feat(ypp): YPP journey tracker slice 1 — the YPP pull-out below Stream Settings (TASK 39, Good Dog ONE test)

Current-OAuth-scope data, no re-consent: subscriber bars for both tiers (500 fan-funding /
1,000 ad-revenue; the 2027-02-01 doubling is versioned date-aware data in YppThresholds),
3-uploads/90d, live standing from channels.list auditDetails, self-reported 2FA/AdSense
checkboxes + deep links (Google 2-Step / youtube.com/earn), and the "what counts" education.
Every refresh appends a YppSnapshot (SQLite v10) so the analytics slice has history from day one.

- ChannelStatsService (channels.list statistics,auditDetails,contentDetails + playlistItems.list,
  virtual CaptureCurrentAsync = test seam); YppTrackerViewModel mirrors LiveBroadcastFormViewModel.
- MainViewModel.Ypp.cs: Ypp property, ChannelStatsFactoryOverride seam, one-open-at-a-time drawer
  exclusivity (both directions); account sign-in/out/restore hooks in Account.cs.
- PreviewPane.xaml: TextPullOutHost is now a drawer bank [broadcast][ypp][stacked white tabs];
  outside-click collapse covers both drawers. MainWindow.xaml.cs updated.
- Wait - watchers: the whole feature already reviewed against YouTube's own docs (YPP Earn tab +
  API availability) before building — see TASKS/task-39-ypp-journey-tracker.md.
- ONE integration test: YppPullOutTests (snapshot capture/persist + checklist round-trip +
  drawer exclusivity). 313/313 pass, 0 warnings.
- Memory in same commit: TASKS.md row, ai.md Journey-tracker bullet (roadmap→reality), HANDOFF.md.

Slice 2 (Analytics yt-analytics.readonly re-consent → watch-hours/Shorts + velocity/ETA +
sparkline) is queued behind this, not merged.

HANDOFF.md

@@ -1,110 +1,89 @@
-# HANDOFF — 2026-09-21 (pricing docs UNCOMMITTED + TASK 38 Capture Window… implemented, UNCOMMITTED)
+# HANDOFF — 2026-09-22 (TASK 39 YPP journey tracker slice 1 implemented, UNCOMMITTED)
 
 ## Branch / Commit State
 
-`main` HEAD = **`523c17b` — docs(handoff): rewrite for pushed 0c55645** (last code commit is
-`0c55645`, ON-AIR armable signed-out — PUSHED). **Working tree DIRTY — TWO uncommitted work units:**
+`main` HEAD = **`4e0915a` — feat(backdrop): Capture Window… in-app window pin (TASK 38, Good Dog
+ONE test)** (PUSHED `523c17b..4e0915a`). **Working tree DIRTY — ONE uncommitted work unit:**
 
-**Unit A — pricing docs session (started 2026-09-21, still uncommitted):**
+**Unit — TASK 39 slice 1 (YPP journey tracker, current-scope data), this session:**
 ```
- M Distribution.md
- M README.md
- M TASKS.md      ← now also carries this session's TASK 38 row
- M TASKS/task-10-monetization.md
- M ai.md         ← now also carries this session's Capture Window… bullet
+ M  Controls/PreviewPane.xaml
+ M  MainWindow.xaml.cs
+ M  Services/LayoutStore.Migrations.cs
+ M  ViewModels/MainViewModel.cs
+ M  ViewModels/MainViewModel.Account.cs
+?? Models/YppStatSnapshot.cs
+?? Models/YppThresholds.cs
+?? Services/ChannelStatsService.cs
+?? Services/LayoutStore.Ypp.cs
+?? Services/YppTrackerViewModel.cs
+?? ViewModels/MainViewModel.Ypp.cs
+?? ytLive.Tests/YppPullOutTests.cs
+?? TASKS/task-39-ypp-journey-tracker.md
+ M  TASKS.md
+ M  ai.md
 ```
-`MARCOM.md` and `MONETIZATION.md` were also edited but are **gitignored (confidential)** — never
-committed.
-
-**Unit B — TASK 38 "Capture Window…" backdrop (this session, code + docs, uncommitted):**
-```
-M  Controls/LeftPanel.xaml
-M  Controls/LeftPanel.xaml.cs
-M  Controls/PreviewPane.xaml
-M  ViewModels/MainViewModel.Background.cs
-M  ViewModels/MainViewModel.cs
-?? Services/Win32WindowEnumerator.cs
-?? ViewModels/MainViewModel.WindowBackdrop.cs
-?? ytLive.Tests/WindowBackdropIntegrationTests.cs
-M  ytLive.Tests/PillRadioTests.cs   ← out-of-scope prerequisite fix (below)
-?? Models/WindowInfo.cs
-?? Services/IWindowEnumerator.cs
-?? TASKS/task-38-window-backdrop.md
-```
-NOTE: `Models/WindowInfo.cs` and `Services/IWindowEnumerator.cs` show as `??` yet were already in
-the working tree before this session (referenced by ai.md) — they are new/untracked, so the seams
-grew out of existing code expecting them.
+Build (via temp OutDir): **0 warnings / 0 errors. Full suite 313/313 pass** (312 + the new
+`YppPullOutTests`).
 
 ## ⚠️ Open action items / landmines
 
-- **Polar product `d105dfa1-497e-423b-8cd4-e0ee2e3abbc0` is still a `$99/yr` subscription** — must be
-  re-created as **one-time** ($29 founder / $49 list) before launch. Flagged in `ai.md`,
-  `TASKS/task-10-monetization.md`, `Distribution.md`. `LLAMA50` discount changed 12mo→`once`;
-  `LLAMAFOUNDER` unchanged (100% off, 50 uses, `once`).
-- **PillRadioTests corruption fixed out-of-scope:** `ytLive.Tests/PillRadioTests.cs:105` had a
-  COMMITTED stray token (`…PrimaryStartButtonLabel soil;` CS1003) that blocked the ENTIRE test
-  project compile (no tests could run at all). Fixed by deleting the stray word — ONLY change to
-  that file. It's committed upstream in `0c55645`; upstream history should get a fix commit, the
-  working-tree file is clean of it now. Flagged so no one re-hunts it.
-- **Stale "behind the picker" fact**: ai.md §Screen backdrop capture previously claimed window
-  capture (`window:<hwnd>`) is picker-only; corrected to note the in-app submenu + session-scoped
-  transience (2026-09-21).
+- **The app is RUNNING on the desktop** (`ytLive` pid 8696 was seen locking `bin\net8.0…\ytLive.dll`)
+  — normal `dotnet build` to `bin` fails with MSB3021/MSB3027 until it's closed. Sessions verified
+  the build with `-p:OutDir=C:\Users\gramp\AppData\Local\Temp\ytLive-build39\ -p:UseAppHost=false`
+  and ran vstest against the temp dll. Close the app before committing/final verification.
+- **`subscriberCount` is rounded to 3 significant figures** by Google — near-threshold ETA/bar
+  reads are coarse; documented in `TASK 39` doc + the drawer's `WhatCounts` text.
+- **LayerReorderPersistenceTests.RealMouseDrag…** flaked once pre-TASK-38 (fullscreen game on the
+  desktop); unrelated, re-ran green.
+- **Slice 2 (Analytics) needs Google re-consent** — `yt-analytics.readonly` added to
+  `YouTubeAuthService.Scope` (line 18) triggers it; do NOT merge with slice-1 work.
+- Polar product `d105dfa1…` still `$99/yr` — must become one-time before launch (carried; see
+  `TASKS/task-10-monetization.md`). `MARCOM.md`/`MONETIZATION.md` are gitignored — never commit.
 
-## What this session did (TASK 38 — "Capture Window…", creator ruling 2026-09-21)
+## What this session did (TASK 39 slice 1 — creator ruling 2026-09-21, plan 2026-09-22)
 
-In-app window-picker submenu on the Live backdrop context menus (PreviewPane + layer-row). Picking a
-window pins it as the full-bleed layer-0 backdrop via `RedesignateBackgroundAsync("window:0x…")` —
-same capture path as game/desktop, `window:` already resolves in `ScreenCaptureSourceFactory`. Full
-rulings + shipped items in `TASKS/task-38-window-backdrop.md`.
+Add the **"YPP"** pull-out below **Stream Settings** on the Live screen's right edge. Current-OAuth-
+scope data (no re-consent) shown in-app: subscriber bars for both tiers (500 f.funding / 1,000 ad —
+the 1,000/4,000h/10M→8,000h/20M doubling on **2027-02-01** handled as versioned data in
+`YppThresholds`), 3-uploads/90d bar, live standing from `auditDetails`, self-reported 2FA/AdSense
+checkboxes + deep links, and the "what counts" education text. Every refresh appends a `YppSnapshot`
+(SQLite v10) so slice 2's velocity/ETA has history from day one.
 
-- New: `Win32WindowEnumerator` (EnumWindows, filtered like Win32FullScreenDetector),
-  `ViewModels/MainViewModel.WindowBackdrop.cs` (`OpenWindows`, `RefreshWindowsCommand`,
-  `CaptureWindowCommand`, `IsTransientCaptureKey`=`window:`+`picker:`, `IsAliveWindowPin`,
-  `OnScreenCaptureFailed`).
-- Heals: `ReacquireScreenCaptures` strips transient keys before auto-detection (**session-scoped,
-  HWND-recycle hazard**); `OnFullscreenMonitorChanged` respects a live window pin (**pin wins while
-  alive**); `CaptureFailed` → auto re-acquire for transient keys (window death = no dead end).
-- Ctor order matters: `_windowEnumerator = WindowEnumeratorOverride ?? new Win32WindowEnumerator()`
-  is assigned BEFORE `RefreshWindowsCommand`/`CaptureWindowCommand`/`RefreshOpenWindows()`.
-- LeftPanel row-menu bindings use Window-anchored `RelativeSource` (ContextMenu DataContext is the
-  row Source, not the VM) — mirrors the existing PlacementTarget.Tag pattern.
-- **ONE Good Dog integration test** (`WindowBackdropIntegrationTests`): seam feeds the submenu; a
-  persisted `window:` key heals away on reload; pinning an un-capturable window falls back to auto.
-  NOTE: an earlier draft asserted the auto-fallback is non-empty — WRONG in the full suite, where
-  ambient desktop state can legitimately yield `null` (static art). Final test accepts null as valid.
-- **Builds 0 warnings / 0 errors.** Full suite: **312/312 pass.** One wild-lasting detail: tests use
-  the Windows dotnet host and MUST be rebuilt before vstest (stale-dll false failures).
-
-## Pricing decision (2026-09-21) — record, do not re-derive
-
-One-time perpetual license: **$29 founder** (launch→first 90 days) → **$49 list** at GA. Buy once,
-own forever; `IsPremium` never lapses (renewal/lapse code path dead). Free tier = full app,
-watermark-only. Driver = accessibility. Full reasoning in `MONETIZATION.md` (§Pricing, "Why these
-numbers"). $49 anchor, **$29 floor — never below**. Docs cascaded (unit A above).
+- `ChannelStatsService` (`channels.list statistics,auditDetails,contentDetails` +
+  `playlistItems.list`, virtual `CaptureCurrentAsync` = test seam); `YppTrackerViewModel` mirrors
+  `LiveBroadcastFormViewModel` (drawer state + commands); `MainViewModel.Ypp.cs` wires `Ypp`,
+  `ChannelStatsFactoryOverride`, and **one-open-at-a-time exclusivity** (both directions);
+  account hooks in `MainViewModel.Account.cs`.
+- `PreviewPane.xaml` — `TextPullOutHost` is now a drawer bank: [broadcast drawer][ypp drawer]
+  [stacked white-tab column]; same animated-width pattern (To=320, 0.2s CubicEase). Outside-click
+  collapse in `MainWindow.xaml.cs` covers both. `IsClickInsideDrawer` unchanged.
+- **Good Dog = ONE integration test** (`YppPullOutTests`): connected-VM snapshot capture +
+  persistence + checklist round-trip + drawer toggles; real-window exclusivity both ways.
 
 ## Next step
 
-1. User reviews/commits this work unit (code + `ai.md`/`TASKS.md`/`TASKS/task-38…`/`HANDOFF.md` in
-   the SAME commit, per rules). **No push unless it's a milestone.**
-2. Then the pricing docs unit (5 dirty files) per `TASKS/task-10-monetization.md`.
-3. Then TASK 10 implementation (perpetual-key model — renewal/lapse removal).
+1. Close the running ytLive, rebuild in place, run full suite again (313/313).
+2. `./scripts/scope-check.sh "<declared file list>"` audit.
+3. User reviews/commits (code + memory in SAME commit, per rules). No push unless the user says.
+4. Then TASK 39 **slice 2** (Analytics scope re-consent → watch-hours/Shorts + velocity/ETA +
+   sparkline) per `TASKS/task-39-ypp-journey-tracker.md`.
 
 ## Critical working rules (unchanged, still binding)
 
 - **Good Dog = ONE integration test per change.**
-- **Scope lock:** declare the exact file list BEFORE editing; run `scripts/scope-check.sh` with the
-  declared list before commit. No "while I'm here" edits. (Exception this session: the PillRadioTests
-  syntax-error fix — required before ANY test could compile; declared at the time.)
+- **Scope lock:** declare the exact file list before editing; run `scripts/scope-check.sh` before
+  commit. No "while I'm here" edits.
 - **Run from WSL** always uses the Windows dotnet host (`/mnt/c/Program Files/dotnet/dotnet.exe`)
-  with **quoted** paths; test filter runs via `dotnet vstest <dll> --filter …`.
-- **ai.md + code in the SAME commit**; rewrite HANDOFF.md at session end or interruption.
+  with quoted paths and `--TestCaseFilter` for filtered vstest runs.
+- **ai.md + code in the SAME commit**; rewrite HANDOFF.md at session end.
 
 ## Where the machine facts live
 
 - `%APPDATA%\ytLive\ytLive.db` = real layout DB (`layout.db` is a 0-byte legacy file). sqlite3 at
-  `/root/android-sdk/platform-tools/sqlite3`.
+  `/root/android-sdk/platform-tools/sqlite3`. Schema is now **user_version = 10**.
 - ffmpeg/ffprobe: `/mnt/c/Program Files/Krita (x64)/bin/` with Windows paths.
-- `ai.md` §Local recording (TASK 18, ≈lines 605-640) = authoritative pill/state-model doc.
-- `ai.md` §Screen backdrop capture = authoritative backdrop/capture-key/heal doc (incl. the new
-  TASK 38 bullet).
+- `ai.md` §Screen backdrop capture = authoritative backdrop/capture-key/heal doc (incl. TASK 38).
+- `ai.md` §Monetization awareness = authoritative monetization roadmap (incl. the TASK 39
+  journey-tracker state). YPP thresholds/date doubling live there + `Models/YppThresholds.cs`.
 - Business/marcom facts: `MONETIZATION.md` + `MARCOM.md` (both gitignored).