158af2c98f80fb5d13726c44f3f01112"
+dependencies = [
+ "bindgen 0.69.5",
+ "libspa-sys",
+ "system-deps",
+]
+
+[[package]]
+name = "pkarr"
+version = "5.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "792c1328860f6874e90e3b387b4929819cc7783a6bd5a4728e918706eb436a48"
+dependencies = [
+ "async-compat",
+ "base32",
+ "bytes",
+ "cfg_aliases",
+ "document-features",
+ "dyn-clone",
+ "ed25519-dalek",
+ "futures-buffered",
+ "futures-lite",
+ "getrandom 0.3.4",
+ "log",
+ "lru 0.13.0",
+ "ntimestamp",
+ "reqwest",
+ "self_cell",
+ "serde",
+ "sha1_smol",
+ "simple-dns",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.11.0-rc.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77089aec8290d0b7bb01b671b091095cf1937670725af4fd73d47249f03b12c0"
+dependencies = [
+ "der",
+ "spki",
+]
+
+[[package]]
+name = "pkg-config"
+version = "0.3.32"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7edddbd0b52d732b21ad9a5fab5c704c14cd949e5e9a1ec5929a24fded1b904c"
+
+[[package]]
+name = "png"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97baced388464909d42d89643fe4361939af9b7ce7a31ee32a168f832a70f2a0"
+dependencies = [
+ "bitflags 2.10.0",
+ "crc32fast",
+ "fdeflate",
+ "flate2",
+ "miniz_oxide",
+]
+
+[[package]]
+name = "polling"
+version = "3.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5d0e4f59085d47d8241c88ead0f274e8a0cb551f3625263c05eb8dd897c34218"
+dependencies = [
+ "cfg-if 1.0.4",
+ "concurrent-queue",
+ "hermit-abi",
+ "pin-project-lite",
+ "rustix 1.1.2",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "poly1305"
+version = "0.9.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fb78a635f75d76d856374961deecf61031c0b6f928c83dc9c0924ab6c019c298"
+dependencies = [
+ "cpufeatures",
+ "universal-hash",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f84267b20a16ea918e43c6a88433c2d54fa145c92a811b5b047ccbe153674483"
+
+[[package]]
+name = "portable-atomic-util"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8a2f0d8d040d7848a709caf78912debcc3f33ee4b3cac47d73d1e1069e83507"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "portmapper"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b575f975dcf03e258b0c7ab3f81497d7124f508884c37da66a7314aa2a8d467"
+dependencies = [
+ "base64",
+ "bytes",
+ "derive_more 2.1.0",
+ "futures-lite",
+ "futures-util",
+ "hyper-util",
+ "igd-next",
+ "iroh-metrics",
+ "libc",
+ "n0-error",
+ "netwatch",
+ "num_enum",
+ "rand 0.9.2",
+ "serde",
+ "smallvec",
+ "socket2 0.6.1",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "postcard"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6764c3b5dd454e283a30e6dfe78e9b31096d9e32036b5d1eaac7a6119ccb9a24"
+dependencies = [
+ "cobs",
+ "embedded-io 0.4.0",
+ "embedded-io 0.6.1",
+ "heapless 0.7.17",
+ "postcard-derive",
+ "serde",
+]
+
+[[package]]
+name = "postcard-derive"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0232bd009a197ceec9cc881ba46f727fcd8060a2d8d6a9dde7a69030a6fe2bb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "presser"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e8cf8e6a8aa66ce33f63993ffc4ea4271eb5b0530a9002db8455ea6050c77bfa"
+
+[[package]]
+name = "prettyplease"
+version = "0.2.37"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
+dependencies = [
+ "proc-macro2",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "primal-check"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc0d895b311e3af9902528fbb8f928688abbd95872819320517cc24ca6b2bd08"
+dependencies = [
+ "num-integer",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219cb19e96be00ab2e37d6e299658a0cfa83e52429179969b0f0121b4ac46983"
+dependencies = [
+ "toml_edit 0.23.10+spec-1.0.0",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.103"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5ee95bc4ef87b8d5ba32e8b7714ccc834865276eab0aed5c9958d00ec45f49e8"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "profiling"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3eb8486b569e12e2c32ad3e204dbaba5e4b5b216e9367044f25f1dba42341773"
+
+[[package]]
+name = "ptr_meta"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0738ccf7ea06b608c10564b31debd4f5bc5e197fc8bfe088f68ae5ce81e7a4f1"
+dependencies = [
+ "ptr_meta_derive",
+]
+
+[[package]]
+name = "ptr_meta_derive"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16b845dbfca988fa33db069c0e230574d15a3088f147a87b64c7589eb662c9ac"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "pxfm"
+version = "0.1.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7186d3822593aa4393561d186d1393b3923e9d6163d3fbfd6e825e3e6cf3e6a8"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "quick-error"
+version = "2.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a993555f31e5a609f617c12db6250dedcac1b0a85076912c436e6fc9b2c8e6a3"
+
+[[package]]
+name = "quick-xml"
+version = "0.30.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eff6510e86862b57b210fd8cbe8ed3f0d7d600b9c2863cd4549a2e033c66e956"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.36.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f7649a7b4df05aed9ea7ec6f628c67c9953a43869b8bc50929569b2999d443fe"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.37.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "331e97a1af0bf59823e6eadffe373d7b27f485be8748f71471c662c1f269b7fb"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash 2.1.1",
+ "rustls",
+ "socket2 0.6.1",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand 0.9.2",
+ "ring",
+ "rustc-hash 2.1.1",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.17",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2 0.6.1",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.42"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a338cc41d27e6cc6dce6cefc13a0729dfbb81c262b1f519331575dd80ef3067f"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "radium"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
+
+[[package]]
+name = "rand"
+version = "0.8.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
+dependencies = [
+ "libc",
+ "rand_chacha 0.3.1",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha 0.9.0",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.6.4",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core 0.9.3",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.6.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
+dependencies = [
+ "getrandom 0.2.16",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "99d9a13982dcf210057a8a78572b2217b667c3beacbf3a0d8b454f6f82837d38"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "range-alloc"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3d6831663a5098ea164f89cff59c6284e95f4e3c76ce9848d4529f5ccca9bde"
+
+[[package]]
+name = "raw-window-handle"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "20675572f6f24e9e76ef639bc5552774ed45f1c30e2951e1e99c59888861c539"
+
+[[package]]
+name = "rcgen"
+version = "0.14.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ec0a99f2de91c3cddc84b37e7db80e4d96b743e05607f647eb236fc0455907f"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser",
+ "yasna",
+]
+
+[[package]]
+name = "realfft"
+version = "3.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f821338fddb99d089116342c46e9f1fbf3828dba077674613e734e01d6ea8677"
+dependencies = [
+ "rustfft",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4722d768eff46b75989dd134e5c353f0d6296e5aaa3132e776cbdb56be7731aa"
+dependencies = [
+ "bitflags 1.3.2",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ec96166dafa0886eb81fe1c0a388bece180fbef2135f97c1e2cf8302e74b43b5"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "ref-cast"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f354300ae66f76f1c85c5f84693f0ce81d747e2c3f21a45fef496d89c960bf7d"
+dependencies = [
+ "ref-cast-impl",
+]
+
+[[package]]
+name = "ref-cast-impl"
+version = "1.0.25"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7186006dcb21920990093f30e3dea63b7d6e977bf1256be20c3563a5db070da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "regex"
+version = "1.12.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "843bc0191f75f3e22651ae5f1e72939ab2f72a4bc30fa80a066bd66edefc24d4"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-automata",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
+
+[[package]]
+name = "rend"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "71fe3824f5629716b1589be05dacd749f6aa084c87e00e016714a8cdfccc997c"
+dependencies = [
+ "bytecheck",
+]
+
+[[package]]
+name = "renderdoc-sys"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19b30a45b0cd0bcca8037f3d0dc3421eaf95327a17cad11964fb8179b4fc4832"
+
+[[package]]
+name = "reqwest"
+version = "0.12.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b4c14b2d9afca6a60277086b0cc6a6ae0b568f6f7916c943a8cdc79f8be240f"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "resolv-conf"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e061d1b48cb8d38042de4ae0a7a6401009d6143dc80d2e2d6f31f0bdd6470c7"
+
+[[package]]
+name = "rgb"
+version = "0.8.52"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c6a884d2998352bb4daf0183589aec883f16a6da1f4dde84d8e2e9a5409a1ce"
+dependencies = [
+ "bytemuck",
+]
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if 1.0.4",
+ "getrandom 0.2.16",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "ringbuf"
+version = "0.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe47b720588c8702e34b5979cb3271a8b1842c7cb6f57408efa70c779363488c"
+dependencies = [
+ "crossbeam-utils",
+ "portable-atomic",
+ "portable-atomic-util",
+]
+
+[[package]]
+name = "rkyv"
+version = "0.7.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9008cd6385b9e161d8229e1f6549dd23c3d022f132a2ea37ac3a10ac4935779b"
+dependencies = [
+ "bitvec",
+ "bytecheck",
+ "bytes",
+ "hashbrown 0.12.3",
+ "ptr_meta",
+ "rend",
+ "rkyv_derive",
+ "seahash",
+ "tinyvec",
+ "uuid",
+]
+
+[[package]]
+name = "rkyv_derive"
+version = "0.7.45"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "503d1d27590a2b0a3a4ca4c94755aa2875657196ecbf401a42eff41d7de532c0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 1.0.109",
+]
+
+[[package]]
+name = "rpds"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e75f485e819d4d3015e6c0d55d02a4fd3db47c1993d9e603e0361fba2bffb34"
+dependencies = [
+ "archery",
+ "serde",
+]
+
+[[package]]
+name = "rtgc"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ff37e188d26f62b595065458583a6a7101a52343b112c10a2b277e7a490247d"
+dependencies = [
+ "bevy_platform",
+]
+
+[[package]]
+name = "rubato"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5258099699851cfd0082aeb645feb9c084d9a5e1f1b8d5372086b989fc5e56a1"
+dependencies = [
+ "num-complex",
+ "num-integer",
+ "num-traits",
+ "realfft",
+]
+
+[[package]]
+name = "rust_decimal"
+version = "1.39.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "35affe401787a9bd846712274d97654355d21b2a2c092a3139aabe31e9022282"
+dependencies = [
+ "arrayvec",
+ "borsh",
+ "bytes",
+ "num-traits",
+ "rand 0.8.5",
+ "rkyv",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rustfft"
+version = "6.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21db5f9893e91f41798c88680037dba611ca6674703c1a18601b01a72c8adb89"
+dependencies = [
+ "num-complex",
+ "num-integer",
+ "num-traits",
+ "primal-check",
+ "strength_reduce",
+ "transpose",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustix"
+version = "0.38.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
+dependencies = [
+ "bitflags 2.10.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.4.15",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd15f8a2c5551a84d56efdc1cd049089e409ac19a3072d5037a17fd70719ff3e"
+dependencies = [
+ "bitflags 2.10.0",
+ "errno",
+ "libc",
+ "linux-raw-sys 0.11.0",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "533f54bc6a7d4f647e46ad909549eda97bf5afc1585190ef692b4286b198bd8f"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9980d917ebb0c0536119ba501e90834767bffc3d60641457fd84a1f3fd337923"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21e6f2ab2928ca4291b86736a8bd920a277a399bba1589409d72154ff87c1282"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-platform-verifier"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "19787cda76408ec5404443dc8b31795c87cd8fec49762dc75fa727740d34acc1"
+dependencies = [
+ "core-foundation 0.10.1",
+ "core-foundation-sys 0.8.7",
+ "jni",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-platform-verifier-android",
+ "rustls-webpki",
+ "security-framework",
+ "security-framework-sys",
+ "webpki-root-certs 0.26.11",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "rustls-platform-verifier-android"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ffdfa2f5286e2247234e03f680868ac2815974dc39e00ea15adc445d0aafe52"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "28d3b2b1366ec20994f1fd18c3c594f05c5dd4bc44d8bb0c1c632c8d6829481f"
+
+[[package]]
+name = "salsa20"
+version = "0.11.0-rc.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3ff3b81c8a6e381bc1673768141383f9328048a60edddcfc752a8291a138443"
+dependencies = [
+ "cfg-if 1.0.4",
+ "cipher",
+]
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schannel"
+version = "0.1.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "schemars"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd191f9397d57d581cddd31014772520aa448f65ef991055d7f61582c65165f"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "schemars"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9558e172d4e8533736ba97870c4b2cd63f84b382a3d6eb063da41b91cce17289"
+dependencies = [
+ "dyn-clone",
+ "ref-cast",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "sctk-adwaita"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6277f0217056f77f1d8f49f2950ac6c278c0d607c45f5ee99328d792ede24ec"
+dependencies = [
+ "ab_glyph",
+ "log",
+ "memmap2",
+ "smithay-client-toolkit 0.19.2",
+ "tiny-skia",
+]
+
+[[package]]
+name = "seahash"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1c107b6f4780854c8b126e228ea8869f4d7b71260f962fefb57b996b8959ba6b"
+
+[[package]]
+name = "security-framework"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation 0.10.1",
+ "core-foundation-sys 0.8.7",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0"
+dependencies = [
+ "core-foundation-sys 0.8.7",
+ "libc",
+]
+
+[[package]]
+name = "self_cell"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16c2f82143577edb4921b71ede051dac62ca3c16084e918bf7b40c96ae10eb33"
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-big-array"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11fc7cc2c76d73e0f27ee52abbd64eec84d46f370c88371120433196934e4b7f"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.145"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "402a6f66d8c709116cf22f558eab210f5a50187f702eb4d7e5ef38d9a7f1c79c"
+dependencies = [
+ "itoa",
+ "memchr",
+ "ryu",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_repr"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175ee3e80ae9982737ca543e96133087cbd9a485eecc3bc4de9c1a37b47ea59c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "0.6.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "serde_with"
+version = "3.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fa237f2807440d238e0364a218270b98f767a00d3dada77b1c53ae88940e2e7"
+dependencies = [
+ "base64",
+ "chrono",
+ "hex",
+ "indexmap 1.9.3",
+ "indexmap 2.12.1",
+ "schemars 0.9.0",
+ "schemars 1.1.0",
+ "serde_core",
+ "serde_json",
+ "serde_with_macros",
+ "time",
+]
+
+[[package]]
+name = "serde_with_macros"
+version = "3.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52a8e3ca0ca629121f70ab50f95249e5a6f925cc0f6ffe8256c45b728875706c"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "serdect"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3ef0e35b322ddfaecbc60f34ab448e157e48531288ee49fafbb053696b8ffe2"
+dependencies = [
+ "base16ct",
+ "serde",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c5e046edf639aa2e7afb285589e5405de2ef7e61d4b0ac1e30256e3eab911af9"
+dependencies = [
+ "cfg-if 1.0.4",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sha1_smol"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbfa15b3dddfee50a0fff136974b3e1bde555604ba463834a7eb7deb6417705d"
+
+[[package]]
+name = "sha2"
+version = "0.11.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1e3878ab0f98e35b2df35fe53201d088299b41a6bb63e3e34dada2ac4abd924"
+dependencies = [
+ "cfg-if 1.0.4",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7664a098b8e616bdfcc2dc0e9ac44eb231eedf41db4e9fe95d8d32ec728dedad"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "3.0.0-rc.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a0251c9d6468f4ba853b6352b190fb7c1e405087779917c238445eb03993826"
+
+[[package]]
+name = "simd-adler32"
+version = "0.3.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e320a6c5ad31d271ad523dcf3ad13e2767ad8b1cb8f047f75a8aeaf8da139da2"
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "simple-dns"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dee851d0e5e7af3721faea1843e8015e820a234f81fda3dea9247e15bac9a86a"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "slab"
+version = "0.4.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
+
+[[package]]
+name = "slotmap"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bdd58c3c93c3d278ca835519292445cb4b0d4dc59ccfdf7ceadaab3f8aeb4038"
+dependencies = [
+ "version_check",
+]
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "smithay-client-toolkit"
+version = "0.19.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3457dea1f0eb631b4034d61d4d8c32074caa6cd1ab2d59f2327bd8461e2c0016"
+dependencies = [
+ "bitflags 2.10.0",
+ "calloop 0.13.0",
+ "calloop-wayland-source 0.3.0",
+ "cursor-icon",
+ "libc",
+ "log",
+ "memmap2",
+ "rustix 0.38.44",
+ "thiserror 1.0.69",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-csd-frame",
+ "wayland-cursor",
+ "wayland-protocols",
+ "wayland-protocols-wlr",
+ "wayland-scanner",
+ "xkeysym",
+]
+
+[[package]]
+name = "smithay-client-toolkit"
+version = "0.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0512da38f5e2b31201a93524adb8d3136276fa4fe4aafab4e1f727a82b534cc0"
+dependencies = [
+ "bitflags 2.10.0",
+ "calloop 0.14.3",
+ "calloop-wayland-source 0.4.1",
+ "cursor-icon",
+ "libc",
+ "log",
+ "memmap2",
+ "rustix 1.1.2",
+ "thiserror 2.0.17",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-csd-frame",
+ "wayland-cursor",
+ "wayland-protocols",
+ "wayland-protocols-experimental",
+ "wayland-protocols-misc",
+ "wayland-protocols-wlr",
+ "wayland-scanner",
+ "xkeysym",
+]
+
+[[package]]
+name = "smithay-clipboard"
+version = "0.7.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "71704c03f739f7745053bde45fa203a46c58d25bc5c4efba1d9a60e9dba81226"
+dependencies = [
+ "libc",
+ "smithay-client-toolkit 0.20.0",
+ "wayland-backend",
+]
+
+[[package]]
+name = "smol_str"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd538fb6910ac1099850255cf94a94df6551fbdd602454387d0adb2d1ca6dead"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "socket2"
+version = "0.5.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
+dependencies = [
+ "libc",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "17129e116933cf371d018bb80ae557e889637989d8638274fb25622827b03881"
+dependencies = [
+ "libc",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "spez"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c87e960f4dca2788eeb86bbdde8dd246be8948790b7618d656e68f9b720a86e8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spin"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
+dependencies = [
+ "portable-atomic",
+]
+
+[[package]]
+name = "spirv"
+version = "0.3.0+sdk-1.3.268.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eda41003dc44290527a59b13432d4a0379379fa074b70174882adfbdfd917844"
+dependencies = [
+ "bitflags 2.10.0",
+]
+
+[[package]]
+name = "spki"
+version = "0.8.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8baeff88f34ed0691978ec34440140e1572b68c7dd4a495fd14a3dc1944daa80"
+dependencies = [
+ "base64ct",
+ "der",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "static_assertions"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
+
+[[package]]
+name = "strength_reduce"
+version = "0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe895eb47f22e2ddd4dabc02bce419d2e643c8e3b585c78158b349195bc24d82"
+
+[[package]]
+name = "strict-num"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6637bab7722d379c8b41ba849228d680cc12d0a45ba1fa2b48f2a30577a06731"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "strum"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf"
+dependencies = [
+ "strum_macros",
+]
+
+[[package]]
+name = "strum_macros"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "symphonia"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5773a4c030a19d9bfaa090f49746ff35c75dfddfa700df7a5939d5e076a57039"
+dependencies = [
+ "lazy_static",
+ "symphonia-core",
+ "symphonia-metadata",
+]
+
+[[package]]
+name = "symphonia-core"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea00cc4f79b7f6bb7ff87eddc065a1066f3a43fe1875979056672c9ef948c2af"
+dependencies = [
+ "arrayvec",
+ "bitflags 1.3.2",
+ "bytemuck",
+ "lazy_static",
+ "log",
+]
+
+[[package]]
+name = "symphonia-metadata"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36306ff42b9ffe6e5afc99d49e121e0bd62fe79b9db7b9681d48e29fa19e6b16"
+dependencies = [
+ "encoding_rs",
+ "lazy_static",
+ "log",
+ "symphonia-core",
+]
+
+[[package]]
+name = "symphonium"
+version = "0.6.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94700d892b055c7c25e2fc5319b43d59434119627a08a5096cdcd0fe5345914f"
+dependencies = [
+ "fast-interleave",
+ "fixed-resample",
+ "log",
+ "symphonia",
+]
+
+[[package]]
+name = "syn"
+version = "1.0.109"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b64191b275b66ffe2469e8af2c1cfe3bafa67b529ead792a6d0160888b4237"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "syn"
+version = "2.0.111"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "390cc9a294ab71bdb1aa2e99d13be9c753cd2d7bd6560c77118597410c4d2e87"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "system-configuration"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3c879d448e9d986b661742763247d3693ed13609438cf3d006f51f5368a5ba6b"
+dependencies = [
+ "bitflags 2.10.0",
+ "core-foundation 0.9.4",
+ "system-configuration-sys",
+]
+
+[[package]]
+name = "system-configuration-sys"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
+dependencies = [
+ "core-foundation-sys 0.8.7",
+ "libc",
+]
+
+[[package]]
+name = "system-deps"
+version = "6.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3e535eb8dded36d55ec13eddacd30dec501792ff23a0b1682c38601b8cf2349"
+dependencies = [
+ "cfg-expr",
+ "heck",
+ "pkg-config",
+ "toml",
+ "version-compare",
+]
+
+[[package]]
+name = "tagptr"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417"
+
+[[package]]
+name = "tap"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
+
+[[package]]
+name = "target-lexicon"
+version = "0.12.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "61c41af27dd6d1e27b1b16b489db798443478cef1f06a660c96db617ba5de3b1"
+
+[[package]]
+name = "tempfile"
+version = "3.23.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d31c77bdf42a745371d260a26ca7163f1e0924b64afa0b688e61b5a9fa02f16"
+dependencies = [
+ "fastrand",
+ "getrandom 0.3.4",
+ "once_cell",
+ "rustix 1.1.2",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "termcolor"
+version = "1.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06794f8f6c5c898b3275aebefa6b8a1cb24cd2c6c79397ab15774837a0bc5755"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f63587ca0f12b72a0600bcba1d40081f830876000bb46dd2337a3051618f4fc8"
+dependencies = [
+ "thiserror-impl 2.0.17",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ff15c8ecd7de3849db632e14d18d2571fa09dfc5ed93479bc4485c7a517c913"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if 1.0.4",
+]
+
+[[package]]
+name = "thunderdome"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e170f93360bf9ae6fe3c31116bbf27adb1d054cedd6bc3d7857e34f2d98d0b"
+
+[[package]]
+name = "tiff"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af9605de7fee8d9551863fd692cce7637f548dbd9db9180fcc07ccc6d26c336f"
+dependencies = [
+ "fax",
+ "flate2",
+ "half",
+ "quick-error",
+ "weezl",
+ "zune-jpeg",
+]
+
+[[package]]
+name = "time"
+version = "0.3.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "91e7d9e3bb61134e77bde20dd4825b97c010155709965fedf0f49bb138e52a9d"
+dependencies = [
+ "deranged",
+ "itoa",
+ "js-sys",
+ "num-conv",
+ "powerfmt",
+ "serde",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40868e7c1d2f0b8d73e4a8c7f0ff63af4f6d19be117e90bd73eb1d62cf831c6b"
+
+[[package]]
+name = "time-macros"
+version = "0.2.24"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "30cfb0125f12d9c277f35663a0a33f8c30190f4e4574868a330595412d34ebf3"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tiny-skia"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83d13394d44dae3207b52a326c0c85a8bf87f1541f23b0d143811088497b09ab"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "bytemuck",
+ "cfg-if 1.0.4",
+ "log",
+ "tiny-skia-path",
+]
+
+[[package]]
+name = "tiny-skia-path"
+version = "0.11.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c9e7fc0c2e86a30b117d0462aa261b72b7a99b7ebd7deb3a14ceda95c5bdc93"
+dependencies = [
+ "arrayref",
+ "bytemuck",
+ "strict-num",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff360e02eab121e0bc37a2d3b4d4dc622e6eda3a8e5253d5435ecf5bd4c68408"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "parking_lot",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2 0.6.1",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eca58d7bba4a75707817a2c44174253f9236b2d5fbd055602e9d5c07c139a047"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2efa149fe76073d6e8fd97ef4f4eca7b67f599660115591483572e406e165594"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "futures-util",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-websockets"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1b6348ebfaaecd771cecb69e832961d277f59845d4220a584701f72728152b7"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "getrandom 0.3.4",
+ "http",
+ "httparse",
+ "rand 0.9.2",
+ "ring",
+ "rustls-pki-types",
+ "simdutf8",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+]
+
+[[package]]
+name = "toml"
+version = "0.8.23"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
+dependencies = [
+ "serde",
+ "serde_spanned",
+ "toml_datetime 0.6.11",
+ "toml_edit 0.22.27",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.6.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.22.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
+dependencies = [
+ "indexmap 2.12.1",
+ "serde",
+ "serde_spanned",
+ "toml_datetime 0.6.11",
+ "winnow",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.23.10+spec-1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "84c8b9f757e028cee9fa244aea147aab2a9ec09d5325a9b01e0a49730c2b5269"
+dependencies = [
+ "indexmap 2.12.1",
+ "toml_datetime 0.7.5+spec-1.1.0",
+ "toml_parser",
+ "winnow",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
+dependencies = [
+ "winnow",
+]
+
+[[package]]
+name = "tower"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d039ad9159c98b70ecfd540b2573b97f7f52c3e8d9f8ad57a24b916a536975f9"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "transpose"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1ad61aed86bc3faea4300c7aee358b4c6d0c8d6ccc36524c96e4c92ccf26e77e"
+dependencies = [
+ "num-integer",
+ "strength_reduce",
+]
+
+[[package]]
+name = "triomphe"
+version = "0.1.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd69c5aa8f924c7519d6372789a74eac5b94fb0f8fcf0d4a97eb0bfc3e785f39"
+
+[[package]]
+name = "triple_buffer"
+version = "8.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "420466259f9fa5decc654c490b9ab538400e5420df8237f84ecbe20368bcf72b"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "ttf-parser"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d2df906b07856748fa3f6e0ad0cbaa047052d4a7dd609e231c4f72cee8c36f31"
+
+[[package]]
+name = "type-map"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb30dbbd9036155e74adad6812e9898d03ec374946234fbcebd5dfc7b9187b90"
+dependencies = [
+ "rustc-hash 2.1.1",
+]
+
+[[package]]
+name = "typeid"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bc7d623258602320d5c55d1bc22793b57daff0ec7efc270ea7d55ce1d5f5471c"
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "uds_windows"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89daebc3e6fd160ac4aa9fc8b3bf71e1f74fbf92367ae71fb83a037e8bf164b9"
+dependencies = [
+ "memoffset",
+ "tempfile",
+ "winapi",
+]
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
+
+[[package]]
+name = "unicode-width"
+version = "0.1.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7dd6e30e90baa6f72411720665d41d89b9a3d039dc45b8faea1ddd07f617f6af"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "universal-hash"
+version = "0.6.0-rc.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a55be643b40a21558f44806b53ee9319595bc7ca6896372e4e08e5d7d83c9cd6"
+dependencies = [
+ "crypto-common",
+ "subtle",
+]
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08bc136a29a3d1758e07a9cca267be308aeebf5cfd5a10f3f67ab2097683ef5b"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+]
+
+[[package]]
+name = "utf8-width"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1292c0d970b54115d14f2492fe0170adf21d68a1de108eebc51c1df4f346a091"
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2e054861b4bd027cd373e18e8d8d8e6548085000e41290d95ce0c373a654b4a"
+dependencies = [
+ "getrandom 0.3.4",
+ "js-sys",
+ "serde_core",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "v4l"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8fbfea44a46799d62c55323f3c55d06df722fbe577851d848d328a1041c3403"
+dependencies = [
+ "bitflags 1.3.2",
+ "libc",
+ "v4l2-sys-mit",
+]
+
+[[package]]
+name = "v4l2-sys-mit"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6779878362b9bacadc7893eac76abe69612e8837ef746573c4a5239daf11990b"
+dependencies = [
+ "bindgen 0.65.1",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "variadics_please"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41b6d82be61465f97d42bd1d15bf20f3b0a3a0905018f38f9d6f6962055b0b5c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "vcpkg"
+version = "0.2.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "accd4ea62f7bb7a82fe23066fb0957d48ef677f6eeb8215f372f52e48bb32426"
+
+[[package]]
+name = "version-compare"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03c2856837ef78f57382f06b2b8563a2f512f7185d732608fd9176cb3b8edf0e"
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.1+wasi-0.2.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0562428422c63773dad2c345a1882263bbf4d65cf3f42e90921f787ef5ad58e7"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d759f433fa64a2d763d1340820e46e111a7a5ab75f993d1852d70b03dbb80fd"
+dependencies = [
+ "cfg-if 1.0.4",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.56"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "836d9622d604feee9e5de25ac10e3ea5f2d65b41eac0d9ce72eb5deae707ce7c"
+dependencies = [
+ "cfg-if 1.0.4",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48cb0d2638f8baedbc542ed444afc0644a29166f1595371af4fecf8ce1e7eeb3"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cefb59d5cd5f92d9dcf80e4683949f15ca4b511f4ac0a6e14d4e1ac60c6ecd40"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cbc538057e648b67f72a982e708d485b2efa771e1ac05fec311f9f63e5800db4"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "wayland-backend"
+version = "0.3.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "673a33c33048a5ade91a6b139580fa174e19fb0d23f396dca9fa15f2e1e49b35"
+dependencies = [
+ "cc",
+ "downcast-rs 1.2.1",
+ "rustix 1.1.2",
+ "scoped-tls",
+ "smallvec",
+ "wayland-sys",
+]
+
+[[package]]
+name = "wayland-client"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c66a47e840dc20793f2264eb4b3e4ecb4b75d91c0dd4af04b456128e0bdd449d"
+dependencies = [
+ "bitflags 2.10.0",
+ "rustix 1.1.2",
+ "wayland-backend",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-csd-frame"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "625c5029dbd43d25e6aa9615e88b829a5cad13b2819c4ae129fdbb7c31ab4c7e"
+dependencies = [
+ "bitflags 2.10.0",
+ "cursor-icon",
+ "wayland-backend",
+]
+
+[[package]]
+name = "wayland-cursor"
+version = "0.31.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "447ccc440a881271b19e9989f75726d60faa09b95b0200a9b7eb5cc47c3eeb29"
+dependencies = [
+ "rustix 1.1.2",
+ "wayland-client",
+ "xcursor",
+]
+
+[[package]]
+name = "wayland-protocols"
+version = "0.32.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efa790ed75fbfd71283bd2521a1cfdc022aabcc28bdcff00851f9e4ae88d9901"
+dependencies = [
+ "bitflags 2.10.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-experimental"
+version = "20250721.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40a1f863128dcaaec790d7b4b396cc9b9a7a079e878e18c47e6c2d2c5a8dcbb1"
+dependencies = [
+ "bitflags 2.10.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-misc"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dfe33d551eb8bffd03ff067a8b44bb963919157841a99957151299a6307d19c"
+dependencies = [
+ "bitflags 2.10.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-plasma"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a07a14257c077ab3279987c4f8bb987851bf57081b93710381daea94f2c2c032"
+dependencies = [
+ "bitflags 2.10.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-protocols-wlr"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "efd94963ed43cf9938a090ca4f7da58eb55325ec8200c3848963e98dc25b78ec"
+dependencies = [
+ "bitflags 2.10.0",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-scanner"
+version = "0.31.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "54cb1e9dc49da91950bdfd8b848c49330536d9d1fb03d4bfec8cae50caa50ae3"
+dependencies = [
+ "proc-macro2",
+ "quick-xml 0.37.5",
+ "quote",
+]
+
+[[package]]
+name = "wayland-server"
+version = "0.31.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fcbd4f3aba6c9fba70445ad2a484c0ef0356c1a9459b1e8e435bedc1971a6222"
+dependencies = [
+ "bitflags 2.10.0",
+ "downcast-rs 1.2.1",
+ "rustix 1.1.2",
+ "wayland-backend",
+ "wayland-scanner",
+]
+
+[[package]]
+name = "wayland-sys"
+version = "0.31.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "34949b42822155826b41db8e5d0c1be3a2bd296c747577a43a3e6daefc296142"
+dependencies = [
+ "dlib",
+ "libc",
+ "log",
+ "memoffset",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "web-async"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6b2260b739b0e95cf9b78f22a64704af7ed9760ea12baa3745b4b97899dc89a"
+dependencies = [
+ "tokio",
+ "tracing",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.83"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b32828d774c412041098d182a8b38b16ea816958e07cf40eec2bc080ae137ac"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-transport-iroh"
+version = "0.1.1"
+dependencies = [
+ "anyhow",
+ "bytes",
+ "clap",
+ "http",
+ "iroh",
+ "iroh-quinn",
+ "n0-error",
+ "n0-future 0.3.1",
+ "n0-tracing-test",
+ "thiserror 2.0.17",
+ "tokio",
+ "tracing",
+ "url",
+ "web-transport-proto",
+ "web-transport-trait",
+]
+
+[[package]]
+name = "web-transport-proto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4b5400535d6dd4c07dc86e83651a838fd513de7f5011d4e4eafa239fa4d0ded4"
+dependencies = [
+ "bytes",
+ "http",
+ "thiserror 2.0.17",
+ "tokio",
+ "url",
+]
+
+[[package]]
+name = "web-transport-trait"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f4bafa8c6ff708042f67ef8031ca0f342822fd785b70f36a4b2c014760fc442"
+dependencies = [
+ "bytes",
+]
+
+[[package]]
+name = "webbrowser"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "00f1243ef785213e3a32fa0396093424a3a6ea566f9948497e5a2309261a4c97"
+dependencies = [
+ "core-foundation 0.10.1",
+ "jni",
+ "log",
+ "ndk-context",
+ "objc2 0.6.3",
+ "objc2-foundation 0.3.2",
+ "url",
+ "web-sys",
+]
+
+[[package]]
+name = "webpki-root-certs"
+version = "0.26.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75c7f0ef91146ebfb530314f5f1d24528d7f0767efbfd31dce919275413e393e"
+dependencies = [
+ "webpki-root-certs 1.0.4",
+]
+
+[[package]]
+name = "webpki-root-certs"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee3e3b5f5e80bc89f30ce8d0343bf4e5f12341c51f3e26cbeecbc7c85443e85b"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2878ef029c47c6e8cf779119f20fcf52bde7ad42a731b2a304bc221df17571e"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webrtc-audio-processing"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2d9afef7ddcdadc72e39811c641cbc8c027778cb9ce1237b65d6bb252ee6047"
+dependencies = [
+ "webrtc-audio-processing-sys",
+]
+
+[[package]]
+name = "webrtc-audio-processing-sys"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29747301e4fceb4ce1073179b5001f3e50b29d759e769fe3bfdaa3e7f6bce09d"
+dependencies = [
+ "anyhow",
+ "autotools",
+ "bindgen 0.72.1",
+ "cc",
+ "fs_extra",
+ "pkg-config",
+ "regex",
+]
+
+[[package]]
+name = "weezl"
+version = "0.1.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a28ac98ddc8b9274cb41bb4d9d4d5c425b6020c50c46f25559911905610b4a88"
+
+[[package]]
+name = "wgpu"
+version = "27.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfe68bac7cde125de7a731c3400723cadaaf1703795ad3f4805f187459cd7a77"
+dependencies = [
+ "arrayvec",
+ "bitflags 2.10.0",
+ "cfg-if 1.0.4",
+ "cfg_aliases",
+ "document-features",
+ "hashbrown 0.16.1",
+ "js-sys",
+ "log",
+ "naga",
+ "parking_lot",
+ "portable-atomic",
+ "profiling",
+ "raw-window-handle",
+ "smallvec",
+ "static_assertions",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+ "wgpu-core",
+ "wgpu-hal",
+ "wgpu-types 27.0.1",
+]
+
+[[package]]
+name = "wgpu-core"
+version = "27.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "27a75de515543b1897b26119f93731b385a19aea165a1ec5f0e3acecc229cae7"
+dependencies = [
+ "arrayvec",
+ "bit-set",
+ "bit-vec",
+ "bitflags 2.10.0",
+ "bytemuck",
+ "cfg_aliases",
+ "document-features",
+ "hashbrown 0.16.1",
+ "indexmap 2.12.1",
+ "log",
+ "naga",
+ "once_cell",
+ "parking_lot",
+ "portable-atomic",
+ "profiling",
+ "raw-window-handle",
+ "rustc-hash 1.1.0",
+ "smallvec",
+ "thiserror 2.0.17",
+ "wgpu-core-deps-apple",
+ "wgpu-core-deps-emscripten",
+ "wgpu-core-deps-windows-linux-android",
+ "wgpu-hal",
+ "wgpu-types 27.0.1",
+]
+
+[[package]]
+name = "wgpu-core-deps-apple"
+version = "27.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0772ae958e9be0c729561d5e3fd9a19679bcdfb945b8b1a1969d9bfe8056d233"
+dependencies = [
+ "wgpu-hal",
+]
+
+[[package]]
+name = "wgpu-core-deps-emscripten"
+version = "27.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b06ac3444a95b0813ecfd81ddb2774b66220b264b3e2031152a4a29fda4da6b5"
+dependencies = [
+ "wgpu-hal",
+]
+
+[[package]]
+name = "wgpu-core-deps-windows-linux-android"
+version = "27.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "71197027d61a71748e4120f05a9242b2ad142e3c01f8c1b47707945a879a03c3"
+dependencies = [
+ "wgpu-hal",
+]
+
+[[package]]
+name = "wgpu-hal"
+version = "27.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b21cb61c57ee198bc4aff71aeadff4cbb80b927beb912506af9c780d64313ce"
+dependencies = [
+ "android_system_properties",
+ "arrayvec",
+ "ash",
+ "bit-set",
+ "bitflags 2.10.0",
+ "block",
+ "bytemuck",
+ "cfg-if 1.0.4",
+ "cfg_aliases",
+ "core-graphics-types 0.2.0",
+ "glow",
+ "glutin_wgl_sys",
+ "gpu-alloc",
+ "gpu-allocator",
+ "gpu-descriptor",
+ "hashbrown 0.16.1",
+ "js-sys",
+ "khronos-egl",
+ "libc",
+ "libloading",
+ "log",
+ "metal 0.32.0",
+ "naga",
+ "ndk-sys",
+ "objc",
+ "once_cell",
+ "ordered-float",
+ "parking_lot",
+ "portable-atomic",
+ "portable-atomic-util",
+ "profiling",
+ "range-alloc",
+ "raw-window-handle",
+ "renderdoc-sys",
+ "smallvec",
+ "thiserror 2.0.17",
+ "wasm-bindgen",
+ "web-sys",
+ "wgpu-types 27.0.1",
+ "windows 0.58.0",
+ "windows-core 0.58.0",
+]
+
+[[package]]
+name = "wgpu-types"
+version = "26.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eca7a8d8af57c18f57d393601a1fb159ace8b2328f1b6b5f80893f7d672c9ae2"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytemuck",
+ "js-sys",
+ "log",
+ "serde",
+ "thiserror 2.0.17",
+ "web-sys",
+]
+
+[[package]]
+name = "wgpu-types"
+version = "27.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "afdcf84c395990db737f2dd91628706cb31e86d72e53482320d368e52b5da5eb"
+dependencies = [
+ "bitflags 2.10.0",
+ "bytemuck",
+ "js-sys",
+ "log",
+ "thiserror 2.0.17",
+ "web-sys",
+]
+
+[[package]]
+name = "which"
+version = "4.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "87ba24419a2078cd2b0f2ede2691b6c66d8e47836da3b6db8265ebad47afbfc7"
+dependencies = [
+ "either",
+ "home",
+ "once_cell",
+ "rustix 0.38.44",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9252e5725dbed82865af151df558e754e4a3c2c30818359eb17465f1346a1b49"
+dependencies = [
+ "windows-core 0.54.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd04d41d93c4992d421894c18c8b43496aa748dd4c081bac0dc93eb0489272b6"
+dependencies = [
+ "windows-core 0.58.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows"
+version = "0.61.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
+dependencies = [
+ "windows-collections 0.2.0",
+ "windows-core 0.61.2",
+ "windows-future 0.2.1",
+ "windows-link 0.1.3",
+ "windows-numerics 0.2.0",
+]
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections 0.3.2",
+ "windows-core 0.62.2",
+ "windows-future 0.3.2",
+ "windows-numerics 0.3.1",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
+dependencies = [
+ "windows-core 0.61.2",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.54.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12661b9c89351d684a50a8a643ce5f608e20243b9fb84687800163429f161d65"
+dependencies = [
+ "windows-result 0.1.2",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ba6d44ec8c2591c134257ce647b7ea6b20335bf6379a27dac5f1641fcf59f99"
+dependencies = [
+ "windows-implement 0.58.0",
+ "windows-interface 0.58.0",
+ "windows-result 0.2.0",
+ "windows-strings 0.1.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
+dependencies = [
+ "windows-implement 0.60.2",
+ "windows-interface 0.59.3",
+ "windows-link 0.1.3",
+ "windows-result 0.3.4",
+ "windows-strings 0.4.2",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement 0.60.2",
+ "windows-interface 0.59.3",
+ "windows-link 0.2.1",
+ "windows-result 0.4.1",
+ "windows-strings 0.5.1",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+ "windows-threading 0.1.0",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+ "windows-threading 0.2.1",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2bbd5b46c938e506ecbce286b6628a02171d56153ba733b6c741fc627ec9579b"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.58.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053c4c462dc91d3b1504c6fe5a726dd15e216ba718e84a0e46a88fbe5ded3515"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
+dependencies = [
+ "windows-core 0.61.2",
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core 0.62.2",
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e383302e8ec8515204254685643de10811af0ed97ea37210dc26fb0032647f8"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d1043d8214f791817bab27572aaa8af63732e11bf84aa21a45a78d6c317ae0e"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4cd9b125c486025df0eabcb585e62173c6c9eddcec5d117d3b6e8c30e2ee4d10"
+dependencies = [
+ "windows-result 0.2.0",
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link 0.2.1",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
+dependencies = [
+ "windows-link 0.1.3",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link 0.2.1",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winit"
+version = "0.30.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c66d4b9ed69c4009f6321f762d6e61ad8a2389cd431b97cb1e146812e9e6c732"
+dependencies = [
+ "ahash 0.8.12",
+ "android-activity",
+ "atomic-waker",
+ "bitflags 2.10.0",
+ "block2 0.5.1",
+ "bytemuck",
+ "calloop 0.13.0",
+ "cfg_aliases",
+ "concurrent-queue",
+ "core-foundation 0.9.4",
+ "core-graphics 0.23.2",
+ "cursor-icon",
+ "dpi",
+ "js-sys",
+ "libc",
+ "memmap2",
+ "ndk",
+ "objc2 0.5.2",
+ "objc2-app-kit 0.2.2",
+ "objc2-foundation 0.2.2",
+ "objc2-ui-kit",
+ "orbclient",
+ "percent-encoding",
+ "pin-project",
+ "raw-window-handle",
+ "redox_syscall 0.4.1",
+ "rustix 0.38.44",
+ "sctk-adwaita",
+ "smithay-client-toolkit 0.19.2",
+ "smol_str",
+ "tracing",
+ "unicode-segmentation",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wayland-backend",
+ "wayland-client",
+ "wayland-protocols",
+ "wayland-protocols-plasma",
+ "web-sys",
+ "web-time",
+ "windows-sys 0.52.0",
+ "x11-dl",
+ "x11rb",
+ "xkbcommon-dl",
+]
+
+[[package]]
+name = "winnow"
+version = "0.7.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
+dependencies = [
+ "cfg-if 1.0.4",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.46.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f17a85883d4e6d00e8a97c586de764dabcc06133f7f1d55dce5cdc070ad7fe59"
+
+[[package]]
+name = "wmi"
+version = "0.17.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "120d8c2b6a7c96c27bf4a7947fd7f02d73ca7f5958b8bd72a696e46cb5521ee6"
+dependencies = [
+ "chrono",
+ "futures",
+ "log",
+ "serde",
+ "thiserror 2.0.17",
+ "windows 0.62.2",
+ "windows-core 0.62.2",
+]
+
+[[package]]
+name = "wmidi"
+version = "4.0.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e55f35b40ad0178422d06e9ba845041baf2faf04627b91fde928d0f6a21c712"
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "ws_stream_wasm"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c173014acad22e83f16403ee360115b38846fe754e735c5d9d3803fe70c6abc"
+dependencies = [
+ "async_io_stream",
+ "futures",
+ "js-sys",
+ "log",
+ "pharos",
+ "rustc_version",
+ "send_wrapper",
+ "thiserror 2.0.17",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "wyz"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
+dependencies = [
+ "tap",
+]
+
+[[package]]
+name = "x11-dl"
+version = "2.21.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "38735924fedd5314a6e548792904ed8c6de6636285cb9fec04d5b1db85c1516f"
+dependencies = [
+ "libc",
+ "once_cell",
+ "pkg-config",
+]
+
+[[package]]
+name = "x11rb"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9993aa5be5a26815fe2c3eacfc1fde061fc1a1f094bf1ad2a18bf9c495dd7414"
+dependencies = [
+ "as-raw-xcb-connection",
+ "gethostname",
+ "libc",
+ "libloading",
+ "once_cell",
+ "rustix 1.1.2",
+ "x11rb-protocol",
+]
+
+[[package]]
+name = "x11rb-protocol"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
+
+[[package]]
+name = "x509-parser"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb3e137310115a65136898d2079f003ce33331a6c4b0d51f1531d1be082b6425"
+dependencies = [
+ "asn1-rs",
+ "data-encoding",
+ "der-parser",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror 2.0.17",
+ "time",
+]
+
+[[package]]
+name = "xcap"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8d3d4aaffe00a280994795e5c2fd73bc76f473570b27459cbececace5e054c3"
+dependencies = [
+ "dispatch2",
+ "image",
+ "lazy_static",
+ "libwayshot-xcap",
+ "log",
+ "objc2 0.6.3",
+ "objc2-app-kit 0.3.2",
+ "objc2-av-foundation",
+ "objc2-core-foundation",
+ "objc2-core-graphics",
+ "objc2-core-media",
+ "objc2-core-video",
+ "objc2-foundation 0.3.2",
+ "percent-encoding",
+ "pipewire",
+ "rand 0.9.2",
+ "scopeguard",
+ "serde",
+ "thiserror 2.0.17",
+ "url",
+ "widestring",
+ "windows 0.61.3",
+ "xcb",
+ "zbus",
+]
+
+[[package]]
+name = "xcb"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f07c123b796139bfe0603e654eaf08e132e52387ba95b252c78bad3640ba37ea"
+dependencies = [
+ "bitflags 1.3.2",
+ "libc",
+ "quick-xml 0.30.0",
+]
+
+[[package]]
+name = "xcursor"
+version = "0.3.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bec9e4a500ca8864c5b47b8b482a73d62e4237670e5b5f1d6b9e3cae50f28f2b"
+
+[[package]]
+name = "xkbcommon-dl"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d039de8032a9a8856a6be89cea3e5d12fdd82306ab7c94d74e6deab2460651c5"
+dependencies = [
+ "bitflags 2.10.0",
+ "dlib",
+ "log",
+ "once_cell",
+ "xkeysym",
+]
+
+[[package]]
+name = "xkeysym"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9cc00251562a284751c9973bace760d86c0276c471b4be569fe6b068ee97a56"
+
+[[package]]
+name = "xml-rs"
+version = "0.8.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ae8337f8a065cfc972643663ea4279e04e7256de865aa66fe25cec5fb912d3f"
+
+[[package]]
+name = "xmltree"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7d8a75eaf6557bb84a65ace8609883db44a29951042ada9b393151532e41fcb"
+dependencies = [
+ "xml-rs",
+]
+
+[[package]]
+name = "yansi-term"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe5c30ade05e61656247b2e334a031dfd0cc466fadef865bdcdea8d537951bf1"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "yasna"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17bb3549cc1321ae1296b9cdc2698e2b6cb1992adfa19a8c72e5b7a738f44cd"
+dependencies = [
+ "time",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "synstructure",
+]
+
+[[package]]
+name = "z32"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2164e798d9e3d84ee2c91139ace54638059a3b23e361f5c11781c2c6459bde0f"
+
+[[package]]
+name = "zbus"
+version = "5.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b622b18155f7a93d1cd2dc8c01d2d6a44e08fb9ebb7b3f9e6ed101488bad6c91"
+dependencies = [
+ "async-broadcast",
+ "async-executor",
+ "async-io",
+ "async-lock",
+ "async-process",
+ "async-recursion",
+ "async-task",
+ "async-trait",
+ "blocking",
+ "enumflags2",
+ "event-listener",
+ "futures-core",
+ "futures-lite",
+ "hex",
+ "nix 0.30.1",
+ "ordered-stream",
+ "serde",
+ "serde_repr",
+ "tracing",
+ "uds_windows",
+ "uuid",
+ "windows-sys 0.61.2",
+ "winnow",
+ "zbus_macros",
+ "zbus_names",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus-lockstep"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6998de05217a084b7578728a9443d04ea4cd80f2a0839b8d78770b76ccd45863"
+dependencies = [
+ "zbus_xml",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus-lockstep-macros"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10da05367f3a7b7553c8cdf8fa91aee6b64afebe32b51c95177957efc47ca3a0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "zbus-lockstep",
+ "zbus_xml",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus_macros"
+version = "5.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1cdb94821ca8a87ca9c298b5d1cbd80e2a8b67115d99f6e4551ac49e42b6a314"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "zbus_names",
+ "zvariant",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zbus_names"
+version = "4.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7be68e64bf6ce8db94f63e72f0c7eb9a60d733f7e0499e628dfab0f84d6bcb97"
+dependencies = [
+ "serde",
+ "static_assertions",
+ "winnow",
+ "zvariant",
+]
+
+[[package]]
+name = "zbus_xml"
+version = "5.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589e9a02bfafb9754bb2340a9e3b38f389772684c63d9637e76b1870377bec29"
+dependencies = [
+ "quick-xml 0.36.2",
+ "serde",
+ "static_assertions",
+ "zbus_names",
+ "zvariant",
+]
+
+[[package]]
+name = "zerocopy"
+version = "0.8.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fd74ec98b9250adb3ca554bdde269adf631549f51d8a8f8f0a10b50f1cb298c3"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8a8d209fdf45cf5138cbb5a506f6b52522a25afccc534d1475dad8e31105c6a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ce36e65b0d2999d2aafac989fb249189a141aee1f53c612c1f37d72631959f69"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+]
+
+[[package]]
+name = "zune-core"
+version = "0.4.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f423a2c17029964870cfaabb1f13dfab7d092a62a29a89264f4d36990ca414a"
+
+[[package]]
+name = "zune-jpeg"
+version = "0.4.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29ce2c8a9384ad323cf564b67da86e21d3cfdff87908bc1223ed5c99bc792713"
+dependencies = [
+ "zune-core",
+]
+
+[[package]]
+name = "zvariant"
+version = "5.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2be61892e4f2b1772727be11630a62664a1826b62efa43a6fe7449521cb8744c"
+dependencies = [
+ "endi",
+ "enumflags2",
+ "serde",
+ "winnow",
+ "zvariant_derive",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_derive"
+version = "5.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "da58575a1b2b20766513b1ec59d8e2e68db2745379f961f86650655e862d2006"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn 2.0.111",
+ "zvariant_utils",
+]
+
+[[package]]
+name = "zvariant_utils"
+version = "3.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c6949d142f89f6916deca2232cf26a8afacf2b9fdc35ce766105e104478be599"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "serde",
+ "syn 2.0.111",
+ "winnow",
+]
diff --git a/third_party/iroh-live/Cargo.toml b/third_party/iroh-live/Cargo.toml
new file mode 100644
index 0000000..ba9cdc8
--- /dev/null
+++ b/third_party/iroh-live/Cargo.toml
@@ -0,0 +1,11 @@
+[workspace]
+members = [
+    "iroh-live",
+    "iroh-moq",
+    "moq-media",
+    "web-transport-iroh",
+]
+resolver = "2"
+
+[profile.release]
+debug = true
diff --git a/third_party/iroh-live/LICENSE-APACHE b/third_party/iroh-live/LICENSE-APACHE
new file mode 100644
index 0000000..885ed28
--- /dev/null
+++ b/third_party/iroh-live/LICENSE-APACHE
@@ -0,0 +1,201 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+   To apply the Apache License to your work, attach the following
+   boilerplate notice, with the fields enclosed by brackets "[]"
+   replaced with your own identifying information. (Don't include
+   the brackets!)  The text should be enclosed in the appropriate
+   comment syntax for the file format. We also recommend that a
+   file or class name and description of purpose be included on the
+   same "printed page" as the copyright notice for easier
+   identification within third-party archives.
+
+Copyright [2025] [N0, INC]
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/third_party/iroh-live/LICENSE-MIT b/third_party/iroh-live/LICENSE-MIT
new file mode 100644
index 0000000..885ed28
--- /dev/null
+++ b/third_party/iroh-live/LICENSE-MIT
@@ -0,0 +1,201 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+   To apply the Apache License to your work, attach the following
+   boilerplate notice, with the fields enclosed by brackets "[]"
+   replaced with your own identifying information. (Don't include
+   the brackets!)  The text should be enclosed in the appropriate
+   comment syntax for the file format. We also recommend that a
+   file or class name and description of purpose be included on the
+   same "printed page" as the copyright notice for easier
+   identification within third-party archives.
+
+Copyright [2025] [N0, INC]
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/third_party/iroh-live/Makefile.toml b/third_party/iroh-live/Makefile.toml
new file mode 100644
index 0000000..5dde2e7
--- /dev/null
+++ b/third_party/iroh-live/Makefile.toml
@@ -0,0 +1,28 @@
+# Use cargo-make to run tasks here: https://crates.io/crates/cargo-make
+
+[tasks.format]
+workspace = false
+command = "cargo"
+args = [
+     "fmt",
+     "--all",
+     "--",
+     "--config",
+     "unstable_features=true",
+     "--config",
+     "imports_granularity=Crate,group_imports=StdExternalCrate,reorder_imports=true,format_code_in_doc_comments=true",
+]
+
+[tasks.format-check]
+workspace = false
+command = "cargo"
+args = [
+     "fmt",
+     "--all",
+     "--check",
+     "--",
+     "--config",
+     "unstable_features=true",
+     "--config",
+     "imports_granularity=Crate,group_imports=StdExternalCrate,reorder_imports=true,format_code_in_doc_comments=true",
+]
diff --git a/third_party/iroh-live/README.md b/third_party/iroh-live/README.md
new file mode 100644
index 0000000..3b789ee
--- /dev/null
+++ b/third_party/iroh-live/README.md
@@ -0,0 +1,72 @@
+# iroh-live
+
+Livestreaming video and audio over iroh
+
+**Status: experimental / work in progress**
+
+This repository implements a live streaming protocol over iroh with [Media over Quic](https://moq.dev/).
+It uses [moq-rs](https://github.com/kixelated/moq) to transfer audio and video streams over iroh connections.
+
+## Structure of the repository
+
+* [**`web-transport-iroh`**](web-transport-iroh): Implements the [web-transport](https://github.com/kixelated/web-transport) traits for iroh connections
+* [**`iroh-moq`**](iroh-moq): Adapters to create and accept [moq-lite](https://github.com/kixelated/moq/tree/main/rs/moq) sessions over iroh
+* [**`iroh-live`**](iroh-live): Native capture, encoding and decoding of audio and video. This is an early preview of a high-level live streaming toolkit for iroh. Currently, it has these features, all subject to change:
+  * Support for [hang](https://github.com/kixelated/moq/blob/main/rs/hang/) catalogs in MoQ sessions
+  * Capture and playout audio (with [firewheel](https://github.com/BillyDM/Firewheel/))
+  * Capture camera (with [nokwha](https://github.com/l1npengtul/nokhwa/))
+  * Capture screens (with [xcap](https://github.com/nashaofu/xcap/))
+  * Encode and decode video (h264) and audio (Opus) using [ffmpeg](https://docs.rs/ffmpeg-next/latest/ffmpeg_next/). Video encoding is hardware accelerated on supported platforms.
+  * Support multiple renditions and on-demand switching of the encoding
+  
+There's still bugs and a lot of missing optimizations. This is an early, work-in-progress preview!
+
+## Building
+
+By default `ffmpeg` is dynamically linked. Enable the `static` feature to build ffmpeg from source and statically link it.
+
+#### Build dependencies
+
+*incomplete list, please file issues or PRs to expand this*
+
+##### Linux
+
+* For building with `static` feature: `apt install nasm pkg-config`
+
+## Demo and examples
+
+Check out the [`rooms`](iroh-live/examples/rooms.rs) example:
+
+```
+cargo run --release --example rooms
+```
+
+This will print a *room ticket*. Copy this to another device, and run:
+```
+cargo run --release --example rooms -- <TICKET>
+```
+
+Now you're chatting! With video and audio! Over iroh!
+
+Use the `room-publish-file` example to publish a video form a file into a room.
+
+There's also a [`publish`](iroh-live/examples/publish.rs) example (publish only, no GUI), and a [`watch`](iroh-live/examples/watch.rs) example (watch a stream from the publish example).
+
+The examples use [`egui`](https://github.com/emilk/egui), however `iroh-live` is not coupled to any GUI framework and should work with anything that can render raw images to the screen.
+
+## License
+
+Copyright 2025 N0, INC.
+
+This project is licensed under either of
+
+ * Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or
+   http://www.apache.org/licenses/LICENSE-2.0)
+ * MIT license ([LICENSE-MIT](LICENSE-MIT) or
+   http://opensource.org/licenses/MIT)
+
+at your option.
+
+## Contribution
+
+Unless you explicitly state otherwise, any contribution intentionally submitted for inclusion in this project by you, as defined in the Apache-2.0 license, shall be dual licensed as above, without any additional terms or conditions.
diff --git a/third_party/iroh-live/iroh-live/Cargo.toml b/third_party/iroh-live/iroh-live/Cargo.toml
new file mode 100644
index 0000000..5c0068a
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/Cargo.toml
@@ -0,0 +1,94 @@
+[package]
+name = "iroh-live"
+version = "0.1.0"
+edition = "2024"
+description = "audio and video live streaming over iroh"
+authors = ["Franz Heinzmann <frando@n0.computer>"]
+repository = "https://github.com/n0-computer/iroh-live"
+license = "MIT OR Apache-2.0"
+
+[dependencies]
+anyhow = "1.0.100"
+bytemuck = "1.24.0"
+byte-unit = { version = "5.1", features = ["bit"] }
+data-encoding = "2.9.0"
+derive_more = { version = "2.0.1", features = ["display", "debug", "eq"] }
+ffmpeg-next = { version = "8.0.0", default-features = false, features = ["device", "format", "filter", "software-resampling", "software-scaling"] }
+ffmpeg-sys-next = { version = "8.0.1", optional = true }
+firewheel = { version = "0.9.1", features = ["cpal", "peak_meter_node", "std", "stream_nodes", "cpal_resample_inputs"] }
+hang = "0.9.0"
+image = { version = "0.25.8", default-features = false }
+iroh = "0.95.1"
+iroh-gossip = "0.95.0"
+iroh-moq = { path = "../iroh-moq" }
+iroh-tickets = "0.2.0"
+moq-lite = "0.10.1"
+moq-media = { version = "0.1.0", path = "../moq-media" }
+n0-error = { version = "0.1.2", features = ["anyhow"] }
+n0-future = "0.3.1"
+n0-watcher = "0.6.0"
+nokhwa = { version = "0.10", features = [
+    "input-native",
+    "input-v4l",
+    "output-threaded",
+] }
+postcard = "1.1.3"
+rand = "0.9.2"
+serde = { version = "1.0.228", features = ["derive"] }
+strum = { version = "0.27", features = ["derive"] }
+tokio = { version = "1.48.0", features = ["sync"] }
+tokio-util = "0.7.17"
+tracing = "0.1.41"
+xcap = "0.8"
+webrtc-audio-processing = { version = "0.5.0", features = ["bundled"] }
+bytes = "1.11.0"
+iroh-smol-kv = { git = "https://github.com/Frando/iroh-smol-kv", branch = "iroh-095", version = "0.3.1", default-features = false }
+buf-list = "1.1.2"
+
+
+[dev-dependencies]
+clap = { version = "4.5", features = ["derive"] }
+eframe = "0.33.0"
+postcard = "1.1.3"
+tokio = { version = "1.48.0", features = ["full"] }
+tracing-subscriber = "0.3.20"
+
+[features]
+default = []
+
+# Enable static build of ffmpeg
+static = [
+  "ffmpeg-next/static",
+  "ffmpeg-next/build-lib-openssl",
+  "ffmpeg-next/build-license-version3",
+  "ffmpeg-next/build-lib-opus",
+  "ffmpeg-next/build-lib-x264",
+  "ffmpeg-next/build-license-gpl",
+  "dep:ffmpeg-sys-next",
+]
+
+[target.'cfg(target_os = "macos")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-videotoolbox",
+  "build-audiotoolbox",
+] }
+
+[target.'cfg(target_os = "linux")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-vaapi",
+  # "build-vulkan",
+  # "build-lib-libmfx",
+] }
+
+[target.'cfg(target_os = "windows")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-lib-d3d11va",
+  "build-lib-dxva2",
+  # "build-nvidia",
+  # "build-amf",
+] }
+
+[target.'cfg(target_os = "android")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  # "build-mediacodec",
+] }
diff --git a/third_party/iroh-live/iroh-live/README.md b/third_party/iroh-live/iroh-live/README.md
new file mode 100644
index 0000000..8e37615
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/README.md
@@ -0,0 +1,3 @@
+# iroh-live
+
+See [../README.md](../README.md)
diff --git a/third_party/iroh-live/iroh-live/examples/common/import.rs b/third_party/iroh-live/iroh-live/examples/common/import.rs
new file mode 100644
index 0000000..8d8105f
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/common/import.rs
@@ -0,0 +1,143 @@
+use std::{
+    path::{Path, PathBuf},
+    process::Stdio,
+};
+
+use bytes::BytesMut;
+use clap::ValueEnum;
+use moq_lite::BroadcastProducer;
+use n0_error::Result;
+use tokio::{
+    io::{AsyncRead, AsyncReadExt},
+    process::Command,
+};
+use tracing::info;
+
+#[derive(ValueEnum, Debug, Clone, Default, Copy)]
+pub enum ImportType {
+    #[default]
+    Cmaf,
+    AnnexB,
+}
+
+impl ImportType {
+    pub fn as_str(&self) -> &'static str {
+        match self {
+            ImportType::AnnexB => "annex-b",
+            ImportType::Cmaf => "cmaf",
+        }
+    }
+}
+
+// Taken from
+// https://github.com/moq-dev/moq/blob/30c28b8c3b6bd941fe1279c0fd8855139a1d4f6a/rs/hang-cli/src/import.rs
+// License: Apache-2.0
+pub struct Import {
+    decoder: hang::import::Decoder,
+    buffer: BytesMut,
+}
+
+impl Import {
+    pub fn new(broadcast: BroadcastProducer, format: ImportType) -> Self {
+        let decoder = hang::import::Decoder::new(broadcast.into(), format.as_str())
+            .expect("supported format");
+        Self {
+            decoder,
+            buffer: BytesMut::new(),
+        }
+    }
+}
+
+impl Import {
+    pub async fn init_from<T: AsyncRead + Unpin>(&mut self, input: &mut T) -> anyhow::Result<()> {
+        while !self.decoder.is_initialized() && input.read_buf(&mut self.buffer).await? > 0 {
+            self.decoder.decode_stream(&mut self.buffer)?;
+        }
+
+        Ok(())
+    }
+
+    pub async fn read_from<T: AsyncRead + Unpin>(&mut self, input: &mut T) -> anyhow::Result<()> {
+        while input.read_buf(&mut self.buffer).await? > 0 {
+            self.decoder.decode_stream(&mut self.buffer)?;
+        }
+
+        // Flush the final frame.
+        self.decoder.decode_frame(&mut self.buffer, None)
+    }
+}
+
+pub async fn transcode(input: PathBuf, format: ImportType) -> Result<impl AsyncRead> {
+    let copy_video = is_h264(&input).await?;
+
+    let mut cmd = Command::new("ffmpeg");
+    cmd.args([
+        "-hide_banner",
+        "-loglevel",
+        "error",
+        "-stream_loop",
+        "-1",
+        "-re",
+        "-i",
+    ]);
+    cmd.arg(input.as_os_str());
+
+    if copy_video {
+        info!("input is h264, copy video");
+        cmd.args(["-c:v", "copy"]);
+    } else {
+        info!("input is not h264, transcode");
+        cmd.args(["-c:v", "libx264", "-pix_fmt", "yuv420p"]);
+    }
+
+    match format {
+        ImportType::Cmaf => {
+            cmd.args(["-c:a", "libopus", "-b:a", "128k"]);
+            cmd.args([
+                "-movflags",
+                "cmaf+separate_moof+delay_moov+skip_trailer+frag_every_frame",
+                "-f",
+                "mp4",
+            ]);
+        }
+        ImportType::AnnexB => {
+            cmd.args([
+                "-a",
+                "n",
+                "-bsf:v",
+                "h264_mp4toannexb",
+                "-f",
+                "h264",
+                "-movflags",
+                "cmaf+separate_moof+delay_moov+skip_trailer+frag_every_frame",
+                "-f",
+                "mp4",
+            ]);
+        }
+    }
+    cmd.arg("-");
+
+    let mut child = cmd.stdout(Stdio::piped()).spawn()?;
+    let stdout = child.stdout.take().unwrap();
+
+    Ok(stdout)
+}
+
+pub async fn is_h264(input: &Path) -> Result<bool> {
+    let out = Command::new("ffprobe")
+        .args([
+            "-v",
+            "error",
+            "-select_streams",
+            "v:0",
+            "-show_entries",
+            "stream=codec_name",
+            "-of",
+            "default=nokey=1:noprint_wrappers=1",
+        ])
+        .arg(input.as_os_str())
+        .output()
+        .await?;
+
+    Ok(String::from_utf8_lossy(&out.stdout).trim() == "h264")
+}
diff --git a/third_party/iroh-live/iroh-live/examples/common/mod.rs b/third_party/iroh-live/iroh-live/examples/common/mod.rs
new file mode 100644
index 0000000..07fecca
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/common/mod.rs
@@ -0,0 +1 @@
+pub mod import;
diff --git a/third_party/iroh-live/iroh-live/examples/publish.rs b/third_party/iroh-live/iroh-live/examples/publish.rs
new file mode 100644
index 0000000..fe46ffd
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/publish.rs
@@ -0,0 +1,95 @@
+use clap::Parser;
+use iroh::{Endpoint, SecretKey, protocol::Router};
+use iroh_live::{
+    Live,
+    media::{
+        audio::AudioBackend,
+        av::{AudioPreset, VideoCodec, VideoPreset},
+        capture::CameraCapturer,
+        ffmpeg::{H264Encoder, OpusEncoder},
+        publish::{AudioRenditions, PublishBroadcast, VideoRenditions},
+    },
+    ticket::LiveTicket,
+};
+use n0_error::StdResultExt;
+
+#[tokio::main]
+async fn main() -> n0_error::Result {
+    tracing_subscriber::fmt::init();
+    let cli = Cli::parse();
+
+    // Setup audio backend.
+    let audio_ctx = AudioBackend::new();
+
+    // Setup iroh and iroh-live.
+    let endpoint = Endpoint::builder()
+        .secret_key(secret_key_from_env()?)
+        .bind()
+        .await?;
+    let live = Live::new(endpoint.clone());
+    let router = Router::builder(endpoint)
+        .accept(iroh_live::ALPN, live.moq.protocol_handler())
+        .spawn();
+
+    // Create a publish broadcast.
+    let mut broadcast = PublishBroadcast::new();
+
+    // Capture audio, and encode with the cli-provided preset.
+    if !cli.no_audio {
+        let mic = audio_ctx.default_input().await?;
+        let audio = AudioRenditions::new::<OpusEncoder>(mic, [cli.audio_preset]);
+        broadcast.set_audio(Some(audio))?;
+    }
+
+    // Capture camera, and encode with the cli-provided presets.
+    if !cli.no_video {
+        let camera = CameraCapturer::new()?;
+        let video = VideoRenditions::new::<H264Encoder>(camera, cli.video_presets);
+        broadcast.set_video(Some(video))?;
+    }
+
+    // Publish under the name "hello".
+    let name = "hello";
+    live.publish(name, broadcast.producer()).await?;
+
+    // Create a ticket string and print
+    let ticket = LiveTicket::new(router.endpoint().id(), name);
+    println!("publishing at {ticket}");
+    let long_ticket = LiveTicket::new(router.endpoint().addr(), name);
+    println!("\nticket with addrs: {long_ticket}");
+
+    // Wait for ctrl-c and then shutdown.
+    tokio::signal::ctrl_c().await?;
+    live.shutdown();
+    router.shutdown().await.std_context("router shutdown")?;
+
+    Ok(())
+}
+
+#[derive(Parser, Debug)]
+struct Cli {
+    #[arg(long, default_value_t=VideoCodec::H264)]
+    codec: VideoCodec,
+    #[arg(long, value_delimiter=',', default_values_t=[VideoPreset::P180, VideoPreset::P360, VideoPreset::P720, VideoPreset::P1080])]
+    video_presets: Vec<VideoPreset>,
+    #[arg(long, default_value_t=AudioPreset::Hq)]
+    audio_preset: AudioPreset,
+    #[arg(long)]
+    no_video: bool,
+    #[arg(long)]
+    no_audio: bool,
+}
+
+fn secret_key_from_env() -> n0_error::Result<SecretKey> {
+    Ok(match std::env::var("IROH_SECRET") {
+        Ok(key) => key.parse()?,
+        Err(_) => {
+            let key = SecretKey::generate(&mut rand::rng());
+            println!(
+                "Created new secret. Reuse with IROH_SECRET={}",
+                data_encoding::HEXLOWER.encode(&key.to_bytes())
+            );
+            key
+        }
+    })
+}
diff --git a/third_party/iroh-live/iroh-live/examples/push.rs b/third_party/iroh-live/iroh-live/examples/push.rs
new file mode 100644
index 0000000..fc8abe7
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/push.rs
@@ -0,0 +1,71 @@
+use std::{path::PathBuf, pin::Pin};
+
+use clap::Parser;
+use iroh::EndpointId;
+use iroh_live::LiveNode;
+use moq_lite::BroadcastProducer;
+use n0_error::Result;
+use tokio::io::AsyncRead;
+use tracing::warn;
+
+mod common;
+use self::common::import::{Import, ImportType, transcode};
+
+#[derive(Debug, Parser)]
+struct Cli {
+    #[clap(short, long)]
+    target: EndpointId,
+    #[clap(short, long, default_value = "anon/bbb")]
+    path: String,
+
+    /// The format of the input media.
+    #[clap(long, value_enum, default_value_t = ImportType::Cmaf)]
+    format: ImportType,
+
+    /// Input file.
+    #[clap(short, long)]
+    file: Option<PathBuf>,
+
+    /// Transcode the video with ffmpeg.
+    #[clap(long)]
+    transcode: bool,
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt::init();
+    let cli = Cli::parse();
+
+    let node = LiveNode::spawn_from_env().await?;
+    let session = node.live.connect(cli.target).await?;
+
+    let mut input: Pin<Box<dyn AsyncRead + Send + 'static>> = match (cli.file, cli.transcode) {
+        (Some(path), true) => Box::pin(transcode(path.clone(), cli.format).await?),
+        (Some(path), false) => Box::pin(tokio::fs::File::open(path).await?),
+        (None, false) => Box::pin(tokio::io::stdin()),
+        (None, true) => panic!("transcoding stdin is not supported"),
+    };
+
+    let broadcast = BroadcastProducer::default();
+    session.publish(cli.path, broadcast.consume());
+
+    let import = async move {
+        let mut import = Import::new(broadcast.into(), cli.format);
+        import.init_from(&mut input).await?;
+        import.read_from(&mut input).await?;
+        n0_error::Ok(())
+    };
+    tokio::pin!(import);
+
+    tokio::select! {
+        res = &mut import => {
+            if let Err(err) = res {
+                warn!("Import failed: {err:#}");
+            }
+        }
+        _ = tokio::signal::ctrl_c() => {}
+    };
+    drop(import);
+    node.shutdown().await?;
+    Ok(())
+}
diff --git a/third_party/iroh-live/iroh-live/examples/room-publish-file.rs b/third_party/iroh-live/iroh-live/examples/room-publish-file.rs
new file mode 100644
index 0000000..5612d53
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/room-publish-file.rs
@@ -0,0 +1,75 @@
+use std::{path::PathBuf, pin::Pin};
+
+use clap::Parser;
+use iroh_live::{LiveNode, rooms::RoomTicket};
+use moq_lite::BroadcastProducer;
+use n0_error::Result;
+use tokio::io::AsyncRead;
+use tracing::warn;
+
+mod common;
+use self::common::import::{Import, ImportType, transcode};
+
+#[derive(Debug, Parser)]
+struct Cli {
+    /// Room to join. If empty a new room will be created.
+    /// Will also be read from the IROH_LIVE_ROOM environment variable.
+    #[clap(short, long)]
+    room: Option<RoomTicket>,
+
+    /// The format of the input media.
+    #[clap(long, value_enum, default_value_t = ImportType::Cmaf)]
+    format: ImportType,
+
+    /// Input file. If empty reads from stdin.
+    file: Option<PathBuf>,
+
+    /// Transcode the video with ffmpeg.
+    #[clap(long)]
+    transcode: bool,
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt::init();
+    let cli = Cli::parse();
+
+    let ticket = match cli.room {
+        Some(ticket) => ticket,
+        None => RoomTicket::new_from_env()?,
+    };
+
+    let node = LiveNode::spawn_from_env().await?;
+    let room = node.join_room(ticket).await?;
+
+    let mut input: Pin<Box<dyn AsyncRead + Send + 'static>> = match (cli.file, cli.transcode) {
+        (Some(path), true) => Box::pin(transcode(path.clone(), cli.format).await?),
+        (Some(path), false) => Box::pin(tokio::fs::File::open(path).await?),
+        (None, false) => Box::pin(tokio::io::stdin()),
+        (None, true) => panic!("transcoding stdin is not supported"),
+    };
+
+    let broadcast = BroadcastProducer::default();
+    room.publish("file", broadcast.clone()).await?;
+
+    let import = async move {
+        let mut import = Import::new(broadcast.into(), cli.format);
+        import.init_from(&mut input).await?;
+        import.read_from(&mut input).await?;
+        n0_error::Ok(())
+    };
+    tokio::pin!(import);
+
+    tokio::select! {
+        res = &mut import => {
+            if let Err(err) = res {
+                warn!("Import failed: {err:#}");
+            }
+        }
+        _ = tokio::signal::ctrl_c() => {}
+    };
+    drop(import);
+    drop(room);
+    node.shutdown().await?;
+    Ok(())
+}
diff --git a/third_party/iroh-live/iroh-live/examples/rooms.rs b/third_party/iroh-live/iroh-live/examples/rooms.rs
new file mode 100644
index 0000000..76f96d1
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/rooms.rs
@@ -0,0 +1,428 @@
+use std::time::Duration;
+
+use clap::Parser;
+use eframe::egui::{self, Color32, Id, Vec2};
+use iroh::{Endpoint, protocol::Router};
+use iroh_gossip::{Gossip, TopicId};
+use iroh_live::{
+    Live,
+    media::{
+        audio::AudioBackend,
+        av::{AudioPreset, VideoPreset},
+        capture::{CameraCapturer, ScreenCapturer},
+        ffmpeg::{FfmpegDecoders, FfmpegVideoDecoder, H264Encoder, OpusEncoder, ffmpeg_log_init},
+        publish::{AudioRenditions, PublishBroadcast, VideoRenditions},
+        subscribe::{AudioTrack, AvRemoteTrack, SubscribeBroadcast, WatchTrack},
+    },
+    moq::MoqSession,
+    rooms::{Room, RoomEvent, RoomTicket},
+    util::StatsSmoother,
+};
+use n0_error::{Result, StdResultExt, anyerr};
+use tracing::{info, warn};
+
+const BROADCAST_NAME: &str = "cam";
+
+#[derive(Debug, Parser)]
+struct Cli {
+    join: Option<RoomTicket>,
+    #[clap(long)]
+    screen: bool,
+    #[clap(long)]
+    no_audio: bool,
+}
+
+fn main() -> Result<()> {
+    tracing_subscriber::fmt::init();
+    ffmpeg_log_init();
+    let cli = Cli::parse();
+
+    let rt = tokio::runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .unwrap();
+
+    let audio_ctx = AudioBackend::new();
+    let (router, broadcast, room) = rt.block_on(setup(cli, audio_ctx.clone()))?;
+
+    let _guard = rt.enter();
+    eframe::run_native(
+        "IrohLive",
+        eframe::NativeOptions::default(),
+        Box::new(|cc| {
+            let app = App {
+                rt,
+                room,
+                peers: vec![],
+                self_video: broadcast
+                    .watch_local(Default::default())
+                    .map(|track| VideoView::new(&cc.egui_ctx, track, usize::MAX)),
+                router,
+                _broadcast: broadcast,
+                audio_ctx,
+            };
+            Ok(Box::new(app))
+        }),
+    )
+    .map_err(|err| anyerr!("eframe failed: {err:#}"))
+}
+
+async fn setup(cli: Cli, audio_ctx: AudioBackend) -> Result<(Router, PublishBroadcast, Room)> {
+    let endpoint = Endpoint::builder()
+        .secret_key(secret_key_from_env()?)
+        .bind()
+        .await?;
+    info!(endpoint_id=%endpoint.id(), "endpoint bound");
+
+    let gossip = Gossip::builder().spawn(endpoint.clone());
+    let live = Live::new(endpoint.clone());
+
+    let router = Router::builder(endpoint)
+        .accept(iroh_gossip::ALPN, gossip.clone())
+        .accept(iroh_moq::ALPN, live.protocol_handler())
+        .spawn();
+
+    // Publish ourselves.
+    let broadcast = {
+        let mut broadcast = PublishBroadcast::new();
+        if !cli.no_audio {
+            let mic = audio_ctx.default_input().await?;
+            let audio = AudioRenditions::new::<OpusEncoder>(mic, [AudioPreset::Hq]);
+            broadcast.set_audio(Some(audio))?;
+        }
+        let video = if cli.screen {
+            let screen = ScreenCapturer::new()?;
+            VideoRenditions::new::<H264Encoder>(screen, VideoPreset::all())
+        } else {
+            let camera = CameraCapturer::new()?;
+            VideoRenditions::new::<H264Encoder>(camera, VideoPreset::all())
+        };
+        broadcast.set_video(Some(video))?;
+        broadcast
+    };
+    let ticket = match cli.join {
+        None => RoomTicket::new(topic_id_from_env()?, vec![]),
+        Some(ticket) => ticket,
+    };
+
+    let room = Room::new(router.endpoint(), gossip, live, ticket).await?;
+    room.publish(BROADCAST_NAME, broadcast.producer()).await?;
+
+    println!("room ticket: {}", room.ticket());
+
+    Ok((router, broadcast, room))
+}
+
+struct App {
+    room: Room,
+    peers: Vec<RemoteTrackView>,
+    self_video: Option<VideoView>,
+    router: Router,
+    _broadcast: PublishBroadcast,
+    audio_ctx: AudioBackend,
+    rt: tokio::runtime::Runtime,
+}
+
+impl eframe::App for App {
+    fn update(&mut self, ctx: &egui::Context, _frame: &mut eframe::Frame) {
+        ctx.request_repaint_after(Duration::from_millis(30)); // min 30 fps
+
+        // Remove closed peers.
+        self.peers.retain(|track| !track.is_closed());
+
+        // Add newly subscribed peers.
+        while let Ok(event) = self.room.try_recv() {
+            match event {
+                RoomEvent::RemoteAnnounced { remote, broadcasts } => {
+                    info!(
+                        "peer announced: {} with broadcasts {broadcasts:?}",
+                        remote.fmt_short(),
+                    );
+                }
+                RoomEvent::RemoteConnected { session } => {
+                    info!("peer connected: {}", session.conn().remote_id().fmt_short());
+                }
+                RoomEvent::BroadcastSubscribed { session, broadcast } => {
+                    info!(
+                        "subscribing to {}:{}",
+                        session.remote_id(),
+                        broadcast.broadcast_name()
+                    );
+                    let track = match self.rt.block_on(async {
+                        let audio_out = self.audio_ctx.default_output().await?;
+                        broadcast.watch_and_listen::<FfmpegDecoders>(audio_out, Default::default())
+                    }) {
+                        Ok(track) => track,
+                        Err(err) => {
+                            warn!("failed to add track: {err}");
+                            continue;
+                        }
+                    };
+
+                    self.peers
+                        .push(RemoteTrackView::new(ctx, session, track, self.peers.len()));
+                }
+            }
+        }
+
+        egui::CentralPanel::default()
+            .frame(egui::Frame::new().inner_margin(0.0).outer_margin(0.0))
+            .show(ctx, |ui| {
+                ui.spacing_mut().item_spacing = egui::vec2(0.0, 0.0);
+                show_video_grid(ctx, ui, &mut self.peers);
+
+                // Render video preview of self
+                if let Some(self_view) = self.self_video.as_mut() {
+                    let size = (200., 200.);
+                    egui::Area::new(Id::new("self-video"))
+                        .anchor(egui::Align2::RIGHT_BOTTOM, [-10.0, -10.0]) // 10px from the bottom-right edge
+                        .order(egui::Order::Foreground)
+                        .show(ui.ctx(), |ui| {
+                            egui::Frame::new()
+                                .fill(egui::Color32::from_rgba_unmultiplied(0, 0, 0, 128))
+                                .corner_radius(8.0)
+                                .show(ui, |ui| {
+                                    ui.set_width(size.0);
+                                    ui.set_height(size.1);
+                                    ui.add_sized(size, self_view.render_image(ctx, size.into()));
+                                });
+                        });
+                }
+            });
+    }
+
+    fn on_exit(&mut self, _gl: Option<&eframe::glow::Context>) {
+        let router = self.router.clone();
+        self.rt.block_on(async move {
+            if let Err(err) = router.shutdown().await {
+                warn!("shutdown error: {err:?}");
+            }
+        });
+    }
+}
+
+struct RemoteTrackView {
+    id: usize,
+    video: Option<VideoView>,
+    _audio_track: Option<AudioTrack>,
+    session: MoqSession,
+    broadcast: SubscribeBroadcast,
+    stats: StatsSmoother,
+}
+
+impl RemoteTrackView {
+    fn new(ctx: &egui::Context, session: MoqSession, track: AvRemoteTrack, id: usize) -> Self {
+        Self {
+            video: track.video.map(|video| VideoView::new(ctx, video, id)),
+            stats: StatsSmoother::new(),
+            broadcast: track.broadcast,
+            id,
+            _audio_track: track.audio,
+            session,
+        }
+    }
+
+    fn is_closed(&self) -> bool {
+        self.session.conn().close_reason().is_some()
+    }
+
+    fn render_image(
+        &mut self,
+        ctx: &egui::Context,
+        available_size: Vec2,
+    ) -> Option<egui::Image<'_>> {
+        self.video
+            .as_mut()
+            .map(|video| video.render_image(ctx, available_size))
+    }
+
+    fn render_overlay_in_rect(&mut self, ui: &mut egui::Ui, rect: egui::Rect) {
+        let pos = rect.left_bottom() + egui::vec2(8.0, -8.0);
+        let overlay_id = egui::Id::new(("overlay", self.id));
+
+        egui::Area::new(overlay_id)
+            .order(egui::Order::Foreground)
+            .fixed_pos(pos)
+            .show(ui.ctx(), |ui| {
+                egui::Frame::new()
+                    .fill(egui::Color32::from_rgba_unmultiplied(0, 0, 0, 128))
+                    .corner_radius(3.0)
+                    .show(ui, |ui| {
+                        ui.spacing_mut().item_spacing = egui::vec2(8.0, 8.0);
+                        ui.set_min_width(100.);
+                        self.render_overlay(ui);
+                    });
+            });
+    }
+
+    fn render_overlay(&mut self, ui: &mut egui::Ui) {
+        ui.vertical(|ui| {
+            let selected = self.video.as_ref().map(|v| v.track.rendition().to_owned());
+            egui::ComboBox::from_id_salt(format!("video{}", self.id))
+                .selected_text(selected.clone().unwrap_or_default())
+                .show_ui(ui, |ui| {
+                    for name in self.broadcast.catalog().video_renditions() {
+                        if ui
+                            .selectable_label(selected.as_deref() == Some(name), name)
+                            .clicked()
+                        {
+                            if let Ok(track) = self
+                                .broadcast
+                                .watch_rendition::<FfmpegVideoDecoder>(&Default::default(), name)
+                            {
+                                if let Some(video) = self.video.as_mut() {
+                                    video.set_track(track);
+                                } else {
+                                    self.video = Some(VideoView::new(ui.ctx(), track, self.id))
+                                }
+                            }
+                        }
+                    }
+                });
+
+            let stats = self.stats.smoothed(|| self.session.conn().stats());
+            ui.label(format!(
+                "peer:   {}",
+                self.session.conn().remote_id().fmt_short()
+            ));
+            ui.label(format!("BW up:   {}", stats.up.rate_str));
+            ui.label(format!("BW down: {}", stats.down.rate_str));
+            ui.label(format!("RTT:     {}ms", stats.rtt.as_millis()));
+        });
+    }
+}
+
+struct VideoView {
+    track: WatchTrack,
+    size: egui::Vec2,
+    texture: egui::TextureHandle,
+}
+
+impl VideoView {
+    fn new(ctx: &egui::Context, track: WatchTrack, id: usize) -> Self {
+        let texture_name = format!("video-texture-{}", id);
+        let size = egui::vec2(100., 100.);
+        let color_image =
+            egui::ColorImage::filled([size.x as usize, size.y as usize], Color32::BLACK);
+        let texture = ctx.load_texture(&texture_name, color_image, egui::TextureOptions::default());
+        Self {
+            size,
+            texture,
+            track,
+        }
+    }
+
+    fn set_track(&mut self, track: WatchTrack) {
+        self.track = track;
+    }
+
+    fn render_image(&mut self, ctx: &egui::Context, available_size: Vec2) -> egui::Image<'_> {
+        let available_size = available_size.into();
+        if available_size != self.size {
+            self.size = available_size;
+            let ppp = ctx.pixels_per_point();
+            let w = (available_size.x * ppp) as u32;
+            let h = (available_size.y * ppp) as u32;
+            self.track.set_viewport(w, h);
+        }
+        if let Some(frame) = self.track.current_frame() {
+            let (w, h) = frame.img().dimensions();
+            let image = egui::ColorImage::from_rgba_unmultiplied(
+                [w as usize, h as usize],
+                frame.img().as_raw(),
+            );
+            self.texture.set(image, Default::default());
+        }
+        egui::Image::from_texture(&self.texture).shrink_to_fit()
+    }
+}
+
+/// Show `textures` as squares in a compact auto grid that fills the parent as much as
+/// possible without breaking square aspect.
+fn show_video_grid(ctx: &egui::Context, ui: &mut egui::Ui, videos: &mut [RemoteTrackView]) {
+    let n = videos.len();
+    if n == 0 {
+        return;
+    }
+
+    // Parent size we’re allowed to use
+    let avail = ui.available_size(); // egui docs recommend this for filling containers
+    // Choose columns ≈ ceil(sqrt(n)), rows to fit the rest
+    let cols = (n as f32).sqrt().ceil() as usize;
+    let rows = (n + cols - 1) / cols;
+
+    // Side length of each square in points (fill the limiting axis)
+    let cell = (avail.x / cols as f32).min(avail.y / rows as f32).floor();
+    let cell_size = [cell, cell];
+
+    // Compute the grid’s actual pixel footprint
+    let grid_w = cell * cols as f32;
+    let grid_h = cell * rows as f32;
+
+    // Center the grid in any leftover space
+    let pad_x = ((avail.x - grid_w) * 0.5).max(0.0);
+    let pad_y = ((avail.y - grid_h) * 0.5).max(0.0);
+
+    ui.add_space(pad_y);
+    ui.horizontal(|ui| {
+        ui.add_space(pad_x);
+
+        egui::Grid::new("image_grid")
+            .spacing(Vec2::ZERO) // no gaps; tiles butt together
+            .show(ui, |ui| {
+                let mut i = 0;
+                for _r in 0..rows {
+                    for _c in 0..cols {
+                        if i < n {
+                            // Force exact square size for each image
+                            if let Some(image) = videos[i].render_image(ctx, cell_size.into()) {
+                                let response = ui.add_sized(cell_size, image);
+                                let rect = response.rect;
+                                videos[i].render_overlay_in_rect(ui, rect);
+                            }
+                            i += 1;
+                        } else {
+                            // Keep the grid rectangular when N isn’t a multiple of cols
+                            ui.allocate_exact_size(Vec2::splat(cell), egui::Sense::hover());
+                        }
+                    }
+                    ui.end_row();
+                }
+            });
+    });
+}
+
+fn secret_key_from_env() -> n0_error::Result<iroh::SecretKey> {
+    Ok(match std::env::var("IROH_SECRET") {
+        Ok(key) => key.parse()?,
+        Err(_) => {
+            let key = iroh::SecretKey::generate(&mut rand::rng());
+            println!(
+                "Created new secret. Reuse with IROH_SECRET={}",
+                data_encoding::HEXLOWER.encode(&key.to_bytes())
+            );
+            key
+        }
+    })
+}
+
+fn topic_id_from_env() -> n0_error::Result<TopicId> {
+    Ok(match std::env::var("IROH_TOPIC") {
+        Ok(topic) => TopicId::from_bytes(
+            data_encoding::HEXLOWER
+                .decode(topic.as_bytes())
+                .std_context("invalid hex")?
+                .as_slice()
+                .try_into()
+                .std_context("invalid length")?,
+        ),
+        Err(_) => {
+            let topic = TopicId::from_bytes(rand::random());
+            println!(
+                "Created new topic. Reuse with IROH_TOPIC={}",
+                data_encoding::HEXLOWER.encode(topic.as_bytes())
+            );
+            topic
+        }
+    })
+}
diff --git a/third_party/iroh-live/iroh-live/examples/watch.rs b/third_party/iroh-live/iroh-live/examples/watch.rs
new file mode 100644
index 0000000..cb0cfbe
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/examples/watch.rs
@@ -0,0 +1,225 @@
+use std::time::Duration;
+
+use clap::Parser;
+use eframe::egui::{self, Color32, Id, Vec2};
+use iroh::{Endpoint, EndpointId};
+use iroh_live::{
+    Live,
+    media::{
+        audio::AudioBackend,
+        ffmpeg::{FfmpegDecoders, FfmpegVideoDecoder, ffmpeg_log_init},
+        subscribe::{AudioTrack, SubscribeBroadcast, WatchTrack},
+    },
+    moq::MoqSession,
+    ticket::LiveTicket,
+    util::StatsSmoother,
+};
+use n0_error::{Result, anyerr};
+use tracing::info;
+
+#[derive(Debug, Parser)]
+struct Cli {
+    #[clap(long, conflicts_with = "endpoint-id")]
+    ticket: Option<LiveTicket>,
+    #[clap(long, conflicts_with = "ticket", requires = "name")]
+    endpoint_id: Option<EndpointId>,
+    #[clap(long, conflicts_with = "ticket", requires = "endpoint-id")]
+    name: Option<String>,
+}
+
+fn main() -> Result<()> {
+    let cli = Cli::parse();
+    let ticket = match (cli.ticket, cli.endpoint_id, cli.name) {
+        (Some(ticket), None, None) => ticket,
+        (None, Some(endpoint_id), Some(name)) => LiveTicket::new(endpoint_id, name),
+        _ => {
+            eprintln!("Invalid arguments: Use either --ticket, or --endpoint and --name");
+            std::process::exit(1);
+        }
+    };
+
+    tracing_subscriber::fmt::init();
+    ffmpeg_log_init();
+    let rt = tokio::runtime::Builder::new_multi_thread()
+        .enable_all()
+        .build()
+        .unwrap();
+    let audio_ctx = AudioBackend::new();
+
+    println!("connecting to {ticket} ...");
+    let (endpoint, session, track) = rt.block_on({
+        let audio_ctx = audio_ctx.clone();
+        async move {
+            let endpoint = Endpoint::bind().await?;
+            let live = Live::new(endpoint.clone());
+            let audio_out = audio_ctx.default_output().await?;
+            let (session, track) = live
+                .watch_and_listen::<FfmpegDecoders>(
+                    ticket.endpoint,
+                    &ticket.broadcast_name,
+                    audio_out,
+                    Default::default(),
+                )
+                .await?;
+            println!("connected!");
+            n0_error::Ok((endpoint, session, track))
+        }
+    })?;
+
+    let _guard = rt.enter();
+
+    eframe::run_native(
+        "IrohLive",
+        eframe::NativeOptions::default(),
+        Box::new(|cc| {
+            let egui_ctx = cc.egui_ctx.clone();
+            rt.spawn(async move {
+                let _ = tokio::signal::ctrl_c().await;
+                egui_ctx.send_viewport_cmd(egui::ViewportCommand::Close);
+                // TODO: When the app is not visible, this will not trigger `update` immediately.
+                // See https://github.com/emilk/egui/issues/5112
+                egui_ctx.request_repaint();
+            });
+            let app = App {
+                video: track.video.map(|video| VideoView::new(&cc.egui_ctx, video)),
+                _audio_ctx: audio_ctx,
+                _audio: track.audio,
+                broadcast: track.broadcast,
+                session: session,
+                stats: StatsSmoother::new(),
+                endpoint,
+                rt,
+            };
+            Ok(Box::new(app))
+        }),
+    )
+    .map_err(|err| anyerr!("eframe failed: {err:#}"))
+}
+
+struct App {
+    video: Option<VideoView>,
+    _audio: Option<AudioTrack>,
+    _audio_ctx: AudioBackend,
+    endpoint: Endpoint,
+    session: MoqSession,
+    broadcast: SubscribeBroadcast,
+    stats: StatsSmoother,
+    rt: tokio::runtime::Runtime,
+}
+
+impl eframe::App for App {
+    fn update(&mut self, ctx: &egui::Context, _frame: &mut eframe::Frame) {
+        ctx.request_repaint_after(Duration::from_millis(30)); // min 30 fps
+        egui::CentralPanel::default()
+            .frame(egui::Frame::new().inner_margin(0.0).outer_margin(0.0))
+            .show(ctx, |ui| {
+                ui.spacing_mut().item_spacing = egui::vec2(0.0, 0.0);
+
+                let avail = ui.available_size();
+                if let Some(video) = self.video.as_mut() {
+                    ui.add_sized(avail, video.render(ctx, avail));
+                }
+
+                egui::Area::new(Id::new("overlay"))
+                    .anchor(egui::Align2::LEFT_BOTTOM, [8.0, -8.0])
+                    .show(ctx, |ui| {
+                        egui::Frame::new()
+                            .fill(egui::Color32::from_rgba_unmultiplied(0, 0, 0, 128))
+                            .corner_radius(3.0)
+                            .show(ui, |ui| {
+                                ui.spacing_mut().item_spacing = egui::vec2(8.0, 8.0);
+                                ui.set_min_width(100.);
+                                self.render_overlay(ctx, ui);
+                            })
+                    })
+            });
+    }
+
+    fn on_exit(&mut self, _gl: Option<&eframe::glow::Context>) {
+        info!("exit");
+        self.broadcast.shutdown();
+        self.session.close(0, b"bye");
+        let endpoint = self.endpoint.clone();
+        self.rt.block_on(async move {
+            endpoint.close().await;
+            info!("endpoint closed");
+        });
+    }
+}
+
+impl App {
+    fn render_overlay(&mut self, ctx: &egui::Context, ui: &mut egui::Ui) {
+        ui.vertical(|ui| {
+            let selected = self
+                .video
+                .as_ref()
+                .map(|video| video.track.rendition().to_owned());
+            egui::ComboBox::from_label("")
+                .selected_text(selected.clone().unwrap_or_default())
+                .show_ui(ui, |ui| {
+                    for name in self.broadcast.catalog().video_renditions() {
+                        if ui
+                            .selectable_label(selected.as_deref() == Some(name), name)
+                            .clicked()
+                        {
+                            if let Ok(track) = self
+                                .broadcast
+                                .watch_rendition::<FfmpegVideoDecoder>(&Default::default(), name)
+                            {
+                                self.video = Some(VideoView::new(ctx, track));
+                            }
+                        }
+                    }
+                });
+
+            let stats = self.stats.smoothed(|| self.session.conn().stats());
+            ui.label(format!(
+                "peer:   {}",
+                self.session.conn().remote_id().fmt_short()
+            ));
+            ui.label(format!("BW up:   {}", stats.up.rate_str));
+            ui.label(format!("BW down: {}", stats.down.rate_str));
+            ui.label(format!("RTT:     {}ms", stats.rtt.as_millis()));
+        });
+    }
+}
+
+struct VideoView {
+    track: WatchTrack,
+    texture: egui::TextureHandle,
+    size: egui::Vec2,
+}
+
+impl VideoView {
+    fn new(ctx: &egui::Context, track: WatchTrack) -> Self {
+        let size = egui::vec2(100., 100.);
+        let color_image =
+            egui::ColorImage::filled([size.x as usize, size.y as usize], Color32::BLACK);
+        let texture = ctx.load_texture("video", color_image, egui::TextureOptions::default());
+        Self {
+            size,
+            texture,
+            track,
+        }
+    }
+
+    fn render(&mut self, ctx: &egui::Context, available_size: Vec2) -> egui::Image<'_> {
+        let available_size = available_size.into();
+        if available_size != self.size {
+            self.size = available_size;
+            let ppp = ctx.pixels_per_point();
+            let w = (available_size.x * ppp) as u32;
+            let h = (available_size.y * ppp) as u32;
+            self.track.set_viewport(w, h);
+        }
+        if let Some(frame) = self.track.current_frame() {
+            let (w, h) = frame.img().dimensions();
+            let image = egui::ColorImage::from_rgba_unmultiplied(
+                [w as usize, h as usize],
+                frame.img().as_raw(),
+            );
+            self.texture.set(image, Default::default());
+        }
+        egui::Image::from_texture(&self.texture).shrink_to_fit()
+    }
+}
diff --git a/third_party/iroh-live/iroh-live/src/lib.rs b/third_party/iroh-live/iroh-live/src/lib.rs
new file mode 100644
index 0000000..296beae
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/lib.rs
@@ -0,0 +1,15 @@
+mod live;
+mod node;
+pub mod rooms;
+pub mod ticket;
+pub mod util;
+
+pub use self::live::Live;
+pub use self::node::LiveNode;
+
+pub use iroh_moq as moq;
+pub use iroh_moq::ALPN;
+
+pub use hang::catalog;
+
+pub use moq_media as media;
diff --git a/third_party/iroh-live/iroh-live/src/live.rs b/third_party/iroh-live/iroh-live/src/live.rs
new file mode 100644
index 0000000..17b5b9e
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/live.rs
@@ -0,0 +1,62 @@
+use iroh::{Endpoint, EndpointAddr};
+use iroh_moq::{Moq, MoqProtocolHandler, MoqSession};
+use moq_lite::BroadcastProducer;
+use moq_media::{
+    av::{AudioSink, Decoders, PlaybackConfig},
+    subscribe::{AvRemoteTrack, SubscribeBroadcast},
+};
+use n0_error::Result;
+use tracing::info;
+
+#[derive(Clone)]
+pub struct Live {
+    pub moq: Moq,
+}
+
+impl Live {
+    pub fn new(endpoint: Endpoint) -> Self {
+        Self {
+            moq: Moq::new(endpoint),
+        }
+    }
+
+    pub async fn connect(&self, remote: impl Into<EndpointAddr>) -> Result<MoqSession> {
+        self.moq.connect(remote).await
+    }
+
+    pub async fn connect_and_subscribe(
+        &self,
+        remote: impl Into<EndpointAddr>,
+        broadcast_name: &str,
+    ) -> Result<(MoqSession, SubscribeBroadcast)> {
+        let mut session = self.connect(remote).await?;
+        info!(id=%session.conn().remote_id(), "new peer connected");
+        let broadcast = session.subscribe(broadcast_name).await?;
+        let broadcast = SubscribeBroadcast::new(broadcast_name.to_string(), broadcast).await?;
+        Ok((session, broadcast))
+    }
+
+    pub async fn watch_and_listen<D: Decoders>(
+        &self,
+        remote: impl Into<EndpointAddr>,
+        broadcast_name: &str,
+        audio_out: impl AudioSink,
+        config: PlaybackConfig,
+    ) -> Result<(MoqSession, AvRemoteTrack)> {
+        let (session, broadcast) = self.connect_and_subscribe(remote, &broadcast_name).await?;
+        let track = broadcast.watch_and_listen::<D>(audio_out, config)?;
+        Ok((session, track))
+    }
+
+    pub fn protocol_handler(&self) -> MoqProtocolHandler {
+        self.moq.protocol_handler()
+    }
+
+    pub async fn publish(&self, name: impl ToString, producer: BroadcastProducer) -> Result<()> {
+        self.moq.publish(name, producer).await
+    }
+
+    pub fn shutdown(&self) {
+        self.moq.shutdown();
+    }
+}
diff --git a/third_party/iroh-live/iroh-live/src/node.rs b/third_party/iroh-live/iroh-live/src/node.rs
new file mode 100644
index 0000000..b450620
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/node.rs
@@ -0,0 +1,72 @@
+use crate::{
+    live::Live,
+    rooms::{Room, RoomTicket},
+};
+use iroh::{Endpoint, protocol::Router};
+use iroh_gossip::Gossip;
+use n0_error::{Result, StdResultExt};
+use tracing::info;
+
+#[derive(Clone)]
+pub struct LiveNode {
+    router: Router,
+    pub live: Live,
+    pub gossip: Gossip,
+}
+
+impl LiveNode {
+    pub async fn spawn_from_env() -> Result<Self> {
+        let endpoint = Endpoint::builder()
+            .secret_key(secret_key_from_env()?)
+            .bind()
+            .await?;
+        info!(endpoint_id=%endpoint.id(), "endpoint bound");
+
+        let gossip = Gossip::builder().spawn(endpoint.clone());
+        let live = Live::new(endpoint.clone());
+
+        let router = Router::builder(endpoint)
+            .accept(iroh_gossip::ALPN, gossip.clone())
+            .accept(iroh_moq::ALPN, live.protocol_handler())
+            .spawn();
+
+        Ok(Self {
+            router,
+            gossip,
+            live,
+        })
+    }
+
+    pub async fn shutdown(&self) -> Result<()> {
+        self.live.shutdown();
+        self.router.shutdown().await.anyerr()
+    }
+
+    pub fn endpoint(&self) -> &Endpoint {
+        self.router.endpoint()
+    }
+
+    pub async fn join_room(&self, ticket: RoomTicket) -> Result<Room> {
+        Room::new(
+            self.endpoint(),
+            self.gossip.clone(),
+            self.live.clone(),
+            ticket,
+        )
+        .await
+    }
+}
+
+fn secret_key_from_env() -> n0_error::Result<iroh::SecretKey> {
+    Ok(match std::env::var("IROH_SECRET") {
+        Ok(key) => key.parse()?,
+        Err(_) => {
+            let key = iroh::SecretKey::generate(&mut rand::rng());
+            println!(
+                "Created new secret. Reuse with IROH_SECRET={}",
+                data_encoding::HEXLOWER.encode(&key.to_bytes())
+            );
+            key
+        }
+    })
+}
diff --git a/third_party/iroh-live/iroh-live/src/rooms.rs b/third_party/iroh-live/iroh-live/src/rooms.rs
new file mode 100644
index 0000000..553d296
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/rooms.rs
@@ -0,0 +1,391 @@
+use std::collections::HashSet;
+use std::pin::Pin;
+use std::sync::Arc;
+use std::time::Duration;
+
+use bytes::Bytes;
+use iroh::{Endpoint, EndpointId, SecretKey};
+use iroh_gossip::Gossip;
+use iroh_moq::MoqSession;
+use iroh_smol_kv::{ExpiryConfig, Filter, SignedValue, Subscribe, SubscribeMode, WriteScope};
+use moq_lite::BroadcastProducer;
+use moq_media::subscribe::SubscribeBroadcast;
+use n0_error::{Result, StdResultExt, anyerr};
+use n0_future::FuturesUnordered;
+use n0_future::{StreamExt, task::AbortOnDropHandle};
+use serde::{Deserialize, Serialize};
+use tokio::sync::mpsc::{self, error::TryRecvError};
+use tracing::{Instrument, debug, error_span, warn};
+
+use crate::Live;
+
+pub use self::publisher::{PublishOpts, RoomPublisherSync, StreamKind};
+pub use self::ticket::RoomTicket;
+
+type BoxFuture<T> = Pin<Box<dyn Future<Output = T> + Send + Sync + 'static>>;
+
+mod publisher;
+
+pub struct Room {
+    handle: RoomHandle,
+    events: mpsc::Receiver<RoomEvent>,
+}
+
+pub type RoomEvents = mpsc::Receiver<RoomEvent>;
+
+#[derive(Clone)]
+pub struct RoomHandle {
+    me: EndpointId,
+    ticket: RoomTicket,
+    tx: mpsc::Sender<ApiMessage>,
+    _actor_handle: Arc<AbortOnDropHandle<()>>,
+}
+
+impl RoomHandle {
+    pub fn ticket(&self) -> RoomTicket {
+        let mut ticket = self.ticket.clone();
+        ticket.bootstrap = vec![self.me];
+        ticket
+    }
+
+    pub async fn publish(&self, name: impl ToString, producer: BroadcastProducer) -> Result<()> {
+        self.tx
+            .send(ApiMessage::Publish {
+                name: name.to_string(),
+                producer: producer,
+            })
+            .await
+            .map_err(|_| anyerr!("room actor died"))
+    }
+}
+
+impl Room {
+    pub async fn new(
+        endpoint: &Endpoint,
+        gossip: Gossip,
+        live: Live,
+        ticket: RoomTicket,
+    ) -> Result<Self> {
+        let endpoint_id = endpoint.id();
+        let (actor_tx, actor_rx) = mpsc::channel(16);
+        let (event_tx, event_rx) = mpsc::channel(16);
+
+        let actor = Actor::new(
+            endpoint.secret_key(),
+            live,
+            event_tx,
+            gossip,
+            ticket.clone(),
+        )
+        .await?;
+        let actor_task = tokio::task::spawn(
+            async move { actor.run(actor_rx).await }
+                .instrument(error_span!("RoomActor", id = ticket.topic_id.fmt_short())),
+        );
+
+        Ok(Self {
+            handle: RoomHandle {
+                ticket,
+                me: endpoint_id,
+                tx: actor_tx,
+                _actor_handle: Arc::new(AbortOnDropHandle::new(actor_task)),
+            },
+            events: event_rx,
+        })
+    }
+
+    pub async fn recv(&mut self) -> Result<RoomEvent> {
+        self.events.recv().await.std_context("sender stopped")
+    }
+
+    pub fn try_recv(&mut self) -> Result<RoomEvent, TryRecvError> {
+        self.events.try_recv()
+    }
+
+    pub fn ticket(&self) -> RoomTicket {
+        self.handle.ticket()
+    }
+
+    pub fn split(self) -> (RoomEvents, RoomHandle) {
+        (self.events, self.handle)
+    }
+
+    pub async fn publish(&self, name: impl ToString, producer: BroadcastProducer) -> Result<()> {
+        self.handle.publish(name, producer).await
+    }
+}
+
+enum ApiMessage {
+    Publish {
+        name: String,
+        producer: BroadcastProducer,
+    },
+}
+
+pub enum RoomEvent {
+    RemoteAnnounced {
+        remote: EndpointId,
+        broadcasts: Vec<String>,
+    },
+    RemoteConnected {
+        session: MoqSession,
+    },
+    BroadcastSubscribed {
+        session: MoqSession,
+        broadcast: SubscribeBroadcast,
+    },
+}
+
+const PEER_STATE_KEY: &[u8] = b"s";
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct PeerState {
+    broadcasts: Vec<String>,
+}
+
+type KvEntry = (EndpointId, Bytes, SignedValue);
+
+#[derive(Debug, Clone, Eq, PartialEq, Ord, PartialOrd, Hash, derive_more::Display)]
+#[display("{}:{}", _0.fmt_short(), _1)]
+struct BroadcastId(EndpointId, String);
+
+struct Actor {
+    me: EndpointId,
+    _gossip: Gossip,
+    live: Live,
+    active_subscribe: HashSet<BroadcastId>,
+    active_publish: HashSet<String>,
+    connecting:
+        FuturesUnordered<BoxFuture<(BroadcastId, Result<(MoqSession, SubscribeBroadcast)>)>>,
+    subscribe_closed: FuturesUnordered<BoxFuture<BroadcastId>>,
+    publish_closed: FuturesUnordered<BoxFuture<String>>,
+    event_tx: mpsc::Sender<RoomEvent>,
+    kv: iroh_smol_kv::Client,
+    kv_writer: WriteScope,
+}
+
+impl Actor {
+    async fn new(
+        me: &SecretKey,
+        live: Live,
+        event_tx: mpsc::Sender<RoomEvent>,
+        gossip: Gossip,
+        ticket: RoomTicket,
+    ) -> Result<Self> {
+        let topic = gossip
+            .subscribe(ticket.topic_id, ticket.bootstrap.clone())
+            .await?;
+        let kv = iroh_smol_kv::Client::local(
+            topic,
+            iroh_smol_kv::Config {
+                anti_entropy_interval: Duration::from_secs(60),
+                fast_anti_entropy_interval: Duration::from_secs(1),
+                expiry: Some(ExpiryConfig {
+                    check_interval: Duration::from_secs(10),
+                    horizon: Duration::from_secs(60 * 2),
+                }),
+            },
+        );
+        let kv_writer = kv.write(me.clone());
+        Ok(Self {
+            me: me.public(),
+            live,
+            _gossip: gossip,
+            active_subscribe: Default::default(),
+            active_publish: Default::default(),
+            connecting: Default::default(),
+            subscribe_closed: Default::default(),
+            publish_closed: Default::default(),
+            event_tx,
+            kv,
+            kv_writer,
+        })
+    }
+
+    pub async fn run(mut self, mut inbox: mpsc::Receiver<ApiMessage>) {
+        let updates = self
+            .kv
+            .subscribe_with_opts(Subscribe {
+                mode: SubscribeMode::Both,
+                filter: Filter::ALL,
+            })
+            .stream();
+        tokio::pin!(updates);
+
+        loop {
+            tokio::select! {
+                Some(update) = updates.next() => {
+                    match update {
+                        Err(err) => warn!("gossip kv update failed: {err:#}"),
+                        Ok(update) => self.handle_gossip_update(update).await,
+                    }
+                }
+                msg = inbox.recv() => {
+                    match msg {
+                        None => break,
+                        Some(msg) => self.handle_api_message(msg).await
+                    }
+                }
+                Some((id, res)) = self.connecting.next(), if !self.connecting.is_empty() => {
+                    match res {
+                        Ok((session, broadcast)) => {
+                            let closed_fut = broadcast.closed();
+                            self.event_tx.send(RoomEvent::BroadcastSubscribed { session, broadcast }).await.ok();
+                            self.subscribe_closed.push(Box::pin(async move {
+                                closed_fut.await;
+                                id
+                            }))
+                        }
+                        Err(err) => {
+                            self.active_subscribe.remove(&id);
+                            warn!("Subscribing to broadcast {id} failed: {err:#}");
+                        }
+                    }
+                }
+                Some(id) = self.subscribe_closed.next(), if !self.subscribe_closed.is_empty() => {
+                    debug!("broadcast closed: {id}");
+                    self.active_subscribe.remove(&id);
+                }
+                Some(name) = self.publish_closed.next(), if !self.publish_closed.is_empty() => {
+                    self.active_publish.remove(&name);
+                    self.update_kv().await;
+                }
+            }
+        }
+    }
+
+    async fn handle_api_message(&mut self, msg: ApiMessage) {
+        match msg {
+            ApiMessage::Publish { name, producer } => {
+                let closed = producer.consume().closed();
+                self.live.publish(name.clone(), producer).await.ok();
+                self.active_publish.insert(name.clone());
+                self.publish_closed.push(Box::pin(async move {
+                    closed.await;
+                    name
+                }));
+                self.update_kv().await;
+            }
+        }
+    }
+
+    async fn handle_gossip_update(&mut self, entry: KvEntry) {
+        let (remote, key, value) = entry;
+        if remote == self.me || &key != PEER_STATE_KEY {
+            return;
+        }
+        let Ok(value) = postcard::from_bytes::<PeerState>(&value.value) else {
+            return;
+        };
+        let PeerState { broadcasts } = value;
+        for name in broadcasts.clone() {
+            let id = BroadcastId(remote, name.clone());
+            if !self.active_subscribe.insert(id.clone()) {
+                continue;
+            }
+            let live = self.live.clone();
+            self.connecting.push(Box::pin(async move {
+                let session = live.connect_and_subscribe(remote, &name).await;
+                (id, session)
+            }));
+        }
+        self.event_tx
+            .send(RoomEvent::RemoteAnnounced { remote, broadcasts })
+            .await
+            .ok();
+    }
+
+    async fn update_kv(&self) {
+        let state = PeerState {
+            broadcasts: self.active_publish.iter().cloned().collect(),
+        };
+        if let Err(err) = self
+            .kv_writer
+            .put(PEER_STATE_KEY, postcard::to_stdvec(&state).unwrap())
+            .await
+        {
+            warn!("failed to update gossip kv: {err:#}");
+        }
+    }
+}
+
+mod ticket {
+    use std::str::FromStr;
+
+    use iroh::EndpointId;
+    use iroh_gossip::TopicId;
+    use n0_error::{Result, StdResultExt};
+    use serde::{Deserialize, Serialize};
+
+    #[derive(Debug, Serialize, Deserialize, Clone, derive_more::Display)]
+    #[display("{}", iroh_tickets::Ticket::serialize(self))]
+    pub struct RoomTicket {
+        pub bootstrap: Vec<EndpointId>,
+        pub topic_id: TopicId,
+    }
+
+    impl RoomTicket {
+        pub fn new(topic_id: TopicId, bootstrap: impl IntoIterator<Item = EndpointId>) -> Self {
+            Self {
+                bootstrap: bootstrap.into_iter().collect(),
+                topic_id,
+            }
+        }
+
+        pub fn generate() -> Self {
+            Self {
+                bootstrap: vec![],
+                topic_id: TopicId::from_bytes(rand::random()),
+            }
+        }
+
+        pub fn new_from_env() -> Result<Self> {
+            if let Ok(value) = std::env::var("IROH_LIVE_ROOM") {
+                value
+                    .parse()
+                    .std_context("failed to parse ticket from IROH_LIVE_ROOM environment variable")
+            } else {
+                let topic_id = match std::env::var("IROH_LIVE_TOPIC") {
+                    Ok(topic) => TopicId::from_bytes(
+                        data_encoding::HEXLOWER
+                            .decode(topic.as_bytes())
+                            .std_context("invalid hex")?
+                            .as_slice()
+                            .try_into()
+                            .std_context("invalid length")?,
+                    ),
+                    Err(_) => {
+                        let topic = TopicId::from_bytes(rand::random());
+                        println!(
+                            "Created new topic. Reuse with IROH_TOPIC={}",
+                            data_encoding::HEXLOWER.encode(topic.as_bytes())
+                        );
+                        topic
+                    }
+                };
+                Ok(Self::new(topic_id, vec![]))
+            }
+        }
+    }
+
+    impl FromStr for RoomTicket {
+        type Err = iroh_tickets::ParseError;
+
+        fn from_str(s: &str) -> std::result::Result<Self, Self::Err> {
+            iroh_tickets::Ticket::deserialize(s)
+        }
+    }
+
+    impl iroh_tickets::Ticket for RoomTicket {
+        const KIND: &'static str = "room";
+
+        fn to_bytes(&self) -> Vec<u8> {
+            postcard::to_stdvec(self).unwrap()
+        }
+
+        fn from_bytes(bytes: &[u8]) -> Result<Self, iroh_tickets::ParseError> {
+            let ticket = postcard::from_bytes(bytes)?;
+            Ok(ticket)
+        }
+    }
+}
diff --git a/third_party/iroh-live/iroh-live/src/rooms/publisher.rs b/third_party/iroh-live/iroh-live/src/rooms/publisher.rs
new file mode 100644
index 0000000..55c0c9f
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/rooms/publisher.rs
@@ -0,0 +1,199 @@
+use std::sync::{Arc, Mutex};
+
+use moq_lite::BroadcastProducer;
+use moq_media::{
+    audio::AudioBackend,
+    av::{AudioPreset, VideoPreset},
+    capture::{CameraCapturer, ScreenCapturer},
+    ffmpeg::{H264Encoder, OpusEncoder},
+    publish::{AudioRenditions, PublishBroadcast, VideoRenditions},
+};
+use n0_error::{AnyError, Result};
+use tracing::{info, warn};
+
+use crate::rooms::RoomHandle;
+
+#[derive(Debug, strum::Display, strum::EnumString)]
+#[strum(serialize_all = "lowercase")]
+enum Broadcasts {
+    Camera,
+    Screen,
+}
+
+#[derive(Debug)]
+pub enum StreamKind {
+    Camera,
+    Screen,
+    Microphone,
+}
+
+#[derive(Default, Clone, Debug)]
+pub struct PublishOpts {
+    pub camera: bool,
+    pub screen: bool,
+    pub audio: bool,
+}
+
+/// Manager for publish broadcasts in a room
+///
+/// Synchronous version which spawns all async ops on new tokio tasks. Panics if methods are
+/// not called in the context of a tokio runtime.
+///
+/// Why does this have sync methods? In UI land it is so much easier for the operations to be sync,
+/// so this just spawns all async ops on tokio threads. Not yet sure about where this should evolve to
+/// but this kept me moving for now.
+pub struct RoomPublisherSync {
+    audio_ctx: AudioBackend,
+    room: RoomHandle,
+    camera: Option<Arc<Mutex<PublishBroadcast>>>,
+    screen: Option<Arc<Mutex<PublishBroadcast>>>,
+    state: PublishOpts,
+}
+
+impl RoomPublisherSync {
+    pub fn new(room: RoomHandle, audio_ctx: AudioBackend) -> Self {
+        Self {
+            room,
+            audio_ctx,
+            camera: None,
+            screen: None,
+            state: Default::default(),
+        }
+    }
+
+    pub fn set_state(&mut self, state: &PublishOpts) -> Result<(), Vec<(StreamKind, AnyError)>> {
+        info!(new=?state, old=?self.state, "set publish state");
+        let errors = [
+            self.set_audio(state.audio)
+                .err()
+                .map(|e| (StreamKind::Microphone, e)),
+            self.set_camera(state.camera)
+                .err()
+                .map(|e| (StreamKind::Camera, e)),
+            self.set_screen(state.screen)
+                .err()
+                .map(|e| (StreamKind::Screen, e)),
+        ]
+        .into_iter()
+        .flatten()
+        .collect::<Vec<_>>();
+        if errors.is_empty() {
+            Ok(())
+        } else {
+            Err(errors)
+        }
+    }
+
+    pub fn state(&self) -> &PublishOpts {
+        &self.state
+    }
+
+    pub fn camera(&self) -> bool {
+        self.state.camera
+    }
+
+    pub fn camera_broadcast(&self) -> Option<Arc<Mutex<PublishBroadcast>>> {
+        self.camera.clone()
+    }
+
+    pub fn screen_broadcast(&self) -> Option<Arc<Mutex<PublishBroadcast>>> {
+        self.screen.clone()
+    }
+
+    pub fn set_camera(&mut self, enable: bool) -> Result<()> {
+        if self.state.camera != enable {
+            if enable {
+                let camera = CameraCapturer::new()?;
+                let renditions = VideoRenditions::new::<H264Encoder>(camera, VideoPreset::all());
+                self.ensure_camera();
+                self.camera
+                    .as_ref()
+                    .unwrap()
+                    .lock()
+                    .unwrap()
+                    .set_video(Some(renditions))?;
+            } else if let Some(camera) = self.camera.as_ref() {
+                camera.lock().unwrap().set_video(None)?;
+            }
+            self.state.camera = enable;
+        }
+        Ok(())
+    }
+
+    pub fn screen(&self) -> bool {
+        self.state.screen
+    }
+
+    fn ensure_camera(&mut self) {
+        if self.camera.is_none() {
+            let broadcast = PublishBroadcast::new();
+            self.publish(Broadcasts::Camera, broadcast.producer());
+            self.camera = Some(Arc::new(Mutex::new(broadcast)));
+        };
+    }
+
+    fn publish(&self, name: Broadcasts, producer: BroadcastProducer) {
+        let room = self.room.clone();
+        tokio::spawn(async move {
+            if let Err(err) = room.publish(name, producer).await {
+                warn!("publish to room failed: {err:#}");
+            }
+        });
+    }
+
+    pub fn set_screen(&mut self, enable: bool) -> Result<()> {
+        if self.state.screen != enable {
+            if enable {
+                if self.screen.is_none() {
+                    let broadcast = PublishBroadcast::new();
+                    self.publish(Broadcasts::Screen, broadcast.producer());
+                    self.screen = Some(Arc::new(Mutex::new(broadcast)));
+                };
+
+                let screen = ScreenCapturer::new()?;
+                let renditions = VideoRenditions::new::<H264Encoder>(screen, VideoPreset::all());
+                self.screen
+                    .as_mut()
+                    .unwrap()
+                    .lock()
+                    .unwrap()
+                    .set_video(Some(renditions))?;
+            } else {
+                let _ = self.screen.take();
+            }
+            self.state.screen = enable;
+        }
+        Ok(())
+    }
+
+    pub fn audio(&self) -> bool {
+        self.state.audio
+    }
+
+    pub fn set_audio(&mut self, enable: bool) -> Result<()> {
+        if self.state.audio != enable {
+            if enable {
+                self.ensure_camera();
+                let camera = self.camera.as_ref().unwrap().clone();
+                let audio_ctx = self.audio_ctx.clone();
+                tokio::spawn(async move {
+                    let mic = match audio_ctx.default_input().await {
+                        Err(err) => {
+                            warn!("failed to open audio input: {err:#}");
+                            return;
+                        }
+                        Ok(mic) => mic,
+                    };
+                    let renditions = AudioRenditions::new::<OpusEncoder>(mic, [AudioPreset::Hq]);
+                    if let Err(err) = camera.lock().unwrap().set_audio(Some(renditions)) {
+                        warn!("failed to set audio: {err:#}");
+                    }
+                });
+            } else if let Some(camera) = self.camera.as_mut() {
+                camera.lock().unwrap().set_audio(None)?;
+            }
+            self.state.audio = enable;
+        }
+        Ok(())
+    }
+}
diff --git a/third_party/iroh-live/iroh-live/src/ticket.rs b/third_party/iroh-live/iroh-live/src/ticket.rs
new file mode 100644
index 0000000..177fceb
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/ticket.rs
@@ -0,0 +1,61 @@
+use iroh::EndpointAddr;
+use n0_error::{Result, StdResultExt};
+use serde::{Deserialize, Serialize};
+
+#[derive(Debug, Clone, PartialEq, Eq, derive_more::Display, Serialize, Deserialize)]
+#[display("{}", self.serialize())]
+pub struct LiveTicket {
+    pub endpoint: EndpointAddr,
+    pub broadcast_name: String,
+}
+
+impl LiveTicket {
+    pub fn new(endpoint: impl Into<EndpointAddr>, broadcast_name: impl ToString) -> Self {
+        Self {
+            endpoint: endpoint.into(),
+            broadcast_name: broadcast_name.to_string(),
+        }
+    }
+
+    pub fn to_bytes(&self) -> Vec<u8> {
+        postcard::to_stdvec(self).unwrap()
+    }
+
+    pub fn from_bytes(bytes: &[u8]) -> Result<Self> {
+        let ticket = postcard::from_bytes(bytes).std_context("failed to deserialize")?;
+        Ok(ticket)
+    }
+
+    /// Serialize to string.
+    pub fn serialize(&self) -> String {
+        let mut out = self.broadcast_name.clone();
+        out.push_str("@");
+        data_encoding::BASE32_NOPAD
+            .encode_append(&postcard::to_stdvec(&self.endpoint).unwrap(), &mut out);
+        out.to_ascii_lowercase()
+    }
+
+    /// Deserialize from a string.
+    pub fn deserialize(str: &str) -> Result<Self> {
+        let (broadcast_name, encoded_addr) = str
+            .split_once("@")
+            .std_context("invalid ticket: missing @")?;
+        let endpoint_addr: EndpointAddr = postcard::from_bytes(
+            &(data_encoding::BASE32_NOPAD_NOCASE
+                .decode(encoded_addr.as_bytes())
+                .std_context("invalid base32")?),
+        )
+        .std_context("failed to parse")?;
+        Ok(Self {
+            broadcast_name: broadcast_name.to_string(),
+            endpoint: endpoint_addr,
+        })
+    }
+}
+
+impl std::str::FromStr for LiveTicket {
+    type Err = n0_error::AnyError;
+    fn from_str(s: &str) -> std::result::Result<Self, Self::Err> {
+        LiveTicket::deserialize(s)
+    }
+}
diff --git a/third_party/iroh-live/iroh-live/src/util.rs b/third_party/iroh-live/iroh-live/src/util.rs
new file mode 100644
index 0000000..c78cc49
--- /dev/null
+++ b/third_party/iroh-live/iroh-live/src/util.rs
@@ -0,0 +1,84 @@
+use std::time::{Duration, Instant};
+
+use byte_unit::{Bit, UnitType};
+use iroh::endpoint::ConnectionStats;
+
+/// Spawn a named OS thread and panic if spawning fails.
+pub fn spawn_thread<F, T>(name: impl ToString, f: F) -> std::thread::JoinHandle<T>
+where
+    F: FnOnce() -> T + Send + 'static,
+    T: Send + 'static,
+{
+    let name_str = name.to_string();
+    std::thread::Builder::new()
+        .name(name_str.clone())
+        .spawn(f)
+        .expect(&format!("failed to spawn thread: {}", name_str))
+}
+
+pub struct StatsSmoother {
+    rate_up: Rate,
+    rate_down: Rate,
+    last_update: Instant,
+    rtt: Duration,
+}
+
+impl StatsSmoother {
+    pub fn new() -> Self {
+        Self {
+            rate_up: Default::default(),
+            rate_down: Default::default(),
+            last_update: Instant::now(),
+            rtt: Duration::from_secs(0),
+        }
+    }
+    pub fn smoothed(&mut self, total: impl FnOnce() -> ConnectionStats) -> SmoothedStats<'_> {
+        let now = Instant::now();
+        let elapsed = now.duration_since(self.last_update);
+        if elapsed >= Duration::from_secs(1) {
+            let stats = (total)();
+            self.rate_down.update(elapsed, stats.udp_rx.bytes);
+            self.rate_up.update(elapsed, stats.udp_tx.bytes);
+            self.last_update = now;
+            self.rtt = stats.path.rtt;
+        }
+        SmoothedStats {
+            down: &self.rate_down,
+            up: &self.rate_up,
+            rtt: self.rtt,
+        }
+    }
+}
+
+#[derive(Debug, Clone, Default)]
+pub struct Rate {
+    /// Total bytes
+    pub total: u64,
+    /// Rate in bytes per second
+    pub rate: f32,
+    /// Rate rendered as a string
+    pub rate_str: String,
+}
+
+impl Rate {
+    fn update(&mut self, delta_time: Duration, new_total: u64) {
+        let delta = new_total.saturating_sub(self.total);
+        let delta_secs = delta_time.as_secs_f32();
+        let rate = if delta_secs > 0.0 && delta > 0 {
+            (delta as f32 * 8.0) / delta_secs
+        } else {
+            0.0
+        };
+        let bit = Bit::from_f32(rate).unwrap();
+        let adjusted = bit.get_appropriate_unit(UnitType::Decimal);
+        self.rate = rate;
+        self.rate_str = format!("{adjusted:.2}/s");
+        self.total = new_total;
+    }
+}
+
+pub struct SmoothedStats<'a> {
+    pub rtt: Duration,
+    pub down: &'a Rate,
+    pub up: &'a Rate,
+}
diff --git a/third_party/iroh-live/iroh-moq/Cargo.toml b/third_party/iroh-live/iroh-moq/Cargo.toml
new file mode 100644
index 0000000..188106b
--- /dev/null
+++ b/third_party/iroh-live/iroh-moq/Cargo.toml
@@ -0,0 +1,19 @@
+[package]
+name = "iroh-moq"
+version = "0.1.0"
+edition = "2024"
+description = "audio and video live streaming over iroh"
+authors = ["Franz Heinzmann <frando@n0.computer>"]
+repository = "https://github.com/n0-computer/iroh-live"
+license = "MIT OR Apache-2.0"
+
+[dependencies]
+iroh = "0.96"
+moq-lite = "0.10.1"
+n0-error = { version = "0.1.2", features = ["anyhow"] }
+n0-future = "0.3.1"
+tokio = { version = "1.48.0", features = ["sync"] }
+tokio-util = "0.7.17"
+tracing = "0.1.41"
+url = "2.5.7"
+web-transport-iroh = { version = "0.1.0", path = "../web-transport-iroh" }
diff --git a/third_party/iroh-live/iroh-moq/src/lib.rs b/third_party/iroh-live/iroh-moq/src/lib.rs
new file mode 100644
index 0000000..4942730
--- /dev/null
+++ b/third_party/iroh-live/iroh-moq/src/lib.rs
@@ -0,0 +1,446 @@
+use std::{
+    collections::{HashMap, hash_map},
+    sync::Arc,
+};
+
+use iroh::{
+    Endpoint, EndpointAddr, EndpointId,
+    endpoint::{Connection, ConnectionError},
+    protocol::ProtocolHandler,
+};
+use moq_lite::{BroadcastConsumer, BroadcastProducer, OriginConsumer, OriginProducer};
+use n0_error::{AnyError, Result, StdResultExt, anyerr, e, stack_error};
+use n0_future::{
+    FuturesUnordered, StreamExt,
+    boxed::BoxFuture,
+    task::{AbortOnDropHandle, JoinSet},
+};
+use tokio::sync::{mpsc, oneshot};
+use tokio_util::sync::CancellationToken;
+use tracing::{Instrument, debug, error_span, info, instrument};
+use web_transport_iroh::SessionError;
+
+pub const ALPN: &[u8] = moq_lite::lite::ALPN.as_bytes();
+
+#[stack_error(derive, add_meta, from_sources)]
+#[allow(private_interfaces)]
+pub enum Error {
+    #[error(transparent)]
+    Connect(iroh::endpoint::ConnectError),
+    #[error(transparent)]
+    Moq(#[error(source, std_err)] moq_lite::Error),
+    #[error(transparent)]
+    Server(#[error(source, std_err)] web_transport_iroh::ServerError),
+    #[error("internal consistency error")]
+    InternalConsistencyError(#[error(source)] LiveActorDiedError),
+    #[error("failed to perform request")]
+    Request(#[error(source, std_err)] iroh::endpoint::WriteError),
+}
+
+#[stack_error(derive, add_meta, from_sources)]
+#[allow(private_interfaces)]
+pub enum SubscribeError {
+    #[error("track was not announced")]
+    NotAnnounced,
+    #[error("track was closed")]
+    Closed,
+    #[error("session was closed")]
+    SessionClosed(#[error(source, std_err)] SessionError),
+}
+
+#[stack_error(derive)]
+#[error("live actor died")]
+struct LiveActorDiedError;
+
+impl From<mpsc::error::SendError<ActorMessage>> for LiveActorDiedError {
+    fn from(_value: mpsc::error::SendError<ActorMessage>) -> Self {
+        Self
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct Moq {
+    tx: mpsc::Sender<ActorMessage>,
+    shutdown_token: CancellationToken,
+    _actor_handle: Arc<AbortOnDropHandle<()>>,
+}
+
+impl Moq {
+    pub fn new(endpoint: Endpoint) -> Self {
+        let (tx, rx) = mpsc::channel(16);
+        let actor = Actor::new(endpoint);
+        let shutdown_token = actor.shutdown_token.clone();
+        let actor_task = n0_future::task::spawn(async move {
+            actor.run(rx).instrument(error_span!("LiveActor")).await
+        });
+        Self {
+            shutdown_token,
+            tx,
+            _actor_handle: Arc::new(AbortOnDropHandle::new(actor_task)),
+        }
+    }
+
+    pub fn protocol_handler(&self) -> MoqProtocolHandler {
+        MoqProtocolHandler {
+            tx: self.tx.clone(),
+        }
+    }
+
+    pub async fn publish(&self, name: impl ToString, producer: BroadcastProducer) -> Result<()> {
+        self.tx
+            .send(ActorMessage::PublishBroadcast {
+                broadcast_name: name.to_string(),
+                producer,
+            })
+            .await
+            .std_context("live actor died")?;
+        Ok(())
+    }
+
+    pub async fn published_broadcasts(&self) -> Vec<String> {
+        let (reply, reply_rx) = oneshot::channel();
+        if let Err(_) = self.tx.send(ActorMessage::GetPublished { reply }).await {
+            return vec![];
+        }
+        reply_rx.await.unwrap_or_default()
+    }
+
+    pub async fn connect(&self, remote: impl Into<EndpointAddr>) -> Result<MoqSession, AnyError> {
+        // MoqSession::connect(&self.endpoint, addr).await
+        let (reply, reply_rx) = oneshot::channel();
+        self.tx
+            .send(ActorMessage::Connect {
+                remote: remote.into(),
+                reply,
+            })
+            .await
+            .map_err(|_| LiveActorDiedError)?;
+        reply_rx
+            .await
+            .map_err(|_| LiveActorDiedError)?
+            .map_err(|err| anyerr!(err))
+    }
+
+    pub fn shutdown(&self) {
+        self.shutdown_token.cancel();
+    }
+}
+
+#[derive(Debug, Clone)]
+pub struct MoqProtocolHandler {
+    tx: mpsc::Sender<ActorMessage>,
+}
+
+impl MoqProtocolHandler {
+    async fn handle_connection(&self, connection: Connection) -> Result<(), Error> {
+        info!(remote = %connection.remote_id().fmt_short(), "accepted");
+        let session = web_transport_iroh::Session::raw(connection);
+        let session = MoqSession::session_accept(session).await?;
+        self.tx
+            .send(ActorMessage::HandleSession { session })
+            .await
+            .map_err(LiveActorDiedError::from)?;
+        Ok(())
+    }
+}
+
+impl ProtocolHandler for MoqProtocolHandler {
+    async fn accept(&self, connection: Connection) -> Result<(), iroh::protocol::AcceptError> {
+        self.handle_connection(connection)
+            .await
+            .map_err(AnyError::from)?;
+        Ok(())
+    }
+}
+
+// TODO: resubscribing session?
+// struct MoqSession2 {
+//     session: MoqSession,
+//     tx: mpsc::Sender<ActorMessage>,
+//     remote: EndpointAddr,
+// }
+
+// impl MoqSession2 {
+//     pub async fn subscribe(&mut self, name: &str) -> Result<BroadcastConsumer> {
+//         match self.session.subscribe(name).await {
+//             Ok(consumer) => return Ok(consumer),
+//             Err(err) => {
+//                 warn!("first attempt to subscribe failed, retrying. reason: {err:#}");
+//                 let (reply, reply_rx) = oneshot::channel();
+//                 self.tx
+//                     .send(ActorMessage::Connect {
+//                         remote: self.remote.clone(),
+//                         reply,
+//                     })
+//                     .await
+//                     .map_err(|_| LiveActorDiedError)?;
+//                 self.session = reply_rx
+//                     .await
+//                     .map_err(|_| LiveActorDiedError)?
+//                     .map_err(|err| anyerr!(err))?;
+//                 self.session.subscribe(name).await.map_err(Into::into)
+//             }
+//         }
+//     }
+// }
+
+#[derive(Clone)]
+pub struct MoqSession {
+    wt_session: web_transport_iroh::Session,
+    publish: OriginProducer,
+    subscribe: OriginConsumer,
+}
+
+impl MoqSession {
+    #[instrument(skip_all, fields(remote=tracing::field::Empty))]
+    pub async fn connect(
+        endpoint: &Endpoint,
+        remote_addr: impl Into<EndpointAddr>,
+    ) -> Result<Self, Error> {
+        let addr = remote_addr.into();
+        tracing::Span::current().record("remote", tracing::field::display(addr.id.fmt_short()));
+        let connection = endpoint.connect(addr, ALPN).await?;
+        let wt_session = web_transport_iroh::Session::raw(connection);
+        Self::session_connect(wt_session).await
+    }
+
+    pub async fn session_connect(wt_session: web_transport_iroh::Session) -> Result<Self, Error> {
+        let publish = moq_lite::Origin::produce();
+        let subscribe = moq_lite::Origin::produce();
+        // We can drop the moq_lite::Session, it spawns it tasks in the background anyway.
+        // If that changes and it becomes a guard, we should keep it around.
+        let _moq_session =
+            moq_lite::Session::connect(wt_session.clone(), publish.consumer, subscribe.producer)
+                .await?;
+        Ok(Self {
+            publish: publish.producer,
+            subscribe: subscribe.consumer,
+            wt_session,
+        })
+    }
+
+    pub async fn session_accept(wt_session: web_transport_iroh::Session) -> Result<Self, Error> {
+        let publish = moq_lite::Origin::produce();
+        let subscribe = moq_lite::Origin::produce();
+        // We can drop the moq_lite::Session, it spawns it tasks in the background anyway.
+        // If that changes and it becomes a guard, we should keep it around.
+        let _moq_session =
+            moq_lite::Session::accept(wt_session.clone(), publish.consumer, subscribe.producer)
+                .await?;
+        Ok(Self {
+            publish: publish.producer,
+            subscribe: subscribe.consumer,
+            wt_session,
+        })
+    }
+
+    pub fn remote_id(&self) -> EndpointId {
+        self.wt_session.remote_id()
+    }
+
+    pub fn conn(&self) -> &iroh::endpoint::Connection {
+        self.wt_session.conn()
+    }
+
+    pub async fn subscribe(&mut self, name: &str) -> Result<BroadcastConsumer, SubscribeError> {
+        if let Some(reason) = self.conn().close_reason() {
+            return Err(SessionError::from(reason).into());
+        }
+        if let Some(consumer) = self.subscribe.consume_broadcast(name) {
+            return Ok(consumer);
+        }
+        loop {
+            let res = tokio::select! {
+                res = self.subscribe.announced() => res,
+                reason = self.wt_session.closed() => {
+                    return Err(reason.into())
+                }
+            };
+            let (path, consumer) = res.ok_or_else(|| e!(SubscribeError::NotAnnounced))?;
+            debug!("peer announced broadcast: {path}");
+            if path.as_str() == name {
+                return consumer.ok_or_else(|| e!(SubscribeError::Closed));
+            }
+        }
+    }
+
+    pub fn publish(&self, name: String, broadcast: BroadcastConsumer) {
+        self.publish.publish_broadcast(name, broadcast);
+    }
+
+    pub fn close(&self, error_code: u32, reason: &[u8]) {
+        self.wt_session.close(error_code, reason);
+    }
+
+    pub async fn closed(&self) -> web_transport_iroh::SessionError {
+        self.wt_session.closed().await
+    }
+}
+
+enum ActorMessage {
+    HandleSession {
+        session: MoqSession,
+    },
+    PublishBroadcast {
+        broadcast_name: BroadcastName,
+        producer: BroadcastProducer,
+    },
+    Connect {
+        remote: EndpointAddr,
+        reply: oneshot::Sender<Result<MoqSession, Arc<AnyError>>>,
+    },
+    GetPublished {
+        reply: oneshot::Sender<Vec<BroadcastName>>,
+    },
+}
+
+type BroadcastName = String;
+
+#[derive()]
+struct Actor {
+    endpoint: Endpoint,
+    shutdown_token: CancellationToken,
+    publishing: HashMap<BroadcastName, BroadcastProducer>,
+    publishing_closed_futs: FuturesUnordered<BoxFuture<BroadcastName>>,
+    sessions: HashMap<EndpointId, MoqSession>,
+    session_tasks: JoinSet<(EndpointId, Result<(), web_transport_iroh::SessionError>)>,
+    pending_connects: HashMap<EndpointId, Vec<oneshot::Sender<Result<MoqSession, Arc<AnyError>>>>>,
+    pending_connect_tasks: JoinSet<(EndpointId, Result<MoqSession, AnyError>)>,
+}
+
+impl Actor {
+    pub fn new(endpoint: Endpoint) -> Self {
+        Self {
+            endpoint,
+            shutdown_token: CancellationToken::new(),
+            publishing: Default::default(),
+            publishing_closed_futs: Default::default(),
+            sessions: Default::default(),
+            session_tasks: Default::default(),
+            pending_connects: Default::default(),
+            pending_connect_tasks: Default::default(),
+        }
+    }
+
+    pub async fn run(mut self, mut inbox: mpsc::Receiver<ActorMessage>) {
+        loop {
+            tokio::select! {
+                msg = inbox.recv() => {
+                    match msg {
+                        None => break,
+                        Some(msg) => self.handle_message(msg)
+                    }
+                }
+                Some(res) = self.session_tasks.join_next(), if !self.session_tasks.is_empty() => {
+                    let (endpoint_id, res) = res.expect("session task panicked");
+                    info!(remote=%endpoint_id.fmt_short(), "session closed: {res:?}");
+                    self.sessions.remove(&endpoint_id);
+                }
+                Some(name) = self.publishing_closed_futs.next(), if !self.publishing_closed_futs.is_empty() => {
+                    self.publishing.remove(&name);
+                }
+                Some(res) = self.pending_connect_tasks.join_next(), if !self.pending_connect_tasks.is_empty() => {
+                    let (endpoint_id, res) = res.expect("connect task panicked");
+                    match res {
+                        Ok(session) => {
+                            info!(remote=%endpoint_id.fmt_short(), "connected");
+                            self.handle_incoming_session(session);
+                        }
+                        Err(err) => {
+                            info!(remote=%endpoint_id.fmt_short(), "connect failed: {err:#}");
+                            let replies = self.pending_connects.remove(&endpoint_id).into_iter().flatten();
+                            let err = Arc::new(err);
+                            for reply in replies {
+                                reply.send(Err(err.clone())).ok();
+                            }
+
+                        }
+                    }
+                }
+            }
+        }
+    }
+
+    fn handle_message(&mut self, msg: ActorMessage) {
+        match msg {
+            ActorMessage::HandleSession { session: msg } => self.handle_incoming_session(msg),
+            ActorMessage::PublishBroadcast {
+                broadcast_name: name,
+                producer,
+            } => self.handle_publish_broadcast(name, producer),
+            ActorMessage::Connect { remote, reply } => self.handle_connect(remote, reply),
+            ActorMessage::GetPublished { reply } => {
+                let names = self.publishing.keys().cloned().collect();
+                reply.send(names).ok();
+            }
+        }
+    }
+
+    fn handle_incoming_session(&mut self, session: MoqSession) {
+        tracing::info!("handle new incoming session");
+        let remote = session.remote_id();
+        for (name, producer) in self.publishing.iter() {
+            session.publish(name.to_string(), producer.consume());
+        }
+        self.sessions.insert(remote, session.clone());
+        for reply in self.pending_connects.remove(&remote).into_iter().flatten() {
+            reply.send(Ok(session.clone())).ok();
+        }
+
+        let shutdown = self.shutdown_token.child_token();
+        self.session_tasks.spawn(async move {
+            let res = tokio::select! {
+                _ = shutdown.cancelled() => {
+                    session.close(0u32.into(), b"cancelled");
+                    Ok(())
+                }
+                result = session.closed() => match result {
+                    SessionError::ConnectionError(ConnectionError::LocallyClosed) => Ok(()),
+                    err @ _ => Err(err)
+                },
+            };
+            (remote, res)
+        });
+    }
+
+    fn handle_publish_broadcast(&mut self, name: BroadcastName, producer: BroadcastProducer) {
+        for session in self.sessions.values_mut() {
+            session
+                .publish
+                .publish_broadcast(name.clone(), producer.consume());
+        }
+        let closed = producer.consume().closed();
+        self.publishing.insert(name.clone(), producer);
+        self.publishing_closed_futs.push(Box::pin(async move {
+            closed.await;
+            name
+        }));
+    }
+
+    fn handle_connect(
+        &mut self,
+        remote: EndpointAddr,
+        reply: oneshot::Sender<Result<MoqSession, Arc<AnyError>>>,
+    ) {
+        let remote_id = remote.id;
+        if let Some(session) = self.sessions.get(&remote_id) {
+            reply.send(Ok(session.clone())).ok();
+            return;
+        }
+        match self.pending_connects.entry(remote_id) {
+            hash_map::Entry::Occupied(mut entry) => {
+                entry.get_mut().push(reply);
+            }
+            hash_map::Entry::Vacant(entry) => {
+                let endpoint = self.endpoint.clone();
+                self.pending_connect_tasks.spawn(async move {
+                    let res = MoqSession::connect(&endpoint, remote)
+                        .await
+                        .map_err(Into::into);
+                    (remote_id, res)
+                });
+                entry.insert(Default::default()).push(reply);
+            }
+        }
+    }
+}
diff --git a/third_party/iroh-live/moq-media/Cargo.toml b/third_party/iroh-live/moq-media/Cargo.toml
new file mode 100644
index 0000000..f54262e
--- /dev/null
+++ b/third_party/iroh-live/moq-media/Cargo.toml
@@ -0,0 +1,88 @@
+[package]
+name = "moq-media"
+version = "0.1.0"
+edition = "2024"
+description = "native audio and video capturing, playback, encoding, decoding"
+authors = ["Franz Heinzmann <frando@n0.computer>"]
+repository = "https://github.com/n0-computer/iroh-live"
+license = "MIT OR Apache-2.0"
+
+[dependencies]
+anyhow = "1.0.100"
+bytemuck = "1.24.0"
+byte-unit = { version = "5.1", features = ["bit"] }
+data-encoding = "2.9.0"
+derive_more = { version = "2.0.1", features = ["display", "debug", "eq"] }
+ffmpeg-next = { version = "8.0.0", default-features = false, features = ["device", "format", "filter", "software-resampling", "software-scaling"] }
+ffmpeg-sys-next = { version = "8.0.1", optional = true }
+firewheel = { version = "0.9.1", features = ["cpal", "peak_meter_node", "std", "stream_nodes", "cpal_resample_inputs"] }
+hang = "0.9.0"
+image = { version = "0.25.8", default-features = false }
+moq-lite = "0.10.1"
+n0-error = { version = "0.1.2", features = ["anyhow"] }
+n0-future = "0.3.1"
+n0-watcher = "0.6.0"
+nokhwa = { version = "0.10", features = [
+    "input-native",
+    "input-v4l",
+    "output-threaded",
+] }
+postcard = "1.1.3"
+rand = "0.9.2"
+serde = { version = "1.0.228", features = ["derive"] }
+strum = { version = "0.27", features = ["derive"] }
+tokio = { version = "1.48.0", features = ["sync"] }
+tokio-util = "0.7.17"
+tracing = "0.1.41"
+xcap = "0.8"
+webrtc-audio-processing = { version = "0.5.0", features = ["bundled"] }
+bytes = "1.11.0"
+buf-list = "1.1.2"
+
+
+[dev-dependencies]
+clap = { version = "4.5", features = ["derive"] }
+eframe = "0.33.0"
+postcard = "1.1.3"
+tokio = { version = "1.48.0", features = ["full"] }
+tracing-subscriber = "0.3.20"
+
+[features]
+default = []
+
+# Enable static build of ffmpeg
+static = [
+  "ffmpeg-next/static",
+  "ffmpeg-next/build-lib-openssl",
+  "ffmpeg-next/build-license-version3",
+  "ffmpeg-next/build-lib-opus",
+  "ffmpeg-next/build-lib-x264",
+  "ffmpeg-next/build-license-gpl",
+  "dep:ffmpeg-sys-next",
+]
+
+[target.'cfg(target_os = "macos")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-videotoolbox",
+  "build-audiotoolbox",
+] }
+
+[target.'cfg(target_os = "linux")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-vaapi",
+  # "build-vulkan",
+  # "build-lib-libmfx",
+] }
+
+[target.'cfg(target_os = "windows")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  "build-lib-d3d11va",
+  "build-lib-dxva2",
+  # "build-nvidia",
+  # "build-amf",
+] }
+
+[target.'cfg(target_os = "android")'.dependencies]
+ffmpeg-sys-next = { version = "8.0.1", optional = true, features = [
+  # "build-mediacodec",
+] }
diff --git a/third_party/iroh-live/moq-media/src/audio.rs b/third_party/iroh-live/moq-media/src/audio.rs
new file mode 100644
index 0000000..101def9
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/audio.rs
@@ -0,0 +1,527 @@
+use std::{
+    collections::HashMap,
+    sync::{
+        Arc, Mutex,
+        atomic::{AtomicBool, Ordering},
+    },
+    time::{Duration, Instant},
+};
+
+use anyhow::{Context, Result};
+use firewheel::{
+    CpalConfig, CpalInputConfig, CpalOutputConfig, FirewheelConfig, FirewheelContext,
+    channel_config::{ChannelConfig, ChannelCount, NonZeroChannelCount},
+    dsp::volume::{DEFAULT_DB_EPSILON, DbMeterNormalizer},
+    graph::PortIdx,
+    node::NodeID,
+    nodes::{
+        peak_meter::{PeakMeterNode, PeakMeterSmoother, PeakMeterState},
+        stream::{
+            ResamplingChannelConfig,
+            reader::{StreamReaderConfig, StreamReaderNode, StreamReaderState},
+            writer::{StreamWriterConfig, StreamWriterNode, StreamWriterState},
+        },
+    },
+};
+use tokio::sync::{mpsc, mpsc::error::TryRecvError, oneshot};
+use tracing::{debug, error, info, trace, warn};
+
+use self::aec::{AecCaptureNode, AecProcessor, AecProcessorConfig, AecRenderNode};
+use crate::{
+    av::{AudioFormat, AudioSink, AudioSinkHandle, AudioSource},
+    util::spawn_thread,
+};
+
+mod aec;
+
+type StreamWriterHandle = Arc<Mutex<StreamWriterState>>;
+type StreamReaderHandle = Arc<Mutex<StreamReaderState>>;
+
+#[derive(Debug, Clone)]
+pub struct AudioBackend {
+    tx: mpsc::Sender<DriverMessage>,
+}
+
+impl AudioBackend {
+    pub fn new() -> Self {
+        let (tx, rx) = mpsc::channel(32);
+        let _handle = spawn_thread("audiodriver", move || AudioDriver::new(rx).run());
+        Self { tx }
+    }
+
+    pub async fn default_input(&self) -> Result<InputStream> {
+        self.input(AudioFormat::mono_48k()).await
+    }
+
+    pub async fn input(&self, format: AudioFormat) -> Result<InputStream> {
+        let (reply, reply_rx) = oneshot::channel();
+        self.tx
+            .send(DriverMessage::InputStream { format, reply })
+            .await?;
+        let handle = reply_rx.await??;
+        Ok(InputStream { handle, format })
+    }
+
+    pub async fn default_output(&self) -> Result<OutputStream> {
+        self.output(AudioFormat::stereo_48k()).await
+    }
+
+    pub async fn output(&self, format: AudioFormat) -> Result<OutputStream> {
+        let (reply, reply_rx) = oneshot::channel();
+        self.tx
+            .send(DriverMessage::OutputStream { format, reply })
+            .await?;
+        let handle = reply_rx.await??;
+        Ok(handle)
+    }
+}
+
+#[derive(Clone)]
+pub struct OutputStream {
+    handle: StreamWriterHandle,
+    paused: Arc<AtomicBool>,
+    peaks: Arc<Mutex<PeakMeterSmoother<2>>>,
+    normalizer: DbMeterNormalizer,
+}
+
+impl AudioSinkHandle for OutputStream {
+    fn is_paused(&self) -> bool {
+        self.paused.load(Ordering::Relaxed)
+    }
+    fn pause(&self) {
+        self.paused.store(true, Ordering::Relaxed);
+        self.handle.lock().expect("poisoned").pause_stream();
+    }
+
+    fn resume(&self) {
+        self.paused.store(false, Ordering::Relaxed);
+        self.handle.lock().expect("poisoned").resume();
+    }
+
+    fn toggle_pause(&self) {
+        let was_paused = self.paused.fetch_xor(true, Ordering::Relaxed);
+        if was_paused {
+            self.handle.lock().expect("poisoned").resume();
+        } else {
+            self.handle.lock().expect("poisoned").pause_stream();
+        }
+    }
+
+    fn smoothed_peak_normalized(&self) -> Option<f32> {
+        Some(
+            self.peaks
+                .lock()
+                .expect("poisoned")
+                .smoothed_peaks_normalized_mono(&self.normalizer),
+        )
+    }
+}
+
+impl AudioSink for OutputStream {
+    fn handle(&self) -> Box<dyn AudioSinkHandle> {
+        Box::new(self.clone())
+    }
+
+    fn format(&self) -> Result<AudioFormat> {
+        let info = self.handle.lock().expect("poisoned");
+        let sample_rate = info
+            .sample_rate()
+            .context("output stream misses sample rate")?
+            .get();
+        let channel_count = info.num_channels().get().get();
+        Ok(AudioFormat {
+            sample_rate,
+            channel_count,
+        })
+    }
+
+    fn push_samples(&mut self, samples: &[f32]) -> Result<()> {
+        let mut handle = self.handle.lock().unwrap();
+
+        // If this happens excessively in Release mode, you may want to consider
+        // increasing [`StreamWriterConfig::channel_config.latency_seconds`].
+        if handle.underflow_occurred() {
+            warn!("Underflow occured in stream writer node!");
+        }
+
+        // If this happens excessively in Release mode, you may want to consider
+        // increasing [`StreamWriterConfig::channel_config.capacity_seconds`]. For
+        // example, if you are streaming data from a network, you may want to
+        // increase the capacity to several seconds.
+        if handle.overflow_occurred() {
+            warn!("Overflow occured in stream writer node!");
+        }
+
+        // Wait until the node's processor is ready to receive data.
+        if handle.is_ready() {
+            // let expected_bytes =
+            //     frame.samples() * frame.channels() as usize * core::mem::size_of::<f32>();
+            // let cpal_sample_data: &[f32] = bytemuck::cast_slice(&frame.data(0)[..expected_bytes]);
+            handle.push_interleaved(samples);
+            trace!("pushed samples {}", samples.len());
+        } else {
+            warn!("output handle is inactive")
+        }
+        Ok(())
+    }
+}
+
+impl OutputStream {
+    #[allow(unused)]
+    pub fn is_active(&self) -> bool {
+        self.handle.lock().expect("poisoned").is_active()
+    }
+}
+
+/// A simple AudioSource that reads from the default microphone via Firewheel.
+#[derive(Clone)]
+pub struct InputStream {
+    handle: StreamReaderHandle,
+    format: AudioFormat,
+}
+
+impl AudioSource for InputStream {
+    fn cloned_boxed(&self) -> Box<dyn AudioSource> {
+        Box::new(self.clone())
+    }
+
+    fn format(&self) -> AudioFormat {
+        self.format
+    }
+
+    fn pop_samples(&mut self, buf: &mut [f32]) -> Result<Option<usize>> {
+        use firewheel::nodes::stream::ReadStatus;
+        let mut handle = self.handle.lock().expect("poisoned");
+        match handle.read_interleaved(buf) {
+            Some(ReadStatus::Ok) => Ok(Some(buf.len())),
+            Some(ReadStatus::InputNotReady) => {
+                tracing::warn!("audio input not ready");
+                // Maintain pacing; still return a frame-sized buffer
+                Ok(Some(buf.len()))
+            }
+            Some(ReadStatus::UnderflowOccurred { num_frames_read }) => {
+                tracing::warn!(
+                    "audio input underflow: {} frames missing",
+                    buf.len() - num_frames_read
+                );
+                Ok(Some(buf.len()))
+            }
+            Some(ReadStatus::OverflowCorrected {
+                num_frames_discarded,
+            }) => {
+                tracing::warn!("audio input overflow: {num_frames_discarded} frames discarded");
+                Ok(Some(buf.len()))
+            }
+            None => {
+                tracing::warn!("audio input stream is inactive");
+                Ok(None)
+            }
+        }
+    }
+}
+
+#[derive(derive_more::Debug)]
+enum DriverMessage {
+    OutputStream {
+        format: AudioFormat,
+        #[debug("Sender")]
+        reply: oneshot::Sender<Result<OutputStream>>,
+    },
+    InputStream {
+        format: AudioFormat,
+        #[debug("Sender")]
+        reply: oneshot::Sender<Result<StreamReaderHandle>>,
+    },
+}
+
+struct AudioDriver {
+    cx: FirewheelContext,
+    rx: mpsc::Receiver<DriverMessage>,
+    aec_processor: AecProcessor,
+    aec_render_node: NodeID,
+    aec_capture_node: NodeID,
+    peak_meters: HashMap<NodeID, Arc<Mutex<PeakMeterSmoother<2>>>>,
+}
+
+impl AudioDriver {
+    fn new(rx: mpsc::Receiver<DriverMessage>) -> Self {
+        let config = FirewheelConfig {
+            num_graph_inputs: ChannelCount::new(1).unwrap(),
+            ..Default::default()
+        };
+        let mut cx = FirewheelContext::new(config);
+        info!("inputs: {:?}", cx.available_input_devices());
+        info!("outputs: {:?}", cx.available_output_devices());
+        let config = CpalConfig {
+            output: CpalOutputConfig {
+                #[cfg(target_os = "linux")]
+                device_name: Some("pipewire".to_string()),
+
+                ..Default::default()
+            },
+            input: Some(CpalInputConfig {
+                #[cfg(target_os = "linux")]
+                device_name: Some("pipewire".to_string()),
+                fail_on_no_input: true,
+                ..Default::default()
+            }),
+        };
+        cx.start_stream(config).unwrap();
+        info!(
+            "audio graph in: {:?}",
+            cx.node_info(cx.graph_in_node_id()).map(|x| &x.info)
+        );
+        info!(
+            "audio graph out: {:?}",
+            cx.node_info(cx.graph_out_node_id()).map(|x| &x.info)
+        );
+
+        cx.set_graph_channel_config(ChannelConfig {
+            num_inputs: ChannelCount::new(2).unwrap(),
+            num_outputs: ChannelCount::new(2).unwrap(),
+        });
+
+        let aec_processor = AecProcessor::new(AecProcessorConfig::stereo_in_out(), true)
+            .expect("failed to initialize AEC processor");
+        let aec_render_node = cx.add_node(AecRenderNode::default(), Some(aec_processor.clone()));
+        let aec_capture_node = cx.add_node(AecCaptureNode::default(), Some(aec_processor.clone()));
+
+        let layout = &[(0, 0), (1, 1)];
+
+        cx.connect(cx.graph_in_node_id(), aec_capture_node, layout, true)
+            .unwrap();
+        cx.connect(aec_render_node, cx.graph_out_node_id(), layout, true)
+            .unwrap();
+
+        Self {
+            cx,
+            rx,
+            aec_processor,
+            aec_render_node,
+            aec_capture_node,
+            peak_meters: Default::default(),
+        }
+    }
+
+    fn run(&mut self) {
+        const INTERVAL: Duration = Duration::from_millis(10);
+        const PEAK_UPDATE_INTERVAL: Duration = Duration::from_millis(40);
+        let mut last_delay: f64 = 0.;
+        let mut last_peak_update = Instant::now();
+
+        loop {
+            let tick = Instant::now();
+            if self.drain_messages().is_err() {
+                info!("closing audio driver: message channel closed");
+                break;
+            }
+
+            if let Err(e) = self.cx.update() {
+                error!("audio backend error: {:?}", &e);
+
+                // if let UpdateError::StreamStoppedUnexpectedly(_) = e {
+                //     // Notify the stream node handles that the output stream has stopped.
+                //     // This will automatically stop any active streams on the nodes.
+                //     cx.node_state_mut::<StreamWriterState>(stream_writer_id)
+                //         .unwrap()
+                //         .stop_stream();
+                //     cx.node_state_mut::<StreamReaderState>(stream_reader_id)
+                //         .unwrap()
+                //         .stop_stream();
+
+                //     // The stream has stopped unexpectedly (i.e the user has
+                //     // unplugged their headphones.)
+                //     //
+                //     // Typically you should start a new stream as soon as
+                //     // possible to resume processing (event if it's a dummy
+                //     // output device).
+                //     //
+                //     // In this example we just quit the application.
+                //     break;
+                // }
+            }
+
+            if let Some(info) = self.cx.stream_info() {
+                let delay = info.input_to_output_latency_seconds;
+                if (last_delay - delay).abs() > (1. / 1000.) {
+                    let delay_ms = (delay * 1000.) as u32;
+                    info!("update processor delay to {delay_ms}ms");
+                    self.aec_processor.set_stream_delay(delay_ms);
+                    last_delay = delay;
+                }
+            }
+
+            // Update peak meters
+            let delta = last_peak_update.elapsed();
+            if delta > PEAK_UPDATE_INTERVAL {
+                for (id, smoother) in self.peak_meters.iter_mut() {
+                    smoother.lock().expect("poisoned").update(
+                        self.cx
+                            .node_state::<PeakMeterState<2>>(*id)
+                            .unwrap()
+                            .peak_gain_db(DEFAULT_DB_EPSILON),
+                        delta.as_secs_f32(),
+                    );
+                }
+                last_peak_update = Instant::now();
+            }
+
+            std::thread::sleep(INTERVAL.saturating_sub(tick.elapsed()));
+        }
+    }
+
+    fn drain_messages(&mut self) -> Result<(), ()> {
+        loop {
+            match self.rx.try_recv() {
+                Err(TryRecvError::Disconnected) => {
+                    info!("stopping audio thread: backend handle dropped");
+                    break Err(());
+                }
+                Err(TryRecvError::Empty) => {
+                    break Ok(());
+                }
+                Ok(message) => self.handle_message(message),
+            }
+        }
+    }
+
+    fn handle_message(&mut self, message: DriverMessage) {
+        debug!("handle {message:?}");
+        match message {
+            DriverMessage::OutputStream { format, reply } => {
+                let res = self
+                    .output_stream(format)
+                    .inspect_err(|err| warn!("failed to create audio output stream: {err:#}"));
+                reply.send(res).ok();
+            }
+            DriverMessage::InputStream { format, reply } => {
+                let res = self
+                    .input_stream(format)
+                    .inspect_err(|err| warn!("failed to create audio input stream: {err:#}"));
+                reply.send(res).ok();
+            }
+        }
+    }
+
+    fn output_stream(&mut self, format: AudioFormat) -> Result<OutputStream> {
+        let channel_count = format.channel_count;
+        let sample_rate = format.sample_rate;
+        // setup stream
+        let stream_writer_id = self.cx.add_node(
+            StreamWriterNode,
+            Some(StreamWriterConfig {
+                channels: NonZeroChannelCount::new(channel_count)
+                    .context("channel count may not be zero")?,
+                ..Default::default()
+            }),
+        );
+        let graph_out = self.aec_render_node;
+        // let graph_out_info = self
+        //     .cx
+        //     .node_info(graph_out)
+        //     .context("missing audio output node")?;
+
+        let peak_meter_node = PeakMeterNode::<2> { enabled: true };
+        let peak_meter_id = self.cx.add_node(peak_meter_node.clone(), None);
+        let peak_meter_smoother =
+            Arc::new(Mutex::new(PeakMeterSmoother::<2>::new(Default::default())));
+        self.peak_meters
+            .insert(peak_meter_id, peak_meter_smoother.clone());
+        self.cx
+            .connect(peak_meter_id, graph_out, &[(0, 0), (1, 1)], true)
+            .unwrap();
+
+        let layout: &[(PortIdx, PortIdx)] = match channel_count {
+            0 => anyhow::bail!("audio stream has no channels"),
+            1 => &[(0, 0), (0, 1)],
+            _ => &[(0, 0), (1, 1)],
+        };
+        self.cx
+            .connect(stream_writer_id, peak_meter_id, layout, false)
+            .unwrap();
+        let output_stream_sample_rate = self.cx.stream_info().unwrap().sample_rate;
+        let event = self
+            .cx
+            .node_state_mut::<StreamWriterState>(stream_writer_id)
+            .unwrap()
+            .start_stream(
+                sample_rate.try_into().unwrap(),
+                output_stream_sample_rate,
+                ResamplingChannelConfig {
+                    capacity_seconds: 3.,
+                    ..Default::default()
+                },
+            )
+            .unwrap();
+        info!("started output stream");
+        self.cx.queue_event_for(stream_writer_id, event.into());
+        // Wrap the handles in an `Arc<Mutex<T>>>` so that we can send them to other threads.
+        let handle = self
+            .cx
+            .node_state::<StreamWriterState>(stream_writer_id)
+            .unwrap()
+            .handle();
+        Ok(OutputStream {
+            handle: Arc::new(handle),
+            paused: Arc::new(AtomicBool::new(false)),
+            peaks: peak_meter_smoother,
+            normalizer: DbMeterNormalizer::new(-60., 0., -20.),
+        })
+    }
+
+    fn input_stream(&mut self, format: AudioFormat) -> Result<StreamReaderHandle> {
+        let sample_rate = format.sample_rate;
+        let channel_count = format.channel_count;
+        // Setup stream reader node
+        let stream_reader_id = self.cx.add_node(
+            StreamReaderNode,
+            Some(StreamReaderConfig {
+                channels: NonZeroChannelCount::new(channel_count)
+                    .context("channel count may not be zero")?,
+                ..Default::default()
+            }),
+        );
+        let graph_in_node_id = self.aec_capture_node;
+        let graph_in_info = self
+            .cx
+            .node_info(graph_in_node_id)
+            .context("missing audio input node")?;
+
+        let layout: &[(PortIdx, PortIdx)] = match (
+            graph_in_info.info.channel_config.num_outputs.get(),
+            channel_count,
+        ) {
+            (0, _) => anyhow::bail!("audio input has no channels"),
+            (1, 2) => &[(0, 0), (0, 1)],
+            (2, 2) => &[(0, 0), (1, 1)],
+            (_, 1) => &[(0, 0)],
+            _ => &[(0, 0), (1, 1)],
+        };
+        self.cx
+            .connect(graph_in_node_id, stream_reader_id, layout, false)
+            .unwrap();
+
+        let input_stream_sample_rate = self.cx.stream_info().unwrap().sample_rate;
+        let event = self
+            .cx
+            .node_state_mut::<StreamReaderState>(stream_reader_id)
+            .unwrap()
+            .start_stream(
+                sample_rate.try_into().unwrap(),
+                input_stream_sample_rate,
+                ResamplingChannelConfig {
+                    capacity_seconds: 3.0,
+                    ..Default::default()
+                },
+            )
+            .unwrap();
+        self.cx.queue_event_for(stream_reader_id, event.into());
+
+        let handle = self
+            .cx
+            .node_state::<StreamReaderState>(stream_reader_id)
+            .unwrap()
+            .handle();
+        Ok(Arc::new(handle))
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/audio/aec.rs b/third_party/iroh-live/moq-media/src/audio/aec.rs
new file mode 100644
index 0000000..392c3b1
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/audio/aec.rs
@@ -0,0 +1,452 @@
+pub use self::{
+    firewheel_nodes::{AecCaptureNode, AecRenderNode},
+    processor::{AecProcessor, AecProcessorConfig},
+};
+
+mod processor {
+    use std::{
+        num::NonZeroU32,
+        sync::{
+            Arc, Mutex,
+            atomic::{AtomicBool, Ordering},
+        },
+    };
+
+    use anyhow::Result;
+    use tracing::{debug, info};
+    use webrtc_audio_processing::{
+        Config, EchoCancellation, EchoCancellationSuppressionLevel, InitializationConfig,
+    };
+
+    #[derive(Debug, Clone)]
+    pub struct AecProcessorConfig {
+        pub num_input_channels: NonZeroU32,
+        pub num_output_channels: NonZeroU32,
+    }
+
+    impl Default for AecProcessorConfig {
+        fn default() -> Self {
+            Self {
+                num_input_channels: 2.try_into().unwrap(),
+                num_output_channels: 2.try_into().unwrap(),
+            }
+        }
+    }
+
+    impl AecProcessorConfig {
+        pub fn stereo_in_out() -> Self {
+            Self::default()
+        }
+    }
+
+    #[derive(Clone, Debug)]
+    pub struct AecProcessor(Arc<Inner>);
+
+    #[derive(derive_more::Debug)]
+    struct Inner {
+        #[debug("Processor")]
+        processor: Mutex<webrtc_audio_processing::Processor>,
+        config: Mutex<Config>,
+        // capture_delay: AtomicU64,
+        // playback_delay: AtomicU64,
+        enabled: AtomicBool,
+        // capture_channels: AtomicUsize,
+        // playback_channels: AtomicUsize,
+    }
+
+    impl Default for AecProcessor {
+        fn default() -> Self {
+            Self::new(Default::default(), true).expect("failed to initialize AecProcessor")
+        }
+    }
+
+    impl AecProcessor {
+        pub fn new(config: AecProcessorConfig, enabled: bool) -> anyhow::Result<Self> {
+            let suppression_level = EchoCancellationSuppressionLevel::High;
+            // High pass filter is a prerequisite to running echo cancellation.
+            let processor_config = Config {
+                echo_cancellation: Some(EchoCancellation {
+                    suppression_level,
+                    stream_delay_ms: None,
+                    enable_delay_agnostic: true,
+                    enable_extended_filter: true,
+                }),
+                enable_high_pass_filter: true,
+                ..Config::default()
+            };
+
+            let mut processor = webrtc_audio_processing::Processor::new(&InitializationConfig {
+                num_capture_channels: config.num_input_channels.get() as i32,
+                num_render_channels: config.num_output_channels.get() as i32,
+                enable_experimental_agc: true,
+                enable_intelligibility_enhancer: true, // ..InitializationConfig::default()
+            })?;
+            processor.set_config(processor_config.clone());
+
+            // processor.set_config(config.clone());
+            info!("init audio processor (config={config:?})");
+            Ok(Self(Arc::new(Inner {
+                processor: Mutex::new(processor),
+                config: Mutex::new(processor_config),
+                enabled: AtomicBool::new(enabled),
+            })))
+        }
+
+        pub fn is_enabled(&self) -> bool {
+            self.0.enabled.load(Ordering::SeqCst)
+        }
+
+        #[allow(unused)]
+        pub fn set_enabled(&self, enabled: bool) {
+            let _prev = self.0.enabled.swap(enabled, Ordering::SeqCst);
+        }
+
+        /// Processes and modifies the audio frame from a capture device by applying
+        /// signal processing as specified in the config. `frame` should hold an
+        /// interleaved f32 audio frame, with [`NUM_SAMPLES_PER_FRAME`] samples.
+        // webrtc-audio-processing expects a 10ms chunk for each process call.
+        pub fn process_capture_frame(
+            &self,
+            frame: &mut [f32],
+        ) -> Result<(), webrtc_audio_processing::Error> {
+            if !self.is_enabled() {
+                return Ok(());
+            }
+            self.0
+                .processor
+                .lock()
+                .expect("poisoned")
+                .process_capture_frame(frame)
+        }
+
+        /// Processes and optionally modifies the audio frame from a playback device.
+        /// `frame` should hold an interleaved `f32` audio frame, with
+        /// [`NUM_SAMPLES_PER_FRAME`] samples.
+        pub fn process_render_frame(
+            &self,
+            frame: &mut [f32],
+        ) -> Result<(), webrtc_audio_processing::Error> {
+            if !self.is_enabled() {
+                return Ok(());
+            }
+            self.0
+                .processor
+                .lock()
+                .expect("poisoned")
+                .process_render_frame(frame)
+        }
+
+        pub fn set_stream_delay(&self, delay_ms: u32) {
+            debug!("updating stream delay to {delay_ms}ms");
+            // let playback = self.0.playback_delay.load(Ordering::Relaxed);
+            // let capture = self.0.capture_delay.load(Ordering::Relaxed);
+            // let total = playback + capture;
+            let mut config = self.0.config.lock().expect("poisoned");
+            config.echo_cancellation.as_mut().unwrap().stream_delay_ms = Some(delay_ms as i32);
+            self.0
+                .processor
+                .lock()
+                .expect("poisoned")
+                .set_config(config.clone());
+        }
+    }
+}
+
+mod firewheel_nodes {
+    use std::collections::VecDeque;
+
+    use firewheel::{
+        StreamInfo,
+        channel_config::{ChannelConfig, ChannelCount},
+        diff::{Diff, Patch},
+        event::ProcEvents,
+        node::{
+            AudioNode, AudioNodeInfo, AudioNodeProcessor, ConstructProcessorContext, ProcBuffers,
+            ProcExtra, ProcInfo, ProcStreamCtx, ProcessStatus,
+        },
+    };
+    use webrtc_audio_processing::NUM_SAMPLES_PER_FRAME;
+
+    use super::AecProcessor;
+
+    const CHANNELS: usize = 2;
+    const FRAME_SAMPLES: usize = (NUM_SAMPLES_PER_FRAME as usize) * CHANNELS;
+
+    /// Simple render-side node: feeds output audio into WebRTC's render stream.
+    #[derive(Diff, Patch, Debug, Clone, Copy, PartialEq)]
+    pub struct AecRenderNode {
+        pub enabled: bool,
+    }
+
+    impl Default for AecRenderNode {
+        fn default() -> Self {
+            Self { enabled: true }
+        }
+    }
+
+    impl AudioNode for AecRenderNode {
+        /// We use the wrapped WebRTC processor as our configuration object.
+        ///
+        /// Note: `WebrtcAudioProcessor` already internally wraps an `Arc<Inner>`,
+        /// so cloning this config shares the underlying processor between nodes.
+        type Configuration = AecProcessor;
+
+        fn info(&self, _config: &Self::Configuration) -> AudioNodeInfo {
+            AudioNodeInfo::new()
+                .debug_name("webrtc_render")
+                .channel_config(ChannelConfig {
+                    num_inputs: ChannelCount::STEREO,
+                    num_outputs: ChannelCount::STEREO,
+                })
+        }
+
+        fn construct_processor(
+            &self,
+            config: &Self::Configuration,
+            _cx: ConstructProcessorContext,
+        ) -> impl AudioNodeProcessor {
+            // Clone = share the same underlying Arc<Inner>.
+            let webrtc = config.clone();
+
+            // Inform the processor how many playback channels we have.
+            // (You can handle errors here instead of unwrap() in real code.)
+            // webrtc.init_playback(CHANNELS).ok();
+
+            RenderProcessor {
+                enabled: self.enabled,
+                processor: webrtc,
+                in_ring: VecDeque::with_capacity(FRAME_SAMPLES * 4),
+                out_ring: VecDeque::with_capacity(FRAME_SAMPLES * 4),
+                tmp_chunk: vec![0.0; FRAME_SAMPLES],
+            }
+        }
+    }
+
+    struct RenderProcessor {
+        enabled: bool,
+        processor: AecProcessor,
+        // Interleaved input samples to be fed into WebRTC in 10ms chunks.
+        in_ring: VecDeque<f32>,
+        // Interleaved processed samples coming back from WebRTC.
+        out_ring: VecDeque<f32>,
+        // Scratch buffer for one NUM_SAMPLES_PER_FRAME chunk (interleaved).
+        tmp_chunk: Vec<f32>,
+    }
+
+    impl AudioNodeProcessor for RenderProcessor {
+        fn process(
+            &mut self,
+            info: &ProcInfo,
+            buffers: ProcBuffers,
+            events: &mut ProcEvents,
+            _extra: &mut ProcExtra,
+        ) -> ProcessStatus {
+            // Handle parameter patches.
+            for patch in events.drain_patches::<AecRenderNode>() {
+                match patch {
+                    AecRenderNodePatch::Enabled(enabled) => {
+                        self.enabled = enabled;
+                        if !self.enabled {
+                            // Clear any buffered state when disabling to avoid stale audio.
+                            self.in_ring.clear();
+                            self.out_ring.clear();
+                        }
+                    }
+                }
+            }
+
+            let num_frames = info.frames as usize;
+            // println!("num_frames: {num_frames}");
+
+            // Get input/output slices like in the FilterNode example.
+            let in_l = &buffers.inputs[0][..num_frames];
+            let in_r = &buffers.inputs[1][..num_frames];
+
+            let (out_l, out_rest) = buffers.outputs.split_first_mut().unwrap();
+            let out_l = &mut out_l[..num_frames];
+            let out_r = &mut out_rest[0][..num_frames];
+
+            // If disabled, just pass through.
+            if !self.enabled {
+                out_l.copy_from_slice(in_l);
+                out_r.copy_from_slice(in_r);
+                return ProcessStatus::OutputsModified;
+            }
+
+            // 1. Push current block into the interleaved input ring buffer.
+            for i in 0..num_frames {
+                self.in_ring.push_back(in_l[i]);
+                self.in_ring.push_back(in_r[i]);
+            }
+
+            // 2. While we have at least one full 10ms frame, process it.
+            while self.in_ring.len() >= FRAME_SAMPLES {
+                // Fill tmp_chunk with a full frame of interleaved samples.
+                for s in &mut self.tmp_chunk[..FRAME_SAMPLES] {
+                    *s = self.in_ring.pop_front().unwrap();
+                }
+
+                // Feed into processor render stream.
+                let _ = self.processor.process_render_frame(&mut self.tmp_chunk);
+
+                // Store processed samples into the output ring.
+                for &s in &self.tmp_chunk[..FRAME_SAMPLES] {
+                    self.out_ring.push_back(s);
+                }
+            }
+
+            // 3. Produce outputs for this audio block.
+            //
+            // We always need `num_frames * CHANNELS` samples. If we don't have
+            // enough processed samples yet, we output silence for the missing part.
+            for i in 0..num_frames {
+                if self.out_ring.len() >= CHANNELS {
+                    out_l[i] = self.out_ring.pop_front().unwrap();
+                    out_r[i] = self.out_ring.pop_front().unwrap();
+                } else {
+                    // Not enough processed data yet -> output silence.
+                    out_l[i] = 0.0;
+                    out_r[i] = 0.0;
+                }
+            }
+
+            ProcessStatus::OutputsModified
+        }
+
+        fn new_stream(&mut self, _stream_info: &StreamInfo, _ctx: &mut ProcStreamCtx) {
+            // Reset buffers for new stream.
+            self.in_ring.clear();
+            self.out_ring.clear();
+        }
+    }
+
+    /// Capture-side node: feeds mic audio into [`AecProcessor`]'s capture stream.
+    #[derive(Diff, Patch, Debug, Clone, Copy, PartialEq)]
+    pub struct AecCaptureNode {
+        pub enabled: bool,
+    }
+
+    impl Default for AecCaptureNode {
+        fn default() -> Self {
+            Self { enabled: true }
+        }
+    }
+
+    impl AudioNode for AecCaptureNode {
+        type Configuration = AecProcessor;
+
+        fn info(&self, _config: &Self::Configuration) -> AudioNodeInfo {
+            AudioNodeInfo::new()
+                .debug_name("webrtc_capture")
+                .channel_config(ChannelConfig {
+                    num_inputs: ChannelCount::STEREO,
+                    num_outputs: ChannelCount::STEREO,
+                })
+        }
+
+        fn construct_processor(
+            &self,
+            config: &Self::Configuration,
+            _cx: ConstructProcessorContext,
+        ) -> impl AudioNodeProcessor {
+            CaptureProcessor {
+                enabled: self.enabled,
+                processor: config.clone(),
+                in_ring: VecDeque::with_capacity(FRAME_SAMPLES * 4),
+                out_ring: VecDeque::with_capacity(FRAME_SAMPLES * 4),
+                tmp_chunk: vec![0.0; FRAME_SAMPLES],
+            }
+        }
+    }
+
+    struct CaptureProcessor {
+        enabled: bool,
+        processor: AecProcessor,
+        // Interleaved input samples to be fed into WebRTC in 10ms chunks.
+        in_ring: VecDeque<f32>,
+        // Interleaved processed samples coming back from WebRTC.
+        out_ring: VecDeque<f32>,
+        // Scratch buffer for one NUM_SAMPLES_PER_FRAME chunk (interleaved).
+        tmp_chunk: Vec<f32>,
+    }
+
+    impl AudioNodeProcessor for CaptureProcessor {
+        fn process(
+            &mut self,
+            info: &ProcInfo,
+            buffers: ProcBuffers,
+            events: &mut ProcEvents,
+            _extra: &mut ProcExtra,
+        ) -> ProcessStatus {
+            for patch in events.drain_patches::<AecCaptureNode>() {
+                match patch {
+                    AecCaptureNodePatch::Enabled(enabled) => {
+                        self.enabled = enabled;
+                        if !self.enabled {
+                            self.in_ring.clear();
+                            self.out_ring.clear();
+                        }
+                    }
+                }
+            }
+
+            let frames = info.frames;
+            let num_frames = frames as usize;
+
+            let in_l = &buffers.inputs[0][..num_frames];
+            let in_r = &buffers.inputs[1][..num_frames];
+
+            let (out_l, out_rest) = buffers.outputs.split_first_mut().unwrap();
+            let out_l = &mut out_l[..num_frames];
+            let out_r = &mut out_rest[0][..num_frames];
+
+            if !self.enabled {
+                // Bypass if disabled.
+                out_l.copy_from_slice(in_l);
+                out_r.copy_from_slice(in_r);
+                return ProcessStatus::OutputsModified;
+            }
+
+            // 1. Push current block into the interleaved input ring buffer.
+            for i in 0..num_frames {
+                self.in_ring.push_back(in_l[i]);
+                self.in_ring.push_back(in_r[i]);
+            }
+
+            // 2. While we have at least one full 10ms frame, process it.
+            while self.in_ring.len() >= FRAME_SAMPLES {
+                for s in &mut self.tmp_chunk[..FRAME_SAMPLES] {
+                    *s = self.in_ring.pop_front().unwrap();
+                }
+
+                let _ = self.processor.process_capture_frame(&mut self.tmp_chunk);
+
+                for &s in &self.tmp_chunk[..FRAME_SAMPLES] {
+                    self.out_ring.push_back(s);
+                }
+            }
+
+            // 3. Produce outputs for this audio block.
+            //
+            // If we don't have enough processed samples to cover the whole block,
+            // we output silence for the missing frames.
+            for i in 0..num_frames {
+                if self.out_ring.len() >= CHANNELS {
+                    out_l[i] = self.out_ring.pop_front().unwrap();
+                    out_r[i] = self.out_ring.pop_front().unwrap();
+                } else {
+                    out_l[i] = 0.0;
+                    out_r[i] = 0.0;
+                }
+            }
+
+            ProcessStatus::OutputsModified
+        }
+
+        fn new_stream(&mut self, _stream_info: &StreamInfo, _ctx: &mut ProcStreamCtx) {
+            // Reset state for new stream.
+            self.in_ring.clear();
+            self.out_ring.clear();
+        }
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/av.rs b/third_party/iroh-live/moq-media/src/av.rs
new file mode 100644
index 0000000..7ad15ec
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/av.rs
@@ -0,0 +1,265 @@
+use std::time::Duration;
+
+use anyhow::Result;
+use image::RgbaImage;
+use strum::{Display, EnumString, VariantNames};
+
+#[derive(Copy, Clone, Debug)]
+pub struct AudioFormat {
+    pub sample_rate: u32,
+    pub channel_count: u32,
+}
+
+impl AudioFormat {
+    pub fn mono_48k() -> Self {
+        Self {
+            sample_rate: 48_000,
+            channel_count: 1,
+        }
+    }
+
+    pub fn stereo_48k() -> Self {
+        Self {
+            sample_rate: 48_000,
+            channel_count: 2,
+        }
+    }
+
+    pub fn from_hang_config(config: &hang::catalog::AudioConfig) -> Self {
+        Self {
+            channel_count: config.channel_count,
+            sample_rate: config.sample_rate,
+        }
+    }
+}
+
+pub trait Decoders {
+    type Audio: AudioDecoder;
+    type Video: VideoDecoder;
+}
+
+pub trait AudioSource: Send + 'static {
+    fn cloned_boxed(&self) -> Box<dyn AudioSource>;
+    fn format(&self) -> AudioFormat;
+    fn pop_samples(&mut self, buf: &mut [f32]) -> Result<Option<usize>>;
+}
+
+pub trait AudioSink: AudioSinkHandle {
+    fn format(&self) -> Result<AudioFormat>;
+    fn push_samples(&mut self, buf: &[f32]) -> Result<()>;
+    fn handle(&self) -> Box<dyn AudioSinkHandle>;
+}
+
+pub trait AudioSinkHandle: Send + 'static {
+    fn pause(&self);
+    fn resume(&self);
+    fn is_paused(&self) -> bool;
+    fn toggle_pause(&self);
+    /// Smoothed peak, normalized to 0..1.
+    // TODO: document how smoothing and normalization are expected
+    fn smoothed_peak_normalized(&self) -> Option<f32> {
+        None
+    }
+}
+
+pub trait AudioEncoder: AudioEncoderInner {
+    fn with_preset(format: AudioFormat, preset: AudioPreset) -> Result<Self>
+    where
+        Self: Sized;
+}
+pub trait AudioEncoderInner: Send + 'static {
+    fn name(&self) -> &str;
+    fn config(&self) -> hang::catalog::AudioConfig;
+    fn push_samples(&mut self, samples: &[f32]) -> Result<()>;
+    fn pop_packet(&mut self) -> Result<Option<hang::Frame>>;
+}
+
+impl AudioEncoderInner for Box<dyn AudioEncoder> {
+    fn name(&self) -> &str {
+        (&**self).name()
+    }
+
+    fn config(&self) -> hang::catalog::AudioConfig {
+        (&**self).config()
+    }
+
+    fn push_samples(&mut self, samples: &[f32]) -> Result<()> {
+        (&mut **self).push_samples(samples)
+    }
+
+    fn pop_packet(&mut self) -> Result<Option<hang::Frame>> {
+        (&mut **self).pop_packet()
+    }
+}
+
+pub trait AudioDecoder: Send + 'static {
+    fn new(config: &hang::catalog::AudioConfig, target_format: AudioFormat) -> Result<Self>
+    where
+        Self: Sized;
+    fn push_packet(&mut self, packet: hang::Frame) -> Result<()>;
+    fn pop_samples(&mut self) -> Result<Option<&[f32]>>;
+}
+
+#[derive(Copy, Clone, Debug, PartialEq)]
+pub enum PixelFormat {
+    Rgba,
+    Bgra,
+}
+
+impl Default for PixelFormat {
+    fn default() -> Self {
+        PixelFormat::Rgba
+    }
+}
+
+#[derive(Clone, Debug)]
+pub struct VideoFormat {
+    pub pixel_format: PixelFormat,
+    pub dimensions: [u32; 2],
+}
+
+#[derive(Clone, Debug)]
+pub struct VideoFrame {
+    pub format: VideoFormat,
+    pub raw: bytes::Bytes,
+}
+
+pub trait VideoSource: Send + 'static {
+    fn name(&self) -> &str;
+    fn format(&self) -> VideoFormat;
+    fn pop_frame(&mut self) -> Result<Option<VideoFrame>>;
+    fn start(&mut self) -> Result<()>;
+    fn stop(&mut self) -> Result<()>;
+}
+
+pub trait VideoEncoder: VideoEncoderInner {
+    fn with_preset(preset: VideoPreset) -> Result<Self>
+    where
+        Self: Sized;
+}
+
+pub trait VideoEncoderInner: Send + 'static {
+    fn name(&self) -> &str;
+    fn config(&self) -> hang::catalog::VideoConfig;
+    fn push_frame(&mut self, frame: VideoFrame) -> Result<()>;
+    fn pop_packet(&mut self) -> Result<Option<hang::Frame>>;
+}
+
+impl VideoEncoderInner for Box<dyn VideoEncoder> {
+    fn name(&self) -> &str {
+        (&**self).name()
+    }
+
+    fn config(&self) -> hang::catalog::VideoConfig {
+        (&**self).config()
+    }
+
+    fn push_frame(&mut self, frame: VideoFrame) -> Result<()> {
+        (&mut **self).push_frame(frame)
+    }
+
+    fn pop_packet(&mut self) -> Result<Option<hang::Frame>> {
+        (&mut **self).pop_packet()
+    }
+}
+
+pub trait VideoDecoder: Send + 'static {
+    fn new(config: &hang::catalog::VideoConfig, playback_config: &DecodeConfig) -> Result<Self>
+    where
+        Self: Sized;
+    fn name(&self) -> &str;
+    fn pop_frame(&mut self) -> Result<Option<DecodedFrame>>;
+    fn push_packet(&mut self, packet: hang::Frame) -> Result<()>;
+    fn set_viewport(&mut self, w: u32, h: u32);
+}
+
+pub struct DecodedFrame {
+    pub frame: image::Frame,
+    pub timestamp: Duration,
+}
+
+impl DecodedFrame {
+    pub fn img(&self) -> &RgbaImage {
+        self.frame.buffer()
+    }
+}
+
+#[derive(Debug, Clone, Copy, Display, EnumString, VariantNames)]
+#[strum(serialize_all = "lowercase")]
+pub enum AudioCodec {
+    Opus,
+}
+
+#[derive(Debug, Clone, Copy, Display, EnumString, VariantNames)]
+#[strum(serialize_all = "lowercase")]
+pub enum VideoCodec {
+    H264,
+    Av1,
+}
+
+#[derive(Debug, Clone, Copy, Display, EnumString, VariantNames, Eq, PartialEq, Ord, PartialOrd)]
+pub enum VideoPreset {
+    #[strum(serialize = "180p")]
+    P180,
+    #[strum(serialize = "360p")]
+    P360,
+    #[strum(serialize = "720p")]
+    P720,
+    #[strum(serialize = "1080p")]
+    P1080,
+}
+
+impl VideoPreset {
+    pub fn all() -> [VideoPreset; 4] {
+        [Self::P180, Self::P360, Self::P720, Self::P1080]
+    }
+
+    pub fn dimensions(&self) -> (u32, u32) {
+        match self {
+            Self::P180 => (320, 180),
+            Self::P360 => (640, 360),
+            Self::P720 => (1280, 720),
+            Self::P1080 => (1920, 1080),
+        }
+    }
+
+    pub fn width(&self) -> u32 {
+        self.dimensions().0
+    }
+
+    pub fn height(&self) -> u32 {
+        self.dimensions().1
+    }
+
+    pub fn fps(&self) -> u32 {
+        30
+    }
+}
+
+#[derive(Debug, Clone, Copy, Display, EnumString, VariantNames, Eq, PartialEq)]
+#[strum(serialize_all = "lowercase")]
+pub enum AudioPreset {
+    Hq,
+    Lq,
+}
+
+#[derive(Debug, Clone, Copy, Display, EnumString, VariantNames, Eq, PartialEq, Default)]
+#[strum(serialize_all = "lowercase")]
+pub enum Quality {
+    Highest,
+    #[default]
+    High,
+    Mid,
+    Low,
+}
+
+#[derive(Clone, Default)]
+pub struct DecodeConfig {
+    pub pixel_format: PixelFormat,
+}
+
+#[derive(Clone, Default)]
+pub struct PlaybackConfig {
+    pub decode_config: DecodeConfig,
+    pub quality: Quality,
+}
diff --git a/third_party/iroh-live/moq-media/src/capture.rs b/third_party/iroh-live/moq-media/src/capture.rs
new file mode 100644
index 0000000..49fbc9f
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/capture.rs
@@ -0,0 +1,233 @@
+use std::str::FromStr;
+
+use anyhow::{Context, Result};
+use nokhwa::{
+    nokhwa_initialize,
+    pixel_format::RgbFormat,
+    utils::{
+        CameraFormat, CameraIndex, FrameFormat, RequestedFormat, RequestedFormatType, Resolution,
+    },
+};
+use tracing::{debug, info, trace, warn};
+use xcap::{Monitor, VideoRecorder};
+
+use crate::{
+    av::{PixelFormat, VideoFormat, VideoFrame, VideoSource},
+    ffmpeg::util::MjpgDecoder,
+};
+
+pub struct ScreenCapturer {
+    pub(crate) _monitor: Monitor,
+    pub(crate) width: u32,
+    pub(crate) height: u32,
+    pub(crate) video_recorder: VideoRecorder,
+    pub(crate) rx: std::sync::mpsc::Receiver<xcap::Frame>,
+}
+
+// TODO: Review if sound.
+unsafe impl Send for ScreenCapturer {}
+
+impl Drop for ScreenCapturer {
+    fn drop(&mut self) {
+        self.video_recorder.stop().ok();
+    }
+}
+
+impl ScreenCapturer {
+    pub fn new() -> Result<Self> {
+        info!("Initializing screen capturer (xcap)");
+
+        let monitors = Monitor::all().context("Failed to get monitors")?;
+        if monitors.is_empty() {
+            return Err(anyhow::anyhow!("No monitors available"));
+        }
+        info!("Available monitors: {monitors:?}");
+
+        let monitor = monitors.into_iter().next().unwrap();
+        let width = monitor.width()?;
+        let height = monitor.height()?;
+        let name = monitor
+            .name()
+            .unwrap_or_else(|_| "Unknown Monitor".to_string());
+
+        info!("Using monitor: {} ({}x{})", name, width, height);
+
+        let (video_recorder, rx) = monitor.video_recorder()?;
+
+        Ok(Self {
+            _monitor: monitor,
+            video_recorder,
+            rx,
+            width,
+            height,
+        })
+    }
+}
+
+impl VideoSource for ScreenCapturer {
+    fn name(&self) -> &str {
+        "screen"
+    }
+
+    fn format(&self) -> VideoFormat {
+        VideoFormat {
+            pixel_format: PixelFormat::Rgba,
+            dimensions: [self.width, self.height],
+        }
+    }
+
+    fn start(&mut self) -> Result<()> {
+        self.video_recorder.start()?;
+        Ok(())
+    }
+
+    fn stop(&mut self) -> Result<()> {
+        self.video_recorder.stop()?;
+        Ok(())
+    }
+
+    fn pop_frame(&mut self) -> anyhow::Result<Option<VideoFrame>> {
+        let mut raw_frame = None;
+        // We are only interested in the latest frame.
+        // Drain the channel to not build up memory.
+        while let Ok(next) = self.rx.try_recv() {
+            raw_frame = Some(next)
+        }
+        let raw_frame = match raw_frame {
+            Some(frame) => frame,
+            None => self
+                .rx
+                .recv()
+                .context("Screen recorder did not produce new frame")?,
+        };
+        Ok(Some(VideoFrame {
+            format: VideoFormat {
+                pixel_format: PixelFormat::Rgba,
+                dimensions: [raw_frame.width, raw_frame.height],
+            },
+            raw: raw_frame.raw.into(),
+        }))
+    }
+}
+
+pub struct CameraCapturer {
+    pub(crate) camera: nokhwa::Camera,
+    pub(crate) mjpg_decoder: MjpgDecoder,
+    pub(crate) width: u32,
+    pub(crate) height: u32,
+}
+
+impl CameraCapturer {
+    pub fn new() -> Result<Self> {
+        info!("Initializing camera capturer (nokhwa)");
+        nokhwa_initialize(|granted| {
+            debug!("User selected camera access: {}", granted);
+        });
+
+        let cameras = nokhwa::query(nokhwa::utils::ApiBackend::Auto)?;
+        if cameras.is_empty() {
+            return Err(anyhow::anyhow!("No cameras available"));
+        }
+        info!("Available cameras: {cameras:?}");
+
+        let camera_index = match std::env::var("IROH_LIVE_CAMERA").ok() {
+            None => {
+                // Order of cameras in nokhwa is reversed from usual order (primary camera is last).
+                let first_camera = cameras.last().unwrap();
+                info!(": {}", first_camera.human_name());
+                first_camera.index().clone()
+            }
+            Some(camera_name) => match u32::from_str(&camera_name).ok() {
+                Some(num) => CameraIndex::Index(num),
+                None => CameraIndex::String(camera_name),
+            },
+        };
+        let mut camera = nokhwa::Camera::new(
+            camera_index,
+            RequestedFormat::new::<RgbFormat>(RequestedFormatType::AbsoluteHighestResolution),
+        )?;
+        info!("Using camera: {}", camera.info().human_name());
+        let available_formats = camera.compatible_camera_formats()?;
+        debug!("Available formats: {available_formats:?}",);
+        if let Some(format) = Self::select_format(available_formats, Resolution::new(1920, 1080)) {
+            if let Err(err) = camera.set_camera_requset(RequestedFormat::new::<RgbFormat>(
+                RequestedFormatType::Exact(format),
+            )) {
+                warn!(?format, "Failed to change camera format: {err:#}");
+            }
+        }
+        info!("Using format: {}", camera.camera_format());
+        let resolution = camera.resolution();
+        Ok(Self {
+            camera,
+            mjpg_decoder: MjpgDecoder::new()?,
+            width: resolution.width(),
+            height: resolution.height(),
+        })
+    }
+
+    fn select_format(
+        mut formats: Vec<CameraFormat>,
+        desired_resolution: Resolution,
+    ) -> Option<CameraFormat> {
+        formats.sort_by(|a, b| {
+            a.resolution()
+                .cmp(&b.resolution())
+                .then(a.frame_rate().cmp(&b.frame_rate()))
+        });
+        formats
+            .iter()
+            .find(|format| format.resolution() >= desired_resolution)
+            .or_else(|| formats.last())
+            .cloned()
+    }
+}
+
+impl VideoSource for CameraCapturer {
+    fn name(&self) -> &str {
+        "cam"
+    }
+    fn format(&self) -> VideoFormat {
+        VideoFormat {
+            pixel_format: PixelFormat::Rgba,
+            dimensions: [self.width, self.height],
+        }
+    }
+
+    fn start(&mut self) -> Result<()> {
+        self.camera.open_stream()?;
+        Ok(())
+    }
+
+    fn stop(&mut self) -> Result<()> {
+        self.camera.stop_stream()?;
+        Ok(())
+    }
+
+    fn pop_frame(&mut self) -> anyhow::Result<Option<VideoFrame>> {
+        let start = std::time::Instant::now();
+        let frame = self
+            .camera
+            .frame()
+            .context("Failed to capture camera frame")?;
+        trace!("pop frame: capture took {:?}", start.elapsed());
+        let start = std::time::Instant::now();
+        let frame = match frame.source_frame_format() {
+            FrameFormat::MJPEG if std::env::var("IROH_LIVE_MJPEG_FFMPEG").is_ok() => {
+                trace!("decode ffmpeg");
+                self.mjpg_decoder.decode_frame(frame.buffer())?
+            }
+            _ => {
+                let image = frame
+                    .decode_image::<nokhwa::pixel_format::RgbAFormat>()
+                    .context("Failed to decode camera frame")?;
+                VideoFrame {
+                    format: self.format(),
+                    raw: image.into_raw().into(),
+                }
+            }
+        };
+        trace!("pop frame: decode took {:?}", start.elapsed());
+        Ok(Some(frame))
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/audio/decoder.rs b/third_party/iroh-live/moq-media/src/ffmpeg/audio/decoder.rs
new file mode 100644
index 0000000..08c742d
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/audio/decoder.rs
@@ -0,0 +1,93 @@
+use anyhow::Result;
+use ffmpeg_next::{self as ffmpeg, util::channel_layout::ChannelLayout};
+use hang::catalog::AudioConfig;
+
+use crate::{
+    av::{AudioDecoder, AudioFormat},
+    ffmpeg::ext::{CodecContextExt, PacketExt},
+};
+
+pub struct FfmpegAudioDecoder {
+    codec: ffmpeg::decoder::Audio,
+    resampler: ffmpeg::software::resampling::Context,
+    decoded_frame: ffmpeg::util::frame::Audio,
+    resampled_frame: ffmpeg::util::frame::Audio,
+}
+
+impl AudioDecoder for FfmpegAudioDecoder {
+    fn new(config: &AudioConfig, target_format: AudioFormat) -> Result<Self>
+    where
+        Self: Sized,
+    {
+        let codec = match config.codec {
+            hang::catalog::AudioCodec::Opus => {
+                let codec_id = ffmpeg::codec::Id::OPUS;
+                let codec = ffmpeg::decoder::find(codec_id).unwrap();
+                let mut ctx = ffmpeg::codec::Context::new_with_codec(codec)
+                    .decoder()
+                    .audio()?;
+                if let Some(extradata) = &config.description {
+                    ctx.set_extradata(&extradata)?;
+                }
+                ctx.set_channel_layout(if config.channel_count == 1 {
+                    ChannelLayout::MONO
+                } else {
+                    ChannelLayout::STEREO
+                });
+                unsafe {
+                    let ctx_mut = ctx.as_mut_ptr();
+                    (*ctx_mut).sample_rate = config.sample_rate as i32;
+                }
+                ctx
+            }
+            _ => anyhow::bail!(
+                "Unsupported codec {} (only opus is supported)",
+                config.codec
+            ),
+        };
+        let target_channel_layout = match target_format.channel_count {
+            1 => ChannelLayout::MONO,
+            2 => ChannelLayout::STEREO,
+            _ => anyhow::bail!("unsupported target channel count"),
+        };
+        let target_sample_format = ffmpeg_next::util::format::sample::Sample::F32(
+            ffmpeg_next::util::format::sample::Type::Packed,
+        );
+        let resampler = ffmpeg::software::resampling::Context::get(
+            codec.format(),
+            codec.channel_layout(),
+            codec.rate(),
+            target_sample_format,
+            target_channel_layout,
+            target_format.sample_rate,
+        )?;
+        Ok(Self {
+            codec,
+            resampler,
+            decoded_frame: ffmpeg::util::frame::Audio::empty(),
+            resampled_frame: ffmpeg::util::frame::Audio::empty(),
+        })
+    }
+
+    fn push_packet(&mut self, packet: hang::Frame) -> Result<()> {
+        let packet = packet.payload.to_ffmpeg_packet();
+        self.codec.send_packet(&packet)?;
+        Ok(())
+    }
+
+    fn pop_samples(&mut self) -> Result<Option<&[f32]>> {
+        match self.codec.receive_frame(&mut self.decoded_frame) {
+            Err(err) => Err(err.into()),
+            Ok(()) => {
+                // Create an empty frame to hold the resampled audio data.
+                self.resampler
+                    .run(&self.decoded_frame, &mut self.resampled_frame)
+                    .unwrap();
+                let frame = &self.resampled_frame;
+                let expected_bytes =
+                    frame.samples() * frame.channels() as usize * core::mem::size_of::<f32>();
+                Ok(Some(bytemuck::cast_slice(&frame.data(0)[..expected_bytes])))
+            }
+        }
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/audio/encoder.rs b/third_party/iroh-live/moq-media/src/ffmpeg/audio/encoder.rs
new file mode 100644
index 0000000..bee8110
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/audio/encoder.rs
@@ -0,0 +1,153 @@
+use anyhow::{Context, Result};
+use ffmpeg_next::{self as ffmpeg, Rational};
+use hang::{Timestamp, catalog::AudioConfig};
+use tracing::trace;
+
+use crate::{
+    av::{AudioEncoder, AudioEncoderInner, AudioFormat, AudioPreset},
+    ffmpeg::ext::CodecContextExt,
+};
+
+const SAMPLE_RATE: u32 = 48_000;
+const BITRATE: u64 = 128_000; // 128 kbps
+
+pub struct OpusEncoder {
+    encoder: ffmpeg::encoder::Audio,
+    frame_count: u64,
+    sample_rate: u32,
+    bitrate: u64,
+    channel_count: u32,
+    extradata: Vec<u8>,
+}
+
+impl OpusEncoder {
+    pub fn stereo() -> Result<Self> {
+        Self::new(SAMPLE_RATE, 2, BITRATE)
+    }
+
+    pub fn mono() -> Result<Self> {
+        Self::new(SAMPLE_RATE, 1, BITRATE)
+    }
+
+    pub fn new(sample_rate: u32, channel_count: u32, bitrate: u64) -> Result<Self> {
+        tracing::info!(
+            "Initializing Opus encoder: {}Hz, {} channels",
+            sample_rate,
+            channel_count
+        );
+        ffmpeg::init()?;
+
+        let codec =
+            ffmpeg::encoder::find(ffmpeg::codec::Id::OPUS).context("Opus encoder not found")?;
+        tracing::debug!("Found Opus codec: {:?}", codec.name());
+        let mut ctx = ffmpeg::codec::context::Context::new_with_codec(codec)
+            .encoder()
+            .audio()?;
+
+        let sample_rate = sample_rate as i32;
+        ctx.set_rate(sample_rate);
+        ctx.set_bit_rate(bitrate as usize);
+        ctx.set_format(ffmpeg::format::Sample::F32(
+            ffmpeg_next::format::sample::Type::Packed,
+        ));
+        ctx.set_time_base(Rational::new(1, sample_rate));
+        ctx.set_channel_layout(if channel_count == 1 {
+            ffmpeg::util::channel_layout::ChannelLayout::MONO
+        } else {
+            ffmpeg::util::channel_layout::ChannelLayout::STEREO
+        });
+
+        let encoder = ctx.open()?;
+
+        let extradata = encoder.extradata().unwrap_or(&[]).to_vec();
+
+        tracing::info!("Opus encoder initialized successfully");
+        Ok(Self {
+            encoder,
+            frame_count: 0,
+            sample_rate: sample_rate as u32,
+            channel_count,
+            extradata,
+            bitrate,
+        })
+    }
+}
+impl AudioEncoder for OpusEncoder {
+    fn with_preset(format: AudioFormat, preset: AudioPreset) -> Result<Self>
+    where
+        Self: Sized,
+    {
+        let channel_count = format.channel_count;
+        let bitrate = match preset {
+            AudioPreset::Hq => BITRATE,
+            AudioPreset::Lq => 32_000,
+        };
+        Self::new(SAMPLE_RATE, channel_count, bitrate)
+    }
+}
+
+impl AudioEncoderInner for OpusEncoder {
+    fn name(&self) -> &str {
+        self.encoder.id().name()
+    }
+
+    fn config(&self) -> AudioConfig {
+        hang::catalog::AudioConfig {
+            codec: hang::catalog::AudioCodec::Opus,
+            sample_rate: self.sample_rate,
+            channel_count: self.channel_count,
+            bitrate: Some(self.bitrate),
+            description: Some(self.extradata.clone().into()),
+        }
+    }
+
+    fn push_samples(&mut self, samples: &[f32]) -> Result<()> {
+        if samples.is_empty() {
+            return Ok(());
+        }
+
+        let samples_per_channel = samples.len() / self.channel_count as usize;
+        debug_assert_eq!(samples_per_channel as u32, self.encoder.frame_size());
+
+        let mut audio_frame = ffmpeg::util::frame::Audio::new(
+            ffmpeg::util::format::sample::Sample::F32(ffmpeg::util::format::sample::Type::Packed),
+            samples_per_channel,
+            ffmpeg::util::channel_layout::ChannelLayout::default(self.channel_count as i32),
+        );
+
+        // Copy interleaved samples directly since we're using packed format
+        let frame_data = audio_frame.data_mut(0);
+        let frame_samples: &mut [f32] = bytemuck::cast_slice_mut(frame_data);
+
+        let copy_len = samples.len().min(frame_samples.len());
+        frame_samples[..copy_len].copy_from_slice(&samples[..copy_len]);
+
+        audio_frame.set_pts(Some(self.frame_count as i64));
+        self.frame_count += samples_per_channel as u64;
+
+        trace!("push samples {}", audio_frame.samples());
+        self.encoder.send_frame(&audio_frame)?;
+        Ok(())
+    }
+
+    fn pop_packet(&mut self) -> Result<Option<hang::Frame>> {
+        let mut packet = ffmpeg::packet::Packet::empty();
+        match self.encoder.receive_packet(&mut packet) {
+            Ok(()) => {
+                let payload = packet.data().unwrap_or(&[]).to_vec();
+                let hang_frame = hang::Frame {
+                    payload: payload.into(),
+                    timestamp: Timestamp::from_micros(
+                        (self.frame_count * 1_000_000) / self.sample_rate as u64,
+                    )?,
+                    keyframe: true, // Audio frames are generally independent
+                };
+                trace!("poll frame {}", hang_frame.payload.num_bytes());
+                Ok(Some(hang_frame))
+            }
+            Err(ffmpeg::Error::Eof) => Ok(None),
+            Err(ffmpeg::Error::Other { errno }) if errno == ffmpeg::util::error::EAGAIN => Ok(None),
+            Err(e) => Err(e.into()),
+        }
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/mod.rs b/third_party/iroh-live/moq-media/src/ffmpeg/mod.rs
new file mode 100644
index 0000000..49c277c
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/mod.rs
@@ -0,0 +1,108 @@
+use crate::av::Decoders;
+
+pub use self::{audio::*, ext::ffmpeg_log_init, video::*};
+
+#[derive(Debug, Clone, Copy)]
+pub struct FfmpegDecoders;
+
+impl Decoders for FfmpegDecoders {
+    type Audio = FfmpegAudioDecoder;
+    type Video = FfmpegVideoDecoder;
+}
+
+mod audio {
+    mod decoder;
+    mod encoder;
+    pub use decoder::*;
+    pub use encoder::*;
+}
+
+pub mod video {
+    mod decoder;
+    mod encoder;
+    pub(crate) mod util;
+    pub use decoder::*;
+    pub use encoder::*;
+}
+
+pub(crate) mod ext {
+    use buf_list::BufList;
+    use bytes::Buf;
+    use ffmpeg_next as ffmpeg;
+    pub fn ffmpeg_log_init() {
+        use ffmpeg::util::log::Level::*;
+        let level = if let Ok(val) = std::env::var("FFMPEG_LOG") {
+            match val.as_str() {
+                "quiet" => Quiet,
+                "panic" => Panic,
+                "fatal" => Fatal,
+                "error" => Error,
+                "warn" | "warning" => Warning,
+                "info" => Info,
+                "verbose" => Verbose,
+                "debug" => Debug,
+                "trace" => Trace,
+                _ => Warning,
+            }
+        } else {
+            Warning
+        };
+        ffmpeg::util::log::set_level(level);
+    }
+
+    pub trait PacketExt {
+        fn to_ffmpeg_packet(self) -> ffmpeg::Packet;
+    }
+
+    impl PacketExt for BufList {
+        fn to_ffmpeg_packet(mut self) -> ffmpeg_next::Packet {
+            let mut packet = ffmpeg::Packet::new(self.num_bytes());
+            let dst = packet.data_mut().unwrap();
+            self.copy_to_slice(dst);
+            packet
+        }
+    }
+
+    pub trait CodecContextExt {
+        fn extradata(&self) -> Option<&[u8]>;
+        fn set_extradata(&mut self, extradata: &[u8]) -> Result<(), ffmpeg::Error>;
+    }
+
+    impl CodecContextExt for ffmpeg::codec::Context {
+        // SAFETY: Written by ChatGPT, so, dunno.
+        fn extradata(&self) -> Option<&[u8]> {
+            unsafe {
+                let ctx = self.as_ptr();
+                if (*ctx).extradata.is_null() || (*ctx).extradata_size <= 0 {
+                    return None;
+                }
+                Some(std::slice::from_raw_parts(
+                    (*ctx).extradata as *const u8,
+                    (*ctx).extradata_size as usize,
+                ))
+            }
+        }
+
+        // SAFETY: Written by ChatGPT, so, dunno.
+        fn set_extradata(&mut self, extradata: &[u8]) -> Result<(), ffmpeg::Error> {
+            unsafe {
+                let ctx = self.as_mut_ptr();
+                // allocate extradata + padding
+                let pad = ffmpeg::ffi::AV_INPUT_BUFFER_PADDING_SIZE as usize;
+                let size = extradata.len() + pad;
+                (*ctx).extradata = ffmpeg::ffi::av_mallocz(size).cast::<u8>();
+                if (*ctx).extradata.is_null() {
+                    return Err(ffmpeg::Error::Bug.into());
+                }
+                // copy bytes and zero the padding
+                std::ptr::copy_nonoverlapping(
+                    extradata.as_ptr(),
+                    (*ctx).extradata,
+                    extradata.len(),
+                );
+                (*ctx).extradata_size = extradata.len() as i32;
+            }
+            Ok(())
+        }
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/video/decoder.rs b/third_party/iroh-live/moq-media/src/ffmpeg/video/decoder.rs
new file mode 100644
index 0000000..7556c2d
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/video/decoder.rs
@@ -0,0 +1,139 @@
+use anyhow::{Context, Result};
+use ffmpeg_next::{
+    self as ffmpeg, codec, codec::Id as CodecId, util::frame::video::Video as FfmpegFrame,
+};
+
+use crate::{
+    av::{self, DecodeConfig, DecodedFrame, VideoDecoder},
+    ffmpeg::{
+        ext::{CodecContextExt, PacketExt},
+        video::util::{Rescaler, StreamClock},
+    },
+};
+
+pub struct FfmpegVideoDecoder {
+    codec: ffmpeg::decoder::Video,
+    rescaler: Rescaler,
+    clock: StreamClock,
+    decoded: FfmpegFrame,
+    viewport_changed: Option<(u32, u32)>,
+    last_timestamp: Option<hang::Timestamp>,
+}
+
+impl VideoDecoder for FfmpegVideoDecoder {
+    fn name(&self) -> &str {
+        self.codec.id().name()
+    }
+
+    fn new(config: &hang::catalog::VideoConfig, playback_config: &DecodeConfig) -> Result<Self>
+    where
+        Self: Sized,
+    {
+        ffmpeg::init()?;
+
+        // Build a decoder context for H.264 and attach extradata (e.g., avcC)
+        let codec = match &config.codec {
+            hang::catalog::VideoCodec::H264(_meta) => {
+                let codec =
+                    codec::decoder::find(CodecId::H264).context("H.264 decoder not found")?;
+                let mut ctx = codec::context::Context::new_with_codec(codec);
+                if let Some(description) = &config.description {
+                    ctx.set_extradata(&description)?;
+                }
+                ctx.decoder().video().unwrap()
+            }
+            hang::catalog::VideoCodec::AV1(_meta) => {
+                let codec = codec::decoder::find(CodecId::AV1).context("AV1 decoder not found")?;
+                let mut ctx = codec::context::Context::new_with_codec(codec);
+                if let Some(description) = &config.description {
+                    ctx.set_extradata(&description)?;
+                }
+                ctx.decoder().video().unwrap()
+            }
+            _ => anyhow::bail!(
+                "Unsupported codec {} (only h264 and av1 are supported)",
+                config.codec
+            ),
+        };
+        let rescaler = Rescaler::new(playback_config.pixel_format.to_ffmpeg(), None)?;
+        let clock = StreamClock::default();
+        let decoded = FfmpegFrame::empty();
+        Ok(Self {
+            codec,
+            rescaler,
+            clock,
+            decoded,
+            viewport_changed: None,
+            last_timestamp: None,
+        })
+    }
+
+    fn set_viewport(&mut self, w: u32, h: u32) {
+        self.viewport_changed = Some((w, h));
+    }
+
+    fn push_packet(&mut self, packet: hang::Frame) -> Result<()> {
+        let ffmpeg_packet = packet.payload.to_ffmpeg_packet();
+        self.codec.send_packet(&ffmpeg_packet)?;
+        self.last_timestamp = Some(packet.timestamp);
+        Ok(())
+    }
+
+    fn pop_frame(&mut self) -> Result<Option<av::DecodedFrame>> {
+        // Pull all available decoded frames
+        match self.codec.receive_frame(&mut self.decoded) {
+            Ok(()) => {
+                // Apply clamped target size.
+                if let Some((max_width, max_height)) = self.viewport_changed.take() {
+                    let (width, height) =
+                        calculate_resized_size(&self.decoded, max_width, max_height);
+                    self.rescaler.set_target_dimensions(width, height);
+                }
+
+                let frame = self.rescaler.process(&mut self.decoded)?;
+                let last_timestamp = self
+                    .last_timestamp
+                    .as_ref()
+                    .context("missing last packet")?;
+                let frame = DecodedFrame::from_ffmpeg(
+                    frame,
+                    self.clock.frame_delay(&last_timestamp),
+                    std::time::Duration::from(*last_timestamp),
+                );
+                Ok(Some(frame))
+            }
+            Err(ffmpeg::util::error::Error::BufferTooSmall) => Ok(None),
+            Err(ffmpeg::Error::Other { errno }) if errno == ffmpeg::util::error::EAGAIN => Ok(None),
+            Err(err) => {
+                // tracing::warn!("decoder error: {err} {err:?} {err:#?}");
+                // Ok(None)
+                Err(err.into())
+            }
+        }
+    }
+}
+
+/// Calculates the target frame size to fit into the requested bounds while preserving aspect ratio.
+fn calculate_resized_size(decoded: &FfmpegFrame, max_width: u32, max_height: u32) -> (u32, u32) {
+    let src_w = decoded.width().max(1);
+    let src_h = decoded.height().max(1);
+    let max_w = max_width.max(1);
+    let max_h = max_height.max(1);
+
+    // Fit within requested bounds, preserve aspect ratio, never upscale
+    let scale_w = (max_w as f32) / (src_w as f32);
+    let scale_h = (max_h as f32) / (src_h as f32);
+    let scale = scale_w.min(scale_h).min(1.0).max(0.0);
+    let target_width = ((src_w as f32) * scale).floor().max(1.0) as u32;
+    let target_height = ((src_h as f32) * scale).floor().max(1.0) as u32;
+    tracing::debug!(
+        src_w,
+        src_h,
+        max_w,
+        max_h,
+        target_width,
+        target_height,
+        "scale"
+    );
+    (target_width, target_height)
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/video/encoder.rs b/third_party/iroh-live/moq-media/src/ffmpeg/video/encoder.rs
new file mode 100644
index 0000000..67c4310
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/video/encoder.rs
@@ -0,0 +1,568 @@
+use std::{
+    ffi::{CString, c_int},
+    ptr,
+    task::Poll,
+};
+
+use anyhow::{Context, Result, anyhow};
+use ffmpeg_next::{self as ffmpeg, codec, format::Pixel, frame::Video as VideoFrame};
+use hang::Timestamp;
+use tracing::{debug, info, trace};
+
+use crate::{
+    av,
+    ffmpeg::{ext::CodecContextExt, util::Rescaler},
+};
+
+#[derive(Debug, Clone, Copy, Default)]
+// Allow unused because usage is cfg-gated on platform.
+#[allow(unused)]
+enum HwBackend {
+    #[default]
+    Software,
+    /// Linux
+    Vaapi,
+    /// macOS
+    Videotoolbox,
+    /// Nvidia GPUs
+    Nvenc,
+    /// Intel GPUs
+    Qsv,
+    /// AMD GPUs
+    Amf,
+    // TODO:
+    // Add DirectX (Windows)
+    // Add MediaCodec (Android)
+}
+
+impl HwBackend {
+    fn codec_name(&self) -> &'static str {
+        match self {
+            Self::Software => "libx264",
+            Self::Vaapi => "h264_vaapi",
+            Self::Videotoolbox => "h264_videotoolbox",
+            Self::Nvenc => "h264_nvenc",
+            Self::Qsv => "h264_qsv",
+            Self::Amf => "h264_amf",
+        }
+    }
+
+    fn candidates() -> Vec<Self> {
+        // vec![HwBackend::Software]
+        let mut candidates = Vec::new();
+        // Platform-preferred order
+        #[cfg(target_os = "macos")]
+        candidates.extend_from_slice(&[HwBackend::Videotoolbox]);
+        #[cfg(target_os = "windows")]
+        candidates.extend_from_slice(&[HwBackend::Nvenc, HwBackend::Qsv, HwBackend::Amf]);
+        #[cfg(target_os = "linux")]
+        candidates.extend_from_slice(&[HwBackend::Vaapi, HwBackend::Nvenc, HwBackend::Qsv]);
+
+        // Always end with software
+        candidates.push(HwBackend::Software);
+        candidates
+    }
+
+    fn pixel_format(&self) -> Pixel {
+        match self {
+            HwBackend::Vaapi | HwBackend::Qsv => Pixel::NV12,
+            // These rest accepts yuv420p SW frames:
+            _ => Pixel::YUV420P,
+        }
+    }
+    fn hardware_pixel_format(&self) -> Pixel {
+        match self {
+            HwBackend::Vaapi => Pixel::VAAPI,
+            HwBackend::Qsv => Pixel::NV12,
+            // These rest accepts yuv420p SW frames:
+            _ => Pixel::YUV420P,
+        }
+    }
+}
+
+#[derive(Debug, Clone)]
+struct EncoderOpts {
+    width: u32,
+    height: u32,
+    framerate: u32,
+    bitrate: u64,
+}
+
+pub struct H264Encoder {
+    encoder: ffmpeg::encoder::video::Encoder,
+    rescaler: Rescaler,
+    backend: HwBackend,
+    vaapi: Option<VaapiState>,
+    opts: EncoderOpts,
+    frame_count: u64,
+}
+
+impl H264Encoder {
+    pub fn new(width: u32, height: u32, framerate: u32) -> Result<Self> {
+        info!("Initializing H264 encoder: {width}x{height} @ {framerate}fps");
+        ffmpeg::init()?;
+
+        // Bitrate heuristic (from your original)
+        let pixels = width * height;
+        let framerate_factor = 30.0 + (framerate as f32 - 30.) / 2.;
+        let bitrate = (pixels as f32 * 0.07 * framerate_factor).round() as u64;
+
+        let opts = EncoderOpts {
+            width,
+            height,
+            framerate,
+            bitrate,
+        };
+
+        let candidates = HwBackend::candidates();
+
+        // Try each backend
+        let mut last_err: Option<anyhow::Error> = None;
+        for backend in candidates {
+            match Self::open_encoder(backend, &opts) {
+                Ok((encoder, rescaler, vaapi)) => {
+                    info!(
+                        "Using encoder backend: {} ({backend:?})",
+                        backend.codec_name()
+                    );
+                    return Ok(Self {
+                        encoder,
+                        rescaler,
+                        vaapi,
+                        backend,
+                        opts,
+                        frame_count: 0,
+                    });
+                }
+                Err(e) => {
+                    debug!(
+                        "Backend {backend:?} ({}) not available: {e:#}",
+                        backend.codec_name()
+                    );
+                    last_err = Some(e);
+                }
+            }
+        }
+
+        Err(last_err.unwrap_or_else(|| anyhow!("no H.264 encoder available")))
+    }
+
+    fn open_encoder(
+        backend: HwBackend,
+        opts: &EncoderOpts,
+    ) -> Result<(
+        ffmpeg::encoder::video::Encoder,
+        Rescaler,
+        Option<VaapiState>,
+    )> {
+        // Find encoder
+        let codec = ffmpeg::codec::encoder::find_by_name(backend.codec_name())
+            .with_context(|| format!("encoder {} not found", backend.codec_name()))?;
+        debug!("Found encoder: {}", codec.name());
+
+        // Build ctx
+        let mut ctx = codec::context::Context::new_with_codec(codec);
+        unsafe {
+            let ctx_mut = ctx.as_mut_ptr();
+            (*ctx_mut).width = opts.width as i32;
+            (*ctx_mut).height = opts.height as i32;
+            (*ctx_mut).time_base.num = 1;
+            (*ctx_mut).time_base.den = opts.framerate as i32;
+            (*ctx_mut).framerate.num = opts.framerate as i32;
+            (*ctx_mut).framerate.den = 1;
+            (*ctx_mut).gop_size = opts.framerate as i32;
+            (*ctx_mut).bit_rate = opts.bitrate as i64;
+            (*ctx_mut).flags = (*ctx_mut).flags | codec::Flags::GLOBAL_HEADER.bits() as c_int;
+            (*ctx_mut).pix_fmt = backend.hardware_pixel_format().into();
+        }
+
+        // Backend-specific prep
+        let vaapi_state = if matches!(backend, HwBackend::Vaapi) {
+            // single-GPU default; make configurable if needed
+            let va = VaapiState::new(opts.width, opts.height, "/dev/dri/renderD128")?;
+            va.bind_to_context(&mut ctx);
+            Some(va)
+        } else {
+            None
+        };
+
+        // Setup encoder options
+        let enc_opts = {
+            let mut opts = vec![
+                // Disable annexB so that we get an avcC header in extradata
+                // annexb=0 → MP4/ISO BMFF style (length-prefixed NAL units + avcC extradata),
+                // as opposed to Annex B start codes (00 00 00 01).
+                ("annexB", "0"),
+            ];
+            if matches!(backend, HwBackend::Software) {
+                opts.extend_from_slice(&[
+                    ("preset", "ultrafast"),
+                    ("tune", "zerolatency"),
+                    ("profile", "baseline"),
+                ]);
+            }
+            ffmpeg::Dictionary::from_iter(opts.into_iter())
+        };
+        // Open encoder
+        let encoder = ctx.encoder().video()?.open_as_with(codec, enc_opts)?;
+
+        // Build rescaler to SW input fmt expected per-backend
+        let rescaler = Rescaler::new(backend.pixel_format(), Some((opts.width, opts.height)))?;
+
+        Ok((encoder, rescaler, vaapi_state))
+    }
+
+    pub fn video_config(&self) -> Result<hang::catalog::VideoConfig> {
+        Ok(hang::catalog::VideoConfig {
+            codec: hang::catalog::VideoCodec::H264(hang::catalog::H264 {
+                profile: 0x42, // Baseline
+                constraints: 0xE0,
+                level: 0x1E,   // Level 3.0
+                inline: false, // TODO: is this correct?
+            }),
+            description: Some(self.avcc_description()?.to_vec().into()),
+            coded_width: Some(self.opts.width),
+            coded_height: Some(self.opts.height),
+            display_ratio_width: None,
+            display_ratio_height: None,
+            bitrate: Some(self.opts.bitrate),
+            framerate: Some(self.opts.framerate as f64),
+            optimize_for_latency: Some(true),
+        })
+    }
+
+    pub fn avcc_description(&self) -> Result<&[u8]> {
+        self.encoder.extradata().context("missing avcC extradata")
+    }
+
+    pub fn receive_packet(&mut self) -> Result<Poll<Option<hang::Frame>>> {
+        loop {
+            let mut packet = ffmpeg::packet::Packet::empty();
+            match self.encoder.receive_packet(&mut packet) {
+                Ok(()) => {
+                    let payload = packet.data().unwrap_or(&[]).to_vec();
+                    let hang_frame = hang::Frame {
+                        payload: payload.into(),
+                        timestamp: Timestamp::from_micros(
+                            self.frame_count * 1_000_000 / self.opts.framerate as u64,
+                        )?,
+                        keyframe: packet.is_key(),
+                    };
+                    return Ok(Poll::Ready(Some(hang_frame)));
+                }
+                Err(ffmpeg::Error::Eof) => return Ok(Poll::Ready(None)),
+                Err(ffmpeg::Error::Other { errno }) if errno == ffmpeg::util::error::EAGAIN => {
+                    return Ok(Poll::Pending);
+                }
+                Err(e) => return Err(e.into()),
+            }
+        }
+    }
+
+    pub fn encode_frame(&mut self, mut frame: VideoFrame) -> Result<()> {
+        frame.set_pts(Some(self.frame_count as i64));
+        self.frame_count += 1;
+
+        if self.frame_count % self.opts.framerate as u64 == 0 {
+            tracing::trace!(
+                "Encoding {}: {}x{} fmt={:?} pts={:?} backend={:?}",
+                self.frame_count,
+                frame.width(),
+                frame.height(),
+                frame.format(),
+                frame.pts(),
+                self.backend
+            );
+        }
+
+        // Convert incoming frame to the SW format the backend expects.
+        let frame = self
+            .rescaler
+            .process(&frame)
+            .context("failed to color-convert frame")?
+            .clone();
+
+        let frame = match self.backend {
+            HwBackend::Vaapi => {
+                let va = self
+                    .vaapi
+                    .as_ref()
+                    .ok_or_else(|| anyhow!("no vaapi state"))?;
+                let hw_frame = va.transfer_nv12_to_hw(&frame)?;
+                hw_frame
+            }
+            // Other backends accept SW frames directly
+            _ => frame,
+        };
+
+        self.encoder
+            .send_frame(&frame)
+            .map_err(|e| anyhow!("send_frame failed: {e:?}"))?;
+
+        Ok(())
+    }
+
+    pub fn flush(&mut self) -> Result<()> {
+        self.encoder.send_eof()?;
+        Ok(())
+    }
+}
+
+impl av::VideoEncoder for H264Encoder {
+    fn with_preset(preset: av::VideoPreset) -> Result<Self>
+    where
+        Self: Sized,
+    {
+        Self::new(preset.width(), preset.height(), preset.fps())
+    }
+}
+
+impl av::VideoEncoderInner for H264Encoder {
+    fn name(&self) -> &str {
+        self.encoder.id().name()
+    }
+
+    fn config(&self) -> hang::catalog::VideoConfig {
+        self.video_config().expect("video_config available")
+    }
+
+    fn push_frame(&mut self, frame: av::VideoFrame) -> anyhow::Result<()> {
+        trace!(len = frame.raw.len(), format=?frame.format, "push frame");
+        let frame = frame.to_ffmpeg();
+        self.encode_frame(frame)
+    }
+
+    fn pop_packet(&mut self) -> anyhow::Result<Option<hang::Frame>> {
+        match self.receive_packet()? {
+            std::task::Poll::Ready(v) => Ok(v),
+            std::task::Poll::Pending => Ok(None),
+        }
+    }
+}
+
+struct VaapiState {
+    device_ctx: *mut ffmpeg::sys::AVBufferRef,
+    frames_ctx: *mut ffmpeg::sys::AVBufferRef,
+}
+
+unsafe impl Send for VaapiState {}
+
+impl VaapiState {
+    /// Create VAAPI device + frames pool (NV12→VAAPI surfaces) for given size.
+    fn new(width: u32, height: u32, device_path: &str) -> Result<Self> {
+        // 1) Create VAAPI device
+        let cpath = CString::new(device_path)?;
+        let mut dev: *mut ffmpeg::sys::AVBufferRef = ptr::null_mut();
+        let ret = unsafe {
+            ffmpeg::sys::av_hwdevice_ctx_create(
+                &mut dev,
+                ffmpeg::sys::AVHWDeviceType::AV_HWDEVICE_TYPE_VAAPI,
+                cpath.as_ptr(),
+                ptr::null_mut(),
+                0,
+            )
+        };
+        if ret < 0 || dev.is_null() {
+            unsafe { ffmpeg::sys::av_buffer_unref(&mut dev) };
+            return Err(anyhow!("vaapi device create failed: {ret}"));
+        }
+
+        // 2) Create frames pool for VAAPI with SW format NV12
+        let frames = unsafe { ffmpeg::sys::av_hwframe_ctx_alloc(dev) };
+        if frames.is_null() {
+            unsafe { ffmpeg::sys::av_buffer_unref(&mut dev) };
+            return Err(anyhow!("av_hwframe_ctx_alloc failed"));
+        }
+        let fc = unsafe { &mut *((*frames).data as *mut ffmpeg::sys::AVHWFramesContext) };
+        fc.format = ffmpeg::sys::AVPixelFormat::AV_PIX_FMT_VAAPI;
+        fc.sw_format = ffmpeg::sys::AVPixelFormat::AV_PIX_FMT_NV12;
+        fc.width = width as i32;
+        fc.height = height as i32;
+        fc.initial_pool_size = 32;
+
+        let ret = unsafe { ffmpeg::sys::av_hwframe_ctx_init(frames) };
+        if ret < 0 {
+            unsafe {
+                ffmpeg::sys::av_buffer_unref(&mut (frames as *mut _));
+                ffmpeg::sys::av_buffer_unref(&mut dev);
+            }
+            return Err(anyhow!("av_hwframe_ctx_init failed: {ret}"));
+        }
+
+        Ok(Self {
+            device_ctx: dev,
+            frames_ctx: frames,
+        })
+    }
+
+    /// Attach the frames context so the codec context expects VAAPI frames.
+    fn bind_to_context(&self, ctx: &mut codec::context::Context) {
+        unsafe {
+            let ctx = ctx.as_mut_ptr();
+            (*ctx).hw_frames_ctx = ffmpeg::sys::av_buffer_ref(self.frames_ctx);
+            (*ctx).pix_fmt = Pixel::VAAPI.into();
+        }
+    }
+
+    /// Transfer a SW NV12 frame into a VAAPI HW frame, preserving PTS.
+    /// Returns a new `VideoFrame` backed by a VAAPI surface.
+    fn transfer_nv12_to_hw(&self, sw_frame: &VideoFrame) -> Result<VideoFrame> {
+        unsafe {
+            // Allocate an empty HW frame from the pool
+            let mut hw = ffmpeg::frame::Video::empty();
+            let ret = ffmpeg::sys::av_hwframe_get_buffer(self.frames_ctx, hw.as_mut_ptr(), 0);
+            if ret < 0 {
+                return Err(anyhow!("av_hwframe_get_buffer failed: {ret}"));
+            }
+            // Keep PTS
+            (*hw.as_mut_ptr()).pts = sw_frame.pts().unwrap_or(0);
+
+            // Transfer SW NV12 → HW VAAPI surface
+            let ret = ffmpeg::sys::av_hwframe_transfer_data(hw.as_mut_ptr(), sw_frame.as_ptr(), 0);
+            if ret < 0 {
+                return Err(anyhow!("av_hwframe_transfer_data failed: {ret}"));
+            }
+
+            Ok(hw)
+        }
+    }
+}
+
+impl Drop for VaapiState {
+    fn drop(&mut self) {
+        unsafe {
+            if !self.frames_ctx.is_null() {
+                ffmpeg::sys::av_buffer_unref(&mut (self.frames_ctx as *mut _));
+            }
+            if !self.device_ctx.is_null() {
+                ffmpeg::sys::av_buffer_unref(&mut (self.device_ctx as *mut _));
+            }
+        }
+    }
+}
+
+// pub struct Av1FfmpegEncoder {
+//     encoder: ffmpeg::encoder::video::Encoder,
+//     rescaler: Rescaler,
+//     opts: EncoderOpts,
+//     frame_count: u64,
+// }
+
+// impl Av1FfmpegEncoder {
+//     pub fn new(width: u32, height: u32, framerate: u32) -> Result<Self> {
+//         info!("Initializing AV1 (FFmpeg) encoder: {width}x{height} @ {framerate}fps");
+//         ffmpeg::init()?;
+
+//         let pixels = width * height;
+//         let framerate_factor = 30.0 + (framerate as f32 - 30.) / 2.;
+//         let bitrate = (pixels as f32 * 0.05 * framerate_factor).round() as u64;
+//         let opts = EncoderOpts {
+//             width,
+//             height,
+//             framerate,
+//             bitrate,
+//         };
+
+//         let codec = ffmpeg::encoder::find(ffmpeg::codec::Id::AV1).context("AV1 codec not found")?;
+//         let mut ctx = codec::context::Context::new_with_codec(codec);
+//         unsafe {
+//             let ctx_mut = ctx.as_mut_ptr();
+//             (*ctx_mut).width = width as i32;
+//             (*ctx_mut).height = height as i32;
+//             (*ctx_mut).time_base.num = 1;
+//             (*ctx_mut).time_base.den = framerate as i32;
+//             (*ctx_mut).framerate.num = framerate as i32;
+//             (*ctx_mut).framerate.den = 1;
+//             (*ctx_mut).gop_size = framerate as i32;
+//             (*ctx_mut).bit_rate = bitrate as i64;
+//             (*ctx_mut).pix_fmt = Pixel::YUV420P.into();
+//         }
+//         // libaom options for realtime
+//         let enc_opts =
+//             ffmpeg::Dictionary::from_iter([("cpu-used", "8"), ("row-mt", "1"), ("tiles", "2x2")]);
+//         let encoder = ctx.encoder().video()?.open_as_with(
+//             ffmpeg::encoder::find(ffmpeg::codec::Id::AV1).unwrap(),
+//             enc_opts,
+//         )?;
+//         let rescaler = Rescaler::new(Pixel::YUV420P, Some((width, height)))?;
+//         Ok(Self {
+//             encoder,
+//             rescaler,
+//             opts,
+//             frame_count: 0,
+//         })
+//     }
+// }
+
+// impl av::VideoEncoder for Av1FfmpegEncoder {
+//     fn with_preset(preset: av::VideoPreset) -> Result<Self>
+//     where
+//         Self: Sized,
+//     {
+//         Self::new(preset.width(), preset.height(), preset.fps())
+//     }
+//     fn config(&self) -> hang::catalog::VideoConfig {
+//         hang::catalog::VideoConfig {
+//             codec: hang::catalog::VideoCodec::AV1(Default::default()),
+//             description: None,
+//             coded_width: Some(self.opts.width),
+//             coded_height: Some(self.opts.height),
+//             display_ratio_width: None,
+//             display_ratio_height: None,
+//             bitrate: Some(self.opts.bitrate),
+//             framerate: Some(self.opts.framerate as f64),
+//             optimize_for_latency: Some(true),
+//         }
+//     }
+//     fn push_frame(
+//         &mut self,
+//         format: &av::VideoFormat,
+//         frame: av::VideoFrame,
+//     ) -> anyhow::Result<()> {
+//         use ffmpeg_next::frame::Video as FfFrame;
+//         let pixel = match format.pixel_format {
+//             av::PixelFormat::Rgba => Pixel::RGBA,
+//             av::PixelFormat::Bgra => Pixel::BGRA,
+//         };
+//         let [w, h] = format.dimensions;
+//         let mut ff = FfFrame::new(pixel, w, h);
+//         let stride = ff.stride(0) as usize;
+//         let row_bytes = (w as usize) * 4;
+//         for y in 0..(h as usize) {
+//             let dst_off = y * stride;
+//             let src_off = y * row_bytes;
+//             ff.data_mut(0)[dst_off..dst_off + row_bytes]
+//                 .copy_from_slice(&frame.raw[src_off..src_off + row_bytes]);
+//         }
+//         let sw = self
+//             .rescaler
+//             .process(&ff)
+//             .context("failed to color-convert frame")?
+//             .clone();
+//         let mut enc_frame = sw;
+//         enc_frame.set_pts(Some(self.frame_count as i64));
+//         self.frame_count += 1;
+//         self.encoder.send_frame(&enc_frame)?;
+//         Ok(())
+//     }
+//     fn pop_packet(&mut self) -> anyhow::Result<Option<hang::Frame>> {
+//         let mut packet = ffmpeg::packet::Packet::empty();
+//         match self.encoder.receive_packet(&mut packet) {
+//             Ok(()) => {
+//                 let payload = packet.data().unwrap_or(&[]).to_vec();
+//                 let hang_frame = hang::Frame {
+//                     payload: payload.into(),
+//                     timestamp: std::time::Duration::from_nanos(
+//                         self.frame_count.saturating_sub(1) * 1_000_000_000
+//                             / self.opts.framerate as u64,
+//                     ),
+//                     keyframe: packet.is_key(),
+//                 };
+//                 Ok(Some(hang_frame))
+//             }
+//             Err(ffmpeg::Error::Eof) => Ok(None),
+//             Err(ffmpeg::Error::Other { errno }) if errno == ffmpeg::util::error::EAGAIN => Ok(None),
+//             Err(e) => Err(e.into()),
+//         }
+//     }
+// }
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/video/util.rs b/third_party/iroh-live/moq-media/src/ffmpeg/video/util.rs
new file mode 100644
index 0000000..83f2063
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/video/util.rs
@@ -0,0 +1,138 @@
+use std::time::Duration;
+
+use bytes::{BufMut, BytesMut};
+use ffmpeg_next::util::{format::pixel::Pixel, frame::video::Video as FfmpegFrame};
+use hang::Timestamp;
+use image::{Delay, RgbaImage};
+
+pub(crate) use self::mjpg_decoder::MjpgDecoder;
+pub(crate) use self::rescaler::Rescaler;
+use crate::av::{self, DecodedFrame, PixelFormat, VideoFormat, VideoFrame};
+
+mod mjpg_decoder;
+mod rescaler;
+
+#[derive(Default, Debug)]
+pub(crate) struct StreamClock {
+    pub(crate) last_timestamp: Option<hang::Timestamp>,
+}
+
+impl StreamClock {
+    pub(crate) fn frame_delay(&mut self, timestamp: &hang::Timestamp) -> Duration {
+        // Compute interframe delay from provided timestamps
+        let delay = match self.last_timestamp {
+            None => Duration::ZERO,
+            Some(last_timestamp) => timestamp
+                .checked_sub(last_timestamp)
+                .unwrap_or(Timestamp::ZERO)
+                .into(),
+        };
+        self.last_timestamp = Some(*timestamp);
+        delay
+    }
+}
+
+impl av::VideoFrame {
+    pub fn to_ffmpeg(&self) -> FfmpegFrame {
+        // Wrap raw RGBA/BGRA data into an ffmpeg frame and encode
+        let pixel = match self.format.pixel_format {
+            av::PixelFormat::Rgba => Pixel::RGBA,
+            av::PixelFormat::Bgra => Pixel::BGRA,
+        };
+        let [w, h] = self.format.dimensions;
+        let mut ff = FfmpegFrame::new(pixel, w, h);
+        let stride = ff.stride(0) as usize;
+        let row_bytes = (w as usize) * 4;
+        for y in 0..(h as usize) {
+            let dst_off = y * stride;
+            let src_off = y * row_bytes;
+            ff.data_mut(0)[dst_off..dst_off + row_bytes]
+                .copy_from_slice(&self.raw[src_off..src_off + row_bytes]);
+        }
+        ff
+    }
+}
+
+impl av::DecodedFrame {
+    pub fn from_ffmpeg(frame: &FfmpegFrame, delay: Duration, timestamp: Duration) -> Self {
+        let image = ffmpeg_frame_to_image(frame);
+        // Compute interframe delay from provided timestamps
+        let delay = Delay::from_saturating_duration(delay);
+        DecodedFrame {
+            frame: image::Frame::from_parts(image, 0, 0, delay),
+            timestamp,
+        }
+    }
+}
+
+/// Convert the ffmpeg frame into an [image] frame.
+///
+/// Note: This does not do any color conversion. Make sure the frame is in the correct color format before.
+///
+/// This allocates the full frame into a vec, which we need anyway to cross the thread boundary.
+pub(crate) fn ffmpeg_frame_to_image(frame: &ffmpeg_next::util::frame::Video) -> image::RgbaImage {
+    let width = frame.width();
+    let height = frame.height();
+    let bytes_per_pixel = 4usize; // BGRA
+    let src = frame.data(0);
+    // ffmpeg frames may have padding at end of each line; copy row-by-row.
+    let stride = frame.stride(0) as usize;
+    let row_bytes = (width as usize) * bytes_per_pixel;
+    let mut out = vec![0u8; row_bytes * (height as usize)];
+    for y in 0..(height as usize) {
+        let src_off = y * stride;
+        let dst_off = y * row_bytes;
+        out[dst_off..dst_off + row_bytes].copy_from_slice(&src[src_off..src_off + row_bytes]);
+    }
+    RgbaImage::from_raw(width, height, out).expect("valid image buffer")
+}
+
+impl PixelFormat {
+    pub fn to_ffmpeg(&self) -> Pixel {
+        match self {
+            PixelFormat::Rgba => Pixel::RGBA,
+            PixelFormat::Bgra => Pixel::BGRA,
+        }
+    }
+
+    pub fn from_ffmpeg(value: Pixel) -> Option<Self> {
+        match value {
+            Pixel::RGBA => Some(PixelFormat::Rgba),
+            Pixel::BGRA => Some(PixelFormat::Bgra),
+            _ => None,
+        }
+    }
+}
+
+/// Convert the ffmpeg frame into a [`VideoFrame`]
+///
+/// Returns `None` if the frame has an unsupported pixel format.
+///
+/// This allocates the full frame into a vec, which we need anyway to cross the thread boundary.
+pub(crate) fn ffmpeg_frame_to_video_frame(
+    frame: &ffmpeg_next::util::frame::Video,
+) -> Option<VideoFrame> {
+    let pixel_format = PixelFormat::from_ffmpeg(frame.format())?;
+    let width = frame.width();
+    let height = frame.height();
+    let bytes_per_pixel = 4usize; // RGBA/BGRA
+    let src = frame.data(0);
+    // ffmpeg frames may have padding at end of each line; copy row-by-row.
+    let stride = frame.stride(0) as usize;
+    let row_bytes = (width as usize) * bytes_per_pixel;
+    let mut out = BytesMut::with_capacity(row_bytes * (height as usize));
+    // let mut out = vec![0u8; row_bytes * (height as usize)];
+    for y in 0..(height as usize) {
+        let src_off = y * stride;
+        // let dst_off = y * row_bytes;
+        out.put(&src[src_off..src_off + row_bytes]);
+        // out[dst_off..dst_off + row_bytes].copy_from_slice(&src[src_off..src_off + row_bytes]);
+    }
+    Some(VideoFrame {
+        format: VideoFormat {
+            dimensions: [width, height],
+            pixel_format,
+        },
+        raw: out.freeze(),
+    })
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/video/util/mjpg_decoder.rs b/third_party/iroh-live/moq-media/src/ffmpeg/video/util/mjpg_decoder.rs
new file mode 100644
index 0000000..dd0d2c0
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/video/util/mjpg_decoder.rs
@@ -0,0 +1,74 @@
+use std::time::Instant;
+
+use ffmpeg_next::{
+    self as ffmpeg, Error, Packet, codec::Id, format::Pixel, frame::Video as FfmpegVideoFrame,
+};
+use tracing::trace;
+
+use crate::{
+    av::VideoFrame,
+    ffmpeg::util::{Rescaler, ffmpeg_frame_to_video_frame},
+};
+
+pub struct MjpgDecoder {
+    dec: ffmpeg::decoder::Video,
+    rescaler: Rescaler,
+}
+
+impl MjpgDecoder {
+    /// Initialize FFmpeg and create a Video decoder for MJPEG.
+    pub fn new() -> anyhow::Result<Self> {
+        ffmpeg::init()?;
+
+        // Find the MJPEG decoder and create a context bound to it.
+        let mjpeg = ffmpeg::decoder::find(Id::MJPEG).ok_or(Error::DecoderNotFound)?;
+
+        // Create a codec::Context that's pre-bound to this decoder codec,
+        // then get a video decoder out of it.
+        let ctx = ffmpeg::codec::context::Context::new_with_codec(mjpeg);
+        let dec = ctx.decoder().video()?; // has send_packet/receive_frame
+
+        let rescaler = Rescaler::new(Pixel::RGBA, None)?;
+
+        Ok(Self { dec, rescaler })
+    }
+
+    /// Decode one complete MJPEG/JPEG frame from `mjpg_frame`.
+    pub fn decode_frame(&mut self, mjpg_frame: &[u8]) -> Result<VideoFrame, Error> {
+        let now = Instant::now();
+        // Make a packet that borrows/copies the data.
+        let packet = Packet::borrow(mjpg_frame);
+        // Feed & drain once — MJPEG is intra-only (one picture per packet).
+        self.dec.send_packet(&packet)?;
+        trace!(t=?now.elapsed(), "decode ffmpeg: send packet");
+        let mut frame = FfmpegVideoFrame::empty();
+        self.dec.receive_frame(&mut frame)?;
+        trace!(t=?now.elapsed(), "decode ffmpeg: receive frame");
+
+        // MJPEG may output deprecated YUVJ* formats. Replace them with
+        // the non-deprecated equivalents and mark full range to keep semantics.
+        // This avoids ffmpeg warning: "deprecated pixel format used, make sure you did set range correctly".
+        use ffmpeg_next::util::color::Range;
+        match frame.format() {
+            Pixel::YUVJ420P => {
+                frame.set_color_range(Range::JPEG);
+                frame.set_format(Pixel::YUV420P);
+            }
+            Pixel::YUVJ422P => {
+                frame.set_color_range(Range::JPEG);
+                frame.set_format(Pixel::YUV422P);
+            }
+            Pixel::YUVJ444P => {
+                frame.set_color_range(Range::JPEG);
+                frame.set_format(Pixel::YUV444P);
+            }
+            _ => {}
+        }
+        trace!(t=?now.elapsed(), "decode ffmpeg: color");
+        let frame = self.rescaler.process(&frame)?;
+        trace!(t=?now.elapsed(), "decode ffmpeg: rescale");
+        let frame = ffmpeg_frame_to_video_frame(frame).expect("valid pixel format set in rescaler");
+        trace!(t=?now.elapsed(), "decode ffmpeg: convert");
+        Ok(frame)
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/ffmpeg/video/util/rescaler.rs b/third_party/iroh-live/moq-media/src/ffmpeg/video/util/rescaler.rs
new file mode 100644
index 0000000..2ea9944
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/ffmpeg/video/util/rescaler.rs
@@ -0,0 +1,77 @@
+use anyhow::Result;
+use ffmpeg_next::software::scaling::Flags;
+use ffmpeg_next::{
+    self as ffmpeg,
+    software::scaling::{self},
+    util::{format::pixel::Pixel, frame::video::Video as FfmpegFrame},
+};
+
+pub(crate) struct Rescaler {
+    pub(crate) target_format: Pixel,
+    pub(crate) target_width_height: Option<(u32, u32)>,
+    pub(crate) ctx: Option<scaling::Context>,
+    pub(crate) out_frame: FfmpegFrame,
+}
+
+// I think the ffmpeg structs are send-safe.
+// We want to create the encoder before moving it to a thread.
+unsafe impl Send for Rescaler {}
+
+impl Rescaler {
+    pub fn new(target_format: Pixel, target_width_height: Option<(u32, u32)>) -> Result<Self> {
+        Ok(Self {
+            target_format,
+            ctx: None,
+            target_width_height,
+            out_frame: FfmpegFrame::empty(),
+        })
+    }
+
+    pub fn set_target_dimensions(&mut self, w: u32, h: u32) {
+        self.target_width_height = Some((w, h));
+    }
+
+    pub fn process<'a: 'b, 'b>(
+        &'a mut self,
+        frame: &'b FfmpegFrame,
+    ) -> Result<&'b FfmpegFrame, ffmpeg::Error> {
+        // Short-circuit if possible.
+        if self.target_width_height.is_none() && self.target_format == frame.format() {
+            return Ok(frame);
+        }
+        let (target_width, target_height) = self
+            .target_width_height
+            .unwrap_or_else(|| (frame.width(), frame.height()));
+        let out_frame_needs_reset = self.out_frame.width() != target_width
+            || self.out_frame.height() != target_height
+            || self.out_frame.format() != self.target_format;
+        if out_frame_needs_reset {
+            self.out_frame = FfmpegFrame::new(self.target_format, target_width, target_height);
+        }
+        let ctx = match self.ctx {
+            None => self.ctx.insert(scaling::Context::get(
+                frame.format(),
+                frame.width(),
+                frame.height(),
+                self.out_frame.format(),
+                self.out_frame.width(),
+                self.out_frame.height(),
+                Flags::BILINEAR,
+            )?),
+            Some(ref mut ctx) => ctx,
+        };
+        // This resets the context if any parameters changed.
+        ctx.cached(
+            frame.format(),
+            frame.width(),
+            frame.height(),
+            self.out_frame.format(),
+            self.out_frame.width(),
+            self.out_frame.height(),
+            Flags::BILINEAR,
+        );
+
+        ctx.run(&frame, &mut self.out_frame)?;
+        Ok(&self.out_frame)
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/lib.rs b/third_party/iroh-live/moq-media/src/lib.rs
new file mode 100644
index 0000000..804f451
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/lib.rs
@@ -0,0 +1,9 @@
+pub mod audio;
+pub mod av;
+pub mod capture;
+pub mod ffmpeg;
+pub mod publish;
+pub mod subscribe;
+mod util;
+
+pub use audio::AudioBackend;
diff --git a/third_party/iroh-live/moq-media/src/publish.rs b/third_party/iroh-live/moq-media/src/publish.rs
new file mode 100644
index 0000000..0afad77
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/publish.rs
@@ -0,0 +1,594 @@
+use std::{
+    collections::{BTreeMap, HashMap},
+    sync::{
+        Arc, Mutex,
+        atomic::{AtomicBool, AtomicU32, Ordering},
+    },
+    time::{Duration, Instant},
+};
+
+use anyhow::Context;
+use hang::catalog::{AudioConfig, Catalog, CatalogProducer, VideoConfig};
+use moq_lite::BroadcastProducer;
+use n0_error::Result;
+use n0_future::task::AbortOnDropHandle;
+use tokio_util::sync::{CancellationToken, DropGuard};
+use tracing::{debug, error, info, info_span, trace, warn};
+
+use crate::{
+    av::{
+        AudioEncoder, AudioEncoderInner, AudioPreset, AudioSource, DecodeConfig, VideoEncoder,
+        VideoEncoderInner, VideoPreset, VideoSource,
+    },
+    subscribe::WatchTrack,
+    util::spawn_thread,
+};
+
+pub struct PublishBroadcast {
+    producer: BroadcastProducer,
+    catalog: CatalogProducer,
+    state: Arc<Mutex<State>>,
+    _task: Arc<AbortOnDropHandle<()>>,
+}
+
+impl PublishBroadcast {
+    pub fn new() -> Self {
+        let mut producer = BroadcastProducer::default();
+        let catalog = Catalog::default().produce();
+        producer.insert_track(catalog.consumer.track);
+        let catalog = catalog.producer;
+
+        let state = Arc::new(Mutex::new(State::default()));
+        let task_handle = tokio::spawn(Self::run(state.clone(), producer.clone()));
+
+        Self {
+            producer,
+            catalog,
+            state,
+            _task: Arc::new(AbortOnDropHandle::new(task_handle)),
+        }
+    }
+
+    pub fn producer(&self) -> BroadcastProducer {
+        self.producer.clone()
+    }
+
+    async fn run(state: Arc<Mutex<State>>, mut producer: BroadcastProducer) {
+        while let Some(track) = producer.requested_track().await {
+            let name = track.info.name.clone();
+            if state
+                .lock()
+                .expect("poisoned")
+                .start_track(track.clone())
+                .inspect_err(|err| warn!(%name, "failed to start requested track: {err:#}"))
+                .is_ok()
+            {
+                info!("started track: {name}");
+                tokio::spawn({
+                    let state = state.clone();
+                    async move {
+                        track.unused().await;
+                        info!("stopping track: {name}");
+                        state.lock().expect("poisoned").stop_track(&name);
+                    }
+                });
+            }
+        }
+    }
+
+    /// Create a local WatchTrack from the current video source, if present.
+    pub fn watch_local(&self, decode_config: DecodeConfig) -> Option<WatchTrack> {
+        let (source, shutdown) = {
+            let state = self.state.lock().expect("poisoned");
+            let source = state
+                .available_video
+                .as_ref()
+                .map(|video| video.source.clone())?;
+            Some((source, state.shutdown_token.child_token()))
+        }?;
+        Some(WatchTrack::from_video_source(
+            "local".to_string(),
+            shutdown,
+            source,
+            decode_config,
+        ))
+    }
+
+    pub fn set_video(&mut self, renditions: Option<VideoRenditions>) -> Result<()> {
+        match renditions {
+            Some(renditions) => {
+                let priority = 1u8;
+                let configs = renditions.available_renditions()?;
+                let video = hang::catalog::Video {
+                    renditions: configs,
+                    priority,
+                    display: None,
+                    rotation: None,
+                    flip: None,
+                };
+                {
+                    let mut catalog = self.catalog.lock();
+                    catalog.video = Some(video);
+                }
+                self.state.lock().expect("poisoned").available_video = Some(renditions);
+                // TODO: Drop active encodings if their rendition is no longer available?
+            }
+            None => {
+                // Clear catalog and stop any active video encoders
+                self.state.lock().expect("poisoned").remove_video();
+                {
+                    let mut catalog = self.catalog.lock();
+                    catalog.video = None;
+                }
+            }
+        }
+        Ok(())
+    }
+
+    pub fn set_audio(&mut self, renditions: Option<AudioRenditions>) -> Result<()> {
+        match renditions {
+            Some(renditions) => {
+                let priority = 2u8;
+                let configs = renditions.available_renditions()?;
+                let audio = hang::catalog::Audio {
+                    renditions: configs,
+                    priority,
+                };
+                {
+                    let mut catalog = self.catalog.lock();
+                    catalog.audio = Some(audio);
+                }
+                self.state.lock().expect("poisoned").available_audio = Some(renditions);
+            }
+            None => {
+                // Clear catalog and stop any active audio encoders
+                self.state.lock().expect("poisoned").remove_audio();
+                {
+                    let mut catalog = self.catalog.lock();
+                    catalog.audio = None;
+                }
+            }
+        }
+        Ok(())
+    }
+}
+
+impl Drop for PublishBroadcast {
+    fn drop(&mut self) {
+        self.state.lock().expect("poisoned").shutdown_token.cancel();
+        self.producer.close();
+    }
+}
+
+#[derive(Default)]
+struct State {
+    shutdown_token: CancellationToken,
+    available_video: Option<VideoRenditions>,
+    available_audio: Option<AudioRenditions>,
+    active_video: HashMap<String, EncoderThread>,
+    active_audio: HashMap<String, EncoderThread>,
+}
+
+impl State {
+    fn stop_track(&mut self, name: &str) {
+        let thread = self
+            .active_video
+            .remove(name)
+            .or_else(|| self.active_audio.remove(name));
+        if let Some(thread) = thread {
+            thread.shutdown.cancel();
+        }
+    }
+
+    fn remove_audio(&mut self) {
+        for (_name, thread) in self.active_audio.drain() {
+            thread.shutdown.cancel();
+        }
+        self.available_audio = None;
+    }
+
+    fn remove_video(&mut self) {
+        for (_name, thread) in self.active_video.drain() {
+            thread.shutdown.cancel();
+        }
+        self.available_video = None;
+    }
+
+    fn start_track(&mut self, track: moq_lite::TrackProducer) -> Result<()> {
+        let name = track.info.name.clone();
+        let track = hang::TrackProducer::new(track);
+        let shutdown_token = self.shutdown_token.child_token();
+        if let Some(video) = self.available_video.as_mut()
+            && video.contains_rendition(&name)
+        {
+            let thread = video.start_encoder(&name, track, shutdown_token)?;
+            self.active_video.insert(name, thread);
+            Ok(())
+        } else if let Some(audio) = self.available_audio.as_mut()
+            && audio.contains_rendition(&name)
+        {
+            let thread = audio.start_encoder(&name, track, shutdown_token)?;
+            self.active_audio.insert(name, thread);
+            Ok(())
+        } else {
+            info!("ignoring track request {name}: rendition not available");
+            Err(n0_error::anyerr!("rendition not available"))
+        }
+    }
+}
+
+pub struct AudioRenditions {
+    make_encoder: Box<dyn Fn(AudioPreset) -> Result<Box<dyn AudioEncoder>> + Send>,
+    source: Box<dyn AudioSource>,
+    renditions: HashMap<String, AudioPreset>,
+}
+
+impl AudioRenditions {
+    pub fn new<E: AudioEncoder>(
+        source: impl AudioSource,
+        presets: impl IntoIterator<Item = AudioPreset>,
+    ) -> Self {
+        let renditions = presets
+            .into_iter()
+            .map(|preset| (format!("audio-{preset}"), preset))
+            .collect();
+        let format = source.format();
+        Self {
+            make_encoder: Box::new(move |preset| Ok(Box::new(E::with_preset(format, preset)?))),
+            renditions,
+            source: Box::new(source),
+        }
+    }
+
+    pub fn available_renditions(&self) -> Result<BTreeMap<String, AudioConfig>> {
+        let mut renditions = BTreeMap::new();
+        for (name, preset) in self.renditions.iter() {
+            // We need to create the encoder to get the config, even though we drop it
+            // again (it will be created on deman). Not ideal, but works for now.
+            let config = (self.make_encoder)(*preset)?.config();
+            renditions.insert(name.clone(), config);
+        }
+        Ok(renditions)
+    }
+
+    pub fn encoder(&mut self, name: &str) -> Option<Result<Box<dyn AudioEncoder>>> {
+        let preset = self.renditions.get(name)?;
+        Some((self.make_encoder)(*preset))
+    }
+
+    pub fn contains_rendition(&self, name: &str) -> bool {
+        self.renditions.contains_key(name)
+    }
+
+    pub fn start_encoder(
+        &mut self,
+        name: &str,
+        producer: hang::TrackProducer,
+        shutdown_token: CancellationToken,
+    ) -> Result<EncoderThread> {
+        let preset = self
+            .renditions
+            .get(name)
+            .context("rendition not available")?;
+        let encoder = (self.make_encoder)(*preset)?;
+        let thread = EncoderThread::spawn_audio(
+            self.source.cloned_boxed(),
+            encoder,
+            producer,
+            shutdown_token,
+        );
+        Ok(thread)
+    }
+}
+
+pub struct VideoRenditions {
+    make_encoder: Box<dyn Fn(VideoPreset) -> Result<Box<dyn VideoEncoder>> + Send>,
+    source: SharedVideoSource,
+    renditions: HashMap<String, VideoPreset>,
+    _shared_source_cancel_guard: DropGuard,
+}
+
+impl VideoRenditions {
+    pub fn new<E: VideoEncoder>(
+        source: impl VideoSource,
+        presets: impl IntoIterator<Item = VideoPreset>,
+    ) -> Self {
+        let shutdown_token = CancellationToken::new();
+        let source = SharedVideoSource::new(source, shutdown_token.clone());
+        let renditions = presets
+            .into_iter()
+            .map(|preset| (format!("video-{preset}"), preset))
+            .collect();
+        Self {
+            make_encoder: Box::new(|preset| Ok(Box::new(E::with_preset(preset)?))),
+            renditions,
+            source,
+            _shared_source_cancel_guard: shutdown_token.drop_guard(),
+        }
+    }
+
+    pub fn available_renditions(&self) -> Result<BTreeMap<String, VideoConfig>> {
+        let mut renditions = BTreeMap::new();
+        for (name, preset) in self.renditions.iter() {
+            // We need to create the encoder to get the config, even though we drop it
+            // again (it will be created on deman). Not ideal, but works for now.
+            let config = (self.make_encoder)(*preset)?.config();
+            renditions.insert(name.clone(), config);
+        }
+        Ok(renditions)
+    }
+
+    pub fn contains_rendition(&self, name: &str) -> bool {
+        self.renditions.contains_key(name)
+    }
+
+    pub fn start_encoder(
+        &mut self,
+        name: &str,
+        producer: hang::TrackProducer,
+        shutdown_token: CancellationToken,
+    ) -> Result<EncoderThread> {
+        let preset = self
+            .renditions
+            .get(name)
+            .context("rendition not available")?;
+        let encoder = (self.make_encoder)(*preset)?;
+        let thread =
+            EncoderThread::spawn_video(self.source.clone(), encoder, producer, shutdown_token);
+        Ok(thread)
+    }
+}
+
+#[derive(Debug, Clone)]
+pub(crate) struct SharedVideoSource {
+    name: String,
+    frames_rx: tokio::sync::watch::Receiver<Option<crate::av::VideoFrame>>,
+    format: crate::av::VideoFormat,
+    running: Arc<AtomicBool>,
+    thread: Arc<std::thread::JoinHandle<()>>,
+    subscriber_count: Arc<AtomicU32>,
+}
+
+impl SharedVideoSource {
+    fn new(mut source: impl VideoSource, shutdown: CancellationToken) -> Self {
+        let name = source.name().to_string();
+        let format = source.format();
+        let (tx, rx) = tokio::sync::watch::channel(None);
+        let running = Arc::new(AtomicBool::new(false));
+        let thread = spawn_thread(format!("vshr-{}", source.name()), {
+            let shutdown = shutdown.clone();
+            let running = running.clone();
+            move || {
+                let frame_time = Duration::from_secs_f32(1. / 30.);
+                let start = Instant::now();
+                for i in 0.. {
+                    if shutdown.is_cancelled() {
+                        break;
+                    }
+
+                    loop {
+                        if running.load(Ordering::Relaxed) {
+                            break;
+                        }
+                        if let Err(err) = source.stop() {
+                            warn!("Failed to stop video source: {err:#}");
+                        }
+                        std::thread::park();
+                        if let Err(err) = source.start() {
+                            warn!("Failed to stop video source: {err:#}");
+                        }
+                    }
+
+                    match source.pop_frame() {
+                        Ok(Some(frame)) => {
+                            let _ = tx.send(Some(frame));
+                        }
+                        Ok(None) => {}
+                        Err(_) => break,
+                    }
+                    let expected = frame_time * i;
+                    let actual = start.elapsed();
+                    if actual < expected {
+                        std::thread::sleep(expected - actual);
+                    }
+                }
+            }
+        });
+        Self {
+            name,
+            format,
+            frames_rx: rx,
+            thread: Arc::new(thread),
+            running,
+            subscriber_count: Default::default(),
+        }
+    }
+}
+
+impl VideoSource for SharedVideoSource {
+    fn name(&self) -> &str {
+        &self.name
+    }
+
+    fn format(&self) -> crate::av::VideoFormat {
+        self.format.clone()
+    }
+
+    fn start(&mut self) -> anyhow::Result<()> {
+        let prev_count = self.subscriber_count.fetch_add(1, Ordering::Relaxed);
+        if prev_count == 0 {
+            self.running.store(true, Ordering::Relaxed);
+            self.thread.thread().unpark();
+        }
+        Ok(())
+    }
+
+    fn stop(&mut self) -> anyhow::Result<()> {
+        if self
+            .subscriber_count
+            .fetch_update(Ordering::SeqCst, Ordering::SeqCst, |val| {
+                Some(val.saturating_sub(1))
+            })
+            .expect("always returns Some")
+            == 1
+        {
+            self.running.store(false, Ordering::Relaxed);
+        }
+        Ok(())
+    }
+
+    fn pop_frame(&mut self) -> anyhow::Result<Option<crate::av::VideoFrame>> {
+        let frame = self.frames_rx.borrow_and_update().clone();
+        Ok(frame)
+    }
+}
+
+pub struct EncoderThread {
+    _thread_handle: std::thread::JoinHandle<()>,
+    shutdown: CancellationToken,
+}
+
+impl EncoderThread {
+    pub fn spawn_video(
+        mut source: impl VideoSource,
+        mut encoder: impl VideoEncoderInner,
+        mut producer: hang::TrackProducer,
+        shutdown: CancellationToken,
+    ) -> Self {
+        let thread_name = format!("venc-{:<4}-{:<4}", source.name(), encoder.name());
+        let span = info_span!("videoenc", source = source.name(), encoder = encoder.name());
+        let handle = spawn_thread(thread_name, {
+            let shutdown = shutdown.clone();
+            move || {
+                let _guard = span.enter();
+                if let Err(err) = source.start() {
+                    warn!("video source failed to start: {err:#}");
+                    return;
+                }
+                let format = source.format();
+                tracing::debug!(
+                    src_format = ?format,
+                    dst_config = ?encoder.config(),
+                    "video encoder thread start"
+                );
+                let framerate = encoder.config().framerate.unwrap_or(30.0);
+                let interval = Duration::from_secs_f64(1. / framerate);
+                loop {
+                    let start = Instant::now();
+                    if shutdown.is_cancelled() {
+                        debug!("stop video encoder: cancelled");
+                        break;
+                    }
+                    let frame = match source.pop_frame() {
+                        Ok(frame) => frame,
+                        Err(err) => {
+                            warn!("video encoder failed: {err:#}");
+                            break;
+                        }
+                    };
+                    if let Some(frame) = frame {
+                        if let Err(err) = encoder.push_frame(frame) {
+                            warn!("video encoder failed: {err:#}");
+                            break;
+                        };
+                        while let Ok(Some(pkt)) = encoder.pop_packet() {
+                            if let Err(err) = producer.write(pkt) {
+                                warn!("failed to write frame to producer: {err:#}");
+                            }
+                        }
+                    }
+                    std::thread::sleep(interval.saturating_sub(start.elapsed()));
+                }
+                producer.inner.close();
+                if let Err(err) = source.stop() {
+                    warn!("video source failed to stop: {err:#}");
+                }
+                tracing::debug!("video encoder thread stop");
+            }
+        });
+        Self {
+            _thread_handle: handle,
+            shutdown,
+        }
+    }
+
+    pub fn spawn_audio(
+        mut source: Box<dyn AudioSource>,
+        mut encoder: impl AudioEncoderInner,
+        mut producer: hang::TrackProducer,
+        shutdown: CancellationToken,
+    ) -> Self {
+        let sd = shutdown.clone();
+        let name = encoder.name();
+        let thread_name = format!("aenc-{:<4}", name);
+        let span = info_span!("audioenc", %name);
+        let handle = spawn_thread(thread_name, move || {
+            let _guard = span.enter();
+            tracing::debug!(config=?encoder.config(), "audio encoder thread start");
+            let shutdown = sd;
+            // 20ms framing to align with typical Opus config (48kHz → 960 samples/ch)
+            const INTERVAL: Duration = Duration::from_millis(20);
+            let format = source.format();
+            let samples_per_frame = (format.sample_rate / 1000) * INTERVAL.as_millis() as u32;
+            let mut buf = vec![0.0f32; samples_per_frame as usize * format.channel_count as usize];
+            let start = Instant::now();
+            for tick in 0.. {
+                trace!("tick");
+                if shutdown.is_cancelled() {
+                    break;
+                }
+                match source.pop_samples(&mut buf) {
+                    Ok(Some(_n)) => {
+                        // Expect a full frame; if shorter, zero-pad via slice len
+                        if let Err(err) = encoder.push_samples(&buf) {
+                            error!(buf_len = buf.len(), "audio push_samples failed: {err:#}");
+                            break;
+                        }
+                        while let Ok(Some(pkt)) = encoder
+                            .pop_packet()
+                            .inspect_err(|err| warn!("encoder error: {err:#}"))
+                        {
+                            if let Err(err) = producer.write(pkt) {
+                                warn!("failed to write frame to producer: {err:#}");
+                            }
+                        }
+                    }
+                    Ok(None) => {
+                        // keep pacing
+                    }
+                    Err(err) => {
+                        error!("audio source failed: {err:#}");
+                        break;
+                    }
+                }
+                let expected_time = (tick + 1) * INTERVAL;
+                let actual_time = start.elapsed();
+                if actual_time > expected_time {
+                    warn!("audio thread too slow by {:?}", actual_time - expected_time);
+                }
+                let sleep = expected_time.saturating_sub(start.elapsed());
+                if sleep > Duration::ZERO {
+                    std::thread::sleep(sleep);
+                }
+            }
+            // drain
+            while let Ok(Some(pkt)) = encoder.pop_packet() {
+                if let Err(err) = producer.write(pkt) {
+                    warn!("failed to write frame to producer: {err:#}");
+                }
+            }
+            producer.inner.close();
+            tracing::debug!("audio encoder thread stop");
+        });
+        Self {
+            _thread_handle: handle,
+            shutdown,
+        }
+    }
+}
+
+impl Drop for EncoderThread {
+    fn drop(&mut self) {
+        self.shutdown.cancel();
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/subscribe.rs b/third_party/iroh-live/moq-media/src/subscribe.rs
new file mode 100644
index 0000000..8d4be19
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/subscribe.rs
@@ -0,0 +1,712 @@
+use std::{collections::BTreeMap, sync::Arc, time::Duration};
+
+use hang::{
+    Timestamp, TrackConsumer,
+    catalog::{AudioConfig, Catalog, CatalogConsumer, VideoConfig},
+};
+use moq_lite::{BroadcastConsumer, Track};
+use n0_error::{Result, StackResultExt, StdResultExt};
+use n0_future::task::AbortOnDropHandle;
+use n0_watcher::{Watchable, Watcher};
+use tokio::{
+    sync::mpsc::{self, error::TryRecvError},
+    time::Instant,
+};
+use tokio_util::sync::{CancellationToken, DropGuard};
+use tracing::{Span, debug, error, info, info_span, trace, warn};
+
+use crate::{
+    av::{
+        AudioDecoder, AudioSink, AudioSinkHandle, DecodeConfig, DecodedFrame, Decoders,
+        PlaybackConfig, Quality, VideoDecoder, VideoSource,
+    },
+    ffmpeg::util::Rescaler,
+    util::spawn_thread,
+};
+
+const DEFAULT_MAX_LATENCY: Duration = Duration::from_millis(150);
+
+#[derive(derive_more::Debug, Clone)]
+pub struct SubscribeBroadcast {
+    broadcast_name: String,
+    #[debug("BroadcastConsumer")]
+    broadcast: BroadcastConsumer,
+    // catalog_watcher: n0_watcher::Direct<CatalogWrapper>,
+    catalog_watchable: Watchable<CatalogWrapper>,
+    shutdown: CancellationToken,
+    _catalog_task: Arc<AbortOnDropHandle<()>>,
+}
+
+#[derive(Debug, derive_more::PartialEq, derive_more::Eq, Default, Clone, derive_more::Deref)]
+pub struct CatalogWrapper {
+    #[eq(skip)]
+    #[deref]
+    inner: Arc<Catalog>,
+    seq: usize,
+}
+
+impl CatalogWrapper {
+    fn new(inner: Catalog, seq: usize) -> Self {
+        Self {
+            inner: Arc::new(inner),
+            seq,
+        }
+    }
+
+    pub fn video_renditions(&self) -> impl Iterator<Item = &str> {
+        let mut renditions: Vec<_> = self
+            .inner
+            .video
+            .as_ref()
+            .iter()
+            .map(|v| v.renditions.iter())
+            .flatten()
+            .map(|(name, config)| (name.as_str(), config.coded_width))
+            .collect();
+        renditions.sort_by(|a, b| a.1.cmp(&b.1));
+        renditions.into_iter().map(|(name, _w)| name)
+    }
+
+    pub fn audio_renditions(&self) -> impl Iterator<Item = &str> + '_ {
+        self.inner
+            .audio
+            .as_ref()
+            .into_iter()
+            .map(|v| v.renditions.iter())
+            .flatten()
+            .map(|(name, _config)| name.as_str())
+    }
+
+    pub fn select_video_rendition(&self, quality: Quality) -> Result<String> {
+        let video = self.inner.video.as_ref().context("no video published")?;
+        let track_name =
+            select_video_rendition(&video.renditions, quality).context("no video renditions")?;
+        Ok(track_name)
+    }
+
+    pub fn select_audio_rendition(&self, quality: Quality) -> Result<String> {
+        let audio = self.inner.audio.as_ref().context("no video published")?;
+        let track_name =
+            select_audio_rendition(&audio.renditions, quality).context("no video renditions")?;
+        Ok(track_name)
+    }
+}
+
+impl CatalogWrapper {
+    pub fn into_inner(self) -> Arc<Catalog> {
+        self.inner
+    }
+}
+
+impl SubscribeBroadcast {
+    pub async fn new(broadcast_name: String, broadcast: BroadcastConsumer) -> Result<Self> {
+        let shutdown = CancellationToken::new();
+
+        let (catalog_watchable, catalog_task) = {
+            let track = broadcast.subscribe_track(&Catalog::default_track());
+            let mut consumer = CatalogConsumer::new(track);
+            let initial_catalog = consumer
+                .next()
+                .await
+                .std_context("Broadcast closed before receiving catalog")?
+                .context("Catalog track closed before receiving catalog")?;
+            let watchable = Watchable::new(CatalogWrapper::new(initial_catalog, 0));
+
+            let task = tokio::spawn({
+                let shutdown = shutdown.clone();
+                let watchable = watchable.clone();
+                async move {
+                    for seq in 1.. {
+                        match consumer.next().await {
+                            Ok(Some(catalog)) => {
+                                watchable.set(CatalogWrapper::new(catalog, seq)).ok();
+                            }
+                            Ok(None) => {
+                                debug!("subscribed broadcast catalog track ended");
+                                break;
+                            }
+                            Err(err) => {
+                                debug!("subscribed broadcast closed: {err:#}");
+                                break;
+                            }
+                        }
+                    }
+                    shutdown.cancel();
+                }
+            });
+            (watchable, task)
+        };
+        Ok(Self {
+            broadcast_name,
+            broadcast,
+            catalog_watchable,
+            _catalog_task: Arc::new(AbortOnDropHandle::new(catalog_task)),
+            shutdown: CancellationToken::new(),
+        })
+    }
+
+    pub fn broadcast_name(&self) -> &str {
+        &self.broadcast_name
+    }
+
+    pub fn catalog_watcher(&mut self) -> n0_watcher::Direct<CatalogWrapper> {
+        self.catalog_watchable.watch()
+    }
+
+    pub fn catalog(&self) -> CatalogWrapper {
+        self.catalog_watchable.get()
+    }
+
+    pub fn watch_and_listen<D: Decoders>(
+        self,
+        audio_out: impl AudioSink,
+        playback_config: PlaybackConfig,
+    ) -> Result<AvRemoteTrack> {
+        AvRemoteTrack::new::<D>(self, audio_out, playback_config)
+    }
+
+    pub fn watch<D: VideoDecoder>(&self) -> Result<WatchTrack> {
+        self.watch_with::<D>(&Default::default(), Quality::Highest)
+    }
+
+    pub fn watch_with<D: VideoDecoder>(
+        &self,
+        playback_config: &DecodeConfig,
+        quality: Quality,
+    ) -> Result<WatchTrack> {
+        let track_name = self.catalog().select_video_rendition(quality)?;
+        self.watch_rendition::<D>(playback_config, &track_name)
+    }
+
+    pub fn watch_rendition<D: VideoDecoder>(
+        &self,
+        playback_config: &DecodeConfig,
+        track_name: &str,
+    ) -> Result<WatchTrack> {
+        let catalog = self.catalog();
+        let video = catalog.video.as_ref().context("no video published")?;
+        let config = video
+            .renditions
+            .get(track_name)
+            .context("rendition not found")?;
+        let consumer = TrackConsumer::new(
+            self.broadcast.subscribe_track(&Track {
+                name: track_name.to_string(),
+                priority: video.priority,
+            }),
+            DEFAULT_MAX_LATENCY,
+        );
+        let span = info_span!("videodec", %track_name);
+        WatchTrack::from_consumer::<D>(
+            track_name.to_string(),
+            consumer,
+            &config,
+            playback_config,
+            self.shutdown.child_token(),
+            span,
+        )
+    }
+    pub fn listen<D: AudioDecoder>(&self, output: impl AudioSink) -> Result<AudioTrack> {
+        self.listen_with::<D>(Quality::Highest, output)
+    }
+
+    pub fn listen_with<D: AudioDecoder>(
+        &self,
+        quality: Quality,
+        output: impl AudioSink,
+    ) -> Result<AudioTrack> {
+        let track_name = self.catalog().select_audio_rendition(quality)?;
+        self.listen_rendition::<D>(&track_name, output)
+    }
+
+    pub fn listen_rendition<D: AudioDecoder>(
+        &self,
+        name: &str,
+        output: impl AudioSink,
+    ) -> Result<AudioTrack> {
+        let catalog = self.catalog();
+        let audio = catalog.audio.as_ref().context("no audio published")?;
+        let config = audio.renditions.get(name).context("rendition not found")?;
+        let consumer = TrackConsumer::new(
+            self.broadcast.subscribe_track(&Track {
+                name: name.to_string(),
+                priority: audio.priority,
+            }),
+            DEFAULT_MAX_LATENCY,
+        );
+        let span = info_span!("audiodec", %name);
+        AudioTrack::spawn::<D>(
+            name.to_string(),
+            consumer,
+            config.clone(),
+            output,
+            self.shutdown.child_token(),
+            span,
+        )
+    }
+
+    pub fn closed(&self) -> impl Future<Output = ()> + 'static {
+        self.broadcast.closed()
+    }
+
+    pub fn shutdown(&self) {
+        self.shutdown.cancel();
+    }
+}
+
+fn select_rendition<T, P: ToString>(
+    renditions: &BTreeMap<String, T>,
+    order: &[P],
+) -> Option<String> {
+    order
+        .iter()
+        .map(ToString::to_string)
+        .find(|k| renditions.contains_key(k.as_str()))
+        .or_else(|| renditions.keys().next().cloned())
+}
+
+fn select_video_rendition<'a, T>(
+    renditions: &'a BTreeMap<String, T>,
+    q: Quality,
+) -> Option<String> {
+    use crate::av::VideoPreset::*;
+    let order = match q {
+        Quality::Highest => [P1080, P720, P360, P180],
+        Quality::High => [P720, P360, P180, P1080],
+        Quality::Mid => [P360, P180, P720, P1080],
+        Quality::Low => [P180, P360, P720, P1080],
+    };
+
+    select_rendition(renditions, &order)
+}
+
+fn select_audio_rendition<'a, T>(
+    renditions: &'a BTreeMap<String, T>,
+    q: Quality,
+) -> Option<String> {
+    use crate::av::AudioPreset::*;
+    let order = match q {
+        Quality::Highest | Quality::High => [Hq, Lq],
+        Quality::Mid | Quality::Low => [Lq, Hq],
+    };
+    select_rendition(renditions, &order)
+}
+
+pub struct AudioTrack {
+    name: String,
+    handle: Box<dyn AudioSinkHandle>,
+    shutdown_token: CancellationToken,
+    _task_handle: AbortOnDropHandle<()>,
+    _thread_handle: std::thread::JoinHandle<()>,
+}
+
+impl AudioTrack {
+    pub(crate) fn spawn<D: AudioDecoder>(
+        name: String,
+        consumer: TrackConsumer,
+        config: AudioConfig,
+        output: impl AudioSink,
+        shutdown: CancellationToken,
+        span: Span,
+    ) -> Result<Self> {
+        let _guard = span.enter();
+        let (packet_tx, packet_rx) = mpsc::channel(32);
+        let output_format = output.format()?;
+        info!(?config, "audio thread start");
+        let decoder = D::new(&config, output_format)?;
+        let handle = output.handle();
+        let thread_name = format!("adec-{}", name);
+        let thread = spawn_thread(thread_name, {
+            let shutdown = shutdown.clone();
+            let span = span.clone();
+            move || {
+                let _guard = span.enter();
+                if let Err(err) = Self::run_loop(decoder, packet_rx, output, &shutdown) {
+                    error!("audio decoder failed: {err:#}");
+                }
+                info!("audio decoder thread stop");
+            }
+        });
+        let task = tokio::spawn(forward_frames(consumer, packet_tx));
+        Ok(Self {
+            name,
+            handle,
+            shutdown_token: shutdown,
+            _task_handle: AbortOnDropHandle::new(task),
+            _thread_handle: thread,
+        })
+    }
+
+    pub fn stopped(&self) -> impl Future<Output = ()> + 'static {
+        let shutdown_token = self.shutdown_token.clone();
+        async move { shutdown_token.cancelled().await }
+    }
+
+    pub fn rendition(&self) -> &str {
+        &self.name
+    }
+
+    pub fn handle(&self) -> &dyn AudioSinkHandle {
+        self.handle.as_ref()
+    }
+
+    pub(crate) fn run_loop(
+        mut decoder: impl AudioDecoder,
+        mut packet_rx: mpsc::Receiver<hang::Frame>,
+        mut sink: impl AudioSink,
+        shutdown: &CancellationToken,
+    ) -> Result<()> {
+        const INTERVAL: Duration = Duration::from_millis(10);
+        let mut remote_start = None;
+        let loop_start = Instant::now();
+
+        'main: for i in 0.. {
+            let tick = Instant::now();
+
+            if shutdown.is_cancelled() {
+                debug!("stop audio thread: cancelled");
+                break;
+            }
+
+            loop {
+                match packet_rx.try_recv() {
+                    Ok(packet) => {
+                        let remote_start = *remote_start.get_or_insert_with(|| packet.timestamp);
+
+                        if tracing::enabled!(tracing::Level::TRACE) {
+                            let loop_elapsed = tick.duration_since(loop_start);
+                            let remote_elapsed: Duration = packet
+                                .timestamp
+                                .checked_sub(remote_start)
+                                .unwrap_or(Timestamp::ZERO)
+                                .into();
+                            let diff_ms =
+                                (loop_elapsed.as_secs_f32() - remote_elapsed.as_secs_f32()) * 1000.;
+                            trace!(len = packet.payload.num_bytes(), ts=?packet.timestamp, ?loop_elapsed, ?remote_elapsed, ?diff_ms, "recv packet");
+                        }
+
+                        // TODO: Skip outdated packets?
+
+                        if !sink.is_paused() {
+                            decoder.push_packet(packet)?;
+                            if let Some(samples) = decoder.pop_samples()? {
+                                sink.push_samples(samples)?;
+                            }
+                        }
+                    }
+                    Err(TryRecvError::Disconnected) => {
+                        debug!("stop audio thread: packet_rx disconnected");
+                        break 'main;
+                    }
+                    Err(TryRecvError::Empty) => {
+                        trace!("no packet to recv");
+                        break;
+                    }
+                }
+            }
+
+            let target_time = i * INTERVAL;
+            let real_time = Instant::now().duration_since(loop_start);
+            let sleep = target_time.saturating_sub(real_time);
+            if !sleep.is_zero() {
+                std::thread::sleep(sleep);
+            }
+        }
+        shutdown.cancel();
+        Ok(())
+    }
+}
+
+impl Drop for AudioTrack {
+    fn drop(&mut self) {
+        self.shutdown_token.cancel();
+    }
+}
+
+pub struct WatchTrack {
+    video_frames: WatchTrackFrames,
+    handle: WatchTrackHandle,
+}
+
+pub struct WatchTrackHandle {
+    rendition: String,
+    viewport: Watchable<(u32, u32)>,
+    _guard: WatchTrackGuard,
+}
+
+impl WatchTrackHandle {
+    pub fn set_viewport(&self, w: u32, h: u32) {
+        self.viewport.set((w, h)).ok();
+    }
+
+    pub fn rendition(&self) -> &str {
+        &self.rendition
+    }
+}
+
+pub struct WatchTrackFrames {
+    rx: mpsc::Receiver<DecodedFrame>,
+}
+
+impl WatchTrackFrames {
+    pub fn current_frame(&mut self) -> Option<DecodedFrame> {
+        let mut out = None;
+        while let Ok(item) = self.rx.try_recv() {
+            out = Some(item);
+        }
+        out
+    }
+
+    pub async fn next_frame(&mut self) -> Option<DecodedFrame> {
+        if let Some(frame) = self.current_frame() {
+            Some(frame)
+        } else {
+            self.rx.recv().await
+        }
+    }
+}
+
+struct WatchTrackGuard {
+    _shutdown_token_guard: DropGuard,
+    _task_handle: Option<AbortOnDropHandle<()>>,
+    _thread_handle: Option<std::thread::JoinHandle<()>>,
+}
+
+impl WatchTrack {
+    pub fn empty(rendition: impl ToString) -> Self {
+        let (tx, rx) = mpsc::channel(1);
+        let task = tokio::task::spawn(async move {
+            std::future::pending::<()>().await;
+            let _ = tx;
+        });
+        let guard = WatchTrackGuard {
+            _shutdown_token_guard: CancellationToken::new().drop_guard(),
+            _task_handle: Some(AbortOnDropHandle::new(task)),
+            _thread_handle: None,
+        };
+        Self {
+            video_frames: WatchTrackFrames { rx },
+            handle: WatchTrackHandle {
+                rendition: rendition.to_string(),
+                viewport: Default::default(),
+                _guard: guard,
+            },
+        }
+    }
+
+    pub fn from_video_source(
+        rendition: String,
+        shutdown: CancellationToken,
+        mut source: impl VideoSource,
+        decode_config: DecodeConfig,
+    ) -> Self {
+        let viewport = Watchable::new((1u32, 1u32));
+        let (frame_tx, frame_rx) = tokio::sync::mpsc::channel::<DecodedFrame>(2);
+        let thread_name = format!("vpr-{:>4}-{:>4}", source.name(), rendition);
+        let thread = spawn_thread(thread_name, {
+            let mut viewport = viewport.watch();
+            let shutdown = shutdown.clone();
+            move || {
+                // TODO: Make configurable.
+                let fps = 30;
+                let mut rescaler = Rescaler::new(decode_config.pixel_format.to_ffmpeg(), None)
+                    .expect("failed to create rescaler");
+                let frame_duration = Duration::from_secs_f32(1. / fps as f32);
+                if let Err(err) = source.start() {
+                    warn!("Video source failed to start: {err:?}");
+                    return;
+                }
+                let start = Instant::now();
+                for i in 1.. {
+                    // let t = Instant::now();
+                    if shutdown.is_cancelled() {
+                        break;
+                    }
+                    if viewport.update() {
+                        let (w, h) = viewport.peek();
+                        rescaler.set_target_dimensions(*w, *h);
+                    }
+                    match source.pop_frame() {
+                        Ok(Some(frame)) => {
+                            // trace!(t=?t.elapsed(), "pop");
+                            let frame = frame.to_ffmpeg();
+                            let frame = rescaler.process(&frame).expect("rescaler failed");
+                            let frame =
+                                DecodedFrame::from_ffmpeg(frame, frame_duration, start.elapsed());
+                            // trace!(t=?t.elapsed(), "convert");
+                            let _ = frame_tx.blocking_send(frame);
+                            // trace!(t=?t.elapsed(), "send");
+                        }
+                        Ok(None) => {}
+                        Err(_) => break,
+                    }
+                    let expected_time = i * frame_duration;
+                    let actual_time = start.elapsed();
+                    if expected_time > actual_time {
+                        std::thread::sleep(expected_time - actual_time);
+                        // trace!(t=?t.elapsed(), slept=?(actual_time - expected_time), ?expected_time, ?actual_time, "done");
+                    }
+                }
+                if let Err(err) = source.stop() {
+                    warn!("Video source failed to stop: {err:?}");
+                    return;
+                }
+            }
+        });
+        let guard = WatchTrackGuard {
+            _shutdown_token_guard: shutdown.drop_guard(),
+            _task_handle: None,
+            _thread_handle: Some(thread),
+        };
+        WatchTrack {
+            video_frames: WatchTrackFrames { rx: frame_rx },
+            handle: WatchTrackHandle {
+                rendition,
+                viewport,
+                _guard: guard,
+            },
+        }
+    }
+
+    pub(crate) fn from_consumer<D: VideoDecoder>(
+        rendition: String,
+        consumer: TrackConsumer,
+        config: &VideoConfig,
+        playback_config: &DecodeConfig,
+        shutdown: CancellationToken,
+        span: Span,
+    ) -> Result<Self> {
+        let (packet_tx, packet_rx) = mpsc::channel(32);
+        let (frame_tx, frame_rx) = mpsc::channel(32);
+        let viewport = Watchable::new((1u32, 1u32));
+        let viewport_watcher = viewport.watch();
+
+        let _guard = span.enter();
+        debug!(?config, "video decoder start");
+        let decoder = D::new(config, playback_config)?;
+        let thread_name = format!("vdec-{}", rendition);
+        let thread = spawn_thread(thread_name, {
+            let shutdown = shutdown.clone();
+            let span = span.clone();
+            move || {
+                let _guard = span.enter();
+                if let Err(err) =
+                    Self::run_loop(&shutdown, packet_rx, frame_tx, viewport_watcher, decoder)
+                {
+                    error!("video decoder failed: {err:#}");
+                }
+                shutdown.cancel();
+            }
+        });
+        let task = tokio::task::spawn(forward_frames(consumer, packet_tx));
+        let guard = WatchTrackGuard {
+            _shutdown_token_guard: shutdown.drop_guard(),
+            _task_handle: Some(AbortOnDropHandle::new(task)),
+            _thread_handle: Some(thread),
+        };
+        Ok(WatchTrack {
+            video_frames: WatchTrackFrames { rx: frame_rx },
+            handle: WatchTrackHandle {
+                rendition,
+                viewport,
+                _guard: guard,
+            },
+        })
+    }
+
+    pub fn split(self) -> (WatchTrackFrames, WatchTrackHandle) {
+        (self.video_frames, self.handle)
+    }
+
+    pub fn set_viewport(&self, w: u32, h: u32) {
+        self.handle.set_viewport(w, h);
+    }
+
+    pub fn rendition(&self) -> &str {
+        self.handle.rendition()
+    }
+
+    pub fn current_frame(&mut self) -> Option<DecodedFrame> {
+        self.video_frames.current_frame()
+    }
+
+    pub(crate) fn run_loop(
+        shutdown: &CancellationToken,
+        mut input_rx: mpsc::Receiver<hang::Frame>,
+        output_tx: mpsc::Sender<DecodedFrame>,
+        mut viewport_watcher: n0_watcher::Direct<(u32, u32)>,
+        mut decoder: impl VideoDecoder,
+    ) -> Result<(), anyhow::Error> {
+        loop {
+            if shutdown.is_cancelled() {
+                break;
+            }
+            let Some(packet) = input_rx.blocking_recv() else {
+                break;
+            };
+            if viewport_watcher.update() {
+                let (w, h) = viewport_watcher.peek();
+                decoder.set_viewport(*w, *h);
+            }
+            let t = Instant::now();
+            decoder
+                .push_packet(packet)
+                .context("failed to push packet")?;
+            trace!(t=?t.elapsed(), "videodec: push_packet");
+            while let Some(frame) = decoder.pop_frame().context("failed to pop frame")? {
+                trace!(t=?t.elapsed(), "videodec: pop frame");
+                if output_tx.blocking_send(frame).is_err() {
+                    break;
+                }
+                trace!(t=?t.elapsed(), "videodec: tx");
+            }
+        }
+        Ok(())
+    }
+}
+
+async fn forward_frames(mut track: hang::TrackConsumer, sender: mpsc::Sender<hang::Frame>) {
+    loop {
+        let frame = track.read_frame().await;
+        match frame {
+            Ok(Some(frame)) => {
+                if sender.send(frame).await.is_err() {
+                    break;
+                }
+            }
+            Ok(None) => break,
+            Err(err) => {
+                warn!("failed to read frame: {err:?}");
+                break;
+            }
+        }
+    }
+}
+
+pub struct AvRemoteTrack {
+    pub broadcast: SubscribeBroadcast,
+    pub video: Option<WatchTrack>,
+    pub audio: Option<AudioTrack>,
+}
+
+impl AvRemoteTrack {
+    pub fn new<D: Decoders>(
+        broadcast: SubscribeBroadcast,
+        audio_out: impl AudioSink,
+        playback_config: PlaybackConfig,
+    ) -> Result<Self> {
+        let audio = broadcast
+            .listen_with::<D::Audio>(playback_config.quality, audio_out)
+            .inspect_err(|err| tracing::warn!("no audio track: {err}"))
+            .ok();
+        let video = broadcast
+            .watch_with::<D::Video>(&playback_config.decode_config, playback_config.quality)
+            .inspect_err(|err| tracing::warn!("no video track: {err}"))
+            .ok();
+        Ok(Self {
+            broadcast,
+            audio,
+            video,
+        })
+    }
+}
diff --git a/third_party/iroh-live/moq-media/src/util.rs b/third_party/iroh-live/moq-media/src/util.rs
new file mode 100644
index 0000000..0c7f7ca
--- /dev/null
+++ b/third_party/iroh-live/moq-media/src/util.rs
@@ -0,0 +1,12 @@
+/// Spawn a named OS thread and panic if spawning fails.
+pub fn spawn_thread<F, T>(name: impl ToString, f: F) -> std::thread::JoinHandle<T>
+where
+    F: FnOnce() -> T + Send + 'static,
+    T: Send + 'static,
+{
+    let name_str = name.to_string();
+    std::thread::Builder::new()
+        .name(name_str.clone())
+        .spawn(f)
+        .expect(&format!("failed to spawn thread: {}", name_str))
+}
diff --git a/third_party/iroh-live/web-transport-iroh/Cargo.toml b/third_party/iroh-live/web-transport-iroh/Cargo.toml
new file mode 100644
index 0000000..388eaa8
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/Cargo.toml
@@ -0,0 +1,35 @@
+[package]
+name = "web-transport-iroh"
+description = "WebTransport library for Iroh"
+authors = ["Franz Heinzmann <frando@n0.computer>"]
+repository = "https://github.com/n0-computer/iroh-live"
+license = "MIT OR Apache-2.0"
+
+version = "0.1.1"
+edition = "2024"
+
+keywords = ["quic", "http3", "webtransport", "iroh"]
+categories = ["network-programming", "web-programming"]
+
+[dependencies]
+bytes = "1"
+http = "1"
+iroh = "0.96"
+n0-error = "0.1.2"
+n0-future = "0.3.1"
+quinn = { package = "iroh-quinn", version = "0.16" }
+thiserror = "2"
+tokio = { version = "1", default-features = false, features = [
+    "io-util",
+    "macros",
+] }
+tracing = "0.1.41"
+url = "2"
+web-transport-proto = "0.3.0"
+web-transport-trait = "0.3.0"
+
+[dev-dependencies]
+anyhow = "1"
+clap = { version = "4", features = ["derive"] }
+n0-tracing-test = "0.3.0"
+tokio = { version = "1", features = ["full"] }
diff --git a/third_party/iroh-live/web-transport-iroh/README.md b/third_party/iroh-live/web-transport-iroh/README.md
new file mode 100644
index 0000000..40cf516
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/README.md
@@ -0,0 +1,9 @@
+[![crates.io](https://img.shields.io/crates/v/web-transport-quinn)](https://crates.io/crates/web-transport-quinn)
+[![docs.rs](https://img.shields.io/docsrs/web-transport-quinn)](https://docs.rs/web-transport-quinn)
+[![discord](https://img.shields.io/discord/1124083992740761730)](https://discord.gg/FCYF3p99mr)
+
+# web-transport-iiroh
+
+A wrapper around the Iroh API, implementing the [`web-transport-trait`](https://github.com/kixelated/web-transport/tree/main/web-transport-trait) traits.
+
+Note that this does *not* actually implement WebTransport for iroh. Instead, it implements the WebTransport traits on raw iroh QUIC connection. Thus, you can use an iroh connection wherever the `web-transport-trait` traits are expected (i.e. in hang). But there's no actual HTTP/3 WebTransport session being established, we just use the raw iroh QUIC connection directly.
diff --git a/third_party/iroh-live/web-transport-iroh/src/client.rs b/third_party/iroh-live/web-transport-iroh/src/client.rs
new file mode 100644
index 0000000..1b85417
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/client.rs
@@ -0,0 +1,71 @@
+use std::sync::Arc;
+
+use iroh::{EndpointAddr, endpoint::{ConnectOptions, QuicTransportConfig}};
+use url::Url;
+
+use crate::{ALPN_H3, ClientError, Session};
+
+/// A client for connecting to a WebTransport server.
+pub struct Client {
+    endpoint: iroh::Endpoint,
+    config: QuicTransportConfig,
+}
+
+impl Client {
+    pub fn new(endpoint: iroh::Endpoint) -> Self {
+        Self::with_transport_config(endpoint, Default::default())
+    }
+
+    /// Creates a client from an endpoint and a transport config.
+    pub fn with_transport_config(
+        endpoint: iroh::Endpoint,
+        config: QuicTransportConfig,
+    ) -> Self {
+        Self { endpoint, config }
+    }
+
+    /// Connect to a server over QUIC without HTTP/3.
+    pub async fn connect_quic(
+        &self,
+        addr: impl Into<EndpointAddr>,
+        alpn: &[u8],
+    ) -> Result<Session, ClientError> {
+        let conn = self.connect(addr, alpn).await?;
+        Ok(Session::raw(conn))
+    }
+
+    /// Connect with a full HTTP/3 handshake and WebTransport semantics.
+    ///
+    /// Note that the url needs to have a `https:` scheme, otherwise the accepting side will
+    /// fail to accept the connection.
+    pub async fn connect_h3(
+        &self,
+        addr: impl Into<EndpointAddr>,
+        url: Url,
+    ) -> Result<Session, ClientError> {
+        let conn = self.connect(addr, ALPN_H3.as_bytes()).await?;
+        // Connect with the connection we established.
+        Session::connect_h3(conn, url).await
+    }
+
+    async fn connect(
+        &self,
+        addr: impl Into<EndpointAddr>,
+        alpn: &[u8],
+    ) -> Result<iroh::endpoint::Connection, ClientError> {
+        let opts = ConnectOptions::new().with_transport_config(self.config.clone());
+        let conn = self
+            .endpoint
+            .connect_with_opts(addr, alpn, opts)
+            .await
+            .map_err(|err| ClientError::Connect(Arc::new(err.into())))?;
+        let conn = conn
+            .await
+            .map_err(|err| ClientError::Connect(Arc::new(err.into())))?;
+        Ok(conn)
+    }
+
+    pub async fn close(&self) {
+        self.endpoint.close().await;
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/connect.rs b/third_party/iroh-live/web-transport-iroh/src/connect.rs
new file mode 100644
index 0000000..ddd2cd5
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/connect.rs
@@ -0,0 +1,125 @@
+use web_transport_proto::{ConnectRequest, ConnectResponse, VarInt};
+
+use thiserror::Error;
+use url::Url;
+
+#[derive(Error, Debug, Clone)]
+pub enum ConnectError {
+    #[error("quic stream was closed early")]
+    UnexpectedEnd,
+
+    #[error("protocol error: {0}")]
+    ProtoError(#[from] web_transport_proto::ConnectError),
+
+    #[error("connection error")]
+    ConnectionError(#[from] iroh::endpoint::ConnectionError),
+
+    #[error("read error")]
+    ReadError(#[from] quinn::ReadError),
+
+    #[error("write error")]
+    WriteError(#[from] quinn::WriteError),
+
+    #[error("http error status: {0}")]
+    ErrorStatus(http::StatusCode),
+}
+
+pub struct Connect {
+    // The request that was sent by the client.
+    request: ConnectRequest,
+
+    // A reference to the send/recv stream, so we don't close it until dropped.
+    send: quinn::SendStream,
+
+    #[allow(dead_code)]
+    recv: quinn::RecvStream,
+}
+
+impl Connect {
+    pub async fn accept(conn: &iroh::endpoint::Connection) -> Result<Self, ConnectError> {
+        // Accept the stream that will be used to send the HTTP CONNECT request.
+        // If they try to send any other type of HTTP request, we will error out.
+        let (send, mut recv) = conn.accept_bi().await?;
+
+        let request = web_transport_proto::ConnectRequest::read(&mut recv).await?;
+        tracing::debug!("received CONNECT request: {request:?}");
+
+        // The request was successfully decoded, so we can send a response.
+        Ok(Self {
+            request,
+            send,
+            recv,
+        })
+    }
+
+    // Called by the server to send a response to the client.
+    pub async fn respond(&mut self, status: http::StatusCode) -> Result<(), ConnectError> {
+        let resp = ConnectResponse { status };
+
+        tracing::debug!("sending CONNECT response: {resp:?}");
+        resp.write(&mut self.send).await?;
+
+        Ok(())
+    }
+
+    pub async fn open(conn: &iroh::endpoint::Connection, url: Url) -> Result<Self, ConnectError> {
+        // Create a new stream that will be used to send the CONNECT frame.
+        let (mut send, mut recv) = conn.open_bi().await?;
+
+        // Create a new CONNECT request that we'll send using HTTP/3
+        let request = ConnectRequest { url };
+
+        tracing::debug!("sending CONNECT request: {request:?}");
+        request.write(&mut send).await?;
+
+        let response = web_transport_proto::ConnectResponse::read(&mut recv).await?;
+        tracing::debug!("received CONNECT response: {response:?}");
+
+        // Throw an error if we didn't get a 200 OK.
+        if response.status != http::StatusCode::OK {
+            return Err(ConnectError::ErrorStatus(response.status));
+        }
+
+        Ok(Self {
+            request,
+            send,
+            recv,
+        })
+    }
+
+    // The session ID is the stream ID of the CONNECT request.
+    pub fn session_id(&self) -> VarInt {
+        // We gotta convert from the Quinn VarInt to the (forked) WebTransport VarInt.
+        // We don't use the quinn::VarInt because that would mean a quinn dependency in web-transport-proto
+        let stream_id = quinn::VarInt::from(self.send.id());
+        VarInt::try_from(stream_id.into_inner()).unwrap()
+    }
+
+    // The URL in the CONNECT request.
+    pub fn url(&self) -> &Url {
+        &self.request.url
+    }
+
+    pub(super) fn into_inner(self) -> (quinn::SendStream, quinn::RecvStream) {
+        (self.send, self.recv)
+    }
+
+    // Keep reading from the control stream until it's closed.
+    pub(crate) async fn run_closed(self) -> (u32, String) {
+        let (_send, mut recv) = self.into_inner();
+
+        loop {
+            match web_transport_proto::Capsule::read(&mut recv).await {
+                Ok(web_transport_proto::Capsule::CloseWebTransportSession { code, reason }) => {
+                    return (code, reason);
+                }
+                Ok(web_transport_proto::Capsule::Unknown { typ, payload }) => {
+                    tracing::warn!("unknown capsule: type={typ} size={}", payload.len());
+                }
+                Err(_) => {
+                    return (1, "capsule error".to_string());
+                }
+            }
+        }
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/error.rs b/third_party/iroh-live/web-transport-iroh/src/error.rs
new file mode 100644
index 0000000..01b09c5
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/error.rs
@@ -0,0 +1,256 @@
+use std::sync::Arc;
+
+use n0_error::stack_error;
+use thiserror::Error;
+
+use crate::{ConnectError, SettingsError};
+
+/// An error returned when connecting to a WebTransport endpoint.
+#[stack_error(derive, from_sources)]
+#[derive(Clone)]
+pub enum ClientError {
+    #[error("unexpected end of stream")]
+    UnexpectedEnd,
+
+    #[error("failed to connect")]
+    Connect(#[error(source)] Arc<iroh::endpoint::ConnectError>),
+
+    #[error("connection failed")]
+    Connection(#[error(source, std_err)] iroh::endpoint::ConnectionError),
+
+    #[error("failed to write")]
+    WriteError(#[error(source, std_err)] quinn::WriteError),
+
+    #[error("failed to read")]
+    ReadError(#[error(source, std_err)] quinn::ReadError),
+
+    #[error("failed to exchange h3 settings")]
+    SettingsError(#[error(from, source, std_err)] SettingsError),
+
+    #[error("failed to exchange h3 connect")]
+    HttpError(#[error(from, source, std_err)] ConnectError),
+
+    #[error("invalid URL")]
+    InvalidUrl,
+
+    #[error("endpoint failed to bind")]
+    Bind(#[error(source)] Arc<iroh::endpoint::BindError>),
+}
+
+/// An errors returned by [`crate::Session`], split based on if they are underlying QUIC errors or WebTransport errors.
+#[derive(Clone, Error, Debug)]
+pub enum SessionError {
+    #[error("connection error: {0}")]
+    ConnectionError(#[from] iroh::endpoint::ConnectionError),
+
+    #[error("webtransport error: {0}")]
+    WebTransportError(#[from] WebTransportError),
+
+    #[error("send datagram error: {0}")]
+    SendDatagramError(#[from] quinn::SendDatagramError),
+}
+
+/// An error that can occur when reading/writing the WebTransport stream header.
+#[derive(Clone, Error, Debug)]
+pub enum WebTransportError {
+    #[error("closed: code={0} reason={1}")]
+    Closed(u32, String),
+
+    #[error("unknown session")]
+    UnknownSession,
+
+    #[error("read error: {0}")]
+    ReadError(#[from] quinn::ReadExactError),
+
+    #[error("write error: {0}")]
+    WriteError(#[from] quinn::WriteError),
+}
+
+/// An error when writing to [`crate::SendStream`]. Similar to [`quinn::WriteError`].
+#[derive(Clone, Error, Debug)]
+pub enum WriteError {
+    #[error("STOP_SENDING: {0}")]
+    Stopped(u32),
+
+    #[error("invalid STOP_SENDING: {0}")]
+    InvalidStopped(quinn::VarInt),
+
+    #[error("session error: {0}")]
+    SessionError(#[from] SessionError),
+
+    #[error("stream closed")]
+    ClosedStream,
+}
+
+impl From<quinn::WriteError> for WriteError {
+    fn from(e: quinn::WriteError) -> Self {
+        match e {
+            quinn::WriteError::Stopped(code) => {
+                match web_transport_proto::error_from_http3(code.into_inner()) {
+                    Some(code) => WriteError::Stopped(code),
+                    None => WriteError::InvalidStopped(code),
+                }
+            }
+            quinn::WriteError::ClosedStream => WriteError::ClosedStream,
+            quinn::WriteError::ConnectionLost(e) => WriteError::SessionError(e.into()),
+            quinn::WriteError::ZeroRttRejected => unreachable!("0-RTT not supported"),
+        }
+    }
+}
+
+/// An error when reading from [`crate::RecvStream`]. Similar to [`quinn::ReadError`].
+#[derive(Clone, Error, Debug)]
+pub enum ReadError {
+    #[error("session error: {0}")]
+    SessionError(#[from] SessionError),
+
+    #[error("RESET_STREAM: {0}")]
+    Reset(u32),
+
+    #[error("invalid RESET_STREAM: {0}")]
+    InvalidReset(quinn::VarInt),
+
+    #[error("stream already closed")]
+    ClosedStream,
+}
+
+impl From<quinn::ReadError> for ReadError {
+    fn from(value: quinn::ReadError) -> Self {
+        match value {
+            quinn::ReadError::Reset(code) => {
+                match web_transport_proto::error_from_http3(code.into_inner()) {
+                    Some(code) => ReadError::Reset(code),
+                    None => ReadError::InvalidReset(code),
+                }
+            }
+            quinn::ReadError::ConnectionLost(e) => ReadError::SessionError(e.into()),
+            quinn::ReadError::ClosedStream => ReadError::ClosedStream,
+            quinn::ReadError::ZeroRttRejected => unreachable!("0-RTT not supported"),
+        }
+    }
+}
+
+/// An error returned by [`crate::RecvStream::read_exact`]. Similar to [`quinn::ReadExactError`].
+#[derive(Clone, Error, Debug)]
+pub enum ReadExactError {
+    #[error("finished early")]
+    FinishedEarly(usize),
+
+    #[error("read error: {0}")]
+    ReadError(#[from] ReadError),
+}
+
+impl From<quinn::ReadExactError> for ReadExactError {
+    fn from(e: quinn::ReadExactError) -> Self {
+        match e {
+            quinn::ReadExactError::FinishedEarly(size) => ReadExactError::FinishedEarly(size),
+            quinn::ReadExactError::ReadError(e) => ReadExactError::ReadError(e.into()),
+        }
+    }
+}
+
+/// An error returned by [`crate::RecvStream::read_to_end`]. Similar to [`quinn::ReadToEndError`].
+#[derive(Clone, Error, Debug)]
+pub enum ReadToEndError {
+    #[error("too long")]
+    TooLong,
+
+    #[error("read error: {0}")]
+    ReadError(#[from] ReadError),
+}
+
+impl From<quinn::ReadToEndError> for ReadToEndError {
+    fn from(e: quinn::ReadToEndError) -> Self {
+        match e {
+            quinn::ReadToEndError::TooLong => ReadToEndError::TooLong,
+            quinn::ReadToEndError::Read(e) => ReadToEndError::ReadError(e.into()),
+        }
+    }
+}
+
+/// An error indicating the stream was already closed.
+#[derive(Clone, Error, Debug)]
+#[error("stream closed")]
+pub struct ClosedStream;
+
+impl From<quinn::ClosedStream> for ClosedStream {
+    fn from(_: quinn::ClosedStream) -> Self {
+        ClosedStream
+    }
+}
+
+/// An error returned when receiving a new WebTransport session.
+#[stack_error(derive, from_sources)]
+#[derive(Clone)]
+pub enum ServerError {
+    #[error("unexpected end of stream")]
+    UnexpectedEnd,
+
+    #[error("connection failed")]
+    Connection(#[error(source, std_err)] iroh::endpoint::ConnectionError),
+
+    #[error("connection failed during handshake")]
+    Connecting(#[error(source)] Arc<iroh::endpoint::ConnectingError>),
+
+    #[error("failed to write")]
+    WriteError(#[error(source, std_err)] quinn::WriteError),
+
+    #[error("failed to read")]
+    ReadError(#[error(source, std_err)] quinn::ReadError),
+
+    #[error("io error")]
+    IoError(#[error(source)] Arc<std::io::Error>),
+
+    #[error("failed to bind endpoint")]
+    Bind(#[error(source)] Arc<iroh::endpoint::BindError>),
+
+    #[error("failed to exchange h3 connect")]
+    HttpError(#[error(source, from, std_err)] ConnectError),
+
+    #[error("failed to exchange h3 settings")]
+    SettingsError(#[error(source, from, std_err)] SettingsError),
+}
+
+impl web_transport_trait::Error for SessionError {
+    fn session_error(&self) -> Option<(u32, String)> {
+        if let SessionError::WebTransportError(WebTransportError::Closed(code, reason)) = self {
+            return Some((*code, reason.to_string()));
+        }
+
+        None
+    }
+}
+
+impl web_transport_trait::Error for WriteError {
+    fn session_error(&self) -> Option<(u32, String)> {
+        if let WriteError::SessionError(e) = self {
+            return e.session_error();
+        }
+
+        None
+    }
+
+    fn stream_error(&self) -> Option<u32> {
+        match self {
+            WriteError::Stopped(code) => Some(*code),
+            _ => None,
+        }
+    }
+}
+
+impl web_transport_trait::Error for ReadError {
+    fn session_error(&self) -> Option<(u32, String)> {
+        if let ReadError::SessionError(e) = self {
+            return e.session_error();
+        }
+
+        None
+    }
+
+    fn stream_error(&self) -> Option<u32> {
+        match self {
+            ReadError::Reset(code) => Some(*code),
+            _ => None,
+        }
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/lib.rs b/third_party/iroh-live/web-transport-iroh/src/lib.rs
new file mode 100644
index 0000000..b6f6e15
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/lib.rs
@@ -0,0 +1,56 @@
+//! WebTransport is a protocol for client-server communication over QUIC.
+//! It's [available in the browser](https://caniuse.com/webtransport) as an alternative to HTTP and WebSockets.
+//!
+//! WebTransport is layered on top of HTTP/3 which is then layered on top of QUIC.
+//! This library hides that detail and tries to expose only the QUIC API, delegating as much as possible to the underlying implementation.
+//! See the [Quinn documentation](https://docs.rs/quinn/latest/quinn/) for more documentation.
+//!
+//! QUIC provides two primary APIs:
+//!
+//! # Streams
+//! QUIC streams are ordered, reliable, flow-controlled, and optionally bidirectional.
+//! Both endpoints can create and close streams (including an error code) with no overhead.
+//! You can think of them as TCP connections, but shared over a single QUIC connection.
+//!
+//! # Datagrams
+//! QUIC datagrams are unordered, unreliable, and not flow-controlled.
+//! Both endpoints can send datagrams below the MTU size (~1.2kb minimum) and they might arrive out of order or not at all.
+//! They are basically UDP packets, except they are encrypted and congestion controlled.
+//!
+//! # Limitations
+//! WebTransport is able to be pooled with HTTP/3 and multiple WebTransport sessions.
+//! This crate avoids that complexity, doing the bare minimum to support a single WebTransport session that owns the entire QUIC connection.
+//! If you want to support HTTP/3 on the same host/port, you should use another crate (ex. `h3-webtransport`).
+//! If you want to support multiple WebTransport sessions over the same QUIC connection... you should just dial a new QUIC connection instead.
+
+// External
+mod client;
+mod connect;
+mod error;
+mod recv;
+mod send;
+mod server;
+mod session;
+mod settings;
+#[cfg(test)]
+mod tests;
+
+pub use client::*;
+pub use connect::*;
+pub use error::*;
+pub use recv::*;
+pub use send::*;
+pub use server::*;
+pub use session::*;
+pub use settings::*;
+
+/// The HTTP/3 ALPN is required when negotiating a QUIC connection.
+pub const ALPN_H3: &str = "h3";
+
+/// Re-export the http crate because it's in the public API.
+pub use http;
+pub use iroh;
+/// Re-export the underlying QUIC implementation.
+pub use quinn;
+/// Re-export the generic WebTransport implementation.
+pub use web_transport_trait as generic;
diff --git a/third_party/iroh-live/web-transport-iroh/src/recv.rs b/third_party/iroh-live/web-transport-iroh/src/recv.rs
new file mode 100644
index 0000000..1b28e64
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/recv.rs
@@ -0,0 +1,111 @@
+use std::{
+    io,
+    pin::Pin,
+    task::{Context, Poll},
+};
+
+use bytes::Bytes;
+
+use crate::{ReadError, ReadExactError, ReadToEndError, SessionError};
+
+/// A stream that can be used to recieve bytes. See [`quinn::RecvStream`].
+#[derive(Debug)]
+pub struct RecvStream {
+    inner: quinn::RecvStream,
+}
+
+impl RecvStream {
+    pub(crate) fn new(stream: quinn::RecvStream) -> Self {
+        Self { inner: stream }
+    }
+
+    /// Tell the other end to stop sending data with the given error code. See [`quinn::RecvStream::stop`].
+    /// This is a u32 with WebTransport since it shares the error space with HTTP/3.
+    pub fn stop(&mut self, code: u32) -> Result<(), quinn::ClosedStream> {
+        let code = web_transport_proto::error_to_http3(code);
+        let code = quinn::VarInt::try_from(code).unwrap();
+        self.inner.stop(code)
+    }
+
+    // Unfortunately, we have to wrap ReadError for a bunch of functions.
+
+    /// Read some data into the buffer and return the amount read. See [`quinn::RecvStream::read`].
+    pub async fn read(&mut self, buf: &mut [u8]) -> Result<Option<usize>, ReadError> {
+        self.inner.read(buf).await.map_err(Into::into)
+    }
+
+    /// Fill the entire buffer with data. See [`quinn::RecvStream::read_exact`].
+    pub async fn read_exact(&mut self, buf: &mut [u8]) -> Result<(), ReadExactError> {
+        self.inner.read_exact(buf).await.map_err(Into::into)
+    }
+
+    /// Read a chunk of data from the stream. See [`quinn::RecvStream::read_chunk`].
+    pub async fn read_chunk(
+        &mut self,
+        max_length: usize,
+    ) -> Result<Option<quinn::Chunk>, ReadError> {
+        self.inner
+            .read_chunk(max_length)
+            .await
+            .map_err(Into::into)
+    }
+
+    /// Read chunks of data from the stream. See [`quinn::RecvStream::read_chunks`].
+    pub async fn read_chunks(&mut self, bufs: &mut [Bytes]) -> Result<Option<usize>, ReadError> {
+        self.inner.read_chunks(bufs).await.map_err(Into::into)
+    }
+
+    /// Read until the end of the stream or the limit is hit. See [`quinn::RecvStream::read_to_end`].
+    pub async fn read_to_end(&mut self, size_limit: usize) -> Result<Vec<u8>, ReadToEndError> {
+        self.inner.read_to_end(size_limit).await.map_err(Into::into)
+    }
+
+    /// Block until the stream has been reset and return the error code. See [`quinn::RecvStream::received_reset`].
+    ///
+    /// Unlike Quinn, this returns a SessionError, not a ResetError, because 0-RTT is not supported.
+    pub async fn received_reset(&mut self) -> Result<Option<u32>, SessionError> {
+        match self.inner.received_reset().await {
+            Ok(None) => Ok(None),
+            Ok(Some(code)) => Ok(Some(
+                web_transport_proto::error_from_http3(code.into_inner()).unwrap(),
+            )),
+            Err(quinn::ResetError::ConnectionLost(e)) => Err(e.into()),
+            Err(quinn::ResetError::ZeroRttRejected) => unreachable!("0-RTT not supported"),
+        }
+    }
+
+    // We purposely don't expose the stream ID or 0RTT because it's not valid with WebTransport
+}
+
+impl tokio::io::AsyncRead for RecvStream {
+    fn poll_read(
+        mut self: Pin<&mut Self>,
+        cx: &mut Context<'_>,
+        buf: &mut tokio::io::ReadBuf,
+    ) -> Poll<io::Result<()>> {
+        Pin::new(&mut self.inner).poll_read(cx, buf)
+    }
+}
+
+impl web_transport_trait::RecvStream for RecvStream {
+    type Error = ReadError;
+
+    fn stop(&mut self, code: u32) {
+        Self::stop(self, code).ok();
+    }
+
+    async fn read(&mut self, dst: &mut [u8]) -> Result<Option<usize>, Self::Error> {
+        self.read(dst).await
+    }
+
+    async fn read_chunk(&mut self, max: usize) -> Result<Option<Bytes>, Self::Error> {
+        self.read_chunk(max)
+            .await
+            .map(|r| r.map(|chunk| chunk.bytes))
+    }
+
+    async fn closed(&mut self) -> Result<(), Self::Error> {
+        self.received_reset().await?;
+        Ok(())
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/send.rs b/third_party/iroh-live/web-transport-iroh/src/send.rs
new file mode 100644
index 0000000..3dfd764
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/send.rs
@@ -0,0 +1,142 @@
+use std::{
+    io,
+    pin::Pin,
+    task::{Context, Poll},
+};
+
+use bytes::{Buf, Bytes};
+
+use crate::{ClosedStream, SessionError, WriteError};
+
+/// A stream that can be used to send bytes. See [`quinn::SendStream`].
+///
+/// This wrapper is mainly needed for error codes, which is unfortunate.
+/// WebTransport uses u32 error codes and they're mapped in a reserved HTTP/3 error space.
+#[derive(Debug)]
+pub struct SendStream {
+    stream: quinn::SendStream,
+}
+
+impl SendStream {
+    pub(crate) fn new(stream: quinn::SendStream) -> Self {
+        Self { stream }
+    }
+
+    /// Abruptly reset the stream with the provided error code. See [`quinn::SendStream::reset`].
+    /// This is a u32 with WebTransport because we share the error space with HTTP/3.
+    pub fn reset(&mut self, code: u32) -> Result<(), ClosedStream> {
+        let code = web_transport_proto::error_to_http3(code);
+        let code = quinn::VarInt::try_from(code).unwrap();
+        self.stream.reset(code).map_err(Into::into)
+    }
+
+    /// Wait until the stream has been stopped and return the error code. See [`quinn::SendStream::stopped`].
+    ///
+    /// Unlike Quinn, this returns None if the code is not a valid WebTransport error code.
+    /// Also unlike Quinn, this returns a SessionError, not a StoppedError, because 0-RTT is not supported.
+    pub async fn stopped(&mut self) -> Result<Option<u32>, SessionError> {
+        match self.stream.stopped().await {
+            Ok(Some(code)) => Ok(web_transport_proto::error_from_http3(code.into_inner())),
+            Ok(None) => Ok(None),
+            Err(quinn::StoppedError::ConnectionLost(e)) => Err(e.into()),
+            Err(quinn::StoppedError::ZeroRttRejected) => unreachable!("0-RTT not supported"),
+        }
+    }
+
+    // Unfortunately, we have to wrap WriteError for a bunch of functions.
+
+    /// Write some data to the stream, returning the size written. See [`quinn::SendStream::write`].
+    pub async fn write(&mut self, buf: &[u8]) -> Result<usize, WriteError> {
+        self.stream.write(buf).await.map_err(Into::into)
+    }
+
+    /// Write all of the data to the stream. See [`quinn::SendStream::write_all`].
+    pub async fn write_all(&mut self, buf: &[u8]) -> Result<(), WriteError> {
+        self.stream.write_all(buf).await.map_err(Into::into)
+    }
+
+    /// Write chunks of data to the stream. See [`quinn::SendStream::write_chunks`].
+    pub async fn write_chunks(&mut self, bufs: &mut [Bytes]) -> Result<quinn::Written, WriteError> {
+        self.stream.write_chunks(bufs).await.map_err(Into::into)
+    }
+
+    /// Write a chunk of data to the stream. See [`quinn::SendStream::write_chunk`].
+    pub async fn write_chunk(&mut self, buf: Bytes) -> Result<(), WriteError> {
+        self.stream.write_chunk(buf).await.map_err(Into::into)
+    }
+
+    /// Write all of the chunks of data to the stream. See [`quinn::SendStream::write_all_chunks`].
+    pub async fn write_all_chunks(&mut self, bufs: &mut [Bytes]) -> Result<(), WriteError> {
+        self.stream.write_all_chunks(bufs).await.map_err(Into::into)
+    }
+
+    /// Mark the stream as finished, such that no more data can be written. See [`quinn::SendStream::finish`].
+    pub fn finish(&mut self) -> Result<(), ClosedStream> {
+        self.stream.finish().map_err(Into::into)
+    }
+
+    pub fn set_priority(&self, order: i32) -> Result<(), ClosedStream> {
+        self.stream.set_priority(order).map_err(Into::into)
+    }
+
+    pub fn priority(&self) -> Result<i32, ClosedStream> {
+        self.stream.priority().map_err(Into::into)
+    }
+}
+
+impl tokio::io::AsyncWrite for SendStream {
+    fn poll_write(
+        mut self: Pin<&mut Self>,
+        cx: &mut Context<'_>,
+        buf: &[u8],
+    ) -> Poll<io::Result<usize>> {
+        // We have to use this syntax because quinn added its own poll_write method.
+        tokio::io::AsyncWrite::poll_write(Pin::new(&mut self.stream), cx, buf)
+    }
+
+    fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll<io::Result<()>> {
+        Pin::new(&mut self.stream).poll_flush(cx)
+    }
+
+    fn poll_shutdown(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll<io::Result<()>> {
+        Pin::new(&mut self.stream).poll_shutdown(cx)
+    }
+}
+
+impl web_transport_trait::SendStream for SendStream {
+    type Error = WriteError;
+
+    fn set_priority(&mut self, order: u8) {
+        self.stream.set_priority(order.into()).ok();
+    }
+
+    fn reset(&mut self, code: u32) {
+        Self::reset(self, code).ok();
+    }
+
+    fn finish(&mut self) -> Result<(), Self::Error> {
+        Self::finish(self).map_err(|_| WriteError::ClosedStream)?;
+        Ok(())
+    }
+
+    async fn write(&mut self, buf: &[u8]) -> Result<usize, Self::Error> {
+        Self::write(self, buf).await
+    }
+
+    async fn write_buf<B: Buf + Send>(&mut self, buf: &mut B) -> Result<usize, Self::Error> {
+        // This can avoid making a copy when Buf is Bytes, as Quinn will allocate anyway.
+        let size = buf.chunk().len();
+        let chunk = buf.copy_to_bytes(size);
+        self.write_chunk(chunk).await?;
+        Ok(size)
+    }
+
+    async fn write_chunk(&mut self, chunk: Bytes) -> Result<(), Self::Error> {
+        self.write_chunk(chunk).await
+    }
+
+    async fn closed(&mut self) -> Result<(), Self::Error> {
+        self.stopped().await?;
+        Ok(())
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/server.rs b/third_party/iroh-live/web-transport-iroh/src/server.rs
new file mode 100644
index 0000000..bb197f9
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/server.rs
@@ -0,0 +1,76 @@
+use url::Url;
+
+use crate::{Connect, ServerError, Session, Settings};
+
+/// A QUIC-only WebTransport handshake, awaiting server decision.
+pub struct QuicRequest {
+    conn: iroh::endpoint::Connection,
+}
+
+/// An H3 WebTransport handshake, SETTINGS exchanged and CONNECT accepted,
+/// awaiting server decision (respond OK / reject).
+pub struct H3Request {
+    conn: iroh::endpoint::Connection,
+    settings: Settings,
+    connect: Connect,
+}
+
+impl QuicRequest {
+    /// Accept a new QUIC-only WebTransport session from a client.
+    pub fn accept(conn: iroh::endpoint::Connection) -> Self {
+        Self { conn }
+    }
+
+    pub fn conn(&self) -> &iroh::endpoint::Connection {
+        &self.conn
+    }
+
+    /// Accept the session.
+    pub fn ok(self) -> Session {
+        Session::raw(self.conn)
+    }
+
+    /// Reject the session.
+    pub fn close(self, status: http::StatusCode) {
+        self.conn
+            .close(status.as_u16().into(), status.as_str().as_bytes());
+    }
+}
+
+impl H3Request {
+    /// Accept a new H3 WebTransport session from a client.
+    pub async fn accept(conn: iroh::endpoint::Connection) -> Result<Self, ServerError> {
+        // Perform the H3 handshake by sending/receiving SETTINGS frames.
+        let settings = Settings::connect(&conn).await?;
+
+        // Accept the CONNECT request but don't send a response yet.
+        let connect = Connect::accept(&conn).await?;
+
+        Ok(Self {
+            conn,
+            settings,
+            connect,
+        })
+    }
+
+    /// Returns the URL provided by the client.
+    pub fn url(&self) -> &Url {
+        self.connect.url()
+    }
+
+    pub fn conn(&self) -> &iroh::endpoint::Connection {
+        &self.conn
+    }
+
+    /// Accept the session, returning a 200 OK.
+    pub async fn ok(mut self) -> Result<Session, ServerError> {
+        self.connect.respond(http::StatusCode::OK).await?;
+        Ok(Session::new_h3(self.conn, self.settings, self.connect))
+    }
+
+    /// Reject the session, returning your favorite HTTP status code.
+    pub async fn close(mut self, status: http::StatusCode) -> Result<(), ServerError> {
+        self.connect.respond(status).await?;
+        Ok(())
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/session.rs b/third_party/iroh-live/web-transport-iroh/src/session.rs
new file mode 100644
index 0000000..2faff1c
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/session.rs
@@ -0,0 +1,540 @@
+use std::{
+    fmt,
+    future::{Future, poll_fn},
+    io::Cursor,
+    ops::Deref,
+    pin::Pin,
+    sync::{Arc, Mutex},
+    task::{Context, Poll, ready},
+};
+
+use bytes::{Bytes, BytesMut};
+use iroh::endpoint::Connection;
+use n0_future::{
+    FuturesUnordered,
+    stream::{Stream, StreamExt},
+};
+use url::Url;
+
+use crate::{
+    ClientError, Connect, RecvStream, SendStream, SessionError, Settings, WebTransportError,
+};
+
+use web_transport_proto::{Frame, StreamUni, VarInt};
+
+/// An established WebTransport session, acting like a full QUIC connection. See [`iroh::endpoint::Connection`].
+///
+/// It is important to remember that WebTransport is layered on top of QUIC:
+///   1. Each stream starts with a few bytes identifying the stream type and session ID.
+///   2. Errors codes are encoded with the session ID, so they aren't full QUIC error codes.
+///   3. Stream IDs may have gaps in them, used by HTTP/3 transparant to the application.
+///
+/// Deref is used to expose non-overloaded methods on [`iroh::endpoint::Connection`].
+/// These should be safe to use with WebTransport, but file a PR if you find one that isn't.
+#[derive(Clone)]
+pub struct Session {
+    conn: Connection,
+    h3: Option<H3SessionState>,
+}
+
+impl Session {
+    /// Create a new session from a raw QUIC connection and a URL.
+    ///
+    /// This is used to pretend like a QUIC connection is a WebTransport session.
+    /// It's a hack, but it makes it much easier to support WebTransport and raw QUIC simultaneously.
+    pub fn raw(conn: Connection) -> Self {
+        Self { conn, h3: None }
+    }
+
+    /// Connect using an established QUIC connection if you want to create the connection yourself.
+    /// This will only work with a brand new QUIC connection using the HTTP/3 ALPN.
+    pub async fn connect_h3(conn: Connection, url: Url) -> Result<Session, ClientError> {
+        // Perform the H3 handshake by sending/reciving SETTINGS frames.
+        let settings = Settings::connect(&conn).await?;
+
+        // Send the HTTP/3 CONNECT request.
+        let connect = Connect::open(&conn, url).await?;
+
+        Ok(Self::new_h3(conn, settings, connect))
+    }
+
+    pub fn new_h3(conn: Connection, settings: Settings, connect: Connect) -> Self {
+        let h3 = H3SessionState::connect(conn.clone(), settings, &connect);
+        let this = Session { conn, h3: Some(h3) };
+        // Run a background task to check if the connect stream is closed.
+        let this2 = this.clone();
+        tokio::spawn(async move {
+            let (code, reason) = connect.run_closed().await;
+            if this2.conn().close_reason().is_none() {
+                // TODO We shouldn't be closing the QUIC connection with the same error.
+                this2.close(code, reason.as_bytes());
+            }
+        });
+        this
+    }
+
+    pub fn conn(&self) -> &Connection {
+        &self.conn
+    }
+
+    pub fn url(&self) -> Option<&Url> {
+        self.h3.as_ref().map(|s| &s.url)
+    }
+
+    /// Accept a new unidirectional stream. See [`iroh::endpoint::Connection::accept_uni`].
+    pub async fn accept_uni(&self) -> Result<RecvStream, SessionError> {
+        if let Some(h3) = &self.h3 {
+            poll_fn(|cx| h3.accept.lock().unwrap().poll_accept_uni(cx)).await
+        } else {
+            self.conn
+                .accept_uni()
+                .await
+                .map(RecvStream::new)
+                .map_err(Into::into)
+        }
+    }
+
+    /// Accept a new bidirectional stream. See [`iroh::endpoint::Connection::accept_bi`].
+    pub async fn accept_bi(&self) -> Result<(SendStream, RecvStream), SessionError> {
+        if let Some(h3) = &self.h3 {
+            poll_fn(|cx| h3.accept.lock().unwrap().poll_accept_bi(cx)).await
+        } else {
+            self.conn
+                .accept_bi()
+                .await
+                .map(|(send, recv)| (SendStream::new(send), RecvStream::new(recv)))
+                .map_err(Into::into)
+        }
+    }
+
+    /// Open a new unidirectional stream. See [`iroh::endpoint::Connection::open_uni`].
+    pub async fn open_uni(&self) -> Result<SendStream, SessionError> {
+        let mut send = self.conn.open_uni().await?;
+
+        if let Some(h3) = self.h3.as_ref() {
+            write_full_with_max_prio(&mut send, &h3.header_uni).await?;
+        }
+
+        Ok(SendStream::new(send))
+    }
+
+    /// Open a new bidirectional stream. See [`iroh::endpoint::Connection::open_bi`].
+    pub async fn open_bi(&self) -> Result<(SendStream, RecvStream), SessionError> {
+        let (mut send, recv) = self.conn.open_bi().await?;
+
+        if let Some(h3) = self.h3.as_ref() {
+            write_full_with_max_prio(&mut send, &h3.header_bi).await?;
+        }
+
+        Ok((SendStream::new(send), RecvStream::new(recv)))
+    }
+
+    /// Asynchronously receives an application datagram from the remote peer.
+    ///
+    /// This method is used to receive an application datagram sent by the remote
+    /// peer over the connection.
+    /// It waits for a datagram to become available and returns the received bytes.
+    pub async fn read_datagram(&self) -> Result<Bytes, SessionError> {
+        let mut datagram = self
+            .conn
+            .read_datagram()
+            .await
+            .map_err(SessionError::from)?;
+
+        let datagram = if let Some(h3) = self.h3.as_ref() {
+            let mut cursor = Cursor::new(&datagram);
+
+            // We have to check and strip the session ID from the datagram.
+            let actual_id =
+                VarInt::decode(&mut cursor).map_err(|_| WebTransportError::UnknownSession)?;
+            if actual_id != h3.session_id {
+                return Err(WebTransportError::UnknownSession.into());
+            }
+
+            // Return the datagram without the session ID.
+            let datagram = datagram.split_off(cursor.position() as usize);
+            datagram
+        } else {
+            datagram
+        };
+
+        Ok(datagram)
+    }
+
+    /// Sends an application datagram to the remote peer.
+    ///
+    /// Datagrams are unreliable and may be dropped or delivered out of order.
+    /// The data must be smaller than [`max_datagram_size`](Self::max_datagram_size).
+    pub fn send_datagram(&self, data: Bytes) -> Result<(), SessionError> {
+        let datagram = if let Some(h3) = self.h3.as_ref() {
+            // Unfortunately, we need to allocate/copy each datagram because of the Quinn API.
+            // Pls go +1 if you care: https://github.com/quinn-rs/quinn/issues/1724
+            let mut buf = BytesMut::with_capacity(h3.header_datagram.len() + data.len());
+            // Prepend the datagram with the header indicating the session ID.
+            buf.extend_from_slice(&h3.header_datagram);
+            buf.extend_from_slice(&data);
+            buf.into()
+        } else {
+            data
+        };
+
+        self.conn.send_datagram(datagram)?;
+
+        Ok(())
+    }
+
+    /// Computes the maximum size of datagrams that may be passed to
+    /// [`send_datagram`](Self::send_datagram).
+    pub fn max_datagram_size(&self) -> usize {
+        let mtu = self
+            .conn
+            .max_datagram_size()
+            .expect("datagram support is required");
+        if let Some(h3) = self.h3.as_ref() {
+            mtu.saturating_sub(h3.header_datagram.len())
+        } else {
+            mtu
+        }
+    }
+
+    /// Immediately close the connection with an error code and reason. See [`iroh::endpoint::Connection::close`].
+    pub fn close(&self, code: u32, reason: &[u8]) {
+        let code = if self.h3.is_some() {
+            web_transport_proto::error_to_http3(code)
+                .try_into()
+                .unwrap()
+        } else {
+            code.into()
+        };
+
+        self.conn.close(code, reason)
+    }
+
+    /// Wait until the session is closed, returning the error. See [`iroh::endpoint::Connection::closed`].
+    pub async fn closed(&self) -> SessionError {
+        self.conn.closed().await.into()
+    }
+
+    /// Return why the session was closed, or None if it's not closed. See [`iroh::endpoint::Connection::close_reason`].
+    pub fn close_reason(&self) -> Option<SessionError> {
+        self.conn.close_reason().map(Into::into)
+    }
+}
+
+async fn write_full_with_max_prio(
+    send: &mut quinn::SendStream,
+    buf: &[u8],
+) -> Result<(), SessionError> {
+    // Set the stream priority to max and then write the stream header.
+    // Otherwise the application could write data with lower priority than the header, resulting in queuing.
+    // Also the header is very important for determining the session ID without reliable reset.
+    send.set_priority(i32::MAX).ok();
+    let res = match send.write_all(buf).await {
+        Ok(_) => Ok(()),
+        Err(quinn::WriteError::ConnectionLost(err)) => Err(err.into()),
+        Err(err) => Err(WebTransportError::WriteError(err).into()),
+    };
+    // Reset the stream priority back to the default of 0.
+    send.set_priority(0).ok();
+    res
+}
+
+impl Deref for Session {
+    type Target = Connection;
+
+    fn deref(&self) -> &Self::Target {
+        &self.conn
+    }
+}
+
+impl fmt::Debug for Session {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        self.conn.fmt(f)
+    }
+}
+
+impl PartialEq for Session {
+    fn eq(&self, other: &Self) -> bool {
+        self.conn.stable_id() == other.conn.stable_id()
+    }
+}
+
+impl Eq for Session {}
+
+#[derive(Clone)]
+struct H3SessionState {
+    url: Url,
+    // The session ID, as determined by the stream ID of the connect request.
+    session_id: VarInt,
+    // Cache the headers in front of each stream we open.
+    header_uni: Vec<u8>,
+    header_bi: Vec<u8>,
+    header_datagram: Vec<u8>,
+
+    // Keep a reference to the settings and connect stream to avoid closing them until dropped.
+    #[allow(dead_code)]
+    settings: Arc<Settings>,
+    // The accept logic is stateful, so use an Arc<Mutex> to share it.
+    accept: Arc<Mutex<H3SessionAccept>>,
+}
+
+impl H3SessionState {
+    fn connect(conn: Connection, settings: Settings, connect: &Connect) -> Self {
+        // The session ID is the stream ID of the CONNECT request.
+        let session_id = connect.session_id();
+
+        // Cache the tiny header we write in front of each stream we open.
+        let mut header_uni = Vec::new();
+        StreamUni::WEBTRANSPORT.encode(&mut header_uni);
+        session_id.encode(&mut header_uni);
+
+        let mut header_bi = Vec::new();
+        Frame::WEBTRANSPORT.encode(&mut header_bi);
+        session_id.encode(&mut header_bi);
+
+        let mut header_datagram = Vec::new();
+        session_id.encode(&mut header_datagram);
+
+        // Accept logic is stateful, so use an Arc<Mutex> to share it.
+        let accept = H3SessionAccept::new(conn, session_id);
+        Self {
+            url: connect.url().clone(),
+            session_id,
+            header_uni,
+            header_bi,
+            header_datagram,
+            settings: Arc::new(settings),
+            accept: Arc::new(Mutex::new(accept)),
+        }
+    }
+}
+
+// Type aliases just so clippy doesn't complain about the complexity.
+type AcceptUni =
+    dyn Stream<Item = Result<quinn::RecvStream, iroh::endpoint::ConnectionError>> + Send;
+type AcceptBi = dyn Stream<Item = Result<(quinn::SendStream, quinn::RecvStream), iroh::endpoint::ConnectionError>>
+    + Send;
+type PendingUni = dyn Future<Output = Result<(StreamUni, quinn::RecvStream), SessionError>> + Send;
+type PendingBi = dyn Future<Output = Result<Option<(quinn::SendStream, quinn::RecvStream)>, SessionError>>
+    + Send;
+
+// Logic just for accepting streams, which is annoying because of the stream header.
+pub struct H3SessionAccept {
+    session_id: VarInt,
+
+    // We also need to keep a reference to the qpack streams if the endpoint (incorrectly) creates them.
+    // Again, this is just so they don't get closed until we drop the session.
+    qpack_encoder: Option<quinn::RecvStream>,
+    qpack_decoder: Option<quinn::RecvStream>,
+
+    accept_uni: Pin<Box<AcceptUni>>,
+    accept_bi: Pin<Box<AcceptBi>>,
+
+    // Keep track of work being done to read/write the WebTransport stream header.
+    pending_uni: FuturesUnordered<Pin<Box<PendingUni>>>,
+    pending_bi: FuturesUnordered<Pin<Box<PendingBi>>>,
+}
+
+impl H3SessionAccept {
+    pub(crate) fn new(conn: Connection, session_id: VarInt) -> Self {
+        // Create a stream that just outputs new streams, so it's easy to call from poll.
+        let accept_uni = Box::pin(n0_future::stream::unfold(conn.clone(), |conn| async {
+            Some((conn.accept_uni().await, conn))
+        }));
+
+        let accept_bi = Box::pin(n0_future::stream::unfold(conn, |conn| async {
+            Some((conn.accept_bi().await, conn))
+        }));
+
+        Self {
+            session_id,
+
+            qpack_decoder: None,
+            qpack_encoder: None,
+
+            accept_uni,
+            accept_bi,
+
+            pending_uni: FuturesUnordered::new(),
+            pending_bi: FuturesUnordered::new(),
+        }
+    }
+
+    // This is poll-based because we accept and decode streams in parallel.
+    // In async land I would use tokio::JoinSet, but that requires a runtime.
+    // It's better to use FuturesUnordered instead because it's agnostic.
+    pub fn poll_accept_uni(
+        &mut self,
+        cx: &mut Context<'_>,
+    ) -> Poll<Result<RecvStream, SessionError>> {
+        loop {
+            // Accept any new streams.
+            if let Poll::Ready(Some(res)) = self.accept_uni.poll_next(cx) {
+                // Start decoding the header and add the future to the list of pending streams.
+                let recv = res?;
+                let pending = Self::decode_uni(recv, self.session_id);
+                self.pending_uni.push(Box::pin(pending));
+
+                continue;
+            }
+
+            // Poll the list of pending streams.
+            let (typ, recv) = match ready!(self.pending_uni.poll_next(cx)) {
+                Some(Ok(res)) => res,
+                Some(Err(err)) => {
+                    // Ignore the error, the stream was probably reset early.
+                    tracing::warn!("failed to decode unidirectional stream: {err:?}");
+                    continue;
+                }
+                None => return Poll::Pending,
+            };
+
+            // Decide if we keep looping based on the type.
+            match typ {
+                StreamUni::WEBTRANSPORT => {
+                    let recv = RecvStream::new(recv);
+                    return Poll::Ready(Ok(recv));
+                }
+                StreamUni::QPACK_DECODER => {
+                    self.qpack_decoder = Some(recv);
+                }
+                StreamUni::QPACK_ENCODER => {
+                    self.qpack_encoder = Some(recv);
+                }
+                _ => {
+                    // ignore unknown streams
+                    tracing::debug!("ignoring unknown unidirectional stream: {typ:?}");
+                }
+            }
+        }
+    }
+
+    // Reads the stream header, returning the stream type.
+    async fn decode_uni(
+        mut recv: quinn::RecvStream,
+        expected_session: VarInt,
+    ) -> Result<(StreamUni, quinn::RecvStream), SessionError> {
+        // Read the VarInt at the start of the stream.
+        let typ = VarInt::read(&mut recv)
+            .await
+            .map_err(|_| WebTransportError::UnknownSession)?;
+        let typ = StreamUni(typ);
+
+        if typ == StreamUni::WEBTRANSPORT {
+            // Read the session_id and validate it
+            let session_id = VarInt::read(&mut recv)
+                .await
+                .map_err(|_| WebTransportError::UnknownSession)?;
+            if session_id != expected_session {
+                return Err(WebTransportError::UnknownSession.into());
+            }
+        }
+
+        // We need to keep a reference to the qpack streams if the endpoint (incorrectly) creates them, so return everything.
+        Ok((typ, recv))
+    }
+
+    pub fn poll_accept_bi(
+        &mut self,
+        cx: &mut Context<'_>,
+    ) -> Poll<Result<(SendStream, RecvStream), SessionError>> {
+        loop {
+            // Accept any new streams.
+            if let Poll::Ready(Some(res)) = self.accept_bi.poll_next(cx) {
+                // Start decoding the header and add the future to the list of pending streams.
+                let (send, recv) = res?;
+                let pending = Self::decode_bi(send, recv, self.session_id);
+                self.pending_bi.push(Box::pin(pending));
+
+                continue;
+            }
+
+            // Poll the list of pending streams.
+            let res = match ready!(self.pending_bi.poll_next(cx)) {
+                Some(Ok(res)) => res,
+                Some(Err(err)) => {
+                    // Ignore the error, the stream was probably reset early.
+                    tracing::warn!("failed to decode bidirectional stream: {err:?}");
+                    continue;
+                }
+                None => return Poll::Pending,
+            };
+
+            if let Some((send, recv)) = res {
+                // Wrap the streams in our own types for correct error codes.
+                let send = SendStream::new(send);
+                let recv = RecvStream::new(recv);
+                return Poll::Ready(Ok((send, recv)));
+            }
+
+            // Keep looping if it's a stream we want to ignore.
+        }
+    }
+
+    // Reads the stream header, returning Some if it's a WebTransport stream.
+    async fn decode_bi(
+        send: quinn::SendStream,
+        mut recv: quinn::RecvStream,
+        expected_session: VarInt,
+    ) -> Result<Option<(quinn::SendStream, quinn::RecvStream)>, SessionError> {
+        let typ = VarInt::read(&mut recv)
+            .await
+            .map_err(|_| WebTransportError::UnknownSession)?;
+        if Frame(typ) != Frame::WEBTRANSPORT {
+            tracing::debug!("ignoring unknown bidirectional stream: {typ:?}");
+            return Ok(None);
+        }
+
+        // Read the session ID and validate it.
+        let session_id = VarInt::read(&mut recv)
+            .await
+            .map_err(|_| WebTransportError::UnknownSession)?;
+        if session_id != expected_session {
+            return Err(WebTransportError::UnknownSession.into());
+        }
+
+        Ok(Some((send, recv)))
+    }
+}
+
+impl web_transport_trait::Session for Session {
+    type SendStream = SendStream;
+    type RecvStream = RecvStream;
+    type Error = SessionError;
+
+    async fn accept_uni(&self) -> Result<Self::RecvStream, Self::Error> {
+        Self::accept_uni(self).await
+    }
+
+    async fn accept_bi(&self) -> Result<(Self::SendStream, Self::RecvStream), Self::Error> {
+        Self::accept_bi(self).await
+    }
+
+    async fn open_bi(&self) -> Result<(Self::SendStream, Self::RecvStream), Self::Error> {
+        Self::open_bi(self).await
+    }
+
+    async fn open_uni(&self) -> Result<Self::SendStream, Self::Error> {
+        Self::open_uni(self).await
+    }
+
+    fn close(&self, code: u32, reason: &str) {
+        Self::close(self, code, reason.as_bytes());
+    }
+
+    async fn closed(&self) -> Self::Error {
+        Self::closed(self).await
+    }
+
+    fn send_datagram(&self, data: Bytes) -> Result<(), Self::Error> {
+        Self::send_datagram(self, data)
+    }
+
+    async fn recv_datagram(&self) -> Result<Bytes, Self::Error> {
+        Self::read_datagram(self).await
+    }
+
+    fn max_datagram_size(&self) -> usize {
+        Self::max_datagram_size(self)
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/settings.rs b/third_party/iroh-live/web-transport-iroh/src/settings.rs
new file mode 100644
index 0000000..4f75597
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/settings.rs
@@ -0,0 +1,69 @@
+use thiserror::Error;
+use tokio::try_join;
+
+#[derive(Error, Debug, Clone)]
+pub enum SettingsError {
+    #[error("quic stream was closed early")]
+    UnexpectedEnd,
+
+    #[error("protocol error: {0}")]
+    ProtoError(#[from] web_transport_proto::SettingsError),
+
+    #[error("WebTransport is not supported")]
+    WebTransportUnsupported,
+
+    #[error("connection error")]
+    ConnectionError(#[from] iroh::endpoint::ConnectionError),
+
+    #[error("read error")]
+    ReadError(#[from] quinn::ReadError),
+
+    #[error("write error")]
+    WriteError(#[from] quinn::WriteError),
+}
+
+pub struct Settings {
+    // A reference to the send/recv stream, so we don't close it until dropped.
+    #[allow(dead_code)]
+    send: quinn::SendStream,
+
+    #[allow(dead_code)]
+    recv: quinn::RecvStream,
+}
+
+impl Settings {
+    // Establish the H3 connection.
+    pub async fn connect(conn: &iroh::endpoint::Connection) -> Result<Self, SettingsError> {
+        let recv = Self::accept(conn);
+        let send = Self::open(conn);
+
+        // Run both tasks concurrently until one errors or they both complete.
+        let (send, recv) = try_join!(send, recv)?;
+        Ok(Self { send, recv })
+    }
+
+    async fn accept(conn: &iroh::endpoint::Connection) -> Result<quinn::RecvStream, SettingsError> {
+        let mut recv = conn.accept_uni().await?;
+        let settings = web_transport_proto::Settings::read(&mut recv).await?;
+
+        tracing::debug!("received SETTINGS frame: {settings:?}");
+
+        if settings.supports_webtransport() == 0 {
+            return Err(SettingsError::WebTransportUnsupported);
+        }
+
+        Ok(recv)
+    }
+
+    async fn open(conn: &iroh::endpoint::Connection) -> Result<quinn::SendStream, SettingsError> {
+        let mut settings = web_transport_proto::Settings::default();
+        settings.enable_webtransport(1);
+
+        tracing::debug!("sending SETTINGS frame: {settings:?}");
+
+        let mut send = conn.open_uni().await?;
+        settings.write(&mut send).await?;
+
+        Ok(send)
+    }
+}
diff --git a/third_party/iroh-live/web-transport-iroh/src/tests.rs b/third_party/iroh-live/web-transport-iroh/src/tests.rs
new file mode 100644
index 0000000..7b9bad5
--- /dev/null
+++ b/third_party/iroh-live/web-transport-iroh/src/tests.rs
@@ -0,0 +1,128 @@
+use iroh::{Endpoint, endpoint::ConnectionError};
+use n0_tracing_test::traced_test;
+use tracing::Instrument;
+use url::Url;
+
+use crate::{ALPN_H3, Client, H3Request, QuicRequest, SessionError};
+
+#[tokio::test]
+#[traced_test]
+async fn h3_smoke() -> n0_error::Result<()> {
+    let client = Endpoint::bind()
+        .instrument(tracing::error_span!("client-ep"))
+        .await
+        .unwrap();
+    let client_id = client.id();
+    let client = Client::new(client);
+
+    let server = Endpoint::builder()
+        .alpns(vec![ALPN_H3.as_bytes().to_vec()])
+        .bind()
+        .instrument(tracing::error_span!("server-ep"))
+        .await
+        .unwrap();
+    let server_id = server.id();
+    let server_addr = server.addr();
+
+    let url: Url = format!("https://{}/foo", server_id).parse().unwrap();
+
+    let client_task = tokio::task::spawn({
+        let url = url.clone();
+        async move {
+            let session = client.connect_h3(server_addr, url.clone()).await.inspect_err(|err| println!("{err:#?}")).unwrap();
+            assert_eq!(session.remote_id(), server_id);
+            assert_eq!(session.url(), Some(&url));
+
+            let mut stream = session.open_uni().await.unwrap();
+            stream.write_all(b"hi").await.unwrap();
+            stream.finish().unwrap();
+            let reason = session.closed().await;
+            assert!(
+                matches!(reason, SessionError::ConnectionError(ConnectionError::ApplicationClosed(frame)) if web_transport_proto::error_from_http3(frame.error_code.into_inner()) == Some(23))
+            );
+
+            drop(session);
+            client.close().await;
+        }.instrument(tracing::error_span!("client"))
+    });
+
+    let server_task = tokio::task::spawn(
+        async move {
+            let conn = server.accept().await.unwrap().await.unwrap();
+            assert_eq!(conn.alpn(), ALPN_H3.as_bytes());
+            let request = H3Request::accept(conn)
+                .await
+                .inspect_err(|err| tracing::error!("accept failed: {err:?}"))
+                .unwrap();
+            assert_eq!(request.url(), &url);
+            assert_eq!(request.conn().remote_id(), client_id);
+            let session = request.ok().await.unwrap();
+            assert_eq!(session.url(), Some(&url));
+            assert_eq!(session.conn().remote_id(), client_id);
+            let mut stream = session.accept_uni().await.unwrap();
+            let buf = stream.read_to_end(2).await.unwrap();
+            assert_eq!(buf, b"hi");
+            session.close(23, b"bye");
+            server.close().await;
+        }
+        .instrument(tracing::error_span!("server")),
+    );
+
+    client_task.await.unwrap();
+    server_task.await.unwrap();
+
+    Ok(())
+}
+
+#[tokio::test]
+#[traced_test]
+async fn quic_smoke() -> n0_error::Result<()> {
+    const ALPN: &str = "moql";
+
+    let client = Endpoint::bind().await.unwrap();
+    let client_id = client.id();
+    let client = Client::new(client);
+
+    let server = Endpoint::builder()
+        .alpns(vec![ALPN.as_bytes().to_vec()])
+        .bind()
+        .await
+        .unwrap();
+    let server_id = server.id();
+    let server_addr = server.addr();
+
+    let client_task = tokio::task::spawn({
+        async move {
+            let session = client
+                .connect_quic(server_addr, ALPN.as_bytes())
+                .await
+                .unwrap();
+            println!("session established");
+            assert_eq!(session.remote_id(), server_id);
+            assert_eq!(session.url(), None);
+            let reason = session.closed().await;
+            assert!(
+                matches!(reason, SessionError::ConnectionError(ConnectionError::ApplicationClosed(frame)) if frame.error_code.into_inner() == 23)
+            )
+        }.instrument(tracing::error_span!("client"))
+    });
+
+    let server_task = tokio::task::spawn({
+        async move {
+            let conn = server.accept().await.unwrap().await.unwrap();
+            assert_eq!(conn.alpn(), ALPN.as_bytes());
+            let request = QuicRequest::accept(conn);
+            assert_eq!(request.conn().remote_id(), client_id);
+            let session = request.ok();
+            assert_eq!(session.url(), None);
+            assert_eq!(session.conn().remote_id(), client_id);
+            session.close(23, b"bye");
+        }
+        .instrument(tracing::error_span!("server"))
+    });
+
+    client_task.await.unwrap();
+    server_task.await.unwrap();
+
+    Ok(())
+}
diff --git a/third_party/iroh-org/iroh-gossip/.cargo/config.toml b/third_party/iroh-org/iroh-gossip/.cargo/config.toml
new file mode 100644
index 0000000..226dec9
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.cargo/config.toml
@@ -0,0 +1,3 @@
+[target.wasm32-unknown-unknown]
+runner = "wasm-bindgen-test-runner"
+rustflags = ['--cfg', 'getrandom_backend="wasm_js"']
diff --git a/third_party/iroh-org/iroh-gossip/.config/nextest.toml b/third_party/iroh-org/iroh-gossip/.config/nextest.toml
new file mode 100644
index 0000000..4f0a061
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.config/nextest.toml
@@ -0,0 +1,10 @@
+[test-groups]
+run-in-isolation = { max-threads = 32 } 
+# these are tests that must not run with other tests concurrently. All tests in
+# this group can take up at most 32 threads among them, but each one requiring
+# 16 threads also. The effect should be that tests run isolated.
+
+[[profile.ci.overrides]]
+filter = 'test(::run_in_isolation::)'
+test-group = 'run-in-isolation'
+threads-required = 32
diff --git a/third_party/iroh-org/iroh-gossip/.github/dependabot.yaml b/third_party/iroh-org/iroh-gossip/.github/dependabot.yaml
new file mode 100644
index 0000000..be006de
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/dependabot.yaml
@@ -0,0 +1,13 @@
+# Keep GitHub Actions up to date with GitHub's Dependabot...
+# https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
+# https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    groups:
+      github-actions:
+        patterns:
+          - "*"  # Group all Actions updates into a single larger pull request
+    schedule:
+      interval: weekly
diff --git a/third_party/iroh-org/iroh-gossip/.github/pull_request_template.md b/third_party/iroh-org/iroh-gossip/.github/pull_request_template.md
new file mode 100644
index 0000000..6cc5a1f
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/pull_request_template.md
@@ -0,0 +1,18 @@
+## Description
+
+<!-- A summary of what this pull request achieves and a rough list of changes. -->
+
+## Breaking Changes
+
+<!-- Optional, if there are any breaking changes document them, including how to migrate older code. -->
+
+## Notes & open questions
+
+<!-- Any notes, remarks or open questions you have to make about the PR. -->
+
+## Change checklist
+
+- [ ] Self-review.
+- [ ] Documentation updates following the [style guide](https://rust-lang.github.io/rfcs/1574-more-api-documentation-conventions.html#appendix-a-full-conventions-text), if relevant.
+- [ ] Tests if relevant.
+- [ ] All breaking changes documented.
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/beta.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/beta.yaml
new file mode 100644
index 0000000..7359d5b
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/beta.yaml
@@ -0,0 +1,43 @@
+# Run tests using the beta Rust compiler
+
+name: Beta Rust
+
+on:
+  schedule:
+    # 06:50 UTC every Monday
+    - cron: '50 6 * * 1'
+  workflow_dispatch:
+
+concurrency:
+  group: beta-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  tests:
+    uses: './.github/workflows/tests.yaml'
+    with:
+      rust-version: beta
+  notify:
+    needs: tests
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Extract test results
+        run: |
+          printf '${{ toJSON(needs) }}\n'
+          result=$(echo '${{ toJSON(needs) }}' | jq -r .tests.result)
+          echo TESTS_RESULT=$result
+          echo "TESTS_RESULT=$result" >>"$GITHUB_ENV"
+      - name: Notify discord on failure
+        uses: n0-computer/discord-webhook-notify@v1
+        if: ${{ env.TESTS_RESULT == 'failure' }}
+        with:
+          severity: error
+          details: |
+            Rustc beta tests failed in **${{ github.repository }}**
+            See https://github.com/${{ github.repository }}/actions/workflows/beta.yaml
+          webhookUrl: ${{ secrets.DISCORD_N0_GITHUB_CHANNEL_WEBHOOK_URL }}
+
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/ci.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/ci.yaml
new file mode 100644
index 0000000..876b8e4
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/ci.yaml
@@ -0,0 +1,305 @@
+name: CI
+
+on:
+  pull_request:
+    types: [ 'labeled', 'unlabeled', 'opened', 'synchronize', 'reopened' ]
+  merge_group:
+  push:
+    branches:
+      - main
+
+concurrency:
+  group: ci-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+env:
+  RUST_BACKTRACE: 1
+  RUSTFLAGS: -Dwarnings
+  RUSTDOCFLAGS: -Dwarnings
+  MSRV: "1.89"
+  SCCACHE_CACHE_SIZE: "50G"
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  tests:
+    name: CI Test Suite
+    if: "github.event_name != 'pull_request' || ! contains(github.event.pull_request.labels.*.name, 'flaky-test')"
+    uses: './.github/workflows/tests.yaml'
+
+  cross_build:
+    name: Cross Build Only
+    if: "github.event_name != 'pull_request' || ! contains(github.event.pull_request.labels.*.name, 'flaky-test')"
+    timeout-minutes: 30
+    runs-on: [self-hosted, linux, X64]
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+           # cross tests are currently broken vor armv7 and aarch64
+           # see https://github.com/cross-rs/cross/issues/1311
+          # - armv7-linux-androideabi
+          # - aarch64-linux-android
+          # Freebsd execution fails in cross
+          # - i686-unknown-freebsd # Linking fails :/
+          - x86_64-unknown-freebsd
+          # Netbsd execution fails to link in cross
+          # - x86_64-unknown-netbsd
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v5
+      with:
+        submodules: recursive
+
+    - name: Install rust stable
+      uses: dtolnay/rust-toolchain@stable
+
+    - name: Cleanup Docker
+      continue-on-error: true
+      run: |
+        docker kill $(docker ps -q)
+
+      # See https://github.com/cross-rs/cross/issues/1222
+    - uses: taiki-e/install-action@cross
+
+    - name: build
+      # cross tests are currently broken vor armv7 and aarch64
+      # see https://github.com/cross-rs/cross/issues/1311.  So on
+      # those platforms we only build but do not run tests.
+      run: cross build --all --target ${{ matrix.target }}
+      env:
+        RUST_LOG: ${{ runner.debug && 'TRACE' || 'DEBUG'}}
+
+  android_build:
+    name: Android Build Only
+    if: "github.event_name != 'pull_request' || ! contains(github.event.pull_request.labels.*.name, 'flaky-test')"
+    timeout-minutes: 30
+    # runs-on: ubuntu-latest
+    runs-on: [self-hosted, linux, X64]
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - aarch64-linux-android
+          - armv7-linux-androideabi
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v5
+
+    - name: Set up Rust
+      uses: dtolnay/rust-toolchain@stable
+      with:
+        target: ${{ matrix.target }}
+    - name: Install rustup target
+      run: rustup target add ${{ matrix.target }}
+
+    - name: Setup Java
+      uses: actions/setup-java@v5
+      with:
+        distribution: 'temurin'
+        java-version: '17'
+
+    - name: Setup Android SDK
+      uses: android-actions/setup-android@v3
+
+    - name: Setup Android NDK
+      uses: arqu/setup-ndk@main
+      id: setup-ndk
+      with:
+        ndk-version: r23
+        add-to-path: true
+
+    - name: Build
+      env:
+        ANDROID_NDK_HOME: ${{ steps.setup-ndk.outputs.ndk-path }}
+      run: |
+        cargo install --version 3.5.4 cargo-ndk
+        cargo ndk --target ${{ matrix.target }} build
+
+  cross_test:
+    name: Cross Test
+    if: "github.event_name != 'pull_request' || ! contains(github.event.pull_request.labels.*.name, 'flaky-test')"
+    timeout-minutes: 30
+    runs-on: [self-hosted, linux, X64]
+    strategy:
+      fail-fast: false
+      matrix:
+        target:
+          - i686-unknown-linux-gnu
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v5
+      with:
+        submodules: recursive
+
+    - name: Install rust stable
+      uses: dtolnay/rust-toolchain@stable
+
+    - name: Cleanup Docker
+      continue-on-error: true
+      run: |
+        docker kill $(docker ps -q)
+
+      # See https://github.com/cross-rs/cross/issues/1222
+    - uses: taiki-e/install-action@cross
+
+    - name: test
+      run: cross test --all --target ${{ matrix.target }} -- --test-threads=12
+      env:
+        RUST_LOG: ${{ runner.debug && 'TRACE' || 'DEBUG' }}
+
+  wasm_build:
+      name: Build wasm32
+      runs-on: ubuntu-latest
+      env:
+          RUSTFLAGS: '--cfg getrandom_backend="wasm_js"'
+      steps:
+        - name: Checkout sources
+          uses: actions/checkout@v5
+  
+        - name: Install stable toolchain
+          uses: dtolnay/rust-toolchain@stable
+  
+        - name: Add wasm target
+          run: rustup target add wasm32-unknown-unknown
+  
+        - name: Install wasm-tools
+          uses: bytecodealliance/actions/wasm-tools/setup@v1
+  
+        - name: wasm32 build
+          run: cargo build --target wasm32-unknown-unknown
+  
+        # If the Wasm file contains any 'import "env"' declarations, then
+        # some non-Wasm-compatible code made it into the final code.
+        - name: Ensure no 'import "env"' in iroh-relay Wasm
+          run: |
+            ! wasm-tools print --skeleton target/wasm32-unknown-unknown/debug/iroh_gossip.wasm | grep 'import "env"'
+        
+
+  check_semver:
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+    steps:
+      - uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@v0.0.9
+
+      - name: Setup Environment (PR)
+        if: ${{ github.event_name == 'pull_request' }}
+        shell: bash
+        run: |
+          echo "HEAD_COMMIT_SHA=$(git rev-parse origin/${{ github.base_ref }})" >> ${GITHUB_ENV}
+      - name: Setup Environment (Push)
+        if: ${{ github.event_name == 'push' || github.event_name == 'merge_group' }}
+        shell: bash
+        run: |
+          echo "HEAD_COMMIT_SHA=$(git rev-parse origin/main)" >> ${GITHUB_ENV}
+      - name: Check semver
+        # uses: obi1kenobi/cargo-semver-checks-action@v2
+        uses: n0-computer/cargo-semver-checks-action@feat-baseline
+        with:
+          package: iroh-gossip
+          baseline-rev: ${{ env.HEAD_COMMIT_SHA }}
+          use-cache: false
+
+  check_fmt:
+    timeout-minutes: 30
+    name: Checking fmt
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+    steps:
+    - uses: actions/checkout@v5
+    - uses: dtolnay/rust-toolchain@stable
+      with:
+        components: rustfmt
+    - uses: mozilla-actions/sccache-action@v0.0.9
+    - uses: taiki-e/install-action@cargo-make
+    - run: cargo make format-check
+
+  check_docs:
+    timeout-minutes: 30
+    name: Checking docs
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+      RUSTDOCFLAGS: -Dwarnings
+    steps:
+      - uses: actions/checkout@v6
+      - uses: dtolnay/rust-toolchain@nightly
+      - uses: dtolnay/install@cargo-docs-rs
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@v0.0.9
+
+      - name: iroh-gossip docs
+        run: cargo docs-rs
+
+  clippy_check:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+    steps:
+    - uses: actions/checkout@v5
+    - uses: dtolnay/rust-toolchain@stable
+      with:
+        components: clippy
+    - name: Install sccache
+      uses: mozilla-actions/sccache-action@v0.0.9
+
+    # TODO: We have a bunch of platform-dependent code so should
+    #    probably run this job on the full platform matrix
+    - name: clippy check (all features)
+      run: cargo clippy --workspace --all-features --all-targets --bins --tests --benches
+
+    - name: clippy check (no features)
+      run: cargo clippy --workspace --no-default-features --lib --bins --tests
+
+    - name: clippy check (default features)
+      run: cargo clippy --workspace --all-targets
+
+  msrv:
+    if: "github.event_name != 'pull_request' || ! contains(github.event.pull_request.labels.*.name, 'flaky-test')"
+    timeout-minutes: 30
+    name: Minimal Supported Rust Version
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+    steps:
+    - uses: actions/checkout@v5
+    - uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: ${{ env.MSRV }}
+    - name: Install sccache
+      uses: mozilla-actions/sccache-action@v0.0.9
+
+    - name: Check MSRV all features
+      run: |
+        cargo +$MSRV check --workspace --all-targets
+
+  cargo_deny:
+    timeout-minutes: 30
+    name: cargo deny
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v5
+      - uses: EmbarkStudios/cargo-deny-action@v2
+        with:
+          arguments: --workspace --all-features
+          command: check
+          command-arguments: "-Dwarnings"
+
+  codespell:
+    timeout-minutes: 30
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@v5
+    - run: pip install --user codespell[toml]
+    - run: codespell --ignore-words-list=ans,atmost,crate,inout,ratatui,ser,stayin,swarmin,worl --skip=CHANGELOG.md
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/cleanup.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/cleanup.yaml
new file mode 100644
index 0000000..d254279
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/cleanup.yaml
@@ -0,0 +1,45 @@
+# Run tests using the beta Rust compiler
+
+name: Cleanup
+
+on:
+  schedule:
+    # 06:50 UTC every Monday
+    - cron: '50 6 * * 1'
+  workflow_dispatch:
+
+concurrency:
+  group: beta-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+env:
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  clean_docs_branch:
+    permissions:
+      issues: write
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          ref: generated-docs-preview
+      - name: Clean docs branch
+        run: |
+          cd pr/
+          # keep the last 25 prs
+          dirs=$(ls -1d [0-9]* | sort -n)
+          total_dirs=$(echo "$dirs" | wc -l)
+          dirs_to_remove=$(echo "$dirs" | head -n $(($total_dirs - 25)))
+          if [ -n "$dirs_to_remove" ]; then
+            echo "$dirs_to_remove" | xargs rm -rf
+          fi
+          git add .
+          git commit -m "Cleanup old docs"
+          git push
+
+
+
+
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/commit.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/commit.yaml
new file mode 100644
index 0000000..1b5c6d2
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/commit.yaml
@@ -0,0 +1,19 @@
+name: Commits
+
+on:
+  pull_request:
+    branches: [main]
+    types: [opened, edited, synchronize]
+
+env:
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  check-for-cc:
+    runs-on: ubuntu-latest
+    steps:
+      - name: check-for-cc
+        id: check-for-cc
+        uses: agenthunt/conventional-commit-checker-action@v2.0.0
+        with:
+          pr-title-regex: "^(.+)(?:(([^)s]+)))?!?: (.+)"
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/docs.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/docs.yaml
new file mode 100644
index 0000000..c46adc0
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/docs.yaml
@@ -0,0 +1,73 @@
+name: Docs Preview
+
+on:
+  pull_request:
+  workflow_dispatch:
+    inputs:
+      pr_number:
+        required: true
+        type: string
+
+# ensure job runs sequentially so pushing to the preview branch doesn't conflict
+concurrency:
+  group: ci-docs-preview
+
+env:
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  preview_docs:
+    permissions: write-all
+    timeout-minutes: 30
+    name: Docs preview
+    if: ${{ (github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' ) && !github.event.pull_request.head.repo.fork }}
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+      SCCACHE_CACHE_SIZE: "50G"
+      PREVIEW_PATH: pr/${{ github.event.pull_request.number || inputs.pr_number }}/docs
+
+    steps:
+    - uses: actions/checkout@v5
+    - uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: nightly-2025-10-09
+    - name: Install sccache
+      uses: mozilla-actions/sccache-action@v0.0.9
+
+    - name: Generate Docs
+      run: cargo doc --workspace --all-features --no-deps
+      env:
+        RUSTDOCFLAGS: --cfg iroh_docsrs
+
+    - name: Deploy Docs to Preview Branch
+      uses: peaceiris/actions-gh-pages@v4
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
+        publish_dir: ./target/doc/
+        destination_dir: ${{ env.PREVIEW_PATH }}
+        publish_branch: generated-docs-preview
+
+    - name: Find Docs Comment
+      uses: peter-evans/find-comment@v4
+      id: fc
+      with:
+        issue-number: ${{ github.event.pull_request.number || inputs.pr_number }}
+        comment-author: 'github-actions[bot]'
+        body-includes: Documentation for this PR has been generated
+
+    - name: Get current timestamp
+      id: get_timestamp
+      run: echo "TIMESTAMP=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_ENV
+
+    - name: Create or Update Docs Comment
+      uses: peter-evans/create-or-update-comment@v5
+      with:
+        issue-number: ${{ github.event.pull_request.number || inputs.pr_number }}
+        comment-id: ${{ steps.fc.outputs.comment-id }}
+        body: |
+          Documentation for this PR has been generated and is available at: https://${{ github.repository_owner }}.github.io/${{ github.event.repository.name }}/${{ env.PREVIEW_PATH }}/iroh_gossip/
+
+          Last updated: ${{ env.TIMESTAMP }}
+        edit-mode: replace
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/flaky.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/flaky.yaml
new file mode 100644
index 0000000..99241e6
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/flaky.yaml
@@ -0,0 +1,99 @@
+# Run all tests, including flaky test.
+#
+# The default CI workflow ignores flaky tests.  This workflow will run
+# all tests, including ignored ones.
+#
+# To use this workflow you can either:
+#
+# - Label a PR with "flaky-test", the normal CI workflow will not run
+#   any jobs but the jobs here will be run.  Note that to merge the PR
+#   you'll need to remove the label eventually because the normal CI
+#   jobs are required by branch protection.
+#
+# - Manually trigger the workflow, you may choose a branch for this to
+#   run on.
+#
+# Additionally this jobs runs once a day on a schedule.
+#
+# Currently doctests are not run by this workflow.
+
+name: Flaky CI
+
+on:
+  pull_request:
+    types: [ 'labeled', 'unlabeled', 'opened', 'synchronize', 'reopened' ]
+  schedule:
+    # 06:30 UTC every day
+    - cron: '30 6 * * *'
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch to run on, defaults to main'
+        required: true
+        default: 'main'
+        type: string
+
+concurrency:
+  group: flaky-${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: true
+
+env:
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  tests:
+    if: "contains(github.event.pull_request.labels.*.name, 'flaky-test') || github.event_name == 'workflow_dispatch' || github.event_name == 'schedule'"
+    uses: './.github/workflows/tests.yaml'
+    with:
+      flaky: true
+      git-ref: ${{ inputs.branch }}
+  notify:
+    needs: tests
+    if: ${{ always() }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Extract test results
+        run: |
+          printf '${{ toJSON(needs) }}\n'
+          result=$(echo '${{ toJSON(needs) }}' | jq -r .tests.result)
+          echo TESTS_RESULT=$result
+          echo "TESTS_RESULT=$result" >>"$GITHUB_ENV"
+      - name: download nextest reports
+        uses: actions/download-artifact@v5
+        with:
+          pattern: libtest_run_${{ github.run_number }}-${{ github.run_attempt }}-*
+          merge-multiple: true
+          path: nextest-results
+      - name: create summary report
+        id: make_summary
+        run: |
+          # prevent the glob expression in the loop to match on itself when the dir is empty
+          shopt -s nullglob
+          # to deal with multiline outputs it's recommended to use a random EOF, the syntax is based on
+          # https://docs.github.com/en/actions/using-workflows/workflow-commands-for-github-actions#multiline-strings
+          EOF=aP51VriWCxNJ1JjvmO9i
+          echo "summary<<$EOF" >> $GITHUB_OUTPUT
+          echo "Flaky tests failure:" >> $GITHUB_OUTPUT
+          echo " " >> $GITHUB_OUTPUT
+          for report in nextest-results/*.json; do
+            # remove the name prefix and extension, and split the parts
+            name=$(echo ${report:16:-5} | tr _ ' ')
+            echo $name
+            echo "- **$name**" >> $GITHUB_OUTPUT
+            # select the failed tests
+            # the tests have this format "crate::module$test_name", the sed expressions remove the quotes and replace $ for ::
+            failure=$(jq --slurp '.[] | select(.["type"] == "test" and .["event"] == "failed" ) | .["name"]' $report | sed -e 's/^"//g' -e 's/\$/::/' -e 's/"//')
+            echo "$failure"
+            echo "$failure" >> $GITHUB_OUTPUT
+          done
+          echo "" >> $GITHUB_OUTPUT
+          echo "See https://github.com/${{ github.repository }}/actions/workflows/flaky.yaml" >> $GITHUB_OUTPUT
+          echo "$EOF" >> $GITHUB_OUTPUT
+      - name: Notify discord on failure
+        uses: n0-computer/discord-webhook-notify@v1
+        if: ${{ env.TESTS_RESULT == 'failure' || env.TESTS_RESULT == 'success' }}
+        with:
+          text: "Flaky tests in **${{ github.repository }}**:"
+          severity: ${{ env.TESTS_RESULT == 'failure' && 'warn' || 'info' }}
+          details: ${{ env.TESTS_RESULT == 'failure' && steps.make_summary.outputs.summary || 'No flaky failures!' }}
+          webhookUrl: ${{ secrets.DISCORD_N0_GITHUB_CHANNEL_WEBHOOK_URL }}
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/release.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/release.yaml
new file mode 100644
index 0000000..a75f281
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/release.yaml
@@ -0,0 +1,50 @@
+name: release
+on:
+  push:
+    tags:
+    - "v*"
+  workflow_dispatch:
+    inputs:
+      release_version:
+        description: "Release version"
+        required: true
+        default: ""
+      create_release:
+        description: "Create release"
+        required: true
+        default: "true"
+
+jobs:
+  create-release:
+    name: create-release
+    runs-on: ubuntu-latest
+    outputs:
+      upload_url: ${{ steps.release.outputs.upload_url }}
+      release_version: ${{ env.RELEASE_VERSION }}
+    steps:
+    - name: Get the release version from the tag (push)
+      shell: bash
+      if: env.RELEASE_VERSION == '' && github.event_name == 'push'
+      run: |
+        # See: https://github.community/t5/GitHub-Actions/How-to-get-just-the-tag-name/m-p/32167/highlight/true#M1027
+        echo "RELEASE_VERSION=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
+        echo "version is: ${{ env.RELEASE_VERSION }}"
+    - name: Get the release version from the tag (dispatch)
+      shell: bash
+      if: github.event_name == 'workflow_dispatch'
+      run: |
+        echo "RELEASE_VERSION=${{ github.event.inputs.release_version }}" >> $GITHUB_ENV
+        echo "version is: ${{ env.RELEASE_VERSION }}"
+    - name: Checkout repository
+      uses: actions/checkout@v5
+      with:
+        fetch-depth: 1
+    - name: Create GitHub release
+      id: release
+      if: github.event.inputs.create_release == 'true' || github.event_name == 'push'
+      uses: actions/create-release@v1
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      with:
+        tag_name: ${{ env.RELEASE_VERSION }}
+        release_name: ${{ env.RELEASE_VERSION }}
\ No newline at end of file
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/simulation.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/simulation.yaml
new file mode 100644
index 0000000..4dfc795
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/simulation.yaml
@@ -0,0 +1,53 @@
+name: run simulations
+on:
+  pull_request:
+
+jobs:
+  run_sim:
+    runs-on: ubuntu-latest
+    env:
+      RUSTC_WRAPPER: "sccache"
+      SCCACHE_GHA_ENABLED: "on"
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v5
+        with:
+          fetch-depth: 0
+
+      - name: Install rust stable
+        uses: dtolnay/rust-toolchain@stable
+
+      - name: Install sccache
+        uses: mozilla-actions/sccache-action@v0.0.9
+
+      - name: Run simulations
+        run: |
+          git checkout ${{ github.event.pull_request.base.ref }}
+          cargo run -q --bin sim --features simulator --release -- run -c simulations/all.toml -o /tmp/sim-main
+          git checkout ${{ github.event.pull_request.head.sha }}
+          cargo run -q --bin sim --features simulator --release -- run -c simulations/all.toml -o /tmp/sim-pr --baseline /tmp/sim-main |& tee REPORT
+          echo "<details><summary>Simulation report</summary>" >> COMMENT
+          echo "" >> COMMENT
+          echo '```' >> COMMENT
+          cat REPORT >> COMMENT
+          echo "" >> COMMENT
+          echo '```' >> COMMENT
+          echo "</details>" >> COMMENT
+          echo "" >> COMMENT
+          echo "*Last updated: $(date -u +'%Y-%m-%dT%H:%M:%SZ')*" >> COMMENT
+
+      - name: Find Docs Comment
+        uses: peter-evans/find-comment@v4
+        id: fc
+        with:
+          issue-number: ${{ github.event.pull_request.number || inputs.pr_number }}
+          comment-author: "github-actions[bot]"
+          body-includes: Simulation report
+
+      - name: Create or Update Docs Comment
+        uses: peter-evans/create-or-update-comment@v5
+        with:
+          issue-number: ${{ github.event.pull_request.number || inputs.pr_number }}
+          comment-id: ${{ steps.fc.outputs.comment-id }}
+          body-path: COMMENT
+          edit-mode: replace
diff --git a/third_party/iroh-org/iroh-gossip/.github/workflows/tests.yaml b/third_party/iroh-org/iroh-gossip/.github/workflows/tests.yaml
new file mode 100644
index 0000000..cba43c1
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.github/workflows/tests.yaml
@@ -0,0 +1,229 @@
+# Run all tests, with or without flaky tests.
+
+name: Tests
+
+on:
+  workflow_call:
+    inputs:
+      rust-version:
+        description: 'The version of the rust compiler to run'
+        type: string
+        default: 'stable'
+      flaky:
+        description: 'Whether to also run flaky tests'
+        type: boolean
+        default: false
+      git-ref:
+        description: 'Which git ref to checkout'
+        type: string
+        default: ${{ github.ref }}
+
+env:
+  RUST_BACKTRACE: 1
+  RUSTFLAGS: -Dwarnings
+  RUSTDOCFLAGS: -Dwarnings
+  SCCACHE_CACHE_SIZE: "50G"
+  CRATES_LIST: "iroh-gossip"
+  IROH_FORCE_STAGING_RELAYS: "1"
+
+jobs:
+  build_and_test_nix:
+    timeout-minutes: 30
+    name: "Tests"
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        name: [ubuntu-latest, macOS-arm-latest]
+        rust: [ '${{ inputs.rust-version }}' ]
+        features: [all, none, default]
+        include:
+          - name: ubuntu-latest
+            os: ubuntu-latest
+            release-os: linux
+            release-arch: amd64
+            runner: [self-hosted, linux, X64]
+          - name: macOS-arm-latest
+            os: macOS-latest
+            release-os: darwin
+            release-arch: aarch64
+            runner: [self-hosted, macOS, ARM64]
+    env:
+      # Using self-hosted runners so use local cache for sccache and
+      # not SCCACHE_GHA_ENABLED.
+      RUSTC_WRAPPER: "sccache"
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v5
+      with:
+        ref: ${{ inputs.git-ref }}
+
+    - name: Install ${{ matrix.rust }} rust
+      uses: dtolnay/rust-toolchain@master
+      with:
+        toolchain: ${{ matrix.rust }}
+
+    - name: Install cargo-nextest
+      uses: taiki-e/install-action@v2
+      with:
+        tool: nextest@0.9.80
+
+    - name: Install sccache
+      uses: mozilla-actions/sccache-action@v0.0.9
+
+    - name: Select features
+      run: |
+        case "${{ matrix.features }}" in
+            all)
+                echo "FEATURES=--all-features" >> "$GITHUB_ENV"
+                ;;
+            none)
+                echo "FEATURES=--no-default-features" >> "$GITHUB_ENV"
+                ;;
+            default)
+                echo "FEATURES=" >> "$GITHUB_ENV"
+                ;;
+            *)
+                exit 1
+        esac
+
+    - name: check features
+      if: ${{ ! inputs.flaky }}
+      run: |
+        for i in ${CRATES_LIST//,/ }
+        do
+          echo "Checking $i $FEATURES"
+          if [ $i = "iroh-cli" ]; then
+            targets="--bins"
+          else
+            targets="--lib --bins"
+          fi
+          echo cargo check -p $i $FEATURES $targets
+          cargo check -p $i $FEATURES $targets
+        done
+      env:
+        RUST_LOG: ${{ runner.debug && 'TRACE' || 'DEBUG'}}
+
+    - name: build tests
+      run: |
+        cargo nextest run --workspace ${{ env.FEATURES }} --lib --bins --tests --no-run
+
+    - name: list ignored tests
+      run: |
+        cargo nextest list --workspace ${{ env.FEATURES }} --lib --bins --tests --run-ignored ignored-only
+
+    - name: run tests
+      run: |
+        mkdir -p output
+        cargo nextest run --workspace ${{ env.FEATURES }} --lib --bins --tests --profile ci --run-ignored ${{ inputs.flaky && 'all' || 'default' }} --no-fail-fast --message-format ${{ inputs.flaky && 'libtest-json' || 'human' }} > output/${{ matrix.name }}_${{ matrix.features }}_${{ matrix.rust }}.json
+      env:
+        RUST_LOG: ${{ runner.debug && 'TRACE' || 'DEBUG'}}
+        NEXTEST_EXPERIMENTAL_LIBTEST_JSON: 1
+
+    - name: upload results
+      if: ${{ failure() && inputs.flaky }}
+      uses: actions/upload-artifact@v4
+      with:
+        name: libtest_run_${{ github.run_number }}-${{ github.run_attempt }}-${{ matrix.name }}_${{ matrix.features }}_${{ matrix.rust }}.json
+        path: output
+        retention-days: 45
+        compression-level: 0
+
+    - name: doctests
+      if: ${{ (! inputs.flaky) &&  matrix.features == 'all' }}
+      run: |
+        if [ -n "${{ runner.debug }}" ]; then
+            export RUST_LOG=TRACE
+        else
+            export RUST_LOG=DEBUG
+        fi
+        cargo test --workspace --all-features --doc
+
+  build_and_test_windows:
+    timeout-minutes: 30
+    name: "Tests"
+    runs-on: ${{ matrix.runner }}
+    strategy:
+      fail-fast: false
+      matrix:
+        name: [windows-latest]
+        rust: [ '${{ inputs.rust-version}}' ]
+        features: [all, none, default]
+        target:
+          - x86_64-pc-windows-msvc
+        include:
+          - name: windows-latest
+            os: windows
+            runner: [self-hosted, windows, x64]
+    env:
+      # Using self-hosted runners so use local cache for sccache and
+      # not SCCACHE_GHA_ENABLED.
+      RUSTC_WRAPPER: "sccache"
+    steps:
+    - name: Checkout
+      uses: actions/checkout@v5
+      with:
+        ref: ${{ inputs.git-ref }}
+
+    - name: Install ${{ matrix.rust }}
+      run: |
+        rustup toolchain install ${{ matrix.rust }}
+        rustup toolchain default ${{ matrix.rust }}
+        rustup target add ${{ matrix.target }}
+        rustup set default-host ${{ matrix.target }}
+
+    - name: Install cargo-nextest
+      shell: powershell
+      run: |
+        $tmp = New-TemporaryFile | Rename-Item -NewName { $_ -replace 'tmp$', 'zip' } -PassThru
+        Invoke-WebRequest -OutFile $tmp https://get.nexte.st/latest/windows
+        $outputDir = if ($Env:CARGO_HOME) { Join-Path $Env:CARGO_HOME "bin" } else { "~/.cargo/bin" }
+        $tmp | Expand-Archive -DestinationPath $outputDir -Force
+        $tmp | Remove-Item
+
+    - name: Select features
+      run: |
+        switch ("${{ matrix.features }}") {
+            "all" {
+                echo "FEATURES=--all-features" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf8 -Append
+            }
+            "none" {
+                echo "FEATURES=--no-default-features" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf8 -Append
+            }
+            "default" {
+                echo "FEATURES=" | Out-File -FilePath $Env:GITHUB_ENV -Encoding utf8 -Append
+            }
+            default {
+                Exit 1
+            }
+        }
+
+    - name: Install sccache
+      uses: mozilla-actions/sccache-action@v0.0.9
+
+    - uses: msys2/setup-msys2@v2
+
+    - name: build tests
+      run: |
+        cargo nextest run --workspace ${{ env.FEATURES }} --lib --bins --tests --target ${{ matrix.target }} --no-run
+
+    - name: list ignored tests
+      run: |
+        cargo nextest list --workspace ${{ env.FEATURES }} --lib --bins --tests --target ${{ matrix.target }} --run-ignored ignored-only
+
+    - name: tests
+      run: |
+        mkdir -p output
+        cargo nextest run --workspace ${{ env.FEATURES }} --lib --bins --tests --profile ci --target ${{ matrix.target }} --run-ignored ${{ inputs.flaky && 'all' || 'default' }} --no-fail-fast --message-format ${{ inputs.flaky && 'libtest-json' || 'human' }} > output/${{ matrix.name }}_${{ matrix.features }}_${{ matrix.rust }}.json
+      env:
+        RUST_LOG: ${{ runner.debug && 'TRACE' || 'DEBUG'}}
+        NEXTEST_EXPERIMENTAL_LIBTEST_JSON: 1
+  
+    - name: upload results
+      if: ${{ failure() && inputs.flaky }}
+      uses: actions/upload-artifact@v4
+      with:
+        name: libtest_run_${{ github.run_number }}-${{ github.run_attempt }}-${{ matrix.name }}_${{ matrix.features }}_${{ matrix.rust }}.json
+        path: output
+        retention-days: 1
+        compression-level: 0
diff --git a/third_party/iroh-org/iroh-gossip/.gitignore b/third_party/iroh-org/iroh-gossip/.gitignore
new file mode 100644
index 0000000..ea8c4bf
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/.gitignore
@@ -0,0 +1 @@
+/target
diff --git a/third_party/iroh-org/iroh-gossip/CHANGELOG.md b/third_party/iroh-org/iroh-gossip/CHANGELOG.md
new file mode 100644
index 0000000..b055ec0
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/CHANGELOG.md
@@ -0,0 +1,250 @@
+# Changelog
+
+All notable changes to iroh-gossip will be documented in this file.
+
+## [0.96.0](https://github.com/n0-computer/iroh-gossip/compare/v0.95.0..0.96.0) - 2026-01-29
+
+### ⛰️  Features
+
+- Add `neighbors()` method to `GossipTopic` ([#124](https://github.com/n0-computer/iroh-gossip/issues/124)) - ([9e4ddaa](https://github.com/n0-computer/iroh-gossip/commit/9e4ddaa904c6e1b853081b9f2e4f9628ed274b08))
+
+### 🐛 Bug Fixes
+
+- Keep topic alive if either senders or receivers exist ([#119](https://github.com/n0-computer/iroh-gossip/issues/119)) - ([34b0e0e](https://github.com/n0-computer/iroh-gossip/commit/34b0e0ea87a2f0a6011d026bcffce78697689072))
+- Clean-up connections after unexpected disconnects ([#117](https://github.com/n0-computer/iroh-gossip/issues/117)) - ([84f3945](https://github.com/n0-computer/iroh-gossip/commit/84f394577a4e8b52660a83dbbc955f0accb31b5a))
+
+### 🧪 Testing
+
+- Switch from tracing-test to n0-tracing-test ([#125](https://github.com/n0-computer/iroh-gossip/issues/125)) - ([48f522b](https://github.com/n0-computer/iroh-gossip/commit/48f522bb1504a7fbf4eb51112ea724fa1593a35f))
+
+### ⚙️ Miscellaneous Tasks
+
+- Ignore rustls-pemfile unmaintained advisory ([#122](https://github.com/n0-computer/iroh-gossip/issues/122)) - ([16c68bb](https://github.com/n0-computer/iroh-gossip/commit/16c68bb187c7127eb5694bfbbd1ec3da518bcc25))
+- Upgrade to `iroh`v0.96 and the latest version of `iroh-quinn` ([#114](https://github.com/n0-computer/iroh-gossip/issues/114)) - ([13ef379](https://github.com/n0-computer/iroh-gossip/commit/13ef379f60e91f7292ae287051245db25ca8dd02))
+
+## [0.95.0](https://github.com/n0-computer/iroh-gossip/compare/v0.94.0..0.95.0) - 2025-11-06
+
+### Deps/refactor
+
+- [**breaking**] Update to iroh main, port to n0-error ([#113](https://github.com/n0-computer/iroh-gossip/issues/113)) - ([4d2cb2f](https://github.com/n0-computer/iroh-gossip/commit/4d2cb2f3891e8dadd89a985fb6b5ad55d92e4c59))
+
+## [0.94.0](https://github.com/n0-computer/iroh-gossip/compare/v0.93.1..0.94.0) - 2025-10-21
+
+### 🚜 Refactor
+
+- Use discovery service instead of `Endpoint::add_node_addr` ([#108](https://github.com/n0-computer/iroh-gossip/issues/108)) - ([f7e3ef4](https://github.com/n0-computer/iroh-gossip/commit/f7e3ef478a1c4f1ea934e29f3436582e68de734c))
+
+### ⚙️ Miscellaneous Tasks
+
+- Upgrade to iroh 0.94 ([#110](https://github.com/n0-computer/iroh-gossip/issues/110)) - ([ad78602](https://github.com/n0-computer/iroh-gossip/commit/ad78602a4bafad8db2a4264bf16fde12b08f7a5e))
+
+## [0.93.1](https://github.com/n0-computer/iroh-gossip/compare/v0.93.0..0.93.1) - 2025-10-11
+
+### ⚙️ Miscellaneous Tasks
+
+- Update nightly version in CI and docs workflows ([#107](https://github.com/n0-computer/iroh-gossip/issues/107)) - ([b5e3414](https://github.com/n0-computer/iroh-gossip/commit/b5e3414f8db03910b6cea691bad69f798f1c34c6))
+
+## [0.93.0](https://github.com/n0-computer/iroh-gossip/compare/v0.92.0..0.93.0) - 2025-10-09
+
+### ⛰️  Features
+
+- *(ci)* Add auto release on tag version push ([#93](https://github.com/n0-computer/iroh-gossip/issues/93)) - ([afa6e1d](https://github.com/n0-computer/iroh-gossip/commit/afa6e1dca9cef061642bece52fcdad5e877496e3))
+- Set custom ALPN ([#92](https://github.com/n0-computer/iroh-gossip/issues/92)) - ([ff87b6a](https://github.com/n0-computer/iroh-gossip/commit/ff87b6a380a39c8274376ff26f874824ff80d752))
+
+### ⚡ Performance
+
+- Don't allocate in `Timers::wait_next` ([#102](https://github.com/n0-computer/iroh-gossip/issues/102)) - ([65278b7](https://github.com/n0-computer/iroh-gossip/commit/65278b75aa67cb6bed06c9770cacf701e952c0d3))
+
+### ⚙️ Miscellaneous Tasks
+
+- *(ci)* Fix url of the beta notification ([#94](https://github.com/n0-computer/iroh-gossip/issues/94)) - ([2021566](https://github.com/n0-computer/iroh-gossip/commit/20215660a71f192562477dafd677d5a974c6a7f3))
+- Release prep ([#106](https://github.com/n0-computer/iroh-gossip/issues/106)) - ([099196e](https://github.com/n0-computer/iroh-gossip/commit/099196e72d806392ed609dfe36510b130839d52e))
+
+## [0.92.0](https://github.com/n0-computer/iroh-gossip/compare/v0.91.0..0.92.0) - 2025-09-18
+
+### ⚙️ Miscellaneous Tasks
+
+- Upgrade `iroh`, `iroh-base`, `irpc` ([#91](https://github.com/n0-computer/iroh-gossip/issues/91)) - ([464fe69](https://github.com/n0-computer/iroh-gossip/commit/464fe69789ae8c8fefd7734a2f44db5aa447db26))
+
+## [0.91.0](https://github.com/n0-computer/iroh-gossip/compare/v0.90.0..0.91.0) - 2025-07-31
+
+### 🐛 Bug Fixes
+
+- Make GossipSender `Clone` and GossipTopic `Sync` ([#81](https://github.com/n0-computer/iroh-gossip/issues/81)) - ([f215aa1](https://github.com/n0-computer/iroh-gossip/commit/f215aa13806425491cf328e42c611a0002da4371))
+
+### 📚 Documentation
+
+- Replace `iroh-net` mention in README ([#83](https://github.com/n0-computer/iroh-gossip/issues/83)) - ([e3df4ec](https://github.com/n0-computer/iroh-gossip/commit/e3df4ec7a56bcff0dafe6940d7d706ece5508891))
+
+### ⚙️ Miscellaneous Tasks
+
+- Add patch for `iroh` dependencies ([#82](https://github.com/n0-computer/iroh-gossip/issues/82)) - ([2e82a68](https://github.com/n0-computer/iroh-gossip/commit/2e82a683f93aa1ae50929da8ce95b23f85b466f1))
+- [**breaking**] Prep for `v0.91.0` release ([#85](https://github.com/n0-computer/iroh-gossip/issues/85)) - ([d1fbfca](https://github.com/n0-computer/iroh-gossip/commit/d1fbfca15f484a41b8d6e8f771d14bf9fe5c7f81))
+
+### Deps
+
+- Update to irpc@main, iroh@main ([#84](https://github.com/n0-computer/iroh-gossip/issues/84)) - ([af7ae1f](https://github.com/n0-computer/iroh-gossip/commit/af7ae1f9bb9fa74aef97d510e062b09c03e96a87))
+
+## [0.90.0](https://github.com/n0-computer/iroh-gossip/compare/v0.35.0..0.90.0) - 2025-06-27
+
+### ⛰️  Features
+
+- *(net)* Add shutdown function ([#69](https://github.com/n0-computer/iroh-gossip/issues/69)) - ([3cf2cd2](https://github.com/n0-computer/iroh-gossip/commit/3cf2cd2f3af5c79832b335b525b34db4290d0332))
+
+### 🐛 Bug Fixes
+
+- *(hyparview)* [**breaking**] Only add peers to active view after receiving neighbor messages ([#56](https://github.com/n0-computer/iroh-gossip/issues/56)) - ([5a441e6](https://github.com/n0-computer/iroh-gossip/commit/5a441e6cf5589fc3c7cf3c290005b1094895038c))
+- *(hyparview)* Use shuffle replies as intended ([#57](https://github.com/n0-computer/iroh-gossip/issues/57)) - ([9632ced](https://github.com/n0-computer/iroh-gossip/commit/9632ced028ad7c211ac256b89d7ac0fcb32f55a6))
+- *(hyparview)* Don't emit PeerData event for empty PeerData - ([c345f0a](https://github.com/n0-computer/iroh-gossip/commit/c345f0a0a6a099643f13a7a6743b308548a1c40e))
+- *(plumtree)* Ensure eager relation is symmetrical - ([0abface](https://github.com/n0-computer/iroh-gossip/commit/0abface77c81dfde91c9f37da1f00bfee36f86d7))
+- *(plumtree)* Clear graft timer to allow retry on new ihaves - ([b65cdce](https://github.com/n0-computer/iroh-gossip/commit/b65cdcea36c8b30ac3ab6443645c6e69795f6ebf))
+
+### 🚜 Refactor
+
+- *(hyparview)* Improve disconnect handling - ([5156d00](https://github.com/n0-computer/iroh-gossip/commit/5156d00f72be478872e7cecdf1b95d739b3b4fca))
+- *(hyparview)* Remove obsolete parameter in hyparview - ([d954aa6](https://github.com/n0-computer/iroh-gossip/commit/d954aa62272d7f781ce762b42b06d2521e7d1b30))
+- *(net)* [**breaking**] Remove `Joined` event, use `NeighborUp` ([#49](https://github.com/n0-computer/iroh-gossip/issues/49)) - ([c06f2ed](https://github.com/n0-computer/iroh-gossip/commit/c06f2ed64cb887d0714dfa1e75c0d66051c9d3e1))
+- [**breaking**] Port to irpc, flatten event enum, remove cli impl ([#67](https://github.com/n0-computer/iroh-gossip/issues/67)) - ([a8d5cd2](https://github.com/n0-computer/iroh-gossip/commit/a8d5cd2b4c749993dd99f9d5eead073fd4b2498d))
+- [**breaking**] Port to iroh@0.90 and n0-snafu ([#77](https://github.com/n0-computer/iroh-gossip/issues/77)) - ([1523227](https://github.com/n0-computer/iroh-gossip/commit/1523227c980c7d58efff805645aa50bea17402b0))
+- [**breaking**] Change wire protocol to use uni streams per topic ([#75](https://github.com/n0-computer/iroh-gossip/issues/75)) - ([db1a135](https://github.com/n0-computer/iroh-gossip/commit/db1a13550d7b014e959fe807b45c3614e26e7105))
+
+### 📚 Documentation
+
+- Deny warnings for docs in CI ([#78](https://github.com/n0-computer/iroh-gossip/issues/78)) - ([b38b38f](https://github.com/n0-computer/iroh-gossip/commit/b38b38fc5970164a3c037b4d6306d8b7aee10f4f))
+
+### 🧪 Testing
+
+- Improve simulator ([#52](https://github.com/n0-computer/iroh-gossip/issues/52)) - ([8c30674](https://github.com/n0-computer/iroh-gossip/commit/8c306742c5823f8a6655252b1dbbbfb021c3400d))
+
+### ⚙️ Miscellaneous Tasks
+
+- Update clippy ([#79](https://github.com/n0-computer/iroh-gossip/issues/79)) - ([07b7b77](https://github.com/n0-computer/iroh-gossip/commit/07b7b77a8ceacad8094ec83209aa3d701a63d5b4))
+- Upgrade to `iroh` at `0.90.0` and `irpc` at `0.5.0` ([#80](https://github.com/n0-computer/iroh-gossip/issues/80)) - ([0e613d8](https://github.com/n0-computer/iroh-gossip/commit/0e613d884e95203940d94b3b5363c972f4ef00d1))
+
+### Change
+
+- *(hyparview)* Send a ShuffleReply before disconnecting ([#59](https://github.com/n0-computer/iroh-gossip/issues/59)) - ([fd379fc](https://github.com/n0-computer/iroh-gossip/commit/fd379fc5f32ee52c2c7aad03c03c373c2ac69816))
+
+## [0.35.0](https://github.com/n0-computer/iroh-gossip/compare/v0.34.1..0.35.0) - 2025-05-12
+
+### 🐛 Bug Fixes
+
+- Respect max message size when constructing IHave messages ([#63](https://github.com/n0-computer/iroh-gossip/issues/63)) - ([77c56f1](https://github.com/n0-computer/iroh-gossip/commit/77c56f1a769e561d1c8b91ebed6e02e7792bc2cb))
+
+### 🚜 Refactor
+
+- [**breaking**] Use new iroh-metrics version, no more global tracking ([#58](https://github.com/n0-computer/iroh-gossip/issues/58)) - ([2a37214](https://github.com/n0-computer/iroh-gossip/commit/2a372144b08f6db43f67536e8694659b4b326698))
+
+### ⚙️ Miscellaneous Tasks
+
+- Update dependencies ([#66](https://github.com/n0-computer/iroh-gossip/issues/66)) - ([dbec9b0](https://github.com/n0-computer/iroh-gossip/commit/dbec9b033cded5aa3e09b0c80d52bed697dfe880))
+- Update to `iroh` v0.35 ([#68](https://github.com/n0-computer/iroh-gossip/issues/68)) - ([e6af27d](https://github.com/n0-computer/iroh-gossip/commit/e6af27d924db780e00b10017b18d4da3ef8db18a))
+
+## [0.34.1](https://github.com/n0-computer/iroh-gossip/compare/v0.34.0..0.34.1) - 2025-03-24
+
+### 🐛 Bug Fixes
+
+- Allow instant reconnects, and always prefer newest connection ([#43](https://github.com/n0-computer/iroh-gossip/issues/43)) - ([ea1c773](https://github.com/n0-computer/iroh-gossip/commit/ea1c773659f88d7eed776b6b15cc0e559267afea))
+
+## [0.34.0](https://github.com/n0-computer/iroh-gossip/compare/v0.33.0..0.34.0) - 2025-03-18
+
+### 🐛 Bug Fixes
+
+- Repo link for flaky tests ([#38](https://github.com/n0-computer/iroh-gossip/issues/38)) - ([0a03543](https://github.com/n0-computer/iroh-gossip/commit/0a03543db6aaedb7ac403e38360d5a1afc88b3f4))
+
+### ⚙️ Miscellaneous Tasks
+
+- Patch to use main branch of iroh dependencies ([#40](https://github.com/n0-computer/iroh-gossip/issues/40)) - ([d76305d](https://github.com/n0-computer/iroh-gossip/commit/d76305da7d75639638efcd537a1ffb13d07ef1ee))
+- Update to latest iroh ([#42](https://github.com/n0-computer/iroh-gossip/issues/42)) - ([129e2e8](https://github.com/n0-computer/iroh-gossip/commit/129e2e80ec7a6efd29606fcdaf0202791a25778f))
+
+## [0.33.0](https://github.com/n0-computer/iroh-gossip/compare/v0.32.0..0.33.0) - 2025-02-25
+
+### ⛰️  Features
+
+- Compile to wasm and run in browsers ([#37](https://github.com/n0-computer/iroh-gossip/issues/37)) - ([8f99f7d](https://github.com/n0-computer/iroh-gossip/commit/8f99f7d85fd8c410512b430a4ee2efd014828550))
+
+### ⚙️ Miscellaneous Tasks
+
+- Patch to use main branch of iroh dependencies ([#36](https://github.com/n0-computer/iroh-gossip/issues/36)) - ([7e16be8](https://github.com/n0-computer/iroh-gossip/commit/7e16be85dbf52af721aa8bb4c68723c029ce4bd2))
+- Upgrade to latest `iroh` and `quic-rpc` ([#39](https://github.com/n0-computer/iroh-gossip/issues/39)) - ([a2ef813](https://github.com/n0-computer/iroh-gossip/commit/a2ef813c6033f1683162bb09d50f1f988f774cbe))
+
+## [0.32.0](https://github.com/n0-computer/iroh-gossip/compare/v0.31.0..0.32.0) - 2025-02-04
+
+### ⛰️  Features
+
+- [**breaking**] Use explicit errors ([#34](https://github.com/n0-computer/iroh-gossip/issues/34)) - ([534f010](https://github.com/n0-computer/iroh-gossip/commit/534f01046332a21f6356d189c686f7c6c17af3c2))
+
+### ⚙️ Miscellaneous Tasks
+
+- Pin nextest version ([#29](https://github.com/n0-computer/iroh-gossip/issues/29)) - ([72b32d2](https://github.com/n0-computer/iroh-gossip/commit/72b32d25e8a810011456a2740581b3b3802f1cab))
+- Remove individual repo project tracking ([#31](https://github.com/n0-computer/iroh-gossip/issues/31)) - ([8a79db6](https://github.com/n0-computer/iroh-gossip/commit/8a79db65a928ae0610d85301b009d3ec13b0fbe1))
+- Update dependencies ([#35](https://github.com/n0-computer/iroh-gossip/issues/35)) - ([3c257a1](https://github.com/n0-computer/iroh-gossip/commit/3c257a1db9ea0ade0c35b060a28b1287321a532a))
+
+## [0.31.0](https://github.com/n0-computer/iroh-gossip/compare/v0.30.1..0.31.0) - 2025-01-14
+
+### ⚙️ Miscellaneous Tasks
+
+- Add project tracking ([#28](https://github.com/n0-computer/iroh-gossip/issues/28)) - ([bf89c85](https://github.com/n0-computer/iroh-gossip/commit/bf89c85c3ffa78fea462d5ad7c7bae10f828d7b0))
+- Upgrade to `iroh@v0.31.0` ([#30](https://github.com/n0-computer/iroh-gossip/issues/30)) - ([60f371e](https://github.com/n0-computer/iroh-gossip/commit/60f371ec61992889c390d64611e907a491812b96))
+
+## [0.30.1](https://github.com/n0-computer/iroh-gossip/compare/v0.30.0..0.30.1) - 2024-12-20
+
+### 🐛 Bug Fixes
+
+- Add missing Sync bound to EventStream's inner - ([d7039c4](https://github.com/n0-computer/iroh-gossip/commit/d7039c4684e0072bce1c1fe4bce7d39ba42e8390))
+
+## [0.30.0](https://github.com/n0-computer/iroh-gossip/compare/v0.29.0..0.30.0) - 2024-12-17
+
+### ⛰️  Features
+
+- Remove rpc from default features - ([10e9b68](https://github.com/n0-computer/iroh-gossip/commit/10e9b685f6ede483ace4be4360466a111dfcfec4))
+- [**breaking**] Introduce builder pattern to construct Gossip ([#17](https://github.com/n0-computer/iroh-gossip/issues/17)) - ([0e6fd20](https://github.com/n0-computer/iroh-gossip/commit/0e6fd20203c6468af9d783f1e62379eca283188a))
+- Update to iroh 0.30 - ([b3a5a33](https://github.com/n0-computer/iroh-gossip/commit/b3a5a33351b57e01cba816826d642f3314f00e7d))
+
+### 🐛 Bug Fixes
+
+- Improve connection handling ([#22](https://github.com/n0-computer/iroh-gossip/issues/22)) - ([61e64c7](https://github.com/n0-computer/iroh-gossip/commit/61e64c79961640cd2aa2412e607035cd7750f824))
+- Prevent task leak for rpc handler task ([#20](https://github.com/n0-computer/iroh-gossip/issues/20)) - ([03db85d](https://github.com/n0-computer/iroh-gossip/commit/03db85d218738df7b4c39cc2d178f2f90ba58ea3))
+
+### 🚜 Refactor
+
+- Adapt ProtocolHandler impl ([#16](https://github.com/n0-computer/iroh-gossip/issues/16)) - ([d5285e7](https://github.com/n0-computer/iroh-gossip/commit/d5285e7240da4e233be7c8f83099741f6f272bb0))
+- [**breaking**] Align api naming between RPC and direct calls  - ([35d73db](https://github.com/n0-computer/iroh-gossip/commit/35d73db8a982d7bbe1eb3cba126ac25422f5c1b6))
+- Manually track dials, instead of using `iroh::dialer` ([#21](https://github.com/n0-computer/iroh-gossip/issues/21)) - ([2d90828](https://github.com/n0-computer/iroh-gossip/commit/2d90828a682574e382f5b0fbc43395ff698a63e2))
+
+### 📚 Documentation
+
+- Add "Getting Started" to the README and add the readme to the docs ([#19](https://github.com/n0-computer/iroh-gossip/issues/19)) - ([1625123](https://github.com/n0-computer/iroh-gossip/commit/1625123a89278cb09827abe8e7ee2bf409cf2f20))
+
+## [0.29.0](https://github.com/n0-computer/iroh-gossip/compare/v0.28.1..0.29.0) - 2024-12-04
+
+### ⛰️  Features
+
+- Add cli - ([16f3505](https://github.com/n0-computer/iroh-gossip/commit/16f35050fe47534052e79dcbca42da4212dc6256))
+- Update to latest iroh ([#11](https://github.com/n0-computer/iroh-gossip/issues/11)) - ([89e91a3](https://github.com/n0-computer/iroh-gossip/commit/89e91a34bd046fb7fbd504b2b8d0849e2865d410))
+- Reexport ALPN at top level - ([7a0ec63](https://github.com/n0-computer/iroh-gossip/commit/7a0ec63a0ab7f14d78c77f8c779b2abef956da40))
+- Update to iroh@0.29.0  - ([a28327c](https://github.com/n0-computer/iroh-gossip/commit/a28327ca512407a18a3802800c6712adc33acf84))
+
+### 🚜 Refactor
+
+- Use hex for debugging and display - ([b487112](https://github.com/n0-computer/iroh-gossip/commit/b4871121ed1862da4459353f63415d8ae4b3f8c5))
+
+### ⚙️ Miscellaneous Tasks
+
+- Fixup deny.toml - ([e614d86](https://github.com/n0-computer/iroh-gossip/commit/e614d86c0a690ac4acb6b4ef394a0bf55662dcc7))
+- Prune some deps ([#8](https://github.com/n0-computer/iroh-gossip/issues/8)) - ([ba0f6b0](https://github.com/n0-computer/iroh-gossip/commit/ba0f6b0f54a740d8eae7ee6683f4aa1d8d8c8eb2))
+- Init changelog - ([3eb675b](https://github.com/n0-computer/iroh-gossip/commit/3eb675b6a1ad51279ce225d0b36ef9957f17aa06))
+- Fix changelog generation - ([95a4611](https://github.com/n0-computer/iroh-gossip/commit/95a4611aafee248052d3dc9ef97c9bc8a26d4821))
+
+## [0.28.1](https://github.com/n0-computer/iroh-gossip/compare/v0.28.0..v0.28.1) - 2024-11-04
+
+### 🐛 Bug Fixes
+
+- Update to quic-rpc@0.14 - ([7b73408](https://github.com/n0-computer/iroh-gossip/commit/7b73408e80381b77534ae3721be0421da110de80))
+- Use correctly patched iroh-net - ([276e36a](https://github.com/n0-computer/iroh-gossip/commit/276e36aa1caff8d41f89d57d8aef229ffa9924cb))
+
+### ⚙️ Miscellaneous Tasks
+
+- Release iroh-gossip version 0.28.1 - ([efce3e1](https://github.com/n0-computer/iroh-gossip/commit/efce3e1dc991c15a7f1fc6f579f04876a22a7b1e))
+
+
diff --git a/third_party/iroh-org/iroh-gossip/Cargo.lock b/third_party/iroh-org/iroh-gossip/Cargo.lock
new file mode 100644
index 0000000..4774025
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/Cargo.lock
@@ -0,0 +1,4965 @@
+# This file is automatically @generated by Cargo.
+# It is not intended for manual editing.
+version = 4
+
+[[package]]
+name = "ahash"
+version = "0.8.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
+dependencies = [
+ "cfg-if",
+ "getrandom 0.3.4",
+ "once_cell",
+ "version_check",
+ "zerocopy",
+]
+
+[[package]]
+name = "aho-corasick"
+version = "1.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "allocator-api2"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
+
+[[package]]
+name = "android_system_properties"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "anstream"
+version = "0.6.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
+dependencies = [
+ "anstyle",
+ "anstyle-parse",
+ "anstyle-query",
+ "anstyle-wincon",
+ "colorchoice",
+ "is_terminal_polyfill",
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle"
+version = "1.0.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
+
+[[package]]
+name = "anstyle-parse"
+version = "0.2.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
+dependencies = [
+ "utf8parse",
+]
+
+[[package]]
+name = "anstyle-query"
+version = "1.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anstyle-wincon"
+version = "3.0.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
+dependencies = [
+ "anstyle",
+ "once_cell_polyfill",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "anyhow"
+version = "1.0.100"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a23eb6b1614318a8071c9b2521f36b424b2c83db5eb3a0fead4a6c0809af6e61"
+
+[[package]]
+name = "arc-swap"
+version = "1.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "51d03449bb8ca2cc2ef70869af31463d1ae5ccc8fa3e334b307203fbf815207e"
+dependencies = [
+ "rustversion",
+]
+
+[[package]]
+name = "arrayref"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
+
+[[package]]
+name = "arrayvec"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
+
+[[package]]
+name = "asn1-rs"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "56624a96882bb8c26d61312ae18cb45868e5a9992ea73c58e45c3101e56a1e60"
+dependencies = [
+ "asn1-rs-derive",
+ "asn1-rs-impl",
+ "displaydoc",
+ "nom",
+ "num-traits",
+ "rusticata-macros",
+ "thiserror 2.0.18",
+ "time",
+]
+
+[[package]]
+name = "asn1-rs-derive"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3109e49b1e4909e9db6515a30c633684d68cdeaa252f215214cb4fa1a5bfee2c"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "asn1-rs-impl"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b18050c2cd6fe86c3a76584ef5e0baf286d038cda203eb6223df2cc413565f7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "async-compat"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1ba85bc55464dcbf728b56d97e119d673f4cf9062be330a9a26f3acf504a590"
+dependencies = [
+ "futures-core",
+ "futures-io",
+ "once_cell",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "async-trait"
+version = "0.1.89"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "async_io_stream"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d7b9decdf35d8908a7e3ef02f64c5e9b1695e230154c0e8de3969142d9b94c"
+dependencies = [
+ "futures",
+ "pharos",
+ "rustc_version",
+]
+
+[[package]]
+name = "atomic-polyfill"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8cf2bce30dfe09ef0bfaef228b9d414faaf7e563035494d7fe092dba54b300f4"
+dependencies = [
+ "critical-section",
+]
+
+[[package]]
+name = "atomic-waker"
+version = "1.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1505bd5d3d116872e7271a6d4e16d81d0c8570876c8de68093a09ac269d8aac0"
+
+[[package]]
+name = "attohttpc"
+version = "0.30.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "16e2cdb6d5ed835199484bb92bb8b3edd526effe995c61732580439c1a67e2e9"
+dependencies = [
+ "base64",
+ "http",
+ "log",
+ "url",
+]
+
+[[package]]
+name = "autocfg"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
+
+[[package]]
+name = "axum"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b52af3cb4058c895d37317bb27508dccc8e5f2d39454016b297bf4a400597b8"
+dependencies = [
+ "axum-core",
+ "bytes",
+ "form_urlencoded",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "itoa",
+ "matchit",
+ "memchr",
+ "mime",
+ "percent-encoding",
+ "pin-project-lite",
+ "serde_core",
+ "serde_json",
+ "serde_path_to_error",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tower",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "axum-core"
+version = "0.5.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "08c78f31d7b1291f7ee735c1c6780ccde7785daae9a9206026862dab7d8792d1"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "http-body-util",
+ "mime",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "backon"
+version = "1.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cffb0e931875b666fc4fcb20fee52e9bbd1ef836fd9e9e04ec21555f9f85f7ef"
+dependencies = [
+ "fastrand",
+ "gloo-timers",
+ "tokio",
+]
+
+[[package]]
+name = "base32"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "022dfe9eb35f19ebbcb51e0b40a5ab759f46ad60cadf7297e0bd085afb50e076"
+
+[[package]]
+name = "base64"
+version = "0.22.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
+
+[[package]]
+name = "base64ct"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2af50177e190e07a26ab74f8b1efbfe2ef87da2116221318cb1c2e82baf7de06"
+
+[[package]]
+name = "bitflags"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
+
+[[package]]
+name = "blake3"
+version = "1.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2468ef7d57b3fb7e16b576e8377cdbde2320c60e1491e961d11da40fc4f02a2d"
+dependencies = [
+ "arrayref",
+ "arrayvec",
+ "cc",
+ "cfg-if",
+ "constant_time_eq",
+ "cpufeatures",
+]
+
+[[package]]
+name = "block-buffer"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "96eb4cdd6cf1b31d671e9efe75c5d1ec614776856cefbe109ca373554a6d514f"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "block2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdeb9d870516001442e364c5220d3574d2da8dc765554b4a617230d33fa58ef5"
+dependencies = [
+ "objc2",
+]
+
+[[package]]
+name = "bumpalo"
+version = "3.19.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
+
+[[package]]
+name = "byteorder"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
+
+[[package]]
+name = "bytes"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b35204fbdc0b3f4446b89fc1ac2cf84a8a68971995d0bf2e925ec7cd960f9cb3"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "cc"
+version = "1.2.54"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6354c81bbfd62d9cfa9cb3c773c2b7b2a3a482d569de977fd0e961f6e7c00583"
+dependencies = [
+ "find-msvc-tools",
+ "shlex",
+]
+
+[[package]]
+name = "cesu8"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6d43a04d8753f35258c91f8ec639f792891f748a1edbd759cf1dcea3382ad83c"
+
+[[package]]
+name = "cfg-if"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
+
+[[package]]
+name = "cfg_aliases"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
+
+[[package]]
+name = "chrono"
+version = "0.4.43"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fac4744fb15ae8337dc853fee7fb3f4e48c0fbaa23d0afe49c447b4fab126118"
+dependencies = [
+ "iana-time-zone",
+ "num-traits",
+ "serde",
+ "windows-link",
+]
+
+[[package]]
+name = "clap"
+version = "4.5.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3e34525d5bbbd55da2bb745d34b36121baac88d07619a9a09cfcf4a6c0832785"
+dependencies = [
+ "clap_builder",
+ "clap_derive",
+]
+
+[[package]]
+name = "clap_builder"
+version = "4.5.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59a20016a20a3da95bef50ec7238dbd09baeef4311dcdd38ec15aba69812fb61"
+dependencies = [
+ "anstream",
+ "anstyle",
+ "clap_lex",
+ "strsim",
+]
+
+[[package]]
+name = "clap_derive"
+version = "4.5.55"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a92793da1a46a5f2a02a6f4c46c6496b28c43638adea8306fcb0caa1634f24e5"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "clap_lex"
+version = "0.7.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c3e64b0cc0439b12df2fa678eae89a1c56a529fd067a9115f7827f1fffd22b32"
+
+[[package]]
+name = "cobs"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fa961b519f0b462e3a3b4a34b64d119eeaca1d59af726fe450bbba07a9fc0a1"
+dependencies = [
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "colorchoice"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
+
+[[package]]
+name = "combine"
+version = "4.6.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba5a308b75df32fe02788e748662718f03fde005016435c444eea572398219fd"
+dependencies = [
+ "bytes",
+ "memchr",
+]
+
+[[package]]
+name = "comfy-table"
+version = "7.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "958c5d6ecf1f214b4c2bbbbf6ab9523a864bd136dcf71a7e8904799acfe1ad47"
+dependencies = [
+ "crossterm",
+ "unicode-segmentation",
+ "unicode-width",
+]
+
+[[package]]
+name = "const-oid"
+version = "0.10.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6ef517f0926dd24a1582492c791b6a4818a4d94e789a334894aa15b0d12f55c"
+
+[[package]]
+name = "constant_time_eq"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
+
+[[package]]
+name = "convert_case"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
+dependencies = [
+ "unicode-segmentation",
+]
+
+[[package]]
+name = "cordyceps"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "688d7fbb8092b8de775ef2536f36c8c31f2bc4006ece2e8d8ad2d17d00ce0a2a"
+dependencies = [
+ "loom",
+ "tracing",
+]
+
+[[package]]
+name = "core-foundation"
+version = "0.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2a6cd9ae233e7f62ba4e9353e81a88df7fc8a5987b8d445b4d90c879bd156f6"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "core-foundation-sys"
+version = "0.8.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
+
+[[package]]
+name = "cpufeatures"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "critical-section"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "790eea4361631c5e7d22598ecd5723ff611904e3344ce8720784c93e3d83d40b"
+
+[[package]]
+name = "crossbeam-channel"
+version = "0.5.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-deque"
+version = "0.8.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9dd111b7b7f7d55b72c0a6ae361660ee5853c9af73f70c3c2ef6858b950e2e51"
+dependencies = [
+ "crossbeam-epoch",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-epoch"
+version = "0.9.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
+dependencies = [
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "crossbeam-utils"
+version = "0.8.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
+
+[[package]]
+name = "crossterm"
+version = "0.29.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b"
+dependencies = [
+ "bitflags",
+ "crossterm_winapi",
+ "document-features",
+ "parking_lot",
+ "rustix",
+ "winapi",
+]
+
+[[package]]
+name = "crossterm_winapi"
+version = "0.9.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"
+dependencies = [
+ "winapi",
+]
+
+[[package]]
+name = "crypto-common"
+version = "0.2.0-rc.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c7722afd27468475c9b6063dc03a57ef2ca833816981619f8ebe64d38d207eef"
+dependencies = [
+ "hybrid-array",
+]
+
+[[package]]
+name = "curve25519-dalek"
+version = "5.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6f9200d1d13637f15a6acb71e758f64624048d85b31a5fdbfd8eca1e2687d0b7"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "curve25519-dalek-derive",
+ "digest",
+ "fiat-crypto",
+ "rand_core",
+ "rustc_version",
+ "serde",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "curve25519-dalek-derive"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f46882e17999c6cc590af592290432be3bce0428cb0d5f8b6715e4dc7b383eb3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "darling"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
+dependencies = [
+ "darling_core",
+ "darling_macro",
+]
+
+[[package]]
+name = "darling_core"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e"
+dependencies = [
+ "fnv",
+ "ident_case",
+ "proc-macro2",
+ "quote",
+ "strsim",
+ "syn",
+]
+
+[[package]]
+name = "darling_macro"
+version = "0.20.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
+dependencies = [
+ "darling_core",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dashmap"
+version = "6.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5041cc499144891f3790297212f32a74fb938e5136a14943f338ef9e0ae276cf"
+dependencies = [
+ "cfg-if",
+ "crossbeam-utils",
+ "hashbrown 0.14.5",
+ "lock_api",
+ "once_cell",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "data-encoding"
+version = "2.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
+
+[[package]]
+name = "der"
+version = "0.8.0-rc.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02c1d73e9668ea6b6a28172aa55f3ebec38507131ce179051c8033b5c6037653"
+dependencies = [
+ "const-oid",
+ "pem-rfc7468",
+ "zeroize",
+]
+
+[[package]]
+name = "der-parser"
+version = "10.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "07da5016415d5a3c4dd39b11ed26f915f52fc4e0dc197d87908bc916e51bc1a6"
+dependencies = [
+ "asn1-rs",
+ "displaydoc",
+ "nom",
+ "num-bigint",
+ "num-traits",
+ "rusticata-macros",
+]
+
+[[package]]
+name = "deranged"
+version = "0.5.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
+dependencies = [
+ "powerfmt",
+]
+
+[[package]]
+name = "derive_builder"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "507dfb09ea8b7fa618fcf76e953f4f5e192547945816d5358edffe39f6f94947"
+dependencies = [
+ "derive_builder_macro",
+]
+
+[[package]]
+name = "derive_builder_core"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2d5bcf7b024d6835cfb3d473887cd966994907effbe9227e8c8219824d06c4e8"
+dependencies = [
+ "darling",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "derive_builder_macro"
+version = "0.20.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab63b0e2bf4d5928aff72e83a7dace85d7bba5fe12dcc3c5a572d78caffd3f3c"
+dependencies = [
+ "derive_builder_core",
+ "syn",
+]
+
+[[package]]
+name = "derive_more"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
+dependencies = [
+ "derive_more-impl",
+]
+
+[[package]]
+name = "derive_more-impl"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
+dependencies = [
+ "convert_case",
+ "proc-macro2",
+ "quote",
+ "rustc_version",
+ "syn",
+ "unicode-xid",
+]
+
+[[package]]
+name = "diatomic-waker"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab03c107fafeb3ee9f5925686dbb7a73bc76e3932abb0d2b365cb64b169cf04c"
+
+[[package]]
+name = "digest"
+version = "0.11.0-rc.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bff8de092798697546237a3a701e4174fe021579faec9b854379af9bf1e31962"
+dependencies = [
+ "block-buffer",
+ "const-oid",
+ "crypto-common",
+]
+
+[[package]]
+name = "dispatch2"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "89a09f22a6c6069a18470eb92d2298acf25463f14256d24778e1230d789a2aec"
+dependencies = [
+ "bitflags",
+ "block2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "displaydoc"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "dlopen2"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09b4f5f101177ff01b8ec4ecc81eead416a8aa42819a2869311b3420fa114ffa"
+dependencies = [
+ "libc",
+ "once_cell",
+ "winapi",
+]
+
+[[package]]
+name = "document-features"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
+dependencies = [
+ "litrs",
+]
+
+[[package]]
+name = "dyn-clone"
+version = "1.0.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
+
+[[package]]
+name = "ed25519"
+version = "3.0.0-rc.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3d058004dae83c9cf58f3d81612d0296bbf0a52dd7d7b6afa30ab7228bb6119f"
+dependencies = [
+ "pkcs8",
+ "serde",
+ "signature",
+]
+
+[[package]]
+name = "ed25519-dalek"
+version = "3.0.0-pre.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ad207ed88a133091f83224265eac21109930db09bedcad05d5252f2af2de20a1"
+dependencies = [
+ "curve25519-dalek",
+ "ed25519",
+ "rand_core",
+ "serde",
+ "sha2",
+ "signature",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "either"
+version = "1.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
+
+[[package]]
+name = "embedded-io"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef1a6892d9eef45c8fa6b9e0086428a2cca8491aca8f787c534a3d6d0bcb3ced"
+
+[[package]]
+name = "embedded-io"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edd0f118536f44f5ccd48bcb8b111bdc3de888b58c74639dfb034a357d0f206d"
+
+[[package]]
+name = "enum-as-inner"
+version = "0.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1e6a265c649f3f5979b601d26f1d05ada116434c87741c9493cb56218f76cbc"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "enum-assoc"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ed8956bd5c1f0415200516e78ff07ec9e16415ade83c056c230d7b7ea0d55b7"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "equivalent"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
+
+[[package]]
+name = "errno"
+version = "0.3.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "fastbloom"
+version = "0.14.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4e7f34442dbe69c60fe8eaf58a8cafff81a1f278816d8ab4db255b3bef4ac3c4"
+dependencies = [
+ "getrandom 0.3.4",
+ "libm",
+ "rand",
+ "siphasher",
+]
+
+[[package]]
+name = "fastrand"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
+
+[[package]]
+name = "fiat-crypto"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64cd1e32ddd350061ae6edb1b082d7c54915b5c672c389143b9a63403a109f24"
+
+[[package]]
+name = "find-msvc-tools"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8591b0bcc8a98a64310a2fae1bb3e9b8564dd10e381e6e28010fde8e8e8568db"
+
+[[package]]
+name = "fixedbitset"
+version = "0.5.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d674e81391d1e1ab681a28d99df07927c6d4aa5b027d7da16ba32d1d21ecd99"
+
+[[package]]
+name = "fnv"
+version = "1.0.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
+
+[[package]]
+name = "foldhash"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
+
+[[package]]
+name = "form_urlencoded"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cb4cb245038516f5f85277875cdaa4f7d2c9a0fa0468de06ed190163b1581fcf"
+dependencies = [
+ "percent-encoding",
+]
+
+[[package]]
+name = "futures"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "65bc07b1a8bc7c85c5f2e110c476c7389b4554ba72af57d8445ea63a576b0876"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-executor",
+ "futures-io",
+ "futures-sink",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-buffered"
+version = "0.2.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a8e0e1f38ec07ba4abbde21eed377082f17ccb988be9d988a5adbf4bafc118fd"
+dependencies = [
+ "cordyceps",
+ "diatomic-waker",
+ "futures-core",
+ "pin-project-lite",
+ "spin 0.10.0",
+]
+
+[[package]]
+name = "futures-channel"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2dff15bf788c671c1934e366d07e30c1814a8ef514e1af724a602e8a2fbe1b10"
+dependencies = [
+ "futures-core",
+ "futures-sink",
+]
+
+[[package]]
+name = "futures-concurrency"
+version = "7.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "175cd8cca9e1d45b87f18ffa75088f2099e3c4fe5e2f83e42de112560bea8ea6"
+dependencies = [
+ "fixedbitset",
+ "futures-core",
+ "futures-lite",
+ "pin-project",
+ "smallvec",
+]
+
+[[package]]
+name = "futures-core"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "05f29059c0c2090612e8d742178b0580d2dc940c837851ad723096f87af6663e"
+
+[[package]]
+name = "futures-executor"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e28d1d997f585e54aebc3f97d39e72338912123a67330d723fdbb564d646c9f"
+dependencies = [
+ "futures-core",
+ "futures-task",
+ "futures-util",
+]
+
+[[package]]
+name = "futures-io"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9e5c1b78ca4aae1ac06c48a526a655760685149f0d465d21f37abfe57ce075c6"
+
+[[package]]
+name = "futures-lite"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f78e10609fe0e0b3f4157ffab1876319b5b0db102a2c60dc4626306dc46b44ad"
+dependencies = [
+ "fastrand",
+ "futures-core",
+ "futures-io",
+ "parking",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "futures-macro"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "162ee34ebcb7c64a8abebc059ce0fee27c2262618d7b60ed8faf72fef13c3650"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "futures-sink"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e575fab7d1e0dcb8d0c7bcf9a63ee213816ab51902e6d244a95819acacf1d4f7"
+
+[[package]]
+name = "futures-task"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f90f7dce0722e95104fcb095585910c0977252f286e354b5e3bd38902cd99988"
+
+[[package]]
+name = "futures-util"
+version = "0.3.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9fa08315bb612088cc391249efdc3bc77536f16c91f6cf495e6fbe85b20a4a81"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "futures-io",
+ "futures-macro",
+ "futures-sink",
+ "futures-task",
+ "memchr",
+ "pin-project-lite",
+ "pin-utils",
+ "slab",
+]
+
+[[package]]
+name = "generator"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "52f04ae4152da20c76fe800fa48659201d5cf627c5149ca0b707b69d7eef6cf9"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "libc",
+ "log",
+ "rustversion",
+ "windows-link",
+ "windows-result",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.2.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "wasi",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "getrandom"
+version = "0.3.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
+dependencies = [
+ "cfg-if",
+ "js-sys",
+ "libc",
+ "r-efi",
+ "wasip2",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "gloo-timers"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbb143cf96099802033e0d4f4963b19fd2e0b728bcf076cd9cf7f6634f092994"
+dependencies = [
+ "futures-channel",
+ "futures-core",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "h2"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f44da3a8150a6703ed5d34e164b875fd14c2cdab9af1252a9a1020bde2bdc54"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "fnv",
+ "futures-core",
+ "futures-sink",
+ "http",
+ "indexmap",
+ "slab",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "hash32"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b0c35f58762feb77d74ebe43bdbc3210f09be9fe6742234d573bacc26ed92b67"
+dependencies = [
+ "byteorder",
+]
+
+[[package]]
+name = "hashbrown"
+version = "0.14.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e5274423e17b7c9fc20b6e7e208532f9b19825d82dfd615708b70edd83df41f1"
+
+[[package]]
+name = "hashbrown"
+version = "0.16.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
+dependencies = [
+ "allocator-api2",
+ "equivalent",
+ "foldhash",
+]
+
+[[package]]
+name = "heapless"
+version = "0.7.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cdc6457c0eb62c71aac4bc17216026d8410337c4126773b9c5daba343f17964f"
+dependencies = [
+ "atomic-polyfill",
+ "hash32",
+ "rustc_version",
+ "serde",
+ "spin 0.9.8",
+ "stable_deref_trait",
+]
+
+[[package]]
+name = "heck"
+version = "0.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
+
+[[package]]
+name = "hex"
+version = "0.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
+
+[[package]]
+name = "hickory-proto"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8a6fe56c0038198998a6f217ca4e7ef3a5e51f46163bd6dd60b5c71ca6c6502"
+dependencies = [
+ "async-trait",
+ "bytes",
+ "cfg-if",
+ "data-encoding",
+ "enum-as-inner",
+ "futures-channel",
+ "futures-io",
+ "futures-util",
+ "h2",
+ "http",
+ "idna",
+ "ipnet",
+ "once_cell",
+ "rand",
+ "ring",
+ "rustls",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "hickory-resolver"
+version = "0.25.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc62a9a99b0bfb44d2ab95a7208ac952d31060efc16241c87eaf36406fecf87a"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "hickory-proto",
+ "ipconfig",
+ "moka",
+ "once_cell",
+ "parking_lot",
+ "rand",
+ "resolv-conf",
+ "rustls",
+ "smallvec",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-rustls",
+ "tracing",
+]
+
+[[package]]
+name = "http"
+version = "1.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3ba2a386d7f85a81f119ad7498ebe444d2e22c2af0b86b069416ace48b3311a"
+dependencies = [
+ "bytes",
+ "itoa",
+]
+
+[[package]]
+name = "http-body"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1efedce1fb8e6913f23e0c92de8e62cd5b772a67e7b3946df930a62566c93184"
+dependencies = [
+ "bytes",
+ "http",
+]
+
+[[package]]
+name = "http-body-util"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b021d93e26becf5dc7e1b75b1bed1fd93124b374ceb73f43d4d4eafec896a64a"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "http",
+ "http-body",
+ "pin-project-lite",
+]
+
+[[package]]
+name = "httparse"
+version = "1.10.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6dbf3de79e51f3d586ab4cb9d5c3e2c14aa28ed23d180cf89b4df0454a69cc87"
+
+[[package]]
+name = "httpdate"
+version = "1.0.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df3b46402a9d5adb4c86a0cf463f42e19994e3ee891101b1841f30a545cb49a9"
+
+[[package]]
+name = "humantime"
+version = "2.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "135b12329e5e3ce057a9f972339ea52bc954fe1e9358ef27f95e89716fbc5424"
+
+[[package]]
+name = "humantime-serde"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57a3db5ea5923d99402c94e9feb261dc5ee9b4efa158b0315f788cf549cc200c"
+dependencies = [
+ "humantime",
+ "serde",
+]
+
+[[package]]
+name = "hybrid-array"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b41fb3dc24fe72c2e3a4685eed55917c2fb228851257f4a8f2d985da9443c3e5"
+dependencies = [
+ "typenum",
+]
+
+[[package]]
+name = "hyper"
+version = "1.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2ab2d4f250c3d7b1c9fcdff1cece94ea4e2dfbec68614f7b87cb205f24ca9d11"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "h2",
+ "http",
+ "http-body",
+ "httparse",
+ "httpdate",
+ "itoa",
+ "pin-project-lite",
+ "pin-utils",
+ "smallvec",
+ "tokio",
+ "want",
+]
+
+[[package]]
+name = "hyper-rustls"
+version = "0.27.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3c93eb611681b207e1fe55d5a71ecf91572ec8a6705cdb6857f7d8d5242cf58"
+dependencies = [
+ "http",
+ "hyper",
+ "hyper-util",
+ "rustls",
+ "rustls-pki-types",
+ "tokio",
+ "tokio-rustls",
+ "tower-service",
+ "webpki-roots",
+]
+
+[[package]]
+name = "hyper-util"
+version = "0.1.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "727805d60e7938b76b826a6ef209eb70eaa1812794f9424d4a4e2d740662df5f"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-channel",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "hyper",
+ "ipnet",
+ "libc",
+ "percent-encoding",
+ "pin-project-lite",
+ "socket2 0.6.2",
+ "tokio",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "iana-time-zone"
+version = "0.1.65"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
+dependencies = [
+ "android_system_properties",
+ "core-foundation-sys",
+ "iana-time-zone-haiku",
+ "js-sys",
+ "log",
+ "wasm-bindgen",
+ "windows-core",
+]
+
+[[package]]
+name = "iana-time-zone-haiku"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
+dependencies = [
+ "cc",
+]
+
+[[package]]
+name = "icu_collections"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
+dependencies = [
+ "displaydoc",
+ "potential_utf",
+ "yoke",
+ "zerofrom",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_locale_core"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
+dependencies = [
+ "displaydoc",
+ "litemap",
+ "tinystr",
+ "writeable",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
+dependencies = [
+ "icu_collections",
+ "icu_normalizer_data",
+ "icu_properties",
+ "icu_provider",
+ "smallvec",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_normalizer_data"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
+
+[[package]]
+name = "icu_properties"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
+dependencies = [
+ "icu_collections",
+ "icu_locale_core",
+ "icu_properties_data",
+ "icu_provider",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "icu_properties_data"
+version = "2.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
+
+[[package]]
+name = "icu_provider"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
+dependencies = [
+ "displaydoc",
+ "icu_locale_core",
+ "writeable",
+ "yoke",
+ "zerofrom",
+ "zerotrie",
+ "zerovec",
+]
+
+[[package]]
+name = "ident_case"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
+
+[[package]]
+name = "identity-hash"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dfdd7caa900436d8f13b2346fe10257e0c05c1f1f9e351f4f5d57c03bd5f45da"
+
+[[package]]
+name = "idna"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b0875f23caa03898994f6ddc501886a45c7d3d62d04d2d90788d47be1b1e4de"
+dependencies = [
+ "idna_adapter",
+ "smallvec",
+ "utf8_iter",
+]
+
+[[package]]
+name = "idna_adapter"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3acae9609540aa318d1bc588455225fb2085b9ed0c4f6bd0d9d5bcd86f1a0344"
+dependencies = [
+ "icu_normalizer",
+ "icu_properties",
+]
+
+[[package]]
+name = "igd-next"
+version = "0.16.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "516893339c97f6011282d5825ac94fc1c7aad5cad26bdc2d0cee068c0bf97f97"
+dependencies = [
+ "async-trait",
+ "attohttpc",
+ "bytes",
+ "futures",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "log",
+ "rand",
+ "tokio",
+ "url",
+ "xmltree",
+]
+
+[[package]]
+name = "indexmap"
+version = "2.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
+dependencies = [
+ "equivalent",
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "ipconfig"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b58db92f96b720de98181bbbe63c831e87005ab460c1bf306eb2622b4707997f"
+dependencies = [
+ "socket2 0.5.10",
+ "widestring",
+ "windows-sys 0.48.0",
+ "winreg",
+]
+
+[[package]]
+name = "ipnet"
+version = "2.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "469fb0b9cefa57e3ef31275ee7cacb78f2fdca44e4765491884a2b119d4eb130"
+
+[[package]]
+name = "iri-string"
+version = "0.7.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c91338f0783edbd6195decb37bae672fd3b165faffb89bf7b9e6942f8b1a731a"
+dependencies = [
+ "memchr",
+ "serde",
+]
+
+[[package]]
+name = "iroh"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3790cc3a5ef6a89a1e30b64de54de31e692958e2dc8a37cf2831d52c76805de9"
+dependencies = [
+ "axum",
+ "backon",
+ "bytes",
+ "cfg_aliases",
+ "data-encoding",
+ "derive_more",
+ "ed25519-dalek",
+ "futures-util",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "igd-next",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp 0.8.0",
+ "iroh-relay",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netwatch 0.14.0",
+ "papaya",
+ "pin-project",
+ "pkarr",
+ "pkcs8",
+ "portmapper",
+ "rand",
+ "reqwest",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "serde",
+ "smallvec",
+ "strum",
+ "sync_wrapper",
+ "time",
+ "tokio",
+ "tokio-stream",
+ "tokio-util",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+ "webpki-roots",
+]
+
+[[package]]
+name = "iroh-base"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4c3fc0440c8775bf2677a58550fcef7e544346add01bf1b163f9fc0cedd436e"
+dependencies = [
+ "curve25519-dalek",
+ "data-encoding",
+ "derive_more",
+ "ed25519-dalek",
+ "n0-error",
+ "rand_core",
+ "serde",
+ "url",
+ "zeroize",
+ "zeroize_derive",
+]
+
+[[package]]
+name = "iroh-gossip"
+version = "0.96.0"
+dependencies = [
+ "blake3",
+ "bytes",
+ "clap",
+ "comfy-table",
+ "data-encoding",
+ "derive_more",
+ "ed25519-dalek",
+ "futures-concurrency",
+ "futures-lite",
+ "futures-util",
+ "hex",
+ "humantime-serde",
+ "indexmap",
+ "iroh",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "irpc",
+ "n0-error",
+ "n0-future",
+ "n0-tracing-test",
+ "postcard",
+ "rand",
+ "rand_chacha",
+ "rayon",
+ "serde",
+ "serde-byte-array",
+ "serde_json",
+ "testresult",
+ "tokio",
+ "tokio-util",
+ "toml",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+]
+
+[[package]]
+name = "iroh-metrics"
+version = "0.38.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c946095f060e6e59b9ff30cc26c75cdb758e7fb0cde8312c89e2144654989fcb"
+dependencies = [
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "iroh-metrics-derive",
+ "itoa",
+ "n0-error",
+ "postcard",
+ "reqwest",
+ "ryu",
+ "serde",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "iroh-metrics-derive"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cab063c2bfd6c3d5a33a913d4fdb5252f140db29ec67c704f20f3da7e8f92dbf"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "iroh-quinn"
+version = "0.16.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d8a207ea77da14b683e8d454088795b6ac38e5d5cf26ded6868b9d80392cf8c1"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "iroh-quinn-proto",
+ "iroh-quinn-udp 0.8.0",
+ "pin-project-lite",
+ "rustc-hash",
+ "rustls",
+ "socket2 0.6.2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tokio-stream",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-proto"
+version = "0.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f66e567aa8b052c5632b8fc902fbb503891eda705553494ccddf3505257be40"
+dependencies = [
+ "bytes",
+ "derive_more",
+ "enum-assoc",
+ "fastbloom",
+ "getrandom 0.3.4",
+ "identity-hash",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "rustls-platform-verifier",
+ "slab",
+ "sorted-index-buffer",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "iroh-quinn-udp"
+version = "0.7.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a91fe9ec3db6615d7ab1b303717f3b98fc40b96955a4ea25b113b1b879f7481f"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "iroh-quinn-udp"
+version = "0.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f981dadd5a072a9e0efcd24bdcc388e570073f7e51b33505ceb1ef4668c80c86"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "iroh-relay"
+version = "0.96.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "236c6f131ce774f7cc7548f467890c313b09f7849b8d703360d6602bc8c5184c"
+dependencies = [
+ "ahash",
+ "blake3",
+ "bytes",
+ "cfg_aliases",
+ "clap",
+ "dashmap",
+ "data-encoding",
+ "derive_more",
+ "getrandom 0.3.4",
+ "hickory-resolver",
+ "http",
+ "http-body-util",
+ "hyper",
+ "hyper-util",
+ "iroh-base",
+ "iroh-metrics",
+ "iroh-quinn",
+ "iroh-quinn-proto",
+ "lru",
+ "n0-error",
+ "n0-future",
+ "num_enum",
+ "pin-project",
+ "pkarr",
+ "postcard",
+ "rand",
+ "rcgen",
+ "reloadable-state",
+ "reqwest",
+ "rustls",
+ "rustls-cert-file-reader",
+ "rustls-cert-reloadable-resolver",
+ "rustls-pki-types",
+ "serde",
+ "serde_bytes",
+ "serde_json",
+ "sha1",
+ "simdutf8",
+ "strum",
+ "time",
+ "tokio",
+ "tokio-rustls",
+ "tokio-rustls-acme",
+ "tokio-util",
+ "tokio-websockets",
+ "toml",
+ "tracing",
+ "tracing-subscriber",
+ "url",
+ "vergen-gitcl",
+ "webpki-roots",
+ "ws_stream_wasm",
+ "z32",
+]
+
+[[package]]
+name = "irpc"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1bbc84aaeab13a6d7502bae4f40f2517b643924842e0230ea0bf807477cc208"
+dependencies = [
+ "futures-buffered",
+ "futures-util",
+ "iroh-quinn",
+ "irpc-derive",
+ "n0-error",
+ "n0-future",
+ "postcard",
+ "rcgen",
+ "rustls",
+ "serde",
+ "smallvec",
+ "tokio",
+ "tokio-util",
+ "tracing",
+]
+
+[[package]]
+name = "irpc-derive"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "58148196d2230183c9679431ac99b57e172000326d664e8456fa2cd27af6505a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "is_terminal_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
+
+[[package]]
+name = "itoa"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
+
+[[package]]
+name = "jni"
+version = "0.21.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1a87aa2bb7d2af34197c04845522473242e1aa17c12f4935d5856491a7fb8c97"
+dependencies = [
+ "cesu8",
+ "cfg-if",
+ "combine",
+ "jni-sys",
+ "log",
+ "thiserror 1.0.69",
+ "walkdir",
+ "windows-sys 0.45.0",
+]
+
+[[package]]
+name = "jni-sys"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8eaf4bc02d17cbdd7ff4c7438cafcdf7fb9a4613313ad11b4f8fefe7d3fa0130"
+
+[[package]]
+name = "js-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
+dependencies = [
+ "once_cell",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "lazy_static"
+version = "1.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
+
+[[package]]
+name = "libc"
+version = "0.2.180"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bcc35a38544a891a5f7c865aca548a982ccb3b8650a5b06d0fd33a10283c56fc"
+
+[[package]]
+name = "libm"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
+
+[[package]]
+name = "linux-raw-sys"
+version = "0.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "df1d3c3b53da64cf5760482273a98e575c651a67eec7f77df96b5b642de8f039"
+
+[[package]]
+name = "litemap"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
+
+[[package]]
+name = "litrs"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
+
+[[package]]
+name = "lock_api"
+version = "0.4.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
+dependencies = [
+ "scopeguard",
+]
+
+[[package]]
+name = "log"
+version = "0.4.29"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
+
+[[package]]
+name = "loom"
+version = "0.7.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "419e0dc8046cb947daa77eb95ae174acfbddb7673b4151f56d1eed8e93fbfaca"
+dependencies = [
+ "cfg-if",
+ "generator",
+ "scoped-tls",
+ "tracing",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "lru"
+version = "0.16.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a1dc47f592c06f33f8e3aea9591776ec7c9f9e4124778ff8a3c3b87159f7e593"
+dependencies = [
+ "hashbrown 0.16.1",
+]
+
+[[package]]
+name = "lru-slab"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "112b39cec0b298b6c1999fee3e31427f74f676e4cb9879ed1a121b43661a4154"
+
+[[package]]
+name = "mac-addr"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3d25b0e0b648a86960ac23b7ad4abb9717601dec6f66c165f5b037f3f03065f"
+
+[[package]]
+name = "matchers"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d1525a2a28c7f4fa0fc98bb91ae755d1e2d1505079e05539e35bc876b5d65ae9"
+dependencies = [
+ "regex-automata",
+]
+
+[[package]]
+name = "matchit"
+version = "0.8.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "47e1ffaa40ddd1f3ed91f717a33c8c0ee23fff369e3aa8772b9605cc1d22f4c3"
+
+[[package]]
+name = "memchr"
+version = "2.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f52b00d39961fc5b2736ea853c9cc86238e165017a493d1d5c8eac6bdc4cc273"
+
+[[package]]
+name = "mime"
+version = "0.3.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6877bb514081ee2a7ff5ef9de3281f14a4dd4bceac4c09388074a6b5df8a139a"
+
+[[package]]
+name = "minimal-lexical"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
+
+[[package]]
+name = "mio"
+version = "1.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
+dependencies = [
+ "libc",
+ "wasi",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "moka"
+version = "0.12.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac832c50ced444ef6be0767a008b02c106a909ba79d1d830501e94b96f6b7e"
+dependencies = [
+ "crossbeam-channel",
+ "crossbeam-epoch",
+ "crossbeam-utils",
+ "equivalent",
+ "parking_lot",
+ "portable-atomic",
+ "smallvec",
+ "tagptr",
+ "uuid",
+]
+
+[[package]]
+name = "n0-error"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af4782b4baf92d686d161c15460c83d16ebcfd215918763903e9619842665cae"
+dependencies = [
+ "anyhow",
+ "n0-error-macros",
+ "spez",
+]
+
+[[package]]
+name = "n0-error-macros"
+version = "0.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "03755949235714b2b307e5ae89dd8c1c2531fb127d9b8b7b4adf9c876cd3ed18"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "n0-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e2ab99dfb861450e68853d34ae665243a88b8c493d01ba957321a1e9b2312bbe"
+dependencies = [
+ "cfg_aliases",
+ "derive_more",
+ "futures-buffered",
+ "futures-lite",
+ "futures-util",
+ "js-sys",
+ "pin-project",
+ "send_wrapper",
+ "tokio",
+ "tokio-util",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-time",
+]
+
+[[package]]
+name = "n0-tracing-test"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "274dc19cfda091561b364e4f61b39aa959ade203232f9794884f1911022e8e59"
+dependencies = [
+ "n0-tracing-test-macro",
+ "tracing-core",
+ "tracing-subscriber",
+]
+
+[[package]]
+name = "n0-tracing-test-macro"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab691281e87f2453a860e76dde99157f4464df18cb7cb3eb9c3847161ccc4ce1"
+dependencies = [
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "n0-watcher"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba717c22ceec021ace0ff7674bf8fd60c9394605740a8201678fc1cb3a7398f6"
+dependencies = [
+ "derive_more",
+ "n0-error",
+ "n0-future",
+]
+
+[[package]]
+name = "netdev"
+version = "0.40.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc9815643a243856e7bd84524e1ff739e901e846cfb06ad9627cd2b6d59bd737"
+dependencies = [
+ "block2",
+ "dispatch2",
+ "dlopen2",
+ "ipnet",
+ "libc",
+ "mac-addr",
+ "netlink-packet-core",
+ "netlink-packet-route 0.25.1",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "once_cell",
+ "plist",
+ "windows-sys 0.59.0",
+]
+
+[[package]]
+name = "netlink-packet-core"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3463cbb78394cb0141e2c926b93fc2197e473394b761986eca3b9da2c63ae0f4"
+dependencies = [
+ "paste",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.25.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ec2f5b6839be2a19d7fa5aab5bc444380f6311c2b693551cb80f45caaa7b5ef"
+dependencies = [
+ "bitflags",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-packet-route"
+version = "0.28.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4ce3636fa715e988114552619582b530481fd5ef176a1e5c1bf024077c2c9445"
+dependencies = [
+ "bitflags",
+ "libc",
+ "log",
+ "netlink-packet-core",
+]
+
+[[package]]
+name = "netlink-proto"
+version = "0.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b65d130ee111430e47eed7896ea43ca693c387f097dd97376bffafbf25812128"
+dependencies = [
+ "bytes",
+ "futures",
+ "log",
+ "netlink-packet-core",
+ "netlink-sys",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "netlink-sys"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd6c30ed10fa69cc491d491b85cc971f6bdeb8e7367b7cde2ee6cc878d583fae"
+dependencies = [
+ "bytes",
+ "futures-util",
+ "libc",
+ "log",
+ "tokio",
+]
+
+[[package]]
+name = "netwatch"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "970729c08dbe7987d698f996c6b4945cbfdcdd6ee627df6de51d5469cec13b99"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "cfg_aliases",
+ "derive_more",
+ "iroh-quinn-udp 0.7.0",
+ "js-sys",
+ "libc",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netlink-packet-core",
+ "netlink-packet-route 0.28.0",
+ "netlink-proto",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "pin-project-lite",
+ "serde",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "web-sys",
+ "windows",
+ "windows-result",
+ "wmi",
+]
+
+[[package]]
+name = "netwatch"
+version = "0.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "454b8c0759b2097581f25ed5180b4a1d14c324fde6d0734932a288e044d06232"
+dependencies = [
+ "atomic-waker",
+ "bytes",
+ "cfg_aliases",
+ "derive_more",
+ "iroh-quinn-udp 0.8.0",
+ "js-sys",
+ "libc",
+ "n0-error",
+ "n0-future",
+ "n0-watcher",
+ "netdev",
+ "netlink-packet-core",
+ "netlink-packet-route 0.28.0",
+ "netlink-proto",
+ "netlink-sys",
+ "objc2-core-foundation",
+ "objc2-system-configuration",
+ "pin-project-lite",
+ "serde",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tracing",
+ "web-sys",
+ "windows",
+ "windows-result",
+ "wmi",
+]
+
+[[package]]
+name = "nom"
+version = "7.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
+dependencies = [
+ "memchr",
+ "minimal-lexical",
+]
+
+[[package]]
+name = "ntimestamp"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c50f94c405726d3e0095e89e72f75ce7f6587b94a8bd8dc8054b73f65c0fd68c"
+dependencies = [
+ "base32",
+ "document-features",
+ "getrandom 0.2.17",
+ "httpdate",
+ "js-sys",
+ "once_cell",
+ "serde",
+]
+
+[[package]]
+name = "nu-ansi-term"
+version = "0.50.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "num-bigint"
+version = "0.4.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
+dependencies = [
+ "num-integer",
+ "num-traits",
+]
+
+[[package]]
+name = "num-conv"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
+
+[[package]]
+name = "num-integer"
+version = "0.1.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
+dependencies = [
+ "num-traits",
+]
+
+[[package]]
+name = "num-traits"
+version = "0.2.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
+dependencies = [
+ "autocfg",
+]
+
+[[package]]
+name = "num_enum"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1207a7e20ad57b847bbddc6776b968420d38292bbfe2089accff5e19e82454c"
+dependencies = [
+ "num_enum_derive",
+ "rustversion",
+]
+
+[[package]]
+name = "num_enum_derive"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff32365de1b6743cb203b710788263c44a03de03802daf96092f2da4fe6ba4d7"
+dependencies = [
+ "proc-macro-crate",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "num_threads"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c7398b9c8b70908f6371f47ed36737907c87c52af34c268fed0bf0ceb92ead9"
+dependencies = [
+ "libc",
+]
+
+[[package]]
+name = "objc2"
+version = "0.6.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b7c2599ce0ec54857b29ce62166b0ed9b4f6f1a70ccc9a71165b6154caca8c05"
+dependencies = [
+ "objc2-encode",
+]
+
+[[package]]
+name = "objc2-core-foundation"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
+dependencies = [
+ "bitflags",
+ "block2",
+ "dispatch2",
+ "libc",
+ "objc2",
+]
+
+[[package]]
+name = "objc2-encode"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ef25abbcd74fb2609453eb695bd2f860d389e457f67dc17cafc8b8cbc89d0c33"
+
+[[package]]
+name = "objc2-security"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "709fe137109bd1e8b5a99390f77a7d8b2961dafc1a1c5db8f2e60329ad6d895a"
+dependencies = [
+ "bitflags",
+ "objc2",
+ "objc2-core-foundation",
+]
+
+[[package]]
+name = "objc2-system-configuration"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7216bd11cbda54ccabcab84d523dc93b858ec75ecfb3a7d89513fa22464da396"
+dependencies = [
+ "bitflags",
+ "dispatch2",
+ "libc",
+ "objc2",
+ "objc2-core-foundation",
+ "objc2-security",
+]
+
+[[package]]
+name = "oid-registry"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12f40cff3dde1b6087cc5d5f5d4d65712f34016a03ed60e9c08dcc392736b5b7"
+dependencies = [
+ "asn1-rs",
+]
+
+[[package]]
+name = "once_cell"
+version = "1.21.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
+dependencies = [
+ "critical-section",
+ "portable-atomic",
+]
+
+[[package]]
+name = "once_cell_polyfill"
+version = "1.70.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
+
+[[package]]
+name = "openssl-probe"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7c87def4c32ab89d880effc9e097653c8da5d6ef28e6b539d313baaacfbafcbe"
+
+[[package]]
+name = "papaya"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f92dd0b07c53a0a0c764db2ace8c541dc47320dad97c2200c2a637ab9dd2328f"
+dependencies = [
+ "equivalent",
+ "seize",
+]
+
+[[package]]
+name = "parking"
+version = "2.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f38d5652c16fde515bb1ecef450ab0f6a219d619a7274976324d5e377f7dceba"
+
+[[package]]
+name = "parking_lot"
+version = "0.12.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
+dependencies = [
+ "lock_api",
+ "parking_lot_core",
+]
+
+[[package]]
+name = "parking_lot_core"
+version = "0.9.12"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
+dependencies = [
+ "cfg-if",
+ "libc",
+ "redox_syscall",
+ "smallvec",
+ "windows-link",
+]
+
+[[package]]
+name = "paste"
+version = "1.0.15"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
+
+[[package]]
+name = "pem"
+version = "3.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d30c53c26bc5b31a98cd02d20f25a7c8567146caf63ed593a9d87b2775291be"
+dependencies = [
+ "base64",
+ "serde_core",
+]
+
+[[package]]
+name = "pem-rfc7468"
+version = "1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a6305423e0e7738146434843d1694d621cce767262b2a86910beab705e4493d9"
+dependencies = [
+ "base64ct",
+]
+
+[[package]]
+name = "percent-encoding"
+version = "2.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b4f627cb1b25917193a259e49bdad08f671f8d9708acfd5fe0a8c1455d87220"
+
+[[package]]
+name = "pharos"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e9567389417feee6ce15dd6527a8a1ecac205ef62c2932bcf3d9f6fc5b78b414"
+dependencies = [
+ "futures",
+ "rustc_version",
+]
+
+[[package]]
+name = "pin-project"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677f1add503faace112b9f1373e43e9e054bfdd22ff1a63c1bc485eaec6a6a8a"
+dependencies = [
+ "pin-project-internal",
+]
+
+[[package]]
+name = "pin-project-internal"
+version = "1.1.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e918e4ff8c4549eb882f14b3a4bc8c8bc93de829416eacf579f1207a8fbf861"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "pin-project-lite"
+version = "0.2.16"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3b3cff922bd51709b605d9ead9aa71031d81447142d828eb4a6eba76fe619f9b"
+
+[[package]]
+name = "pin-utils"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8b870d8c151b6f2fb93e84a13146138f05d02ed11c7e7c54f8826aaaf7c9f184"
+
+[[package]]
+name = "pkarr"
+version = "5.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d346b545765a0ef58b6a7e160e17ddaa7427f439b7b9a287df6c88c9e04bf2"
+dependencies = [
+ "async-compat",
+ "base32",
+ "bytes",
+ "cfg_aliases",
+ "document-features",
+ "dyn-clone",
+ "ed25519-dalek",
+ "futures-buffered",
+ "futures-lite",
+ "getrandom 0.3.4",
+ "log",
+ "lru",
+ "ntimestamp",
+ "reqwest",
+ "self_cell",
+ "serde",
+ "sha1_smol",
+ "simple-dns",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "url",
+ "wasm-bindgen-futures",
+]
+
+[[package]]
+name = "pkcs8"
+version = "0.11.0-rc.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b226d2cc389763951db8869584fd800cbbe2962bf454e2edeb5172b31ee99774"
+dependencies = [
+ "der",
+ "spki",
+]
+
+[[package]]
+name = "plist"
+version = "1.8.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "740ebea15c5d1428f910cd1a5f52cebf8d25006245ed8ade92702f4943d91e07"
+dependencies = [
+ "base64",
+ "indexmap",
+ "quick-xml",
+ "serde",
+ "time",
+]
+
+[[package]]
+name = "portable-atomic"
+version = "1.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f89776e4d69bb58bc6993e99ffa1d11f228b839984854c7daeb5d37f87cbe950"
+
+[[package]]
+name = "portmapper"
+version = "0.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f29fb522a166045a35b507dea30e3eb69bca1c5a53669d252744d5a0d8474ffa"
+dependencies = [
+ "base64",
+ "bytes",
+ "derive_more",
+ "futures-lite",
+ "futures-util",
+ "hyper-util",
+ "igd-next",
+ "iroh-metrics",
+ "libc",
+ "n0-error",
+ "netwatch 0.13.0",
+ "num_enum",
+ "rand",
+ "serde",
+ "smallvec",
+ "socket2 0.6.2",
+ "time",
+ "tokio",
+ "tokio-util",
+ "tower-layer",
+ "tracing",
+ "url",
+]
+
+[[package]]
+name = "postcard"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6764c3b5dd454e283a30e6dfe78e9b31096d9e32036b5d1eaac7a6119ccb9a24"
+dependencies = [
+ "cobs",
+ "embedded-io 0.4.0",
+ "embedded-io 0.6.1",
+ "heapless",
+ "postcard-derive",
+ "serde",
+]
+
+[[package]]
+name = "postcard-derive"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e0232bd009a197ceec9cc881ba46f727fcd8060a2d8d6a9dde7a69030a6fe2bb"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "potential_utf"
+version = "0.1.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
+dependencies = [
+ "zerovec",
+]
+
+[[package]]
+name = "powerfmt"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
+
+[[package]]
+name = "ppv-lite86"
+version = "0.2.21"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
+dependencies = [
+ "zerocopy",
+]
+
+[[package]]
+name = "proc-macro-crate"
+version = "3.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "219cb19e96be00ab2e37d6e299658a0cfa83e52429179969b0f0121b4ac46983"
+dependencies = [
+ "toml_edit",
+]
+
+[[package]]
+name = "proc-macro2"
+version = "1.0.106"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "quick-xml"
+version = "0.38.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b66c2058c55a409d601666cffe35f04333cf1013010882cec174a7467cd4e21c"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "quinn"
+version = "0.11.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9e20a958963c291dc322d98411f541009df2ced7b5a4f2bd52337638cfccf20"
+dependencies = [
+ "bytes",
+ "cfg_aliases",
+ "pin-project-lite",
+ "quinn-proto",
+ "quinn-udp",
+ "rustc-hash",
+ "rustls",
+ "socket2 0.6.2",
+ "thiserror 2.0.18",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-proto"
+version = "0.11.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f1906b49b0c3bc04b5fe5d86a77925ae6524a19b816ae38ce1e426255f1d8a31"
+dependencies = [
+ "bytes",
+ "getrandom 0.3.4",
+ "lru-slab",
+ "rand",
+ "ring",
+ "rustc-hash",
+ "rustls",
+ "rustls-pki-types",
+ "slab",
+ "thiserror 2.0.18",
+ "tinyvec",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "quinn-udp"
+version = "0.5.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "addec6a0dcad8a8d96a771f815f0eaf55f9d1805756410b39f5fa81332574cbd"
+dependencies = [
+ "cfg_aliases",
+ "libc",
+ "once_cell",
+ "socket2 0.6.2",
+ "tracing",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "quote"
+version = "1.0.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "21b2ebcf727b7760c461f091f9f0f539b77b8e87f2fd88131e7f1b433b3cece4"
+dependencies = [
+ "proc-macro2",
+]
+
+[[package]]
+name = "r-efi"
+version = "5.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
+
+[[package]]
+name = "rand"
+version = "0.9.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
+dependencies = [
+ "rand_chacha",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_chacha"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
+dependencies = [
+ "ppv-lite86",
+ "rand_core",
+]
+
+[[package]]
+name = "rand_core"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
+dependencies = [
+ "getrandom 0.3.4",
+]
+
+[[package]]
+name = "rayon"
+version = "1.11.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "368f01d005bf8fd9b1206fb6fa653e6c4a81ceb1466406b81792d87c5677a58f"
+dependencies = [
+ "either",
+ "rayon-core",
+]
+
+[[package]]
+name = "rayon-core"
+version = "1.13.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
+dependencies = [
+ "crossbeam-deque",
+ "crossbeam-utils",
+]
+
+[[package]]
+name = "rcgen"
+version = "0.14.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10b99e0098aa4082912d4c649628623db6aba77335e4f4569ff5083a6448b32e"
+dependencies = [
+ "pem",
+ "ring",
+ "rustls-pki-types",
+ "time",
+ "x509-parser",
+ "yasna",
+]
+
+[[package]]
+name = "redox_syscall"
+version = "0.5.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "regex-automata"
+version = "0.4.13"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5276caf25ac86c8d810222b3dbb938e512c55c6831a10f3e6ed1c93b84041f1c"
+dependencies = [
+ "aho-corasick",
+ "memchr",
+ "regex-syntax",
+]
+
+[[package]]
+name = "regex-syntax"
+version = "0.8.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2d987857b319362043e95f5353c0535c1f58eec5336fdfcf626430af7def58"
+
+[[package]]
+name = "reloadable-core"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1dc20ac1418988b60072d783c9f68e28a173fb63493c127952f6face3b40c6e0"
+
+[[package]]
+name = "reloadable-state"
+version = "0.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3853ef78d45b50f8b989896304a85239539d39b7f866a000e8846b9b72d74ce8"
+dependencies = [
+ "arc-swap",
+ "reloadable-core",
+ "tokio",
+]
+
+[[package]]
+name = "reqwest"
+version = "0.12.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eddd3ca559203180a307f12d114c268abf583f59b03cb906fd0b3ff8646c1147"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "futures-util",
+ "http",
+ "http-body",
+ "http-body-util",
+ "hyper",
+ "hyper-rustls",
+ "hyper-util",
+ "js-sys",
+ "log",
+ "percent-encoding",
+ "pin-project-lite",
+ "quinn",
+ "rustls",
+ "rustls-pki-types",
+ "serde",
+ "serde_json",
+ "serde_urlencoded",
+ "sync_wrapper",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+ "tower",
+ "tower-http",
+ "tower-service",
+ "url",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "wasm-streams",
+ "web-sys",
+ "webpki-roots",
+]
+
+[[package]]
+name = "resolv-conf"
+version = "0.7.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e061d1b48cb8d38042de4ae0a7a6401009d6143dc80d2e2d6f31f0bdd6470c7"
+
+[[package]]
+name = "ring"
+version = "0.17.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a4689e6c2294d81e88dc6261c768b63bc4fcdb852be6d1352498b114f61383b7"
+dependencies = [
+ "cc",
+ "cfg-if",
+ "getrandom 0.2.17",
+ "libc",
+ "untrusted",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "rustc-hash"
+version = "2.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
+
+[[package]]
+name = "rustc_version"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
+dependencies = [
+ "semver",
+]
+
+[[package]]
+name = "rusticata-macros"
+version = "4.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "faf0c4a6ece9950b9abdb62b1cfcf2a68b3b67a10ba445b3bb85be2a293d0632"
+dependencies = [
+ "nom",
+]
+
+[[package]]
+name = "rustix"
+version = "1.1.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "146c9e247ccc180c1f61615433868c99f3de3ae256a30a43b49f67c2d9171f34"
+dependencies = [
+ "bitflags",
+ "errno",
+ "libc",
+ "linux-raw-sys",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls"
+version = "0.23.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c665f33d38cea657d9614f766881e4d510e0eda4239891eea56b4cadcf01801b"
+dependencies = [
+ "log",
+ "once_cell",
+ "ring",
+ "rustls-pki-types",
+ "rustls-webpki",
+ "subtle",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-cert-file-reader"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8bb47c2a50fdfdaf95b0ac8b12620fc327da1fd4adbb30d0c56d866b005873ff"
+dependencies = [
+ "rustls-cert-read",
+ "rustls-pki-types",
+ "thiserror 2.0.18",
+ "tokio",
+]
+
+[[package]]
+name = "rustls-cert-read"
+version = "0.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dd46e8c5ae4de3345c4786a83f99ec7aff287209b9e26fa883c473aeb28f19d5"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "rustls-cert-reloadable-resolver"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fe1baa8a3a1f05eaa9fc55aed4342867f70e5c170ea3bfed1b38c51a4857c0c8"
+dependencies = [
+ "futures-util",
+ "reloadable-state",
+ "rustls",
+ "rustls-cert-read",
+ "thiserror 2.0.18",
+]
+
+[[package]]
+name = "rustls-native-certs"
+version = "0.8.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "612460d5f7bea540c490b2b6395d8e34a953e52b491accd6c86c8164c5932a63"
+dependencies = [
+ "openssl-probe",
+ "rustls-pki-types",
+ "schannel",
+ "security-framework",
+]
+
+[[package]]
+name = "rustls-pki-types"
+version = "1.14.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "be040f8b0a225e40375822a563fa9524378b9d63112f53e19ffff34df5d33fdd"
+dependencies = [
+ "web-time",
+ "zeroize",
+]
+
+[[package]]
+name = "rustls-platform-verifier"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1d99feebc72bae7ab76ba994bb5e121b8d83d910ca40b36e0921f53becc41784"
+dependencies = [
+ "core-foundation",
+ "core-foundation-sys",
+ "jni",
+ "log",
+ "once_cell",
+ "rustls",
+ "rustls-native-certs",
+ "rustls-platform-verifier-android",
+ "rustls-webpki",
+ "security-framework",
+ "security-framework-sys",
+ "webpki-root-certs",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "rustls-platform-verifier-android"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
+
+[[package]]
+name = "rustls-webpki"
+version = "0.103.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7df23109aa6c1567d1c575b9952556388da57401e4ace1d15f79eedad0d8f53"
+dependencies = [
+ "ring",
+ "rustls-pki-types",
+ "untrusted",
+]
+
+[[package]]
+name = "rustversion"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
+
+[[package]]
+name = "ryu"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a50f4cf475b65d88e057964e0e9bb1f0aa9bbb2036dc65c64596b42932536984"
+
+[[package]]
+name = "same-file"
+version = "1.0.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
+dependencies = [
+ "winapi-util",
+]
+
+[[package]]
+name = "schannel"
+version = "0.1.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "891d81b926048e76efe18581bf793546b4c0eaf8448d72be8de2bbee5fd166e1"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "scoped-tls"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1cf6437eb19a8f4a6cc0f7dca544973b0b78843adbfeb3683d1a94a0024a294"
+
+[[package]]
+name = "scopeguard"
+version = "1.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
+
+[[package]]
+name = "security-framework"
+version = "3.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b3297343eaf830f66ede390ea39da1d462b6b0c1b000f420d0a83f898bbbe6ef"
+dependencies = [
+ "bitflags",
+ "core-foundation",
+ "core-foundation-sys",
+ "libc",
+ "security-framework-sys",
+]
+
+[[package]]
+name = "security-framework-sys"
+version = "2.15.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cc1f0cbffaac4852523ce30d8bd3c5cdc873501d96ff467ca09b6767bb8cd5c0"
+dependencies = [
+ "core-foundation-sys",
+ "libc",
+]
+
+[[package]]
+name = "seize"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5b55fb86dfd3a2f5f76ea78310a88f96c4ea21a3031f8d212443d56123fd0521"
+dependencies = [
+ "libc",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "self_cell"
+version = "1.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b12e76d157a900eb52e81bc6e9f3069344290341720e9178cde2407113ac8d89"
+
+[[package]]
+name = "semver"
+version = "1.0.27"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
+
+[[package]]
+name = "send_wrapper"
+version = "0.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "cd0b0ec5f1c1ca621c432a25813d8d60c88abe6d3e08a3eb9cf37d97a0fe3d73"
+
+[[package]]
+name = "serde"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
+dependencies = [
+ "serde_core",
+ "serde_derive",
+]
+
+[[package]]
+name = "serde-byte-array"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63213ee4ed648dbd87db6fa993d4275b46bfb4ddfd95b3756045007c2b28f742"
+dependencies = [
+ "serde",
+]
+
+[[package]]
+name = "serde_bytes"
+version = "0.11.19"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a5d440709e79d88e51ac01c4b72fc6cb7314017bb7da9eeff678aa94c10e3ea8"
+dependencies = [
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_core"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
+dependencies = [
+ "serde_derive",
+]
+
+[[package]]
+name = "serde_derive"
+version = "1.0.228"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "serde_json"
+version = "1.0.149"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
+dependencies = [
+ "itoa",
+ "memchr",
+ "serde",
+ "serde_core",
+ "zmij",
+]
+
+[[package]]
+name = "serde_path_to_error"
+version = "0.1.20"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "10a9ff822e371bb5403e391ecd83e182e0e77ba7f6fe0160b795797109d1b457"
+dependencies = [
+ "itoa",
+ "serde",
+ "serde_core",
+]
+
+[[package]]
+name = "serde_spanned"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "serde_urlencoded"
+version = "0.7.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d3491c14715ca2294c4d6a88f15e84739788c1d030eed8c110436aafdaa2f3fd"
+dependencies = [
+ "form_urlencoded",
+ "itoa",
+ "ryu",
+ "serde",
+]
+
+[[package]]
+name = "sha1"
+version = "0.11.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c777f0a122a53fddb0beb6e706771197000b8eb5c9f42b5b850f450ef48c788"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sha1_smol"
+version = "1.0.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bbfa15b3dddfee50a0fff136974b3e1bde555604ba463834a7eb7deb6417705d"
+
+[[package]]
+name = "sha2"
+version = "0.11.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7535f94fa3339fe9e5e9be6260a909e62af97f6e14b32345ccf79b92b8b81233"
+dependencies = [
+ "cfg-if",
+ "cpufeatures",
+ "digest",
+]
+
+[[package]]
+name = "sharded-slab"
+version = "0.1.7"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
+dependencies = [
+ "lazy_static",
+]
+
+[[package]]
+name = "shlex"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
+
+[[package]]
+name = "signal-hook-registry"
+version = "1.4.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
+dependencies = [
+ "errno",
+ "libc",
+]
+
+[[package]]
+name = "signature"
+version = "3.0.0-rc.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ad0ce3b3f8efd7406f22e2ca5d02be21cdf3b3d1d53ab141f784de8965c7c7e"
+
+[[package]]
+name = "simdutf8"
+version = "0.1.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
+
+[[package]]
+name = "simple-dns"
+version = "0.9.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dee851d0e5e7af3721faea1843e8015e820a234f81fda3dea9247e15bac9a86a"
+dependencies = [
+ "bitflags",
+]
+
+[[package]]
+name = "siphasher"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b2aa850e253778c88a04c3d7323b043aeda9d3e30d5971937c1855769763678e"
+
+[[package]]
+name = "slab"
+version = "0.4.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7a2ae44ef20feb57a68b23d846850f861394c2e02dc425a50098ae8c90267589"
+
+[[package]]
+name = "smallvec"
+version = "1.15.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
+
+[[package]]
+name = "socket2"
+version = "0.5.10"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e22376abed350d73dd1cd119b57ffccad95b4e585a7cda43e286245ce23c0678"
+dependencies = [
+ "libc",
+ "windows-sys 0.52.0",
+]
+
+[[package]]
+name = "socket2"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0"
+dependencies = [
+ "libc",
+ "windows-sys 0.60.2",
+]
+
+[[package]]
+name = "sorted-index-buffer"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ea06cc588e43c632923a55450401b8f25e628131571d4e1baea1bdfdb2b5ed06"
+
+[[package]]
+name = "spez"
+version = "0.1.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c87e960f4dca2788eeb86bbdde8dd246be8948790b7618d656e68f9b720a86e8"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "spin"
+version = "0.9.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67"
+dependencies = [
+ "lock_api",
+]
+
+[[package]]
+name = "spin"
+version = "0.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
+
+[[package]]
+name = "spki"
+version = "0.8.0-rc.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8baeff88f34ed0691978ec34440140e1572b68c7dd4a495fd14a3dc1944daa80"
+dependencies = [
+ "base64ct",
+ "der",
+]
+
+[[package]]
+name = "stable_deref_trait"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
+
+[[package]]
+name = "strsim"
+version = "0.11.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
+
+[[package]]
+name = "strum"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf"
+dependencies = [
+ "strum_macros",
+]
+
+[[package]]
+name = "strum_macros"
+version = "0.27.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7"
+dependencies = [
+ "heck",
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "subtle"
+version = "2.6.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "13c2bddecc57b384dee18652358fb23172facb8a2c51ccc10d74c157bdea3292"
+
+[[package]]
+name = "syn"
+version = "2.0.114"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "unicode-ident",
+]
+
+[[package]]
+name = "sync_wrapper"
+version = "1.0.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0bf256ce5efdfa370213c1dabab5935a12e49f2c58d15e9eac2870d3b4f27263"
+dependencies = [
+ "futures-core",
+]
+
+[[package]]
+name = "synstructure"
+version = "0.13.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tagptr"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7b2093cf4c8eb1e67749a6762251bc9cd836b6fc171623bd0a9d324d37af2417"
+
+[[package]]
+name = "testresult"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "614b328ff036a4ef882c61570f72918f7e9c5bee1da33f8e7f91e01daee7e56c"
+
+[[package]]
+name = "thiserror"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
+dependencies = [
+ "thiserror-impl 1.0.69",
+]
+
+[[package]]
+name = "thiserror"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
+dependencies = [
+ "thiserror-impl 2.0.18",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "1.0.69"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thiserror-impl"
+version = "2.0.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "thread_local"
+version = "1.1.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
+dependencies = [
+ "cfg-if",
+]
+
+[[package]]
+name = "time"
+version = "0.3.46"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9da98b7d9b7dad93488a84b8248efc35352b0b2657397d4167e7ad67e5d535e5"
+dependencies = [
+ "deranged",
+ "itoa",
+ "js-sys",
+ "libc",
+ "num-conv",
+ "num_threads",
+ "powerfmt",
+ "serde_core",
+ "time-core",
+ "time-macros",
+]
+
+[[package]]
+name = "time-core"
+version = "0.1.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca"
+
+[[package]]
+name = "time-macros"
+version = "0.2.26"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "78cc610bac2dcee56805c99642447d4c5dbde4d01f752ffea0199aee1f601dc4"
+dependencies = [
+ "num-conv",
+ "time-core",
+]
+
+[[package]]
+name = "tinystr"
+version = "0.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
+dependencies = [
+ "displaydoc",
+ "zerovec",
+]
+
+[[package]]
+name = "tinyvec"
+version = "1.10.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa5fdc3bce6191a1dbc8c02d5c8bffcf557bafa17c124c5264a458f1b0613fa"
+dependencies = [
+ "tinyvec_macros",
+]
+
+[[package]]
+name = "tinyvec_macros"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f3ccbac311fea05f86f61904b462b55fb3df8837a366dfc601a0161d0532f20"
+
+[[package]]
+name = "tokio"
+version = "1.49.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72a2903cd7736441aac9df9d7688bd0ce48edccaadf181c3b90be801e81d3d86"
+dependencies = [
+ "bytes",
+ "libc",
+ "mio",
+ "pin-project-lite",
+ "signal-hook-registry",
+ "socket2 0.6.2",
+ "tokio-macros",
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "tokio-macros"
+version = "2.6.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "af407857209536a95c8e56f8231ef2c2e2aff839b22e07a1ffcbc617e9db9fa5"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tokio-rustls"
+version = "0.26.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1729aa945f29d91ba541258c8df89027d5792d85a8841fb65e8bf0f4ede4ef61"
+dependencies = [
+ "rustls",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-rustls-acme"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c31fcc374ec87d754358a5d0709ed1ab7671d51e0f70ddc3b17a11ac36604cfa"
+dependencies = [
+ "async-trait",
+ "base64",
+ "chrono",
+ "futures",
+ "log",
+ "num-bigint",
+ "pem",
+ "proc-macro2",
+ "rcgen",
+ "reqwest",
+ "ring",
+ "rustls",
+ "serde",
+ "serde_json",
+ "thiserror 2.0.18",
+ "time",
+ "tokio",
+ "tokio-rustls",
+ "webpki-roots",
+ "x509-parser",
+]
+
+[[package]]
+name = "tokio-stream"
+version = "0.1.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32da49809aab5c3bc678af03902d4ccddea2a87d028d86392a4b1560c6906c70"
+dependencies = [
+ "futures-core",
+ "pin-project-lite",
+ "tokio",
+ "tokio-util",
+]
+
+[[package]]
+name = "tokio-util"
+version = "0.7.18"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9ae9cec805b01e8fc3fd2fe289f89149a9b66dd16786abd8b19cfa7b48cb0098"
+dependencies = [
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "futures-util",
+ "pin-project-lite",
+ "tokio",
+]
+
+[[package]]
+name = "tokio-websockets"
+version = "0.12.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b1b6348ebfaaecd771cecb69e832961d277f59845d4220a584701f72728152b7"
+dependencies = [
+ "base64",
+ "bytes",
+ "futures-core",
+ "futures-sink",
+ "getrandom 0.3.4",
+ "http",
+ "httparse",
+ "rand",
+ "ring",
+ "rustls-pki-types",
+ "simdutf8",
+ "tokio",
+ "tokio-rustls",
+ "tokio-util",
+]
+
+[[package]]
+name = "toml"
+version = "0.9.11+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f3afc9a848309fe1aaffaed6e1546a7a14de1f935dc9d89d32afd9a44bab7c46"
+dependencies = [
+ "indexmap",
+ "serde_core",
+ "serde_spanned",
+ "toml_datetime",
+ "toml_parser",
+ "toml_writer",
+ "winnow",
+]
+
+[[package]]
+name = "toml_datetime"
+version = "0.7.5+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
+dependencies = [
+ "serde_core",
+]
+
+[[package]]
+name = "toml_edit"
+version = "0.23.10+spec-1.0.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "84c8b9f757e028cee9fa244aea147aab2a9ec09d5325a9b01e0a49730c2b5269"
+dependencies = [
+ "indexmap",
+ "toml_datetime",
+ "toml_parser",
+ "winnow",
+]
+
+[[package]]
+name = "toml_parser"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
+dependencies = [
+ "winnow",
+]
+
+[[package]]
+name = "toml_writer"
+version = "1.0.6+spec-1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607"
+
+[[package]]
+name = "tower"
+version = "0.5.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebe5ef63511595f1344e2d5cfa636d973292adc0eec1f0ad45fae9f0851ab1d4"
+dependencies = [
+ "futures-core",
+ "futures-util",
+ "pin-project-lite",
+ "sync_wrapper",
+ "tokio",
+ "tower-layer",
+ "tower-service",
+ "tracing",
+]
+
+[[package]]
+name = "tower-http"
+version = "0.6.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d4e6559d53cc268e5031cd8429d05415bc4cb4aefc4aa5d6cc35fbf5b924a1f8"
+dependencies = [
+ "bitflags",
+ "bytes",
+ "futures-util",
+ "http",
+ "http-body",
+ "iri-string",
+ "pin-project-lite",
+ "tower",
+ "tower-layer",
+ "tower-service",
+]
+
+[[package]]
+name = "tower-layer"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "121c2a6cda46980bb0fcd1647ffaf6cd3fc79a013de288782836f6df9c48780e"
+
+[[package]]
+name = "tower-service"
+version = "0.3.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8df9b6e13f2d32c91b9bd719c00d1958837bc7dec474d94952798cc8e69eeec3"
+
+[[package]]
+name = "tracing"
+version = "0.1.44"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
+dependencies = [
+ "log",
+ "pin-project-lite",
+ "tracing-attributes",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-attributes"
+version = "0.1.31"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "tracing-core"
+version = "0.1.36"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
+dependencies = [
+ "once_cell",
+ "valuable",
+]
+
+[[package]]
+name = "tracing-log"
+version = "0.2.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
+dependencies = [
+ "log",
+ "once_cell",
+ "tracing-core",
+]
+
+[[package]]
+name = "tracing-subscriber"
+version = "0.3.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2f30143827ddab0d256fd843b7a66d164e9f271cfa0dde49142c5ca0ca291f1e"
+dependencies = [
+ "matchers",
+ "nu-ansi-term",
+ "once_cell",
+ "regex-automata",
+ "sharded-slab",
+ "smallvec",
+ "thread_local",
+ "tracing",
+ "tracing-core",
+ "tracing-log",
+]
+
+[[package]]
+name = "try-lock"
+version = "0.2.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b"
+
+[[package]]
+name = "typenum"
+version = "1.19.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
+
+[[package]]
+name = "unicode-ident"
+version = "1.0.22"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
+
+[[package]]
+name = "unicode-segmentation"
+version = "1.12.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
+
+[[package]]
+name = "unicode-width"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
+
+[[package]]
+name = "unicode-xid"
+version = "0.2.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
+
+[[package]]
+name = "untrusted"
+version = "0.9.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8ecb6da28b8a351d773b68d5825ac39017e680750f980f3a1a85cd8dd28a47c1"
+
+[[package]]
+name = "url"
+version = "2.5.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ff67a8a4397373c3ef660812acab3268222035010ab8680ec4215f38ba3d0eed"
+dependencies = [
+ "form_urlencoded",
+ "idna",
+ "percent-encoding",
+ "serde",
+ "serde_derive",
+]
+
+[[package]]
+name = "utf8_iter"
+version = "1.0.4"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
+
+[[package]]
+name = "utf8parse"
+version = "0.2.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
+
+[[package]]
+name = "uuid"
+version = "1.20.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ee48d38b119b0cd71fe4141b30f5ba9c7c5d9f4e7a3a8b4a674e4b6ef789976f"
+dependencies = [
+ "getrandom 0.3.4",
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "valuable"
+version = "0.1.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
+
+[[package]]
+name = "vergen"
+version = "9.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b849a1f6d8639e8de261e81ee0fc881e3e3620db1af9f2e0da015d4382ceaf75"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+ "vergen-lib 9.1.0",
+]
+
+[[package]]
+name = "vergen-gitcl"
+version = "1.0.8"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9dfc1de6eb2e08a4ddf152f1b179529638bedc0ea95e6d667c014506377aefe"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+ "time",
+ "vergen",
+ "vergen-lib 0.1.6",
+]
+
+[[package]]
+name = "vergen-lib"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b07e6010c0f3e59fcb164e0163834597da68d1f864e2b8ca49f74de01e9c166"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+]
+
+[[package]]
+name = "vergen-lib"
+version = "9.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b34a29ba7e9c59e62f229ae1932fb1b8fb8a6fdcc99215a641913f5f5a59a569"
+dependencies = [
+ "anyhow",
+ "derive_builder",
+ "rustversion",
+]
+
+[[package]]
+name = "version_check"
+version = "0.9.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
+
+[[package]]
+name = "walkdir"
+version = "2.5.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
+dependencies = [
+ "same-file",
+ "winapi-util",
+]
+
+[[package]]
+name = "want"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "bfa7760aed19e106de2c7c0b581b509f2f25d3dacaf737cb82ac61bc6d760b0e"
+dependencies = [
+ "try-lock",
+]
+
+[[package]]
+name = "wasi"
+version = "0.11.1+wasi-snapshot-preview1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
+
+[[package]]
+name = "wasip2"
+version = "1.0.2+wasi-0.2.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
+dependencies = [
+ "wit-bindgen",
+]
+
+[[package]]
+name = "wasm-bindgen"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
+dependencies = [
+ "cfg-if",
+ "once_cell",
+ "rustversion",
+ "wasm-bindgen-macro",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-futures"
+version = "0.4.58"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "70a6e77fd0ae8029c9ea0063f87c46fde723e7d887703d74ad2616d792e51e6f"
+dependencies = [
+ "cfg-if",
+ "futures-util",
+ "js-sys",
+ "once_cell",
+ "wasm-bindgen",
+ "web-sys",
+]
+
+[[package]]
+name = "wasm-bindgen-macro"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
+dependencies = [
+ "quote",
+ "wasm-bindgen-macro-support",
+]
+
+[[package]]
+name = "wasm-bindgen-macro-support"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
+dependencies = [
+ "bumpalo",
+ "proc-macro2",
+ "quote",
+ "syn",
+ "wasm-bindgen-shared",
+]
+
+[[package]]
+name = "wasm-bindgen-shared"
+version = "0.2.108"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
+dependencies = [
+ "unicode-ident",
+]
+
+[[package]]
+name = "wasm-streams"
+version = "0.4.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "15053d8d85c7eccdbefef60f06769760a563c7f0a9d6902a13d35c7800b0ad65"
+dependencies = [
+ "futures-util",
+ "js-sys",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "web-sys"
+version = "0.3.85"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "312e32e551d92129218ea9a2452120f4aabc03529ef03e4d0d82fb2780608598"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "web-time"
+version = "1.1.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
+dependencies = [
+ "js-sys",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "webpki-root-certs"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "36a29fc0408b113f68cf32637857ab740edfafdf460c326cd2afaa2d84cc05dc"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "webpki-roots"
+version = "1.0.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "12bed680863276c63889429bfd6cab3b99943659923822de1c8a39c49e4d722c"
+dependencies = [
+ "rustls-pki-types",
+]
+
+[[package]]
+name = "widestring"
+version = "1.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
+
+[[package]]
+name = "winapi"
+version = "0.3.9"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
+dependencies = [
+ "winapi-i686-pc-windows-gnu",
+ "winapi-x86_64-pc-windows-gnu",
+]
+
+[[package]]
+name = "winapi-i686-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
+
+[[package]]
+name = "winapi-util"
+version = "0.1.11"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
+dependencies = [
+ "windows-sys 0.61.2",
+]
+
+[[package]]
+name = "winapi-x86_64-pc-windows-gnu"
+version = "0.4.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
+
+[[package]]
+name = "windows"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "527fadee13e0c05939a6a05d5bd6eec6cd2e3dbd648b9f8e447c6518133d8580"
+dependencies = [
+ "windows-collections",
+ "windows-core",
+ "windows-future",
+ "windows-numerics",
+]
+
+[[package]]
+name = "windows-collections"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "23b2d95af1a8a14a3c7367e1ed4fc9c20e0a26e79551b1454d72583c97cc6610"
+dependencies = [
+ "windows-core",
+]
+
+[[package]]
+name = "windows-core"
+version = "0.62.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
+dependencies = [
+ "windows-implement",
+ "windows-interface",
+ "windows-link",
+ "windows-result",
+ "windows-strings",
+]
+
+[[package]]
+name = "windows-future"
+version = "0.3.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e1d6f90251fe18a279739e78025bd6ddc52a7e22f921070ccdc67dde84c605cb"
+dependencies = [
+ "windows-core",
+ "windows-link",
+ "windows-threading",
+]
+
+[[package]]
+name = "windows-implement"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-interface"
+version = "0.59.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "windows-link"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
+
+[[package]]
+name = "windows-numerics"
+version = "0.3.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6e2e40844ac143cdb44aead537bbf727de9b044e107a0f1220392177d15b0f26"
+dependencies = [
+ "windows-core",
+ "windows-link",
+]
+
+[[package]]
+name = "windows-result"
+version = "0.4.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-strings"
+version = "0.5.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.45.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "75283be5efb2831d37ea142365f009c02ec203cd29a3ebecbc093d52315b66d0"
+dependencies = [
+ "windows-targets 0.42.2",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.48.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "677d2418bec65e3338edb076e806bc1ec15693c5d0104683f2efe857f61056a9"
+dependencies = [
+ "windows-targets 0.48.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.52.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "282be5f36a8ce781fad8c8ae18fa3f9beff57ec1b52cb3de0789201425d9a33d"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.59.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
+dependencies = [
+ "windows-targets 0.52.6",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.60.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
+dependencies = [
+ "windows-targets 0.53.5",
+]
+
+[[package]]
+name = "windows-sys"
+version = "0.61.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e5180c00cd44c9b1c88adb3693291f1cd93605ded80c250a75d472756b4d071"
+dependencies = [
+ "windows_aarch64_gnullvm 0.42.2",
+ "windows_aarch64_msvc 0.42.2",
+ "windows_i686_gnu 0.42.2",
+ "windows_i686_msvc 0.42.2",
+ "windows_x86_64_gnu 0.42.2",
+ "windows_x86_64_gnullvm 0.42.2",
+ "windows_x86_64_msvc 0.42.2",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9a2fa6e2155d7247be68c096456083145c183cbbbc2764150dda45a87197940c"
+dependencies = [
+ "windows_aarch64_gnullvm 0.48.5",
+ "windows_aarch64_msvc 0.48.5",
+ "windows_i686_gnu 0.48.5",
+ "windows_i686_msvc 0.48.5",
+ "windows_x86_64_gnu 0.48.5",
+ "windows_x86_64_gnullvm 0.48.5",
+ "windows_x86_64_msvc 0.48.5",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
+dependencies = [
+ "windows_aarch64_gnullvm 0.52.6",
+ "windows_aarch64_msvc 0.52.6",
+ "windows_i686_gnu 0.52.6",
+ "windows_i686_gnullvm 0.52.6",
+ "windows_i686_msvc 0.52.6",
+ "windows_x86_64_gnu 0.52.6",
+ "windows_x86_64_gnullvm 0.52.6",
+ "windows_x86_64_msvc 0.52.6",
+]
+
+[[package]]
+name = "windows-targets"
+version = "0.53.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
+dependencies = [
+ "windows-link",
+ "windows_aarch64_gnullvm 0.53.1",
+ "windows_aarch64_msvc 0.53.1",
+ "windows_i686_gnu 0.53.1",
+ "windows_i686_gnullvm 0.53.1",
+ "windows_i686_msvc 0.53.1",
+ "windows_x86_64_gnu 0.53.1",
+ "windows_x86_64_gnullvm 0.53.1",
+ "windows_x86_64_msvc 0.53.1",
+]
+
+[[package]]
+name = "windows-threading"
+version = "0.2.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3949bd5b99cafdf1c7ca86b43ca564028dfe27d66958f2470940f73d86d75b37"
+dependencies = [
+ "windows-link",
+]
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "597a5118570b68bc08d8d59125332c54f1ba9d9adeedeef5b99b02ba2b0698f8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2b38e32f0abccf9987a4e3079dfb67dcd799fb61361e53e2882c3cbaf0d905d8"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
+
+[[package]]
+name = "windows_aarch64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e08e8864a60f06ef0d0ff4ba04124db8b0fb3be5776a5cd47641e942e58c4d43"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "dc35310971f3b2dbbf3f0690a219f40e2d9afcf64f9ab7cc1be722937c26b4bc"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
+
+[[package]]
+name = "windows_aarch64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "c61d927d8da41da96a81f029489353e68739737d3beca43145c8afec9a31a84f"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "a75915e7def60c94dcef72200b9a8e58e5091744960da64ec734a6c6e9b3743e"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
+
+[[package]]
+name = "windows_i686_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
+
+[[package]]
+name = "windows_i686_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "44d840b6ec649f480a41c8d80f9c65108b92d89345dd94027bfe06ac444d1060"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8f55c233f70c4b27f66c523580f78f1004e8b5a8b659e05a4eb49d4166cca406"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
+
+[[package]]
+name = "windows_i686_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "8de912b8b8feb55c064867cf047dda097f92d51efad5b491dfb98f6bbb70cb36"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "53d40abd2583d23e4718fddf1ebec84dbff8381c07cae67ff7768bbf19c6718e"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
+
+[[package]]
+name = "windows_x86_64_gnu"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "26d41b46a36d453748aedef1486d5c7a85db22e56aff34643984ea85514e94a3"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0b7b52767868a23d5bab768e390dc5f5c55825b6d30b86c844ff2dc7414044cc"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
+
+[[package]]
+name = "windows_x86_64_gnullvm"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.42.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9aec5da331524158c6d1a4ac0ab1541149c0b9505fde06423b02f5ef0106b9f0"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.48.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "ed94fce61571a4006852b7389a063ab983c02eb1bb37b47f8272ce92d06d9538"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.52.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
+
+[[package]]
+name = "windows_x86_64_msvc"
+version = "0.53.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
+
+[[package]]
+name = "winnow"
+version = "0.7.14"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
+dependencies = [
+ "memchr",
+]
+
+[[package]]
+name = "winreg"
+version = "0.50.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "524e57b2c537c0f9b1e69f1965311ec12182b4122e45035b1508cd24d2adadb1"
+dependencies = [
+ "cfg-if",
+ "windows-sys 0.48.0",
+]
+
+[[package]]
+name = "wit-bindgen"
+version = "0.51.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
+
+[[package]]
+name = "wmi"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71d1d435f7745ba9ed55c43049d47b5fbd1104449beaa2afbc80a1e10a4a018"
+dependencies = [
+ "chrono",
+ "futures",
+ "log",
+ "serde",
+ "thiserror 2.0.18",
+ "windows",
+ "windows-core",
+]
+
+[[package]]
+name = "writeable"
+version = "0.6.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
+
+[[package]]
+name = "ws_stream_wasm"
+version = "0.7.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c173014acad22e83f16403ee360115b38846fe754e735c5d9d3803fe70c6abc"
+dependencies = [
+ "async_io_stream",
+ "futures",
+ "js-sys",
+ "log",
+ "pharos",
+ "rustc_version",
+ "send_wrapper",
+ "thiserror 2.0.18",
+ "wasm-bindgen",
+ "wasm-bindgen-futures",
+ "web-sys",
+]
+
+[[package]]
+name = "x509-parser"
+version = "0.18.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eb3e137310115a65136898d2079f003ce33331a6c4b0d51f1531d1be082b6425"
+dependencies = [
+ "asn1-rs",
+ "data-encoding",
+ "der-parser",
+ "lazy_static",
+ "nom",
+ "oid-registry",
+ "ring",
+ "rusticata-macros",
+ "thiserror 2.0.18",
+ "time",
+]
+
+[[package]]
+name = "xml-rs"
+version = "0.8.28"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "3ae8337f8a065cfc972643663ea4279e04e7256de865aa66fe25cec5fb912d3f"
+
+[[package]]
+name = "xmltree"
+version = "0.10.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d7d8a75eaf6557bb84a65ace8609883db44a29951042ada9b393151532e41fcb"
+dependencies = [
+ "xml-rs",
+]
+
+[[package]]
+name = "yasna"
+version = "0.5.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "e17bb3549cc1321ae1296b9cdc2698e2b6cb1992adfa19a8c72e5b7a738f44cd"
+dependencies = [
+ "time",
+]
+
+[[package]]
+name = "yoke"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
+dependencies = [
+ "stable_deref_trait",
+ "yoke-derive",
+ "zerofrom",
+]
+
+[[package]]
+name = "yoke-derive"
+version = "0.8.1"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "z32"
+version = "1.3.0"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2164e798d9e3d84ee2c91139ace54638059a3b23e361f5c11781c2c6459bde0f"
+
+[[package]]
+name = "zerocopy"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "fdea86ddd5568519879b8187e1cf04e24fce28f7fe046ceecbce472ff19a2572"
+dependencies = [
+ "zerocopy-derive",
+]
+
+[[package]]
+name = "zerocopy-derive"
+version = "0.8.35"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "0c15e1b46eff7c6c91195752e0eeed8ef040e391cdece7c25376957d5f15df22"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerofrom"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
+dependencies = [
+ "zerofrom-derive",
+]
+
+[[package]]
+name = "zerofrom-derive"
+version = "0.1.6"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+ "synstructure",
+]
+
+[[package]]
+name = "zeroize"
+version = "1.8.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "b97154e67e32c85465826e8bcc1c59429aaaf107c1e4a9e53c8d8ccd5eff88d0"
+dependencies = [
+ "zeroize_derive",
+]
+
+[[package]]
+name = "zeroize_derive"
+version = "1.4.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "85a5b4158499876c763cb03bc4e49185d3cccbabb15b33c627f7884f43db852e"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zerotrie"
+version = "0.2.3"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
+dependencies = [
+ "displaydoc",
+ "yoke",
+ "zerofrom",
+]
+
+[[package]]
+name = "zerovec"
+version = "0.11.5"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
+dependencies = [
+ "yoke",
+ "zerofrom",
+ "zerovec-derive",
+]
+
+[[package]]
+name = "zerovec-derive"
+version = "0.11.2"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
+dependencies = [
+ "proc-macro2",
+ "quote",
+ "syn",
+]
+
+[[package]]
+name = "zmij"
+version = "1.0.17"
+source = "registry+https://github.com/rust-lang/crates.io-index"
+checksum = "02aae0f83f69aafc94776e879363e9771d7ecbffe2c7fbb6c14c5e00dfe88439"
diff --git a/third_party/iroh-org/iroh-gossip/Cargo.toml b/third_party/iroh-org/iroh-gossip/Cargo.toml
new file mode 100644
index 0000000..f9e2bc1
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/Cargo.toml
@@ -0,0 +1,172 @@
+[package]
+name = "iroh-gossip"
+version = "0.96.0"
+edition = "2021"
+readme = "README.md"
+description = "gossip messages over broadcast trees"
+license = "MIT/Apache-2.0"
+authors = ["n0 team"]
+repository = "https://github.com/n0-computer/iroh-gossip"
+resolver = "2"
+
+# Sadly this also needs to be updated in .github/workflows/ci.yml
+rust-version = "1.89"
+
+[lib]
+crate-type = ["cdylib", "rlib"]
+
+[lints.rust]
+missing_debug_implementations = "warn"
+
+# We use this --cfg for documenting the cargo features on which an API
+# is available.  To preview this locally use: RUSTFLAGS="--cfg
+# iroh_docsrs cargo +nightly doc --all-features".  We use our own
+# iroh_docsrs instead of the common docsrs to avoid also enabling this
+# feature in any dependencies, because some indirect dependencies
+# require a feature enabled when using `--cfg docsrs` which we can not
+# do.  To enable for a crate set `#![cfg_attr(iroh_docsrs,
+# feature(doc_cfg))]` in the crate.
+unexpected_cfgs = { level = "warn", check-cfg = ["cfg(iroh_docsrs)"] }
+
+[lints.clippy]
+unused-async = "warn"
+
+[dependencies]
+blake3 = "1.8"
+bytes = { version = "1.7", features = ["serde"] }
+data-encoding = "2.6.0"
+derive_more = { version = "2.0.1", features = [
+    "add",
+    "debug",
+    "deref",
+    "display",
+    "from",
+    "try_into",
+    "into",
+] }
+ed25519-dalek = { version = "3.0.0-pre.1", features = ["serde", "rand_core"] }
+hex = "0.4.3"
+indexmap = "2.0"
+iroh-metrics = { version = "0.38", default-features = false }
+iroh-base = { version = "0.96", default-features = false, features = ["key"] }
+n0-future = "0.3"
+postcard = { version = "1", default-features = false, features = [
+    "alloc",
+    "use-std",
+    "experimental-derive",
+] }
+rand = { version = "0.9.2", features = ["std_rng"] }
+serde = { version = "1.0.164", features = ["derive"] }
+
+# net dependencies (optional)
+futures-lite = { version = "2.3", optional = true }
+futures-concurrency = { version = "7.6.1", optional = true }
+futures-util = { version = "0.3.30", optional = true }
+iroh = { version = "0.96", default-features = false, optional = true }
+tokio = { version = "1", optional = true, features = ["io-util", "sync"] }
+tokio-util = { version = "0.7.12", optional = true, features = ["codec"] }
+tracing = "0.1"
+irpc = { version = "0.12.0", optional = true, default-features = false, features = [
+    "derive",
+    "stream",
+    "spans",
+] }
+n0-error = { version = "0.1", features = ["anyhow"] }
+
+# rpc dependencies (optional)
+quinn = { package = "iroh-quinn", version = "0.16.0", optional = true }
+
+# test-utils dependencies (optional)
+rand_chacha = { version = "0.9", optional = true }
+humantime-serde = { version = "1.1.1", optional = true }
+
+# simulator dependencies (optional)
+clap = { version = "4", features = ["derive"], optional = true }
+toml = { version = "0.9.8", optional = true }
+tracing-subscriber = { version = "0.3", features = [
+    "env-filter",
+], optional = true }
+serde_json = { version = "1", optional = true }
+rayon = { version = "1.10.0", optional = true }
+comfy-table = { version = "7.1.4", optional = true }
+
+
+[dev-dependencies]
+tokio = { version = "1", features = [
+    "io-util",
+    "sync",
+    "rt",
+    "macros",
+    "net",
+    "fs",
+] }
+clap = { version = "4", features = ["derive"] }
+humantime-serde = { version = "1.1.1" }
+iroh = { version = "0.96", default-features = false, features = [
+    "metrics",
+    "test-utils",
+] }
+rand_chacha = "0.9"
+testresult = "0.4.1"
+tracing-subscriber = { version = "0.3.20", features = ["env-filter"] }
+n0-tracing-test = "0.3"
+url = "2.4.0"
+serde-byte-array = "0.1.2"
+
+[features]
+default = ["net", "metrics"]
+net = [
+    "dep:irpc",
+    "dep:futures-lite",
+    "dep:iroh",
+    "dep:tokio",
+    "dep:tokio-util",
+    "dep:futures-util",
+    "dep:futures-concurrency",
+]
+rpc = [
+    "dep:irpc",
+    "dep:tokio",
+    "dep:quinn",
+    "irpc/rpc",
+    "irpc/quinn_endpoint_setup",
+]
+test-utils = ["dep:rand_chacha", "dep:humantime-serde"]
+simulator = [
+    "test-utils",
+    "dep:tracing-subscriber",
+    "dep:toml",
+    "dep:clap",
+    "dep:serde_json",
+    "dep:rayon",
+    "dep:comfy-table",
+]
+metrics = ["iroh-metrics/metrics"]
+examples = ["net"]
+
+[[test]]
+name = "sim"
+path = "tests/sim.rs"
+required-features = ["test-utils"]
+
+[[bin]]
+name = "sim"
+required-features = ["simulator"]
+
+[[example]]
+name = "chat"
+required-features = ["examples"]
+
+[[example]]
+name = "setup"
+required-features = ["examples"]
+
+[package.metadata.docs.rs]
+all-features = true
+rustdoc-args = ["--cfg", "iroh_docsrs"]
+
+[profile.bench]
+debug = true
+
+[profile.release]
+debug = true
diff --git a/third_party/iroh-org/iroh-gossip/LICENSE-APACHE b/third_party/iroh-org/iroh-gossip/LICENSE-APACHE
new file mode 100644
index 0000000..e2db928
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/LICENSE-APACHE
@@ -0,0 +1,201 @@
+                              Apache License
+                        Version 2.0, January 2004
+                     http://www.apache.org/licenses/
+
+TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+1. Definitions.
+
+   "License" shall mean the terms and conditions for use, reproduction,
+   and distribution as defined by Sections 1 through 9 of this document.
+
+   "Licensor" shall mean the copyright owner or entity authorized by
+   the copyright owner that is granting the License.
+
+   "Legal Entity" shall mean the union of the acting entity and all
+   other entities that control, are controlled by, or are under common
+   control with that entity. For the purposes of this definition,
+   "control" means (i) the power, direct or indirect, to cause the
+   direction or management of such entity, whether by contract or
+   otherwise, or (ii) ownership of fifty percent (50%) or more of the
+   outstanding shares, or (iii) beneficial ownership of such entity.
+
+   "You" (or "Your") shall mean an individual or Legal Entity
+   exercising permissions granted by this License.
+
+   "Source" form shall mean the preferred form for making modifications,
+   including but not limited to software source code, documentation
+   source, and configuration files.
+
+   "Object" form shall mean any form resulting from mechanical
+   transformation or translation of a Source form, including but
+   not limited to compiled object code, generated documentation,
+   and conversions to other media types.
+
+   "Work" shall mean the work of authorship, whether in Source or
+   Object form, made available under the License, as indicated by a
+   copyright notice that is included in or attached to the work
+   (an example is provided in the Appendix below).
+
+   "Derivative Works" shall mean any work, whether in Source or Object
+   form, that is based on (or derived from) the Work and for which the
+   editorial revisions, annotations, elaborations, or other modifications
+   represent, as a whole, an original work of authorship. For the purposes
+   of this License, Derivative Works shall not include works that remain
+   separable from, or merely link (or bind by name) to the interfaces of,
+   the Work and Derivative Works thereof.
+
+   "Contribution" shall mean any work of authorship, including
+   the original version of the Work and any modifications or additions
+   to that Work or Derivative Works thereof, that is intentionally
+   submitted to Licensor for inclusion in the Work by the copyright owner
+   or by an individual or Legal Entity authorized to submit on behalf of
+   the copyright owner. For the purposes of this definition, "submitted"
+   means any form of electronic, verbal, or written communication sent
+   to the Licensor or its representatives, including but not limited to
+   communication on electronic mailing lists, source code control systems,
+   and issue tracking systems that are managed by, or on behalf of, the
+   Licensor for the purpose of discussing and improving the Work, but
+   excluding communication that is conspicuously marked or otherwise
+   designated in writing by the copyright owner as "Not a Contribution."
+
+   "Contributor" shall mean Licensor and any individual or Legal Entity
+   on behalf of whom a Contribution has been received by Licensor and
+   subsequently incorporated within the Work.
+
+2. Grant of Copyright License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   copyright license to reproduce, prepare Derivative Works of,
+   publicly display, publicly perform, sublicense, and distribute the
+   Work and such Derivative Works in Source or Object form.
+
+3. Grant of Patent License. Subject to the terms and conditions of
+   this License, each Contributor hereby grants to You a perpetual,
+   worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+   (except as stated in this section) patent license to make, have made,
+   use, offer to sell, sell, import, and otherwise transfer the Work,
+   where such license applies only to those patent claims licensable
+   by such Contributor that are necessarily infringed by their
+   Contribution(s) alone or by combination of their Contribution(s)
+   with the Work to which such Contribution(s) was submitted. If You
+   institute patent litigation against any entity (including a
+   cross-claim or counterclaim in a lawsuit) alleging that the Work
+   or a Contribution incorporated within the Work constitutes direct
+   or contributory patent infringement, then any patent licenses
+   granted to You under this License for that Work shall terminate
+   as of the date such litigation is filed.
+
+4. Redistribution. You may reproduce and distribute copies of the
+   Work or Derivative Works thereof in any medium, with or without
+   modifications, and in Source or Object form, provided that You
+   meet the following conditions:
+
+   (a) You must give any other recipients of the Work or
+       Derivative Works a copy of this License; and
+
+   (b) You must cause any modified files to carry prominent notices
+       stating that You changed the files; and
+
+   (c) You must retain, in the Source form of any Derivative Works
+       that You distribute, all copyright, patent, trademark, and
+       attribution notices from the Source form of the Work,
+       excluding those notices that do not pertain to any part of
+       the Derivative Works; and
+
+   (d) If the Work includes a "NOTICE" text file as part of its
+       distribution, then any Derivative Works that You distribute must
+       include a readable copy of the attribution notices contained
+       within such NOTICE file, excluding those notices that do not
+       pertain to any part of the Derivative Works, in at least one
+       of the following places: within a NOTICE text file distributed
+       as part of the Derivative Works; within the Source form or
+       documentation, if provided along with the Derivative Works; or,
+       within a display generated by the Derivative Works, if and
+       wherever such third-party notices normally appear. The contents
+       of the NOTICE file are for informational purposes only and
+       do not modify the License. You may add Your own attribution
+       notices within Derivative Works that You distribute, alongside
+       or as an addendum to the NOTICE text from the Work, provided
+       that such additional attribution notices cannot be construed
+       as modifying the License.
+
+   You may add Your own copyright statement to Your modifications and
+   may provide additional or different license terms and conditions
+   for use, reproduction, or distribution of Your modifications, or
+   for any such Derivative Works as a whole, provided Your use,
+   reproduction, and distribution of the Work otherwise complies with
+   the conditions stated in this License.
+
+5. Submission of Contributions. Unless You explicitly state otherwise,
+   any Contribution intentionally submitted for inclusion in the Work
+   by You to the Licensor shall be under the terms and conditions of
+   this License, without any additional terms or conditions.
+   Notwithstanding the above, nothing herein shall supersede or modify
+   the terms of any separate license agreement you may have executed
+   with Licensor regarding such Contributions.
+
+6. Trademarks. This License does not grant permission to use the trade
+   names, trademarks, service marks, or product names of the Licensor,
+   except as required for reasonable and customary use in describing the
+   origin of the Work and reproducing the content of the NOTICE file.
+
+7. Disclaimer of Warranty. Unless required by applicable law or
+   agreed to in writing, Licensor provides the Work (and each
+   Contributor provides its Contributions) on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied, including, without limitation, any warranties or conditions
+   of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+   PARTICULAR PURPOSE. You are solely responsible for determining the
+   appropriateness of using or redistributing the Work and assume any
+   risks associated with Your exercise of permissions under this License.
+
+8. Limitation of Liability. In no event and under no legal theory,
+   whether in tort (including negligence), contract, or otherwise,
+   unless required by applicable law (such as deliberate and grossly
+   negligent acts) or agreed to in writing, shall any Contributor be
+   liable to You for damages, including any direct, indirect, special,
+   incidental, or consequential damages of any character arising as a
+   result of this License or out of the use or inability to use the
+   Work (including but not limited to damages for loss of goodwill,
+   work stoppage, computer failure or malfunction, or any and all
+   other commercial damages or losses), even if such Contributor
+   has been advised of the possibility of such damages.
+
+9. Accepting Warranty or Additional Liability. While redistributing
+   the Work or Derivative Works thereof, You may choose to offer,
+   and charge a fee for, acceptance of support, warranty, indemnity,
+   or other liability obligations and/or rights consistent with this
+   License. However, in accepting such obligations, You may act only
+   on Your own behalf and on Your sole responsibility, not on behalf
+   of any other Contributor, and only if You agree to indemnify,
+   defend, and hold each Contributor harmless for any liability
+   incurred by, or claims asserted against, such Contributor by reason
+   of your accepting any such warranty or additional liability.
+
+END OF TERMS AND CONDITIONS
+
+APPENDIX: How to apply the Apache License to your work.
+
+   To apply the Apache License to your work, attach the following
+   boilerplate notice, with the fields enclosed by brackets "[]"
+   replaced with your own identifying information. (Don't include
+   the brackets!)  The text should be enclosed in the appropriate
+   comment syntax for the file format. We also recommend that a
+   file or class name and description of purpose be included on the
+   same "printed page" as the copyright notice for easier
+   identification within third-party archives.
+
+Copyright [2023] [N0, INC]
+
+Licensed under the Apache License, Version 2.0 (the "License");
+you may not use this file except in compliance with the License.
+You may obtain a copy of the License at
+
+	http://www.apache.org/licenses/LICENSE-2.0
+
+Unless required by applicable law or agreed to in writing, software
+distributed under the License is distributed on an "AS IS" BASIS,
+WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+See the License for the specific language governing permissions and
+limitations under the License.
diff --git a/third_party/iroh-org/iroh-gossip/LICENSE-MIT b/third_party/iroh-org/iroh-gossip/LICENSE-MIT
new file mode 100644
index 0000000..2d5f18d
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/LICENSE-MIT
@@ -0,0 +1,25 @@
+Copyright 2023 N0, INC.
+
+Permission is hereby granted, free of charge, to any
+person obtaining a copy of this software and associated
+documentation files (the "Software"), to deal in the
+Software without restriction, including without
+limitation the rights to use, copy, modify, merge,
+publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software
+is furnished to do so, subject to the following
+conditions:
+
+The above copyright notice and this permission notice
+shall be included in all copies or substantial portions
+of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF
+ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED
+TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
+PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT
+SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
+CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION
+OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR
+IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
+DEALINGS IN THE SOFTWARE.
diff --git a/third_party/iroh-org/iroh-gossip/Makefile.toml b/third_party/iroh-org/iroh-gossip/Makefile.toml
new file mode 100644
index 0000000..afee382
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/Makefile.toml
@@ -0,0 +1,28 @@
+# Use cargo-make to run tasks here: https://crates.io/crates/cargo-make
+
+[tasks.format]
+workspace = false
+command = "cargo"
+args = [
+     "fmt",
+     "--all",
+     "--",
+     "--config",
+     "unstable_features=true",
+     "--config",
+     "imports_granularity=Crate,group_imports=StdExternalCrate,reorder_imports=true",
+]
+
+[tasks.format-check]
+workspace = false
+command = "cargo"
+args = [
+     "fmt",
+     "--all",
+     "--check",
+     "--",
+     "--config",
+     "unstable_features=true",
+     "--config",
+     "imports_granularity=Crate,group_imports=StdExternalCrate,reorder_imports=true",
+]
diff --git a/third_party/iroh-org/iroh-gossip/README.md b/third_party/iroh-org/iroh-gossip/README.md
new file mode 100644
index 0000000..a5dae6b
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/README.md
@@ -0,0 +1,93 @@
+# iroh-gossip
+
+This crate implements the `iroh-gossip` protocol.
+It is based on *epidemic broadcast trees* to disseminate messages among a swarm of peers interested in a *topic*.
+The implementation is based on the papers [HyParView](https://asc.di.fct.unl.pt/~jleitao/pdf/dsn07-leitao.pdf) and [PlumTree](https://asc.di.fct.unl.pt/~jleitao/pdf/srds07-leitao.pdf).
+
+The crate is made up from two modules:
+The `proto` module is the protocol implementation, as a state machine without any IO.
+The `net` module implements networking logic for running `iroh-gossip` on `iroh` connections.
+
+The `net` module is optional behind the `net` feature flag (enabled by default).
+
+# Getting Started
+
+The `iroh-gossip` protocol was designed to be used in conjunction with `iroh`. [Iroh](https://docs.rs/iroh) is a networking library for making direct connections, these connections are how gossip messages are sent.
+
+Iroh provides a [`Router`](https://docs.rs/iroh/latest/iroh/protocol/struct.Router.html) that takes an [`Endpoint`](https://docs.rs/iroh/latest/iroh/endpoint/struct.Endpoint.html) and any protocols needed for the application. Similar to a router in webserver library, it runs a loop accepting incoming connections and routes them to the specific protocol handler, based on `ALPN`.
+
+Here is a basic example of how to set up `iroh-gossip` with `iroh`:
+```rust,no_run
+use iroh::{protocol::Router, Endpoint, EndpointId};
+use iroh_gossip::{api::Event, Gossip, TopicId};
+use n0_error::{Result, StdResultExt};
+use n0_future::StreamExt;
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    // create an iroh endpoint that includes the standard discovery mechanisms
+    // we've built at number0
+    let endpoint = Endpoint::bind().await?;
+
+    // build gossip protocol
+    let gossip = Gossip::builder().spawn(endpoint.clone());
+
+    // setup router
+    let router = Router::builder(endpoint)
+        .accept(iroh_gossip::ALPN, gossip.clone())
+        .spawn();
+
+    // gossip swarms are centered around a shared "topic id", which is a 32 byte identifier
+    let topic_id = TopicId::from_bytes([23u8; 32]);
+    // and you need some bootstrap peers to join the swarm
+    let bootstrap_peers = bootstrap_peers();
+
+    // then, you can subscribe to the topic and join your initial peers
+    let (sender, mut receiver) = gossip
+        .subscribe(topic_id, bootstrap_peers)
+        .await?
+        .split();
+
+    // you might want to wait until you joined at least one other peer:
+    receiver.joined().await?;
+
+    // then, you can broadcast messages to all other peers!
+    sender.broadcast(b"hello world this is a gossip message".to_vec().into()).await?;
+
+    // and read messages from others!
+    while let Some(event) = receiver.next().await {
+        match event? {
+            Event::Received(message) => {
+                println!("received a message: {:?}", std::str::from_utf8(&message.content));
+            }
+            _ => {}
+        }
+    }
+
+    // clean shutdown makes sure that other peers are notified that you went offline
+    router.shutdown().await.std_context("shutdown router")?;
+    Ok(())
+}
+
+fn bootstrap_peers() -> Vec<EndpointId> {
+    // insert your bootstrap peers here, or get them from your environment
+    vec![]
+}
+```
+
+# License
+
+This project is licensed under either of
+
+ * Apache License, Version 2.0, ([LICENSE-APACHE](LICENSE-APACHE) or
+   <http://www.apache.org/licenses/LICENSE-2.0>)
+ * MIT license ([LICENSE-MIT](LICENSE-MIT) or
+   <http://opensource.org/licenses/MIT>)
+
+at your option.
+
+### Contribution
+
+Unless you explicitly state otherwise, any contribution intentionally submitted
+for inclusion in this project by you, as defined in the Apache-2.0 license,
+shall be dual licensed as above, without any additional terms or conditions.
diff --git a/third_party/iroh-org/iroh-gossip/cliff.toml b/third_party/iroh-org/iroh-gossip/cliff.toml
new file mode 100644
index 0000000..28ccecd
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/cliff.toml
@@ -0,0 +1,64 @@
+[changelog]
+# changelog header
+header = """
+# Changelog\n
+All notable changes to iroh-gossip will be documented in this file.\n
+"""
+
+body = """
+{% if version %}\
+    {% if previous.version %}\
+        ## [{{ version | trim_start_matches(pat="v") }}](<REPO>/compare/{{ previous.version }}..{{ version }}) - {{ timestamp | date(format="%Y-%m-%d") }}
+    {% else %}\
+        ## [{{ version | trim_start_matches(pat="v") }}] - {{ timestamp | date(format="%Y-%m-%d") }}
+    {% endif %}\
+{% else %}\
+    ## [unreleased]
+{% endif %}\
+
+{% macro commit(commit) -%}
+    - {% if commit.scope %}*({{ commit.scope }})* {% endif %}{% if commit.breaking %}[**breaking**] {% endif %}\
+        {{ commit.message | upper_first }} - ([{{ commit.id | truncate(length=7, end="") }}](<REPO>/commit/{{ commit.id }}))\
+{% endmacro -%}
+
+{% for group, commits in commits | group_by(attribute="group") %}
+    ### {{ group | striptags | trim | upper_first }}
+    {% for commit in commits
+    | filter(attribute="scope")
+    | sort(attribute="scope") %}
+        {{ self::commit(commit=commit) }}
+    {%- endfor -%}
+    {% raw %}\n{% endraw %}\
+    {%- for commit in commits %}
+        {%- if not commit.scope -%}
+            {{ self::commit(commit=commit) }}
+        {% endif -%}
+    {% endfor -%}
+{% endfor %}\n
+"""
+
+footer = ""
+postprocessors = [
+  { pattern = '<REPO>', replace = "https://github.com/n0-computer/iroh-gossip" },
+  { pattern = "\\(#([0-9]+)\\)", replace = "([#${1}](https://github.com/n0-computer/iroh-gossip/issues/${1}))"}
+]
+
+
+[git]
+# regex for parsing and grouping commits
+commit_parsers = [
+  { message = "^feat", group = "<!-- 0 -->⛰️  Features" },
+  { message = "^fix", group = "<!-- 1 -->🐛 Bug Fixes" },
+  { message = "^doc", group = "<!-- 3 -->📚 Documentation" },
+  { message = "^perf", group = "<!-- 4 -->⚡ Performance" },
+  { message = "^refactor", group = "<!-- 2 -->🚜 Refactor" },
+  { message = "^style", group = "<!-- 5 -->🎨 Styling" },
+  { message = "^test", group = "<!-- 6 -->🧪 Testing" },
+  { message = "^chore\\(release\\)", skip = true },
+  { message = "^chore\\(deps\\)", skip = true },
+  { message = "^chore\\(pr\\)", skip = true },
+  { message = "^chore\\(pull\\)", skip = true },
+  { message = "^chore|ci", group = "<!-- 7 -->⚙️ Miscellaneous Tasks" },
+  { body = ".*security", group = "<!-- 8 -->🛡️ Security" },
+  { message = "^revert", group = "<!-- 9 -->◀️ Revert" },
+]
diff --git a/third_party/iroh-org/iroh-gossip/code_of_conduct.md b/third_party/iroh-org/iroh-gossip/code_of_conduct.md
new file mode 100644
index 0000000..2f44575
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/code_of_conduct.md
@@ -0,0 +1,13 @@
+# Code of Conduct
+
+Online or off, Number Zero is a harassment-free environment for everyone, regardless of gender, gender identity and expression, sexual orientation, disability, physical appearance, body size, race, age or religion or technical skill level. We do not tolerate harassment of participants in any form.
+
+Harassment includes verbal comments that reinforce social structures of domination related to gender, gender identity and expression, sexual orientation, disability, physical appearance, body size, race, age, religion, sexual images in public spaces, deliberate intimidation, stalking, following, harassing photography or recording, sustained disruption of talks or other events, inappropriate physical contact, and unwelcome sexual attention. Participants asked to stop any harassing behavior are expected to comply immediately.
+
+If a participant engages in harassing behaviour, the organizers may take any action they deem appropriate, including warning the offender or expulsion from events and online forums.
+
+If you are being harassed, notice that someone else is being harassed, or have any other concerns, please contact a member of the organizing team immediately.
+
+At offline events, organizers will identify themselves, and will help participants contact venue security or local law enforcement, provide escorts, or otherwise assist those experiencing harassment to feel safe for the duration of the event. We value your participation!
+
+This document is based on a similar code from [EDGI](https://envirodatagov.org/) and [Civic Tech Toronto](http://civictech.ca/about-us/), itself derived from the [Recurse Center’s Social Rules](https://www.recurse.com/manual#sec-environment), and the [anti-harassment policy from the Geek Feminism Wiki](http://geekfeminism.wikia.com/wiki/Conference_anti-harassment/Policy).
diff --git a/third_party/iroh-org/iroh-gossip/deny.toml b/third_party/iroh-org/iroh-gossip/deny.toml
new file mode 100644
index 0000000..488c723
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/deny.toml
@@ -0,0 +1,41 @@
+[advisories]
+ignore = [
+    "RUSTSEC-2024-0436",
+    "RUSTSEC-2023-0089",
+]
+
+[bans]
+deny = [
+    "aws-lc",
+    "aws-lc-rs",
+    "aws-lc-sys",
+    "native-tls",
+    "openssl",
+]
+multiple-versions = "allow"
+
+[licenses]
+allow = [
+    "Apache-2.0",
+    "Apache-2.0 WITH LLVM-exception",
+    "BSD-2-Clause",
+    "BSD-3-Clause",
+    "BSL-1.0",
+    "CDLA-Permissive-2.0",
+    "ISC",
+    "MIT",
+    "Zlib",
+    "Unicode-3.0",
+    "MPL-2.0",
+    "Unlicense",
+]
+
+[[licenses.clarify]]
+expression = "MIT AND ISC AND OpenSSL"
+name = "ring"
+
+[[licenses.clarify.license-files]]
+hash = 3171872035
+path = "LICENSE"
+
+[sources]
diff --git a/third_party/iroh-org/iroh-gossip/examples/chat.rs b/third_party/iroh-org/iroh-gossip/examples/chat.rs
new file mode 100644
index 0000000..13605d0
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/examples/chat.rs
@@ -0,0 +1,319 @@
+use std::{
+    collections::HashMap,
+    fmt,
+    net::{Ipv4Addr, SocketAddrV4},
+    str::FromStr,
+};
+
+use bytes::Bytes;
+use clap::Parser;
+use futures_lite::StreamExt;
+use iroh::{
+    address_lookup::memory::MemoryLookup, Endpoint, EndpointAddr, PublicKey, RelayMode, RelayUrl,
+    SecretKey,
+};
+use iroh_gossip::{
+    api::{Event, GossipReceiver},
+    net::{Gossip, GOSSIP_ALPN},
+    proto::TopicId,
+};
+use n0_error::{bail_any, AnyError, Result, StdResultExt};
+use n0_future::task;
+use serde::{Deserialize, Serialize};
+use serde_byte_array::ByteArray;
+
+/// Chat over iroh-gossip
+///
+/// This broadcasts signed messages over iroh-gossip and verifies signatures
+/// on received messages.
+///
+/// By default a new endpoint id is created when starting the example. To reuse your identity,
+/// set the `--secret-key` flag with the secret key printed on a previous invocation.
+///
+/// By default, the relay server run by n0 is used. To use a local relay server, run
+///     cargo run --bin iroh-relay --features iroh-relay -- --dev
+/// in another terminal and then set the `-d http://localhost:3340` flag on this example.
+#[derive(Parser, Debug)]
+struct Args {
+    /// secret key to derive our endpoint id from.
+    #[clap(long)]
+    secret_key: Option<String>,
+    /// Set a custom relay server. By default, the relay server hosted by n0 will be used.
+    #[clap(short, long)]
+    relay: Option<RelayUrl>,
+    /// Disable relay completely.
+    #[clap(long)]
+    no_relay: bool,
+    /// Set your nickname.
+    #[clap(short, long)]
+    name: Option<String>,
+    /// Set the bind port for our socket. By default, a random port will be used.
+    #[clap(short, long, default_value = "0")]
+    bind_port: u16,
+    #[clap(subcommand)]
+    command: Command,
+}
+
+#[derive(Parser, Debug)]
+enum Command {
+    /// Open a chat room for a topic and print a ticket for others to join.
+    ///
+    /// If no topic is provided, a new topic will be created.
+    Open {
+        /// Optionally set the topic id (64 bytes, as hex string).
+        topic: Option<TopicId>,
+    },
+    /// Join a chat room from a ticket.
+    Join {
+        /// The ticket, as base32 string.
+        ticket: String,
+    },
+}
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    tracing_subscriber::fmt::init();
+    let args = Args::parse();
+
+    // parse the cli command
+    let (topic, peers) = match &args.command {
+        Command::Open { topic } => {
+            let topic = topic.unwrap_or_else(|| TopicId::from_bytes(rand::random()));
+            println!("> opening chat room for topic {topic}");
+            (topic, vec![])
+        }
+        Command::Join { ticket } => {
+            let Ticket { topic, peers } = Ticket::from_str(ticket)?;
+            println!("> joining chat room for topic {topic}");
+            (topic, peers)
+        }
+    };
+
+    // parse or generate our secret key
+    let secret_key = match args.secret_key {
+        None => SecretKey::generate(&mut rand::rng()),
+        Some(key) => key.parse()?,
+    };
+    println!(
+        "> our secret key: {}",
+        data_encoding::HEXLOWER.encode(&secret_key.to_bytes())
+    );
+
+    // configure our relay map
+    let relay_mode = match (args.no_relay, args.relay) {
+        (false, None) => RelayMode::Default,
+        (false, Some(url)) => RelayMode::Custom(url.into()),
+        (true, None) => RelayMode::Disabled,
+        (true, Some(_)) => bail_any!("You cannot set --no-relay and --relay at the same time"),
+    };
+    println!("> using relay servers: {}", fmt_relay_mode(&relay_mode));
+
+    // create a memory lookup to pass in endpoint addresses to
+    let memory_lookup = MemoryLookup::new();
+
+    // build our magic endpoint
+    let endpoint = Endpoint::builder()
+        .secret_key(secret_key)
+        .address_lookup(memory_lookup.clone())
+        .relay_mode(relay_mode.clone())
+        .bind_addr(SocketAddrV4::new(Ipv4Addr::UNSPECIFIED, args.bind_port))?
+        .bind()
+        .await?;
+    println!("> our endpoint id: {}", endpoint.id());
+
+    // create the gossip protocol
+    let gossip = Gossip::builder().spawn(endpoint.clone());
+
+    // print a ticket that includes our own endpoint id and endpoint addresses
+    if !matches!(relay_mode, RelayMode::Disabled) {
+        // if we are expecting a relay, wait until we get a home relay
+        // before moving on
+        endpoint.online().await;
+    }
+    let ticket = {
+        let me = endpoint.addr();
+        let peers = peers.iter().cloned().chain([me]).collect();
+        Ticket { topic, peers }
+    };
+    println!("> ticket to join us: {ticket}");
+
+    // setup router
+    let router = iroh::protocol::Router::builder(endpoint.clone())
+        .accept(GOSSIP_ALPN, gossip.clone())
+        .spawn();
+
+    // join the gossip topic by connecting to known peers, if any
+    let peer_ids = peers.iter().map(|p| p.id).collect();
+    if peers.is_empty() {
+        println!("> waiting for peers to join us...");
+    } else {
+        println!("> trying to connect to {} peers...", peers.len());
+        // add the peer addrs from the ticket to our endpoint's addressbook so that they can be dialed
+        for peer in peers.into_iter() {
+            memory_lookup.add_endpoint_info(peer);
+        }
+    };
+    let (sender, receiver) = gossip.subscribe_and_join(topic, peer_ids).await?.split();
+    println!("> connected!");
+
+    // broadcast our name, if set
+    if let Some(name) = args.name {
+        let message = Message::AboutMe { name };
+        let encoded_message = SignedMessage::sign_and_encode(endpoint.secret_key(), &message)?;
+        sender.broadcast(encoded_message).await?;
+    }
+
+    // subscribe and print loop
+    task::spawn(subscribe_loop(receiver));
+
+    // spawn an input thread that reads stdin
+    // not using tokio here because they recommend this for "technical reasons"
+    let (line_tx, mut line_rx) = tokio::sync::mpsc::channel(1);
+    std::thread::spawn(move || input_loop(line_tx));
+
+    // broadcast each line we type
+    println!("> type a message and hit enter to broadcast...");
+    while let Some(text) = line_rx.recv().await {
+        let message = Message::Message { text: text.clone() };
+        let encoded_message = SignedMessage::sign_and_encode(endpoint.secret_key(), &message)?;
+        sender.broadcast(encoded_message).await?;
+        println!("> sent: {text}");
+    }
+
+    // shutdown
+    router.shutdown().await.anyerr()?;
+
+    Ok(())
+}
+
+async fn subscribe_loop(mut receiver: GossipReceiver) -> Result<()> {
+    // init a peerid -> name hashmap
+    let mut names = HashMap::new();
+    while let Some(event) = receiver.try_next().await? {
+        if let Event::Received(msg) = event {
+            let (from, message) = SignedMessage::verify_and_decode(&msg.content)?;
+            match message {
+                Message::AboutMe { name } => {
+                    names.insert(from, name.clone());
+                    println!("> {} is now known as {}", from.fmt_short(), name);
+                }
+                Message::Message { text } => {
+                    let name = names
+                        .get(&from)
+                        .map_or_else(|| from.fmt_short().to_string(), String::to_string);
+                    println!("{name}: {text}");
+                }
+            }
+        }
+    }
+    Ok(())
+}
+
+fn input_loop(line_tx: tokio::sync::mpsc::Sender<String>) -> Result<()> {
+    let mut buffer = String::new();
+    let stdin = std::io::stdin(); // We get `Stdin` here.
+    loop {
+        stdin.read_line(&mut buffer).anyerr()?;
+        line_tx.blocking_send(buffer.clone()).anyerr()?;
+        buffer.clear();
+    }
+}
+
+const SIGNATURE_LENGTH: usize = iroh::Signature::LENGTH;
+type Signature = ByteArray<SIGNATURE_LENGTH>;
+
+#[derive(Debug, Serialize, Deserialize)]
+struct SignedMessage {
+    from: PublicKey,
+    data: Bytes,
+    signature: Signature,
+}
+
+impl SignedMessage {
+    pub fn verify_and_decode(bytes: &[u8]) -> Result<(PublicKey, Message)> {
+        let signed_message: Self =
+            postcard::from_bytes(bytes).std_context("decode signed message")?;
+        let key: PublicKey = signed_message.from;
+        key.verify(
+            &signed_message.data,
+            &iroh::Signature::from_bytes(&signed_message.signature),
+        )
+        .std_context("verify signature")?;
+        let message: Message =
+            postcard::from_bytes(&signed_message.data).std_context("decode message")?;
+        Ok((signed_message.from, message))
+    }
+
+    pub fn sign_and_encode(secret_key: &SecretKey, message: &Message) -> Result<Bytes> {
+        let data: Bytes = postcard::to_stdvec(&message)
+            .std_context("encode message")?
+            .into();
+        let signature = secret_key.sign(&data);
+        let from: PublicKey = secret_key.public();
+        let signed_message = Self {
+            from,
+            data,
+            signature: ByteArray::new(signature.to_bytes()),
+        };
+        let encoded = postcard::to_stdvec(&signed_message).std_context("encode signed message")?;
+        Ok(encoded.into())
+    }
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+enum Message {
+    AboutMe { name: String },
+    Message { text: String },
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+struct Ticket {
+    topic: TopicId,
+    peers: Vec<EndpointAddr>,
+}
+impl Ticket {
+    /// Deserializes from bytes.
+    fn from_bytes(bytes: &[u8]) -> Result<Self> {
+        postcard::from_bytes(bytes).std_context("decode ticket")
+    }
+    /// Serializes to bytes.
+    pub fn to_bytes(&self) -> Vec<u8> {
+        postcard::to_stdvec(self).expect("postcard::to_stdvec is infallible")
+    }
+}
+
+/// Serializes to base32.
+impl fmt::Display for Ticket {
+    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
+        let mut text = data_encoding::BASE32_NOPAD.encode(&self.to_bytes()[..]);
+        text.make_ascii_lowercase();
+        write!(f, "{text}")
+    }
+}
+
+/// Deserializes from base32.
+impl FromStr for Ticket {
+    type Err = AnyError;
+    fn from_str(s: &str) -> Result<Self, Self::Err> {
+        let bytes = data_encoding::BASE32_NOPAD
+            .decode(s.to_ascii_uppercase().as_bytes())
+            .std_context("decode ticket base32")?;
+        Self::from_bytes(&bytes)
+    }
+}
+
+// helpers
+
+fn fmt_relay_mode(relay_mode: &RelayMode) -> String {
+    match relay_mode {
+        RelayMode::Disabled => "None".to_string(),
+        RelayMode::Default => "Default Relay (production) servers".to_string(),
+        RelayMode::Staging => "Default Relay (staging) servers".to_string(),
+        RelayMode::Custom(map) => map
+            .urls::<Vec<_>>()
+            .into_iter()
+            .map(|url| url.to_string())
+            .collect::<Vec<_>>()
+            .join(", "),
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/examples/setup.rs b/third_party/iroh-org/iroh-gossip/examples/setup.rs
new file mode 100644
index 0000000..7ba06d0
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/examples/setup.rs
@@ -0,0 +1,21 @@
+use iroh::{protocol::Router, Endpoint};
+use iroh_gossip::{net::Gossip, ALPN};
+use n0_error::{Result, StdResultExt};
+
+#[tokio::main]
+async fn main() -> Result<()> {
+    // create an iroh endpoint that includes the standard address lookup mechanisms
+    // we've built at number0
+    let endpoint = Endpoint::bind().await?;
+
+    // build gossip protocol
+    let gossip = Gossip::builder().spawn(endpoint.clone());
+
+    // setup router
+    let router = Router::builder(endpoint.clone())
+        .accept(ALPN, gossip.clone())
+        .spawn();
+    // do fun stuff with the gossip protocol
+    router.shutdown().await.std_context("shutdown router")?;
+    Ok(())
+}
diff --git a/third_party/iroh-org/iroh-gossip/release.toml b/third_party/iroh-org/iroh-gossip/release.toml
new file mode 100644
index 0000000..b4dc183
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/release.toml
@@ -0,0 +1 @@
+pre-release-hook = ["git", "cliff", "--prepend", "CHANGELOG.md", "--tag", "{{version}}", "--unreleased" ]
diff --git a/third_party/iroh-org/iroh-gossip/simulations/all.toml b/third_party/iroh-org/iroh-gossip/simulations/all.toml
new file mode 100644
index 0000000..c924d2c
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/simulations/all.toml
@@ -0,0 +1,35 @@
+seeds = [0, 1, 212312388123, 123]
+config.latency.dynamic = { min = "10ms", max = "50ms" }
+
+[[scenario]]
+sim = "GossipSingle"
+nodes = 20
+
+[[scenario]]
+sim = "GossipSingle"
+nodes = 100
+
+[[scenario]]
+sim = "GossipSingle"
+nodes = 1000
+
+[[scenario]]
+sim = "GossipMulti"
+nodes = 20
+
+[[scenario]]
+sim = "GossipMulti"
+nodes = 100
+
+[[scenario]]
+sim = "GossipMulti"
+nodes = 1000
+
+[[scenario]]
+sim = "GossipAll"
+nodes = 20
+
+[[scenario]]
+sim = "GossipAll"
+nodes = 100
+rounds = 5
diff --git a/third_party/iroh-org/iroh-gossip/src/api.rs b/third_party/iroh-org/iroh-gossip/src/api.rs
new file mode 100644
index 0000000..e03f4f3
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/api.rs
@@ -0,0 +1,535 @@
+//! Public API for using iroh-gossip
+//!
+//! The API is usable both locally and over RPC.
+
+use std::{
+    collections::{BTreeSet, HashSet},
+    pin::Pin,
+    task::{Context, Poll},
+};
+
+use bytes::Bytes;
+use iroh_base::EndpointId;
+use irpc::{channel::mpsc, rpc_requests, Client};
+use n0_error::{e, stack_error};
+use n0_future::{Stream, StreamExt, TryStreamExt};
+use serde::{Deserialize, Serialize};
+
+use crate::proto::{DeliveryScope, TopicId};
+
+/// Default channel capacity for topic subscription channels (one per topic)
+const TOPIC_EVENTS_DEFAULT_CAP: usize = 2048;
+/// Channel capacity for topic command send channels.
+const TOPIC_COMMANDS_CAP: usize = 64;
+
+/// Input messages for the gossip actor.
+#[rpc_requests(message = RpcMessage, rpc_feature = "rpc")]
+#[derive(Debug, Serialize, Deserialize)]
+pub(crate) enum Request {
+    #[rpc(tx=mpsc::Sender<Event>, rx=mpsc::Receiver<Command>)]
+    Join(JoinRequest),
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+pub(crate) struct JoinRequest {
+    pub topic_id: TopicId,
+    pub bootstrap: BTreeSet<EndpointId>,
+}
+
+#[allow(missing_docs)]
+#[stack_error(derive, add_meta, from_sources)]
+#[non_exhaustive]
+pub enum ApiError {
+    #[error(transparent)]
+    Rpc { source: irpc::Error },
+    /// The gossip topic was closed.
+    #[error("topic closed")]
+    Closed,
+}
+
+impl From<irpc::channel::SendError> for ApiError {
+    fn from(value: irpc::channel::SendError) -> Self {
+        irpc::Error::from(value).into()
+    }
+}
+
+impl From<irpc::channel::mpsc::RecvError> for ApiError {
+    fn from(value: irpc::channel::mpsc::RecvError) -> Self {
+        irpc::Error::from(value).into()
+    }
+}
+
+impl From<irpc::channel::oneshot::RecvError> for ApiError {
+    fn from(value: irpc::channel::oneshot::RecvError) -> Self {
+        irpc::Error::from(value).into()
+    }
+}
+
+/// API to control a [`Gossip`] instance.
+///
+/// This has methods to subscribe and join gossip topics, which return handles to publish
+/// and receive messages on topics.
+///
+/// [`Gossip`] derefs to [`GossipApi`], so all functions on [`GossipApi`] are directly callable
+/// from [`Gossip`].
+///
+/// Additionally, a [`GossipApi`] can be created by connecting to an RPC server. See [`Gossip::listen`]
+/// and [`GossipApi::connect`] (*requires the `rpc` feature).
+///
+/// [`Gossip`]: crate::net::Gossip
+/// [`Gossip::listen`]: crate::net::Gossip::listen
+#[derive(Debug, Clone)]
+pub struct GossipApi {
+    client: Client<Request>,
+}
+
+impl GossipApi {
+    #[cfg(feature = "net")]
+    pub(crate) fn local(tx: tokio::sync::mpsc::Sender<RpcMessage>) -> Self {
+        let local = irpc::LocalSender::<Request>::from(tx);
+        Self {
+            client: local.into(),
+        }
+    }
+
+    /// Connect to a remote as a RPC client.
+    #[cfg(feature = "rpc")]
+    pub fn connect(endpoint: quinn::Endpoint, addr: std::net::SocketAddr) -> Self {
+        let inner = irpc::Client::quinn(endpoint, addr);
+        Self { client: inner }
+    }
+
+    /// Listen on a quinn endpoint for incoming RPC connections.
+    #[cfg(all(feature = "rpc", feature = "net"))]
+    pub(crate) async fn listen(&self, endpoint: quinn::Endpoint) {
+        use irpc::rpc::{listen, RemoteService};
+
+        let local = self
+            .client
+            .as_local()
+            .expect("cannot listen on remote client");
+        let handler = Request::remote_handler(local);
+
+        listen::<Request>(endpoint, handler).await
+    }
+
+    /// Join a gossip topic with options.
+    ///
+    /// Returns a [`GossipTopic`] instantly. To wait for at least one connection to be established,
+    /// you can await [`GossipTopic::joined`].
+    ///
+    /// Messages will be queued until a first connection is available. If the internal channel becomes full,
+    /// the oldest messages will be dropped from the channel.
+    pub async fn subscribe_with_opts(
+        &self,
+        topic_id: TopicId,
+        opts: JoinOptions,
+    ) -> Result<GossipTopic, ApiError> {
+        let req = JoinRequest {
+            topic_id,
+            bootstrap: opts.bootstrap,
+        };
+        let (tx, rx) = self
+            .client
+            .bidi_streaming(req, TOPIC_COMMANDS_CAP, opts.subscription_capacity)
+            .await?;
+        Ok(GossipTopic::new(tx, rx))
+    }
+
+    /// Join a gossip topic with the default options and wait for at least one active connection.
+    pub async fn subscribe_and_join(
+        &self,
+        topic_id: TopicId,
+        bootstrap: Vec<EndpointId>,
+    ) -> Result<GossipTopic, ApiError> {
+        let mut sub = self
+            .subscribe_with_opts(topic_id, JoinOptions::with_bootstrap(bootstrap))
+            .await?;
+        sub.joined().await?;
+        Ok(sub)
+    }
+
+    /// Join a gossip topic with the default options.
+    ///
+    /// Note that this will not wait for any bootstrap endpoint to be available.
+    /// To ensure the topic is connected to at least one endpoint, use [`GossipTopic::joined`]
+    /// or [`Self::subscribe_and_join`]
+    pub async fn subscribe(
+        &self,
+        topic_id: TopicId,
+        bootstrap: Vec<EndpointId>,
+    ) -> Result<GossipTopic, ApiError> {
+        let sub = self
+            .subscribe_with_opts(topic_id, JoinOptions::with_bootstrap(bootstrap))
+            .await?;
+
+        Ok(sub)
+    }
+}
+
+/// Sender for a gossip topic.
+#[derive(Debug, Clone)]
+pub struct GossipSender(mpsc::Sender<Command>);
+
+impl GossipSender {
+    pub(crate) fn new(sender: mpsc::Sender<Command>) -> Self {
+        Self(sender)
+    }
+
+    /// Broadcasts a message to all endpoints.
+    pub async fn broadcast(&self, message: Bytes) -> Result<(), ApiError> {
+        self.send(Command::Broadcast(message)).await?;
+        Ok(())
+    }
+
+    /// Broadcasts a message to our direct neighbors.
+    pub async fn broadcast_neighbors(&self, message: Bytes) -> Result<(), ApiError> {
+        self.send(Command::BroadcastNeighbors(message)).await?;
+        Ok(())
+    }
+
+    /// Joins a set of peers.
+    pub async fn join_peers(&self, peers: Vec<EndpointId>) -> Result<(), ApiError> {
+        self.send(Command::JoinPeers(peers)).await?;
+        Ok(())
+    }
+
+    async fn send(&self, command: Command) -> Result<(), irpc::channel::SendError> {
+        self.0.send(command).await?;
+        Ok(())
+    }
+}
+
+/// Subscribed gossip topic.
+///
+/// This handle is a [`Stream`] of [`Event`]s from the topic, and can be used to send messages.
+///
+/// Once the [`GossipTopic`] is dropped, the network actor will leave the gossip topic.
+///
+/// It may be split into sender and receiver parts with [`Self::split`]. In this case, the topic will
+/// be left once both the [`GossipSender`] and [`GossipReceiver`] halves are dropped.
+#[derive(Debug)]
+pub struct GossipTopic {
+    sender: GossipSender,
+    receiver: GossipReceiver,
+}
+
+impl GossipTopic {
+    pub(crate) fn new(sender: mpsc::Sender<Command>, receiver: mpsc::Receiver<Event>) -> Self {
+        let sender = GossipSender::new(sender);
+        Self {
+            sender,
+            receiver: GossipReceiver::new(receiver),
+        }
+    }
+
+    /// Splits `self` into [`GossipSender`] and [`GossipReceiver`] parts.
+    pub fn split(self) -> (GossipSender, GossipReceiver) {
+        (self.sender, self.receiver)
+    }
+
+    /// Sends a message to all peers.
+    pub async fn broadcast(&mut self, message: Bytes) -> Result<(), ApiError> {
+        self.sender.broadcast(message).await
+    }
+
+    /// Sends a message to our direct neighbors in the swarm.
+    pub async fn broadcast_neighbors(&mut self, message: Bytes) -> Result<(), ApiError> {
+        self.sender.broadcast_neighbors(message).await
+    }
+
+    /// Lists our current direct neighbors.
+    pub fn neighbors(&self) -> impl Iterator<Item = EndpointId> + '_ {
+        self.receiver.neighbors()
+    }
+
+    /// Waits until we are connected to at least one endpoint.
+    ///
+    /// See [`GossipReceiver::joined`] for details.
+    pub async fn joined(&mut self) -> Result<(), ApiError> {
+        self.receiver.joined().await
+    }
+
+    /// Returns `true` if we are connected to at least one endpoint.
+    pub fn is_joined(&self) -> bool {
+        self.receiver.is_joined()
+    }
+}
+
+impl Stream for GossipTopic {
+    type Item = Result<Event, ApiError>;
+
+    fn poll_next(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Option<Self::Item>> {
+        Pin::new(&mut self.receiver).poll_next(cx)
+    }
+}
+
+/// Receiver for gossip events on a topic.
+///
+/// This is a [`Stream`] of [`Event`]s emitted from the topic.
+#[derive(derive_more::Debug)]
+pub struct GossipReceiver {
+    #[debug("BoxStream")]
+    stream: Pin<Box<dyn Stream<Item = Result<Event, ApiError>> + Send + Sync + 'static>>,
+    neighbors: HashSet<EndpointId>,
+}
+
+impl GossipReceiver {
+    pub(crate) fn new(events_rx: mpsc::Receiver<Event>) -> Self {
+        let stream = events_rx.into_stream().map_err(ApiError::from);
+        let stream = Box::pin(stream);
+        Self {
+            stream,
+            neighbors: Default::default(),
+        }
+    }
+
+    /// Lists our current direct neighbors.
+    pub fn neighbors(&self) -> impl Iterator<Item = EndpointId> + '_ {
+        self.neighbors.iter().copied()
+    }
+
+    /// Waits until we are connected to at least one endpoint.
+    ///
+    /// Progresses the event stream to the first [`Event::NeighborUp`] event.
+    ///
+    /// Note that this consumes this initial `NeighborUp` event. If you want to track
+    /// neighbors, use [`Self::neighbors`] after awaiting [`Self::joined`], and then
+    /// continue to track `NeighborUp` events on the event stream.
+    pub async fn joined(&mut self) -> Result<(), ApiError> {
+        while !self.is_joined() {
+            let _event = self.next().await.ok_or(e!(ApiError::Closed))??;
+        }
+        Ok(())
+    }
+
+    /// Returns `true` if we are connected to at least one endpoint.
+    pub fn is_joined(&self) -> bool {
+        !self.neighbors.is_empty()
+    }
+}
+
+impl Stream for GossipReceiver {
+    type Item = Result<Event, ApiError>;
+
+    fn poll_next(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Option<Self::Item>> {
+        let item = std::task::ready!(Pin::new(&mut self.stream).poll_next(cx));
+        if let Some(Ok(item)) = &item {
+            match item {
+                Event::NeighborUp(endpoint_id) => {
+                    self.neighbors.insert(*endpoint_id);
+                }
+                Event::NeighborDown(endpoint_id) => {
+                    self.neighbors.remove(endpoint_id);
+                }
+                _ => {}
+            }
+        }
+        Poll::Ready(item)
+    }
+}
+
+/// Events emitted from a gossip topic.
+///
+/// These are the events emitted from a [`GossipReceiver`].
+#[derive(Clone, PartialEq, Eq, PartialOrd, Ord, Debug, Serialize, Deserialize)]
+pub enum Event {
+    /// We have a new, direct neighbor in the swarm membership layer for this topic.
+    NeighborUp(EndpointId),
+    /// We dropped direct neighbor in the swarm membership layer for this topic.
+    NeighborDown(EndpointId),
+    /// We received a gossip message for this topic.
+    Received(Message),
+    /// We missed some messages because our [`GossipReceiver`] was not progressing fast enough.
+    Lagged,
+}
+
+impl From<crate::proto::Event<EndpointId>> for Event {
+    fn from(event: crate::proto::Event<EndpointId>) -> Self {
+        match event {
+            crate::proto::Event::NeighborUp(endpoint_id) => Self::NeighborUp(endpoint_id),
+            crate::proto::Event::NeighborDown(endpoint_id) => Self::NeighborDown(endpoint_id),
+            crate::proto::Event::Received(message) => Self::Received(Message {
+                content: message.content,
+                scope: message.scope,
+                delivered_from: message.delivered_from,
+            }),
+        }
+    }
+}
+
+/// A gossip message
+#[derive(Clone, PartialEq, Eq, PartialOrd, Ord, derive_more::Debug, Serialize, Deserialize)]
+pub struct Message {
+    /// The content of the message
+    #[debug("Bytes({})", self.content.len())]
+    pub content: Bytes,
+    /// The scope of the message.
+    /// This tells us if the message is from a direct neighbor or actual gossip.
+    pub scope: DeliveryScope,
+    /// The endpoint that delivered the message. This is not the same as the original author.
+    pub delivered_from: EndpointId,
+}
+
+/// Command for a gossip topic.
+#[derive(Serialize, Deserialize, derive_more::Debug, Clone)]
+pub enum Command {
+    /// Broadcasts a message to all endpoints in the swarm.
+    Broadcast(#[debug("Bytes({})", _0.len())] Bytes),
+    /// Broadcasts a message to all direct neighbors.
+    BroadcastNeighbors(#[debug("Bytes({})", _0.len())] Bytes),
+    /// Connects to a set of peers.
+    JoinPeers(Vec<EndpointId>),
+}
+
+/// Options for joining a gossip topic.
+#[derive(Serialize, Deserialize, Debug)]
+pub struct JoinOptions {
+    /// The initial bootstrap endpoints.
+    pub bootstrap: BTreeSet<EndpointId>,
+    /// The maximum number of messages that can be buffered in a subscription.
+    ///
+    /// If this limit is reached, the subscriber will receive a `Lagged` response,
+    /// the message will be dropped, and the subscriber will be closed.
+    ///
+    /// This is to prevent a single slow subscriber from blocking the dispatch loop.
+    /// If a subscriber is lagging, it should be closed and re-opened.
+    pub subscription_capacity: usize,
+}
+
+impl JoinOptions {
+    /// Creates [`JoinOptions`] with the provided bootstrap endpoints and the default subscription
+    /// capacity.
+    pub fn with_bootstrap(endpoints: impl IntoIterator<Item = EndpointId>) -> Self {
+        Self {
+            bootstrap: endpoints.into_iter().collect(),
+            subscription_capacity: TOPIC_EVENTS_DEFAULT_CAP,
+        }
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use crate::api::GossipTopic;
+
+    #[cfg(all(feature = "rpc", feature = "net"))]
+    #[tokio::test]
+    #[n0_tracing_test::traced_test]
+    async fn test_rpc() -> n0_error::Result<()> {
+        use iroh::{address_lookup::memory::MemoryLookup, protocol::Router, RelayMap};
+        use n0_error::{AnyError, Result, StackResultExt, StdResultExt};
+        use n0_future::{time::Duration, StreamExt};
+        use rand_chacha::rand_core::SeedableRng;
+
+        use crate::{
+            api::{Event, GossipApi},
+            net::{test::create_endpoint, Gossip},
+            proto::TopicId,
+            ALPN,
+        };
+
+        let mut rng = rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let (relay_map, _relay_url, _guard) = iroh::test_utils::run_relay_server().await.unwrap();
+
+        async fn create_gossip_endpoint(
+            rng: &mut rand_chacha::ChaCha12Rng,
+            relay_map: RelayMap,
+        ) -> Result<(Router, Gossip)> {
+            let endpoint = create_endpoint(rng, relay_map, None).await?;
+            let gossip = Gossip::builder().spawn(endpoint.clone());
+            let router = Router::builder(endpoint)
+                .accept(ALPN, gossip.clone())
+                .spawn();
+            Ok((router, gossip))
+        }
+
+        let topic_id = TopicId::from_bytes([0u8; 32]);
+
+        // create our gossip endpoint
+        let (router, gossip) = create_gossip_endpoint(&mut rng, relay_map.clone()).await?;
+
+        // create a second endpoint so that we can test actually joining
+        let (endpoint2_id, endpoint2_addr, endpoint2_task) = {
+            let (router, gossip) = create_gossip_endpoint(&mut rng, relay_map.clone()).await?;
+            let endpoint_addr = router.endpoint().addr();
+            let endpoint_id = router.endpoint().id();
+            let task = tokio::task::spawn(async move {
+                let mut topic = gossip.subscribe_and_join(topic_id, vec![]).await?;
+                topic.broadcast(b"hello".to_vec().into()).await?;
+                Ok::<_, AnyError>(router)
+            });
+            (endpoint_id, endpoint_addr, task)
+        };
+
+        // create a memory lookup service to add endpoint addr manually
+        let memory_lookup = MemoryLookup::new();
+        memory_lookup.add_endpoint_info(endpoint2_addr);
+
+        router.endpoint().address_lookup().add(memory_lookup);
+
+        // expose the gossip endpoint over RPC
+        let (rpc_server_endpoint, rpc_server_cert) =
+            irpc::util::make_server_endpoint("127.0.0.1:0".parse().unwrap())
+                .context("make server endpoint")?;
+        let rpc_server_addr = rpc_server_endpoint
+            .local_addr()
+            .std_context("resolve server addr")?;
+        let rpc_server_task = tokio::task::spawn(async move {
+            gossip.listen(rpc_server_endpoint).await;
+        });
+
+        // connect to the RPC endpoint with a new client
+        let rpc_client_endpoint =
+            irpc::util::make_client_endpoint("127.0.0.1:0".parse().unwrap(), &[&rpc_server_cert])
+                .context("make client endpoint")?;
+        let rpc_client = GossipApi::connect(rpc_client_endpoint, rpc_server_addr);
+
+        // join via RPC
+        let recv = async move {
+            let mut topic = rpc_client
+                .subscribe_and_join(topic_id, vec![endpoint2_id])
+                .await?;
+            // wait for a message
+            while let Some(event) = topic.try_next().await? {
+                match event {
+                    Event::Received(message) => {
+                        assert_eq!(&message.content[..], b"hello");
+                        break;
+                    }
+                    Event::Lagged => panic!("unexpected lagged event"),
+                    _ => {}
+                }
+            }
+            Ok::<_, AnyError>(())
+        };
+
+        // timeout to not hang in case of failure
+        tokio::time::timeout(Duration::from_secs(10), recv)
+            .await
+            .std_context("rpc recv timeout")??;
+
+        // shutdown
+        rpc_server_task.abort();
+        router.shutdown().await.std_context("shutdown router")?;
+        let router2 = endpoint2_task.await.std_context("join endpoint task")??;
+        router2
+            .shutdown()
+            .await
+            .std_context("shutdown second router")?;
+        Ok(())
+    }
+
+    #[test]
+    fn ensure_gossip_topic_is_sync() {
+        #[allow(unused)]
+        fn get() -> GossipTopic {
+            unimplemented!()
+        }
+        #[allow(unused)]
+        fn check(_t: impl Sync) {}
+        #[allow(unused)]
+        fn foo() {
+            check(get());
+        }
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/bin/sim.rs b/third_party/iroh-org/iroh-gossip/src/bin/sim.rs
new file mode 100644
index 0000000..0d7d06a
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/bin/sim.rs
@@ -0,0 +1,418 @@
+use std::{
+    collections::HashMap,
+    path::{Path, PathBuf},
+};
+
+use clap::Parser;
+use comfy_table::{presets::NOTHING, Cell, CellAlignment, Table};
+use iroh_gossip::proto::sim::{
+    BootstrapMode, NetworkConfig, RoundStats, RoundStatsAvg, RoundStatsDiff, Simulator,
+    SimulatorConfig,
+};
+use n0_error::{Result, StackResultExt, StdResultExt};
+use rayon::iter::{IntoParallelIterator, ParallelIterator};
+use serde::{Deserialize, Serialize};
+use tracing::{error_span, info, warn};
+
+#[derive(Debug, Clone, Copy, Serialize, Deserialize)]
+#[allow(clippy::enum_variant_names)]
+enum Simulation {
+    /// A single sender broadcasts a single message per round.
+    GossipSingle,
+    /// Each round a different sender is chosen at random, and broadcasts a single message
+    GossipMulti,
+    /// Each round, all peers broadcast a single message simultaneously.
+    GossipAll,
+}
+
+#[derive(Debug, Clone, Serialize, Deserialize)]
+struct ScenarioDescription {
+    sim: Simulation,
+    nodes: u32,
+    #[serde(default)]
+    bootstrap: BootstrapMode,
+    #[serde(default = "defaults::rounds")]
+    rounds: u32,
+    config: Option<NetworkConfig>,
+}
+
+impl ScenarioDescription {
+    pub fn label(&self) -> String {
+        let &ScenarioDescription {
+            sim,
+            nodes,
+            rounds,
+            config: _,
+            bootstrap: _,
+        } = &self;
+        format!("{sim:?}-n{nodes}-r{rounds}")
+    }
+}
+
+mod defaults {
+    pub fn rounds() -> u32 {
+        30
+    }
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+struct SimConfig {
+    seeds: Vec<u64>,
+    config: Option<NetworkConfig>,
+    scenario: Vec<ScenarioDescription>,
+}
+
+#[derive(Debug, Parser)]
+struct Cli {
+    #[clap(subcommand)]
+    command: Command,
+}
+
+#[derive(Debug, Parser)]
+enum Command {
+    /// Run simulations
+    Run {
+        #[clap(short, long)]
+        config_path: PathBuf,
+        #[clap(short, long)]
+        out_dir: Option<PathBuf>,
+        #[clap(short, long)]
+        baseline: Option<PathBuf>,
+        #[clap(short, long)]
+        single_threaded: bool,
+        #[clap(short, long)]
+        filter: Vec<String>,
+    },
+    /// Compare simulation runs
+    Compare {
+        baseline: PathBuf,
+        current: PathBuf,
+        #[clap(short, long)]
+        filter: Vec<String>,
+    },
+}
+
+fn main() -> Result<()> {
+    tracing_subscriber::fmt::init();
+    let args: Cli = Cli::parse();
+    match args.command {
+        Command::Run {
+            config_path,
+            out_dir,
+            baseline,
+            single_threaded,
+            filter,
+        } => {
+            let config_text = std::fs::read_to_string(&config_path)
+                .with_std_context(|_| format!("read config {}", config_path.display()))?;
+            let config: SimConfig = toml::from_str(&config_text).std_context("parse config")?;
+
+            let base_config = config.config.unwrap_or_default();
+            info!("base config: {base_config:?}");
+            let seeds = config.seeds;
+            let mut scenarios = config.scenario;
+            for scenario in scenarios.iter_mut() {
+                scenario.config.get_or_insert_with(|| base_config.clone());
+            }
+
+            if let Some(out_dir) = out_dir.as_ref() {
+                std::fs::create_dir_all(out_dir)
+                    .with_std_context(|_| format!("create output dir {}", out_dir.display()))?;
+            }
+
+            let filter_fn = |s: &ScenarioDescription| {
+                let label = s.label();
+                if filter.is_empty() {
+                    true
+                } else {
+                    filter.iter().any(|x| x == &label)
+                }
+            };
+
+            let results: Result<Vec<_>> = if !single_threaded {
+                scenarios
+                    .into_par_iter()
+                    .filter(filter_fn)
+                    .map(|scenario| run_and_save_simulation(scenario, &seeds, out_dir.as_ref()))
+                    .collect()
+            } else {
+                scenarios
+                    .into_iter()
+                    .filter(filter_fn)
+                    .map(|scenario| run_and_save_simulation(scenario, &seeds, out_dir.as_ref()))
+                    .collect()
+            };
+            let mut results = results?;
+            results.sort_by_key(|a| a.scenario.label());
+            for result in results {
+                print_result(&result);
+            }
+            if let (Some(baseline), Some(out_dir)) = (baseline, out_dir) {
+                compare_dirs(baseline, out_dir, filter)?;
+            }
+        }
+        Command::Compare {
+            baseline,
+            current,
+            filter,
+        } => {
+            compare_dirs(baseline, current, filter)?;
+        }
+    }
+
+    Ok(())
+}
+
+fn run_and_save_simulation(
+    scenario: ScenarioDescription,
+    seeds: &[u64],
+    out_dir: Option<impl AsRef<Path>>,
+) -> Result<SimulationResults> {
+    let label = scenario.label();
+
+    if let Some(out_dir) = out_dir.as_ref() {
+        let path = out_dir.as_ref().join(format!("{label}.config.toml"));
+        let encoded = toml::to_string(&scenario).std_context("encode scenario")?;
+        std::fs::write(&path, encoded)
+            .with_std_context(|_| format!("write scenario {}", &path.display()))?;
+    }
+
+    let result = run_simulation(seeds, scenario);
+
+    if let Some(out_dir) = out_dir.as_ref() {
+        let path = out_dir.as_ref().join(format!("{label}.results.json"));
+        let encoded = serde_json::to_string(&result).std_context("encode results")?;
+        std::fs::write(&path, encoded)
+            .with_std_context(|_| format!("write results {}", path.display()))?;
+    }
+
+    Ok(result)
+}
+
+#[derive(Debug, Serialize, Deserialize, Clone)]
+struct SimulationResults {
+    scenario: ScenarioDescription,
+    /// Maps seeds to results
+    results: HashMap<u64, RoundStatsAvg>,
+    average: Option<RoundStatsAvg>,
+}
+
+impl SimulationResults {
+    fn load_from_file(path: impl AsRef<Path>) -> Result<Self> {
+        let s = std::fs::read_to_string(path.as_ref())
+            .with_std_context(|_| format!("read results {}", path.as_ref().display()))?;
+        let out = serde_json::from_str(&s).std_context("decode results")?;
+        Ok(out)
+    }
+}
+
+fn run_simulation(seeds: &[u64], scenario: ScenarioDescription) -> SimulationResults {
+    let mut results = HashMap::new();
+    let network_config = scenario.config.clone().unwrap_or_default();
+    for &seed in seeds {
+        let span = error_span!("sim", name=%scenario.label(), %seed);
+        let _guard = span.enter();
+
+        let sim_config = SimulatorConfig {
+            rng_seed: seed,
+            peers: scenario.nodes as usize,
+            ..Default::default()
+        };
+        let bootstrap = scenario.bootstrap.clone();
+        let mut simulator = Simulator::new(sim_config, network_config.clone());
+        info!("start");
+        let outcome = simulator.bootstrap(bootstrap);
+
+        if outcome.has_peers_with_no_neighbors() {
+            warn!("not all nodes active after bootstrap: {outcome:?}");
+        } else {
+            info!("bootstrapped, all nodes active");
+        }
+        let result = match scenario.sim {
+            Simulation::GossipSingle => BigSingle.run(simulator, scenario.rounds as usize),
+            Simulation::GossipMulti => BigMulti.run(simulator, scenario.rounds as usize),
+            Simulation::GossipAll => BigAll.run(simulator, scenario.rounds as usize),
+        };
+        info!("done");
+        results.insert(seed, result);
+    }
+
+    let stats: Vec<_> = results.values().cloned().collect();
+    let average = if !stats.is_empty() {
+        let avg = RoundStatsAvg::avg(&stats);
+        Some(avg)
+    } else {
+        None
+    };
+    SimulationResults {
+        average,
+        results,
+        scenario,
+    }
+}
+
+fn print_result(r: &SimulationResults) {
+    let seeds = r.results.len();
+    println!("{} with {seeds} seeds", r.scenario.label());
+    let Some(avg) = r.average.as_ref() else {
+        println!("no results, simulation did not complete");
+        return;
+    };
+    let mut table = Table::new();
+    let header = ["", "RMR", "LDH", "missed", "duration"]
+        .into_iter()
+        .map(|s| Cell::new(s).set_alignment(CellAlignment::Right));
+    table
+        .load_preset(NOTHING)
+        .set_header(header)
+        .add_row(fmt_round("mean", &avg.mean))
+        .add_row(fmt_round("max", &avg.max))
+        .add_row(fmt_round("min", &avg.min));
+    println!("{table}");
+    if avg.max.missed > 0.0 {
+        println!("WARN: Messages were missed!")
+    }
+    println!();
+}
+
+trait Scenario {
+    fn run(self, sim: Simulator, rounds: usize) -> RoundStatsAvg;
+}
+
+struct BigSingle;
+impl Scenario for BigSingle {
+    fn run(self, mut simulator: Simulator, rounds: usize) -> RoundStatsAvg {
+        let from = simulator.random_peer();
+        for i in 0..rounds {
+            let message = format!("m{i}").into_bytes().into();
+            let messages = vec![(from, message)];
+            simulator.gossip_round(messages);
+        }
+        simulator.round_stats_average()
+    }
+}
+
+struct BigMulti;
+impl Scenario for BigMulti {
+    fn run(self, mut simulator: Simulator, rounds: usize) -> RoundStatsAvg {
+        for i in 0..rounds {
+            let from = simulator.random_peer();
+            let message = format!("m{i}").into_bytes().into();
+            let messages = vec![(from, message)];
+            simulator.gossip_round(messages);
+        }
+        simulator.round_stats_average()
+    }
+}
+
+struct BigAll;
+impl Scenario for BigAll {
+    fn run(self, mut simulator: Simulator, rounds: usize) -> RoundStatsAvg {
+        let messages_per_peer = 1;
+        for i in 0..rounds {
+            let mut messages = vec![];
+            for id in simulator.network.peer_ids() {
+                for j in 0..messages_per_peer {
+                    let message: bytes::Bytes = format!("{i}:{j}.{id}").into_bytes().into();
+                    messages.push((id, message));
+                }
+            }
+            simulator.gossip_round(messages);
+        }
+        simulator.round_stats_average()
+    }
+}
+
+fn compare_dirs(baseline_dir: PathBuf, current_path: PathBuf, filter: Vec<String>) -> Result<()> {
+    let mut paths = vec![];
+    for entry in std::fs::read_dir(&current_path)
+        .with_std_context(|_| format!("read directory {}", current_path.display()))?
+        .filter_map(Result::ok)
+        .filter(|x| x.path().is_file())
+    {
+        let current_file = entry.path().to_owned();
+        let Some(filename) = current_file.file_name().and_then(|s| s.to_str()) else {
+            continue;
+        };
+        let Some(basename) = filename.strip_suffix(".results.json") else {
+            continue;
+        };
+        if !filter.is_empty() && !filter.iter().any(|x| x == basename) {
+            continue;
+        }
+        let baseline_file = baseline_dir.join(filename);
+        if !baseline_file.exists() {
+            println!("skip {filename} (not in baseline)");
+        }
+        paths.push((basename.to_string(), baseline_file, current_file));
+    }
+    paths.sort();
+    for (basename, baseline_file, current_file) in paths {
+        println!("comparing {basename}");
+        if let Err(err) = compare_files(&baseline_file, &current_file) {
+            println!("  skip (reason: {err:#}");
+        }
+    }
+    Ok(())
+}
+
+fn compare_files(baseline: impl AsRef<Path>, current: impl AsRef<Path>) -> Result<()> {
+    let baseline =
+        SimulationResults::load_from_file(baseline.as_ref()).context("failed to load baseline")?;
+    let current =
+        SimulationResults::load_from_file(current.as_ref()).context("failed to load current")?;
+    compare_results(baseline, current);
+    Ok(())
+}
+
+fn compare_results(baseline: SimulationResults, current: SimulationResults) {
+    match (baseline.average, current.average) {
+        (None, Some(_avg)) => {
+            println!("baseline run did not finish");
+        }
+        (Some(_avg), None) => {
+            println!("current run did not finish");
+        }
+        (None, None) => println!("both runs did not finish"),
+        (Some(baseline), Some(current)) => {
+            let diff = baseline.diff(&current);
+            let mut table = Table::new();
+            let header = ["", "RMR", "LDH", "missed", "duration"]
+                .into_iter()
+                .map(|s| Cell::new(s).set_alignment(CellAlignment::Right));
+            table
+                .load_preset(NOTHING)
+                .set_header(header)
+                .add_row(fmt_diff_round("mean", &diff.mean))
+                .add_row(fmt_diff_round("max", &diff.max))
+                .add_row(fmt_diff_round("min", &diff.min));
+            println!("{table}");
+        }
+    }
+}
+
+fn fmt_round(label: &str, round: &RoundStats) -> Vec<Cell> {
+    [
+        label.to_string(),
+        format!("{:.2}", round.rmr),
+        format!("{:.2}", round.ldh),
+        format!("{:.2}", round.missed),
+        format!("{}ms", round.duration.as_millis()),
+    ]
+    .into_iter()
+    .map(|s| Cell::new(s).set_alignment(CellAlignment::Right))
+    .collect()
+}
+fn fmt_diff_round(label: &str, round: &RoundStatsDiff) -> Vec<String> {
+    vec![
+        label.to_string(),
+        fmt_percent(round.rmr),
+        fmt_percent(round.ldh),
+        fmt_percent(round.missed),
+        fmt_percent(round.duration),
+    ]
+}
+
+fn fmt_percent(diff: f32) -> String {
+    format!("{:>+10.2}%", diff * 100.)
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/lib.rs b/third_party/iroh-org/iroh-gossip/src/lib.rs
new file mode 100644
index 0000000..3e74d8d
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/lib.rs
@@ -0,0 +1,25 @@
+#![cfg_attr(feature = "net", doc = include_str!("../README.md"))]
+//! Broadcast messages to peers subscribed to a topic
+//!
+//! The crate is designed to be used from the [iroh] crate, which provides a
+//! [high level interface](https://docs.rs/iroh/latest/iroh/client/gossip/index.html),
+//! but can also be used standalone.
+//!
+//! [iroh]: https://docs.rs/iroh
+#![deny(missing_docs, rustdoc::broken_intra_doc_links)]
+#![cfg_attr(iroh_docsrs, feature(doc_cfg))]
+
+#[cfg(feature = "net")]
+pub use net::Gossip;
+#[cfg(feature = "net")]
+#[doc(inline)]
+pub use net::GOSSIP_ALPN as ALPN;
+
+#[cfg(any(feature = "net", feature = "rpc"))]
+pub mod api;
+pub mod metrics;
+#[cfg(feature = "net")]
+pub mod net;
+pub mod proto;
+
+pub use proto::TopicId;
diff --git a/third_party/iroh-org/iroh-gossip/src/metrics.rs b/third_party/iroh-org/iroh-gossip/src/metrics.rs
new file mode 100644
index 0000000..44ccaea
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/metrics.rs
@@ -0,0 +1,45 @@
+//! Metrics for iroh-gossip
+
+use iroh_metrics::{Counter, MetricsGroup};
+
+/// Enum of metrics for the module
+#[derive(Debug, Default, MetricsGroup)]
+#[metrics(name = "gossip")]
+pub struct Metrics {
+    /// Number of control messages sent
+    pub msgs_ctrl_sent: Counter,
+    /// Number of control messages received
+    pub msgs_ctrl_recv: Counter,
+    /// Number of data messages sent
+    pub msgs_data_sent: Counter,
+    /// Number of data messages received
+    pub msgs_data_recv: Counter,
+    /// Total size of all data messages sent
+    pub msgs_data_sent_size: Counter,
+    /// Total size of all data messages received
+    pub msgs_data_recv_size: Counter,
+    /// Total size of all control messages sent
+    pub msgs_ctrl_sent_size: Counter,
+    /// Total size of all control messages received
+    pub msgs_ctrl_recv_size: Counter,
+    /// Number of times we connected to a peer
+    pub neighbor_up: Counter,
+    /// Number of times we disconnected from a peer
+    pub neighbor_down: Counter,
+    /// Number of times the main actor loop ticked
+    pub actor_tick_main: Counter,
+    /// Number of times the actor ticked for a message received
+    pub actor_tick_rx: Counter,
+    /// Number of times the actor ticked for an endpoint event
+    pub actor_tick_endpoint: Counter,
+    /// Number of times the actor ticked for a dialer event
+    pub actor_tick_dialer: Counter,
+    /// Number of times the actor ticked for a successful dialer event
+    pub actor_tick_dialer_success: Counter,
+    /// Number of times the actor ticked for a failed dialer event
+    pub actor_tick_dialer_failure: Counter,
+    /// Number of times the actor ticked for an incoming event
+    pub actor_tick_in_event_rx: Counter,
+    /// Number of times the actor ticked for a timer event
+    pub actor_tick_timers: Counter,
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/net.rs b/third_party/iroh-org/iroh-gossip/src/net.rs
new file mode 100644
index 0000000..97a488f
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/net.rs
@@ -0,0 +1,1958 @@
+//! Networking for the `iroh-gossip` protocol
+
+use std::{
+    collections::{hash_map::Entry, BTreeSet, HashMap, HashSet, VecDeque},
+    net::SocketAddr,
+    pin::Pin,
+    sync::Arc,
+    task::{Context, Poll},
+};
+
+use bytes::Bytes;
+use futures_concurrency::stream::{stream_group, StreamGroup};
+use futures_util::FutureExt as _;
+use iroh::{
+    endpoint::Connection,
+    protocol::{AcceptError, ProtocolHandler},
+    Endpoint, EndpointAddr, EndpointId, PublicKey, RelayUrl, Watcher,
+};
+use irpc::WithChannels;
+use n0_error::{e, stack_error};
+use n0_future::{
+    task::{self, AbortOnDropHandle, JoinSet},
+    time::Instant,
+    Stream, StreamExt as _,
+};
+use rand::{rngs::StdRng, SeedableRng};
+use serde::{Deserialize, Serialize};
+use tokio::sync::{broadcast, mpsc, oneshot};
+use tokio_util::sync::CancellationToken;
+use tracing::{debug, error, error_span, trace, warn, Instrument};
+
+use self::{
+    address_lookup::GossipAddressLookup,
+    util::{RecvLoop, SendLoop, Timers},
+};
+use crate::{
+    api::{self, Command, Event, GossipApi, RpcMessage},
+    metrics::Metrics,
+    proto::{self, HyparviewConfig, PeerData, PlumtreeConfig, Scope, TopicId},
+};
+
+mod address_lookup;
+mod util;
+
+/// ALPN protocol name
+pub const GOSSIP_ALPN: &[u8] = b"/iroh-gossip/1";
+
+/// Channel capacity for the send queue (one per connection)
+const SEND_QUEUE_CAP: usize = 64;
+/// Channel capacity for the ToActor message queue (single)
+const TO_ACTOR_CAP: usize = 64;
+/// Channel capacity for the InEvent message queue (single)
+const IN_EVENT_CAP: usize = 1024;
+/// Channel capacity for broadcast subscriber event queue (one per topic)
+const TOPIC_EVENT_CAP: usize = 256;
+
+/// Events emitted from the gossip protocol
+pub type ProtoEvent = proto::Event<PublicKey>;
+/// Commands for the gossip protocol
+pub type ProtoCommand = proto::Command<PublicKey>;
+
+type InEvent = proto::InEvent<PublicKey>;
+type OutEvent = proto::OutEvent<PublicKey>;
+type Timer = proto::Timer<PublicKey>;
+type ProtoMessage = proto::Message<PublicKey>;
+
+/// Publish and subscribe on gossiping topics.
+///
+/// Each topic is a separate broadcast tree with separate memberships.
+///
+/// A topic has to be joined before you can publish or subscribe on the topic.
+/// To join the swarm for a topic, you have to know the [`PublicKey`] of at least one peer that also joined the topic.
+///
+/// Messages published on the swarm will be delivered to all peers that joined the swarm for that
+/// topic. You will also be relaying (gossiping) messages published by other peers.
+///
+/// With the default settings, the protocol will maintain up to 5 peer connections per topic.
+///
+/// Even though the [`Gossip`] is created from a [`Endpoint`], it does not accept connections
+/// itself. You should run an accept loop on the [`Endpoint`] yourself, check the ALPN protocol of incoming
+/// connections, and if the ALPN protocol equals [`GOSSIP_ALPN`], forward the connection to the
+/// gossip actor through [Self::handle_connection].
+///
+/// The gossip actor will, however, initiate new connections to other peers by itself.
+#[derive(Debug, Clone)]
+pub struct Gossip {
+    pub(crate) inner: Arc<Inner>,
+}
+
+impl std::ops::Deref for Gossip {
+    type Target = GossipApi;
+    fn deref(&self) -> &Self::Target {
+        &self.inner.api
+    }
+}
+
+#[derive(Debug)]
+enum LocalActorMessage {
+    HandleConnection(Connection),
+    Shutdown { reply: oneshot::Sender<()> },
+}
+
+#[allow(missing_docs)]
+#[stack_error(derive, add_meta)]
+#[non_exhaustive]
+pub enum Error {
+    ActorDropped {},
+}
+
+impl<T> From<mpsc::error::SendError<T>> for Error {
+    fn from(_value: mpsc::error::SendError<T>) -> Self {
+        e!(Error::ActorDropped)
+    }
+}
+impl From<oneshot::error::RecvError> for Error {
+    fn from(_value: oneshot::error::RecvError) -> Self {
+        e!(Error::ActorDropped)
+    }
+}
+
+#[derive(Debug)]
+pub(crate) struct Inner {
+    api: GossipApi,
+    local_tx: mpsc::Sender<LocalActorMessage>,
+    _actor_handle: AbortOnDropHandle<()>,
+    max_message_size: usize,
+    metrics: Arc<Metrics>,
+}
+
+impl ProtocolHandler for Gossip {
+    async fn accept(&self, connection: Connection) -> Result<(), AcceptError> {
+        self.handle_connection(connection)
+            .await
+            .map_err(AcceptError::from_err)?;
+        Ok(())
+    }
+
+    async fn shutdown(&self) {
+        if let Err(err) = self.shutdown().await {
+            warn!("error while shutting down gossip: {err:#}");
+        }
+    }
+}
+
+/// Builder to configure and construct [`Gossip`].
+#[derive(Debug, Clone)]
+pub struct Builder {
+    config: proto::Config,
+    alpn: Option<Bytes>,
+}
+
+impl Builder {
+    /// Sets the maximum message size in bytes.
+    /// By default this is `4096` bytes.
+    pub fn max_message_size(mut self, size: usize) -> Self {
+        self.config.max_message_size = size;
+        self
+    }
+
+    /// Set the membership configuration.
+    pub fn membership_config(mut self, config: HyparviewConfig) -> Self {
+        self.config.membership = config;
+        self
+    }
+
+    /// Set the broadcast configuration.
+    pub fn broadcast_config(mut self, config: PlumtreeConfig) -> Self {
+        self.config.broadcast = config;
+        self
+    }
+
+    /// Set the ALPN this gossip instance uses.
+    ///
+    /// It has to be the same for all peers in the network. If you set a custom ALPN,
+    /// you have to use the same ALPN when registering the [`Gossip`] in on a iroh
+    /// router with [`RouterBuilder::accept`].
+    ///
+    /// [`RouterBuilder::accept`]: iroh::protocol::RouterBuilder::accept
+    pub fn alpn(mut self, alpn: impl AsRef<[u8]>) -> Self {
+        self.alpn = Some(alpn.as_ref().to_vec().into());
+        self
+    }
+
+    /// Spawn a gossip actor and get a handle for it
+    pub fn spawn(self, endpoint: Endpoint) -> Gossip {
+        let metrics = Arc::new(Metrics::default());
+        let address_lookup = GossipAddressLookup::default();
+        endpoint.address_lookup().add(address_lookup.clone());
+        let (actor, rpc_tx, local_tx) = Actor::new(
+            endpoint,
+            self.config,
+            metrics.clone(),
+            self.alpn,
+            address_lookup,
+        );
+        let me = actor.endpoint.id().fmt_short();
+        let max_message_size = actor.state.max_message_size();
+
+        let actor_handle = task::spawn(actor.run().instrument(error_span!("gossip", %me)));
+
+        let api = GossipApi::local(rpc_tx);
+
+        Gossip {
+            inner: Inner {
+                api,
+                local_tx,
+                _actor_handle: AbortOnDropHandle::new(actor_handle),
+                max_message_size,
+                metrics,
+            }
+            .into(),
+        }
+    }
+}
+
+impl Gossip {
+    /// Creates a default `Builder`, with the endpoint set.
+    pub fn builder() -> Builder {
+        Builder {
+            config: Default::default(),
+            alpn: None,
+        }
+    }
+
+    /// Listen on a quinn endpoint for incoming RPC connections.
+    #[cfg(feature = "rpc")]
+    pub async fn listen(self, endpoint: quinn::Endpoint) {
+        self.inner.api.listen(endpoint).await
+    }
+
+    /// Get the maximum message size configured for this gossip actor.
+    pub fn max_message_size(&self) -> usize {
+        self.inner.max_message_size
+    }
+
+    /// Handle an incoming [`Connection`].
+    ///
+    /// Make sure to check the ALPN protocol yourself before passing the connection.
+    pub async fn handle_connection(&self, conn: Connection) -> Result<(), Error> {
+        self.inner
+            .local_tx
+            .send(LocalActorMessage::HandleConnection(conn))
+            .await?;
+        Ok(())
+    }
+
+    /// Shutdown the gossip instance.
+    ///
+    /// This leaves all topics, sending `Disconnect` messages to peers, and then
+    /// stops the gossip actor loop and drops all state and connections.
+    pub async fn shutdown(&self) -> Result<(), Error> {
+        let (reply, reply_rx) = oneshot::channel();
+        self.inner
+            .local_tx
+            .send(LocalActorMessage::Shutdown { reply })
+            .await?;
+        reply_rx.await?;
+        Ok(())
+    }
+
+    /// Returns the metrics tracked for this gossip instance.
+    pub fn metrics(&self) -> &Arc<Metrics> {
+        &self.inner.metrics
+    }
+}
+
+/// Actor that sends and handles messages between the connection and main state loops
+struct Actor {
+    alpn: Bytes,
+    /// Protocol state
+    state: proto::State<PublicKey, StdRng>,
+    /// The endpoint through which we dial peers
+    endpoint: Endpoint,
+    /// Dial machine to connect to peers
+    dialer: Dialer,
+    /// Input messages to the actor
+    rpc_rx: mpsc::Receiver<RpcMessage>,
+    local_rx: mpsc::Receiver<LocalActorMessage>,
+    /// Sender for the state input (cloned into the connection loops)
+    in_event_tx: mpsc::Sender<InEvent>,
+    /// Input events to the state (emitted from the connection loops)
+    in_event_rx: mpsc::Receiver<InEvent>,
+    /// Queued timers
+    timers: Timers<Timer>,
+    /// Map of topics to their state.
+    topics: HashMap<TopicId, TopicState>,
+    /// Map of peers to their state.
+    peers: HashMap<EndpointId, PeerState>,
+    /// Stream of commands from topic handles.
+    command_rx: stream_group::Keyed<TopicCommandStream>,
+    /// Internal queue of topic to close because all handles were dropped.
+    quit_queue: VecDeque<TopicId>,
+    /// Tasks for the connection loops, to keep track of panics.
+    connection_tasks: JoinSet<(EndpointId, Connection, Result<(), ConnectionLoopError>)>,
+    metrics: Arc<Metrics>,
+    topic_event_forwarders: JoinSet<TopicId>,
+    address_lookup: GossipAddressLookup,
+}
+
+impl Actor {
+    fn new(
+        endpoint: Endpoint,
+        config: proto::Config,
+        metrics: Arc<Metrics>,
+        alpn: Option<Bytes>,
+        address_lookup: GossipAddressLookup,
+    ) -> (
+        Self,
+        mpsc::Sender<RpcMessage>,
+        mpsc::Sender<LocalActorMessage>,
+    ) {
+        let peer_id = endpoint.id();
+        let dialer = Dialer::new(endpoint.clone());
+        let state = proto::State::new(
+            peer_id,
+            Default::default(),
+            config,
+            rand::rngs::StdRng::from_rng(&mut rand::rng()),
+        );
+        let (rpc_tx, rpc_rx) = mpsc::channel(TO_ACTOR_CAP);
+        let (local_tx, local_rx) = mpsc::channel(16);
+        let (in_event_tx, in_event_rx) = mpsc::channel(IN_EVENT_CAP);
+
+        let actor = Actor {
+            alpn: alpn.unwrap_or_else(|| GOSSIP_ALPN.to_vec().into()),
+            endpoint,
+            state,
+            dialer,
+            rpc_rx,
+            in_event_rx,
+            in_event_tx,
+            timers: Timers::new(),
+            command_rx: StreamGroup::new().keyed(),
+            peers: Default::default(),
+            topics: Default::default(),
+            quit_queue: Default::default(),
+            connection_tasks: Default::default(),
+            metrics,
+            local_rx,
+            topic_event_forwarders: Default::default(),
+            address_lookup,
+        };
+
+        (actor, rpc_tx, local_tx)
+    }
+
+    pub async fn run(mut self) {
+        let mut addr_update_stream = self.setup().await;
+
+        let mut i = 0;
+        while self.event_loop(&mut addr_update_stream, i).await {
+            i += 1;
+        }
+    }
+
+    /// Performs the initial actor setup to run the [`Actor::event_loop`].
+    ///
+    /// This updates our current address and return it. It also returns the home relay stream and
+    /// direct addr stream.
+    async fn setup(&mut self) -> impl Stream<Item = EndpointAddr> + Send + Unpin + use<> {
+        let addr_update_stream = self.endpoint.watch_addr().stream();
+        let initial_addr = self.endpoint.addr();
+        self.handle_addr_update(initial_addr).await;
+        addr_update_stream
+    }
+
+    /// One event loop processing step.
+    ///
+    /// None is returned when no further processing should be performed.
+    async fn event_loop(
+        &mut self,
+        addr_updates: &mut (impl Stream<Item = EndpointAddr> + Send + Unpin),
+        i: usize,
+    ) -> bool {
+        self.metrics.actor_tick_main.inc();
+        tokio::select! {
+            biased;
+            conn = self.local_rx.recv() => {
+                match conn {
+                    Some(LocalActorMessage::Shutdown { reply }) => {
+                        debug!("received shutdown message, quit all topics");
+                        self.quit_queue.extend(self.topics.keys().copied());
+                        self.process_quit_queue().await;
+                        debug!("all topics quit, stop gossip actor");
+                        reply.send(()).ok();
+                        return false;
+                    },
+                    Some(LocalActorMessage::HandleConnection(conn)) => {
+                        self.handle_connection(conn.remote_id(), ConnOrigin::Accept, conn);
+                    }
+                    None => {
+                        debug!("all gossip handles dropped, stop gossip actor");
+                        return false;
+                    }
+                }
+            }
+            msg = self.rpc_rx.recv() => {
+                trace!(?i, "tick: to_actor_rx");
+                self.metrics.actor_tick_rx.inc();
+                match msg {
+                    Some(msg) => {
+                        self.handle_rpc_msg(msg, Instant::now()).await;
+                    }
+                    None => {
+                        debug!("all gossip handles dropped, stop gossip actor");
+                        return false;
+                    }
+                }
+            },
+            Some((key, (topic, command))) = self.command_rx.next(), if !self.command_rx.is_empty() => {
+                trace!(?i, "tick: command_rx");
+                self.handle_command(topic, key, command).await;
+            },
+            Some(new_address) = addr_updates.next() => {
+                trace!(?i, "tick: new_address");
+                self.metrics.actor_tick_endpoint.inc();
+                self.handle_addr_update(new_address).await;
+            }
+            (peer_id, res) = self.dialer.next_conn() => {
+                trace!(?i, "tick: dialer");
+                self.metrics.actor_tick_dialer.inc();
+                match res {
+                    Some(Ok(conn)) => {
+                        debug!(peer = %peer_id.fmt_short(), "dial successful");
+                        self.metrics.actor_tick_dialer_success.inc();
+                        self.handle_connection(peer_id, ConnOrigin::Dial, conn);
+                    }
+                    Some(Err(err)) => {
+                        warn!(peer = %peer_id.fmt_short(), "dial failed: {err}");
+                        self.metrics.actor_tick_dialer_failure.inc();
+                        let peer_state = self.peers.get(&peer_id);
+                        let is_active = matches!(peer_state, Some(PeerState::Active { .. }));
+                        if !is_active {
+                            self.handle_in_event(InEvent::PeerDisconnected(peer_id), Instant::now())
+                                .await;
+                        }
+                    }
+                    None => {
+                        warn!(peer = %peer_id.fmt_short(), "dial disconnected");
+                        self.metrics.actor_tick_dialer_failure.inc();
+                    }
+                }
+            }
+            event = self.in_event_rx.recv() => {
+                trace!(?i, "tick: in_event_rx");
+                self.metrics.actor_tick_in_event_rx.inc();
+                let event = event.expect("unreachable: in_event_tx is never dropped before receiver");
+                self.handle_in_event(event, Instant::now()).await;
+            }
+            _ = self.timers.wait_next() => {
+                trace!(?i, "tick: timers");
+                self.metrics.actor_tick_timers.inc();
+                let now = Instant::now();
+                while let Some((_instant, timer)) = self.timers.pop_before(now) {
+                    self.handle_in_event(InEvent::TimerExpired(timer), now).await;
+                }
+            }
+            Some(res) = self.connection_tasks.join_next(), if !self.connection_tasks.is_empty() => {
+                trace!(?i, "tick: connection_tasks");
+                let (peer_id, conn, result) = res.expect("connection task panicked");
+                self.handle_connection_task_finished(peer_id, conn, result).await;
+            }
+            Some(res) = self.topic_event_forwarders.join_next(), if !self.topic_event_forwarders.is_empty() => {
+                let topic_id = res.expect("topic event forwarder panicked");
+                if let Some(state) = self.topics.get_mut(&topic_id) {
+                    if !state.still_needed() {
+                        self.quit_queue.push_back(topic_id);
+                        self.process_quit_queue().await;
+                    }
+                }
+            }
+        }
+
+        true
+    }
+
+    async fn handle_addr_update(&mut self, endpoint_addr: EndpointAddr) {
+        // let peer_data = our_peer_data(&self.endpoint, current_addresses);
+        let peer_data = encode_peer_data(&endpoint_addr.into());
+        self.handle_in_event(InEvent::UpdatePeerData(peer_data), Instant::now())
+            .await
+    }
+
+    async fn handle_command(
+        &mut self,
+        topic: TopicId,
+        key: stream_group::Key,
+        command: Option<Command>,
+    ) {
+        debug!(?topic, ?key, ?command, "handle command");
+        let Some(state) = self.topics.get_mut(&topic) else {
+            // TODO: unreachable?
+            warn!("received command for unknown topic");
+            return;
+        };
+        match command {
+            Some(command) => {
+                let command = match command {
+                    Command::Broadcast(message) => ProtoCommand::Broadcast(message, Scope::Swarm),
+                    Command::BroadcastNeighbors(message) => {
+                        ProtoCommand::Broadcast(message, Scope::Neighbors)
+                    }
+                    Command::JoinPeers(peers) => ProtoCommand::Join(peers),
+                };
+                self.handle_in_event(proto::InEvent::Command(topic, command), Instant::now())
+                    .await;
+            }
+            None => {
+                state.command_rx_keys.remove(&key);
+                if !state.still_needed() {
+                    self.quit_queue.push_back(topic);
+                    self.process_quit_queue().await;
+                }
+            }
+        }
+    }
+
+    fn handle_connection(&mut self, peer_id: EndpointId, origin: ConnOrigin, conn: Connection) {
+        let (send_tx, send_rx) = mpsc::channel(SEND_QUEUE_CAP);
+        let conn_id = conn.stable_id();
+
+        let queue = match self.peers.entry(peer_id) {
+            Entry::Occupied(mut entry) => entry.get_mut().accept_conn(send_tx, conn_id),
+            Entry::Vacant(entry) => {
+                entry.insert(PeerState::Active {
+                    active_send_tx: send_tx,
+                    active_conn_id: conn_id,
+                    other_conns: Vec::new(),
+                });
+                Vec::new()
+            }
+        };
+
+        let max_message_size = self.state.max_message_size();
+        let in_event_tx = self.in_event_tx.clone();
+
+        // Spawn a task for this connection
+        self.connection_tasks.spawn(
+            async move {
+                let res = connection_loop(
+                    peer_id,
+                    conn.clone(),
+                    origin,
+                    send_rx,
+                    in_event_tx,
+                    max_message_size,
+                    queue,
+                )
+                .await;
+                (peer_id, conn, res)
+            }
+            .instrument(error_span!("conn", peer = %peer_id.fmt_short())),
+        );
+    }
+
+    #[tracing::instrument(name = "conn", skip_all, fields(peer = %peer_id.fmt_short()))]
+    async fn handle_connection_task_finished(
+        &mut self,
+        peer_id: EndpointId,
+        conn: Connection,
+        task_result: Result<(), ConnectionLoopError>,
+    ) {
+        if conn.close_reason().is_none() {
+            conn.close(0u32.into(), b"close from disconnect");
+        }
+        let reason = conn.close_reason().expect("just closed");
+        let error = task_result.err();
+        debug!(%reason, ?error, "connection closed");
+        if let Some(PeerState::Active {
+            active_conn_id,
+            other_conns,
+            ..
+        }) = self.peers.get_mut(&peer_id)
+        {
+            if conn.stable_id() == *active_conn_id {
+                debug!("active send connection closed, mark peer as disconnected");
+                self.handle_in_event(InEvent::PeerDisconnected(peer_id), Instant::now())
+                    .await;
+            } else {
+                other_conns.retain(|x| *x != conn.stable_id());
+                debug!("remaining {} other connections", other_conns.len() + 1);
+            }
+        } else {
+            debug!("peer already marked as disconnected");
+        }
+    }
+
+    async fn handle_rpc_msg(&mut self, msg: RpcMessage, now: Instant) {
+        trace!("handle to_actor  {msg:?}");
+        match msg {
+            RpcMessage::Join(msg) => {
+                let WithChannels {
+                    inner,
+                    rx,
+                    tx,
+                    // TODO(frando): make use of span?
+                    span: _,
+                } = msg;
+                let api::JoinRequest {
+                    topic_id,
+                    bootstrap,
+                } = inner;
+                let TopicState {
+                    neighbors,
+                    event_sender,
+                    command_rx_keys,
+                } = self.topics.entry(topic_id).or_default();
+                let mut sender_dead = false;
+                if !neighbors.is_empty() {
+                    for neighbor in neighbors.iter() {
+                        if let Err(_err) = tx.try_send(Event::NeighborUp(*neighbor)).await {
+                            sender_dead = true;
+                            break;
+                        }
+                    }
+                }
+
+                if !sender_dead {
+                    let fut =
+                        topic_subscriber_loop(tx, event_sender.subscribe()).map(move |_| topic_id);
+                    self.topic_event_forwarders
+                        .spawn(fut.instrument(tracing::Span::current()));
+                }
+                let command_rx = TopicCommandStream::new(topic_id, Box::pin(rx.into_stream()));
+                let key = self.command_rx.insert(command_rx);
+                command_rx_keys.insert(key);
+
+                self.handle_in_event(
+                    InEvent::Command(
+                        topic_id,
+                        ProtoCommand::Join(bootstrap.into_iter().collect()),
+                    ),
+                    now,
+                )
+                .await;
+            }
+        }
+    }
+
+    async fn handle_in_event(&mut self, event: InEvent, now: Instant) {
+        self.handle_in_event_inner(event, now).await;
+        self.process_quit_queue().await;
+    }
+
+    async fn process_quit_queue(&mut self) {
+        while let Some(topic_id) = self.quit_queue.pop_front() {
+            self.handle_in_event_inner(
+                InEvent::Command(topic_id, ProtoCommand::Quit),
+                Instant::now(),
+            )
+            .await;
+            if self.topics.remove(&topic_id).is_some() {
+                tracing::debug!(%topic_id, "publishers and subscribers gone; unsubscribing");
+            }
+        }
+    }
+
+    async fn handle_in_event_inner(&mut self, event: InEvent, now: Instant) {
+        if matches!(event, InEvent::TimerExpired(_)) {
+            trace!(?event, "handle in_event");
+        } else {
+            debug!(?event, "handle in_event");
+        };
+        let out = self.state.handle(event, now, Some(&self.metrics));
+        for event in out {
+            if matches!(event, OutEvent::ScheduleTimer(_, _)) {
+                trace!(?event, "handle out_event");
+            } else {
+                debug!(?event, "handle out_event");
+            };
+            match event {
+                OutEvent::SendMessage(peer_id, message) => {
+                    let state = self.peers.entry(peer_id).or_default();
+                    match state {
+                        PeerState::Active { active_send_tx, .. } => {
+                            if let Err(_err) = active_send_tx.send(message).await {
+                                // Removing the peer is handled by the in_event PeerDisconnected sent
+                                // in [`Self::handle_connection_task_finished`].
+                                warn!(
+                                    peer = %peer_id.fmt_short(),
+                                    "failed to send: connection task send loop terminated",
+                                );
+                            }
+                        }
+                        PeerState::Pending { queue } => {
+                            if queue.is_empty() {
+                                debug!(peer = %peer_id.fmt_short(), "start to dial");
+                                self.dialer.queue_dial(peer_id, self.alpn.clone());
+                            }
+                            queue.push(message);
+                        }
+                    }
+                }
+                OutEvent::EmitEvent(topic_id, event) => {
+                    let Some(state) = self.topics.get_mut(&topic_id) else {
+                        // TODO: unreachable?
+                        warn!(?topic_id, "gossip state emitted event for unknown topic");
+                        continue;
+                    };
+                    let TopicState {
+                        neighbors,
+                        event_sender,
+                        ..
+                    } = state;
+                    match &event {
+                        ProtoEvent::NeighborUp(neighbor) => {
+                            neighbors.insert(*neighbor);
+                        }
+                        ProtoEvent::NeighborDown(neighbor) => {
+                            neighbors.remove(neighbor);
+                        }
+                        _ => {}
+                    }
+                    event_sender.send(event).ok();
+                    if !state.still_needed() {
+                        self.quit_queue.push_back(topic_id);
+                    }
+                }
+                OutEvent::ScheduleTimer(delay, timer) => {
+                    self.timers.insert(now + delay, timer);
+                }
+                OutEvent::DisconnectPeer(peer_id) => {
+                    // signal disconnection by dropping the senders to the connection
+                    debug!(peer=%peer_id.fmt_short(), "gossip state indicates disconnect: drop peer");
+                    self.peers.remove(&peer_id);
+                }
+                OutEvent::PeerData(endpoint_id, data) => match decode_peer_data(&data) {
+                    Err(err) => warn!("Failed to decode {data:?} from {endpoint_id}: {err}"),
+                    Ok(info) => {
+                        debug!(peer = ?endpoint_id, "add known addrs: {info:?}");
+                        let mut endpoint_addr = EndpointAddr::new(endpoint_id);
+                        for addr in info.direct_addresses {
+                            endpoint_addr = endpoint_addr.with_ip_addr(addr);
+                        }
+                        if let Some(relay_url) = info.relay_url {
+                            endpoint_addr = endpoint_addr.with_relay_url(relay_url);
+                        }
+
+                        self.address_lookup.add(endpoint_addr);
+                    }
+                },
+            }
+        }
+    }
+}
+
+type ConnId = usize;
+
+#[derive(Debug)]
+enum PeerState {
+    Pending {
+        queue: Vec<ProtoMessage>,
+    },
+    Active {
+        active_send_tx: mpsc::Sender<ProtoMessage>,
+        active_conn_id: ConnId,
+        other_conns: Vec<ConnId>,
+    },
+}
+
+impl PeerState {
+    fn accept_conn(
+        &mut self,
+        send_tx: mpsc::Sender<ProtoMessage>,
+        conn_id: ConnId,
+    ) -> Vec<ProtoMessage> {
+        match self {
+            PeerState::Pending { queue } => {
+                let queue = std::mem::take(queue);
+                *self = PeerState::Active {
+                    active_send_tx: send_tx,
+                    active_conn_id: conn_id,
+                    other_conns: Vec::new(),
+                };
+                queue
+            }
+            PeerState::Active {
+                active_send_tx,
+                active_conn_id,
+                other_conns,
+            } => {
+                // We already have an active connection. We keep the old connection intact,
+                // but only use the new connection for sending from now on.
+                // By dropping the `send_tx` of the old connection, the send loop part of
+                // the `connection_loop` of the old connection will terminate, which will also
+                // notify the peer that the old connection may be dropped.
+                other_conns.push(*active_conn_id);
+                *active_send_tx = send_tx;
+                *active_conn_id = conn_id;
+                Vec::new()
+            }
+        }
+    }
+}
+
+impl Default for PeerState {
+    fn default() -> Self {
+        PeerState::Pending { queue: Vec::new() }
+    }
+}
+
+#[derive(Debug)]
+struct TopicState {
+    neighbors: BTreeSet<EndpointId>,
+    event_sender: broadcast::Sender<ProtoEvent>,
+    /// Keys identifying command receivers in [`Actor::command_rx`].
+    ///
+    /// This represents the receiver side of gossip's publish public API.
+    command_rx_keys: HashSet<stream_group::Key>,
+}
+
+impl Default for TopicState {
+    fn default() -> Self {
+        let (event_sender, _) = broadcast::channel(TOPIC_EVENT_CAP);
+        Self {
+            neighbors: Default::default(),
+            command_rx_keys: Default::default(),
+            event_sender,
+        }
+    }
+}
+
+impl TopicState {
+    /// Check if the topic still has any publisher or subscriber.
+    fn still_needed(&self) -> bool {
+        // Keep topic alive if either senders or receivers exist.
+        // Using || prevents topic closure when senders are dropped while receivers listen.
+        !self.command_rx_keys.is_empty() || self.event_sender.receiver_count() > 0
+    }
+
+    #[cfg(test)]
+    fn joined(&self) -> bool {
+        !self.neighbors.is_empty()
+    }
+}
+
+/// Whether a connection is initiated by us (Dial) or by the remote peer (Accept)
+#[derive(Debug, Clone, Copy, PartialEq, Eq)]
+enum ConnOrigin {
+    Accept,
+    Dial,
+}
+
+#[allow(missing_docs)]
+#[stack_error(derive, add_meta, from_sources, std_sources)]
+#[non_exhaustive]
+enum ConnectionLoopError {
+    #[error(transparent)]
+    Write {
+        source: self::util::WriteError,
+    },
+    #[error(transparent)]
+    Read {
+        source: self::util::ReadError,
+    },
+    #[error(transparent)]
+    Connection {
+        #[error(std_err)]
+        source: iroh::endpoint::ConnectionError,
+    },
+    ActorDropped {},
+}
+
+impl<T> From<mpsc::error::SendError<T>> for ConnectionLoopError {
+    fn from(_value: mpsc::error::SendError<T>) -> Self {
+        e!(ConnectionLoopError::ActorDropped)
+    }
+}
+
+async fn connection_loop(
+    from: PublicKey,
+    conn: Connection,
+    origin: ConnOrigin,
+    send_rx: mpsc::Receiver<ProtoMessage>,
+    in_event_tx: mpsc::Sender<InEvent>,
+    max_message_size: usize,
+    queue: Vec<ProtoMessage>,
+) -> Result<(), ConnectionLoopError> {
+    debug!(?origin, "connection established");
+
+    let mut send_loop = SendLoop::new(conn.clone(), send_rx, max_message_size);
+    let mut recv_loop = RecvLoop::new(from, conn, in_event_tx, max_message_size);
+
+    let send_fut = send_loop.run(queue).instrument(error_span!("send"));
+    let recv_fut = recv_loop.run().instrument(error_span!("recv"));
+
+    let (send_res, recv_res) = tokio::join!(send_fut, recv_fut);
+    send_res?;
+    recv_res?;
+    Ok(())
+}
+
+#[derive(Default, Debug, Clone, Serialize, Deserialize)]
+struct AddrInfo {
+    relay_url: Option<RelayUrl>,
+    direct_addresses: BTreeSet<SocketAddr>,
+}
+
+impl From<EndpointAddr> for AddrInfo {
+    fn from(endpoint_addr: EndpointAddr) -> Self {
+        Self {
+            relay_url: endpoint_addr.relay_urls().next().cloned(),
+            direct_addresses: endpoint_addr.ip_addrs().cloned().collect(),
+        }
+    }
+}
+
+fn encode_peer_data(info: &AddrInfo) -> PeerData {
+    let bytes = postcard::to_stdvec(info).expect("serializing AddrInfo may not fail");
+    PeerData::new(bytes)
+}
+
+fn decode_peer_data(peer_data: &PeerData) -> Result<AddrInfo, postcard::Error> {
+    let bytes = peer_data.as_bytes();
+    if bytes.is_empty() {
+        return Ok(AddrInfo::default());
+    }
+    let info = postcard::from_bytes(bytes)?;
+    Ok(info)
+}
+
+async fn topic_subscriber_loop(
+    sender: irpc::channel::mpsc::Sender<Event>,
+    mut topic_events: broadcast::Receiver<ProtoEvent>,
+) {
+    loop {
+        tokio::select! {
+           biased;
+           msg = topic_events.recv() => {
+               let event = match msg {
+                   Err(broadcast::error::RecvError::Closed) => break,
+                   Err(broadcast::error::RecvError::Lagged(_)) => Event::Lagged,
+                   Ok(event) => event.into(),
+               };
+               if sender.send(event).await.is_err() {
+                   break;
+               }
+           }
+           _ = sender.closed() => break,
+        }
+    }
+}
+
+/// A stream of commands for a gossip subscription.
+type BoxedCommandReceiver =
+    n0_future::stream::Boxed<Result<Command, irpc::channel::mpsc::RecvError>>;
+
+#[derive(derive_more::Debug)]
+struct TopicCommandStream {
+    topic_id: TopicId,
+    #[debug("CommandStream")]
+    stream: BoxedCommandReceiver,
+    closed: bool,
+}
+
+impl TopicCommandStream {
+    fn new(topic_id: TopicId, stream: BoxedCommandReceiver) -> Self {
+        Self {
+            topic_id,
+            stream,
+            closed: false,
+        }
+    }
+}
+
+impl Stream for TopicCommandStream {
+    type Item = (TopicId, Option<Command>);
+    fn poll_next(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Option<Self::Item>> {
+        if self.closed {
+            return Poll::Ready(None);
+        }
+        match Pin::new(&mut self.stream).poll_next(cx) {
+            Poll::Ready(Some(Ok(item))) => Poll::Ready(Some((self.topic_id, Some(item)))),
+            Poll::Ready(None) | Poll::Ready(Some(Err(_))) => {
+                self.closed = true;
+                Poll::Ready(Some((self.topic_id, None)))
+            }
+            Poll::Pending => Poll::Pending,
+        }
+    }
+}
+
+#[derive(Debug)]
+struct Dialer {
+    endpoint: Endpoint,
+    pending: JoinSet<(
+        EndpointId,
+        Option<Result<Connection, iroh::endpoint::ConnectError>>,
+    )>,
+    pending_dials: HashMap<EndpointId, CancellationToken>,
+}
+
+impl Dialer {
+    /// Create a new dialer for a [`Endpoint`]
+    fn new(endpoint: Endpoint) -> Self {
+        Self {
+            endpoint,
+            pending: Default::default(),
+            pending_dials: Default::default(),
+        }
+    }
+
+    /// Starts to dial a endpoint by [`EndpointId`].
+    fn queue_dial(&mut self, endpoint_id: EndpointId, alpn: Bytes) {
+        if self.is_pending(endpoint_id) {
+            return;
+        }
+        let cancel = CancellationToken::new();
+        self.pending_dials.insert(endpoint_id, cancel.clone());
+        let endpoint = self.endpoint.clone();
+        self.pending.spawn(
+            async move {
+                let res = tokio::select! {
+                    biased;
+                    _ = cancel.cancelled() => None,
+                    res = endpoint.connect(endpoint_id, &alpn) => Some(res),
+                };
+                (endpoint_id, res)
+            }
+            .instrument(tracing::Span::current()),
+        );
+    }
+
+    /// Checks if a endpoint is currently being dialed.
+    fn is_pending(&self, endpoint: EndpointId) -> bool {
+        self.pending_dials.contains_key(&endpoint)
+    }
+
+    /// Waits for the next dial operation to complete.
+    /// `None` means disconnected
+    async fn next_conn(
+        &mut self,
+    ) -> (
+        EndpointId,
+        Option<Result<Connection, iroh::endpoint::ConnectError>>,
+    ) {
+        match self.pending_dials.is_empty() {
+            false => {
+                let (endpoint_id, res) = loop {
+                    match self.pending.join_next().await {
+                        Some(Ok((endpoint_id, res))) => {
+                            self.pending_dials.remove(&endpoint_id);
+                            break (endpoint_id, res);
+                        }
+                        Some(Err(e)) => {
+                            error!("next conn error: {:?}", e);
+                        }
+                        None => {
+                            error!("no more pending conns available");
+                            std::future::pending().await
+                        }
+                    }
+                };
+
+                (endpoint_id, res)
+            }
+            true => std::future::pending().await,
+        }
+    }
+}
+
+#[cfg(test)]
+pub(crate) mod test {
+    use std::time::Duration;
+
+    use bytes::Bytes;
+    use futures_concurrency::future::TryJoin;
+    use iroh::{
+        address_lookup::memory::MemoryLookup, endpoint::BindError, protocol::Router, RelayMap,
+        RelayMode, SecretKey,
+    };
+    use n0_error::{AnyError, Result, StdResultExt};
+    use n0_tracing_test::traced_test;
+    use rand::{CryptoRng, Rng};
+    use tokio::{spawn, time::timeout};
+    use tokio_util::sync::CancellationToken;
+    use tracing::{info, instrument};
+
+    use super::*;
+    use crate::api::{ApiError, GossipReceiver, GossipSender};
+
+    struct ManualActorLoop {
+        actor: Actor,
+        step: usize,
+    }
+
+    impl std::ops::Deref for ManualActorLoop {
+        type Target = Actor;
+
+        fn deref(&self) -> &Self::Target {
+            &self.actor
+        }
+    }
+
+    impl std::ops::DerefMut for ManualActorLoop {
+        fn deref_mut(&mut self) -> &mut Self::Target {
+            &mut self.actor
+        }
+    }
+
+    type EndpointHandle = tokio::task::JoinHandle<Result<()>>;
+
+    impl ManualActorLoop {
+        #[instrument(skip_all, fields(me = %actor.endpoint.id().fmt_short()))]
+        async fn new(mut actor: Actor) -> Self {
+            let _ = actor.setup().await;
+            Self { actor, step: 0 }
+        }
+
+        #[instrument(skip_all, fields(me = %self.endpoint.id().fmt_short()))]
+        async fn step(&mut self) -> bool {
+            let ManualActorLoop { actor, step } = self;
+            *step += 1;
+            // ignore updates that change our published address. This gives us better control over
+            // events since the endpoint it no longer emitting changes
+            let addr_update_stream = &mut futures_lite::stream::pending();
+            actor.event_loop(addr_update_stream, *step).await
+        }
+
+        async fn steps(&mut self, n: usize) {
+            for _ in 0..n {
+                self.step().await;
+            }
+        }
+
+        async fn finish(mut self) {
+            while self.step().await {}
+        }
+    }
+
+    impl Gossip {
+        /// Creates a testing gossip instance and its actor without spawning it.
+        ///
+        /// This creates the endpoint and spawns the endpoint loop as well. The handle for the
+        /// endpoing task is returned along the gossip instance and actor. Since the actor is not
+        /// actually spawned as [`Builder::spawn`] would, the gossip instance will have a
+        /// handle to a dummy task instead.
+        async fn t_new_with_actor(
+            rng: &mut rand_chacha::ChaCha12Rng,
+            config: proto::Config,
+            relay_map: RelayMap,
+            cancel: &CancellationToken,
+        ) -> Result<(Self, Actor, EndpointHandle), BindError> {
+            let endpoint = create_endpoint(rng, relay_map, None).await?;
+            let metrics = Arc::new(Metrics::default());
+            let address_lookup = GossipAddressLookup::default();
+            endpoint.address_lookup().add(address_lookup.clone());
+
+            let (actor, to_actor_tx, conn_tx) =
+                Actor::new(endpoint, config, metrics.clone(), None, address_lookup);
+            let max_message_size = actor.state.max_message_size();
+
+            let _actor_handle =
+                AbortOnDropHandle::new(task::spawn(futures_lite::future::pending()));
+            let gossip = Self {
+                inner: Inner {
+                    api: GossipApi::local(to_actor_tx),
+                    local_tx: conn_tx,
+                    _actor_handle,
+                    max_message_size,
+                    metrics,
+                }
+                .into(),
+            };
+
+            let endpoint_task = task::spawn(endpoint_loop(
+                actor.endpoint.clone(),
+                gossip.clone(),
+                cancel.child_token(),
+            ));
+
+            Ok((gossip, actor, endpoint_task))
+        }
+
+        /// Crates a new testing gossip instance with the normal actor loop.
+        async fn t_new(
+            rng: &mut rand_chacha::ChaCha12Rng,
+            config: proto::Config,
+            relay_map: RelayMap,
+            cancel: &CancellationToken,
+        ) -> Result<(Self, Endpoint, EndpointHandle, impl Drop + use<>), BindError> {
+            let (g, actor, ep_handle) =
+                Gossip::t_new_with_actor(rng, config, relay_map, cancel).await?;
+            let ep = actor.endpoint.clone();
+            let me = ep.id().fmt_short();
+            let actor_handle =
+                task::spawn(actor.run().instrument(tracing::error_span!("gossip", %me)));
+            Ok((g, ep, ep_handle, AbortOnDropHandle::new(actor_handle)))
+        }
+    }
+
+    pub(crate) async fn create_endpoint(
+        rng: &mut rand_chacha::ChaCha12Rng,
+        relay_map: RelayMap,
+        memory_lookup: Option<MemoryLookup>,
+    ) -> Result<Endpoint, BindError> {
+        let ep = Endpoint::empty_builder(RelayMode::Custom(relay_map))
+            .secret_key(SecretKey::generate(rng))
+            .alpns(vec![GOSSIP_ALPN.to_vec()])
+            .insecure_skip_relay_cert_verify(true)
+            .bind()
+            .await?;
+
+        if let Some(memory_lookup) = memory_lookup {
+            ep.address_lookup().add(memory_lookup);
+        }
+        ep.online().await;
+        Ok(ep)
+    }
+
+    async fn endpoint_loop(
+        endpoint: Endpoint,
+        gossip: Gossip,
+        cancel: CancellationToken,
+    ) -> Result<()> {
+        loop {
+            tokio::select! {
+                biased;
+                _ = cancel.cancelled() => break,
+                incoming = endpoint.accept() => match incoming {
+                    None => break,
+                    Some(incoming) => {
+                        let connecting = match incoming.accept() {
+                            Ok(connecting) => connecting,
+                            Err(err) => {
+                                warn!("incoming connection failed: {err:#}");
+                                // we can carry on in these cases:
+                                // this can be caused by retransmitted datagrams
+                                continue;
+                            }
+                        };
+                        let connection = connecting
+                            .await
+                            .std_context("await incoming connection")?;
+                        gossip.handle_connection(connection).await?
+                    }
+                }
+            }
+        }
+        Ok(())
+    }
+
+    #[tokio::test]
+    #[traced_test]
+    async fn gossip_net_smoke() {
+        let mut rng = rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let (relay_map, relay_url, _guard) = iroh::test_utils::run_relay_server().await.unwrap();
+
+        let memory_lookup = MemoryLookup::new();
+
+        let ep1 = create_endpoint(&mut rng, relay_map.clone(), Some(memory_lookup.clone()))
+            .await
+            .unwrap();
+        let ep2 = create_endpoint(&mut rng, relay_map.clone(), Some(memory_lookup.clone()))
+            .await
+            .unwrap();
+        let ep3 = create_endpoint(&mut rng, relay_map.clone(), Some(memory_lookup.clone()))
+            .await
+            .unwrap();
+
+        let go1 = Gossip::builder().spawn(ep1.clone());
+        let go2 = Gossip::builder().spawn(ep2.clone());
+        let go3 = Gossip::builder().spawn(ep3.clone());
+        debug!("peer1 {:?}", ep1.id());
+        debug!("peer2 {:?}", ep2.id());
+        debug!("peer3 {:?}", ep3.id());
+        let pi1 = ep1.id();
+        let pi2 = ep2.id();
+
+        let cancel = CancellationToken::new();
+        let tasks = [
+            spawn(endpoint_loop(ep1.clone(), go1.clone(), cancel.clone())),
+            spawn(endpoint_loop(ep2.clone(), go2.clone(), cancel.clone())),
+            spawn(endpoint_loop(ep3.clone(), go3.clone(), cancel.clone())),
+        ];
+
+        debug!("----- adding peers  ----- ");
+        let topic: TopicId = blake3::hash(b"foobar").into();
+
+        let addr1 = EndpointAddr::new(pi1).with_relay_url(relay_url.clone());
+        let addr2 = EndpointAddr::new(pi2).with_relay_url(relay_url);
+        memory_lookup.add_endpoint_info(addr1.clone());
+        memory_lookup.add_endpoint_info(addr2.clone());
+
+        debug!("----- joining  ----- ");
+        // join the topics and wait for the connection to succeed
+        let [sub1, mut sub2, mut sub3] = [
+            go1.subscribe_and_join(topic, vec![]),
+            go2.subscribe_and_join(topic, vec![pi1]),
+            go3.subscribe_and_join(topic, vec![pi2]),
+        ]
+        .try_join()
+        .await
+        .unwrap();
+
+        let (sink1, _stream1) = sub1.split();
+
+        let len = 2;
+
+        // publish messages on endpoint1
+        let pub1 = spawn(async move {
+            for i in 0..len {
+                let message = format!("hi{i}");
+                info!("go1 broadcast: {message:?}");
+                sink1.broadcast(message.into_bytes().into()).await.unwrap();
+                tokio::time::sleep(Duration::from_micros(1)).await;
+            }
+        });
+
+        // wait for messages on endpoint2
+        let sub2 = spawn(async move {
+            let mut recv = vec![];
+            loop {
+                let ev = sub2.next().await.unwrap().unwrap();
+                info!("go2 event: {ev:?}");
+                if let Event::Received(msg) = ev {
+                    recv.push(msg.content);
+                }
+                if recv.len() == len {
+                    return recv;
+                }
+            }
+        });
+
+        // wait for messages on endpoint3
+        let sub3 = spawn(async move {
+            let mut recv = vec![];
+            loop {
+                let ev = sub3.next().await.unwrap().unwrap();
+                info!("go3 event: {ev:?}");
+                if let Event::Received(msg) = ev {
+                    recv.push(msg.content);
+                }
+                if recv.len() == len {
+                    return recv;
+                }
+            }
+        });
+
+        timeout(Duration::from_secs(10), pub1)
+            .await
+            .unwrap()
+            .unwrap();
+        let recv2 = timeout(Duration::from_secs(10), sub2)
+            .await
+            .unwrap()
+            .unwrap();
+        let recv3 = timeout(Duration::from_secs(10), sub3)
+            .await
+            .unwrap()
+            .unwrap();
+
+        // We assert the received messages, but not their order.
+        // While commonly they will be received in-order, for go3 it may happen
+        // that the second message arrives before the first one, because it managed to
+        // forward-join go1 before the second message is published.
+        let expected: HashSet<Bytes> = (0..len)
+            .map(|i| Bytes::from(format!("hi{i}").into_bytes()))
+            .collect();
+        assert_eq!(HashSet::from_iter(recv2), expected);
+        assert_eq!(HashSet::from_iter(recv3), expected);
+
+        cancel.cancel();
+        for t in tasks {
+            timeout(Duration::from_secs(10), t)
+                .await
+                .unwrap()
+                .unwrap()
+                .unwrap();
+        }
+    }
+
+    /// Test that when a gossip topic is no longer needed it's actually unsubscribed.
+    ///
+    /// This test will:
+    /// - Create two endpoints, the first using manual event loop.
+    /// - Subscribe both endpoints to the same topic. The first endpoint will subscribe twice and connect
+    ///   to the second endpoint. The second endpoint will subscribe without bootstrap.
+    /// - Ensure that the first endpoint removes the subscription iff all topic handles have been
+    ///   dropped
+    // NOTE: this is a regression test.
+    #[tokio::test]
+    #[traced_test]
+    async fn subscription_cleanup() -> Result {
+        let rng = &mut rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let ct = CancellationToken::new();
+        let (relay_map, relay_url, _guard) = iroh::test_utils::run_relay_server().await.unwrap();
+
+        // create the first endpoint with a manual actor loop
+        let (go1, actor, ep1_handle) =
+            Gossip::t_new_with_actor(rng, Default::default(), relay_map.clone(), &ct).await?;
+        let mut actor = ManualActorLoop::new(actor).await;
+
+        // create the second endpoint with the usual actor loop
+        let (go2, ep2, ep2_handle, _test_actor_handle) =
+            Gossip::t_new(rng, Default::default(), relay_map, &ct).await?;
+
+        let endpoint_id1 = actor.endpoint.id();
+        let endpoint_id2 = ep2.id();
+        tracing::info!(
+            endpoint_1 = %endpoint_id1.fmt_short(),
+            endpoint_2 = %endpoint_id2.fmt_short(),
+            "endpoints ready"
+        );
+
+        let topic: TopicId = blake3::hash(b"subscription_cleanup").into();
+        tracing::info!(%topic, "joining");
+
+        // create the tasks for each gossip instance:
+        // - second endpoint subscribes once without bootstrap and listens to events
+        // - first endpoint subscribes twice with the second endpoint as bootstrap. This is done on command
+        //   from the main task (this)
+
+        // second endpoint
+        let ct2 = ct.clone();
+        let go2_task = async move {
+            let (_pub_tx, mut sub_rx) = go2.subscribe_and_join(topic, vec![]).await?.split();
+
+            let subscribe_fut = async {
+                while let Some(ev) = sub_rx.try_next().await? {
+                    match ev {
+                        Event::Lagged => tracing::debug!("missed some messages :("),
+                        Event::Received(_) => unreachable!("test does not send messages"),
+                        other => tracing::debug!(?other, "gs event"),
+                    }
+                }
+
+                tracing::debug!("subscribe stream ended");
+                Ok::<_, AnyError>(())
+            };
+
+            tokio::select! {
+                _ = ct2.cancelled() => Ok(()),
+                res = subscribe_fut => res,
+            }
+        }
+        .instrument(tracing::debug_span!("endpoint_2", %endpoint_id2));
+        let go2_handle = task::spawn(go2_task);
+
+        // first endpoint
+        let addr2 = EndpointAddr::new(endpoint_id2).with_relay_url(relay_url);
+        let memory_lookup = MemoryLookup::new();
+        memory_lookup.add_endpoint_info(addr2);
+        actor.endpoint.address_lookup().add(memory_lookup);
+        // we use a channel to signal advancing steps to the task
+        let (tx, mut rx) = mpsc::channel::<()>(1);
+        let ct1 = ct.clone();
+        let go1_task = async move {
+            // first subscribe is done immediately
+            tracing::info!("subscribing the first time");
+            let sub_1a = go1.subscribe_and_join(topic, vec![endpoint_id2]).await?;
+
+            // wait for signal to subscribe a second time
+            rx.recv().await.expect("signal for second subscribe");
+            tracing::info!("subscribing a second time");
+            let sub_1b = go1.subscribe_and_join(topic, vec![endpoint_id2]).await?;
+            drop(sub_1a);
+
+            // wait for signal to drop the second handle as well
+            rx.recv().await.expect("signal for second subscribe");
+            tracing::info!("dropping all handles");
+            drop(sub_1b);
+
+            // wait for cancellation
+            ct1.cancelled().await;
+            drop(go1);
+
+            Ok::<_, AnyError>(())
+        }
+        .instrument(tracing::debug_span!("endpoint_1", %endpoint_id1));
+        let go1_handle = task::spawn(go1_task);
+
+        // advance and check that the topic is now subscribed
+        actor.steps(3).await; // handle our subscribe;
+                              // get peer connection;
+                              // receive the other peer's information for a NeighborUp
+        let state = actor.topics.get(&topic).expect("get registered topic");
+        assert!(state.joined());
+
+        // signal the second subscribe, we should remain subscribed
+        tx.send(())
+            .await
+            .std_context("signal additional subscribe")?;
+        actor.steps(3).await; // subscribe; first receiver gone; first sender gone
+        let state = actor.topics.get(&topic).expect("get registered topic");
+        assert!(state.joined());
+
+        // signal to drop the second handle, the topic should no longer be subscribed
+        tx.send(()).await.std_context("signal drop handles")?;
+        actor.steps(2).await; // second receiver gone; second sender gone
+        assert!(!actor.topics.contains_key(&topic));
+
+        // cleanup and ensure everything went as expected
+        ct.cancel();
+        let wait = Duration::from_secs(2);
+        timeout(wait, ep1_handle)
+            .await
+            .std_context("wait endpoint1 task")?
+            .std_context("join endpoint1 task")??;
+        timeout(wait, ep2_handle)
+            .await
+            .std_context("wait endpoint2 task")?
+            .std_context("join endpoint2 task")??;
+        timeout(wait, go1_handle)
+            .await
+            .std_context("wait gossip1 task")?
+            .std_context("join gossip1 task")??;
+        timeout(wait, go2_handle)
+            .await
+            .std_context("wait gossip2 task")?
+            .std_context("join gossip2 task")??;
+        timeout(wait, actor.finish())
+            .await
+            .std_context("wait actor finish")?;
+
+        Ok(())
+    }
+
+    /// Test that endpoints can reconnect to each other.
+    ///
+    /// This test will create two endpoints subscribed to the same topic. The second endpoint will
+    /// unsubscribe and then resubscribe and connection between the endpoints should succeed both
+    /// times.
+    // NOTE: This is a regression test
+    #[tokio::test]
+    #[traced_test]
+    async fn can_reconnect() -> Result {
+        let rng = &mut rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let ct = CancellationToken::new();
+        let (relay_map, relay_url, _guard) = iroh::test_utils::run_relay_server().await.unwrap();
+
+        let (go1, ep1, ep1_handle, _test_actor_handle1) =
+            Gossip::t_new(rng, Default::default(), relay_map.clone(), &ct).await?;
+
+        let (go2, ep2, ep2_handle, _test_actor_handle2) =
+            Gossip::t_new(rng, Default::default(), relay_map, &ct).await?;
+
+        let endpoint_id1 = ep1.id();
+        let endpoint_id2 = ep2.id();
+        tracing::info!(
+            endpoint_1 = %endpoint_id1.fmt_short(),
+            endpoint_2 = %endpoint_id2.fmt_short(),
+            "endpoints ready"
+        );
+
+        let topic: TopicId = blake3::hash(b"can_reconnect").into();
+        tracing::info!(%topic, "joining");
+
+        let ct2 = ct.child_token();
+        // channel used to signal the second gossip instance to advance the test
+        let (tx, mut rx) = mpsc::channel::<()>(1);
+        let addr1 = EndpointAddr::new(endpoint_id1).with_relay_url(relay_url.clone());
+        let memory_lookup = MemoryLookup::new();
+        memory_lookup.add_endpoint_info(addr1);
+        ep2.address_lookup().add(memory_lookup.clone());
+        let go2_task = async move {
+            let mut sub = go2.subscribe(topic, Vec::new()).await?;
+            sub.joined().await?;
+
+            rx.recv().await.expect("signal to unsubscribe");
+            tracing::info!("unsubscribing");
+            drop(sub);
+
+            rx.recv().await.expect("signal to subscribe again");
+            tracing::info!("resubscribing");
+            let mut sub = go2.subscribe(topic, vec![endpoint_id1]).await?;
+
+            sub.joined().await?;
+            tracing::info!("subscription successful!");
+
+            ct2.cancelled().await;
+
+            Ok::<_, ApiError>(())
+        }
+        .instrument(tracing::debug_span!("endpoint_2", %endpoint_id2));
+        let go2_handle = task::spawn(go2_task);
+
+        let addr2 = EndpointAddr::new(endpoint_id2).with_relay_url(relay_url);
+        memory_lookup.add_endpoint_info(addr2);
+        ep1.address_lookup().add(memory_lookup);
+
+        let mut sub = go1.subscribe(topic, vec![endpoint_id2]).await?;
+        // wait for subscribed notification
+        sub.joined().await?;
+
+        // signal endpoint_2 to unsubscribe
+        tx.send(()).await.std_context("signal unsubscribe")?;
+
+        // we should receive a Neighbor down event
+        let conn_timeout = Duration::from_millis(500);
+        let ev = timeout(conn_timeout, sub.try_next())
+            .await
+            .std_context("wait neighbor down")??;
+        assert_eq!(ev, Some(Event::NeighborDown(endpoint_id2)));
+        tracing::info!("endpoint 2 left");
+
+        // signal endpoint_2 to subscribe again
+        tx.send(()).await.std_context("signal resubscribe")?;
+
+        let conn_timeout = Duration::from_millis(500);
+        let ev = timeout(conn_timeout, sub.try_next())
+            .await
+            .std_context("wait neighbor up")??;
+        assert_eq!(ev, Some(Event::NeighborUp(endpoint_id2)));
+        tracing::info!("endpoint 2 rejoined!");
+
+        // cleanup and ensure everything went as expected
+        ct.cancel();
+        let wait = Duration::from_secs(2);
+        timeout(wait, ep1_handle)
+            .await
+            .std_context("wait endpoint1 task")?
+            .std_context("join endpoint1 task")??;
+        timeout(wait, ep2_handle)
+            .await
+            .std_context("wait endpoint2 task")?
+            .std_context("join endpoint2 task")??;
+        timeout(wait, go2_handle)
+            .await
+            .std_context("wait gossip2 task")?
+            .std_context("join gossip2 task")??;
+
+        Result::Ok(())
+    }
+
+    #[tokio::test]
+    #[traced_test]
+    async fn can_die_and_reconnect() -> Result {
+        /// Runs a future in a separate runtime on a separate thread, cancelling everything
+        /// abruptly once `cancel` is invoked.
+        fn run_in_thread<T: Send + 'static>(
+            cancel: CancellationToken,
+            fut: impl std::future::Future<Output = T> + Send + 'static,
+        ) -> std::thread::JoinHandle<Option<T>> {
+            std::thread::spawn(move || {
+                let rt = tokio::runtime::Builder::new_current_thread()
+                    .enable_all()
+                    .build()
+                    .unwrap();
+                rt.block_on(async move { cancel.run_until_cancelled(fut).await })
+            })
+        }
+
+        /// Spawns a new endpoint and gossip instance.
+        async fn spawn_gossip(
+            secret_key: SecretKey,
+            relay_map: RelayMap,
+        ) -> Result<(Router, Gossip), BindError> {
+            let ep = Endpoint::empty_builder(RelayMode::Custom(relay_map))
+                .secret_key(secret_key)
+                .insecure_skip_relay_cert_verify(true)
+                .bind()
+                .await?;
+            let gossip = Gossip::builder().spawn(ep.clone());
+            let router = Router::builder(ep)
+                .accept(GOSSIP_ALPN, gossip.clone())
+                .spawn();
+            Ok((router, gossip))
+        }
+
+        /// Spawns a gossip endpoint, and broadcasts a single message, then sleep until cancelled externally.
+        async fn broadcast_once(
+            secret_key: SecretKey,
+            relay_map: RelayMap,
+            bootstrap_addr: EndpointAddr,
+            topic_id: TopicId,
+            message: String,
+        ) -> Result {
+            let (router, gossip) = spawn_gossip(secret_key, relay_map).await?;
+            info!(endpoint_id = %router.endpoint().id().fmt_short(), "broadcast endpoint spawned");
+            let bootstrap = vec![bootstrap_addr.id];
+            let memory_lookup = MemoryLookup::new();
+            memory_lookup.add_endpoint_info(bootstrap_addr);
+            router.endpoint().address_lookup().add(memory_lookup);
+            let mut topic = gossip.subscribe_and_join(topic_id, bootstrap).await?;
+            topic.broadcast(message.as_bytes().to_vec().into()).await?;
+            std::future::pending::<()>().await;
+            Ok(())
+        }
+
+        let (relay_map, _relay_url, _guard) = iroh::test_utils::run_relay_server().await.unwrap();
+        let mut rng = &mut rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let topic_id = TopicId::from_bytes(rng.random());
+
+        // spawn a gossip endpoint, send the endpoint's address on addr_tx,
+        // then wait to receive `count` messages, and terminate.
+        let (addr_tx, addr_rx) = tokio::sync::oneshot::channel();
+        let (msgs_recv_tx, mut msgs_recv_rx) = tokio::sync::mpsc::channel(3);
+        let recv_task = tokio::task::spawn({
+            let relay_map = relay_map.clone();
+            let secret_key = SecretKey::generate(&mut rng);
+            async move {
+                let (router, gossip) = spawn_gossip(secret_key, relay_map).await?;
+                // wait for the relay to be set. iroh currently has issues when trying
+                // to immediately reconnect with changed direct addresses, but when the
+                // relay path is available it works.
+                // See https://github.com/n0-computer/iroh/pull/3372
+                router.endpoint().online().await;
+                let addr = router.endpoint().addr();
+                info!(endpoint_id = %addr.id.fmt_short(), "recv endpoint spawned");
+                addr_tx.send(addr).unwrap();
+                let mut topic = gossip.subscribe_and_join(topic_id, vec![]).await?;
+                while let Some(event) = topic.try_next().await.unwrap() {
+                    if let Event::Received(message) = event {
+                        let message = std::str::from_utf8(&message.content)
+                            .std_context("decode broadcast message")?
+                            .to_string();
+                        msgs_recv_tx
+                            .send(message)
+                            .await
+                            .std_context("forward received message")?;
+                    }
+                }
+                Ok::<_, AnyError>(())
+            }
+        });
+
+        let endpoint0_addr = addr_rx.await.std_context("receive endpoint address")?;
+        let max_wait = Duration::from_secs(5);
+
+        // spawn a endpoint, send a message, and then abruptly terminate the endpoint ungracefully
+        // after the message was received on our receiver endpoint.
+        let cancel = CancellationToken::new();
+        let secret = SecretKey::generate(&mut rng);
+        let join_handle_1 = run_in_thread(
+            cancel.clone(),
+            broadcast_once(
+                secret.clone(),
+                relay_map.clone(),
+                endpoint0_addr.clone(),
+                topic_id,
+                "msg1".to_string(),
+            ),
+        );
+        // assert that we received the message on the receiver endpoint.
+        let msg = timeout(max_wait, msgs_recv_rx.recv())
+            .await
+            .std_context("wait for first broadcast")?
+            .std_context("receiver dropped channel")?;
+        assert_eq!(&msg, "msg1");
+        info!("kill broadcast endpoint");
+        cancel.cancel();
+
+        // spawns the endpoint again with the same endpoint id, and send another message
+        let cancel = CancellationToken::new();
+        let join_handle_2 = run_in_thread(
+            cancel.clone(),
+            broadcast_once(
+                secret.clone(),
+                relay_map.clone(),
+                endpoint0_addr.clone(),
+                topic_id,
+                "msg2".to_string(),
+            ),
+        );
+        // assert that we received the message on the receiver endpoint.
+        // this means that the reconnect with the same endpoint id worked.
+        let msg = timeout(max_wait, msgs_recv_rx.recv())
+            .await
+            .std_context("wait for second broadcast")?
+            .std_context("receiver dropped channel")?;
+        assert_eq!(&msg, "msg2");
+        info!("kill broadcast endpoint");
+        cancel.cancel();
+
+        info!("kill recv endpoint");
+        recv_task.abort();
+        assert!(join_handle_1.join().unwrap().is_none());
+        assert!(join_handle_2.join().unwrap().is_none());
+
+        Ok(())
+    }
+
+    #[tokio::test]
+    #[traced_test]
+    async fn gossip_change_alpn() -> n0_error::Result<()> {
+        let alpn = b"my-gossip-alpn";
+        let topic_id = TopicId::from([0u8; 32]);
+
+        let ep1 = Endpoint::empty_builder(RelayMode::Disabled).bind().await?;
+        let ep2 = Endpoint::empty_builder(RelayMode::Disabled).bind().await?;
+        let gossip1 = Gossip::builder().alpn(alpn).spawn(ep1.clone());
+        let gossip2 = Gossip::builder().alpn(alpn).spawn(ep2.clone());
+        let router1 = Router::builder(ep1).accept(alpn, gossip1.clone()).spawn();
+        let router2 = Router::builder(ep2).accept(alpn, gossip2.clone()).spawn();
+
+        let addr1 = router1.endpoint().addr();
+        let id1 = addr1.id;
+        let memory_lookup = MemoryLookup::new();
+        memory_lookup.add_endpoint_info(addr1);
+        router2.endpoint().address_lookup().add(memory_lookup);
+
+        let mut topic1 = gossip1.subscribe(topic_id, vec![]).await?;
+        let mut topic2 = gossip2.subscribe(topic_id, vec![id1]).await?;
+
+        timeout(Duration::from_secs(3), topic1.joined())
+            .await
+            .std_context("wait topic1 join")??;
+        timeout(Duration::from_secs(3), topic2.joined())
+            .await
+            .std_context("wait topic2 join")??;
+        router1.shutdown().await.std_context("shutdown router1")?;
+        router2.shutdown().await.std_context("shutdown router2")?;
+        Ok(())
+    }
+
+    #[tokio::test]
+    #[traced_test]
+    async fn gossip_rely_on_gossip_address_lookup() -> n0_error::Result<()> {
+        let rng = &mut rand_chacha::ChaCha12Rng::seed_from_u64(1);
+
+        async fn spawn(
+            rng: &mut impl CryptoRng,
+        ) -> n0_error::Result<(EndpointId, Router, Gossip, GossipSender, GossipReceiver)> {
+            let topic_id = TopicId::from([0u8; 32]);
+            let ep = Endpoint::empty_builder(RelayMode::Disabled)
+                .secret_key(SecretKey::generate(rng))
+                .bind()
+                .await?;
+            let endpoint_id = ep.id();
+            let gossip = Gossip::builder().spawn(ep.clone());
+            let router = Router::builder(ep)
+                .accept(GOSSIP_ALPN, gossip.clone())
+                .spawn();
+            let topic = gossip.subscribe(topic_id, vec![]).await?;
+            let (sender, receiver) = topic.split();
+            Ok((endpoint_id, router, gossip, sender, receiver))
+        }
+
+        // spawn 3 endpoints without relay or address lookup
+        let (n1, r1, _g1, _tx1, mut rx1) = spawn(rng).await?;
+        let (n2, r2, _g2, tx2, mut rx2) = spawn(rng).await?;
+        let (n3, r3, _g3, tx3, mut rx3) = spawn(rng).await?;
+
+        println!("endpoints {:?}", [n1, n2, n3]);
+
+        // create a mem lookup that has only endpoint 1 addr info set
+        let addr1 = r1.endpoint().addr();
+        let lookup = MemoryLookup::new();
+        lookup.add_endpoint_info(addr1);
+
+        // add addr info of endpoint1 to endpoint2 and join endpoint1
+        r2.endpoint().address_lookup().add(lookup.clone());
+        tx2.join_peers(vec![n1]).await?;
+
+        // await join endpoint2 -> nodde1
+        timeout(Duration::from_secs(3), rx1.joined())
+            .await
+            .std_context("wait rx1 join")??;
+        timeout(Duration::from_secs(3), rx2.joined())
+            .await
+            .std_context("wait rx2 join")??;
+
+        // add addr info of endpoint1 to endpoint3 and join endpoint1
+        r3.endpoint().address_lookup().add(lookup.clone());
+        tx3.join_peers(vec![n1]).await?;
+
+        // await join at endpoint3: n1 and n2
+        // n2 only works because because we use gossip address lookup!
+        let ev = timeout(Duration::from_secs(3), rx3.next())
+            .await
+            .std_context("wait rx3 first neighbor")?;
+        assert!(matches!(ev, Some(Ok(Event::NeighborUp(_)))));
+        let ev = timeout(Duration::from_secs(3), rx3.next())
+            .await
+            .std_context("wait rx3 second neighbor")?;
+        assert!(matches!(ev, Some(Ok(Event::NeighborUp(_)))));
+
+        assert_eq!(sorted(rx3.neighbors()), sorted([n1, n2]));
+
+        let ev = timeout(Duration::from_secs(3), rx2.next())
+            .await
+            .std_context("wait rx2 neighbor")?;
+        assert!(matches!(ev, Some(Ok(Event::NeighborUp(n))) if n == n3));
+
+        let ev = timeout(Duration::from_secs(3), rx1.next())
+            .await
+            .std_context("wait rx1 neighbor")?;
+        assert!(matches!(ev, Some(Ok(Event::NeighborUp(n))) if n == n3));
+
+        tokio::try_join!(r1.shutdown(), r2.shutdown(), r3.shutdown())
+            .std_context("shutdown routers")?;
+        Ok(())
+    }
+
+    fn sorted<T: Ord>(input: impl IntoIterator<Item = T>) -> Vec<T> {
+        let mut out: Vec<_> = input.into_iter().collect();
+        out.sort();
+        out
+    }
+
+    /// Test that dropping sender doesn't close topic while receiver is still listening.
+    ///
+    /// This is a common footgun: users split a GossipTopic, drop the sender early,
+    /// and expect the receiver to keep working. With the bug (using && in still_needed),
+    /// the topic closes immediately when sender is dropped.
+    #[tokio::test]
+    #[traced_test]
+    async fn topic_stays_alive_after_sender_drop() -> n0_error::Result<()> {
+        let topic_id = TopicId::from([99u8; 32]);
+
+        let ep1 = Endpoint::empty_builder(RelayMode::Disabled).bind().await?;
+        let ep2 = Endpoint::empty_builder(RelayMode::Disabled).bind().await?;
+        let gossip1 = Gossip::builder().spawn(ep1.clone());
+        let gossip2 = Gossip::builder().spawn(ep2.clone());
+        let router1 = Router::builder(ep1)
+            .accept(crate::ALPN, gossip1.clone())
+            .spawn();
+        let router2 = Router::builder(ep2)
+            .accept(crate::ALPN, gossip2.clone())
+            .spawn();
+
+        let addr1 = router1.endpoint().addr();
+        let id1 = addr1.id;
+        let mem_lookup = MemoryLookup::new();
+        mem_lookup.add_endpoint_info(addr1);
+        router2.endpoint().address_lookup().add(mem_lookup);
+
+        let topic1 = gossip1.subscribe(topic_id, vec![]).await?;
+        let topic2 = gossip2.subscribe(topic_id, vec![id1]).await?;
+
+        let (tx1, mut rx1) = topic1.split();
+        let (tx2, mut rx2) = topic2.split();
+
+        // Wait for mesh to form
+        timeout(Duration::from_secs(3), rx1.joined())
+            .await
+            .std_context("wait rx1 join")??;
+        timeout(Duration::from_secs(3), rx2.joined())
+            .await
+            .std_context("wait rx2 join")??;
+
+        // Node 1 drops its sender - simulating the footgun where user drops sender early
+        drop(tx1);
+
+        // Node 2 sends a message - receiver on node 1 should still get it
+        tx2.broadcast(b"hello from node2".to_vec().into()).await?;
+
+        // Node 1's receiver should still work and receive the message
+        let event = timeout(Duration::from_secs(3), rx1.next())
+            .await
+            .std_context("wait for message on rx1")?;
+
+        match event {
+            Some(Ok(Event::Received(msg))) => {
+                assert_eq!(&msg.content[..], b"hello from node2");
+            }
+            other => panic!("expected Received event, got {:?}", other),
+        }
+
+        drop(tx2);
+        drop(rx1);
+        drop(rx2);
+        router1.shutdown().await.std_context("shutdown router1")?;
+        router2.shutdown().await.std_context("shutdown router2")?;
+        Ok(())
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/net/address_lookup.rs b/third_party/iroh-org/iroh-gossip/src/net/address_lookup.rs
new file mode 100644
index 0000000..560f1d5
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/net/address_lookup.rs
@@ -0,0 +1,175 @@
+//! An address lookup service to gather addressing info collected from gossip Join and ForwardJoin messages.
+
+use std::{
+    collections::{btree_map::Entry, BTreeMap},
+    sync::{Arc, RwLock},
+    time::Duration,
+};
+
+use iroh::address_lookup::{self, AddressLookup, EndpointData, EndpointInfo};
+use iroh_base::EndpointId;
+use n0_future::{
+    boxed::BoxStream,
+    stream::{self, StreamExt},
+    task::AbortOnDropHandle,
+    time::SystemTime,
+};
+
+pub(crate) struct RetentionOpts {
+    /// How long to keep received endpoint info records alive before pruning them
+    retention: Duration,
+    /// How often to check for expired entries
+    evict_interval: Duration,
+}
+
+impl Default for RetentionOpts {
+    fn default() -> Self {
+        Self {
+            retention: Duration::from_secs(60 * 5),
+            evict_interval: Duration::from_secs(30),
+        }
+    }
+}
+
+/// An address lookup service that expires endpoints after some time.
+///
+/// It is added to the endpoint when constructing a gossip instance, and the gossip actor
+/// then adds endpoint addresses as received with Join or ForwardJoin messages.
+#[derive(Debug, Clone)]
+pub(crate) struct GossipAddressLookup {
+    endpoints: NodeMap,
+    _task_handle: Arc<AbortOnDropHandle<()>>,
+}
+
+type NodeMap = Arc<RwLock<BTreeMap<EndpointId, StoredEndpointInfo>>>;
+
+#[derive(Debug)]
+struct StoredEndpointInfo {
+    data: EndpointData,
+    last_updated: SystemTime,
+}
+
+impl Default for GossipAddressLookup {
+    fn default() -> Self {
+        Self::new()
+    }
+}
+
+impl GossipAddressLookup {
+    const PROVENANCE: &'static str = "gossip";
+
+    /// Creates a new gossip address lookup instance.
+    pub(crate) fn new() -> Self {
+        Self::with_opts(Default::default())
+    }
+
+    pub(crate) fn with_opts(opts: RetentionOpts) -> Self {
+        let endpoints: NodeMap = Default::default();
+        let task = {
+            let endpoints = Arc::downgrade(&endpoints);
+            n0_future::task::spawn(async move {
+                let mut interval = n0_future::time::interval(opts.evict_interval);
+                loop {
+                    interval.tick().await;
+                    let Some(endpoints) = endpoints.upgrade() else {
+                        break;
+                    };
+                    let now = SystemTime::now();
+                    endpoints.write().expect("poisoned").retain(|_k, v| {
+                        let age = now.duration_since(v.last_updated).unwrap_or(Duration::MAX);
+                        age <= opts.retention
+                    });
+                }
+            })
+        };
+        Self {
+            endpoints,
+            _task_handle: Arc::new(AbortOnDropHandle::new(task)),
+        }
+    }
+
+    /// Augments endpoint addressing information for the given endpoint ID.
+    ///
+    /// The provided addressing information is combined with the existing info in the in-memory
+    /// lookup.  Any new direct addresses are added to those already present while the
+    /// relay URL is overwritten.
+    pub(crate) fn add(&self, endpoint_info: impl Into<EndpointInfo>) {
+        let last_updated = SystemTime::now();
+        let EndpointInfo { endpoint_id, data } = endpoint_info.into();
+        let mut guard = self.endpoints.write().expect("poisoned");
+        match guard.entry(endpoint_id) {
+            Entry::Occupied(mut entry) => {
+                let existing = entry.get_mut();
+                existing.data.add_addrs(data.addrs().cloned());
+                existing.data.set_user_data(data.user_data().cloned());
+                existing.last_updated = last_updated;
+            }
+            Entry::Vacant(entry) => {
+                entry.insert(StoredEndpointInfo { data, last_updated });
+            }
+        }
+    }
+}
+
+impl AddressLookup for GossipAddressLookup {
+    fn resolve(
+        &self,
+        endpoint_id: EndpointId,
+    ) -> Option<BoxStream<Result<address_lookup::Item, address_lookup::Error>>> {
+        let guard = self.endpoints.read().expect("poisoned");
+        let info = guard.get(&endpoint_id)?;
+        let last_updated = info
+            .last_updated
+            .duration_since(SystemTime::UNIX_EPOCH)
+            .expect("time drift")
+            .as_micros() as u64;
+        let item = address_lookup::Item::new(
+            EndpointInfo::from_parts(endpoint_id, info.data.clone()),
+            Self::PROVENANCE,
+            Some(last_updated),
+        );
+        Some(stream::iter(Some(Ok(item))).boxed())
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use std::time::Duration;
+
+    use iroh::{address_lookup::AddressLookup, EndpointAddr, SecretKey};
+    use n0_future::StreamExt;
+    use rand::SeedableRng;
+
+    use super::{GossipAddressLookup, RetentionOpts};
+
+    #[tokio::test]
+    async fn test_retention() {
+        let opts = RetentionOpts {
+            evict_interval: Duration::from_millis(100),
+            retention: Duration::from_millis(500),
+        };
+        let disco = GossipAddressLookup::with_opts(opts);
+
+        let rng = &mut rand_chacha::ChaCha12Rng::seed_from_u64(1);
+        let k1 = SecretKey::generate(rng);
+        let a1 = EndpointAddr::new(k1.public());
+
+        disco.add(a1);
+
+        assert!(matches!(
+            disco.resolve(k1.public()).unwrap().next().await,
+            Some(Ok(_))
+        ));
+
+        tokio::time::sleep(Duration::from_millis(200)).await;
+
+        assert!(matches!(
+            disco.resolve(k1.public()).unwrap().next().await,
+            Some(Ok(_))
+        ));
+
+        tokio::time::sleep(Duration::from_millis(700)).await;
+
+        assert!(disco.resolve(k1.public()).is_none());
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/net/util.rs b/third_party/iroh-org/iroh-gossip/src/net/util.rs
new file mode 100644
index 0000000..54d7cae
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/net/util.rs
@@ -0,0 +1,435 @@
+//! Utilities for iroh-gossip networking
+
+use std::{
+    collections::{hash_map, HashMap},
+    io,
+    time::Duration,
+};
+
+use bytes::{Bytes, BytesMut};
+use iroh::{
+    endpoint::{Connection, RecvStream, SendStream},
+    EndpointId,
+};
+use n0_error::{e, stack_error};
+use n0_future::{
+    time::{sleep_until, Instant},
+    FuturesUnordered, StreamExt,
+};
+use serde::{de::DeserializeOwned, Deserialize, Serialize};
+use tokio::{
+    io::{AsyncReadExt, AsyncWriteExt},
+    sync::mpsc,
+    task::JoinSet,
+};
+use tracing::{debug, trace, Instrument};
+
+use super::{InEvent, ProtoMessage};
+use crate::proto::{util::TimerMap, TopicId};
+
+/// Errors related to message writing
+#[allow(missing_docs)]
+#[stack_error(derive, add_meta, from_sources)]
+#[non_exhaustive]
+pub(crate) enum WriteError {
+    /// Connection error
+    #[error("Connection error")]
+    Connection {
+        #[error(std_err)]
+        source: iroh::endpoint::ConnectionError,
+    },
+    /// Serialization failed
+    #[error("Serialization failed")]
+    Ser {
+        #[error(std_err)]
+        source: postcard::Error,
+    },
+    /// IO error
+    #[error("IO error")]
+    Io {
+        #[error(std_err)]
+        source: std::io::Error,
+    },
+    /// Message was larger than the configured maximum message size
+    #[error("message too large")]
+    TooLarge {},
+}
+
+#[derive(Debug, Serialize, Deserialize)]
+pub(crate) struct StreamHeader {
+    pub(crate) topic_id: TopicId,
+}
+
+impl StreamHeader {
+    pub(crate) async fn read(
+        stream: &mut RecvStream,
+        buffer: &mut BytesMut,
+        max_message_size: usize,
+    ) -> Result<Self, ReadError> {
+        let header: Self = read_frame(stream, buffer, max_message_size)
+            .await?
+            .ok_or_else(|| {
+                ReadError::from(io::Error::new(
+                    io::ErrorKind::UnexpectedEof,
+                    "stream ended before header",
+                ))
+            })?;
+        Ok(header)
+    }
+
+    pub(crate) async fn write(
+        self,
+        stream: &mut SendStream,
+        buffer: &mut Vec<u8>,
+        max_message_size: usize,
+    ) -> Result<(), WriteError> {
+        write_frame(stream, &self, buffer, max_message_size).await?;
+        Ok(())
+    }
+}
+
+pub(crate) struct RecvLoop {
+    remote_endpoint_id: EndpointId,
+    conn: Connection,
+    max_message_size: usize,
+    in_event_tx: mpsc::Sender<InEvent>,
+}
+
+impl RecvLoop {
+    pub(crate) fn new(
+        remote_endpoint_id: EndpointId,
+        conn: Connection,
+        in_event_tx: mpsc::Sender<InEvent>,
+        max_message_size: usize,
+    ) -> Self {
+        Self {
+            remote_endpoint_id,
+            conn,
+            max_message_size,
+            in_event_tx,
+        }
+    }
+
+    pub(crate) async fn run(&mut self) -> Result<(), ReadError> {
+        let mut read_futures = FuturesUnordered::new();
+        let mut conn_is_closed = false;
+        let closed = self.conn.closed();
+        tokio::pin!(closed);
+        while !conn_is_closed || !read_futures.is_empty() {
+            tokio::select! {
+                _ = &mut closed, if !conn_is_closed => {
+                    conn_is_closed = true;
+                }
+                stream = self.conn.accept_uni(), if !conn_is_closed => {
+                    let stream = match stream {
+                        Ok(stream) => stream,
+                        Err(_) => {
+                            conn_is_closed = true;
+                            continue;
+                        }
+                    };
+                    let state = RecvStreamState::new(stream, self.max_message_size).await?;
+                    debug!(topic=%state.header.topic_id.fmt_short(), "stream opened");
+                    read_futures.push(state.next());
+                }
+                Some(res) = read_futures.next(), if !read_futures.is_empty() => {
+                    let (state, msg) = match res {
+                        Ok((state, msg)) => (state, msg),
+                        Err(err) => {
+                            debug!("recv stream closed with error: {err:#}");
+                            continue;
+                        }
+                    };
+                    match msg {
+                        None => debug!(topic=%state.header.topic_id.fmt_short(), "stream closed"),
+                        Some(msg) => {
+                            if self.in_event_tx.send(InEvent::RecvMessage(self.remote_endpoint_id, msg)).await.is_err() {
+                                debug!("stop recv loop: actor closed");
+                                break;
+                            }
+                            read_futures.push(state.next());
+                        }
+                    }
+                }
+            }
+        }
+        debug!("recv loop closed");
+        Ok(())
+    }
+}
+
+#[derive(Debug)]
+struct RecvStreamState {
+    stream: RecvStream,
+    header: StreamHeader,
+    buffer: BytesMut,
+    max_message_size: usize,
+}
+
+impl RecvStreamState {
+    async fn new(mut stream: RecvStream, max_message_size: usize) -> Result<Self, ReadError> {
+        let mut buffer = BytesMut::new();
+        let header = StreamHeader::read(&mut stream, &mut buffer, max_message_size).await?;
+        Ok(Self {
+            buffer: BytesMut::new(),
+            max_message_size,
+            stream,
+            header,
+        })
+    }
+
+    /// Reads the next message from the stream.
+    ///
+    /// Returns `self` and the next message, or `None` if the stream ended gracefully.
+    ///
+    /// ## Cancellation safety
+    ///
+    /// This function is not cancellation-safe.
+    async fn next(mut self) -> Result<(Self, Option<ProtoMessage>), ReadError> {
+        let msg = read_frame(&mut self.stream, &mut self.buffer, self.max_message_size).await?;
+        let msg = msg.map(|msg| ProtoMessage {
+            topic: self.header.topic_id,
+            message: msg,
+        });
+        Ok((self, msg))
+    }
+}
+
+pub(crate) struct SendLoop {
+    conn: Connection,
+    streams: HashMap<TopicId, SendStream>,
+    buffer: Vec<u8>,
+    max_message_size: usize,
+    finishing: JoinSet<()>,
+    send_rx: mpsc::Receiver<ProtoMessage>,
+}
+
+impl SendLoop {
+    pub(crate) fn new(
+        conn: Connection,
+        send_rx: mpsc::Receiver<ProtoMessage>,
+        max_message_size: usize,
+    ) -> Self {
+        Self {
+            conn,
+            max_message_size,
+            buffer: Default::default(),
+            streams: Default::default(),
+            finishing: Default::default(),
+            send_rx,
+        }
+    }
+
+    pub(crate) async fn run(&mut self, queue: Vec<ProtoMessage>) -> Result<(), WriteError> {
+        for msg in queue {
+            self.write_message(&msg).await?;
+        }
+        let conn_clone = self.conn.clone();
+        let closed = conn_clone.closed();
+        tokio::pin!(closed);
+        loop {
+            tokio::select! {
+                biased;
+                _ = &mut closed => break,
+                Some(msg) = self.send_rx.recv() => self.write_message(&msg).await?,
+                _ = self.finishing.join_next(), if !self.finishing.is_empty() => {}
+                else => break,
+            }
+        }
+
+        // Close remaining streams.
+        for (topic_id, mut stream) in self.streams.drain() {
+            stream.finish().ok();
+            self.finishing.spawn(
+                async move {
+                    stream.stopped().await.ok();
+                    debug!(topic=%topic_id.fmt_short(), "stream closed");
+                }
+                .instrument(tracing::Span::current()),
+            );
+        }
+        if !self.finishing.is_empty() {
+            trace!(
+                "send loop closing, waiting for {} send streams to finish",
+                self.finishing.len()
+            );
+            // Wait for the remote to acknowledge all streams are finished.
+            if let Err(_elapsed) = n0_future::time::timeout(Duration::from_secs(5), async move {
+                while self.finishing.join_next().await.is_some() {}
+            })
+            .await
+            {
+                debug!("not all send streams finished within timeout, abort")
+            }
+        }
+        debug!("send loop closed");
+        Ok(())
+    }
+
+    /// Write a [`ProtoMessage`] as a length-prefixed, postcard-encoded message on its stream.
+    ///
+    /// If no stream is opened yet, this opens a new stream for the topic and writes the topic header.
+    ///
+    /// This function is not cancellation-safe.
+    pub async fn write_message(&mut self, message: &ProtoMessage) -> Result<(), WriteError> {
+        let ProtoMessage { topic, message } = message;
+        let topic_id = *topic;
+        let is_last = message.is_disconnect();
+
+        let mut entry = match self.streams.entry(topic_id) {
+            hash_map::Entry::Occupied(entry) => entry,
+            hash_map::Entry::Vacant(entry) => {
+                let mut stream = self.conn.open_uni().await?;
+                let header = StreamHeader { topic_id };
+                header
+                    .write(&mut stream, &mut self.buffer, self.max_message_size)
+                    .await?;
+                debug!(topic=%topic_id.fmt_short(), "stream opened");
+                entry.insert_entry(stream)
+            }
+        };
+        let stream = entry.get_mut();
+
+        write_frame(stream, message, &mut self.buffer, self.max_message_size).await?;
+
+        if is_last {
+            trace!(topic=%topic_id.fmt_short(), "stream closing");
+            let mut stream = entry.remove();
+            if stream.finish().is_ok() {
+                self.finishing.spawn(
+                    async move {
+                        stream.stopped().await.ok();
+                        debug!(topic=%topic_id.fmt_short(), "stream closed");
+                    }
+                    .instrument(tracing::Span::current()),
+                );
+            }
+        }
+
+        Ok(())
+    }
+}
+
+/// Errors related to message reading
+#[allow(missing_docs)]
+#[stack_error(derive, add_meta, from_sources)]
+#[non_exhaustive]
+pub(crate) enum ReadError {
+    /// Deserialization failed
+    #[error("Deserialization failed")]
+    De {
+        #[error(std_err)]
+        source: postcard::Error,
+    },
+    /// IO error
+    #[error("IO error")]
+    Io {
+        #[error(std_err)]
+        source: std::io::Error,
+    },
+    /// Message was larger than the configured maximum message size
+    #[error("message too large")]
+    TooLarge {},
+}
+
+/// Read a length-prefixed frame and decode with postcard.
+pub async fn read_frame<T: DeserializeOwned>(
+    reader: &mut RecvStream,
+    buffer: &mut BytesMut,
+    max_message_size: usize,
+) -> Result<Option<T>, ReadError> {
+    match read_lp(reader, buffer, max_message_size).await? {
+        None => Ok(None),
+        Some(data) => {
+            let message = postcard::from_bytes(&data)?;
+            Ok(Some(message))
+        }
+    }
+}
+
+/// Reads a length prefixed buffer.
+///
+/// Returns the frame as raw bytes.  If the end of the stream is reached before
+/// the frame length starts, `None` is returned.
+pub async fn read_lp(
+    reader: &mut RecvStream,
+    buffer: &mut BytesMut,
+    max_message_size: usize,
+) -> Result<Option<Bytes>, ReadError> {
+    let size = match reader.read_u32().await {
+        Ok(size) => size,
+        Err(err) if err.kind() == io::ErrorKind::UnexpectedEof => return Ok(None),
+        Err(err) => return Err(err.into()),
+    };
+    let size = usize::try_from(size).map_err(|_| e!(ReadError::TooLarge))?;
+    if size > max_message_size {
+        return Err(e!(ReadError::TooLarge));
+    }
+    buffer.resize(size, 0u8);
+    reader
+        .read_exact(&mut buffer[..])
+        .await
+        .map_err(io::Error::other)?;
+    Ok(Some(buffer.split_to(size).freeze()))
+}
+
+/// Writes a length-prefixed frame.
+pub async fn write_frame<T: Serialize>(
+    stream: &mut SendStream,
+    message: &T,
+    buffer: &mut Vec<u8>,
+    max_message_size: usize,
+) -> Result<(), WriteError> {
+    let len = postcard::experimental::serialized_size(&message)?;
+    if len >= max_message_size {
+        return Err(e!(WriteError::TooLarge));
+    }
+    buffer.clear();
+    buffer.resize(len, 0u8);
+    let slice = postcard::to_slice(&message, buffer)?;
+    stream.write_u32(len as u32).await?;
+    stream.write_all(slice).await.map_err(io::Error::other)?;
+    Ok(())
+}
+
+/// A [`TimerMap`] with an async method to wait for the next timer expiration.
+#[derive(Debug)]
+pub struct Timers<T> {
+    map: TimerMap<T>,
+}
+
+impl<T> Default for Timers<T> {
+    fn default() -> Self {
+        Self {
+            map: TimerMap::default(),
+        }
+    }
+}
+
+impl<T> Timers<T> {
+    /// Creates a new timer map.
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    /// Inserts a new entry at the specified instant
+    pub fn insert(&mut self, instant: Instant, item: T) {
+        self.map.insert(instant, item);
+    }
+
+    /// Waits for the next timer to elapse.
+    pub async fn wait_next(&mut self) -> Instant {
+        match self.map.first() {
+            None => std::future::pending::<Instant>().await,
+            Some(instant) => {
+                sleep_until(*instant).await;
+                *instant
+            }
+        }
+    }
+
+    /// Pops the earliest timer that expires at or before `now`.
+    pub fn pop_before(&mut self, now: Instant) -> Option<(Instant, T)> {
+        self.map.pop_before(now)
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto.rs b/third_party/iroh-org/iroh-gossip/src/proto.rs
new file mode 100644
index 0000000..4d2bcf8
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto.rs
@@ -0,0 +1,344 @@
+//! Implementation of the iroh-gossip protocol, as an IO-less state machine
+//!
+//! This module implements the iroh-gossip protocol. The entry point is [`State`], which contains
+//! the protocol state for a node.
+//!
+//! The iroh-gossip protocol is made up from two parts: A swarm membership protocol, based on
+//! [HyParView][hyparview], and a gossip broadcasting protocol, based on [PlumTree][plumtree].
+//!
+//! For a full explanation it is recommended to read the two papers. What follows is a brief
+//! outline of the protocols.
+//!
+//! All protocol messages are namespaced by a [`TopicId`], a 32 byte identifier. Topics are
+//! separate swarms and broadcast scopes. The HyParView and PlumTree algorithms both work in the
+//! scope of a single topic. Thus, joining multiple topics increases the number of open connections
+//! to peers and the size of the local routing table.
+//!
+//! The **membership protocol** ([HyParView][hyparview]) is a cluster protocol where each peer
+//! maintains a partial view of all nodes in the swarm.
+//! A peer joins the swarm for a topic by connecting to any known peer that is a member of this
+//! topic's swarm. Obtaining this initial contact info happens out of band. The peer then sends
+//! a `Join` message to that initial peer. All peers maintain a list of
+//! `active` and `passive` peers. Active peers are those that you maintain active connections to.
+//! Passive peers is an addressbook of additional peers. If one of your active peers goes offline,
+//! its slot is filled with a random peer from the passive set. In the default configuration, the
+//! active view has a size of 5 and the passive view a size of 30.
+//! The HyParView protocol ensures that active connections are always bidirectional, and regularly
+//! exchanges nodes for the passive view in a `Shuffle` operation.
+//! Thus, this protocol exposes a high degree of reliability and auto-recovery in the case of node
+//! failures.
+//!
+//! The **gossip protocol** ([PlumTree][plumtree]) builds upon the membership protocol. It exposes
+//! a method to broadcast messages to all peers in the swarm. On each node, it maintains two sets
+//! of peers: An `eager` set and a `lazy` set. Both are subsets of the `active` view from the
+//! membership protocol. When broadcasting a message from the local node, or upon receiving a
+//! broadcast message, the message is pushed to all peers in the eager set. Additionally, the hash
+//! of the message (which uniquely identifies it), but not the message content, is lazily pushed
+//! to all peers  in the `lazy` set. When receiving such lazy pushes (called `Ihaves`), those peers
+//! may request the message content after a timeout if they didn't receive the message by one of
+//! their eager peers before. When requesting a message from a currently-lazy peer, this peer is
+//! also upgraded to be an eager peer from that moment on. This strategy self-optimizes the
+//! messaging graph by latency. Note however that this optimization will work best if the messaging
+//! paths are stable, i.e. if it's always the same peer that broadcasts. If not, the relative
+//! message redundancy will grow and the ideal messaging graph might change frequently.
+//!
+//! [hyparview]: https://asc.di.fct.unl.pt/~jleitao/pdf/dsn07-leitao.pdf
+//! [plumtree]: https://asc.di.fct.unl.pt/~jleitao/pdf/srds07-leitao.pdf
+
+use std::{fmt, hash::Hash};
+
+use bytes::Bytes;
+use serde::{de::DeserializeOwned, Deserialize, Serialize};
+
+mod hyparview;
+mod plumtree;
+pub mod state;
+pub mod topic;
+pub mod util;
+
+#[cfg(any(test, feature = "test-utils"))]
+pub mod sim;
+
+pub use hyparview::Config as HyparviewConfig;
+pub use plumtree::{Config as PlumtreeConfig, DeliveryScope, Scope};
+pub use state::{InEvent, Message, OutEvent, State, Timer, TopicId};
+pub use topic::{Command, Config, Event, IO};
+
+/// The default maximum size in bytes for a gossip message.
+/// This is a sane but arbitrary default and can be changed in the [`Config`].
+pub const DEFAULT_MAX_MESSAGE_SIZE: usize = 4096;
+
+/// The minimum allowed value for [`Config::max_message_size`].
+pub const MIN_MAX_MESSAGE_SIZE: usize = 512;
+
+/// The identifier for a peer.
+///
+/// The protocol implementation is generic over this trait. When implementing the protocol,
+/// a concrete type must be chosen that will then be used throughout the implementation to identify
+/// and index individual peers.
+///
+/// Note that the concrete type will be used in protocol messages. Therefore, implementations of
+/// the protocol are only compatible if the same concrete type is supplied for this trait.
+///
+/// TODO: Rename to `PeerId`? It does not necessarily refer to a peer's address, as long as the
+/// networking layer can translate the value of its concrete type into an address.
+pub trait PeerIdentity: Hash + Eq + Ord + Copy + fmt::Debug + Serialize + DeserializeOwned {}
+impl<T> PeerIdentity for T where
+    T: Hash + Eq + Ord + Copy + fmt::Debug + Serialize + DeserializeOwned
+{
+}
+
+/// Opaque binary data that is transmitted on messages that introduce new peers.
+///
+/// Implementations may use these bytes to supply addresses or other information needed to connect
+/// to a peer that is not included in the peer's [`PeerIdentity`].
+#[derive(derive_more::Debug, Serialize, Deserialize, Clone, PartialEq, Eq, Default)]
+#[debug("PeerData({}b)", self.0.len())]
+pub struct PeerData(Bytes);
+
+impl PeerData {
+    /// Create a new [`PeerData`] from a byte buffer.
+    pub fn new(data: impl Into<Bytes>) -> Self {
+        Self(data.into())
+    }
+
+    /// Get a reference to the contained [`bytes::Bytes`].
+    pub fn inner(&self) -> &bytes::Bytes {
+        &self.0
+    }
+
+    /// Get the peer data as a byte slice.
+    pub fn as_bytes(&self) -> &[u8] {
+        &self.0
+    }
+}
+
+/// PeerInfo contains a peer's identifier and the opaque peer data as provided by the implementer.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+struct PeerInfo<PI> {
+    pub id: PI,
+    pub data: Option<PeerData>,
+}
+
+impl<PI> From<(PI, Option<PeerData>)> for PeerInfo<PI> {
+    fn from((id, data): (PI, Option<PeerData>)) -> Self {
+        Self { id, data }
+    }
+}
+
+#[cfg(test)]
+mod test {
+    use std::{collections::HashSet, env, fmt, str::FromStr};
+
+    use n0_tracing_test::traced_test;
+    use rand::SeedableRng;
+    use rand_chacha::ChaCha12Rng;
+
+    use super::{Command, Config, Event};
+    use crate::proto::{
+        sim::{LatencyConfig, Network, NetworkConfig},
+        Scope, TopicId,
+    };
+
+    #[test]
+    #[traced_test]
+    fn hyparview_smoke() {
+        // Create a network with 4 nodes and active_view_capacity 2
+        let rng = ChaCha12Rng::seed_from_u64(read_var("SEED", 0));
+        let mut config = Config::default();
+        config.membership.active_view_capacity = 2;
+        let network_config = NetworkConfig {
+            proto: config,
+            latency: LatencyConfig::default_static(),
+        };
+        let mut network = Network::new(network_config, rng);
+        for i in 0..4 {
+            network.insert(i);
+        }
+
+        let t: TopicId = [0u8; 32].into();
+
+        // Do some joins between nodes 0,1,2
+        network.command(0, t, Command::Join(vec![1, 2]));
+        network.command(1, t, Command::Join(vec![2]));
+        network.command(2, t, Command::Join(vec![]));
+
+        network.run_trips(3);
+
+        // Confirm emitted events
+        let actual = network.events_sorted();
+        let expected = sort(vec![
+            (0, t, Event::NeighborUp(1)),
+            (0, t, Event::NeighborUp(2)),
+            (1, t, Event::NeighborUp(2)),
+            (1, t, Event::NeighborUp(0)),
+            (2, t, Event::NeighborUp(0)),
+            (2, t, Event::NeighborUp(1)),
+        ]);
+        assert_eq!(actual, expected);
+
+        // Confirm active connections
+        assert_eq!(network.conns(), vec![(0, 1), (0, 2), (1, 2)]);
+
+        // Now let node 3 join node 0.
+        // Node 0 is full, so it will disconnect from either node 1 or node 2.
+        network.command(3, t, Command::Join(vec![0]));
+
+        network.run_trips(2);
+
+        // Confirm emitted events. There's two options because whether node 0 disconnects from
+        // node 1 or node 2 is random.
+        let actual = network.events_sorted();
+        eprintln!("actual {actual:#?}");
+        let expected1 = sort(vec![
+            (3, t, Event::NeighborUp(0)),
+            (0, t, Event::NeighborUp(3)),
+            (0, t, Event::NeighborDown(1)),
+            (1, t, Event::NeighborDown(0)),
+        ]);
+        let expected2 = sort(vec![
+            (3, t, Event::NeighborUp(0)),
+            (0, t, Event::NeighborUp(3)),
+            (0, t, Event::NeighborDown(2)),
+            (2, t, Event::NeighborDown(0)),
+        ]);
+        assert!((actual == expected1) || (actual == expected2));
+
+        // Confirm active connections.
+        if actual == expected1 {
+            assert_eq!(network.conns(), vec![(0, 2), (0, 3), (1, 2)]);
+        } else {
+            assert_eq!(network.conns(), vec![(0, 1), (0, 3), (1, 2)]);
+        }
+        assert!(network.check_synchronicity());
+    }
+
+    #[test]
+    #[traced_test]
+    fn plumtree_smoke() {
+        let rng = ChaCha12Rng::seed_from_u64(read_var("SEED", 0));
+        let network_config = NetworkConfig {
+            proto: Config::default(),
+            latency: LatencyConfig::default_static(),
+        };
+        let mut network = Network::new(network_config, rng);
+        // build a network with 6 nodes
+        for i in 0..6 {
+            network.insert(i);
+        }
+
+        let t = [0u8; 32].into();
+
+        // let node 0 join the topic but do not connect to any peers
+        network.command(0, t, Command::Join(vec![]));
+        // connect nodes 1 and 2 to node 0
+        (1..3).for_each(|i| network.command(i, t, Command::Join(vec![0])));
+        // connect nodes 4 and 5 to node 3
+        network.command(3, t, Command::Join(vec![]));
+        (4..6).for_each(|i| network.command(i, t, Command::Join(vec![3])));
+        // run ticks and drain events
+
+        network.run_trips(4);
+
+        let _ = network.events();
+        assert!(network.check_synchronicity());
+
+        // now broadcast a first message
+        network.command(
+            1,
+            t,
+            Command::Broadcast(b"hi1".to_vec().into(), Scope::Swarm),
+        );
+
+        network.run_trips(4);
+
+        let events = network.events();
+        let received = events.filter(|x| matches!(x, (_, _, Event::Received(_))));
+        // message should be received by two other nodes
+        assert_eq!(received.count(), 2);
+        assert!(network.check_synchronicity());
+
+        // now connect the two sections of the swarm
+        network.command(2, t, Command::Join(vec![5]));
+        network.run_trips(3);
+        let _ = network.events();
+        println!("{}", network.report());
+
+        // now broadcast again
+        network.command(
+            1,
+            t,
+            Command::Broadcast(b"hi2".to_vec().into(), Scope::Swarm),
+        );
+        network.run_trips(5);
+        let events = network.events();
+        let received = events.filter(|x| matches!(x, (_, _, Event::Received(_))));
+        // message should be received by all 5 other nodes
+        assert_eq!(received.count(), 5);
+        assert!(network.check_synchronicity());
+        println!("{}", network.report());
+    }
+
+    #[test]
+    #[traced_test]
+    fn quit() {
+        // Create a network with 4 nodes and active_view_capacity 2
+        let rng = ChaCha12Rng::seed_from_u64(read_var("SEED", 0));
+        let mut config = Config::default();
+        config.membership.active_view_capacity = 2;
+        let mut network = Network::new(config.into(), rng);
+        let num = 4;
+        for i in 0..num {
+            network.insert(i);
+        }
+
+        let t: TopicId = [0u8; 32].into();
+
+        // join all nodes
+        network.command(0, t, Command::Join(vec![]));
+        network.command(1, t, Command::Join(vec![0]));
+        network.command(2, t, Command::Join(vec![1]));
+        network.command(3, t, Command::Join(vec![2]));
+        network.run_trips(2);
+
+        // assert all peers appear in the connections
+        let all_conns: HashSet<u64> = HashSet::from_iter((0u64..4).flat_map(|p| {
+            network
+                .neighbors(&p, &t)
+                .into_iter()
+                .flat_map(|x| x.into_iter())
+        }));
+        assert_eq!(all_conns, HashSet::from_iter([0, 1, 2, 3]));
+        assert!(network.check_synchronicity());
+
+        //  let node 3 leave the swarm
+        network.command(3, t, Command::Quit);
+        network.run_trips(4);
+        assert!(network.peer(&3).unwrap().state(&t).is_none());
+
+        // assert all peers without peer 3 appear in the connections
+        let all_conns: HashSet<u64> = HashSet::from_iter((0..num).flat_map(|p| {
+            network
+                .neighbors(&p, &t)
+                .into_iter()
+                .flat_map(|x| x.into_iter())
+        }));
+        assert_eq!(all_conns, HashSet::from_iter([0, 1, 2]));
+        assert!(network.check_synchronicity());
+    }
+
+    fn read_var<T: FromStr<Err: fmt::Display + fmt::Debug>>(name: &str, default: T) -> T {
+        env::var(name)
+            .map(|x| {
+                x.parse()
+                    .unwrap_or_else(|_| panic!("Failed to parse environment variable {name}"))
+            })
+            .unwrap_or(default)
+    }
+
+    fn sort<T: Ord + Clone>(items: Vec<T>) -> Vec<T> {
+        let mut sorted = items;
+        sorted.sort();
+        sorted
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/hyparview.rs b/third_party/iroh-org/iroh-gossip/src/proto/hyparview.rs
new file mode 100644
index 0000000..a0e28fc
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/hyparview.rs
@@ -0,0 +1,764 @@
+//! Implementation of the HyParView membership protocol
+//!
+//! The implementation is based on [this paper][paper] by Joao Leitao, Jose Pereira, Luıs Rodrigues
+//! and the [example implementation][impl] by Bartosz Sypytkowski
+//!
+//! [paper]: https://asc.di.fct.unl.pt/~jleitao/pdf/dsn07-leitao.pdf
+//! [impl]: https://gist.github.com/Horusiath/84fac596101b197da0546d1697580d99
+
+use std::collections::{HashMap, HashSet};
+
+use derive_more::{From, Sub};
+use n0_future::time::Duration;
+use rand::{rngs::ThreadRng, Rng};
+use serde::{Deserialize, Serialize};
+use tracing::debug;
+
+use super::{util::IndexSet, PeerData, PeerIdentity, PeerInfo, IO};
+
+/// Input event for HyParView
+#[derive(Debug)]
+pub enum InEvent<PI> {
+    /// A [`Message`] was received from a peer.
+    RecvMessage(PI, Message<PI>),
+    /// A timer has expired.
+    TimerExpired(Timer<PI>),
+    /// A peer was disconnected on the IO layer.
+    PeerDisconnected(PI),
+    /// Send a join request to a peer.
+    RequestJoin(PI),
+    /// Update the peer data that is transmitted on join requests.
+    UpdatePeerData(PeerData),
+    /// Quit the swarm, informing peers about us leaving.
+    Quit,
+}
+
+/// Output event for HyParView
+#[derive(Debug)]
+pub enum OutEvent<PI> {
+    /// Ask the IO layer to send a [`Message`] to peer `PI`.
+    SendMessage(PI, Message<PI>),
+    /// Schedule a [`Timer`].
+    ScheduleTimer(Duration, Timer<PI>),
+    /// Ask the IO layer to close the connection to peer `PI`.
+    DisconnectPeer(PI),
+    /// Emit an [`Event`] to the application.
+    EmitEvent(Event<PI>),
+    /// New [`PeerData`] was received for peer `PI`.
+    PeerData(PI, PeerData),
+}
+
+/// Event emitted by the [`State`] to the application.
+#[derive(Clone, Debug)]
+pub enum Event<PI> {
+    /// A peer was added to our set of active connections.
+    NeighborUp(PI),
+    /// A peer was removed from our set of active connections.
+    NeighborDown(PI),
+}
+
+/// Kinds of timers HyParView needs to schedule.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub enum Timer<PI> {
+    DoShuffle,
+    PendingNeighborRequest(PI),
+}
+
+/// Messages that we can send and receive from peers within the topic.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub enum Message<PI> {
+    /// Sent to a peer if you want to join the swarm
+    Join(Option<PeerData>),
+    /// When receiving Join, ForwardJoin is forwarded to the peer's ActiveView to introduce the
+    /// new member.
+    ForwardJoin(ForwardJoin<PI>),
+    /// A shuffle request is sent occasionally to re-shuffle the PassiveView with contacts from
+    /// other peers.
+    Shuffle(Shuffle<PI>),
+    /// Peers reply to [`Message::Shuffle`] requests with a random peers from their active and
+    /// passive views.
+    ShuffleReply(ShuffleReply<PI>),
+    /// Request to add sender to an active view of recipient. If [`Neighbor::priority`] is
+    /// [`Priority::High`], the request cannot be denied.
+    Neighbor(Neighbor),
+    /// Request to disconnect from a peer.
+    /// If [`Disconnect::alive`] is true, the other peer is not shutting down, so it should be
+    /// added to the passive set.
+    Disconnect(Disconnect),
+}
+
+/// The time-to-live for this message.
+///
+/// Each time a message is forwarded, the `Ttl` is decreased by 1. If the `Ttl` reaches 0, it
+/// should not be forwarded further.
+#[derive(From, Sub, Eq, PartialEq, Clone, Debug, Copy, Serialize, Deserialize)]
+pub struct Ttl(pub u16);
+impl Ttl {
+    pub fn expired(&self) -> bool {
+        *self == Ttl(0)
+    }
+    pub fn next(&self) -> Ttl {
+        Ttl(self.0.saturating_sub(1))
+    }
+}
+
+/// A message informing other peers that a new peer joined the swarm for this topic.
+///
+/// Will be forwarded in a random walk until `ttl` reaches 0.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct ForwardJoin<PI> {
+    /// The peer that newly joined the swarm
+    peer: PeerInfo<PI>,
+    /// The time-to-live for this message
+    ttl: Ttl,
+}
+
+/// Shuffle messages are sent occasionally to shuffle our passive view with peers from other peer's
+/// active and passive views.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct Shuffle<PI> {
+    /// The peer that initiated the shuffle request.
+    origin: PI,
+    /// A random subset of the active and passive peers of the `origin` peer.
+    nodes: Vec<PeerInfo<PI>>,
+    /// The time-to-live for this message.
+    ttl: Ttl,
+}
+
+/// Once a shuffle messages reaches a [`Ttl`] of 0, a peer replies with a `ShuffleReply`.
+///
+/// The reply is sent to the peer that initiated the shuffle and contains a subset of the active
+/// and passive views of the peer at the end of the random walk.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct ShuffleReply<PI> {
+    /// A random subset of the active and passive peers of the peer sending the `ShuffleReply`.
+    nodes: Vec<PeerInfo<PI>>,
+}
+
+/// The priority of a `Join` message
+///
+/// This is `High` if the sender does not have any active peers, and `Low` otherwise.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub enum Priority {
+    /// High priority join that may not be denied.
+    ///
+    /// A peer may only send high priority joins if it doesn't have any active peers at the moment.
+    High,
+    /// Low priority join that can be denied.
+    Low,
+}
+
+/// A neighbor message is sent after adding a peer to our active view to inform them that we are
+/// now neighbors.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct Neighbor {
+    /// The priority of the `Join` or `ForwardJoin` message that triggered this neighbor request.
+    priority: Priority,
+    /// The user data of the peer sending this message.
+    data: Option<PeerData>,
+}
+
+/// Message sent when leaving the swarm or closing down to inform peers about us being gone.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct Disconnect {
+    /// Whether we are actually shutting down or closing the connection only because our limits are
+    /// reached.
+    alive: bool,
+    /// Obsolete field (kept in the struct to maintain wire compatibility).
+    _respond: bool,
+}
+
+/// Configuration for the swarm membership layer
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(default)]
+pub struct Config {
+    /// Number of peers to which active connections are maintained
+    pub active_view_capacity: usize,
+    /// Number of peers for which contact information is remembered,
+    /// but to which we are not actively connected to.
+    pub passive_view_capacity: usize,
+    /// Number of hops a `ForwardJoin` message is propagated until the new peer's info
+    /// is added to a peer's active view.
+    pub active_random_walk_length: Ttl,
+    /// Number of hops a `ForwardJoin` message is propagated until the new peer's info
+    /// is added to a peer's passive view.
+    pub passive_random_walk_length: Ttl,
+    /// Number of hops a `Shuffle` message is propagated until a peer replies to it.
+    pub shuffle_random_walk_length: Ttl,
+    /// Number of active peers to be included in a `Shuffle` request.
+    pub shuffle_active_view_count: usize,
+    /// Number of passive peers to be included in a `Shuffle` request.
+    pub shuffle_passive_view_count: usize,
+    /// Interval duration for shuffle requests
+    pub shuffle_interval: Duration,
+    /// Timeout after which a `Neighbor` request is considered failed
+    pub neighbor_request_timeout: Duration,
+}
+impl Default for Config {
+    /// Default values for the HyParView layer
+    fn default() -> Self {
+        Self {
+            // From the paper (p9)
+            active_view_capacity: 5,
+            // From the paper (p9)
+            passive_view_capacity: 30,
+            // From the paper (p9)
+            active_random_walk_length: Ttl(6),
+            // From the paper (p9)
+            passive_random_walk_length: Ttl(3),
+            // From the paper (p9)
+            shuffle_random_walk_length: Ttl(6),
+            // From the paper (p9)
+            shuffle_active_view_count: 3,
+            // From the paper (p9)
+            shuffle_passive_view_count: 4,
+            // Wild guess
+            shuffle_interval: Duration::from_secs(60),
+            // Wild guess
+            neighbor_request_timeout: Duration::from_millis(500),
+        }
+    }
+}
+
+#[derive(Default, Debug, Clone)]
+pub struct Stats {
+    total_connections: usize,
+}
+
+/// The state of the HyParView protocol
+#[derive(Debug)]
+pub struct State<PI, RG = ThreadRng> {
+    /// Our peer identity
+    me: PI,
+    /// Our opaque user data to transmit to peers on join messages
+    me_data: Option<PeerData>,
+    /// The active view, i.e. peers we are connected to
+    pub(crate) active_view: IndexSet<PI>,
+    /// The passive view, i.e. peers we know about but are not connected to at the moment
+    pub(crate) passive_view: IndexSet<PI>,
+    /// Protocol configuration (cannot change at runtime)
+    config: Config,
+    /// Whether a shuffle timer is currently scheduled
+    shuffle_scheduled: bool,
+    /// Random number generator
+    rng: RG,
+    /// Statistics
+    pub(crate) stats: Stats,
+    /// The set of neighbor requests we sent out but did not yet receive a reply for
+    pending_neighbor_requests: HashSet<PI>,
+    /// The opaque user peer data we received for other peers
+    peer_data: HashMap<PI, PeerData>,
+    /// List of peers that are disconnecting, but which we want to keep in the passive set once the connection closes
+    alive_disconnect_peers: HashSet<PI>,
+}
+
+impl<PI, RG> State<PI, RG>
+where
+    PI: PeerIdentity,
+    RG: Rng,
+{
+    pub fn new(me: PI, me_data: Option<PeerData>, config: Config, rng: RG) -> Self {
+        Self {
+            me,
+            me_data,
+            active_view: IndexSet::new(),
+            passive_view: IndexSet::new(),
+            config,
+            shuffle_scheduled: false,
+            rng,
+            stats: Stats::default(),
+            pending_neighbor_requests: Default::default(),
+            peer_data: Default::default(),
+            alive_disconnect_peers: Default::default(),
+        }
+    }
+
+    pub fn handle(&mut self, event: InEvent<PI>, io: &mut impl IO<PI>) {
+        match event {
+            InEvent::RecvMessage(from, message) => self.handle_message(from, message, io),
+            InEvent::TimerExpired(timer) => match timer {
+                Timer::DoShuffle => self.handle_shuffle_timer(io),
+                Timer::PendingNeighborRequest(peer) => self.handle_pending_neighbor_timer(peer, io),
+            },
+            InEvent::PeerDisconnected(peer) => self.handle_connection_closed(peer, io),
+            InEvent::RequestJoin(peer) => self.handle_join(peer, io),
+            InEvent::UpdatePeerData(data) => {
+                self.me_data = Some(data);
+            }
+            InEvent::Quit => self.handle_quit(io),
+        }
+
+        // this will only happen on the first call
+        if !self.shuffle_scheduled {
+            io.push(OutEvent::ScheduleTimer(
+                self.config.shuffle_interval,
+                Timer::DoShuffle,
+            ));
+            self.shuffle_scheduled = true;
+        }
+    }
+
+    fn handle_message(&mut self, from: PI, message: Message<PI>, io: &mut impl IO<PI>) {
+        let is_disconnect = matches!(message, Message::Disconnect(Disconnect { .. }));
+        if !is_disconnect && !self.active_view.contains(&from) {
+            self.stats.total_connections += 1;
+        }
+        match message {
+            Message::Join(data) => self.on_join(from, data, io),
+            Message::ForwardJoin(details) => self.on_forward_join(from, details, io),
+            Message::Shuffle(details) => self.on_shuffle(from, details, io),
+            Message::ShuffleReply(details) => self.on_shuffle_reply(details, io),
+            Message::Neighbor(details) => self.on_neighbor(from, details, io),
+            Message::Disconnect(details) => self.on_disconnect(from, details, io),
+        }
+
+        // Disconnect from passive nodes right after receiving a message.
+        // TODO(frando): I'm not sure anymore that this is correct. Maybe remove?
+        if !is_disconnect && !self.active_view.contains(&from) {
+            io.push(OutEvent::DisconnectPeer(from));
+        }
+    }
+
+    fn handle_join(&mut self, peer: PI, io: &mut impl IO<PI>) {
+        io.push(OutEvent::SendMessage(
+            peer,
+            Message::Join(self.me_data.clone()),
+        ));
+    }
+
+    /// We received a disconnect message.
+    fn on_disconnect(&mut self, peer: PI, details: Disconnect, io: &mut impl IO<PI>) {
+        self.pending_neighbor_requests.remove(&peer);
+        if self.active_view.contains(&peer) {
+            self.remove_active(
+                &peer,
+                RemovalReason::DisconnectReceived {
+                    is_alive: details.alive,
+                },
+                io,
+            );
+        } else if details.alive && self.passive_view.contains(&peer) {
+            self.alive_disconnect_peers.insert(peer);
+        }
+    }
+
+    /// A connection was closed by the peer.
+    fn handle_connection_closed(&mut self, peer: PI, io: &mut impl IO<PI>) {
+        self.pending_neighbor_requests.remove(&peer);
+        if self.active_view.contains(&peer) {
+            self.remove_active(&peer, RemovalReason::ConnectionClosed, io);
+        } else if !self.alive_disconnect_peers.remove(&peer) {
+            self.passive_view.remove(&peer);
+            self.peer_data.remove(&peer);
+        }
+    }
+
+    fn handle_quit(&mut self, io: &mut impl IO<PI>) {
+        for peer in self.active_view.clone().into_iter() {
+            self.active_view.remove(&peer);
+            self.send_disconnect(peer, false, io);
+        }
+    }
+
+    fn send_disconnect(&mut self, peer: PI, alive: bool, io: &mut impl IO<PI>) {
+        // Before disconnecting, send a `ShuffleReply` with some of our nodes to
+        // prevent the other node from running out of connections. This is especially
+        // relevant if the other node just joined the swarm.
+        self.send_shuffle_reply(
+            peer,
+            self.config.shuffle_active_view_count + self.config.shuffle_passive_view_count,
+            io,
+        );
+        let message = Message::Disconnect(Disconnect {
+            alive,
+            _respond: false,
+        });
+        io.push(OutEvent::SendMessage(peer, message));
+        io.push(OutEvent::DisconnectPeer(peer));
+    }
+
+    fn on_join(&mut self, peer: PI, data: Option<PeerData>, io: &mut impl IO<PI>) {
+        // "A node that receives a join request will start by adding the new
+        // node to its active view, even if it has to drop a random node from it. (6)"
+        self.add_active(peer, data.clone(), Priority::High, true, io);
+
+        // "The contact node c will then send to all other nodes in its active view a ForwardJoin
+        // request containing the new node identifier. Associated to the join procedure,
+        // there are two configuration parameters, named Active Random Walk Length (ARWL),
+        // that specifies the maximum number of hops a ForwardJoin request is propagated,
+        // and Passive Random Walk Length (PRWL), that specifies at which point in the walk the node
+        // is inserted in a passive view. To use these parameters, the ForwardJoin request carries
+        // a “time to live” field that is initially set to ARWL and decreased at every hop. (7)"
+        let ttl = self.config.active_random_walk_length;
+        let peer_info = PeerInfo { id: peer, data };
+        for node in self.active_view.iter_without(&peer) {
+            let message = Message::ForwardJoin(ForwardJoin {
+                peer: peer_info.clone(),
+                ttl,
+            });
+            io.push(OutEvent::SendMessage(*node, message));
+        }
+    }
+
+    fn on_forward_join(&mut self, sender: PI, message: ForwardJoin<PI>, io: &mut impl IO<PI>) {
+        let peer_id = message.peer.id;
+        // If the peer is already in our active view, we renew our neighbor relationship.
+        if self.active_view.contains(&peer_id) {
+            self.insert_peer_info(message.peer, io);
+            self.send_neighbor(peer_id, Priority::High, io);
+        }
+        // "i) If the time to live is equal to zero or if the number of nodes in p’s active view is equal to one,
+        // it will add the new node to its active view (7)"
+        else if message.ttl.expired() || self.active_view.len() <= 1 {
+            self.insert_peer_info(message.peer, io);
+            // Modification from paper: Instead of adding the peer directly to our active view,
+            // we only send the Neighbor message. We will add the peer to our active view once we receive a
+            // reply from our neighbor.
+            // This prevents us adding unreachable peers to our active view.
+            self.send_neighbor(peer_id, Priority::High, io);
+        } else {
+            // "ii) If the time to live is equal to PRWL, p will insert the new node into its passive view"
+            if message.ttl == self.config.passive_random_walk_length {
+                self.add_passive(peer_id, message.peer.data.clone(), io);
+            }
+            // "iii) The time to live field is decremented."
+            // "iv) If, at this point, n has not been inserted
+            // in p’s active view, p will forward the request to a random node in its active view
+            // (different from the one from which the request was received)."
+            if !self.active_view.contains(&peer_id)
+                && !self.pending_neighbor_requests.contains(&peer_id)
+            {
+                match self
+                    .active_view
+                    .pick_random_without(&[&sender], &mut self.rng)
+                {
+                    None => {
+                        unreachable!("if the peer was not added, there are at least two peers in our active view.");
+                    }
+                    Some(next) => {
+                        let message = Message::ForwardJoin(ForwardJoin {
+                            peer: message.peer,
+                            ttl: message.ttl.next(),
+                        });
+                        io.push(OutEvent::SendMessage(*next, message));
+                    }
+                }
+            }
+        }
+    }
+
+    fn on_neighbor(&mut self, from: PI, details: Neighbor, io: &mut impl IO<PI>) {
+        let is_reply = self.pending_neighbor_requests.remove(&from);
+        let do_reply = !is_reply;
+        // "A node q that receives a high priority neighbor request will always accept the request, even
+        // if it has to drop a random member from its active view (again, the member that is dropped will
+        // receive a Disconnect notification). If a node q receives a low priority Neighbor request, it will
+        // only accept the request if it has a free slot in its active view, otherwise it will refuse the request."
+        if !self.add_active(from, details.data, details.priority, do_reply, io) {
+            self.send_disconnect(from, true, io);
+        }
+    }
+
+    /// Get the peer [`PeerInfo`] for a peer.
+    fn peer_info(&self, id: &PI) -> PeerInfo<PI> {
+        let data = self.peer_data.get(id).cloned();
+        PeerInfo { id: *id, data }
+    }
+
+    fn insert_peer_info(&mut self, peer_info: PeerInfo<PI>, io: &mut impl IO<PI>) {
+        if let Some(data) = peer_info.data {
+            let old = self.peer_data.remove(&peer_info.id);
+            let same = matches!(old, Some(old) if old == data);
+            if !same && !data.0.is_empty() {
+                io.push(OutEvent::PeerData(peer_info.id, data.clone()));
+            }
+            self.peer_data.insert(peer_info.id, data);
+        }
+    }
+
+    /// Handle a [`Message::Shuffle`]
+    ///
+    /// > A node q that receives a Shuffle request will first decrease its time to live. If the time
+    /// > to live of the message is greater than zero and the number of nodes in q’s active view is
+    /// > greater than 1, the node will select a random node from its active view, different from the
+    /// > one he received this shuffle message from, and simply forwards the Shuffle request.
+    /// > Otherwise, node q accepts the Shuffle request and send back (p.8)
+    fn on_shuffle(&mut self, from: PI, shuffle: Shuffle<PI>, io: &mut impl IO<PI>) {
+        if shuffle.ttl.expired() || self.active_view.len() <= 1 {
+            let len = shuffle.nodes.len();
+            for node in shuffle.nodes {
+                self.add_passive(node.id, node.data, io);
+            }
+            self.send_shuffle_reply(shuffle.origin, len, io);
+        } else if let Some(node) = self
+            .active_view
+            .pick_random_without(&[&shuffle.origin, &from], &mut self.rng)
+        {
+            let message = Message::Shuffle(Shuffle {
+                origin: shuffle.origin,
+                nodes: shuffle.nodes,
+                ttl: shuffle.ttl.next(),
+            });
+            io.push(OutEvent::SendMessage(*node, message));
+        }
+    }
+
+    fn send_shuffle_reply(&mut self, to: PI, len: usize, io: &mut impl IO<PI>) {
+        let mut nodes = self.passive_view.shuffled_and_capped(len, &mut self.rng);
+        // If we don't have enough passive nodes for the expected length, we fill with
+        // active nodes.
+        if nodes.len() < len {
+            nodes.extend(
+                self.active_view
+                    .shuffled_and_capped(len - nodes.len(), &mut self.rng),
+            );
+        }
+        let nodes = nodes.into_iter().map(|id| self.peer_info(&id));
+        let message = Message::ShuffleReply(ShuffleReply {
+            nodes: nodes.collect(),
+        });
+        io.push(OutEvent::SendMessage(to, message));
+    }
+
+    fn on_shuffle_reply(&mut self, message: ShuffleReply<PI>, io: &mut impl IO<PI>) {
+        for node in message.nodes {
+            self.add_passive(node.id, node.data, io);
+        }
+        self.refill_active_from_passive(&[], io);
+    }
+
+    fn handle_shuffle_timer(&mut self, io: &mut impl IO<PI>) {
+        if let Some(node) = self.active_view.pick_random(&mut self.rng) {
+            let active = self.active_view.shuffled_without_and_capped(
+                &[node],
+                self.config.shuffle_active_view_count,
+                &mut self.rng,
+            );
+            let passive = self.passive_view.shuffled_without_and_capped(
+                &[node],
+                self.config.shuffle_passive_view_count,
+                &mut self.rng,
+            );
+            let nodes = active
+                .iter()
+                .chain(passive.iter())
+                .map(|id| self.peer_info(id));
+            let me = PeerInfo {
+                id: self.me,
+                data: self.me_data.clone(),
+            };
+            let nodes = nodes.chain([me]);
+            let message = Shuffle {
+                origin: self.me,
+                nodes: nodes.collect(),
+                ttl: self.config.shuffle_random_walk_length,
+            };
+            io.push(OutEvent::SendMessage(*node, Message::Shuffle(message)));
+        }
+        io.push(OutEvent::ScheduleTimer(
+            self.config.shuffle_interval,
+            Timer::DoShuffle,
+        ));
+    }
+
+    fn passive_is_full(&self) -> bool {
+        self.passive_view.len() >= self.config.passive_view_capacity
+    }
+
+    fn active_is_full(&self) -> bool {
+        self.active_view.len() >= self.config.active_view_capacity
+    }
+
+    /// Add a peer to the passive view.
+    ///
+    /// If the passive view is full, it will first remove a random peer and then insert the new peer.
+    /// If a peer is currently in the active view it will not be added.
+    fn add_passive(&mut self, peer: PI, data: Option<PeerData>, io: &mut impl IO<PI>) {
+        self.insert_peer_info((peer, data).into(), io);
+        if self.active_view.contains(&peer) || self.passive_view.contains(&peer) || peer == self.me
+        {
+            return;
+        }
+        if self.passive_is_full() {
+            self.passive_view.remove_random(&mut self.rng);
+        }
+        self.passive_view.insert(peer);
+    }
+
+    /// Remove a peer from the active view.
+    ///
+    /// If `reason` is [`RemovalReason::Random`], a [`Disconnect`] message will be sent to the peer.
+    fn remove_active(&mut self, peer: &PI, reason: RemovalReason, io: &mut impl IO<PI>) {
+        if let Some(idx) = self.active_view.get_index_of(peer) {
+            let removed_peer = self.remove_active_by_index(idx, reason, io).unwrap();
+            self.refill_active_from_passive(&[&removed_peer], io);
+        }
+    }
+
+    fn refill_active_from_passive(&mut self, skip_peers: &[&PI], io: &mut impl IO<PI>) {
+        if self.active_view.len() + self.pending_neighbor_requests.len()
+            >= self.config.active_view_capacity
+        {
+            return;
+        }
+        // "When a node p suspects that one of the nodes present in its active view has failed
+        // (by either disconnecting or blocking), it selects a random node q from its passive view and
+        // attempts to establish a TCP connection with q. If the connection fails to establish,
+        // node q is considered failed and removed from p’s passive view; another node q′ is selected
+        // at random and a new attempt is made. The procedure is repeated until a connection is established
+        // with success." (p7)
+        let mut skip_peers = skip_peers.to_vec();
+        skip_peers.extend(self.pending_neighbor_requests.iter());
+
+        if let Some(node) = self
+            .passive_view
+            .pick_random_without(&skip_peers, &mut self.rng)
+            .copied()
+        {
+            let priority = match self.active_view.is_empty() {
+                true => Priority::High,
+                false => Priority::Low,
+            };
+            self.send_neighbor(node, priority, io);
+            // schedule a timer that checks if the node replied with a neighbor message,
+            // otherwise try again with another passive node.
+            io.push(OutEvent::ScheduleTimer(
+                self.config.neighbor_request_timeout,
+                Timer::PendingNeighborRequest(node),
+            ));
+        };
+    }
+
+    fn handle_pending_neighbor_timer(&mut self, peer: PI, io: &mut impl IO<PI>) {
+        if self.pending_neighbor_requests.remove(&peer) {
+            self.passive_view.remove(&peer);
+            self.refill_active_from_passive(&[], io);
+        }
+    }
+
+    fn remove_active_by_index(
+        &mut self,
+        peer_index: usize,
+        reason: RemovalReason,
+        io: &mut impl IO<PI>,
+    ) -> Option<PI> {
+        if let Some(peer) = self.active_view.remove_index(peer_index) {
+            io.push(OutEvent::EmitEvent(Event::NeighborDown(peer)));
+
+            match reason {
+                // send a disconnect message, then close connection.
+                RemovalReason::Random => self.send_disconnect(peer, true, io),
+                // close connection without sending anything further.
+                RemovalReason::DisconnectReceived { is_alive: _ } => {
+                    io.push(OutEvent::DisconnectPeer(peer))
+                }
+                RemovalReason::ConnectionClosed => io.push(OutEvent::DisconnectPeer(peer)),
+            }
+
+            let keep_as_passive = match reason {
+                // keep alive if previously marked as alive.
+                RemovalReason::ConnectionClosed => self.alive_disconnect_peers.remove(&peer),
+                // keep alive if other peer said to be still alive.
+                RemovalReason::DisconnectReceived { is_alive } => is_alive,
+                // keep alive (only we are removing for now)
+                RemovalReason::Random => true,
+            };
+
+            if keep_as_passive {
+                let data = self.peer_data.remove(&peer);
+                self.add_passive(peer, data, io);
+                // mark peer as alive, so it doesn't get removed from the passive view if the conn closes.
+                if !matches!(reason, RemovalReason::ConnectionClosed) {
+                    self.alive_disconnect_peers.insert(peer);
+                }
+            }
+            debug!(other = ?peer, "removed from active view, reason: {reason:?}");
+            Some(peer)
+        } else {
+            None
+        }
+    }
+
+    /// Remove a random peer from the active view.
+    fn free_random_slot_in_active_view(&mut self, io: &mut impl IO<PI>) {
+        if let Some(index) = self.active_view.pick_random_index(&mut self.rng) {
+            self.remove_active_by_index(index, RemovalReason::Random, io);
+        }
+    }
+
+    /// Add a peer to the active view.
+    ///
+    /// If the active view is currently full, a random peer will be removed first.
+    /// Sends a Neighbor message to the peer. If high_priority is true, the peer
+    /// may not deny the Neighbor request.
+    fn add_active(
+        &mut self,
+        peer: PI,
+        data: Option<PeerData>,
+        priority: Priority,
+        reply: bool,
+        io: &mut impl IO<PI>,
+    ) -> bool {
+        if peer == self.me {
+            return false;
+        }
+        self.insert_peer_info((peer, data).into(), io);
+        if self.active_view.contains(&peer) {
+            if reply {
+                self.send_neighbor(peer, priority, io);
+            }
+            return true;
+        }
+        match (priority, self.active_is_full()) {
+            (Priority::High, is_full) => {
+                if is_full {
+                    self.free_random_slot_in_active_view(io);
+                }
+                self.add_active_unchecked(peer, Priority::High, reply, io);
+                true
+            }
+            (Priority::Low, false) => {
+                self.add_active_unchecked(peer, Priority::Low, reply, io);
+                true
+            }
+            (Priority::Low, true) => false,
+        }
+    }
+
+    fn add_active_unchecked(
+        &mut self,
+        peer: PI,
+        priority: Priority,
+        reply: bool,
+        io: &mut impl IO<PI>,
+    ) {
+        self.passive_view.remove(&peer);
+        if self.active_view.insert(peer) {
+            debug!(other = ?peer, "add to active view");
+            io.push(OutEvent::EmitEvent(Event::NeighborUp(peer)));
+            if reply {
+                self.send_neighbor(peer, priority, io);
+            }
+        }
+    }
+
+    fn send_neighbor(&mut self, peer: PI, priority: Priority, io: &mut impl IO<PI>) {
+        if self.pending_neighbor_requests.insert(peer) {
+            let message = Message::Neighbor(Neighbor {
+                priority,
+                data: self.me_data.clone(),
+            });
+            io.push(OutEvent::SendMessage(peer, message));
+        }
+    }
+}
+
+#[derive(Debug)]
+enum RemovalReason {
+    /// A peer is removed because the connection was closed ungracefully.
+    ConnectionClosed,
+    /// A peer is removed because we received a disconnect message.
+    DisconnectReceived { is_alive: bool },
+    /// A peer is removed after random selection to make room for a newly joined peer.
+    Random,
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/plumtree.rs b/third_party/iroh-org/iroh-gossip/src/proto/plumtree.rs
new file mode 100644
index 0000000..2c114a1
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/plumtree.rs
@@ -0,0 +1,909 @@
+//! Implementation of the Plumtree epidemic broadcast tree protocol
+//!
+//! The implementation is based on [this paper][paper] by Joao Leitao, Jose Pereira, Luıs Rodrigues
+//! and the [example implementation][impl] by Bartosz Sypytkowski
+//!
+//! [paper]: https://asc.di.fct.unl.pt/~jleitao/pdf/srds07-leitao.pdf
+//! [impl]: https://gist.github.com/Horusiath/84fac596101b197da0546d1697580d99
+
+use std::{
+    collections::{BTreeMap, BTreeSet, HashMap, HashSet, VecDeque},
+    hash::Hash,
+};
+
+use bytes::Bytes;
+use derive_more::{Add, From, Sub};
+use n0_future::time::{Duration, Instant};
+use postcard::experimental::max_size::MaxSize;
+use serde::{Deserialize, Serialize};
+use tracing::{debug, warn};
+
+use super::{
+    util::{idbytes_impls, TimeBoundCache},
+    PeerIdentity, IO,
+};
+
+/// A message identifier, which is the message content's blake3 hash.
+#[derive(Serialize, Deserialize, Clone, Hash, Copy, PartialEq, Eq, MaxSize)]
+pub struct MessageId([u8; 32]);
+idbytes_impls!(MessageId, "MessageId");
+
+impl MessageId {
+    /// Create a `[MessageId]` by hashing the message content.
+    ///
+    /// This hashes the input with [`blake3::hash`].
+    pub fn from_content(message: &[u8]) -> Self {
+        Self::from(blake3::hash(message))
+    }
+}
+
+/// Events Plumtree is informed of from the peer sampling service and IO layer.
+#[derive(Debug)]
+pub enum InEvent<PI> {
+    /// A [`Message`] was received from the peer.
+    RecvMessage(PI, Message),
+    /// Broadcast the contained payload to the given scope.
+    Broadcast(Bytes, Scope),
+    /// A timer has expired.
+    TimerExpired(Timer),
+    /// New member `PI` has joined the topic.
+    NeighborUp(PI),
+    /// Peer `PI` has disconnected from the topic.
+    NeighborDown(PI),
+}
+
+/// Events Plumtree emits.
+#[derive(Debug, PartialEq, Eq)]
+pub enum OutEvent<PI> {
+    /// Ask the IO layer to send a [`Message`] to peer `PI`.
+    SendMessage(PI, Message),
+    /// Schedule a [`Timer`].
+    ScheduleTimer(Duration, Timer),
+    /// Emit an [`Event`] to the application.
+    EmitEvent(Event<PI>),
+}
+
+/// Kinds of timers Plumtree needs to schedule.
+#[derive(Clone, Debug, Eq, PartialEq)]
+pub enum Timer {
+    /// Request the content for [`MessageId`] by sending [`Message::Graft`].
+    ///
+    /// The message will be sent to a peer that sent us an [`Message::IHave`] for this [`MessageId`],
+    /// which will send us the message content in reply and also move the peer into the eager set.
+    /// Will be a no-op if the message for [`MessageId`] was already received from another peer by now.
+    SendGraft(MessageId),
+    /// Dispatch the [`Message::IHave`] in our lazy push queue.
+    DispatchLazyPush,
+    /// Evict the message cache
+    EvictCache,
+}
+
+/// Event emitted by the [`State`] to the application.
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub enum Event<PI> {
+    /// A new gossip message was received.
+    Received(GossipEvent<PI>),
+}
+
+#[derive(Clone, derive_more::Debug, PartialEq, Eq, Ord, PartialOrd, Serialize, Deserialize)]
+pub struct GossipEvent<PI> {
+    /// The content of the gossip message.
+    #[debug("<{}b>", content.len())]
+    pub content: Bytes,
+    /// The peer that we received the gossip message from. Note that this is not the peer that
+    /// originally broadcasted the message, but the peer before us in the gossiping path.
+    pub delivered_from: PI,
+    /// The broadcast scope of the message.
+    pub scope: DeliveryScope,
+}
+
+impl<PI> GossipEvent<PI> {
+    fn from_message(message: &Gossip, from: PI) -> Self {
+        Self {
+            content: message.content.clone(),
+            scope: message.scope,
+            delivered_from: from,
+        }
+    }
+}
+
+/// Number of delivery hops a message has taken.
+#[derive(
+    From,
+    Add,
+    Sub,
+    Serialize,
+    Deserialize,
+    Eq,
+    PartialEq,
+    PartialOrd,
+    Ord,
+    Clone,
+    Copy,
+    Debug,
+    Hash,
+    MaxSize,
+)]
+pub struct Round(u16);
+
+impl Round {
+    pub fn next(&self) -> Round {
+        Round(self.0 + 1)
+    }
+}
+
+/// Messages that we can send and receive from peers within the topic.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub enum Message {
+    /// When receiving Gossip, emit as event and forward full message to eager peer and (after a
+    /// delay) message IDs to lazy peers.
+    Gossip(Gossip),
+    /// When receiving Prune, move the peer from the eager to the lazy set.
+    Prune,
+    /// When receiving Graft, move the peer to the eager set and send the full content for the
+    /// included message ID.
+    Graft(Graft),
+    /// When receiving IHave, do nothing initially, and request the messages for the included
+    /// message IDs after some time if they aren't pushed eagerly to us.
+    IHave(Vec<IHave>),
+}
+
+/// Payload messages transmitted by the protocol.
+#[derive(Serialize, Deserialize, Clone, derive_more::Debug, PartialEq, Eq)]
+pub struct Gossip {
+    /// Id of the message.
+    id: MessageId,
+    /// Message contents.
+    #[debug("<{}b>", content.len())]
+    content: Bytes,
+    /// Scope to broadcast to.
+    scope: DeliveryScope,
+}
+
+impl Gossip {
+    fn round(&self) -> Option<Round> {
+        match self.scope {
+            DeliveryScope::Swarm(round) => Some(round),
+            DeliveryScope::Neighbors => None,
+        }
+    }
+}
+
+/// The scope to deliver the message to.
+#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq, Ord, PartialOrd, Copy)]
+pub enum DeliveryScope {
+    /// This message was received from the swarm, with a distance (in hops) travelled from the
+    /// original broadcaster.
+    Swarm(Round),
+    /// This message was received from a direct neighbor that broadcasted the message to neighbors
+    /// only.
+    Neighbors,
+}
+
+impl DeliveryScope {
+    /// Whether this message was directly received from its publisher.
+    pub fn is_direct(&self) -> bool {
+        matches!(self, Self::Neighbors | Self::Swarm(Round(0)))
+    }
+}
+
+/// The broadcast scope of a gossip message.
+#[derive(Serialize, Deserialize, Clone, Debug, PartialEq, Eq, Ord, PartialOrd, Copy)]
+pub enum Scope {
+    /// The message is broadcast to all peers in the swarm.
+    Swarm,
+    /// The message is broadcast only to the immediate neighbors of a peer.
+    Neighbors,
+}
+
+impl Gossip {
+    /// Get a clone of this `Gossip` message and increase the delivery round by 1.
+    pub fn next_round(&self) -> Option<Gossip> {
+        match self.scope {
+            DeliveryScope::Neighbors => None,
+            DeliveryScope::Swarm(round) => Some(Gossip {
+                id: self.id,
+                content: self.content.clone(),
+                scope: DeliveryScope::Swarm(round.next()),
+            }),
+        }
+    }
+
+    /// Validate that the message id is the blake3 hash of the message content.
+    pub fn validate(&self) -> bool {
+        let expected = MessageId::from_content(&self.content);
+        expected == self.id
+    }
+}
+
+/// Control message to inform peers we have a message without transmitting the whole payload.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq, MaxSize)]
+pub struct IHave {
+    /// Id of the message.
+    pub(crate) id: MessageId,
+    /// Delivery round of the message.
+    pub(crate) round: Round,
+}
+
+/// Control message to signal a peer that they have been moved to the eager set, and to ask the
+/// peer to do the same with this node.
+#[derive(Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub struct Graft {
+    /// Message id that triggers the graft, if any.
+    /// On receiving a graft, the payload message must be sent in reply if a message id is set.
+    id: Option<MessageId>,
+    /// Delivery round of the [`Message::IHave`] that triggered this Graft message.
+    round: Round,
+}
+
+/// Configuration for the gossip broadcast layer.
+///
+/// Currently, the expectation is that the configuration is the same for all peers in the
+/// network (as recommended in the paper).
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(default)]
+pub struct Config {
+    /// When receiving an `IHave` message, this timeout is registered. If the message for the
+    /// `IHave` was not received once the timeout is expired, a `Graft` message is sent to the
+    /// peer that sent us the `IHave` to request the message payload.
+    ///
+    /// The plumtree paper notes:
+    /// > The timeout value is a protocol parameter that should be configured considering the
+    /// > diameter of the overlay and a target maximum recovery latency, defined by the application
+    /// > requirements. (p.8)
+    pub graft_timeout_1: Duration,
+    /// This timeout is registered when sending a `Graft` message. If a reply has not been
+    /// received once the timeout expires, we send another `Graft` message to the next peer that
+    /// sent us an `IHave` for this message.
+    ///
+    /// The plumtree paper notes:
+    /// > This second timeout value should be smaller that the first, in the order of an average
+    /// > round trip time to a neighbor.
+    pub graft_timeout_2: Duration,
+    /// Timeout after which `IHave` messages are pushed to peers.
+    pub dispatch_timeout: Duration,
+    /// The protocol performs a tree optimization, which promotes lazy peers to eager peers if the
+    /// `Message::IHave` messages received from them have a lower number of hops from the
+    /// message's origin as the `InEvent::Broadcast` messages received from our eager peers. This
+    /// parameter is the number of hops that the lazy peers must be closer to the origin than our
+    /// eager peers to be promoted to become an eager peer.
+    pub optimization_threshold: Round,
+
+    /// Duration for which to keep gossip messages in the internal message cache.
+    ///
+    /// Messages broadcast from this node or received from other nodes are kept in an internal
+    /// cache for this duration before being evicted. If this is too low, other nodes will not be
+    /// able to retrieve messages once they need them. If this is high, the cache will grow.
+    ///
+    /// Should be at least around several round trip times to peers.
+    pub message_cache_retention: Duration,
+
+    /// Duration for which to keep the `MessageId`s for received messages.
+    ///
+    /// Should be at least as long as [`Self::message_cache_retention`], usually will be longer to
+    /// not accidentally receive messages multiple times.
+    pub message_id_retention: Duration,
+
+    /// How often the internal caches will be checked for expired items.
+    pub cache_evict_interval: Duration,
+}
+
+impl Default for Config {
+    /// Sensible defaults for the plumtree configuration
+    //
+    // TODO: Find out what good defaults are for the three timeouts here. Current numbers are
+    // guesses that need validation. The paper does not have concrete recommendations for these
+    // numbers.
+    fn default() -> Self {
+        Self {
+            // Paper: "The timeout value is a protocol parameter that should be configured considering
+            // the diameter of the overlay and a target maximum recovery latency, defined by the
+            // application requirements. This is a parameter that should be statically configured
+            // at deployment time." (p. 8)
+            //
+            // Earthstar has 5ms it seems, see https://github.com/earthstar-project/earthstar/blob/1523c640fedf106f598bf79b184fb0ada64b1cc0/src/syncer/plum_tree.ts#L75
+            // However in the paper it is more like a few roundtrips if I read things correctly.
+            graft_timeout_1: Duration::from_millis(80),
+
+            // Paper: "This second timeout value should be smaller that the first, in the order of an
+            // average round trip time to a neighbor." (p. 9)
+            //
+            // Earthstar doesn't have this step from my reading.
+            graft_timeout_2: Duration::from_millis(40),
+
+            // Again, paper does not tell a recommended number here. Likely should be quite small,
+            // as to not delay messages without need. This would also be the time frame in which
+            // `IHave`s are aggregated to save on packets.
+            //
+            // Eartstar dispatches immediately from my reading.
+            dispatch_timeout: Duration::from_millis(5),
+
+            // This number comes from experiment settings the plumtree paper (p. 12)
+            optimization_threshold: Round(7),
+
+            // This is a certainly-high-enough value for usual operation.
+            message_cache_retention: Duration::from_secs(30),
+            message_id_retention: Duration::from_secs(90),
+            cache_evict_interval: Duration::from_secs(1),
+        }
+    }
+}
+
+/// Stats about this topic's plumtree.
+#[derive(Debug, Default, Clone)]
+pub struct Stats {
+    /// Number of payload messages received so far.
+    ///
+    /// See [`Message::Gossip`].
+    pub payload_messages_received: u64,
+    /// Number of control messages received so far.
+    ///
+    /// See [`Message::Prune`], [`Message::Graft`], [`Message::IHave`].
+    pub control_messages_received: u64,
+    /// Max round seen so far.
+    pub max_last_delivery_hop: u16,
+}
+
+/// State of the plumtree.
+#[derive(Debug)]
+pub struct State<PI> {
+    /// Our address.
+    me: PI,
+    /// Configuration for this plumtree.
+    config: Config,
+
+    /// Set of peers used for payload exchange.
+    pub(crate) eager_push_peers: BTreeSet<PI>,
+    /// Set of peers used for control message exchange.
+    pub(crate) lazy_push_peers: BTreeSet<PI>,
+
+    lazy_push_queue: BTreeMap<PI, Vec<IHave>>,
+
+    /// Messages for which a [`MessageId`] has been seen via a [`Message::IHave`] but we have not
+    /// yet received the full payload. For each, we store the peers that have claimed to have this
+    /// message.
+    missing_messages: HashMap<MessageId, VecDeque<(PI, Round)>>,
+    /// Messages for which the full payload has been seen.
+    received_messages: TimeBoundCache<MessageId, ()>,
+    /// Payloads of received messages.
+    cache: TimeBoundCache<MessageId, Gossip>,
+
+    /// Message ids for which a [`Timer::SendGraft`] has been scheduled.
+    graft_timer_scheduled: HashSet<MessageId>,
+    /// Whether a [`Timer::DispatchLazyPush`] has been scheduled.
+    dispatch_timer_scheduled: bool,
+
+    /// Set to false after the first message is received. Used for initial timer scheduling.
+    init: bool,
+
+    /// [`Stats`] of this plumtree.
+    pub(crate) stats: Stats,
+
+    max_message_size: usize,
+}
+
+impl<PI: PeerIdentity> State<PI> {
+    /// Initialize the [`State`] of a plumtree.
+    pub fn new(me: PI, config: Config, max_message_size: usize) -> Self {
+        Self {
+            me,
+            eager_push_peers: Default::default(),
+            lazy_push_peers: Default::default(),
+            lazy_push_queue: Default::default(),
+            config,
+            missing_messages: Default::default(),
+            received_messages: Default::default(),
+            graft_timer_scheduled: Default::default(),
+            dispatch_timer_scheduled: false,
+            cache: Default::default(),
+            init: false,
+            stats: Default::default(),
+            max_message_size,
+        }
+    }
+
+    /// Handle an [`InEvent`].
+    pub fn handle(&mut self, event: InEvent<PI>, now: Instant, io: &mut impl IO<PI>) {
+        if !self.init {
+            self.init = true;
+            self.on_evict_cache_timer(now, io)
+        }
+        match event {
+            InEvent::RecvMessage(from, message) => self.handle_message(from, message, now, io),
+            InEvent::Broadcast(data, scope) => self.broadcast(data, scope, now, io),
+            InEvent::NeighborUp(peer) => self.on_neighbor_up(peer),
+            InEvent::NeighborDown(peer) => self.on_neighbor_down(peer),
+            InEvent::TimerExpired(timer) => match timer {
+                Timer::DispatchLazyPush => self.on_dispatch_timer(io),
+                Timer::SendGraft(id) => {
+                    self.on_send_graft_timer(id, io);
+                }
+                Timer::EvictCache => self.on_evict_cache_timer(now, io),
+            },
+        }
+    }
+
+    /// Get access to the [`Stats`] of the plumtree.
+    pub fn stats(&self) -> &Stats {
+        &self.stats
+    }
+
+    /// Handle receiving a [`Message`].
+    fn handle_message(&mut self, sender: PI, message: Message, now: Instant, io: &mut impl IO<PI>) {
+        if matches!(message, Message::Gossip(_)) {
+            self.stats.payload_messages_received += 1;
+        } else {
+            self.stats.control_messages_received += 1;
+        }
+        match message {
+            Message::Gossip(details) => self.on_gossip(sender, details, now, io),
+            Message::Prune => self.on_prune(sender),
+            Message::IHave(details) => self.on_ihave(sender, details, io),
+            Message::Graft(details) => self.on_graft(sender, details, io),
+        }
+    }
+
+    /// Dispatches messages from lazy queue over to lazy peers.
+    fn on_dispatch_timer(&mut self, io: &mut impl IO<PI>) {
+        let chunk_size = self.max_message_size
+            // Space for discriminator
+            - 1
+            // Space for length prefix
+            - 2;
+        let chunk_len = chunk_size / IHave::POSTCARD_MAX_SIZE;
+        while let Some((peer, list)) = self.lazy_push_queue.pop_first() {
+            for chunk in list.chunks(chunk_len) {
+                io.push(OutEvent::SendMessage(peer, Message::IHave(chunk.to_vec())));
+            }
+        }
+
+        self.dispatch_timer_scheduled = false;
+    }
+
+    /// Send a gossip message.
+    ///
+    /// Will be pushed in full to eager peers.
+    /// Pushing the message id to the lazy peers is delayed by a timer.
+    fn broadcast(&mut self, content: Bytes, scope: Scope, now: Instant, io: &mut impl IO<PI>) {
+        let id = MessageId::from_content(&content);
+        let scope = match scope {
+            Scope::Neighbors => DeliveryScope::Neighbors,
+            Scope::Swarm => DeliveryScope::Swarm(Round(0)),
+        };
+        let message = Gossip { id, content, scope };
+        let me = self.me;
+        if let DeliveryScope::Swarm(_) = scope {
+            self.received_messages
+                .insert(id, (), now + self.config.message_id_retention);
+            self.cache.insert(
+                id,
+                message.clone(),
+                now + self.config.message_cache_retention,
+            );
+            self.lazy_push(message.clone(), &me, io);
+        }
+
+        self.eager_push(message.clone(), &me, io);
+    }
+
+    /// Handle receiving a [`Message::Gossip`].
+    fn on_gossip(&mut self, sender: PI, message: Gossip, now: Instant, io: &mut impl IO<PI>) {
+        // Validate that the message id is the blake3 hash of the message content.
+        if !message.validate() {
+            // TODO: Do we want to take any measures against the sender if we received a message
+            // with a spoofed message id?
+            warn!(
+                peer = ?sender,
+                "Received a message with spoofed message id ({})", message.id
+            );
+            return;
+        }
+
+        // if we already received this message: move peer to lazy set
+        // and notify peer about this.
+        if self.received_messages.contains_key(&message.id) {
+            self.add_lazy(sender);
+            io.push(OutEvent::SendMessage(sender, Message::Prune));
+        // otherwise store the message, emit to application and forward to peers
+        } else {
+            if let DeliveryScope::Swarm(prev_round) = message.scope {
+                // insert the message in the list of received messages
+                self.received_messages.insert(
+                    message.id,
+                    (),
+                    now + self.config.message_id_retention,
+                );
+                // increase the round for forwarding the message, and add to cache
+                // to reply to Graft messages later
+                // TODO: add callback/event to application to get missing messages that were received before?
+                let message = message.next_round().expect("just checked");
+
+                self.cache.insert(
+                    message.id,
+                    message.clone(),
+                    now + self.config.message_cache_retention,
+                );
+                // push the message to our peers
+                self.eager_push(message.clone(), &sender, io);
+                self.lazy_push(message.clone(), &sender, io);
+                // cleanup places where we track missing messages
+                self.graft_timer_scheduled.remove(&message.id);
+                let previous_ihaves = self.missing_messages.remove(&message.id);
+                // do the optimization step from the paper
+                if let Some(previous_ihaves) = previous_ihaves {
+                    self.optimize_tree(&sender, &message, previous_ihaves, io);
+                }
+                self.stats.max_last_delivery_hop =
+                    self.stats.max_last_delivery_hop.max(prev_round.0);
+            }
+
+            // emit event to application
+            io.push(OutEvent::EmitEvent(Event::Received(
+                GossipEvent::from_message(&message, sender),
+            )));
+        }
+    }
+
+    /// Optimize the tree by pruning the `sender` of a [`Message::Gossip`] if we previously
+    /// received a [`Message::IHave`] for the same message with a much lower number of delivery
+    /// hops from the original broadcaster of the message.
+    ///
+    /// See [Config::optimization_threshold].
+    fn optimize_tree(
+        &mut self,
+        gossip_sender: &PI,
+        message: &Gossip,
+        previous_ihaves: VecDeque<(PI, Round)>,
+        io: &mut impl IO<PI>,
+    ) {
+        let round = message.round().expect("only called for swarm messages");
+        let best_ihave = previous_ihaves
+            .iter()
+            .min_by(|(_a_peer, a_round), (_b_peer, b_round)| a_round.cmp(b_round))
+            .copied();
+
+        if let Some((ihave_peer, ihave_round)) = best_ihave {
+            if (ihave_round < round) && (round - ihave_round) >= self.config.optimization_threshold
+            {
+                // Graft the sender of the IHave, but only if it's not already eager.
+                if !self.eager_push_peers.contains(&ihave_peer) {
+                    let message = Message::Graft(Graft {
+                        id: None,
+                        round: ihave_round,
+                    });
+                    self.add_eager(ihave_peer);
+                    io.push(OutEvent::SendMessage(ihave_peer, message));
+                }
+                // Prune the sender of the Gossip.
+                self.add_lazy(*gossip_sender);
+                io.push(OutEvent::SendMessage(*gossip_sender, Message::Prune));
+            }
+        }
+    }
+
+    /// Handle receiving a [`Message::Prune`].
+    fn on_prune(&mut self, sender: PI) {
+        self.add_lazy(sender);
+    }
+
+    /// Handle receiving a [`Message::IHave`].
+    ///
+    /// > When a node receives a IHAVE message, it simply marks the corresponding message as
+    /// > missing It then starts a timer, with a predefined timeout value, and waits for the missing
+    /// > message to be received via eager push before the timer expires. The timeout value is a
+    /// > protocol parameter that should be configured considering the diameter of the overlay and a
+    /// > target maximum recovery latency, defined by the application requirements. This is a
+    /// > parameter that should be statically configured at deployment time. (p8)
+    fn on_ihave(&mut self, sender: PI, ihaves: Vec<IHave>, io: &mut impl IO<PI>) {
+        for ihave in ihaves {
+            if !self.received_messages.contains_key(&ihave.id) {
+                self.missing_messages
+                    .entry(ihave.id)
+                    .or_default()
+                    .push_back((sender, ihave.round));
+
+                if !self.graft_timer_scheduled.contains(&ihave.id) {
+                    self.graft_timer_scheduled.insert(ihave.id);
+                    io.push(OutEvent::ScheduleTimer(
+                        self.config.graft_timeout_1,
+                        Timer::SendGraft(ihave.id),
+                    ));
+                }
+            }
+        }
+    }
+
+    /// A scheduled [`Timer::SendGraft`] has reached it's deadline.
+    fn on_send_graft_timer(&mut self, id: MessageId, io: &mut impl IO<PI>) {
+        self.graft_timer_scheduled.remove(&id);
+        // if the message was received before the timer ran out, there is no need to request it
+        // again
+        if self.received_messages.contains_key(&id) {
+            return;
+        }
+        // get the first peer that advertised this message
+        let entry = self
+            .missing_messages
+            .get_mut(&id)
+            .and_then(|entries| entries.pop_front());
+        if let Some((peer, round)) = entry {
+            self.add_eager(peer);
+            let message = Message::Graft(Graft {
+                id: Some(id),
+                round,
+            });
+            io.push(OutEvent::SendMessage(peer, message));
+
+            // "when a GRAFT message is sent, another timer is started to expire after a certain timeout,
+            // to ensure that the message will be requested to another neighbor if it is not received
+            // meanwhile. This second timeout value should be smaller that the first, in the order of
+            // an average round trip time to a neighbor." (p9)
+            io.push(OutEvent::ScheduleTimer(
+                self.config.graft_timeout_2,
+                Timer::SendGraft(id),
+            ));
+        }
+    }
+
+    /// Handle receiving a [`Message::Graft`].
+    fn on_graft(&mut self, sender: PI, details: Graft, io: &mut impl IO<PI>) {
+        self.add_eager(sender);
+        if let Some(id) = details.id {
+            if let Some(message) = self.cache.get(&id) {
+                io.push(OutEvent::SendMessage(
+                    sender,
+                    Message::Gossip(message.clone()),
+                ));
+            } else {
+                debug!(?id, peer=?sender, "on_graft failed to graft: message not in cache");
+            }
+        }
+    }
+
+    /// Handle a [`InEvent::NeighborUp`] when a peer joins the topic.
+    fn on_neighbor_up(&mut self, peer: PI) {
+        self.add_eager(peer);
+    }
+
+    /// Handle a [`InEvent::NeighborDown`] when a peer leaves the topic.
+    /// > When a neighbor is detected to leave the overlay, it is simple removed from the
+    /// > membership. Furthermore, the record of IHAVE messages sent from failed members is deleted
+    /// > from the missing history. (p9)
+    fn on_neighbor_down(&mut self, peer: PI) {
+        self.missing_messages.retain(|_message_id, ihaves| {
+            ihaves.retain(|(ihave_peer, _round)| *ihave_peer != peer);
+            !ihaves.is_empty()
+        });
+        self.eager_push_peers.remove(&peer);
+        self.lazy_push_peers.remove(&peer);
+    }
+
+    fn on_evict_cache_timer(&mut self, now: Instant, io: &mut impl IO<PI>) {
+        self.cache.expire_until(now);
+        io.push(OutEvent::ScheduleTimer(
+            self.config.cache_evict_interval,
+            Timer::EvictCache,
+        ));
+    }
+
+    /// Moves peer into eager set.
+    fn add_eager(&mut self, peer: PI) {
+        self.lazy_push_peers.remove(&peer);
+        self.eager_push_peers.insert(peer);
+    }
+
+    /// Moves peer into lazy set.
+    fn add_lazy(&mut self, peer: PI) {
+        self.eager_push_peers.remove(&peer);
+        self.lazy_push_peers.insert(peer);
+    }
+
+    /// Immediately sends message to eager peers.
+    fn eager_push(&mut self, gossip: Gossip, sender: &PI, io: &mut impl IO<PI>) {
+        for peer in self
+            .eager_push_peers
+            .iter()
+            .filter(|peer| **peer != self.me && *peer != sender)
+        {
+            io.push(OutEvent::SendMessage(
+                *peer,
+                Message::Gossip(gossip.clone()),
+            ));
+        }
+    }
+
+    /// Queue lazy message announcements into the queue that will be sent out as batched
+    /// [`Message::IHave`] messages once the [`Timer::DispatchLazyPush`] timer is triggered.
+    fn lazy_push(&mut self, gossip: Gossip, sender: &PI, io: &mut impl IO<PI>) {
+        let Some(round) = gossip.round() else {
+            return;
+        };
+        for peer in self.lazy_push_peers.iter().filter(|x| *x != sender) {
+            self.lazy_push_queue.entry(*peer).or_default().push(IHave {
+                id: gossip.id,
+                round,
+            });
+        }
+        if !self.dispatch_timer_scheduled {
+            io.push(OutEvent::ScheduleTimer(
+                self.config.dispatch_timeout,
+                Timer::DispatchLazyPush,
+            ));
+            self.dispatch_timer_scheduled = true;
+        }
+    }
+}
+
+#[cfg(test)]
+mod test {
+    use super::*;
+    #[test]
+    fn optimize_tree() {
+        let mut io = VecDeque::new();
+        let config: Config = Default::default();
+        let mut state = State::new(1, config.clone(), 1024);
+        let now = Instant::now();
+
+        // we receive an IHave message from peer 2
+        // it has `round: 2` which means that the the peer that sent us the IHave was
+        // two hops away from the original sender of the message
+        let content: Bytes = b"hi".to_vec().into();
+        let id = MessageId::from_content(&content);
+        let event = InEvent::RecvMessage(
+            2u32,
+            Message::IHave(vec![IHave {
+                id,
+                round: Round(2),
+            }]),
+        );
+        state.handle(event, now, &mut io);
+        io.clear();
+        // we then receive a `Gossip` message with the same `MessageId` from peer 3
+        // the message has `round: 6`, which means it travelled 6 hops until it reached us
+        // this is less hops than to peer 2, but not enough to trigger the optimization
+        // because we use the default config which has `optimization_threshold: 7`
+        let event = InEvent::RecvMessage(
+            3,
+            Message::Gossip(Gossip {
+                id,
+                content: content.clone(),
+                scope: DeliveryScope::Swarm(Round(6)),
+            }),
+        );
+        state.handle(event, now, &mut io);
+        let expected = {
+            // we expect a dispatch timer schedule and receive event, but no Graft or Prune
+            // messages
+            let mut io = VecDeque::new();
+            io.push(OutEvent::ScheduleTimer(
+                config.dispatch_timeout,
+                Timer::DispatchLazyPush,
+            ));
+            io.push(OutEvent::EmitEvent(Event::Received(GossipEvent {
+                content,
+                delivered_from: 3,
+                scope: DeliveryScope::Swarm(Round(6)),
+            })));
+            io
+        };
+        assert_eq!(io, expected);
+        io.clear();
+
+        // now we run the same flow again but this time peer 3 is 9 hops away from the message's
+        // sender. message's sender. this will trigger the optimization:
+        // peer 2 will be promoted to eager and peer 4 demoted to lazy
+
+        let content: Bytes = b"hi2".to_vec().into();
+        let id = MessageId::from_content(&content);
+        let event = InEvent::RecvMessage(
+            2u32,
+            Message::IHave(vec![IHave {
+                id,
+                round: Round(2),
+            }]),
+        );
+        state.handle(event, now, &mut io);
+        io.clear();
+
+        let event = InEvent::RecvMessage(
+            3,
+            Message::Gossip(Gossip {
+                id,
+                content: content.clone(),
+                scope: DeliveryScope::Swarm(Round(9)),
+            }),
+        );
+        state.handle(event, now, &mut io);
+        let expected = {
+            // this time we expect the Graft and Prune messages to be sent, performing the
+            // optimization step
+            let mut io = VecDeque::new();
+            io.push(OutEvent::SendMessage(
+                2,
+                Message::Graft(Graft {
+                    id: None,
+                    round: Round(2),
+                }),
+            ));
+            io.push(OutEvent::SendMessage(3, Message::Prune));
+            io.push(OutEvent::EmitEvent(Event::Received(GossipEvent {
+                content,
+                delivered_from: 3,
+                scope: DeliveryScope::Swarm(Round(9)),
+            })));
+            io
+        };
+        assert_eq!(io, expected);
+    }
+
+    #[test]
+    fn spoofed_messages_are_ignored() {
+        let config: Config = Default::default();
+        let mut state = State::new(1, config.clone(), 1024);
+        let now = Instant::now();
+
+        // we recv a correct gossip message and expect the Received event to be emitted
+        let content: Bytes = b"hello1".to_vec().into();
+        let message = Message::Gossip(Gossip {
+            content: content.clone(),
+            id: MessageId::from_content(&content),
+            scope: DeliveryScope::Swarm(Round(1)),
+        });
+        let mut io = VecDeque::new();
+        state.handle(InEvent::RecvMessage(2, message), now, &mut io);
+        let expected = {
+            let mut io = VecDeque::new();
+            io.push(OutEvent::ScheduleTimer(
+                config.cache_evict_interval,
+                Timer::EvictCache,
+            ));
+            io.push(OutEvent::ScheduleTimer(
+                config.dispatch_timeout,
+                Timer::DispatchLazyPush,
+            ));
+            io.push(OutEvent::EmitEvent(Event::Received(GossipEvent {
+                content,
+                delivered_from: 2,
+                scope: DeliveryScope::Swarm(Round(1)),
+            })));
+            io
+        };
+        assert_eq!(io, expected);
+
+        // now we recv with a spoofed id and expect no event to be emitted
+        let content: Bytes = b"hello2".to_vec().into();
+        let message = Message::Gossip(Gossip {
+            content,
+            id: MessageId::from_content(b"foo"),
+            scope: DeliveryScope::Swarm(Round(1)),
+        });
+        let mut io = VecDeque::new();
+        state.handle(InEvent::RecvMessage(2, message), now, &mut io);
+        let expected = VecDeque::new();
+        assert_eq!(io, expected);
+    }
+
+    #[test]
+    fn cache_is_evicted() {
+        let config: Config = Default::default();
+        let mut state = State::new(1, config.clone(), 1024);
+        let now = Instant::now();
+        let content: Bytes = b"hello1".to_vec().into();
+        let message = Message::Gossip(Gossip {
+            content: content.clone(),
+            id: MessageId::from_content(&content),
+            scope: DeliveryScope::Swarm(Round(1)),
+        });
+        let mut io = VecDeque::new();
+        state.handle(InEvent::RecvMessage(2, message), now, &mut io);
+        assert_eq!(state.cache.len(), 1);
+
+        let now = now + Duration::from_secs(1);
+        state.handle(InEvent::TimerExpired(Timer::EvictCache), now, &mut io);
+        assert_eq!(state.cache.len(), 1);
+
+        let now = now + config.message_cache_retention;
+        state.handle(InEvent::TimerExpired(Timer::EvictCache), now, &mut io);
+        assert_eq!(state.cache.len(), 0);
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/sim.rs b/third_party/iroh-org/iroh-gossip/src/proto/sim.rs
new file mode 100644
index 0000000..cfc0627
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/sim.rs
@@ -0,0 +1,1141 @@
+//! Simulation framework for testing the protocol implementation
+
+use std::{
+    collections::{BTreeMap, BTreeSet, BinaryHeap, VecDeque},
+    fmt,
+    str::FromStr,
+};
+
+use bytes::Bytes;
+use n0_future::time::{Duration, Instant};
+use rand::{seq::IteratorRandom, Rng, SeedableRng};
+use rand_chacha::ChaCha12Rng;
+use serde::{Deserialize, Serialize};
+use tracing::{debug, debug_span, info, info_span, trace, warn};
+
+use super::{Command, Config, Event, InEvent, OutEvent, PeerIdentity, State, TopicId};
+use crate::proto::{PeerData, Scope};
+
+const DEFAULT_LATENCY_STATIC: Duration = Duration::from_millis(50);
+const DEFAULT_LATENCY_MIN: Duration = Duration::from_millis(10);
+const DEFAULT_LATENCY_MAX: Duration = Duration::from_millis(100);
+
+/// Configuration for a [`Network`].
+#[derive(Debug, Clone, Default, Serialize, Deserialize)]
+pub struct NetworkConfig {
+    /// Configures the latency between peers.
+    #[serde(default)]
+    pub latency: LatencyConfig,
+    /// Default protocol config for all peers.
+    #[serde(default)]
+    pub proto: Config,
+}
+
+impl From<Config> for NetworkConfig {
+    fn from(config: Config) -> Self {
+        Self {
+            latency: Default::default(),
+            proto: config,
+        }
+    }
+}
+
+/// Configures the latency between peers.
+#[derive(Debug, Clone, Serialize, Deserialize)]
+#[serde(rename_all = "lowercase")]
+pub enum LatencyConfig {
+    /// Use the same latency, always.
+    Static(#[serde(with = "humantime_serde")] Duration),
+    /// Chose a random latency for each connection within the specified bounds.
+    Dynamic {
+        /// The lower bound for the latency between two peers.
+        #[serde(with = "humantime_serde")]
+        min: Duration,
+        /// The upper bound for the latency between two peers.
+        #[serde(with = "humantime_serde")]
+        max: Duration,
+    },
+}
+
+impl LatencyConfig {
+    /// Returns a default latency config with a static latency.
+    pub fn default_static() -> Self {
+        Self::Static(DEFAULT_LATENCY_STATIC)
+    }
+
+    /// Returns a default latency config with a dynamic latency.
+    pub fn default_dynamic() -> Self {
+        Self::Dynamic {
+            min: DEFAULT_LATENCY_MIN,
+            max: DEFAULT_LATENCY_MAX,
+        }
+    }
+
+    /// Creates a new latency config with the provided min and max values in milliseconds.
+    pub fn random_ms(min: u64, max: u64) -> Self {
+        Self::Dynamic {
+            min: Duration::from_millis(min),
+            max: Duration::from_millis(max),
+        }
+    }
+
+    /// Returns the maximum latency possible.
+    pub fn max(&self) -> Duration {
+        match self {
+            Self::Static(dur) => *dur,
+            Self::Dynamic { max, .. } => *max,
+        }
+    }
+
+    /// Returns a new latency value to use for a peer connection.
+    pub fn r#gen(&self, mut rng: impl Rng) -> Duration {
+        match self {
+            Self::Static(d) => *d,
+            // TODO(frando): use uniform distribution?
+            Self::Dynamic { min, max } => rng.random_range(*min..*max),
+        }
+    }
+}
+
+impl Default for LatencyConfig {
+    fn default() -> Self {
+        Self::default_dynamic()
+    }
+}
+
+/// Test network implementation.
+///
+/// A discrete event simulation of a gossip swarm.
+#[derive(Debug)]
+pub struct Network<PI, R> {
+    start: Instant,
+    time: Instant,
+    tick: usize,
+    peers: BTreeMap<PI, State<PI, R>>,
+    conns: BTreeSet<ConnId<PI>>,
+    events: VecDeque<(PI, TopicId, Event<PI>)>,
+    latencies: BTreeMap<ConnId<PI>, Duration>,
+    rng: R,
+    config: NetworkConfig,
+    queue: TimedEventQueue<PI>,
+}
+
+impl<PI, R> Network<PI, R> {
+    /// Creates a new network.
+    pub fn new(config: NetworkConfig, rng: R) -> Self {
+        let time = Instant::now();
+        Self {
+            tick: 0,
+            start: time,
+            time,
+            config,
+            queue: Default::default(),
+            peers: Default::default(),
+            conns: Default::default(),
+            events: Default::default(),
+            latencies: BTreeMap::new(),
+            rng,
+        }
+    }
+}
+
+impl<PI: PeerIdentity + fmt::Display, R: Rng + SeedableRng + Clone> Network<PI, R> {
+    /// Inserts a new peer.
+    ///
+    /// Panics if the peer already exists.
+    pub fn insert(&mut self, peer_id: PI) {
+        let config = self.config.proto.clone();
+        self.insert_with_config(peer_id, config);
+    }
+
+    /// Inserts a new peer with the specified protocol config.
+    ///
+    /// Panics if the peer already exists.
+    pub fn insert_with_config(&mut self, peer_id: PI, config: Config) {
+        assert!(
+            !self.peers.contains_key(&peer_id),
+            "duplicate peer: {peer_id:?}"
+        );
+        let rng = R::from_rng(&mut self.rng);
+        let state = State::new(peer_id, PeerData::default(), config, rng);
+        self.peers.insert(peer_id, state);
+    }
+
+    /// Inserts a new peer and joins a topic with a set of bootstrap nodes.
+    ///
+    /// Panics if the peer already exists.
+    pub fn insert_and_join(&mut self, peer_id: PI, topic: TopicId, bootstrap: Vec<PI>) {
+        self.insert(peer_id);
+        self.command(peer_id, topic, Command::Join(bootstrap));
+    }
+}
+
+impl<PI: PeerIdentity + fmt::Display, R: Rng + Clone> Network<PI, R> {
+    /// Drains all queued events.
+    pub fn events(&mut self) -> impl Iterator<Item = (PI, TopicId, Event<PI>)> + '_ {
+        self.events.drain(..)
+    }
+
+    /// Drains all queued events and returns them in a sorted vector.
+    pub fn events_sorted(&mut self) -> Vec<(PI, TopicId, Event<PI>)> {
+        sort(self.events().collect())
+    }
+
+    /// Returns all active connections.
+    pub fn conns(&self) -> Vec<(PI, PI)> {
+        sort(self.conns.iter().cloned().map(Into::into).collect())
+    }
+
+    /// Queues and performs a command.
+    pub fn command(&mut self, peer: PI, topic: TopicId, command: Command<PI>) {
+        debug!(?peer, "~~ COMMAND {command:?}");
+        self.queue
+            .insert(self.time, peer, InEvent::Command(topic, command));
+        self.tick();
+    }
+
+    /// Returns an iterator over the [`State`] for each peer.
+    pub fn peer_states(&self) -> impl Iterator<Item = &State<PI, R>> {
+        self.peers.values()
+    }
+
+    /// Returns an iterator over the node ids of all peers.
+    pub fn peer_ids(&self) -> impl Iterator<Item = PI> + '_ {
+        self.peers.keys().cloned()
+    }
+
+    /// Returns the [`State`] for a peer, if it exists.
+    pub fn peer(&self, peer: &PI) -> Option<&State<PI, R>> {
+        self.peers.get(peer)
+    }
+
+    /// Returns the neighbors a peer has on the swarm membership layer.
+    pub fn neighbors(&self, peer: &PI, topic: &TopicId) -> Option<Vec<PI>> {
+        let peer = self.peer(peer)?;
+        let state = peer.state(topic)?;
+        Some(state.swarm.active_view.iter().cloned().collect::<Vec<_>>())
+    }
+
+    /// Removes a peer, breaking all connections to other peers.
+    pub fn remove(&mut self, peer: &PI) {
+        let remove_conns: Vec<_> = self
+            .conns
+            .iter()
+            .filter(|&c| c.peers().contains(peer))
+            .cloned()
+            .collect();
+        for conn in remove_conns.into_iter() {
+            self.kill_connection(*peer, conn.other(*peer).unwrap());
+        }
+        self.peers.remove(peer);
+    }
+
+    /// Returns the time elapsed since starting the network.
+    pub fn elapsed(&self) -> Duration {
+        self.time.duration_since(self.start)
+    }
+
+    /// Returns the time elapsed since starting the network, formatted as seconds with limited decimals.
+    pub fn elapsed_fmt(&self) -> String {
+        format!("{:>2.4}s", self.elapsed().as_secs_f32())
+    }
+
+    /// Runs the simulation for `n` times the maximum latency between peers.
+    pub fn run_trips(&mut self, n: usize) {
+        let duration = self.config.latency.max() * n as u32;
+        self.run_duration(duration)
+    }
+
+    /// Runs the simulation for `timeout`.
+    pub fn run_duration(&mut self, timeout: Duration) {
+        let end = self.time + timeout;
+        while self.queue.next_before(end) {
+            self.tick();
+        }
+        assert!(self.time <= end);
+        self.time = end;
+    }
+
+    /// Runs the simulation while `f` returns `true`.
+    ///
+    /// The callback will be called for each emitted event.
+    pub fn run_while(&mut self, mut f: impl FnMut(PI, TopicId, Event<PI>) -> bool) {
+        loop {
+            while let Some((peer, topic, event)) = self.events.pop_front() {
+                if !f(peer, topic, event) {
+                    return;
+                }
+            }
+            self.tick();
+        }
+    }
+
+    /// Runs the simulation while `f` returns `true`, aborting after `timeout`.
+    ///
+    /// The callback will be called for each emitted event.
+    pub fn run_while_with_timeout(
+        &mut self,
+        timeout: Duration,
+        mut f: impl FnMut(PI, TopicId, Event<PI>) -> bool,
+    ) {
+        let end = self.time + timeout;
+        loop {
+            while let Some((peer, topic, event)) = self.events.pop_front() {
+                if !f(peer, topic, event) {
+                    return;
+                }
+            }
+            if self.queue.next_before(end) {
+                self.tick();
+            } else {
+                break;
+            }
+        }
+        assert!(self.time <= end);
+        self.time = end;
+    }
+
+    fn tick(&mut self) {
+        self.tick += 1;
+        let Some((time, peer, event)) = self.queue.pop() else {
+            warn!("tick on empty queue");
+            return;
+        };
+        assert!(time >= self.time);
+        self.time = time;
+        let span = debug_span!("tick", %peer, tick = %self.tick, t = %self.elapsed_fmt());
+        let _guard = span.enter();
+        debug!("~~ TICK ");
+
+        let Some(state) = self.peers.get_mut(&peer) else {
+            // TODO: queue PeerDisconnected for sender?
+            warn!(?time, ?peer, ?event, "event for dead peer");
+            return;
+        };
+        if let InEvent::RecvMessage(from, _message) = &event {
+            self.conns.insert((*from, peer).into());
+        }
+        let out = state.handle(event, self.time, None);
+        let mut kill = vec![];
+        for event in out {
+            match event {
+                OutEvent::SendMessage(to, message) => {
+                    let latency = latency_between(
+                        &self.config.latency,
+                        &mut self.latencies,
+                        &peer,
+                        &to,
+                        &mut self.rng,
+                    );
+                    self.queue
+                        .insert(self.time + latency, to, InEvent::RecvMessage(peer, message));
+                }
+                OutEvent::ScheduleTimer(time, timer) => {
+                    self.queue
+                        .insert(self.time + time, peer, InEvent::TimerExpired(timer));
+                }
+                OutEvent::DisconnectPeer(to) => {
+                    debug!(peer = ?peer, other = ?to, "disconnect");
+                    kill.push((peer, to));
+                }
+                OutEvent::EmitEvent(topic, event) => {
+                    debug!(peer = ?peer, "emit {event:?}");
+                    self.events.push_back((peer, topic, event));
+                }
+                OutEvent::PeerData(_peer, _data) => {}
+            }
+        }
+        for (from, to) in kill {
+            self.kill_connection(from, to);
+        }
+    }
+
+    /// Breaks the connection between two peers.
+    ///
+    /// The `to` peer will received a [`InEvent::PeerDisconnected`] after a latency interval.
+    fn kill_connection(&mut self, from: PI, to: PI) {
+        let conn = ConnId::from((from, to));
+        if self.conns.remove(&conn) {
+            // We add the event a microsecond after the regular latency between the two peers,
+            // so that any messages queued from the current time arrive before the disconnected event.
+            let latency = latency_between(
+                &self.config.latency,
+                &mut self.latencies,
+                &from,
+                &to,
+                &mut self.rng,
+            ) + Duration::from_micros(1);
+            self.queue
+                .insert(self.time + latency, to, InEvent::PeerDisconnected(from));
+        }
+    }
+
+    /// Checks if all neighbor and eager relations are synchronous.
+    ///
+    /// Iterates over all peers, and checks for each peer X:
+    /// - that all active view members (neighbors) have X listed as a neighbor as well
+    /// - that all eager peers have X listed as eager as well
+    ///
+    /// Returns `true` if this is holds, otherwise returns `false`.
+    ///
+    /// Logs, at debug level, the cases where the above doesn't hold.
+    pub fn check_synchronicity(&self) -> bool {
+        let mut ok = true;
+        for state in self.peers.values() {
+            let peer = *state.me();
+            for (topic, state) in state.states() {
+                for other in state.swarm.active_view.iter() {
+                    let other_state = &self
+                        .peers
+                        .get(other)
+                        .unwrap()
+                        .state(topic)
+                        .unwrap()
+                        .swarm
+                        .active_view;
+                    if !other_state.contains(&peer) {
+                        debug!(node = %peer, other = ?other, "missing active_view peer in other");
+                        ok = false;
+                    }
+                }
+                for other in state.gossip.eager_push_peers.iter() {
+                    let other_state = &self
+                        .peers
+                        .get(other)
+                        .unwrap()
+                        .state(topic)
+                        .unwrap()
+                        .gossip
+                        .eager_push_peers;
+                    if !other_state.contains(&peer) {
+                        debug!(node = %peer, other = ?other, "missing eager_push peer in other");
+                        ok = false;
+                    }
+                }
+            }
+        }
+        ok
+    }
+
+    /// Returns a report with histograms on active, passive, eager and lazy counts.
+    pub fn report(&self) -> NetworkReport<PI> {
+        let mut histograms = NetworkHistograms::default();
+        let mut peers_without_neighbors = Vec::new();
+        for (id, peer) in self.peers.iter() {
+            let state = peer.state(&TOPIC).unwrap();
+            add_one(&mut histograms.active, state.swarm.active_view.len());
+            add_one(&mut histograms.passive, state.swarm.passive_view.len());
+            add_one(&mut histograms.eager, state.gossip.eager_push_peers.len());
+            add_one(&mut histograms.lazy, state.gossip.lazy_push_peers.len());
+            if state.swarm.active_view.is_empty() {
+                peers_without_neighbors.push(*id);
+                trace!(node=%id, active = ?state.swarm.active_view.iter().collect::<Vec<_>>(), passive=?state.swarm.passive_view.iter().collect::<Vec<_>>(), "active view empty^");
+            }
+        }
+        NetworkReport {
+            histograms,
+            peer_count: self.peers.len(),
+            peers_without_neighbors,
+        }
+    }
+}
+
+fn latency_between<PI: PeerIdentity + Ord + PartialOrd, R: Rng>(
+    latency_config: &LatencyConfig,
+    latencies: &mut BTreeMap<ConnId<PI>, Duration>,
+    a: &PI,
+    b: &PI,
+    rng: &mut R,
+) -> Duration {
+    let id: ConnId<PI> = (*a, *b).into();
+    *latencies
+        .entry(id)
+        .or_insert_with(|| latency_config.r#gen(rng))
+}
+
+#[derive(Debug)]
+struct TimedEventQueue<PI> {
+    seq: i32,
+    events: BinaryHeap<(TimedEvent<PeerEvent<PI>>, i32)>,
+}
+
+impl<PI> Default for TimedEventQueue<PI> {
+    fn default() -> Self {
+        Self {
+            seq: 0,
+            events: Default::default(),
+        }
+    }
+}
+
+impl<PI> TimedEventQueue<PI> {
+    fn insert(&mut self, time: Instant, peer: PI, event: InEvent<PI>) {
+        let seq = self.seq;
+        self.seq += 1;
+        self.events.push((
+            TimedEvent {
+                time,
+                event: PeerEvent(peer, event),
+            },
+            -seq,
+        ))
+    }
+
+    fn pop(&mut self) -> Option<(Instant, PI, InEvent<PI>)> {
+        self.events
+            .pop()
+            .map(|(e, _)| (e.time, e.event.0, e.event.1))
+    }
+
+    fn peek_next(&self) -> Option<Instant> {
+        self.events.peek().map(|(e, _)| e.time)
+    }
+
+    fn next_before(&self, before: Instant) -> bool {
+        match self.peek_next() {
+            None => false,
+            Some(at) => at <= before,
+        }
+    }
+}
+
+#[derive(Debug)]
+struct TimedEvent<E> {
+    time: Instant,
+    event: E,
+}
+
+#[derive(Debug)]
+struct PeerEvent<PI>(PI, InEvent<PI>);
+
+impl<E> Eq for TimedEvent<E> {}
+
+impl<E> PartialEq for TimedEvent<E> {
+    fn eq(&self, other: &Self) -> bool {
+        self.time.eq(&other.time)
+    }
+}
+
+impl<E> PartialOrd for TimedEvent<E> {
+    fn partial_cmp(&self, other: &Self) -> Option<std::cmp::Ordering> {
+        Some(self.cmp(other))
+    }
+}
+
+impl<E> Ord for TimedEvent<E> {
+    fn cmp(&self, other: &Self) -> std::cmp::Ordering {
+        self.time.cmp(&other.time).reverse()
+    }
+}
+
+/// The peer id type used in the simulator.
+type PeerId = u64;
+
+/// Configuration for the [`Simulator`].
+#[derive(Debug, Serialize, Deserialize)]
+pub struct SimulatorConfig {
+    /// Seed for the random number generator used in the nodes
+    pub rng_seed: u64,
+    /// Number of nodes to create
+    pub peers: usize,
+    /// Timeout after which a gossip round is aborted
+    pub gossip_round_timeout: Duration,
+}
+
+/// Variants how to bootstrap the swarm.
+#[derive(Debug, Serialize, Deserialize, Clone, Default)]
+#[serde(rename_all = "lowercase")]
+pub enum BootstrapMode {
+    /// All peers join a single peer.
+    #[default]
+    Single,
+    /// First `count` bootstrap peers are created and join each other,
+    /// then the remaining peers join the swarm by joining one of these first `count` peers.
+    Set {
+        /// Number of bootstrap peers to join first
+        count: u64,
+    },
+}
+
+impl SimulatorConfig {
+    /// Creates a [`SimulatorConfig`] by reading from environment variables.
+    ///
+    /// [`Self::peers`] is read from `PEERS`, defaulting to `100` if unset.
+    /// [`Self::rng_seed`] is read from `SEED`, defaulting to `0` if unset.
+    /// [`Self::gossip_round_timeout`] is read, as seconds, from `GOSSIP_ROUND_TIMEOUT`, defaulting to `5` if unset.
+    pub fn from_env() -> Self {
+        let peer = read_var("PEERS", 100);
+        Self {
+            rng_seed: read_var("SEED", 0),
+            peers: peer,
+            gossip_round_timeout: Duration::from_secs(read_var("GOSSIP_ROUND_TIMEOUT", 5)),
+        }
+    }
+}
+
+impl Default for SimulatorConfig {
+    fn default() -> Self {
+        Self {
+            rng_seed: 0,
+            peers: 100,
+            gossip_round_timeout: Duration::from_secs(5),
+        }
+    }
+}
+
+/// Statistics for a gossip round.
+#[derive(Debug, Default, Clone, Serialize, Deserialize)]
+pub struct RoundStats {
+    /// The (simulated) time this round took in total.
+    pub duration: Duration,
+    /// The relative message redundancy in this round.
+    pub rmr: f32,
+    /// The maximum last delivery hop in this round.
+    pub ldh: f32,
+    /// The number of undelivered messages in this round.
+    pub missed: f32,
+}
+
+/// Difference (as factors) between two [`RoundStats`].
+#[derive(Debug, Default, Clone, Serialize, Deserialize)]
+pub struct RoundStatsDiff {
+    /// The difference in [`RoundStats::duration`], as a factor.
+    pub duration: f32,
+    /// The difference in [`RoundStats::rmr`], as a factor.
+    pub rmr: f32,
+    /// The difference in [`RoundStats::ldh`], as a factor.
+    pub ldh: f32,
+    /// The difference in [`RoundStats::missed`], as a factor.
+    pub missed: f32,
+}
+
+impl fmt::Display for RoundStats {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(
+            f,
+            "RMR {:>6.2} LDH {:>6.2} duration {:>6.2}ms missed {:>10.2}",
+            self.rmr,
+            self.ldh,
+            self.duration.as_millis(),
+            self.missed
+        )
+    }
+}
+
+impl RoundStats {
+    fn new_max() -> Self {
+        Self {
+            duration: Duration::MAX,
+            rmr: f32::MAX,
+            ldh: f32::MAX,
+            missed: f32::MAX,
+        }
+    }
+
+    /// Calculates the mean for each value in a list of [`RoundStats`].
+    pub fn mean<'a>(rounds: impl IntoIterator<Item = &'a RoundStats>) -> RoundStats {
+        let (len, mut avg) =
+            rounds
+                .into_iter()
+                .fold((0., RoundStats::default()), |(len, mut agg), round| {
+                    agg.rmr += round.rmr;
+                    agg.ldh += round.ldh;
+                    agg.duration += round.duration;
+                    agg.missed += round.missed;
+                    (len + 1., agg)
+                });
+        avg.rmr /= len;
+        avg.ldh /= len;
+        avg.missed /= len;
+        avg.duration /= len as u32;
+        avg
+    }
+
+    /// Calculates the minimum for each value in a list of [`RoundStats`].
+    pub fn min<'a>(rounds: impl IntoIterator<Item = &'a RoundStats>) -> RoundStats {
+        rounds
+            .into_iter()
+            .fold(RoundStats::new_max(), |mut agg, round| {
+                agg.rmr = agg.rmr.min(round.rmr);
+                agg.ldh = agg.ldh.min(round.ldh);
+                agg.duration = agg.duration.min(round.duration);
+                agg.missed = agg.missed.min(round.missed);
+                agg
+            })
+    }
+
+    /// Calculates the maximum for each value in a list of [`RoundStats`].
+    pub fn max<'a>(rounds: impl IntoIterator<Item = &'a RoundStats>) -> RoundStats {
+        rounds
+            .into_iter()
+            .fold(RoundStats::default(), |mut agg, round| {
+                agg.rmr = agg.rmr.max(round.rmr);
+                agg.ldh = agg.ldh.max(round.ldh);
+                agg.duration = agg.duration.max(round.duration);
+                agg.missed = agg.missed.max(round.missed);
+                agg
+            })
+    }
+
+    /// Calculates the minimum, maximum, and mean for each value in a list of [`RoundStats`].
+    pub fn avg(rounds: &[RoundStats]) -> RoundStatsAvg {
+        let len = rounds.len();
+        let min = Self::min(rounds);
+        let max = Self::max(rounds);
+        let mean = Self::mean(rounds);
+        RoundStatsAvg {
+            len,
+            min,
+            max,
+            mean,
+        }
+    }
+
+    /// Calculates the difference factors for each value between `self` and `other`.
+    pub fn diff(&self, other: &Self) -> RoundStatsDiff {
+        RoundStatsDiff {
+            duration: diff_percent(self.duration.as_secs_f32(), other.duration.as_secs_f32()),
+            rmr: diff_percent(self.rmr, other.rmr),
+            ldh: diff_percent(self.ldh, other.ldh),
+            missed: diff_percent(self.missed, other.missed),
+        }
+    }
+}
+
+fn diff_percent(a: f32, b: f32) -> f32 {
+    if a == 0.0 && b == 0.0 {
+        0.0
+    } else if b == 0.0 {
+        -1.0
+    } else if a == 0.0 {
+        1.0
+    } else {
+        (b - a) / a
+    }
+}
+
+/// Summary values for a list of [`RoundStats`].
+#[derive(Debug, Default, Clone, Serialize, Deserialize)]
+pub struct RoundStatsAvg {
+    /// The number of rounds for which this average is calculated.
+    pub len: usize,
+    /// The minimum values of the list.
+    pub min: RoundStats,
+    /// The maximum values of the list.
+    pub max: RoundStats,
+    /// The mean values of the list.
+    pub mean: RoundStats,
+}
+
+/// Difference, in factors, between two [`RoundStatsAvg`]
+#[derive(Debug, Default, Clone, Serialize, Deserialize)]
+pub struct RoundStatsAvgDiff {
+    /// The difference, as factors, in the minimums.
+    pub min: RoundStatsDiff,
+    /// The difference, as factors, in the maximumx.
+    pub max: RoundStatsDiff,
+    /// The difference, as factors, in the mean values.
+    pub mean: RoundStatsDiff,
+}
+
+impl RoundStatsAvg {
+    /// Calculates the difference, as factors, between `self` and `other`.
+    pub fn diff(&self, other: &Self) -> RoundStatsAvgDiff {
+        RoundStatsAvgDiff {
+            min: self.min.diff(&other.min),
+            max: self.max.diff(&other.max),
+            mean: self.mean.diff(&other.mean),
+        }
+    }
+
+    /// Calculates the average between a list of [`RoundStatsAvg`].
+    pub fn avg(rows: &[Self]) -> Self {
+        let len = rows.iter().map(|row| row.len).sum();
+        let min = RoundStats::min(rows.iter().map(|x| &x.min));
+        let max = RoundStats::min(rows.iter().map(|x| &x.max));
+        let mean = RoundStats::min(rows.iter().map(|x| &x.mean));
+        Self {
+            min,
+            max,
+            mean,
+            len,
+        }
+    }
+}
+
+/// Histograms on the distribution of peers in the network.
+///
+/// For each field, the map's key is the bucket value, and the map's value is
+/// the number of peers that fall into that bucket.
+#[derive(Debug, Default)]
+pub struct NetworkHistograms {
+    /// Distribution of active view (neighbor) counts.
+    pub active: BTreeMap<usize, usize>,
+    /// Distribution of passive view counts.
+    pub passive: BTreeMap<usize, usize>,
+    /// Distribution of eager peer counts.
+    pub eager: BTreeMap<usize, usize>,
+    /// Distribution of lazy peer counts.
+    pub lazy: BTreeMap<usize, usize>,
+}
+
+fn avg(map: &BTreeMap<usize, usize>) -> f32 {
+    let (sum, count) = map
+        .iter()
+        .fold((0, 0), |(sum, count), (k, v)| (sum + k * v, count + v));
+    if count != 0 {
+        sum as f32 / count as f32
+    } else {
+        0.
+    }
+}
+
+fn min(map: &BTreeMap<usize, usize>) -> usize {
+    map.first_key_value().map(|(k, _v)| *k).unwrap_or_default()
+}
+
+fn max(map: &BTreeMap<usize, usize>) -> usize {
+    map.last_key_value().map(|(k, _v)| *k).unwrap_or_default()
+}
+
+impl fmt::Display for NetworkHistograms {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        write!(
+            f,
+            "    eager {:?}\n    lazy {:?}\n    active {:?}\n    passive {:?}",
+            self.eager, self.lazy, self.active, self.passive
+        )
+    }
+}
+
+/// A report on the state of a [`Network`].
+#[derive(Debug)]
+pub struct NetworkReport<PI> {
+    /// The number of peers in the network.
+    pub peer_count: usize,
+    /// List of peers that don't have any neighbors.
+    pub peers_without_neighbors: Vec<PI>,
+    /// Histograms of peer distribution metrics.
+    pub histograms: NetworkHistograms,
+}
+
+impl<PI> NetworkReport<PI> {
+    /// Returns `true` if the network contains peers that have no active neighbors.
+    pub fn has_peers_with_no_neighbors(&self) -> bool {
+        *self.histograms.active.get(&0).unwrap_or(&0) > 0
+    }
+}
+
+impl<PI> fmt::Display for NetworkReport<PI> {
+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
+        writeln!(f, "peers: {}\n{}", self.peer_count, self.histograms)?;
+        if self.peers_without_neighbors.is_empty() {
+            writeln!(f, "(all have neighbors)")
+        } else {
+            writeln!(
+                f,
+                "({} peers have no neighbors)",
+                self.peers_without_neighbors.len()
+            )
+        }
+    }
+}
+
+const TOPIC: TopicId = TopicId::from_bytes([0u8; 32]);
+
+/// A simulator for the gossip protocol
+#[derive(Debug)]
+pub struct Simulator {
+    /// Configuration of the simulator.
+    pub config: SimulatorConfig,
+    /// The [`Network`]
+    pub network: Network<PeerId, rand_chacha::ChaCha12Rng>,
+    /// List of [`RoundStats`] of all previous rounds.
+    round_stats: Vec<RoundStats>,
+}
+
+impl Simulator {
+    /// Creates a new simulator.
+    pub fn new(
+        simulator_config: SimulatorConfig,
+        network_config: impl Into<NetworkConfig>,
+    ) -> Self {
+        let network_config = network_config.into();
+        info!("start {simulator_config:?} {network_config:?}");
+        let rng = rand_chacha::ChaCha12Rng::seed_from_u64(simulator_config.rng_seed);
+        Self {
+            network: Network::new(network_config, rng),
+            config: simulator_config,
+            round_stats: Default::default(),
+        }
+    }
+
+    /// Creates a new random number generator, derived from the simuator's RNG.
+    pub fn rng(&mut self) -> ChaCha12Rng {
+        ChaCha12Rng::from_rng(&mut self.network.rng)
+    }
+
+    /// Returns the peer id of a random peer.
+    pub fn random_peer(&mut self) -> PeerId {
+        *self
+            .network
+            .peers
+            .keys()
+            .choose(&mut self.network.rng)
+            .unwrap()
+    }
+
+    /// Returns the number of peers.
+    pub fn peer_count(&self) -> usize {
+        self.network.peers.len()
+    }
+
+    /// Removes `n` peers from the network.
+    pub fn remove_peers(&mut self, n: usize) {
+        for _i in 0..n {
+            let key = self.random_peer();
+            self.network.remove(&key);
+        }
+    }
+
+    /// Returns a report on the current state of the network.
+    pub fn report(&mut self) -> NetworkReport<PeerId> {
+        let report = self.network.report();
+        let min_active_len = min(&report.histograms.active);
+        let max_active_len = max(&report.histograms.active);
+        let avg = avg(&report.histograms.active);
+        let len = report.peer_count;
+        debug!(
+            "nodes {len} active: avg {avg:2.2} min {min_active_len} max {max_active_len} empty {}",
+            report.peers_without_neighbors.len()
+        );
+        report
+    }
+
+    /// Bootstraps the network.
+    ///
+    /// See [`BootstrapMode`] for details.
+    ///
+    /// Returns the [`NetworkReport`] after finishing the bootstrap.
+    pub fn bootstrap(&mut self, bootstrap_mode: BootstrapMode) -> NetworkReport<PeerId> {
+        let span = info_span!("bootstrap");
+        let _guard = span.enter();
+        info!("bootstrap {bootstrap_mode:?}");
+
+        let node_count = self.config.peers as u64;
+
+        match bootstrap_mode {
+            BootstrapMode::Single => {
+                self.network.insert_and_join(0, TOPIC, vec![]);
+                for i in 1..node_count {
+                    self.network.insert_and_join(i, TOPIC, vec![0]);
+                }
+                self.network.run_trips(20);
+            }
+            BootstrapMode::Set { count } => {
+                self.network.insert_and_join(0, TOPIC, vec![]);
+                for i in 1..count {
+                    self.network.insert_and_join(i, TOPIC, vec![0]);
+                }
+
+                self.network.run_trips(7);
+
+                for i in count..node_count {
+                    let contact = self.network.rng.random_range(0..count);
+                    self.network.insert_and_join(i, TOPIC, vec![contact]);
+                }
+
+                self.network.run_trips(20);
+            }
+        }
+
+        let report = self.report();
+        if report.has_peers_with_no_neighbors() {
+            warn!("failed to keep all nodes active after warmup: {report:?}");
+        } else {
+            info!("bootstrap complete, all nodes active");
+        }
+        report
+    }
+
+    /// Runs a round of gossiping.
+    ///
+    /// `messages` is a list of `(sender, message)` pairs. All messages will be sent simultaneously.
+    /// The round will run until all peers received all messages, or until [`SimulatorConfig::gossip_round_timeout`]
+    /// is elapsed.
+    ///
+    /// Returns the number of undelivered messages.
+    pub fn gossip_round(&mut self, messages: Vec<(PeerId, Bytes)>) -> usize {
+        let span = debug_span!("g", r = self.round_stats.len());
+        let _guard = span.enter();
+        self.reset_stats();
+        let start = self.network.time;
+        let expected_count: usize = messages.len() * (self.network.peers.len() - 1);
+        info!(
+            time=%self.network.elapsed_fmt(),
+            "round {i}: send {len} messages / recv {expected_count} total",
+            len = messages.len(),
+            i = self.round_stats.len()
+        );
+
+        // Send messages and keep track of expected receives
+        let mut missing: BTreeMap<PeerId, BTreeSet<Bytes>> = BTreeMap::new();
+        for (from, message) in messages {
+            for peer in self.network.peer_ids().filter(|p| *p != from) {
+                missing.entry(peer).or_default().insert(message.clone());
+            }
+            self.network
+                .command(from, TOPIC, Command::Broadcast(message, Scope::Swarm));
+        }
+
+        let timeout = self.config.gossip_round_timeout;
+        let mut received_count = 0;
+        self.network
+            .run_while_with_timeout(timeout, |peer, _topic, event| {
+                if let Event::Received(message) = event {
+                    let set = missing.get_mut(&peer).unwrap();
+                    if !set.remove(&message.content) {
+                        panic!("received duplicate message event");
+                    } else if set.is_empty() {
+                        missing.remove(&peer);
+                    }
+                    received_count += 1;
+                }
+                received_count != expected_count
+            });
+
+        let missing_count: usize = expected_count - received_count;
+        if missing_count == 0 {
+            info!("break: all messages received by all peers");
+        } else {
+            warn!("break: max ticks for round exceeded (still missing {missing_count})");
+            debug!("missing: {missing:?}");
+        }
+        let elapsed = self.network.time.duration_since(start);
+        self.report_gossip_round(expected_count, missing_count, elapsed);
+        missing_count
+    }
+
+    fn report_gossip_round(
+        &mut self,
+        expected_recv_count: usize,
+        missed: usize,
+        duration: Duration,
+    ) {
+        let payloud_msg_count = self.total_payload_messages();
+        let ctrl_msg_count = self.total_control_messages();
+        let rmr_expected_count = expected_recv_count - missed;
+        let rmr = (payloud_msg_count as f32 / (rmr_expected_count as f32 - 1.)) - 1.;
+        let ldh = self.max_ldh();
+
+        let round_stats = RoundStats {
+            duration,
+            rmr,
+            ldh: ldh as f32,
+            missed: missed as f32,
+        };
+        let histograms = self.network.report().histograms;
+        info!(
+            "round {}: pay {} ctrl {} {round_stats} \n{histograms}",
+            self.round_stats.len(),
+            payloud_msg_count,
+            ctrl_msg_count,
+        );
+        self.round_stats.push(round_stats);
+    }
+
+    /// Calculates the [`RoundStatsAvg`] of all gossip rounds.
+    pub fn round_stats_average(&self) -> RoundStatsAvg {
+        RoundStats::avg(&self.round_stats)
+    }
+
+    fn reset_stats(&mut self) {
+        for state in self.network.peers.values_mut() {
+            state.reset_stats(&TOPIC);
+        }
+    }
+
+    fn max_ldh(&self) -> u16 {
+        let mut max = 0;
+        for state in self.network.peers.values() {
+            let state = state.state(&TOPIC).unwrap();
+            let stats = state.gossip.stats();
+            max = max.max(stats.max_last_delivery_hop);
+        }
+        max
+    }
+
+    fn total_payload_messages(&self) -> u64 {
+        let mut sum = 0;
+        for state in self.network.peers.values() {
+            let state = state.state(&TOPIC).unwrap();
+            let stats = state.gossip.stats();
+            sum += stats.payload_messages_received;
+        }
+        sum
+    }
+
+    fn total_control_messages(&self) -> u64 {
+        let mut sum = 0;
+        for state in self.network.peers.values() {
+            let state = state.state(&TOPIC).unwrap();
+            let stats = state.gossip.stats();
+            sum += stats.control_messages_received;
+        }
+        sum
+    }
+}
+
+fn add_one(map: &mut BTreeMap<usize, usize>, key: usize) {
+    let entry = map.entry(key).or_default();
+    *entry += 1;
+}
+
+/// Helper struct for active connections. A sorted tuple.
+#[derive(Debug, Clone, PartialOrd, Ord, Eq, PartialEq, Hash)]
+struct ConnId<PI>([PI; 2]);
+impl<PI: Ord + Copy> ConnId<PI> {
+    fn new(a: PI, b: PI) -> Self {
+        let mut conn = [a, b];
+        conn.sort();
+        Self(conn)
+    }
+    fn peers(&self) -> [PI; 2] {
+        self.0
+    }
+
+    fn other(&self, other: PI) -> Option<PI> {
+        if self.0[0] == other {
+            Some(self.0[1])
+        } else if self.0[1] == other {
+            Some(self.0[0])
+        } else {
+            None
+        }
+    }
+}
+impl<PI: Ord + Copy> From<(PI, PI)> for ConnId<PI> {
+    fn from((a, b): (PI, PI)) -> Self {
+        Self::new(a, b)
+    }
+}
+impl<PI: Copy> From<ConnId<PI>> for (PI, PI) {
+    fn from(conn: ConnId<PI>) -> (PI, PI) {
+        (conn.0[0], conn.0[1])
+    }
+}
+
+fn sort<T: Ord + Clone>(items: Vec<T>) -> Vec<T> {
+    let mut sorted = items;
+    sorted.sort();
+    sorted
+}
+
+fn read_var<T: FromStr<Err: fmt::Display + fmt::Debug>>(name: &str, default: T) -> T {
+    std::env::var(name)
+        .map(|x| {
+            x.parse()
+                .unwrap_or_else(|_| panic!("Failed to parse environment variable {name}"))
+        })
+        .unwrap_or(default)
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/state.rs b/third_party/iroh-org/iroh-gossip/src/proto/state.rs
new file mode 100644
index 0000000..ee4b9c8
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/state.rs
@@ -0,0 +1,381 @@
+//! The protocol state of the `iroh-gossip` protocol.
+
+use std::collections::{hash_map, HashMap, HashSet};
+
+use n0_future::time::{Duration, Instant};
+use rand::Rng;
+use serde::{Deserialize, Serialize};
+use tracing::trace;
+
+use crate::{
+    metrics::Metrics,
+    proto::{
+        topic::{self, Command},
+        util::idbytes_impls,
+        Config, PeerData, PeerIdentity, MIN_MAX_MESSAGE_SIZE,
+    },
+};
+
+/// The identifier for a topic
+#[derive(Clone, Copy, Eq, PartialEq, Hash, Serialize, Ord, PartialOrd, Deserialize)]
+pub struct TopicId([u8; 32]);
+idbytes_impls!(TopicId, "TopicId");
+
+impl TopicId {
+    /// Convert to a hex string limited to the first 5 bytes for a friendly string
+    /// representation of the key.
+    pub fn fmt_short(&self) -> String {
+        data_encoding::HEXLOWER.encode(&self.as_bytes()[..5])
+    }
+}
+
+/// Protocol wire message
+///
+/// This is the wire frame of the `iroh-gossip` protocol.
+#[derive(Clone, Debug, Serialize, Deserialize)]
+pub struct Message<PI> {
+    pub(crate) topic: TopicId,
+    pub(crate) message: topic::Message<PI>,
+}
+
+impl<PI> Message<PI> {
+    /// Get the kind of this message
+    pub fn kind(&self) -> MessageKind {
+        self.message.kind()
+    }
+}
+
+impl<PI: Serialize> Message<PI> {
+    pub(crate) fn postcard_header_size() -> usize {
+        // We create a message that has no payload (gossip::Message::Prune), calculate the encoded size,
+        // and subtract 1 for the discriminator of the inner gossip::Message enum.
+        let m = Self {
+            topic: TopicId(Default::default()),
+            message: topic::Message::<PI>::Gossip(super::plumtree::Message::Prune),
+        };
+        postcard::experimental::serialized_size(&m).unwrap() - 1
+    }
+}
+
+/// Whether this is a control or data message
+#[derive(Debug)]
+pub enum MessageKind {
+    /// A data message.
+    Data,
+    /// A control message.
+    Control,
+}
+
+impl<PI: Serialize> Message<PI> {
+    /// Get the encoded size of this message
+    pub fn size(&self) -> postcard::Result<usize> {
+        postcard::experimental::serialized_size(&self)
+    }
+}
+
+/// A timer to be registered into the runtime
+///
+/// As the implementation of the protocol is an IO-less state machine, registering timers does not
+/// happen within the protocol implementation. Instead, these `Timer` structs are emitted as
+/// [`OutEvent`]s. The implementer must register the timer in its runtime to be emitted on the specified [`Instant`],
+/// and once triggered inject an [`InEvent::TimerExpired`] into the protocol state.
+#[derive(Clone, Debug)]
+pub struct Timer<PI> {
+    topic: TopicId,
+    timer: topic::Timer<PI>,
+}
+
+/// Input event to the protocol state.
+#[derive(Clone, Debug)]
+pub enum InEvent<PI> {
+    /// Message received from the network.
+    RecvMessage(PI, Message<PI>),
+    /// Execute a command from the application.
+    Command(TopicId, Command<PI>),
+    /// Trigger a previously scheduled timer.
+    TimerExpired(Timer<PI>),
+    /// Peer disconnected on the network level.
+    PeerDisconnected(PI),
+    /// Update the opaque peer data about yourself.
+    UpdatePeerData(PeerData),
+}
+
+/// Output event from the protocol state.
+#[derive(Debug, Clone)]
+pub enum OutEvent<PI> {
+    /// Send a message on the network
+    SendMessage(PI, Message<PI>),
+    /// Emit an event to the application.
+    EmitEvent(TopicId, topic::Event<PI>),
+    /// Schedule a timer. The runtime is responsible for sending an [InEvent::TimerExpired]
+    /// after the duration.
+    ScheduleTimer(Duration, Timer<PI>),
+    /// Close the connection to a peer on the network level.
+    DisconnectPeer(PI),
+    /// Updated peer data
+    PeerData(PI, PeerData),
+}
+
+type ConnsMap<PI> = HashMap<PI, HashSet<TopicId>>;
+type Outbox<PI> = Vec<OutEvent<PI>>;
+
+enum InEventMapped<PI> {
+    All(topic::InEvent<PI>),
+    TopicEvent(TopicId, topic::InEvent<PI>),
+}
+
+impl<PI> From<InEvent<PI>> for InEventMapped<PI> {
+    fn from(event: InEvent<PI>) -> InEventMapped<PI> {
+        match event {
+            InEvent::RecvMessage(from, Message { topic, message }) => {
+                Self::TopicEvent(topic, topic::InEvent::RecvMessage(from, message))
+            }
+            InEvent::Command(topic, command) => {
+                Self::TopicEvent(topic, topic::InEvent::Command(command))
+            }
+            InEvent::TimerExpired(Timer { topic, timer }) => {
+                Self::TopicEvent(topic, topic::InEvent::TimerExpired(timer))
+            }
+            InEvent::PeerDisconnected(peer) => Self::All(topic::InEvent::PeerDisconnected(peer)),
+            InEvent::UpdatePeerData(data) => Self::All(topic::InEvent::UpdatePeerData(data)),
+        }
+    }
+}
+
+/// The state of the `iroh-gossip` protocol.
+///
+/// The implementation works as an IO-less state machine. The implementer injects events through
+/// [`Self::handle`], which returns an iterator of [`OutEvent`]s to be processed.
+///
+/// This struct contains a map of [`topic::State`] for each topic that was joined. It mostly acts as
+/// a forwarder of [`InEvent`]s to matching topic state. Each topic's state is completely
+/// independent; thus the actual protocol logic lives with [`topic::State`].
+#[derive(Debug)]
+pub struct State<PI, R> {
+    me: PI,
+    me_data: PeerData,
+    config: Config,
+    rng: R,
+    states: HashMap<TopicId, topic::State<PI, R>>,
+    outbox: Outbox<PI>,
+    peer_topics: ConnsMap<PI>,
+}
+
+impl<PI: PeerIdentity, R: Rng + Clone> State<PI, R> {
+    /// Create a new protocol state instance.
+    ///
+    /// `me` is the [`PeerIdentity`] of the local node, `peer_data` is the initial [`PeerData`]
+    /// (which can be updated over time).
+    /// For the protocol to perform as recommended in the papers, the [`Config`] should be
+    /// identical for all nodes in the network.
+    ///
+    /// ## Panics
+    ///
+    /// Panics if [`Config::max_message_size`] is below [`MIN_MAX_MESSAGE_SIZE`].
+    pub fn new(me: PI, me_data: PeerData, config: Config, rng: R) -> Self {
+        assert!(
+            config.max_message_size >= MIN_MAX_MESSAGE_SIZE,
+            "max_message_size must be at least {MIN_MAX_MESSAGE_SIZE}"
+        );
+        Self {
+            me,
+            me_data,
+            config,
+            rng,
+            states: Default::default(),
+            outbox: Default::default(),
+            peer_topics: Default::default(),
+        }
+    }
+
+    /// Get a reference to the node's [`PeerIdentity`]
+    pub fn me(&self) -> &PI {
+        &self.me
+    }
+
+    /// Get a reference to the protocol state for a topic.
+    pub fn state(&self, topic: &TopicId) -> Option<&topic::State<PI, R>> {
+        self.states.get(topic)
+    }
+
+    /// Resets the tracked stats for a topic.
+    pub fn reset_stats(&mut self, topic: &TopicId) {
+        if let Some(state) = self.states.get_mut(topic) {
+            state.reset_stats();
+        }
+    }
+
+    /// Get an iterator of all joined topics.
+    pub fn topics(&self) -> impl Iterator<Item = &TopicId> {
+        self.states.keys()
+    }
+
+    /// Get an iterator for the states of all joined topics.
+    pub fn states(&self) -> impl Iterator<Item = (&TopicId, &topic::State<PI, R>)> {
+        self.states.iter()
+    }
+
+    /// Check if a topic has any active (connected) peers.
+    pub fn has_active_peers(&self, topic: &TopicId) -> bool {
+        self.state(topic)
+            .map(|s| s.has_active_peers())
+            .unwrap_or(false)
+    }
+
+    /// Returns the maximum message size configured in the gossip protocol.
+    pub fn max_message_size(&self) -> usize {
+        self.config.max_message_size
+    }
+
+    /// Handle an [`InEvent`]
+    ///
+    /// This returns an iterator of [`OutEvent`]s that must be processed.
+    pub fn handle(
+        &mut self,
+        event: InEvent<PI>,
+        now: Instant,
+        metrics: Option<&Metrics>,
+    ) -> impl Iterator<Item = OutEvent<PI>> + '_ + use<'_, PI, R> {
+        trace!("in : {event:?}");
+        if let Some(metrics) = &metrics {
+            track_in_event(&event, metrics);
+        }
+
+        let event: InEventMapped<PI> = event.into();
+
+        match event {
+            InEventMapped::TopicEvent(topic, event) => {
+                // when receiving a join command, initialize state if it doesn't exist
+                if matches!(&event, topic::InEvent::Command(Command::Join(_peers))) {
+                    if let hash_map::Entry::Vacant(e) = self.states.entry(topic) {
+                        e.insert(topic::State::with_rng(
+                            self.me,
+                            Some(self.me_data.clone()),
+                            self.config.clone(),
+                            self.rng.clone(),
+                        ));
+                    }
+                }
+
+                // when receiving a quit command, note this and drop the topic state after
+                // processing this last event
+                let quit = matches!(event, topic::InEvent::Command(Command::Quit));
+
+                // pass the event to the state handler
+                if let Some(state) = self.states.get_mut(&topic) {
+                    // when receiving messages, update our conn map to take note that this topic state may want
+                    // to keep this connection
+                    if let topic::InEvent::RecvMessage(from, _message) = &event {
+                        self.peer_topics.entry(*from).or_default().insert(topic);
+                    }
+                    let out = state.handle(event, now);
+                    for event in out {
+                        handle_out_event(topic, event, &mut self.peer_topics, &mut self.outbox);
+                    }
+                }
+
+                if quit {
+                    self.states.remove(&topic);
+                }
+            }
+            // when a peer disconnected on the network level, forward event to all states
+            InEventMapped::All(event) => {
+                if let topic::InEvent::UpdatePeerData(data) = &event {
+                    self.me_data = data.clone();
+                }
+                for (topic, state) in self.states.iter_mut() {
+                    let out = state.handle(event.clone(), now);
+                    for event in out {
+                        handle_out_event(*topic, event, &mut self.peer_topics, &mut self.outbox);
+                    }
+                }
+            }
+        }
+
+        // track metrics
+        if let Some(metrics) = &metrics {
+            track_out_events(&self.outbox, metrics);
+        }
+
+        self.outbox.drain(..)
+    }
+}
+
+fn handle_out_event<PI: PeerIdentity>(
+    topic: TopicId,
+    event: topic::OutEvent<PI>,
+    conns: &mut ConnsMap<PI>,
+    outbox: &mut Outbox<PI>,
+) {
+    trace!("out: {event:?}");
+    match event {
+        topic::OutEvent::SendMessage(to, message) => {
+            outbox.push(OutEvent::SendMessage(to, Message { topic, message }))
+        }
+        topic::OutEvent::EmitEvent(event) => outbox.push(OutEvent::EmitEvent(topic, event)),
+        topic::OutEvent::ScheduleTimer(delay, timer) => {
+            outbox.push(OutEvent::ScheduleTimer(delay, Timer { topic, timer }))
+        }
+        topic::OutEvent::DisconnectPeer(peer) => {
+            let empty = conns
+                .get_mut(&peer)
+                .map(|list| list.remove(&topic) || list.is_empty())
+                .unwrap_or(false);
+            if empty {
+                conns.remove(&peer);
+                outbox.push(OutEvent::DisconnectPeer(peer));
+            }
+        }
+        topic::OutEvent::PeerData(peer, data) => outbox.push(OutEvent::PeerData(peer, data)),
+    }
+}
+
+fn track_out_events<PI: Serialize>(events: &[OutEvent<PI>], metrics: &Metrics) {
+    for event in events {
+        match event {
+            OutEvent::SendMessage(_to, message) => match message.kind() {
+                MessageKind::Data => {
+                    metrics.msgs_data_sent.inc();
+                    metrics
+                        .msgs_data_sent_size
+                        .inc_by(message.size().unwrap_or(0) as u64);
+                }
+                MessageKind::Control => {
+                    metrics.msgs_ctrl_sent.inc();
+                    metrics
+                        .msgs_ctrl_sent_size
+                        .inc_by(message.size().unwrap_or(0) as u64);
+                }
+            },
+            OutEvent::EmitEvent(_topic, event) => match event {
+                super::Event::NeighborUp(_peer) => {
+                    metrics.neighbor_up.inc();
+                }
+                super::Event::NeighborDown(_peer) => {
+                    metrics.neighbor_down.inc();
+                }
+                _ => {}
+            },
+            _ => {}
+        }
+    }
+}
+
+fn track_in_event<PI: Serialize>(event: &InEvent<PI>, metrics: &Metrics) {
+    if let InEvent::RecvMessage(_from, message) = event {
+        match message.kind() {
+            MessageKind::Data => {
+                metrics.msgs_data_recv.inc();
+                metrics
+                    .msgs_data_recv_size
+                    .inc_by(message.size().unwrap_or(0) as u64);
+            }
+            MessageKind::Control => {
+                metrics.msgs_ctrl_recv.inc();
+                metrics
+                    .msgs_ctrl_recv_size
+                    .inc_by(message.size().unwrap_or(0) as u64);
+            }
+        }
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/topic.rs b/third_party/iroh-org/iroh-gossip/src/proto/topic.rs
new file mode 100644
index 0000000..a5af0ef
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/topic.rs
@@ -0,0 +1,363 @@
+//! This module contains the implementation of the gossiping protocol for an individual topic
+
+use std::collections::VecDeque;
+
+use bytes::Bytes;
+use derive_more::From;
+use n0_future::time::{Duration, Instant};
+use rand::Rng;
+use serde::{Deserialize, Serialize};
+
+use super::{
+    hyparview::{self, InEvent as SwarmIn},
+    plumtree::{self, GossipEvent, InEvent as GossipIn, Scope},
+    state::MessageKind,
+    PeerData, PeerIdentity, DEFAULT_MAX_MESSAGE_SIZE,
+};
+use crate::proto::MIN_MAX_MESSAGE_SIZE;
+
+/// Input event to the topic state handler.
+#[derive(Clone, Debug)]
+pub enum InEvent<PI> {
+    /// Message received from the network.
+    RecvMessage(PI, Message<PI>),
+    /// Execute a command from the application.
+    Command(Command<PI>),
+    /// Trigger a previously scheduled timer.
+    TimerExpired(Timer<PI>),
+    /// Peer disconnected on the network level.
+    PeerDisconnected(PI),
+    /// Update the opaque peer data about yourself.
+    UpdatePeerData(PeerData),
+}
+
+/// An output event from the state handler.
+#[derive(Debug, PartialEq, Eq)]
+pub enum OutEvent<PI> {
+    /// Send a message on the network
+    SendMessage(PI, Message<PI>),
+    /// Emit an event to the application.
+    EmitEvent(Event<PI>),
+    /// Schedule a timer. The runtime is responsible for sending an [InEvent::TimerExpired]
+    /// after the duration.
+    ScheduleTimer(Duration, Timer<PI>),
+    /// Close the connection to a peer on the network level.
+    DisconnectPeer(PI),
+    /// Emitted when new [`PeerData`] was received for a peer.
+    PeerData(PI, PeerData),
+}
+
+impl<PI> From<hyparview::OutEvent<PI>> for OutEvent<PI> {
+    fn from(event: hyparview::OutEvent<PI>) -> Self {
+        use hyparview::OutEvent::*;
+        match event {
+            SendMessage(to, message) => Self::SendMessage(to, message.into()),
+            ScheduleTimer(delay, timer) => Self::ScheduleTimer(delay, timer.into()),
+            DisconnectPeer(peer) => Self::DisconnectPeer(peer),
+            EmitEvent(event) => Self::EmitEvent(event.into()),
+            PeerData(peer, data) => Self::PeerData(peer, data),
+        }
+    }
+}
+
+impl<PI> From<plumtree::OutEvent<PI>> for OutEvent<PI> {
+    fn from(event: plumtree::OutEvent<PI>) -> Self {
+        use plumtree::OutEvent::*;
+        match event {
+            SendMessage(to, message) => Self::SendMessage(to, message.into()),
+            ScheduleTimer(delay, timer) => Self::ScheduleTimer(delay, timer.into()),
+            EmitEvent(event) => Self::EmitEvent(event.into()),
+        }
+    }
+}
+
+/// A trait for a concrete type to push `OutEvent`s to.
+///
+/// The implementation is generic over this trait, which allows the upper layer to supply a
+/// container of their choice for `OutEvent`s emitted from the protocol state.
+pub trait IO<PI: Clone> {
+    /// Push an event in the IO container
+    fn push(&mut self, event: impl Into<OutEvent<PI>>);
+
+    /// Push all events from an iterator into the IO container
+    fn push_from_iter(&mut self, iter: impl IntoIterator<Item = impl Into<OutEvent<PI>>>) {
+        for event in iter.into_iter() {
+            self.push(event);
+        }
+    }
+}
+
+/// A protocol message for a particular topic
+#[derive(From, Debug, Serialize, Deserialize, Clone, PartialEq, Eq)]
+pub enum Message<PI> {
+    /// A message of the swarm membership layer
+    Swarm(hyparview::Message<PI>),
+    /// A message of the gossip broadcast layer
+    Gossip(plumtree::Message),
+}
+
+impl<PI> Message<PI> {
+    /// Get the kind of this message
+    pub fn kind(&self) -> MessageKind {
+        match self {
+            Message::Swarm(_) => MessageKind::Control,
+            Message::Gossip(message) => match message {
+                plumtree::Message::Gossip(_) => MessageKind::Data,
+                _ => MessageKind::Control,
+            },
+        }
+    }
+
+    /// Returns `true` if this is a disconnect message (which is the last message sent to a peer per topic).
+    pub fn is_disconnect(&self) -> bool {
+        matches!(self, Message::Swarm(hyparview::Message::Disconnect(_)))
+    }
+}
+
+/// An event to be emitted to the application for a particular topic.
+#[derive(Clone, PartialEq, Eq, PartialOrd, Ord, Debug, Serialize, Deserialize)]
+pub enum Event<PI> {
+    /// We have a new, direct neighbor in the swarm membership layer for this topic
+    NeighborUp(PI),
+    /// We dropped direct neighbor in the swarm membership layer for this topic
+    NeighborDown(PI),
+    /// A gossip message was received for this topic
+    Received(GossipEvent<PI>),
+}
+
+impl<PI> From<hyparview::Event<PI>> for Event<PI> {
+    fn from(value: hyparview::Event<PI>) -> Self {
+        match value {
+            hyparview::Event::NeighborUp(peer) => Self::NeighborUp(peer),
+            hyparview::Event::NeighborDown(peer) => Self::NeighborDown(peer),
+        }
+    }
+}
+
+impl<PI> From<plumtree::Event<PI>> for Event<PI> {
+    fn from(value: plumtree::Event<PI>) -> Self {
+        match value {
+            plumtree::Event::Received(event) => Self::Received(event),
+        }
+    }
+}
+
+/// A timer to be registered for a particular topic.
+///
+/// This should be treated as an opaque value by the implementer and, once emitted, simply returned
+/// to the protocol through [`InEvent::TimerExpired`].
+#[derive(Clone, From, Debug, PartialEq, Eq)]
+pub enum Timer<PI> {
+    /// A timer for the swarm layer
+    Swarm(hyparview::Timer<PI>),
+    /// A timer for the gossip layer
+    Gossip(plumtree::Timer),
+}
+
+/// A command to the protocol state for a particular topic.
+#[derive(Clone, derive_more::Debug)]
+pub enum Command<PI> {
+    /// Join this topic and connect to peers.
+    ///
+    /// If the list of peers is empty, will prepare the state and accept incoming join requests,
+    /// but only become operational after the first join request by another peer.
+    Join(Vec<PI>),
+    /// Broadcast a message for this topic.
+    Broadcast(#[debug("<{}b>", _0.len())] Bytes, Scope),
+    /// Leave this topic and drop all state.
+    Quit,
+}
+
+impl<PI: Clone> IO<PI> for VecDeque<OutEvent<PI>> {
+    fn push(&mut self, event: impl Into<OutEvent<PI>>) {
+        self.push_back(event.into())
+    }
+}
+
+/// Protocol configuration
+#[derive(Clone, Debug, Serialize, Deserialize)]
+#[serde(default)]
+pub struct Config {
+    /// Configuration for the swarm membership layer
+    pub membership: hyparview::Config,
+    /// Configuration for the gossip broadcast layer
+    pub broadcast: plumtree::Config,
+    /// Max message size in bytes.
+    ///
+    /// This size should be the same across a network to ensure all nodes can transmit and read large messages.
+    ///
+    /// At minimum, this size should be large enough to send gossip control messages. This can vary, depending on the size of the [`PeerIdentity`] you use and the size of the [`PeerData`] you transmit in your messages.
+    ///
+    /// The default is [`DEFAULT_MAX_MESSAGE_SIZE`].
+    pub max_message_size: usize,
+}
+
+impl Default for Config {
+    fn default() -> Self {
+        Self {
+            membership: Default::default(),
+            broadcast: Default::default(),
+            max_message_size: DEFAULT_MAX_MESSAGE_SIZE,
+        }
+    }
+}
+
+/// The topic state maintains the swarm membership and broadcast tree for a particular topic.
+#[derive(Debug)]
+pub struct State<PI, R> {
+    me: PI,
+    pub(crate) swarm: hyparview::State<PI, R>,
+    pub(crate) gossip: plumtree::State<PI>,
+    outbox: VecDeque<OutEvent<PI>>,
+    stats: Stats,
+}
+
+impl<PI: PeerIdentity> State<PI, rand::rngs::ThreadRng> {
+    /// Initialize the local state with the default random number generator.
+    ///
+    /// ## Panics
+    ///
+    /// Panics if [`Config::max_message_size`] is below [`MIN_MAX_MESSAGE_SIZE`].
+    pub fn new(me: PI, me_data: Option<PeerData>, config: Config) -> Self {
+        Self::with_rng(me, me_data, config, rand::rng())
+    }
+}
+
+impl<PI, R> State<PI, R> {
+    /// The address of your local endpoint.
+    pub fn endpoint(&self) -> &PI {
+        &self.me
+    }
+}
+
+impl<PI: PeerIdentity, R: Rng> State<PI, R> {
+    /// Initialize the local state with a custom random number generator.
+    ///
+    /// ## Panics
+    ///
+    /// Panics if [`Config::max_message_size`] is below [`MIN_MAX_MESSAGE_SIZE`].
+    pub fn with_rng(me: PI, me_data: Option<PeerData>, config: Config, rng: R) -> Self {
+        assert!(
+            config.max_message_size >= MIN_MAX_MESSAGE_SIZE,
+            "max_message_size must be at least {MIN_MAX_MESSAGE_SIZE}"
+        );
+        let max_payload_size =
+            config.max_message_size - super::Message::<PI>::postcard_header_size();
+        Self {
+            swarm: hyparview::State::new(me, me_data, config.membership, rng),
+            gossip: plumtree::State::new(me, config.broadcast, max_payload_size),
+            me,
+            outbox: VecDeque::new(),
+            stats: Stats::default(),
+        }
+    }
+
+    /// Handle an incoming event.
+    ///
+    /// Returns an iterator of outgoing events that must be processed by the application.
+    pub fn handle(
+        &mut self,
+        event: InEvent<PI>,
+        now: Instant,
+    ) -> impl Iterator<Item = OutEvent<PI>> + '_ {
+        let io = &mut self.outbox;
+        // Process the event, store out events in outbox.
+        match event {
+            InEvent::Command(command) => match command {
+                Command::Join(peers) => {
+                    for peer in peers {
+                        self.swarm.handle(SwarmIn::RequestJoin(peer), io);
+                    }
+                }
+                Command::Broadcast(data, scope) => {
+                    self.gossip
+                        .handle(GossipIn::Broadcast(data, scope), now, io)
+                }
+                Command::Quit => self.swarm.handle(SwarmIn::Quit, io),
+            },
+            InEvent::RecvMessage(from, message) => {
+                self.stats.messages_received += 1;
+                match message {
+                    Message::Swarm(message) => {
+                        self.swarm.handle(SwarmIn::RecvMessage(from, message), io)
+                    }
+                    Message::Gossip(message) => {
+                        self.gossip
+                            .handle(GossipIn::RecvMessage(from, message), now, io)
+                    }
+                }
+            }
+            InEvent::TimerExpired(timer) => match timer {
+                Timer::Swarm(timer) => self.swarm.handle(SwarmIn::TimerExpired(timer), io),
+                Timer::Gossip(timer) => self.gossip.handle(GossipIn::TimerExpired(timer), now, io),
+            },
+            InEvent::PeerDisconnected(peer) => {
+                self.swarm.handle(SwarmIn::PeerDisconnected(peer), io);
+                self.gossip.handle(GossipIn::NeighborDown(peer), now, io);
+            }
+            InEvent::UpdatePeerData(data) => self.swarm.handle(SwarmIn::UpdatePeerData(data), io),
+        }
+
+        // Forward NeighborUp and NeighborDown events from hyparview to plumtree
+        let mut io = VecDeque::new();
+        for event in self.outbox.iter() {
+            match event {
+                OutEvent::EmitEvent(Event::NeighborUp(peer)) => {
+                    self.gossip
+                        .handle(GossipIn::NeighborUp(*peer), now, &mut io)
+                }
+                OutEvent::EmitEvent(Event::NeighborDown(peer)) => {
+                    self.gossip
+                        .handle(GossipIn::NeighborDown(*peer), now, &mut io)
+                }
+                _ => {}
+            }
+        }
+        // Note that this is a no-op because plumtree::handle(NeighborUp | NeighborDown)
+        // above does not emit any OutEvents.
+        self.outbox.extend(io.drain(..));
+
+        // Update sent message counter
+        self.stats.messages_sent += self
+            .outbox
+            .iter()
+            .filter(|event| matches!(event, OutEvent::SendMessage(_, _)))
+            .count();
+
+        self.outbox.drain(..)
+    }
+
+    /// Get stats on how many messages were sent and received.
+    // TODO: Remove/replace with metrics?
+    pub fn stats(&self) -> &Stats {
+        &self.stats
+    }
+
+    /// Reset all statistics.
+    pub fn reset_stats(&mut self) {
+        self.gossip.stats = Default::default();
+        self.swarm.stats = Default::default();
+        self.stats = Default::default();
+    }
+
+    /// Get statistics for the gossip broadcast state
+    ///
+    /// TODO: Remove/replace with metrics?
+    pub fn gossip_stats(&self) -> &plumtree::Stats {
+        self.gossip.stats()
+    }
+
+    /// Check if this topic has any active (connected) peers.
+    pub fn has_active_peers(&self) -> bool {
+        !self.swarm.active_view.is_empty()
+    }
+}
+
+/// Statistics for the protocol state of a topic
+#[derive(Clone, Debug, Default)]
+pub struct Stats {
+    /// Number of messages sent
+    pub messages_sent: usize,
+    /// Number of messages received
+    pub messages_received: usize,
+}
diff --git a/third_party/iroh-org/iroh-gossip/src/proto/util.rs b/third_party/iroh-org/iroh-gossip/src/proto/util.rs
new file mode 100644
index 0000000..b2cd181
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/src/proto/util.rs
@@ -0,0 +1,532 @@
+//! Utilities used in the protocol implementation
+
+use std::{
+    collections::{hash_map, BinaryHeap, HashMap},
+    hash::Hash,
+};
+
+use n0_future::time::Instant;
+use rand::{
+    seq::{IteratorRandom, SliceRandom},
+    Rng,
+};
+
+/// Implement methods, display, debug and conversion traits for 32 byte identifiers.
+macro_rules! idbytes_impls {
+    ($ty:ty, $name:expr) => {
+        impl $ty {
+            /// Create from a byte array.
+            pub const fn from_bytes(bytes: [u8; 32]) -> Self {
+                Self(bytes)
+            }
+
+            /// Get as byte slice.
+            pub fn as_bytes(&self) -> &[u8; 32] {
+                &self.0
+            }
+        }
+
+        impl<T: ::std::convert::Into<[u8; 32]>> ::std::convert::From<T> for $ty {
+            fn from(value: T) -> Self {
+                Self::from_bytes(value.into())
+            }
+        }
+
+        impl ::std::fmt::Display for $ty {
+            fn fmt(&self, f: &mut ::std::fmt::Formatter) -> ::std::fmt::Result {
+                write!(f, "{}", ::hex::encode(&self.0))
+            }
+        }
+
+        impl ::std::fmt::Debug for $ty {
+            fn fmt(&self, f: &mut ::std::fmt::Formatter) -> ::std::fmt::Result {
+                write!(f, "{}({})", $name, ::hex::encode(&self.0))
+            }
+        }
+
+        impl ::std::str::FromStr for $ty {
+            type Err = ::hex::FromHexError;
+            fn from_str(s: &str) -> ::std::result::Result<Self, Self::Err> {
+                let mut bytes = [0u8; 32];
+                ::hex::decode_to_slice(s, &mut bytes)?;
+                Ok(Self::from_bytes(bytes))
+            }
+        }
+
+        impl ::std::convert::AsRef<[u8]> for $ty {
+            fn as_ref(&self) -> &[u8] {
+                &self.0
+            }
+        }
+
+        impl ::std::convert::AsRef<[u8; 32]> for $ty {
+            fn as_ref(&self) -> &[u8; 32] {
+                &self.0
+            }
+        }
+    };
+}
+
+pub(crate) use idbytes_impls;
+
+/// A hash set where the iteration order of the values is independent of their
+/// hash values.
+///
+/// This is wrapper around [indexmap::IndexSet] which couple of utility methods
+/// to randomly select elements from the set.
+#[derive(Default, Debug, Clone, derive_more::Deref)]
+pub(crate) struct IndexSet<T> {
+    inner: indexmap::IndexSet<T>,
+}
+
+impl<T: Hash + Eq> PartialEq for IndexSet<T> {
+    fn eq(&self, other: &Self) -> bool {
+        self.inner == other.inner
+    }
+}
+
+impl<T: Hash + Eq + PartialEq> IndexSet<T> {
+    pub fn new() -> Self {
+        Self {
+            inner: indexmap::IndexSet::new(),
+        }
+    }
+
+    pub fn insert(&mut self, value: T) -> bool {
+        self.inner.insert(value)
+    }
+
+    /// Remove a random element from the set.
+    pub fn remove_random<R: Rng + ?Sized>(&mut self, rng: &mut R) -> Option<T> {
+        self.pick_random_index(rng)
+            .and_then(|idx| self.inner.shift_remove_index(idx))
+    }
+
+    /// Pick a random element from the set.
+    pub fn pick_random<R: Rng + ?Sized>(&self, rng: &mut R) -> Option<&T> {
+        self.pick_random_index(rng)
+            .and_then(|idx| self.inner.get_index(idx))
+    }
+
+    /// Pick a random element from the set, but not any of the elements in `without`.
+    pub fn pick_random_without<R: Rng + ?Sized>(&self, without: &[&T], rng: &mut R) -> Option<&T> {
+        self.iter().filter(|x| !without.contains(x)).choose(rng)
+    }
+
+    /// Pick a random index for an element in the set.
+    pub fn pick_random_index<R: Rng + ?Sized>(&self, rng: &mut R) -> Option<usize> {
+        if self.is_empty() {
+            None
+        } else {
+            Some(rng.random_range(0..self.inner.len()))
+        }
+    }
+
+    /// Remove an element from the set.
+    ///
+    /// NOTE: the value is removed by swapping it with the last element of the set and popping it off.
+    /// **This modifies the order of element by moving the last element**
+    pub fn remove(&mut self, value: &T) -> Option<T> {
+        self.inner.swap_remove_full(value).map(|(_i, v)| v)
+    }
+
+    /// Remove an element from the set by its index.
+    ///
+    /// NOTE: the value is removed by swapping it with the last element of the set and popping it off.
+    /// **This modifies the order of element by moving the last element**
+    pub fn remove_index(&mut self, index: usize) -> Option<T> {
+        self.inner.swap_remove_index(index)
+    }
+
+    /// Create an iterator over the set in the order of insertion, while skipping the element in
+    /// `without`.
+    pub fn iter_without<'a>(&'a self, value: &'a T) -> impl Iterator<Item = &'a T> {
+        self.iter().filter(move |x| *x != value)
+    }
+}
+
+impl<T> IndexSet<T>
+where
+    T: Hash + Eq + Clone,
+{
+    /// Create a vector of all elements in the set in random order.
+    pub fn shuffled<R: Rng + ?Sized>(&self, rng: &mut R) -> Vec<T> {
+        let mut items: Vec<_> = self.inner.iter().cloned().collect();
+        items.shuffle(rng);
+        items
+    }
+
+    /// Create a vector of all elements in the set in random order, and shorten to
+    /// the first `len` elements after shuffling.
+    pub fn shuffled_and_capped<R: Rng + ?Sized>(&self, len: usize, rng: &mut R) -> Vec<T> {
+        let mut items = self.shuffled(rng);
+        items.truncate(len);
+        items
+    }
+
+    /// Create a vector of the elements in the set in random order while omitting
+    /// the elements in `without`.
+    pub fn shuffled_without<R: Rng + ?Sized>(&self, without: &[&T], rng: &mut R) -> Vec<T> {
+        let mut items = self
+            .inner
+            .iter()
+            .filter(|x| !without.contains(x))
+            .cloned()
+            .collect::<Vec<_>>();
+        items.shuffle(rng);
+        items
+    }
+
+    /// Create a vector of the elements in the set in random order while omitting
+    /// the elements in `without`, and shorten to the first `len` elements.
+    pub fn shuffled_without_and_capped<R: Rng + ?Sized>(
+        &self,
+        without: &[&T],
+        len: usize,
+        rng: &mut R,
+    ) -> Vec<T> {
+        let mut items = self.shuffled_without(without, rng);
+        items.truncate(len);
+        items
+    }
+}
+
+impl<T> IntoIterator for IndexSet<T> {
+    type Item = T;
+    type IntoIter = <indexmap::IndexSet<T> as IntoIterator>::IntoIter;
+    fn into_iter(self) -> Self::IntoIter {
+        self.inner.into_iter()
+    }
+}
+
+impl<T> FromIterator<T> for IndexSet<T>
+where
+    T: Hash + Eq,
+{
+    fn from_iter<I: IntoIterator<Item = T>>(iterable: I) -> Self {
+        IndexSet {
+            inner: indexmap::IndexSet::from_iter(iterable),
+        }
+    }
+}
+
+/// A [`BinaryHeap`] with entries sorted by [`Instant`]. Allows to process expired items.
+#[derive(Debug)]
+pub struct TimerMap<T> {
+    heap: BinaryHeap<TimerMapEntry<T>>,
+    seq: u64,
+}
+
+// Can't derive default because we don't want a `T: Default` bound.
+impl<T> Default for TimerMap<T> {
+    fn default() -> Self {
+        Self {
+            heap: Default::default(),
+            seq: 0,
+        }
+    }
+}
+
+impl<T> TimerMap<T> {
+    /// Create a new, empty TimerMap.
+    pub fn new() -> Self {
+        Self::default()
+    }
+
+    /// Insert a new entry at the specified instant.
+    pub fn insert(&mut self, instant: Instant, item: T) {
+        let seq = self.seq;
+        self.seq += 1;
+        let entry = TimerMapEntry {
+            seq,
+            time: instant,
+            item,
+        };
+        self.heap.push(entry);
+    }
+
+    /// Remove and return all entries before and equal to `from`.
+    pub fn drain_until(
+        &mut self,
+        from: &Instant,
+    ) -> impl Iterator<Item = (Instant, T)> + '_ + use<'_, T> {
+        let from = *from;
+        std::iter::from_fn(move || self.pop_before(from))
+    }
+
+    /// Pop the first entry, if equal or before `limit`.
+    pub fn pop_before(&mut self, limit: Instant) -> Option<(Instant, T)> {
+        match self.heap.peek() {
+            Some(item) if item.time <= limit => self.heap.pop().map(|item| (item.time, item.item)),
+            _ => None,
+        }
+    }
+
+    /// Get a reference to the earliest entry in the `TimerMap`.
+    pub fn first(&self) -> Option<&Instant> {
+        self.heap.peek().map(|x| &x.time)
+    }
+
+    #[cfg(test)]
+    fn to_vec(&self) -> Vec<(Instant, T)>
+    where
+        T: Clone,
+    {
+        self.heap
+            .clone()
+            .into_sorted_vec()
+            .into_iter()
+            .rev()
+            .map(|x| (x.time, x.item))
+            .collect()
+    }
+}
+
+#[derive(Debug, Clone)]
+struct TimerMapEntry<T> {
+    time: Instant,
+    seq: u64,
+    item: T,
+}
+
+impl<T> PartialEq for TimerMapEntry<T> {
+    fn eq(&self, other: &Self) -> bool {
+        self.time == other.time && self.seq == other.seq
+    }
+}
+
+impl<T> Eq for TimerMapEntry<T> {}
+
+impl<T> PartialOrd for TimerMapEntry<T> {
+    fn partial_cmp(&self, other: &Self) -> Option<std::cmp::Ordering> {
+        Some(self.cmp(other))
+    }
+}
+
+impl<T> Ord for TimerMapEntry<T> {
+    fn cmp(&self, other: &Self) -> std::cmp::Ordering {
+        self.time
+            .cmp(&other.time)
+            .reverse()
+            .then_with(|| self.seq.cmp(&other.seq).reverse())
+    }
+}
+
+/// A hash map where entries expire after a time
+#[derive(Debug)]
+pub struct TimeBoundCache<K, V> {
+    map: HashMap<K, (Instant, V)>,
+    expiry: TimerMap<K>,
+}
+
+impl<K, V> Default for TimeBoundCache<K, V> {
+    fn default() -> Self {
+        Self {
+            map: Default::default(),
+            expiry: Default::default(),
+        }
+    }
+}
+
+impl<K: Hash + Eq + Clone, V> TimeBoundCache<K, V> {
+    /// Insert an item into the cache, marked with an expiration time.
+    pub fn insert(&mut self, key: K, value: V, expires: Instant) {
+        self.map.insert(key.clone(), (expires, value));
+        self.expiry.insert(expires, key);
+    }
+
+    /// Returns `true` if the map contains a value for the specified key.
+    pub fn contains_key(&self, key: &K) -> bool {
+        self.map.contains_key(key)
+    }
+
+    /// Get the number of entries in the cache.
+    pub fn len(&self) -> usize {
+        self.map.len()
+    }
+
+    /// Returns `true` if the map contains no elements.
+    pub fn is_empty(&self) -> bool {
+        self.map.is_empty()
+    }
+
+    /// Get an item from the cache.
+    pub fn get(&self, key: &K) -> Option<&V> {
+        self.map.get(key).map(|(_expires, value)| value)
+    }
+
+    /// Get the expiration time for an item.
+    pub fn expires(&self, key: &K) -> Option<&Instant> {
+        self.map.get(key).map(|(expires, _value)| expires)
+    }
+
+    /// Iterate over all items in the cache.
+    pub fn iter(&self) -> impl Iterator<Item = (&K, &V, &Instant)> {
+        self.map.iter().map(|(k, (expires, v))| (k, v, expires))
+    }
+
+    /// Remove all entries with an expiry instant lower or equal to `instant`.
+    ///
+    /// Returns the number of items that were removed.
+    pub fn expire_until(&mut self, instant: Instant) -> usize {
+        let drain = self.expiry.drain_until(&instant);
+        let mut count = 0;
+        for (time, key) in drain {
+            match self.map.entry(key) {
+                hash_map::Entry::Occupied(entry) if entry.get().0 == time => {
+                    // If the entry's time matches that of the item we are draining from the expiry list,
+                    // remove the entry from the map and increase the count of items we removed.
+                    entry.remove();
+                    count += 1;
+                }
+                hash_map::Entry::Occupied(_entry) => {
+                    // If the entry's time does not match the time of the item we are draining,
+                    // do not remove the entry: It means that it was re-added with a later time.
+                }
+                hash_map::Entry::Vacant(_) => {
+                    // If the entry is not in the map, it means that it was already removed,
+                    // which can happen if it was inserted multiple times.
+                }
+            }
+        }
+        count
+    }
+}
+
+#[cfg(test)]
+mod test {
+    use std::str::FromStr;
+
+    use n0_future::time::{Duration, Instant};
+    use rand::SeedableRng;
+
+    use super::{IndexSet, TimeBoundCache, TimerMap};
+
+    fn test_rng() -> rand_chacha::ChaCha12Rng {
+        rand_chacha::ChaCha12Rng::seed_from_u64(42)
+    }
+
+    #[test]
+    fn indexset() {
+        let elems = [1, 2, 3, 4];
+        let set = IndexSet::from_iter(elems);
+        let x = set.shuffled(&mut test_rng());
+        assert_eq!(x, vec![2, 1, 4, 3]);
+        let x = set.shuffled_and_capped(2, &mut test_rng());
+        assert_eq!(x, vec![2, 1]);
+        let x = set.shuffled_without(&[&1], &mut test_rng());
+        assert_eq!(x, vec![3, 2, 4]);
+        let x = set.shuffled_without_and_capped(&[&1], 2, &mut test_rng());
+        assert_eq!(x, vec![3, 2]);
+
+        // recreate the rng - otherwise we get failures on some architectures when cross-compiling,
+        // likely due to usize differences pulling different amounts of randomness.
+        let x = set.pick_random(&mut test_rng());
+        assert_eq!(x, Some(&1));
+        let x = set.pick_random_without(&[&3], &mut test_rng());
+        assert_eq!(x, Some(&4));
+
+        let mut set = set;
+        set.remove_random(&mut test_rng());
+        assert_eq!(set, IndexSet::from_iter([2, 3, 4]));
+    }
+
+    #[test]
+    fn timer_map() {
+        let mut map = TimerMap::new();
+        let now = Instant::now();
+
+        let times = [
+            now - Duration::from_secs(1),
+            now,
+            now + Duration::from_secs(1),
+            now + Duration::from_secs(2),
+        ];
+        map.insert(times[0], -1);
+        map.insert(times[0], -2);
+        map.insert(times[1], 0);
+        map.insert(times[2], 1);
+        map.insert(times[3], 2);
+        map.insert(times[3], 3);
+
+        assert_eq!(
+            map.to_vec(),
+            vec![
+                (times[0], -1),
+                (times[0], -2),
+                (times[1], 0),
+                (times[2], 1),
+                (times[3], 2),
+                (times[3], 3)
+            ]
+        );
+
+        assert_eq!(map.first(), Some(&times[0]));
+
+        let drain = map.drain_until(&now);
+        assert_eq!(
+            drain.collect::<Vec<_>>(),
+            vec![(times[0], -1), (times[0], -2), (times[1], 0),]
+        );
+        assert_eq!(
+            map.to_vec(),
+            vec![(times[2], 1), (times[3], 2), (times[3], 3)]
+        );
+        let drain = map.drain_until(&now);
+        assert_eq!(drain.collect::<Vec<_>>(), vec![]);
+        let drain = map.drain_until(&(now + Duration::from_secs(10)));
+        assert_eq!(
+            drain.collect::<Vec<_>>(),
+            vec![(times[2], 1), (times[3], 2), (times[3], 3)]
+        );
+    }
+
+    #[test]
+    fn hex() {
+        #[derive(Eq, PartialEq)]
+        struct Id([u8; 32]);
+        idbytes_impls!(Id, "Id");
+        let id: Id = [1u8; 32].into();
+        assert_eq!(id, Id::from_str(&format!("{id}")).unwrap());
+        assert_eq!(
+            &format!("{id}"),
+            "0101010101010101010101010101010101010101010101010101010101010101"
+        );
+        assert_eq!(
+            &format!("{id:?}"),
+            "Id(0101010101010101010101010101010101010101010101010101010101010101)"
+        );
+        assert_eq!(id.as_bytes(), &[1u8; 32]);
+    }
+
+    #[test]
+    fn time_bound_cache() {
+        let mut cache = TimeBoundCache::default();
+
+        let t0 = Instant::now();
+        let t1 = t0 + Duration::from_secs(1);
+        let t2 = t0 + Duration::from_secs(2);
+
+        cache.insert(1, 10, t0);
+        cache.insert(2, 20, t1);
+        cache.insert(3, 30, t1);
+        cache.insert(4, 40, t2);
+
+        assert_eq!(cache.get(&2), Some(&20));
+        assert_eq!(cache.len(), 4);
+        let removed = cache.expire_until(t1);
+        assert_eq!(removed, 3);
+        assert_eq!(cache.len(), 1);
+        assert_eq!(cache.get(&2), None);
+        assert_eq!(cache.get(&4), Some(&40));
+
+        let t3 = t2 + Duration::from_secs(1);
+        cache.insert(5, 50, t2);
+        assert_eq!(cache.expires(&5), Some(&t2));
+        cache.insert(5, 50, t3);
+        assert_eq!(cache.expires(&5), Some(&t3));
+        cache.expire_until(t2);
+        assert_eq!(cache.get(&4), None);
+        assert_eq!(cache.get(&5), Some(&50));
+    }
+}
diff --git a/third_party/iroh-org/iroh-gossip/tests/sim.rs b/third_party/iroh-org/iroh-gossip/tests/sim.rs
new file mode 100644
index 0000000..627969b
--- /dev/null
+++ b/third_party/iroh-org/iroh-gossip/tests/sim.rs
@@ -0,0 +1,134 @@
+//! Tests that use the [`iroh_gossip::proto::sim::Simulator`].
+
+use std::{env, fmt, str::FromStr, time::Duration};
+
+use iroh_gossip::proto::{
+    sim::{BootstrapMode, LatencyConfig, NetworkConfig, Simulator, SimulatorConfig},
+    Config,
+};
+
+#[test]
+// #[traced_test]
+fn big_hyparview() {
+    tracing_subscriber::fmt::try_init().ok();
+    let mut proto = Config::default();
+    proto.membership.shuffle_interval = Duration::from_secs(5);
+    let config = SimulatorConfig::from_env();
+    let bootstrap = BootstrapMode::default();
+    let network_config = NetworkConfig {
+        proto,
+        latency: LatencyConfig::default(),
+    };
+    let mut simulator = Simulator::new(config, network_config);
+    simulator.bootstrap(bootstrap);
+    let state = simulator.report();
+    println!("{state}");
+    assert!(!state.has_peers_with_no_neighbors());
+}
+
+#[test]
+// #[traced_test]
+fn big_multiple_sender() {
+    tracing_subscriber::fmt::try_init().ok();
+
+    let network_config = NetworkConfig::default();
+    let config = SimulatorConfig::from_env();
+    let bootstrap = BootstrapMode::default();
+    let mut simulator = Simulator::new(config, network_config);
+
+    simulator.bootstrap(bootstrap);
+
+    let rounds = read_var("ROUNDS", 30);
+    for i in 0..rounds {
+        let from = simulator.random_peer();
+        let message = format!("m{i}").into_bytes().into();
+        let messages = vec![(from, message)];
+        simulator.gossip_round(messages);
+    }
+    let avg = simulator.round_stats_average().mean;
+    println!(
+        "average with {} peers after {} rounds:\n{}",
+        simulator.peer_count(),
+        rounds,
+        avg
+    );
+    println!("{}", simulator.report());
+    assert!(avg.ldh < 18.);
+    assert!(avg.rmr < 1.);
+    assert_eq!(avg.missed, 0.0);
+}
+
+#[test]
+// #[traced_test]
+fn big_single_sender() {
+    tracing_subscriber::fmt::try_init().ok();
+
+    let network_config = NetworkConfig::default();
+
+    let config = SimulatorConfig::from_env();
+    let bootstrap = BootstrapMode::default();
+    let rounds = read_var("ROUNDS", 30);
+    let mut simulator = Simulator::new(config, network_config);
+    simulator.bootstrap(bootstrap);
+    let from = simulator.random_peer();
+    for i in 0..rounds {
+        let message = format!("m{i}").into_bytes().into();
+        let messages = vec![(from, message)];
+        simulator.gossip_round(messages);
+    }
+    let avg = simulator.round_stats_average().mean;
+    println!(
+        "average with {} peers after {} rounds:\n{}",
+        simulator.peer_count(),
+        rounds,
+        avg
+    );
+    println!("{}", simulator.report());
+    assert!(avg.ldh < 15.);
+    assert!(avg.rmr < 0.2);
+    assert_eq!(avg.missed, 0.0);
+}
+
+#[test]
+// #[traced_test]
+fn big_burst() {
+    tracing_subscriber::fmt::try_init().ok();
+    let network_config = NetworkConfig::default();
+    let config = SimulatorConfig::from_env();
+    let bootstrap = BootstrapMode::default();
+    let rounds = read_var("ROUNDS", 5);
+
+    let mut simulator = Simulator::new(config, network_config);
+    simulator.bootstrap(bootstrap);
+    let messages_per_peer = read_var("MESSAGES_PER_PEER", 1);
+    for i in 0..rounds {
+        let mut messages = vec![];
+        for id in simulator.network.peer_ids() {
+            for j in 0..messages_per_peer {
+                let message: bytes::Bytes = format!("{i}:{j}.{id}").into_bytes().into();
+                messages.push((id, message));
+            }
+        }
+        simulator.gossip_round(messages);
+    }
+    let avg = simulator.round_stats_average().mean;
+    println!(
+        "average with {} peers after {} rounds:\n{}",
+        simulator.peer_count(),
+        rounds,
+        avg
+    );
+    println!("{}", simulator.report());
+    assert!(avg.ldh < 30.);
+    assert!(avg.rmr < 3.);
+    assert_eq!(avg.missed, 0.0);
+}
+
+fn read_var<T: FromStr<Err: fmt::Display + fmt::Debug>>(name: &str, default: T) -> T {
+    env::var(name)
+        .map(|x| {
+            x.parse()
+                .unwrap_or_else(|_| panic!("Failed to parse environment variable {name}"))
+        })
+        .unwrap_or(default)
+}