Merge main into dev

[kixelated]

Merges the 31 commits on main that weren't yet in dev, resolving 40 conflicted files plus a couple of silent both-sides-added duplicates that git didn't flag. The guiding principle throughout: where main added a feature on top of code dev has since refactored, the feature was hand-ported onto dev's architecture rather than dropped or taken wholesale.

Conflict resolutions

CI (check.yml, flake.nix, nix/overlay.nix, rs/justfile) — took main's cargo+sccache direction. dev only carried the crane checks via an earlier main merge (#1801); main has since superseded it with the cargo/sccache approach (#1821), so main's is the newer decision. Preserved dev's wasm32 target + wasm-bindgen-cli + libva devShell deps.

Cargo — qmux 0.2 (confirmed 0.2 still exposes dev's high-level ws::Client/ws::Server builder API, so dev's cleaner integration compiles against it), kept dev's moq-hls, and the lockfile picked up boytacean 0.12.1.

moq-native — kept dev's high-level qmux integration and its Option-aware with_publisher/with_subscriber API. Deduped a both-sides-added PeerIdentity struct/impl in tls.rs (a silent auto-merge artifact).

moq-relay — kept dev's API + brought in main's unauthenticated internal listener (#1810, tcp:// + unix://). Ported internal.rs and the internal-listener smoke tests onto dev's Option-returning publisher()/subscriber() and announced()/track() API. Dropped main's cluster.root migration tests (dev removed that field entirely).

moq-mux (the big one) — hand-ported main's two features onto dev's split.rs-based importer architecture (#6419a702), keeping dev's thiserror error types instead of reverting to anyhow:

• multi-SPS/PPS/VPS carriage (fix(moq-mux): carry all distinct SPS/PPS/VPS through transmux, not just the last seen #1812): param-set caches became ordered Vec with push_distinct / reconcile_keyframe_params; build_avcc/build_hvcc take lists.
• generic verbatim MPEG-TS / mpegts catalog section (feat(moq-mux): generic verbatim MPEG-TS carriage (mpegts catalog section) #1815): reconciled main's new ts/catalog.rs + ts/adts.rs with dev's TS layout.
• moq-cli and moq-gst consumers updated to dev's import::Track/decode API; moq-gst also keeps main's broadcast-aligned timestamp fix (#678a250c).

js/watch — dev had already incorporated main's "latency range with buffered playback" feature (#1620) and refactored it onto dev's API, so dev's expression was kept across all 8 files.

demo/web — hand-ported main's #1822 multi-broadcast inspector / stats dashboard onto dev's @moq/hang and @moq/watch APIs (catalog/backend output reshaping). Accepted main's deletion of the now-orphaned discover.ts.

New public API: @moq/publish Broadcast.net

The publish element's Broadcast created its Moq.Broadcast producer internally and never exposed it, so an application couldn't serve its own tracks. This adds a net signal exposing that producer (re-created per connection). A statically inserted track (net.createTrack/insertTrack) is served via the producer's fast path, bypassing the element's requested() loop.

With this, the demo's per-stream metadata now rides on a real separate meta.json track (served via net + a @moq/json Producer, advertised in the catalog's metadata list, read on the watch side off broadcast.output.active) — restoring #1822's separate-track design rather than the catalog-section workaround.

Re-merge of dev (catch-up)

dev advanced 3 commits while this PR was open, re-merged and reconciled:

• feat(moq-mux,moq-srt): PTS-exposing TS Export API + PCR-paced SRT egress #1845 (PTS-exposing TS Export::next returning Frame + PCR-paced SRT egress): combined dev's Frame-returning API with this PR's generic catalog::Catalog trait (the mpegts rename from feat(moq-mux): generic verbatim MPEG-TS carriage (mpegts catalog section) #1815); updated the moq-cli drain helper to read frame.payload.
• moq-lite-05: sync wire with drafts HEAD (SETUP stream, broadcast epoch, drop cache hint, rename ANNOUNCE) #1847 (moq-lite-05 wire sync) and feat(moq-video)!: make hardware encoders always-on (openh264 stays the software fallback) #1819 (always-on hardware encoders): auto-merged; kept this PR's cargo+sccache CI in nix/overlay.nix over dev's still-present crane moqChecks.

Notes for review

• Dropped tests: main's two H.264 importer-level multi-PPS tests used with_mode/decode_frame/Mode (removed in dev's refactor); the asserted behavior is now covered at the split.rs level for both H.264 and H.265.
• One demo metric dropped: "samples decoded" (dev's Audio.Stats has no sampleCount).

Verification

• cargo clippy --workspace --all-targets -D warnings and cargo fmt --check clean; the JS per-package type-checks and biome check pass.
• Tests pass: moq-mux (279), moq-cli, moq-srt (7), moq-net, moq-token, moq-json, hang, moq-relay lib (124), js/watch suite, @moq/publish.
• Not verifiable in this sandbox (not merge regressions): moq-gst/moq-video/libmoq/moq-boy need gstreamer/libva system libs that aren't installed here (post-feat(moq-video)!: make hardware encoders always-on (openh264 stays the software fallback) #1819 vaapi is always-on); the moq-relay smoke integration tests and the moq-native IPv6 dual-stack tests fail on [::] binds / QUIC client sockets, and fail identically on unmodified dev in this container.

(Written by Claude)