Give slow 4K startup a bounded twelve-second window

docs/media-showcase.md

@@ -16,8 +16,8 @@ The recording label sits with the source caption below the player. It does
 not cover the picture or Safari’s native fullscreen control when controls
 appear.
 
-The player pins RelaySwarm source `d2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4`
-([source change](https://github.com/forgesworn/relayswarm/commit/d2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4)).
+The player pins RelaySwarm source `7cef698203e03b2a1038d135590375caacfed922`
+([source change](https://github.com/forgesworn/relayswarm/commit/7cef698203e03b2a1038d135590375caacfed922)).
 It retains the successful peer receipt's stats when hls.js disposes of the
 losing HTTP loader, covered by ten regressions using the actual hls.js 1.7.3
 loaders. It also retains a fully verified contiguous future prefix before considering
@@ -26,8 +26,10 @@ interval falls behind the room target. The original first response remains
 unchanged; releasing it still requires fresh verified coverage of the current
 target and measured recovery headroom. Startup remains
 bounded to four objects within the existing 24 MiB reservation; steady
-warm-ahead keeps its three-object limit. The eight-second deadline, authority
-checks and explicit refusal for insufficient capacity remain. The Rust/WASM
+warm-ahead keeps its three-object limit. Startup now has twelve seconds from
+the original first-fragment load entry, clipped to a shorter parent load
+deadline; ordinary speculative requests keep their eight-second expiry.
+Authority checks and explicit refusal for insufficient capacity remain. The Rust/WASM
 binary is unchanged.
 When an owned whole-source response finishes and its key is already known,
 eligible retained bytes are announced with HAVE before its FETCH claim is
@@ -75,8 +77,8 @@ separate networks and public TURN were not exercised.
 A terminal, unreleased startup barrier now stops that current pipeline and
 restores an explicit Play retry instead of leaving HLS to retry a permanently
 failed loader. Cancelled or retired setups and ordinary retryable HLS errors
-retain their existing ownership rules. This handling does not fix the cause of
-the eight-second startup deadline or extend its deadline. Saved reports retain
+retain their existing ownership rules. That terminal-error handling alone did not fix the cause of
+the then-eight-second startup deadline or extend its deadline. Saved reports retain
 the last observed target, verified interval and required headroom, plus held
 object/byte counts. These are diagnostic snapshots, not proof that those bytes
 remain resident after a failed barrier has been cleared.
@@ -189,8 +191,8 @@ For a new full-recording room, discovery reserves a local candidate identity
 without publishing an active listener or starting its clock. The original HLS
 pipeline prepares verified encoded media at raw position zero. Its SDK startup
 barrier holds the first callback until contiguous media covers measured source
-recovery headroom, within four startup objects, 24 MiB and the original
-eight-second deadline. It then acknowledges the room start over the existing relays, anchors
+recovery headroom, within four startup objects, 24 MiB and a twelve-second
+budget from the original load entry, clipped to a shorter parent deadline. It then acknowledges the room start over the existing relays, anchors
 that same timeline once, and repeats fresh target, authority and coverage checks
 before releasing the callback. Preparation is not decoded playback or an active
 watcher. The trusted play request and visible player remain the same.

scripts/build-media-peer-demo.mjs

@@ -7,7 +7,7 @@ import { tmpdir } from 'node:os';
 import { dirname, join, resolve } from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
-const SOURCE = 'd2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4';
+const SOURCE = '7cef698203e03b2a1038d135590375caacfed922';
 const sha = bytes => createHash('sha256').update(bytes).digest('hex');
 const root = fileURLToPath(new URL('../', import.meta.url));
 

site/live-media.html

@@ -123,6 +123,6 @@
   </main>
   <!-- SHOWCASE_END -->
   <footer class="site-footer"><div class="page-wrap"><div class="footer-inner"><a class="brand" href="/">Forge<span>Sworn</span></a><div class="footer-links"><a href="https://github.com/forgesworn">GitHub</a><a href="/live-media-benchmarks.html">Measured results</a><a href="https://github.com/sponsors/TheCryptoDonkey">Support the work ↗</a></div></div><p class="footer-note">Open-source media software, yours to run.  The supplied mix is licensed for this demonstration; its media rights are separate from the MIT code.  <a href="/media/dejavu-preview/NOTICE.txt">Media permission</a> · <a href="/llms.txt">For developers and LLMs</a></p></div></footer>
-  <script type="module" src="/media-lab.mjs?v=20261027-peer-framing"></script>
+  <script type="module" src="/media-lab.mjs?v=20261027-startup-budget"></script>
 </body>
 </html>

site/media-lab.html

@@ -123,6 +123,6 @@
   </main>
   <!-- SHOWCASE_END -->
   <footer class="site-footer"><div class="page-wrap"><div class="footer-inner"><a class="brand" href="/">Forge<span>Sworn</span></a><div class="footer-links"><a href="https://github.com/forgesworn">GitHub</a><a href="/live-media-benchmarks.html">Measured results</a><a href="https://github.com/sponsors/TheCryptoDonkey">Support the work ↗</a></div></div><p class="footer-note">Open-source media software, yours to run.  The supplied mix is licensed for this demonstration; its media rights are separate from the MIT code.  <a href="/media/dejavu-preview/NOTICE.txt">Media permission</a> · <a href="/llms.txt">For developers and LLMs</a></p></div></footer>
-  <script type="module" src="/media-lab.mjs?v=20261027-peer-framing"></script>
+  <script type="module" src="/media-lab.mjs?v=20261027-startup-budget"></script>
 </body>
 </html>

site/media-lab.mjs

@@ -424,7 +424,7 @@ async function initialise() {
     publicRoom?.stop(); publicRoom = null;
     const pending = (async () => {
       const [{ createListenerSession }, { PUBLIC_SWARM_SOURCE_SHA256, PUBLIC_SWARM_RELAYS }] = await Promise.all([
-        import('./media-listener-session.mjs?v=20261027-peer-framing'), import('./media-public-swarm.mjs?v=20261027-peer-framing'),
+        import('./media-listener-session.mjs?v=20261027-startup-budget'), import('./media-public-swarm.mjs?v=20261027-startup-budget'),
       ]);
       if (request !== publicRoomRequest || pageAbort.signal.aborted) return null;
       const clock = createListenerSession({ room: `forgesworn-dejavu-listening-v${quality === 'full' ? 2 : 1}-${quality}`, source: PUBLIC_SWARM_SOURCE_SHA256,
@@ -1522,7 +1522,7 @@ async function initialise() {
       if (player) {
         let peer, setupEpoch;
         try {
-          const { createPublicSwarm, prepareRecordedSource, createRecordedLive } = await import('./media-public-swarm.mjs?v=20261027-peer-framing');
+          const { createPublicSwarm, prepareRecordedSource, createRecordedLive } = await import('./media-public-swarm.mjs?v=20261027-startup-budget');
           if (!owns() || s.hls !== player) return;
           // These two exports share the exact helper module/recording brand.
           // A cold first room prepares locally before publishing its clock.

site/media-listener-session.mjs

@@ -1,7 +1,7 @@
 // Signed, short-lived observations of a shared listening clock. This is an
 // experimental public addressable event (NIP-01), not NIP-78 private app storage.
 // Relay partitions and dishonest clients prevent an authoritative audience count.
-import { finalizeEvent, generateSecretKey, verifyEvent } from './vendor/media-peer-demo.js?v=20261027-peer-framing';
+import { finalizeEvent, generateSecretKey, verifyEvent } from './vendor/media-peer-demo.js?v=20261027-startup-budget';
 
 export const LISTENER_SESSION_KIND = 30378;
 export const LISTENER_TELEMETRY_KIND = 20378;

site/media-public-swarm.mjs

@@ -3,7 +3,7 @@
 // A receiver's ephemeral key wraps that digest for the existing live-commitment
 // verifier; this is local attestation, not a live broadcaster signing service.
 import { createHlsSwarm, commitmentContent, commitmentPieceSize, segmentMediaContext, KIND_SEGMENT_COMMITMENT, finalizeEvent,
-  generateSecretKey, relayswarmBuild } from './vendor/media-peer-demo.js?v=20261027-peer-framing';
+  generateSecretKey, relayswarmBuild } from './vendor/media-peer-demo.js?v=20261027-startup-budget';
 import { observeOriginLoader } from './media-transfer-stats.mjs?v=20261027-visual-provenance';
 import { createPublicTurnCredentials } from './media-turn-credentials.mjs?v=20261025-prepared-room';
 import { parseRecordedManifest, createRecordedLive } from './media-recorded-live.mjs?v=20261025-prepared-room';
@@ -479,7 +479,7 @@ export function createPublicSwarm({ Hls, hls, video, playlistUrl, quality, signa
         swarm = createSwarm({ mode: 'peer-first', swarmId: plan.swarmId, relays: [...PUBLIC_SWARM_RELAYS],
           streamEvent, getCommitment, serve: true, serveOnCellular: false,
           coreWasm: new URL('./vendor/relayswarm-core.wasm?v=20261026-prepared-adoption', import.meta.url), multiHolder: true,
-          transferWorkerUrl: new URL('./vendor/relayswarm-transfer-worker.js?v=20261027-peer-framing', import.meta.url),
+          transferWorkerUrl: new URL('./vendor/relayswarm-transfer-worker.js?v=20261027-startup-budget', import.meta.url),
           zeroBudgetPeerRace: true, lateHaveRace: true, sustainablePeerWait: true,
           warmAhead: false,
           startupBufferTarget: needsStartupBuffer ? () => {

site/template.html

@@ -1985,6 +1985,6 @@ <h2 class="reveal">Pick a block and start</h2>
       });
     });
   </script>
-  <script type="module" src="/media-lab.mjs?v=20261027-peer-framing"></script>
+  <script type="module" src="/media-lab.mjs?v=20261027-startup-budget"></script>
 </body>
 </html>

site/vendor/media-peer-demo.NOTICE.txt

@@ -1,5 +1,5 @@
 RelaySwarm 0.4.4
-https://github.com/forgesworn/relayswarm/tree/d2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4
+https://github.com/forgesworn/relayswarm/tree/7cef698203e03b2a1038d135590375caacfed922
 
 MIT License
 

site/vendor/media-peer-demo.build.json

@@ -1,17 +1,17 @@
 {
   "schema": 1,
   "project": "https://github.com/forgesworn/relayswarm",
-  "sourceCommit": "d2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4",
+  "sourceCommit": "7cef698203e03b2a1038d135590375caacfed922",
   "version": "0.4.4",
-  "sourceArchiveSha256": "e6eab3078ee3aea52cf787122c2f23e8aac7011d247cd756621b3883abdbdb50",
+  "sourceArchiveSha256": "9af7459d83bb7a0102e3bbbd67d8482d05d10d018c9ab9dd6cb57e31d974a577",
   "packageLockSha256": "18a91b8d697ebcab1d259d4de876167dcbd4d47fc3c82196d179c4c490adca4a",
   "bundle": "media-peer-demo.js",
-  "bundleSha256": "05dbb70f1f8e1df7d6953762993ff82124ad06007ed4c5c26ee2fd721caf5a25",
-  "bundleBytes": 261001,
+  "bundleSha256": "f14a225beb6815344279dfa3bb983c3e00ffc6439d42a4e304164a3d08456bf2",
+  "bundleBytes": 261034,
   "transferWorker": {
     "file": "relayswarm-transfer-worker.js",
     "bytes": 7074,
-    "sha256": "80c1f2dfd599a8adebd163b6f3c86c7199c39b2eb7e411a5c864b1d4a7e5521f",
+    "sha256": "0768f344604df39ad6805f0f8ac48fada171919ad05512a36ac83868002e3e7d",
     "source": "src/browser/core-transfer-worker-runtime.mjs"
   },
   "sourceMap": false,

site/vendor/relayswarm-core.NOTICE.txt

@@ -1,5 +1,5 @@
 RelaySwarm Rust/WebAssembly core
-https://github.com/forgesworn/relayswarm/tree/d2bc7be4e5e7374af0e04aae45b1f1d2f0e890c4
+https://github.com/forgesworn/relayswarm/tree/7cef698203e03b2a1038d135590375caacfed922
 
 MIT License