oxideav-mpegts

Pure-Rust, clean-room MPEG-TS (Transport Stream) demuxer and single-program muxer per ISO/IEC 13818-1. The crate is scoped at the bytes Blu-ray Disc ships inside a .m2ts file once the BDAV TP_extra_header has been stripped — i.e. the 188-byte MPEG-TS packets [oxideav_bluray::iter_source_packets] yields.

The motivating downstream is the workspace's oxideav remux bluray:// path: a Blu-ray title comes out of oxideav-bluray as a decrypted 192-byte-source-packet stream, the BDAV envelope gets stripped, this crate demuxes each elementary stream's PES payloads, and the MKV writer in oxideav-mkv lays them down as one MKV per unique title with language-tagged tracks and chapter marks.

Phase 1 surface

Module	What it parses
packet	188-byte TS packet — sync byte, flags, PID, adaptation field (PCR + OPCR + splice_countdown + transport_private_data + adaptation_field_extension with ltw / piecewise_rate / seamless_splice), payload. The same §2.4.3.4 Table 2-6 surface is writable: AdaptationFieldSpec / AdaptationFieldExtensionSpec encode every optional field (round-trip tested against the parser), reject the §2.4.3.5-forbidden pairings (OPCR without PCR, seamless_splice without splicing_point) and field-width overflows with TsError::InvalidField, and stuff with 0xFF to a requested size — the PES tail-alignment mechanism. encode_clock_reference is the shared 6-byte PCR/OPCR encoder. TsPacketLayout / detect_packet_layout classify the three physical framings — plain 188, 192-byte (4-byte-prefixed) source packets, 204-byte (16-byte-trailer) packets — by their sync-byte grid.
psi	PAT + PMT + CAT (Conditional Access Table, §2.4.4.6) + TSDT (Transport Stream Description Table, §2.4.4.12 — TS-wide descriptor loop on PID 0x0002 / table_id 0x03) + SDT (DVB Service Description Table, ETSI EN 300 468 §5.2.3 — service loop on PID 0x0011 / table_id 0x42 actual + 0x46 other, with typed RunningStatus) + EIT (DVB Event Information Table, EN 300 468 §5.2.4 — event loop on PID 0x0012 / table_id 0x4E/0x4F present-following + 0x50–0x6F schedule, with MJD/BCD start_time + BCD duration decoded per annex C) + NIT (DVB Network Information Table, EN 300 468 §5.2.1 — PID 0x0010 / table_id 0x40 actual + 0x41 other, with the network_id plus a network-level descriptor loop and a typed transport_stream_loop of (transport_stream_id, original_network_id) entries each carrying their own descriptor loop) + BAT (DVB Bouquet Association Table, EN 300 468 §5.2.2 — PID 0x0011 / table_id 0x4A, a bouquet_id plus a bouquet-level descriptor loop and a transport_stream_loop of (transport_stream_id, original_network_id) entries with per-TS descriptor loops, byte-identical to the NIT body shape) + TDT (DVB Time and Date Table, EN 300 468 §5.2.5 — short-form section on PID 0x0014 / table_id 0x70 carrying just the 40-bit MJD/BCD UTC_time) + TOT (DVB Time Offset Table, EN 300 468 §5.2.6 — short-form section on PID 0x0014 / table_id 0x73, the UTC_time plus a CRC-verified descriptor loop that usually carries the local_time_offset_descriptor) + RST (DVB Running Status Table, EN 300 468 §5.2.7 — short-form section on PID 0x0013 / table_id 0x71, a flat run of 9-byte (transport_stream_id, original_network_id, service_id, event_id, running_status) entries with no CRC, the fast event-status update channel) + ST (DVB Stuffing Table, EN 300 468 §5.2.8 — short-form section on any SI PID / table_id 0x72 carrying a raw data_byte run with no CRC, the section-invalidation channel at a delivery-system boundary) + DIT (DVB Discontinuity Information Table, EN 300 468 §5.2.9 / §7.1.1 — short-form section on PID 0x001E / table_id 0x7E carrying a single transition_flag bit, inserted at partial-TS transition points) + SIT (DVB Selection Information Table, EN 300 468 §5.2.10 / §7.1.2 — long-form CRC-verified section on PID 0x001F / table_id 0x7F carrying a TS-wide transmission-info descriptor loop plus a typed SitService loop of (service_id, running_status) entries with per-service descriptor loops, describing the services/events of a partial TS) section parsers, plus PsiSectionAssembler — per-PID reassembler that joins long sections across multiple 188-byte TS packets (§2.4.4 pointer_field + PUSI continuation). Handles up-to-1024-byte sections, stuffing terminators, CC-skip detection, and back-to-back sections in one payload.
descriptor	§2.6 TLV descriptors — registration / ISO-639 language / CA / video / audio / hierarchy / AVC / HEVC / data-stream-alignment / target-background-grid / video-window / system-clock / multiplex-buffer-utilization / copyright / maximum-bitrate / smoothing-buffer / STD / IBP — plus the DVB service_descriptor (tag 0x48, EN 300 468 §6.2.33) carrying the service / provider names, the DVB short_event_descriptor (tag 0x4D, EN 300 468 §6.2.37) carrying the event name + short text, the DVB extended_event_descriptor (tag 0x4E, EN 300 468 §6.2.15) carrying the detailed two-column (item_description, item) list plus non-itemized free text with the descriptor_number / last_descriptor_number association pair, the DVB network_name_descriptor (tag 0x40, EN 300 468 §6.2.27) carrying the delivery-system name, the DVB bouquet_name_descriptor (tag 0x47, EN 300 468 §6.2.4) carrying the bouquet name, the DVB content_descriptor (tag 0x54, EN 300 468 §6.2.9) carrying the per-event genre classification as a flat array of two-nibble (Table 29) + user_byte triples, the DVB local_time_offset_descriptor (tag 0x58, EN 300 468 §6.2.20) carrying per-country local-time-offset entries (offset minutes + time_of_change instant + next offset), the DVB partial_transport_stream_descriptor (tag 0x63, EN 300 468 §7.2.1) carried in the SIT transmission-info loop with the partial-TS peak_rate / minimum_overall_smoothing_rate / maximum_overall_smoothing_buffer, the DVB stuffing_descriptor (tag 0x42, EN 300 468 §6.2.40) carrying a raw stuffing_byte run for descriptor-loop padding / invalidation, and the DVB PMT elementary-stream descriptors a demuxer reads to route a private-data PES — stream_identifier_descriptor (tag 0x52, §6.2.39 → component_tag), teletext_descriptor (tag 0x56, §6.2.43 → per-language EBU teletext pages), subtitling_descriptor (tag 0x59, §6.2.41 → per-language EN 300 743 subtitle services), AC-3_descriptor (tag 0x6A, annex D), enhanced_AC-3_descriptor (tag 0x7A, annex D), and DTS_descriptor (tag 0x7B, annex G) — plus the SI-table DVB descriptors service_list_descriptor (tag 0x41, §6.2.35 → NIT/BAT (service_id, service_type) channel list), country_availability_descriptor (tag 0x49, §6.2.10 → intended/not-intended country list + polarity flag), linkage_descriptor (tag 0x4A, §6.2.19 → (transport_stream_id, original_network_id, service_id, linkage_type) header + raw type-specific/private link_data), component_descriptor (tag 0x50, §6.2.8 → editorial (stream_content, stream_content_ext, component_type) + component_tag + language + text), CA_identifier_descriptor (tag 0x53, §6.2.5 → CA_system_id list), parental_rating_descriptor (tag 0x55, §6.2.28 → per-country (country_code, rating) with a Table-83 minimum_age_years() helper), and private_data_specifier_descriptor (tag 0x5F, §6.2.31 → 32-bit private scope) — and the NIT delivery-system descriptors satellite_delivery_system_descriptor (tag 0x43, §6.2.13.2 → DVB-S/S2 BCD frequency/orbital/symbol-rate + polarization/roll-off/modulation/FEC), cable_delivery_system_descriptor (tag 0x44, §6.2.13.1 → DVB-C BCD frequency/symbol-rate + outer/inner FEC + modulation), terrestrial_delivery_system_descriptor (tag 0x5A, §6.2.13.4 → DVB-T 10-Hz centre frequency + bandwidth/constellation/hierarchy/code-rate/guard/mode/other-frequency), and frequency_list_descriptor (tag 0x62, §6.2.17 → a multiplex's additional centre frequencies + coding_type) — and the further PMT/EIT DVB descriptors service_move_descriptor (tag 0x60, §6.2.36 → post-move (onid, tsid, sid)), short_smoothing_buffer_descriptor (tag 0x61, §6.2.38 → sb_size/sb_leak_rate), scrambling_descriptor (tag 0x65, §6.2.32 → scrambling_mode), data_broadcast_id_descriptor (tag 0x66, §6.2.12 → data_broadcast_id + selector bytes), ancillary_data_descriptor (tag 0x6B, §6.2.2 → Table-16 audio ancillary-data bit-flags), and AAC_descriptor (tag 0x7C, annex H → profile_and_level + optional AAC_type/additional_info) — and the extension_descriptor (tag 0x7F, §6.2.16 → a descriptor_tag_extension envelope, clause 6.3, decoding supplementary_audio (ext 0x06, §6.4.11 → mix_type/editorial_classification/optional language override) and surfacing other extension sub-tags' selector bytes raw) — and the data_broadcast_descriptor (tag 0x64, §6.2.11 → data_broadcast_id + component_tag + length-prefixed selector + language-tagged text).
pes	PES packet reassembler — joins TS payloads per-PID into complete PES units. Decodes every Table 2-17 optional header field: PES_scrambling_control / PES_priority / data_alignment_indicator / copyright / original_or_copy on flags1, plus the flag-gated bodies ESCR (42-bit 27 MHz tick), ES_rate (50 bytes/s units), DSM_trick_mode (raw 8-bit and typed — DsmTrickMode decodes the Table 2-20 trick_mode_control into fast-forward / slow-motion / freeze-frame / fast-reverse / slow-reverse with FieldId (Table 2-21), intra_slice_refresh, CoefficientSelection frequency truncation (Table 2-22) and rep_cntrl; to_byte() is the wire inverse), additional_copy_info, previous_PES_packet_CRC, and the full PES_extension body (16-byte private data, raw pack_header bytes, program_packet_sequence_counter, P-STD buffer scale/size, PES_extension_field_2). The reassembler folds the TS-level random_access_indicator into PesPacket::random_access per the §2.4.3.5 next-PES-to-start rule (indicators riding payload-less carrier packets included). PesHeaderSpec is the write-side mirror — it encodes a complete PES packet with every Table 2-17 optional field (both length forms plus the header-less stream_ids) and rejects spec violations (DTS without/equal-to PTS per §2.7.5, zero ES_rate, width overflows, over-budget optional areas) with TsError::InvalidField; the muxer builds its PES envelopes through it.
stream_type	stream_type byte → codec class enum covering the full ISO/IEC 13818-1 Table 2-29 base range (0x01..=0x26: MPEG-1/2/4 video + audio, AAC-ADTS/LATM, private sections / PES, MHEG, DSM-CC, metadata carriers, IPMP, AVC / SVC / MVC / MVCD, JPEG 2000, stereoscopic views, HEVC + temporal subset) plus AVS video and the HDMV-extended Blu-ray range. Classifies video / audio / subtitle / metadata / private.
clock	Per-PCR-PID 27 MHz clock recovery + per-PID continuity-counter classification (§2.4.2.2 / §2.4.3.3 / §2.4.3.5), plus PtsTracker — per-PID 33-bit PTS/DTS unwrapping (§2.4.3.7) into a monotonic 64-bit extended timeline with wrap-vs-discontinuity classification and seed() wrap-epoch re-entry, so a demuxer landing a seek at a known extended time re-joins the same timeline instead of re-anchoring at raw 33-bit values.
muxer	Multi-program writer (MpegTsMuxer). The single-program open factory groups every stream into program_number 1 (PMT PID 0x0100); MpegTsMuxer::with_config takes a MpegTsMuxConfig of several ProgramSpecs for a genuine multi-program TS — the PAT lists every program's (program_number, pmt_pid) pair, one PMT is emitted per program on its own PID, and PCR insertion / the §2.7.2 inter-PCR bound are tracked independently per program. Each Packet is wrapped in a PES envelope (PTS / DTS per Table 2-22) and fragmented into 188-byte TS packets with per-PID continuity counters + a tail-stuffing pass; oversize PSI splits across packets (§2.4.4 PUSI + pointer_field + continuation). PMT ES_info loops carry an auto stream_identifier_descriptor (tag 0x52) with a per-program component_tag, an ISO_639_language_descriptor (tag 0x0A) for language-tagged audio / subtitle tracks, plus any caller-injected DVB component descriptors (teletext / subtitling / AC-3 / …). DVB SI is emitted on the mux side: SDT (PID 0x0011, service_descriptor per program), NIT (PID 0x0010, network_name + delivery-system / service_list descriptors), and present/following EIT (PID 0x0012, short_event_descriptor per event with DVB MJD+BCD start times). All program / SI tables re-emit mid-stream at a configurable PTS interval (set_psi_repetition_interval, default ~200 ms) and once at the trailer. The whole section / descriptor write path lives in the build module and round-trips byte-identically through the matching parsers. A keyframe-flagged Packet gets the §2.4.3.5 random_access_indicator on the first TS packet of its PES envelope (on the PCR PID only when that packet also carries the PCR, per the §2.4.3.5 constraint), so receivers can locate random-access points without parsing the elementary stream. signal_splice_after arms a §2.4.3.5 / Annex-K splicing point after the next written frame — its PES envelope's payload packets carry splicing_point_flag + splice_countdown counting down to zero on the last one (whose final payload byte ends the coded frame by construction), optionally with the seamless splice_type / DTS_next_AU adaptation-field extension held identical across the run and a negative post-splice countdown on the following packets; audio streams reject a non-zero splice_type. A frame whose payload exceeds the 16-bit PES_packet_length budget on a bounded (non-video) stream_id splits across several PES envelopes (§2.4.3.7 — timestamps on the first, none on continuations; video keeps the unbounded form). signal_time_base_discontinuity arms a §2.4.3.5 / §2.7.6 system time-base change — the next PCR on the program's PCR_PID rides discontinuity_indicator = 1 and the PCR cadence restarts on the new base. set_mux_rate enables CBR pacing on the §2.4.2 T-STD delivery schedule: the byte position defines the arrival clock, every PCR is stamped from it (the receiver-reconstructed transport rate equals the configured rate exactly), null packets bound each frame's delivery lead (0.25 s video; non-video frames are held per track and released 40 ms before decode so the 3584-byte §2.4.2.3 audio buffer never hoards), PCR-only packets keep the §2.7.2 bound across null runs, audio / PSI packets are spaced so no 512-byte transport buffer overflows at the spec drain rates, and a frame the clock can no longer deliver in time is an error. CodecId ↔ stream_type mapping mirrors the demuxer so a round-trip preserves the codec set.
build	Write-side builders mirroring the psi / descriptor parse surface: descriptor TLV builders (registration / ISO-639 / stream_identifier / service / network_name / bouquet_name / short_event / service_list / teletext / subtitling / AC-3 / E-AC-3 / DTS / AAC) and long-form PSI section builders (build_pat multi-program, build_pmt, build_sdt, build_nit, build_eit_pf), each emitting table_id through the MPEG-2 CRC-32 trailer. DVB 40-bit MJD+BCD UTC_time encoding is the inverse of decode_utc_time (EN 300 468 annex-C integer formula). Every builder is round-trip tested against its parser.
demuxer	Streaming Demuxer (MpegTsDemuxer) — scans for the PAT, enumerates every advertised program as a typed TsProgram (programs()), opens the first by default or any other via open_program(program_number) (§2.4.4.5), reassembles the chosen program's PMT (multi-TS-packet aware), and maps each elementary stream to a CodecParameters / StreamInfo. Timing is reconstructed on the demux path: the selected program's PCR_PID (§2.4.4.9) drives a PcrTracker for 27 MHz clock recovery (last_pcr()), and each PES's 33-bit PTS/DTS is unwrapped through a per-PID PtsTracker (§2.4.3.7) into a monotonic 64-bit extended timeline so a 2^33 wrap no longer produces a backward jump; the first timestamp anchors StreamInfo.start_time. duration_micros() is probed once at open from the head-to-tail PCR span (§2.4.2.2 — first PCR scanned forward from the start, last PCR from a growing trailing window, base × 300 + extension 27 MHz delta → microseconds, also mirrored to each StreamInfo.duration in 90 kHz units). seek_to() is keyframe-accurate per the core Demuxer contract (nearest keyframe at or before the target): a PCR-anchored binary search brackets the requested time between those same head/tail PCR anchors and bisects the byte stream — comparing every probed PCR on the extended 64-bit timeline (head-anchored zero-wrap modular delta, exact below one ~26.5 h wrap) so a mid-stream 2^33 wrap can't break the search invariant or the tail clamp — then a windowed forward scan from the PCR landing collects access points on the stream's PID and lands on the last one at or before the target, backing off in doubling steps (1 s, 2 s, 4 s, …) when a long GOP outruns the window and falling back to the cached full index as the definitive answer (also the clamp-up path for targets before the first point). Access points are tiered (AccessPointKind): §2.4.3.5 random_access_indicator announcements win — the landing anchors on the flagged packet (payload-less carrier packets included) so the reassembler re-derives the core keyframe flag — and data-aligned PES starts (§2.4.3.7, alignment per the §2.6.10 descriptor or Tables 2-47/2-48 type '01') serve streams that never set the indicator, with a window-local aligned point never shadowing an indicator keyframe further back; streams signalling neither degrade to the PCR-granular landing (at or before the target; fewer than two PCRs and no access points is Unsupported). Every landing drops in-flight PES state (continuity history is void after a byte jump, as after a §2.4.3.4 discontinuity — continuation bytes are discarded until the next PUSI) and re-seeds the per-PID PTS/DTS trackers at the landed time (PtsTracker::seed wrap-epoch re-entry) so post-seek packets continue the same extended timeline the caller seeked along. random_access_points() builds (once, cursor-restoring single pass) the typed tiered index — byte offset, PID, stream index, kind, and the announced PES's extended PTS, unwrapped B-frame-tolerantly (epoch-nearest) — and seek_to_random_access(stream_index, target) remains the strict §2.4.3.5-only surface. Round-trip accuracy is pinned by self-muxed fixtures (the muxer writes PCR + indicator keyframes at known timestamps): a CBR sweep and a 64 B–24 KiB VBR layout land exactly on the keyframe grid, multi-program muxes bisect along the selected program's own PCR_PID, and wrap-crossing streams seek forward and back across 2^33. All three physical framings are tolerated transparently — 188-byte plain, 192-byte (4-byte-prefixed) source packets, and 204-byte (16-byte-trailer) packets — detected at open (packet_layout()) and stripped at the read layer, with the resync double-sync check, PCR probes, seek bisection, and the RAP index all walking the physical grid. Resync recovers from sync-byte corruption (double-0x47 validation one packet stride apart, BD AACS-unit garbage runs).
validate	Conformance validation: validate_ts walks a whole stream (any framing) in two passes and tallies normative-rule violations with bounded state — §2.4.3.3 continuity-counter errors (per PID + overall), Table 2-5 reserved adaptation_field_control, §2.4.3.5 AF length bounds and field pairings (OPCR without PCR, seamless_splice without splicing_point, RAI-without-PCR on a PCR PID), §2.4.3.5 splice-signalling coherence (a splice_countdown contradicting the payload-packet count since the previous annotation, a seamless-splice run dropping or changing its splice_type / DTS_next_AU before the countdown-zero packet, and a non-zero splice_type on a PMT-typed audio PID), §2.7.2 unsignalled inter-PCR gaps over 0,1 s, transport_error packets, and CRC/length-failing PAT/PMT sections. Per-PCR-PID reports carry sample counts, max interval, signalled discontinuities, and a §2.4.2.2 transport-rate estimate; plus per-PID stats, null-packet counts, PAT repetition gaps, and an is_conformant() verdict. The muxer's own output is pinned conformant in tests.
tstd	The §2.4.2 Transport Stream system target decoder as an executable model: analyze_tstd reconstructs the §2.4.2.2 arrival clock from the PCRs (equations 2-1..2-5 — piecewise-constant transport rate between PCR pairs, wrap-aware, previous-rate carry across a signalled time-base discontinuity with decode times re-anchored on the new base) and replays every configured PID through its §2.4.2.3 chain as a fluid model: whole TS packets into the fixed 512-byte TBn draining FIFO at Rxn; PES bytes on into the audio main buffer Bn (PES headers held until the access-unit removal) or through the video MBn → EBn leak (Rbxn, headers discarded at transfer, EBn back-pressure), with whole access units removed at their decode time (DTS else PTS; PES-granular, continuation PES extend the open unit) and PSI PIDs on the TBsys → Bsys chain (equation 2-7 Rsys). Every §2.4.2.6 condition is checked — TB / Bn / MBn overflow, Bn / EBn underflow, empty-once-a-second, the one-second delay bound, Bsys overflow — deduplicated per rule + PID with worst figures and total counts, plus per-chain peak-occupancy stats. TStdStreamModel::audio() carries the spec-fixed non-ADTS numbers; the video constructors apply the §2.4.2.3 Rxn / Rbxn / MBSn formulas over caller-supplied Rmax / VBV figures. The CBR muxer's own output is pinned zero-violation against this model.

No decoders. Every payload byte on the demux path stays as a borrowed slice unless reassembly forces a copy; the muxer is the only path that re-multiplexes.

ProgramMapTable::iter_program_descriptors and PmtStream::iter_descriptors lift the raw descriptor bytes carried inside a PMT into typed [Descriptor] records (TLV envelope + a decoded body for the most common tags). Unrecognised tags surface as DescriptorBody::Raw so downstream callers still see the payload bytes verbatim. ConditionalAccessTable::iter_descriptors exposes the same view over a CAT's CA_descriptor block.

ServiceDescriptionTable::parse reads a DVB SDT section into typed SdtService entries — service_id (equal to the PMT program_number for normal services), the two EIT-presence flags, a typed RunningStatus (EN 300 468 Table 6), free_CA_mode, and a per-service descriptor loop. SdtService::iter_descriptors lifts that loop, and the service_descriptor (tag 0x48) it usually carries decodes to DescriptorBody::Service exposing the service_type byte plus the raw service / provider name runs. That name is what the oxideav remux bluray:// path needs to label an MKV title when the source TS carries an SDT. DVB text strings keep their original bytes — the EN 300 468 annex-A character-table selection is deliberately left to the caller rather than decoded here.

EventInformationTable::parse reads a DVB EIT section (EN 300 468 §5.2.4) into typed EitEvent entries. The EIT lives on the fixed PID 0x0012 and comes in four table_id classifications — present/ following on the actual TS (0x4E) or another TS (0x4F), and the event schedule on the actual TS (0x50–0x5F) or another TS (0x60–0x6F); parse accepts all four and records other_transport_stream / schedule. Each EitEvent carries its event_id, a decoded start_time (EitDateTime — the 40-bit field's 16-bit Modified Julian Date is converted to a Gregorian (year, month, day) via the annex-C integer formula, and the 24-bit BCD UTC time is decoded alongside; the all-ones "undefined" sentinel surfaces as None), a duration (EitDuration — BCD hours/minutes/ seconds with as_seconds), a typed RunningStatus, free_CA_mode, and a per-event descriptor loop. EitEvent::iter_descriptors lifts that loop, where the short_event_descriptor (tag 0x4D) decodes to DescriptorBody::ShortEvent exposing the language code plus the raw event-name and short-text runs, and the extended_event_descriptor (tag 0x4E, §6.2.15) decodes to DescriptorBody::ExtendedEvent — the long-form synopsis the short_event_descriptor's single-descriptor cap can't hold. It carries a descriptor_number / last_descriptor_number pair (an event greater than 256 bytes spreads across an associated set the caller concatenates in number order), a Vec of two-column (item_description, item) pairs (the spec's cast-list shape, e.g. b"Producer" → a name), and the non-itemized free text. Since service_id equals the PMT program_number for normal services, the EIT lets the oxideav remux bluray:// path attach human-readable event names and time ranges to each title. The spec's worked examples (0xC0 7912 4500 → 1993-10-13 12:45:00 and 0x01 4530 → 01:45:30) are pinned as tests. The same event loop's content_descriptor (tag 0x54, EN 300 468 §6.2.9) decodes to DescriptorBody::Content — a flat array of ContentNibble records, each pairing the two 4-bit content nibbles (the genre, indexed against Table 29: (0x1, 0x4) = comedy, (0x4, 0x3) = football/soccer, …) with the broadcaster-defined user_byte. The Table 29 genre strings are reference data left to the caller; the crate surfaces the raw nibbles so a player maps them against whatever classification its UI uses.

NetworkInformationTable::parse reads a DVB NIT section (EN 300 468 §5.2.1) carried on the fixed PID 0x0010. The NIT comes in two table_id classifications — the actual network the TS belongs to (0x40) and other networks (0x41); parse accepts both and records other_network. The section carries a two-level descriptor layout that mirrors the PMT: a network-level descriptor loop (lifted by NetworkInformationTable::iter_descriptors, where the network_name_descriptor of tag 0x40 decodes to DescriptorBody::NetworkName exposing the raw delivery-system name) followed by a transport_stream_loop of NitTransportStream entries. Each entry pairs (transport_stream_id, original_network_id) — the combination the spec notes uniquely identifies a TS throughout the application area — with its own descriptor loop, walkable via NitTransportStream::iter_descriptors. The NIT gives the oxideav remux bluray:// path the network-level context that frames the per-service SDT and per-event EIT records. DVB text strings keep their original bytes — the annex-A character-table selection is left to the caller, as with the SDT and EIT name descriptors.

BouquetAssociationTable::parse reads a DVB BAT section (EN 300 468 §5.2.2). A bouquet groups services into a marketable package that may cross network boundaries, independent of the physical multiplex layout the NIT describes. The BAT shares the SDT's fixed PID 0x0011 and every section takes table_id 0x4A; the bouquet_id rides in the table_id_extension slot. On the wire the section body is byte-for-byte the NIT shape — a bouquet-level descriptor loop (lifted by BouquetAssociationTable::iter_descriptors, usually carrying the bouquet_name_descriptor of tag 0x47 which decodes to DescriptorBody::BouquetName) followed by a transport_stream_loop of BatTransportStream entries, each pairing (transport_stream_id, original_network_id) with its own descriptor loop walkable via BatTransportStream::iter_descriptors. The BAT gives the oxideav remux bluray:// path the bouquet-level grouping that frames the per-service SDT records, and like the SDT/NIT name descriptors the bouquet-name bytes keep their original annex-A encoding for the caller.

RunningStatusTable::parse reads a DVB RST section (EN 300 468 §5.2.7) from PID 0x0013 / table_id 0x71. The RST is the fast event-status update channel: a dedicated table refreshes the running status of one or more events quicker than waiting for a full EIT cycle, which matters when an event starts early or late due to a scheduling change. It is a short-form section (section_syntax_indicator == 0, no version / section header and no CRC), so the whole body is a flat run of fixed 9-byte RstEntry records, each locating an event by the (transport_stream_id, original_network_id, service_id, event_id) tuple and carrying its updated typed RunningStatus. A body that is not a whole number of entries, a section_length overrun, or a wrong table_id are rejected.

TimeDateTable::parse and TimeOffsetTable::parse read the two DVB time tables that share the fixed PID 0x0014 (EN 300 468 §5.2.5 / §5.2.6). Both are short-form sections — section_syntax_indicator is 0, so there is no table_id_extension / version_number / section_number header and the body starts immediately after the 12-bit section_length. The TDT (table_id 0x70) carries nothing but the 40-bit UTC_time and has no CRC; the TOT (table_id 0x73) adds a CRC-32 (verified the same way as a long-form section) plus a descriptor loop. Both reuse the same decode_utc_time helper that decodes the EIT start_time — 16 bits of MJD converted to a Gregorian (year, month, day) via the annex-C integer formula, then 24 bits of 6-digit BCD UTC time. TimeOffsetTable::iter_descriptors walks the loop, where the local_time_offset_descriptor (tag 0x58) decodes to DescriptorBody::LocalTimeOffset — a flat array of per-country entries giving the country_code, country_region_id, signed local_time_offset / next_time_offset (in minutes), and the time_of_change instant. The TDT/TOT give the oxideav remux bluray:// path an absolute wall-clock anchor for a title, and the TOT's offset lets a player turn that UTC into local time across a daylight-saving boundary. The spec's worked example (0xC0 7912 4500 → 1993-10-13 12:45:00 UTC) is pinned as a test for both tables.

PsiSectionAssembler is the building block that turns a stream of TS-packet payloads on a single PSI PID into a stream of complete sections. The §2.4.4 wire rules are enforced in one place: a PUSI=1 TS payload begins with a pointer_field that completes whatever section was in flight; a PUSI=0 payload contributes continuation bytes; 0xFF table_id terminates iteration inside a single payload; and a continuity_counter skip discards the in-flight buffer rather than concatenating misordered bytes. The demuxer's PAT and PMT discovery loops both drive an assembler so a PMT with rich descriptor blocks (multi-language PGS + multi-codec audio + HEVC + … ) can grow past the ~184-byte single-TS payload budget without losing the trailing streams.

PcrTracker consumes one adaptation field per packet on the configured PCR_PID and emits PcrEvent::Sample { pcr, jitter_27mhz, bitrate_bps } for normal flow or PcrEvent::Discontinuity { reason } when either (a) the adaptation field carries discontinuity_indicator = 1 (§2.4.3.5) or (b) the observed PCR jump exceeds the configured tolerance window. Jitter is the signed residual in 27 MHz ticks between the observed PCR delta and the delta predicted by the previous pair's bitrate. Default window is 100 ms — well above the ±500 ns spec tolerance but tight enough to catch a clean time-base reset that didn't bother to set the indicator.

ContinuityTracker is a sibling observer for the 4-bit continuity_counter per §2.4.3.3 — emits Continuous / Duplicate / NoPayload / Dropped { gap } / Discontinuity. Duplicate-cap enforcement (max one repeat per CC) is built in: a second identical CC reads as a drop, not a second duplicate.

License

MIT — see LICENSE.