Pure-Rust HLS / DASH / CMAF media packager. A memory-safe, dependency-light alternative to Shaka Packager, built and validated against it as the reference oracle.
📖 Read the story:Packaging the World's Video in Pure Rust
Status: Phases 0–5 complete, plus Shaka-parity stream descriptors, HLS/DASH knobs, DRM (CPIX/SPEKE, Widevine key server, HLS AES-128), HTTPS push, and a TLS origin.
probe/package/origindemux MP4, MPEG-TS, WebM/Matroska, and elementary streams; write DASH/HLS with correct codec strings. Video: H.264, H.265, AV1, VP8/VP9. Audio: AAC, AC-3, E-AC-3, MP3, FLAC, Opus. Text: WebVTT + CEA-608/708. CENC matrix + multi-DRMpssh. SeeROADMAP.mdanddocs/CONFORMANCE.md.
Mature DASH/HLS manifest parsers exist in Rust, but a mature packager /
origin does not. sheathe fills the Delivery lane: probe → ladder → CMAF
segment → DASH/HLS manifests, with no C/C++ dependencies.
| Crate | Role | Shaka Packager analogue |
|---|---|---|
sheathe-core | Media model: streams, samples, timing, errors | media/base |
sheathe-mp4 | ISO-BMFF / fMP4 / CMAF box writing + fragmentation | media/formats/mp4 + chunking |
sheathe-ts | MPEG-2 TS demux + mux (PAT/PMT/PES) + audio parsers (AAC/AC-3/E-AC-3/MP3/FLAC) | media/formats/mpeg |
sheathe-es | Raw elementary stream demux (Annex B, ADTS, AC-3/E-AC-3, MP3, FLAC) | media/formats |
sheathe-mkv | WebM/Matroska (EBML) demux — VP8/VP9/AV1 + Opus | media/formats/webm |
sheathe-text | Timed text: WebVTT input + CEA-608 caption extraction → wvtt | media/formats/webvtt |
sheathe-dash | MPEG-DASH .mpd generation | mpd |
sheathe-hls | HLS master + media playlist generation | hls |
sheathe-crypto | Common Encryption (cenc / cbcs) | media/crypto |
sheathe-package | End-to-end pipeline: demux → segment → DASH/HLS | app logic |
sheathe | Facade crate (cargo add sheathe) | — |
sheathe-cli | The sheathe binary (cargo install sheathe-cli) | app (packager) |
cargo install sheathe-cli # installs the `sheathe` binary# or, from a checkout:
cargo run -p sheathe-cli -- --help| Command | Description |
|---|---|
sheathe package | Demux → fragment → CMAF/TS/packed-audio segments + DASH/HLS |
sheathe probe | Dump stream info (Shaka --dump_stream_info) without packaging |
sheathe origin | JIT HTTP(S) origin — package on GET /package?input=… |
Full flag reference, recipes, and output layouts:docs/CLI.md
# VOD: CMAF segments + DASH + HLS
sheathe package input.mp4 -o site/ --dash --hls --segment-duration 6
# Inspect streams
sheathe probe input.mp4
sheathe probe input.ts
sheathe probe input.webm
# ABR ladder (each file = one rendition)
sheathe package v360.mp4 v720.mp4 v1080.mp4 -o ladder/ --dash --hls
# Live-style window from a finished mezzanine
sheathe package mezz.mp4 -o live/ --dash --hls \
--presentation live --live-window 3
# Encrypted (cenc) multi-DRM
sheathe package in.mp4 -o secure/ --dash --hls \
--enc-key 00112233445566778899aabbccddeeff:000102030405060708090a0b0c0d0e0f \
--protection-systems common,widevine,playready
# On-demand single-file DASH
sheathe package in.mp4 -o od/ --dash --on-demand
# MPEG-TS HLS
sheathe package in.mp4 -o ts/ --hls --format ts
# Trick-play + low-latency + SCTE-35 ad markers
sheathe package in.mp4 -o advanced/ --dash --hls \
--trick-play --low-latency --part-duration 0.5 \
--scte35 30:out:15 --scte35 45:in
# Stream descriptors (Shaka `in=file,stream=audio,…`; a bare path still means every track)
sheathe package \
in=movie.mp4,stream=audio,language=eng,hls_name=English,drm_label=AUDIO \
in=movie.mp4,stream=video,bandwidth=4500000 \
-o site/ --dash --hls
# HLS AES-128 (TS / packed-audio) and CENC pattern blocks
sheathe package in.mp4 -o ts/ --hls --format ts --enc-scheme aes128 --enc-key-file keys.txt
sheathe package in.mp4 -o drm/ --dash --hls --enc-key-file keys.txt \
--enc-scheme cbcs --crypt-byte-block 1 --skip-byte-block 9 \
--playready-extra-header-data '<CUSTOM>…</CUSTOM>'# CPIX / SPEKE and Widevine key server
sheathe package in.mp4 -o cpix/ --dash --hls --cpix keys.cpix
sheathe package in.mp4 -o wv/ --dash --hls \
--enable-widevine-encryption --key-server-url https://license.example/cenc \
--content-id 74657374 --signer my-signer \
--aes-signing-key 11… --aes-signing-iv 22…
# Decrypt CENC input, then re-package
sheathe package enc.mp4 -o clear/ --dash --hls --decrypt --enc-key-file keys.txt
# HTTPS push + live rewrite
sheathe package in.mp4 -o out/ --dash --hls \
--http-push https://ingest.example/live --user-agent sheathe \
--presentation live --live-window 3 --live-rewrite
# JIT origin (HTTP, or HTTPS + Basic auth)
sheathe origin --bind 127.0.0.1:8787 --media-root .
sheathe origin --bind 127.0.0.1:8443 --tls-cert cert.pem --tls-key key.pem --auth user:pass
# curl 'http://127.0.0.1:8787/package?input=clip.mp4&format=hls'-h is a compact flag list; --help is Shaka-style long descriptions plus a
packager flag map.
| Group | Flags |
|---|---|
| Arguments | positional paths or Shaka in=…,stream=… descriptors |
| Core | -o/--out, --segment-duration, --dash, --hls |
| Format | --format cmaf|ts|packed-audio, --on-demand, --parallel, --http-push |
| Presentation | --presentation vod|event|live, --live-window, --multi-period |
| Advanced | --trick-play, --low-latency, --part-duration, --scte35, --availability-start-time |
| HLS/DASH | --hls-base-url, --hls-media-sequence-number, --hls-start-time-offset, --create-session-keys, --add-program-date-time, --closed-captions, --use-legacy-vp9-codec-string, --dash-add-last-segment-number, --segment-template-constant-duration, --use-dovi-supplemental-codecs, --mvex-before-trak |
| Encryption | --enc-key, --enc-key-file, --enc-scheme (cenc/cens/cbc1/cbcs/aes128), --enc-key-uri, --protection-systems, --crypto-period-duration, --crypt-byte-block, --skip-byte-block, --playready-extra-header-data, --keys, --decrypt, --cpix, --enable-widevine-encryption, --key-server-url |
| Live / IO | --live-rewrite, --ignore-http-output-failures, --user-agent, --ca-file, --client-cert-file, --disable-peer-verification |
sheathe origin also takes --tls-cert, --tls-key, and --auth user:pass.
See docs/CLI.md for defaults, output directory layout, and every recipe (ABR, multi-period, DRM, LL-HLS, origin, push, oracle).
just check-all # fmt + clippy + test + docs
just oracle input.mp4 # differential vs Shaka Packager
just oracle-corpus # full real-media corpus gate
just bench # throughput vs Shaka (optional)
just corpus # fetch checksum-pinned test media| Doc | Contents |
|---|---|
| docs/CLI.md | Command reference — all subcommands, flags, recipes |
| docs/CONFORMANCE.md | Oracle gates, DASH-IF / mediastreamvalidator, fuzz |
| ROADMAP.md | Phase status (0–5 complete) |
| CHANGELOG.md | Release notes |
| CONTRIBUTING.md | Dev workflow, hooks, style |
Implement in pure Rust, then differential-test output (segments, MPD, playlists) against Shaka Packager on a sample corpus. Numbers and bitstreams that can't be validated against the oracle don't ship.
Rust 1.85 (declared in Cargo.toml's workspace.package.rust-version). CI
reads that exact value and builds against it, so the MSRV can't drift.
MIT OR Apache-2.0.