ytLlive/HANDOFF.md

HANDOFF — session state

Current operational state, read right after TASKS.md. Trust this file as the truth of what is in flight — do not re-derive from git/fs unless it points at a problem. Conventions: schema.md. Rewrite this file at session end, compaction, or any interruption.

Session state (last updated: 2026-08-14)

• Branch: main, in sync with origin/main.

• TASK 8 — meter scaling amplification: SHIPPED + pushed (0b71b03). AudioLevelMeter.ToDisplay adds +10 dB input amplification before the −60..0 dBFS log map: speech peaks (~0.2 RMS) read ~0.93 (red) and normal speech (~0.05) ~0.73 (yellow) at maxed volume; ≤0.001 linear still reads 0 (never idles on background noise). One knob shared by the mic + game bars; × MicVolume untouched.

• TASK 4 ship step 7 — one-click go live + private-only enforcement: SHIPPED (this session; the final open TASK 4 requirement). Double-enforced privacy:

  1. Dialog locked to Private — GoLiveViewModel.Visibility is a get-only "Private", the visibility ComboBox is gone (replaced by a "Streams always start Private" note); settings' dead "Default Visibility" dropdown + MainViewModel.Visibilities/DefaultStreamVisibility removed.
  2. Service forces private — YouTubeStreamService.CreateBroadcast always sends privacyStatus="private"; ctor gained HttpClient? http = null seam for tests.
  3. Wired into go-live — BeginGoLive fires CreateBroadcastAsync (stores _currentBroadcastId for TASK 5's bind/transition; failure → StreamStatus.Error via AppLog, never a crash) + _framePump.StartAsync(); StopStream clears _currentBroadcastId.
  4. PRIVATE badge — dark-red bordered, next to REC in the top bar, Visibility="{Binding IsLivePrivate}" (MainWindow.xaml ~110).
  5. Integration test — ytLive.Tests/YouTubeStreamServiceTests.cs: the broadcast-insert request must carry "privacyStatus":"private" (RecordingHandler seam) + a no-session → null guard test.

• Verified: build 0 warnings / 0 errors; 173/173 tests pass (171 + the 2 stream-service tests).

• Uncommitted (this session's ship step 7 batch): GoLiveWindow.xaml, ViewModels/GoLiveViewModel.cs, ViewModels/MainViewModel.cs, Services/YouTubeStreamService.cs, MainWindow.xaml, ytLive.Tests/YouTubeStreamServiceTests.cs (new), TASKS.md, ai.md, ViewModels/index.md, Services/index.md, HANDOFF.md. Commit + push before continuing.

• Next step: commit + push ship step 7, then TASK 5 — reusable variable stream (create once per channel, cache ingestion URL, bind to broadcast, feed _rtmpUrlProvider so the pump actually pushes — _currentBroadcastId is already stashed for it). Also queued: task 21 (logo + About hub), task 22 (voice filters). Nothing else queued — do not expand the task queue on your own. Optional, not queued: rewriting the healed entry's ProfileUrl to https://mastodon.llamachile.tube/@gramps (user must say the word).

• Landmines:

  • Never add another test that constructs new App() — use RealAppHost.Run(...) (shared STA host for the one WPF App per AppDomain; round-clip + source-naming tests).
  • Never set a local Canvas.SetTop on the social bar — a local value permanently overrides {Binding SocialBarTop} (the ClearValue lesson from 5.5).
  • AudioMixer meter Push is unconditional by design now: OnMicSample/ OnLoopbackSample compute the level first, then raise the event — a ?.Invoke(meter.Push(...)) short-circuit skipped the meter update when nothing was subscribed (found by RestartMic_ResetsLevel, fixed).
  • MicConnected comes from the source Started event, raised right after StartRecording() succeeds — tests must MarkStarted() the fake source before asserting connection state.
  • The mic dot is red until a resource connects (see contract below) — green only after Started, yellow on Failed.
  • Zero mic devices at startup = red dot AND the mixer is never started, so loopback + the game bar can't run either (no capture at all) — acceptable.
  • The game detector is polled on the UI thread via a 250ms DispatcherTimer; OnGameAudioPollTick wraps Poll() in try/catch + AppLog.
  • The pump reads the active scene on a background thread while the UI can still edit it — a concurrent-mutation exception is contained (logged + Failed + the pump stops), not a crash.
  • StopAsync must stop the encoder (closes stdin) before awaiting the pump loop — closing stdin unblocks a write stuck on pipe backpressure; the reverse order deadlocks.
  • Tests never instantiate MainViewModel directly except via a real MainWindow on the RealAppHost STA thread (round-clip + naming), which never go live.
  • Sandbox can't reach outbound HTTPS — HttpSocialValidator stub-handler tests only, never the real instance.

• Mic status contract (creator's rule, verified — do NOT "fix"): the status dot is red until a mic resource is actually connected. MicStatus starts NotConnected (red); it goes green ONLY when the mixer's MicConnected fires, which comes strictly from the mic source's Started event raised after StartRecording() succeeds. Zero devices at startup → stays red and the mixer is never started; capture failure → yellow.

• Secret/DB/port facts live: OAuth client id/secret in Helpers/OAuthCredentials.cs; OAuth session token in Helpers/TokenStore.cs (DPAPI → %APPDATA%\ytLlive\ytLlive.auth); layout DB %APPDATA%\ytLlive\ytLlive.db (schema v8; SocialEntry.Software column is a column-presence migration like the others, no version bump); OAuth callback http://localhost:8765/oauth2/callback; crash log %APPDATA%\ytLlive\startup.log.