Sync upstream moq-dev to 3c6002a

.claude/hooks/direnv.sh

@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+# Load the project's direnv/nix dev shell into the Claude Code session so Bash
+# tool commands resolve flake-pinned tools (bun, nixfmt, ...) instead of system
+# ones. No-op for anyone without direnv or an .envrc, so non-nix setups are
+# unaffected.
+#
+# direnv only *approves* the .envrc; the actual env is exported into
+# $CLAUDE_ENV_FILE, which Claude Code sources for every later Bash command.
+
+set -u
+
+# Nothing to export into without this; older Claude Code versions won't set it.
+[ -n "${CLAUDE_ENV_FILE:-}" ] || exit 0
+
+command -v direnv >/dev/null 2>&1 || exit 0
+
+# Require an explicit project dir so we never approve/export a stray .envrc from
+# some unrelated working directory.
+[ -n "${CLAUDE_PROJECT_DIR:-}" ] || exit 0
+cd "$CLAUDE_PROJECT_DIR" || exit 0
+[ -f .envrc ] || exit 0
+
+# Clear any inherited direnv state so `export` recomputes the full diff. Without
+# this, a stale DIRENV_DIFF from the parent process makes direnv assume the env
+# is already loaded and emit nothing.
+unset DIRENV_DIR DIRENV_DIFF DIRENV_WATCHES DIRENV_FILE DIRENV_LAYOUT
+
+direnv allow . 2>/dev/null
+direnv export bash >>"$CLAUDE_ENV_FILE" 2>/dev/null
+
+exit 0

.claude/settings.json

@@ -1,23 +1,30 @@
 {
 	"$schema": "https://json.schemastore.org/claude-code-settings.json",
+	"hooks": {
+		"SessionStart": [
+			{
+				"hooks": [
+					{
+						"type": "command",
+						"command": "${CLAUDE_PROJECT_DIR}/.claude/hooks/direnv.sh"
+					}
+				]
+			}
+		]
+	},
 	"permissions": {
 		"allow": [
-			"Bash(ls:*)",
-			"Bash(grep:*)",
-			"Bash(find:*)",
-			"Bash(git status:*)",
-			"Bash(git diff:*)",
-			"Bash(git log:*)",
-			"Bash(git add:*)",
-			"Bash(git commit:*)",
-			"Bash(git push:*)",
-			"Bash(git pull:*)",
-			"Bash(git checkout:*)",
-			"Bash(git branch:*)",
 			"Bash(just *)",
 			"Bash(cargo *)",
 			"Bash(bun *)",
-			"WebSearch"
+			"Bash(ffprobe:*)",
+			"Bash(rs/libmoq/build.sh:*)",
+			"WebFetch(domain:www.ietf.org)",
+			"WebFetch(domain:datatracker.ietf.org)",
+			"WebFetch(domain:docs.rs)",
+			"WebFetch(domain:moq-wg.github.io)",
+			"WebFetch(domain:moq.dev)",
+			"WebFetch(domain:doc.moq.dev)"
 		]
 	}
 }

.editorconfig

@@ -23,3 +23,19 @@ indent_size = 2
 [**.nix]
 indent_style = space
 indent_size = 2
+
+# shfmt reads these natively. Match existing script style to keep
+# the format pass minimal.
+[*.sh]
+indent_style = space
+indent_size = 4
+switch_case_indent = true
+
+[demo/throttle/enable]
+indent_style = space
+indent_size = 4
+switch_case_indent = true
+
+# Skip vendored / build output trees when shfmt walks the repo.
+[{node_modules,target,dist,.venv}/**]
+ignore = true

.env

@@ -0,0 +1,2 @@
+RUST_BACKTRACE=1
+RUST_LOG="debug"

.envrc

@@ -10,3 +10,13 @@ if ! has nix_direnv_version || ! nix_direnv_version 3.1.0; then
   source_url "https://raw.githubusercontent.com/nix-community/nix-direnv/3.1.0/direnvrc" "sha256-yMJ2OVMzrFaDPn7q8nCBZFRYpL/f0RcHzhmw/i6btJM="
 fi
 use_flake
+
+# Reclaim stale Nix store paths in the background, at most once per week.
+# nix-direnv pins the current dev shell, so only older versions are freed.
+if has nix-collect-garbage; then
+  _gc_stamp="$PWD/.direnv/nix-gc-stamp"
+  if [ ! -f "$_gc_stamp" ] || [ -n "$(find "$_gc_stamp" -mtime +7 2>/dev/null)" ]; then
+    touch "$_gc_stamp"
+    (nix-collect-garbage --delete-older-than 7d >/dev/null 2>&1 &)
+  fi
+fi

.github/actions/setup-packaging/action.yml

@@ -0,0 +1,16 @@
+name: Set up packaging tools
+description: Install Nix and prepend the .#packaging output bin/ to $PATH.
+
+runs:
+  using: composite
+  steps:
+    - uses: DeterminateSystems/nix-installer-action@00199f951aeb9404028a6e4b95ad42546f73296a # main
+      with:
+        determinate: false
+    - uses: DeterminateSystems/magic-nix-cache-action@908b263ff629f4cc17666315b7fd3ec127c6244d # main
+
+    - name: Build packaging tools from flake
+      shell: bash
+      run: |
+        out=$(nix build --no-link --print-out-paths .#packaging)
+        echo "$out/bin" >> "$GITHUB_PATH"

.github/dependabot.yml

@@ -9,3 +9,5 @@ updates:
     directory: "/"
     schedule:
       interval: "weekly"
+    cooldown:
+      default-days: 7

.github/homebrew/Formula/moq-cli.rb.tmpl

@@ -0,0 +1,36 @@
+class MoqCli < Formula
+  desc "CLI for publishing and subscribing to Media over QUIC broadcasts"
+  homepage "https://moq.dev"
+  version "__VERSION__"
+  license any_of: ["MIT", "Apache-2.0"]
+
+  on_macos do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-cli-v#{version}/moq-cli-#{version}-aarch64-apple-darwin.tar.gz"
+      sha256 "__SHA256_AARCH64_APPLE_DARWIN__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-cli-v#{version}/moq-cli-#{version}-x86_64-apple-darwin.tar.gz"
+      sha256 "__SHA256_X86_64_APPLE_DARWIN__"
+    end
+  end
+
+  on_linux do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-cli-v#{version}/moq-cli-#{version}-aarch64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_AARCH64_UNKNOWN_LINUX_GNU__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-cli-v#{version}/moq-cli-#{version}-x86_64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_X86_64_UNKNOWN_LINUX_GNU__"
+    end
+  end
+
+  def install
+    bin.install "bin/moq-cli"
+  end
+
+  test do
+    system bin/"moq-cli", "--help"
+  end
+end

.github/homebrew/Formula/moq-gst.rb.tmpl

@@ -0,0 +1,54 @@
+class MoqGst < Formula
+  desc "GStreamer plugin for publishing and subscribing to Media over QUIC"
+  homepage "https://moq.dev"
+  version "__VERSION__"
+  license any_of: ["MIT", "Apache-2.0"]
+
+  depends_on "gstreamer"
+
+  on_macos do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-gst-v#{version}/moq-gst-#{version}-aarch64-apple-darwin.tar.gz"
+      sha256 "__SHA256_AARCH64_APPLE_DARWIN__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-gst-v#{version}/moq-gst-#{version}-x86_64-apple-darwin.tar.gz"
+      sha256 "__SHA256_X86_64_APPLE_DARWIN__"
+    end
+  end
+
+  on_linux do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-gst-v#{version}/moq-gst-#{version}-aarch64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_AARCH64_UNKNOWN_LINUX_GNU__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-gst-v#{version}/moq-gst-#{version}-x86_64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_X86_64_UNKNOWN_LINUX_GNU__"
+    end
+  end
+
+  def install
+    lib.install Dir["lib/libgstmoq.*"]
+  end
+
+  def caveats
+    <<~EOS
+      The moq GStreamer plugin is installed at:
+        #{opt_lib}/libgstmoq.#{OS.mac? ? "dylib" : "so"}
+
+      For GStreamer to discover it, add this prefix to GST_PLUGIN_PATH:
+        export GST_PLUGIN_PATH="#{opt_lib}:$GST_PLUGIN_PATH"
+
+      Then verify with:
+        gst-inspect-1.0 moq
+    EOS
+  end
+
+  test do
+    plugin = OS.mac? ? "libgstmoq.dylib" : "libgstmoq.so"
+    assert_predicate lib/plugin, :exist?
+    ENV["GST_PLUGIN_PATH"] = lib
+    system Formula["gstreamer"].opt_bin/"gst-inspect-1.0", "moq"
+  end
+end

.github/homebrew/Formula/moq-relay.rb.tmpl

@@ -0,0 +1,36 @@
+class MoqRelay < Formula
+  desc "Clusterable relay server for Media over QUIC"
+  homepage "https://moq.dev"
+  version "__VERSION__"
+  license any_of: ["MIT", "Apache-2.0"]
+
+  on_macos do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-relay-v#{version}/moq-relay-#{version}-aarch64-apple-darwin.tar.gz"
+      sha256 "__SHA256_AARCH64_APPLE_DARWIN__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-relay-v#{version}/moq-relay-#{version}-x86_64-apple-darwin.tar.gz"
+      sha256 "__SHA256_X86_64_APPLE_DARWIN__"
+    end
+  end
+
+  on_linux do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-relay-v#{version}/moq-relay-#{version}-aarch64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_AARCH64_UNKNOWN_LINUX_GNU__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-relay-v#{version}/moq-relay-#{version}-x86_64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_X86_64_UNKNOWN_LINUX_GNU__"
+    end
+  end
+
+  def install
+    bin.install "bin/moq-relay"
+  end
+
+  test do
+    system bin/"moq-relay", "--help"
+  end
+end

.github/homebrew/Formula/moq-token-cli.rb.tmpl

@@ -0,0 +1,36 @@
+class MoqTokenCli < Formula
+  desc "JWT token generator and validator for moq-relay"
+  homepage "https://moq.dev"
+  version "__VERSION__"
+  license any_of: ["MIT", "Apache-2.0"]
+
+  on_macos do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-token-cli-v#{version}/moq-token-cli-#{version}-aarch64-apple-darwin.tar.gz"
+      sha256 "__SHA256_AARCH64_APPLE_DARWIN__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-token-cli-v#{version}/moq-token-cli-#{version}-x86_64-apple-darwin.tar.gz"
+      sha256 "__SHA256_X86_64_APPLE_DARWIN__"
+    end
+  end
+
+  on_linux do
+    on_arm do
+      url "https://github.com/moq-dev/moq/releases/download/moq-token-cli-v#{version}/moq-token-cli-#{version}-aarch64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_AARCH64_UNKNOWN_LINUX_GNU__"
+    end
+    on_intel do
+      url "https://github.com/moq-dev/moq/releases/download/moq-token-cli-v#{version}/moq-token-cli-#{version}-x86_64-unknown-linux-gnu.tar.gz"
+      sha256 "__SHA256_X86_64_UNKNOWN_LINUX_GNU__"
+    end
+  end
+
+  def install
+    bin.install "bin/moq-token-cli"
+  end
+
+  test do
+    system bin/"moq-token-cli", "--help"
+  end
+end

.github/justfile

@@ -0,0 +1,9 @@
+set fallback
+
+# Lint GitHub Actions workflows. Silently skipped if actionlint is not installed.
+check:
+    @if command -v actionlint >/dev/null 2>&1; then actionlint; fi
+
+# CI variant: actionlint is required (provided by the nix devShell).
+ci:
+    actionlint