@voltkit-rtc/client 0.2.0 → 0.4.0

package/src/index.ts

@@ -13,17 +13,54 @@ import { Device, type types as ms } from 'mediasoup-client';
 type Consumer = ms.Consumer;
 type Producer = ms.Producer;
 type RtpCapabilities = ms.RtpCapabilities;
+type RtpCodecCapability = ms.RtpCodecCapability;
 type Transport = ms.Transport;
 type TransportOptions = ms.TransportOptions;
 
 import type { ChatEvents, ChatMessage, ChatState, SendMessageOptions } from './chat.js';
+import {
+  chooseCodec,
+  currentEnv,
+  defaultLayerCount,
+  findCodec,
+  h264HardwareEncode,
+  isAppleMobile,
+  isPhoneOrTablet,
+  normalizeCodec,
+  type CodecPreference,
+} from './device.js';
 import { MusicSource, type MusicInput, type MusicOptions, type TrackSource } from './music.js';
+import {
+  allowedQuality,
+  DEFAULT_VIDEO_POLICY,
+  sameLayout,
+  topLayerSize,
+  videoEncodings,
+  type LayerCount,
+  type VideoEncoding,
+  type VideoPolicy,
+  type VideoQuality,
+} from './quality.js';
+import {
+  parseReceiveStats,
+  parseSendStats,
+  pruneBaseline,
+  VideoLimitWatch,
+  type StatsBaseline,
+  type VideoLimitedEvent,
+  type VideoReceiveStats,
+  type VideoSendStats,
+} from './stats.js';
 
 export { BroadcastPublisher, WhipError, whipEnd, whipOffer } from './broadcast.js';
 export { AudioMixer, MusicSource } from './music.js';
 export type { MusicInput, MusicOptions, TrackSource } from './music.js';
 export type { BroadcastEvents, BroadcastStartOptions, BroadcastState } from './broadcast.js';
 export { ChatClient, ChatRpcError } from './chat.js';
+export { allowedQuality, layerBitrate, videoEncodings, VIDEO_QUALITIES } from './quality.js';
+export type { LayerCount, VideoEncoding, VideoPolicy, VideoQuality } from './quality.js';
+export type { CodecPreference } from './device.js';
+export type { VideoLayerStats, VideoLimitedEvent, VideoLimitReason, VideoReceiveStats, VideoSendStats } from './stats.js';
 export type {
   ChatClientEvents,
   ChatEvents,
@@ -59,6 +96,48 @@ export interface JoinResult {
   claims?: SlotClaim[];
   /** Slots a moderator has locked. */
   blockedSlots?: string[];
+  /**
+   * The highest video quality this project may publish, and the server's cap
+   * on a publisher's incoming bitrate. Absent from older servers: 720p.
+   */
+  video?: VideoPolicy;
+}
+
+export interface PublishOptions {
+  /**
+   * The video quality to send: 1080p, 720p or 480p. Defaults to the highest
+   * the project allows (`videoPolicy.maxQuality`), and is lowered to it if
+   * higher, and to the camera's own size if that is smaller.
+   */
+  quality?: VideoQuality;
+  /**
+   * The most simulcast layers to send: 1, 2 or 3. Defaults to 2 on phones and
+   * tablets and 3 elsewhere. Each layer is a separate encode. When a phone is
+   * too busy, the browser shrinks the picture and then sends fewer layers,
+   * dropping the top one: from three, viewers were left with a quarter of the
+   * picture; from two, the full picture survives every step down to 480×270.
+   * Never more than the picture allows: 3 from 960×540 up, 2 from 480×270,
+   * else 1. Two layers are half and full size. One is full size only, and
+   * every viewer then gets the same stream, whatever their connection.
+   */
+  layers?: LayerCount;
+  /**
+   * The video codec. `'auto'` (the default) sends H.264 on phones and tablets
+   * that encode it in hardware and VP8 everywhere else. `'h264'` and `'vp8'`
+   * force one; a forced H.264 the browser cannot send falls back to VP8 and
+   * fires `error`. A viewer whose browser cannot decode the codec cannot
+   * watch, so force VP8 if your audience uses such browsers.
+   */
+  codec?: CodecPreference;
+  /**
+   * What the encoder gives up first when the device cannot keep up:
+   * `'maintain-resolution'` lowers the frame rate, `'maintain-framerate'` the
+   * picture size, `'balanced'` some of each. Unset leaves the browser's
+   * default. Chrome also takes it from the track's `contentHint`: `'detail'`
+   * keeps resolution, `'motion'` keeps frame rate. Browsers that do not
+   * support it ignore it.
+   */
+  degradationPreference?: 'maintain-resolution' | 'maintain-framerate' | 'balanced';
 }
 
 export interface SlotClaim {
@@ -131,6 +210,15 @@ export interface ClientEvents extends ChatEvents {
    * account is topped up first -- tell the user, and stop asking them to wait.
    */
   usageLimit: (e: UsageLimitNotice) => void;
+  /**
+   * Your camera video is being held back by this device (`cpu`: too busy to
+   * encode it), by the upload (`bandwidth`), or by something else (`other`);
+   * or that has cleared (`none`). Fires when the reason changes and has held
+   * for about 4 s, so brief spikes stay quiet; never `none` first. Tell the
+   * publisher: "your device is busy" or "your connection is slow". Checked
+   * every 2 s, only while publishing a camera and someone listens.
+   */
+  videoLimited: (e: VideoLimitedEvent) => void;
 }
 
 type Handler = (...args: never[]) => void;
@@ -178,6 +266,23 @@ const CLOSE_ENDED = 4003;
 
 const sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));
 
+/** What setPreferredLayers sends; no temporal layer means the full frame rate. */
+interface PreferredLayers {
+  spatialLayer: number;
+  temporalLayer?: number;
+}
+
+const isLayer = (value: unknown): value is number => Number.isInteger(value) && (value as number) >= 0;
+
+/**
+ * Where a new camera stream's bandwidth estimate starts, in kbps. Chrome
+ * otherwise starts low and takes many seconds to climb to the top layer.
+ */
+const VIDEO_START_BITRATE_KBPS = 1500;
+
+/** Why a publish gave up: unpublish() ran while it was under way, and unpublish wins. */
+const unpublishedWhile = (what: string) => `the ${what} was unpublished while it was being published`;
+
 export class StreamClient {
   private ws: WebSocket | null = null;
   private device: Device | null = null;
@@ -203,14 +308,40 @@ export class StreamClient {
   // disconnected: the room looks healthy and shows nothing.
   private wasPublishing = false;
   private publishConstraints: MediaStreamConstraints | null = null;
+  private publishOptions: PublishOptions = {};
   /** In-app music being published, kept across reconnects so it can be published again. */
   private music: MusicSource | null = null;
   private musicProducerId: string | null = null;
   /** What each remote producer carries, so a pause can say "music" rather than just "audio". */
   private readonly remoteSources = new Map<string, TrackSource>();
+  /**
+   * The layers asked for each remote video, by producerId. A reconnect
+   * consumes everything again, and the new consumer would otherwise start at
+   * the full picture.
+   */
+  private readonly preferredLayers = new Map<string, PreferredLayers>();
   private closedByUs = false;
   private reconnecting = false;
   private reconnectAttempt = 0;
+  /** Set once a connect() has joined and set up. Only such a session is reconnected. */
+  private joinedOnce = false;
+  /** The camera producer's layers, to tell whether a new track fits them. */
+  private cameraEncodings: VideoEncoding[] | null = null;
+  // Changes to the camera producer run one at a time. Two overlapping swaps
+  // (an effect toggled on and off quickly) would otherwise both close the
+  // same producer and both produce a new one.
+  private cameraQueue: Promise<unknown> = Promise.resolve();
+  // Bumped by unpublish(). A producer still being made when it runs (camera,
+  // microphone or music) belongs to the publish it ended: it is closed, not
+  // kept.
+  private publishGeneration = 0;
+  private codecFallbackLogged = false;
+  private readonly sendStatsBaseline: StatsBaseline = new Map();
+  private readonly recvStatsBaseline: StatsBaseline = new Map();
+  private readonly limitWatch = new VideoLimitWatch(
+    (baseline) => this.collectVideoStats(baseline),
+    (event) => this.emit('videoLimited', event),
+  );
 
   constructor(private readonly wsUrl: string, token: string) {
     this.token = token;
@@ -223,7 +354,16 @@ export class StreamClient {
       this.listeners.set(event, set);
     }
     set.add(fn as Handler);
-    return () => set!.delete(fn as Handler);
+    // videoLimited costs a getStats every 2 s, so it runs only while heard.
+    if (event === 'videoLimited') this.syncLimitWatch();
+    return () => {
+      set!.delete(fn as Handler);
+      if (event === 'videoLimited') this.syncLimitWatch();
+    };
+  }
+
+  private listenerCount(event: keyof ClientEvents): number {
+    return this.listeners.get(event)?.size ?? 0;
   }
 
   private emit<K extends keyof ClientEvents>(event: K, ...args: Parameters<ClientEvents[K]>): void {
@@ -239,15 +379,37 @@ export class StreamClient {
   // ------------------------------------------------------------- connection
 
   async connect(): Promise<JoinResult> {
-    await this.openSocket();
-    const result = (await this.rpc('join', { token: this.token })) as JoinResult;
-    this.joinResult = result;
+    let result: JoinResult;
+    try {
+      await this.openSocket();
+      result = (await this.rpc('join', { token: this.token })) as JoinResult;
+      this.joinResult = result;
 
-    this.device = new Device();
-    await this.device.load({ routerRtpCapabilities: result.routerRtpCapabilities });
+      this.device = this.createDevice();
+      await this.device.load({ routerRtpCapabilities: result.routerRtpCapabilities });
+    } catch (err) {
+      // A session that never got going: the app has the error. Left open,
+      // the socket would be closed by the server's join deadline instead, and
+      // that close would start reconnecting a session that never began.
+      if (!this.joinedOnce) this.detachSocket();
+      throw err;
+    }
+    // Joined and set up: the next drop gets every reconnect attempt again.
+    // Not when the socket opens -- a join refused with a code worth retrying
+    // (no-capacity) never used them up, and every client of a full cluster
+    // retried about twice a second, forever.
+    this.reconnectAttempt = 0;
+    this.joinedOnce = true;
 
     this.emit('joined', result);
 
+    // A video that ended while this client was away sends it no
+    // producerClosed: forget the layers asked for it.
+    const present = new Set(result.producers.map((p) => p.producerId));
+    for (const producerId of this.preferredLayers.keys()) {
+      if (!present.has(producerId)) this.preferredLayers.delete(producerId);
+    }
+
     // Subscribe to everything already publishing before we announce readiness.
     for (const p of result.producers) {
       await this.consume(p).catch((err) => this.emit('error', err as Error));
@@ -262,6 +424,11 @@ export class StreamClient {
     return result;
   }
 
+  /** A new mediasoup Device for each join. Its own method so tests, which have no WebRTC, can stand one in. */
+  private createDevice(): Device {
+    return new Device();
+  }
+
   private openSocket(): Promise<void> {
     // Abandon any previous socket first. Its close handler checks identity
     // against `this.ws`, so once it is detached it can no longer trigger a
@@ -275,7 +442,6 @@ export class StreamClient {
       this.ws = ws;
 
       const onOpen = () => {
-        this.reconnectAttempt = 0;
         this.emit('connected');
         resolve();
       };
@@ -300,6 +466,9 @@ export class StreamClient {
           // displace it, and it would displace us right back, forever.
           this.emit('error', new Error('this identity connected from somewhere else'));
           this.closedByUs = true;
+          // The producers outlive this close until the app calls close(); the
+          // videoLimited sampling must not, or it reports after `closed`.
+          this.limitWatch.reset();
           this.emit('closed', 'replaced');
           return;
         }
@@ -307,9 +476,13 @@ export class StreamClient {
           // Normally roomClosed has already ended the session; this covers a
           // close that arrived without it.
           this.closedByUs = true;
+          this.limitWatch.reset();
           this.emit('closed', 'room-closed');
           return;
         }
+        // Before a first successful join the app is still waiting on
+        // connect(), which reports the failure; there is nothing to restore.
+        if (!this.joinedOnce) return;
         void this.scheduleReconnect();
       });
     });
@@ -352,8 +525,12 @@ export class StreamClient {
         if (this.closedByUs) return;
         try {
           this.teardownMedia();
-          await this.connect();
-          return; // connect() resets the attempt counter once the socket opens
+          await this.connect(); // which resets the attempt counter once joined
+          // The socket can drop again while the session is being restored,
+          // and its close handler then finds this loop still running and
+          // leaves it to us. Returning would leave the client disconnected
+          // for good, with no `closed`.
+          if (this.ws) return;
         } catch (err) {
           this.emit('error', err as Error);
           // Stop on failures a retry cannot resolve. Hammering a room that has
@@ -378,6 +555,9 @@ export class StreamClient {
     this.closedByUs = true;
     this.wasPublishing = false;
     this.teardownMedia();
+    this.preferredLayers.clear();
+    // Nothing is emitted after closing, so not even a clearing videoLimited.
+    this.limitWatch.reset();
     // Producers no longer stop their tracks, so releasing the camera and
     // microphone is ours to do -- otherwise the device light stays on.
     this.localStream?.getTracks().forEach((t) => t.stop());
@@ -394,6 +574,10 @@ export class StreamClient {
     for (const p of this.producers.values()) p.close();
     this.producers.clear();
     this.musicProducerId = null;
+    this.cameraEncodings = null;
+    // Paused, not reset: a reconnect's republish starts it again, and a
+    // limitation already reported is not reported twice.
+    this.syncLimitWatch();
     this.sendTransport?.close();
     this.recvTransport?.close();
     this.sendTransport = null;
@@ -466,6 +650,7 @@ export class StreamClient {
         break;
       case 'producerClosed': {
         const { producerId, identity } = data as { producerId: string; identity: string };
+        this.preferredLayers.delete(producerId);
         const consumer = this.consumers.get(producerId);
         if (!consumer) break; // never consumed it, or already cleaned up
         consumer.close();
@@ -643,12 +828,23 @@ export class StreamClient {
    *
    * Pass the constraints used to obtain the stream and they will be reused to
    * reacquire the devices if a reconnect finds the tracks have ended.
+   *
+   * `options.quality` picks 1080p, 720p or 480p (see `videoPolicy` for what
+   * the project allows). Capture at least that size for the full picture.
+   * `options.layers`, `codec` and `degradationPreference` tune how the video
+   * is encoded; the defaults suit both phones and computers. The options are
+   * kept for a reconnect's republish.
    */
-  async publish(stream: MediaStream, constraints?: MediaStreamConstraints): Promise<void> {
+  async publish(stream: MediaStream, constraints?: MediaStreamConstraints, options?: PublishOptions): Promise<void> {
+    const generation = this.publishGeneration;
     const transport = await this.ensureSendTransport();
+    // unpublish() ran first: this publish is over before it began, and must
+    // leave nothing behind that a reconnect would publish again.
+    if (generation !== this.publishGeneration) throw new Error(unpublishedWhile('stream'));
     this.localStream = stream;
     this.wasPublishing = true;
     if (constraints) this.publishConstraints = constraints;
+    if (options) this.publishOptions = { ...options };
 
     const audio = stream.getAudioTracks()[0];
     if (audio) {
@@ -660,26 +856,384 @@ export class StreamClient {
         codecOptions: { opusStereo: true, opusDtx: true, opusFec: true },
         appData: { source: 'mic' },
       });
-      this.producers.set(producer.id, producer);
+      await this.keepProducer(producer, generation, 'microphone');
+      // A microphone handed over switched off, or muted before a reconnect.
+      await this.pauseOnServer(producer);
     }
 
     const video = stream.getVideoTracks()[0];
     if (video) {
-      // Simulcast from day one: retrofitting it later is genuinely annoying,
-      // and it is what lets one node serve far more viewers.
-      const producer = await transport.produce({
-        track: video,
+      // The track is read when the camera's turn comes: one handed to
+      // replaceVideoTrack while this publish was under way is the one to send.
+      await this.cameraTask(() => this.produceCamera(transport, this.localStream?.getVideoTracks()[0] ?? video, generation));
+    }
+  }
+
+  /** What this project may publish. Known once joined; 720p before that. */
+  get videoPolicy(): VideoPolicy {
+    return this.joinResult?.video ?? DEFAULT_VIDEO_POLICY;
+  }
+
+  /** The quality video is being sent at, after the project's limit. */
+  get videoQuality(): VideoQuality {
+    return allowedQuality(this.publishOptions.quality, this.videoPolicy);
+  }
+
+  /**
+   * Change the video quality while publishing. The camera's producer is
+   * replaced, so viewers see a brief pause while the new one starts. Resolves
+   * to the quality actually used, after the project's limit. Capture at least
+   * that size (for example with `track.applyConstraints`) first.
+   */
+  async setVideoQuality(quality: VideoQuality): Promise<VideoQuality> {
+    this.publishOptions = { ...this.publishOptions, quality };
+    await this.cameraTask(async () => {
+      const current = this.cameraProducer();
+      const track = current?.track;
+      if (!current || !track || track.readyState !== 'live') return;
+      await this.reproduceCamera(current, track);
+    });
+    return this.videoQuality;
+  }
+
+  /**
+   * Send a different video track from now on: a canvas with effects drawn on
+   * it, the raw camera again, another camera. When the new track needs the
+   * same layers as the current one (the same size, or another size the
+   * project's quality scales alike), viewers see no pause, and the layers
+   * take the new picture's bitrates. Otherwise the camera producer is
+   * replaced, as `setVideoQuality` does. Either way a paused camera stays
+   * paused.
+   *
+   * Your own stream is left as it is: the client keeps a stream of its own
+   * (`local`, announced by `localStreamChanged`) with the new track and your
+   * microphone, and a reconnect republishes that. The track you replaced is
+   * not stopped; it is yours again, switched back on if pausing the camera
+   * had switched it off. Rejects when no camera is being published.
+   */
+  async replaceVideoTrack(track: MediaStreamTrack): Promise<void> {
+    if (!track || track.kind !== 'video') throw new TypeError('replaceVideoTrack needs a video track');
+    if (track.readyState === 'ended') throw new Error('replaceVideoTrack: that track has ended');
+    await this.cameraTask(async () => {
+      const current = this.cameraProducer();
+      // Between a dropped connection and the republish there is no producer,
+      // but the camera is still being published: the republish sends this.
+      const reconnecting = !current && this.wasPublishing && (this.localStream?.getVideoTracks().length ?? 0) > 0;
+      if (!current && !reconnecting) throw new Error('replaceVideoTrack: no camera is being published');
+      if (!current) {
+        // The republish reads the camera's state off the track it sends, and
+        // the track being replaced is switched off exactly when the camera is
+        // paused. Hand that state on, or a camera that was off comes back on;
+        // and the old track back switched on, as below.
+        const replaced = this.localStream?.getVideoTracks()[0];
+        if (replaced && replaced !== track) {
+          track.enabled = replaced.enabled;
+          replaced.enabled = true;
+        }
+      }
+      this.adoptVideoTrack(track);
+      if (!current || current.track === track) return;
+      const previous = current.track;
+      const paused = current.paused;
+      try {
+        const { width = 0, height = 0 } = track.getSettings();
+        const next = videoEncodings(width, height, this.videoQuality, this.layerCount());
+        if (this.cameraEncodings && sameLayout(this.cameraEncodings, next)) {
+          await current.replaceTrack({ track });
+          await this.applyLayerBitrates(current, next);
+          return;
+        }
+        await this.reproduceCamera(current, track);
+      } finally {
+        // Pausing switched the old track off (mediasoup-client pauses that
+        // way), and nothing switches it back on once it is replaced. It is the
+        // app's again, often the camera its canvas draws from: handed back
+        // off, that canvas stays black after the camera is resumed.
+        if (paused && previous && previous !== this.cameraProducer()?.track) previous.enabled = true;
+      }
+    });
+  }
+
+  /**
+   * Give a camera producer whose track was swapped in place the bitrates of
+   * its new picture. The layout matched, but a bigger picture at the same
+   * scales (a 1280×720 canvas for a 960×540 camera) would otherwise stay
+   * capped at the smaller one's. Best effort: a browser that refuses keeps
+   * the old caps.
+   */
+  private async applyLayerBitrates(producer: Producer, encodings: VideoEncoding[]): Promise<void> {
+    const before = this.cameraEncodings;
+    if (before && before.every((encoding, i) => encoding.maxBitrate === encodings[i]?.maxBitrate)) {
+      this.cameraEncodings = encodings;
+      return;
+    }
+    const sender = producer.rtpSender;
+    if (!sender) return;
+    try {
+      const parameters = sender.getParameters();
+      // One entry per layer, smallest first, as they were produced. A browser
+      // that reports them some other way is left with its own.
+      if (parameters.encodings.length !== encodings.length) return;
+      parameters.encodings.forEach((encoding, i) => {
+        encoding.maxBitrate = encodings[i].maxBitrate;
+      });
+      await sender.setParameters(parameters);
+      this.cameraEncodings = encodings;
+    } catch {
+      // Unsupported here; the layers keep the caps they were produced with.
+    }
+  }
+
+  /**
+   * What your camera video is sending now, layer by layer, or null when no
+   * camera is being published. The top-level fields describe the biggest
+   * layer going out. `qualityLimitation` says why it is less than asked:
+   * `cpu` is this device, `bandwidth` the upload, `none` neither (then check
+   * the camera and the light). Bitrates are averaged since the previous call,
+   * so call it every second or two; the first call reports 0.
+   */
+  async getVideoStats(): Promise<VideoSendStats | null> {
+    return this.collectVideoStats(this.sendStatsBaseline);
+  }
+
+  /**
+   * What this client receives of a remote video (by its `producerId`, from
+   * the `track` event), or null when it is not receiving that video. Bitrates
+   * are averaged since the previous call for it; the first call reports 0.
+   */
+  async getReceiveStats(producerId: string): Promise<VideoReceiveStats | null> {
+    const consumer = this.consumers.get(producerId);
+    if (!consumer || consumer.kind !== 'video') return null;
+    let report: RTCStatsReport;
+    try {
+      report = await consumer.getStats();
+    } catch (err) {
+      if (consumer.closed) return null;
+      throw err;
+    }
+    const live = new Set([...this.consumers.values()].map((c) => c.id));
+    pruneBaseline(this.recvStatsBaseline, (key) => live.has(key));
+    return parseReceiveStats(report.values(), { producerId, baseline: this.recvStatsBaseline, key: consumer.id });
+  }
+
+  /**
+   * Receive a smaller copy of someone's video (by its `producerId`, from the
+   * `track` event), for a tile that does not need the full picture. Spatial
+   * layer 0 is the smallest copy the publisher sends: a computer sends three
+   * (at 720p 320×180, 640×360 and 1280×720), a phone two (640×360 and
+   * 1280×720), and a layer above the biggest means the biggest. Leave
+   * `temporalLayer` out to keep the full frame rate. It is the most this
+   * client is sent: a connection that cannot carry it still gets less. The
+   * choice is kept across reconnects and forgotten when the track ends.
+   * Rejects for a producer whose video this client is not receiving.
+   */
+  async setPreferredLayers(producerId: string, spatialLayer: number, temporalLayer?: number): Promise<void> {
+    if (!isLayer(spatialLayer) || (temporalLayer !== undefined && !isLayer(temporalLayer))) {
+      throw new RangeError('setPreferredLayers: layers are whole numbers from 0');
+    }
+    const consumer = this.consumers.get(producerId);
+    if (!consumer || consumer.kind !== 'video') {
+      throw new Error(`setPreferredLayers: this client is not receiving a video with producerId ${producerId}`);
+    }
+    const layers: PreferredLayers = temporalLayer === undefined ? { spatialLayer } : { spatialLayer, temporalLayer };
+    // Kept first: a reconnect that interrupts the request still applies it.
+    this.preferredLayers.set(producerId, layers);
+    await this.rpc('setPreferredLayers', { consumerId: consumer.id, ...layers });
+  }
+
+  private async collectVideoStats(baseline: StatsBaseline): Promise<VideoSendStats | null> {
+    const producer = this.cameraProducer();
+    if (!producer) return null;
+    let report: RTCStatsReport;
+    try {
+      report = await producer.getStats();
+    } catch (err) {
+      if (producer.closed) return null;
+      throw err;
+    }
+    const prefix = `${producer.id}:`;
+    pruneBaseline(baseline, (key) => key.startsWith(prefix));
+    return parseSendStats(report.values(), { quality: this.videoQuality, baseline, keyPrefix: prefix });
+  }
+
+  private cameraProducer(): Producer | undefined {
+    for (const p of this.producers.values()) {
+      if (p.kind === 'video' && (p.appData as { source?: string }).source === 'camera') return p;
+    }
+    return undefined;
+  }
+
+  private cameraTask<T>(task: () => Promise<T>): Promise<T> {
+    const run = this.cameraQueue.then(task, task);
+    this.cameraQueue = run.catch(() => undefined);
+    return run;
+  }
+
+  /** Swap the video in the client's own stream, never the app's. */
+  private adoptVideoTrack(track: MediaStreamTrack): void {
+    const previous = this.localStream;
+    if (previous && previous.getVideoTracks()[0] === track) return;
+    const others = previous ? previous.getTracks().filter((t) => t.kind !== 'video') : [];
+    this.localStream = new MediaStream([...others, track]);
+    this.emit('localStreamChanged', this.localStream);
+  }
+
+  /** Close the camera producer and produce `track` in its place, paused on both ends if it was. */
+  private async reproduceCamera(current: Producer, track: MediaStreamTrack): Promise<Producer> {
+    const generation = this.publishGeneration;
+    const paused = current.paused;
+    current.close();
+    this.producers.delete(current.id);
+    this.cameraEncodings = null;
+    this.syncLimitWatch();
+    await this.rpc('closeProducer', { producerId: current.id }).catch(() => undefined);
+    return this.produceCamera(await this.ensureSendTransport(), track, generation, paused);
+  }
+
+  /** `options.layers` when valid, else 2 on phones and tablets and 3 elsewhere. */
+  private layerCount(): LayerCount {
+    const asked = this.publishOptions.layers;
+    return asked === 1 || asked === 2 || asked === 3 ? asked : defaultLayerCount();
+  }
+
+  /**
+   * Produce the camera from `track`, paused on both ends when `paused`. By
+   * default the track says: one handed over switched off is a camera that is
+   * off, and so is one a pause switched off before a reconnect.
+   */
+  private async produceCamera(
+    transport: Transport,
+    track: MediaStreamTrack,
+    generation: number,
+    paused = !track.enabled,
+  ): Promise<Producer> {
+    if (generation !== this.publishGeneration) throw new Error(unpublishedWhile('camera'));
+    // mediasoup-client starts a producer paused exactly when its track is
+    // off. Setting the track to the camera's state first makes the producer
+    // start in it, and a camera that is off never sends a frame of the new
+    // track; the server is told below.
+    track.enabled = !paused;
+    // Simulcast from day one: it is what lets one node serve far more viewers.
+    // The layers follow the picture's real size, the project's quality and
+    // the device, so the browser sends every layer asked for (see
+    // videoEncodings).
+    const { width = 0, height = 0 } = track.getSettings();
+    const quality = this.videoQuality;
+    const encodings = videoEncodings(width, height, quality, this.layerCount());
+    let codecs: RtpCodecCapability[] | undefined;
+    try {
+      codecs = this.device?.sendRtpCapabilities.codecs;
+    } catch {
+      codecs = undefined;
+    }
+    const chosen = await this.cameraCodec(codecs, encodings, width, height, quality);
+    const produce = (codec: RtpCodecCapability | undefined) =>
+      transport.produce({
+        track,
         stopTracks: false,
-        encodings: [
-          { rid: 'q', scaleResolutionDownBy: 4, maxBitrate: 200_000, scalabilityMode: 'L1T3' },
-          { rid: 'h', scaleResolutionDownBy: 2, maxBitrate: 600_000, scalabilityMode: 'L1T3' },
-          { rid: 'f', scaleResolutionDownBy: 1, maxBitrate: 1_800_000, scalabilityMode: 'L1T3' },
-        ],
-        codecOptions: { videoGoogleStartBitrate: 1000 },
+        encodings,
+        codecOptions: { videoGoogleStartBitrate: VIDEO_START_BITRATE_KBPS },
+        ...(codec ? { codec } : {}),
         appData: { source: 'camera' },
       });
-      this.producers.set(producer.id, producer);
+    let producer: Producer;
+    try {
+      producer = await produce(chosen.capability);
+    } catch (err) {
+      // Never fail a publish over the codec: H.264 refused is VP8 instead.
+      // A closed transport (a reconnect under way) fails either way.
+      if (chosen.codec !== 'h264' || transport.closed) throw err;
+      this.reportCodecFallback(`H.264 was refused (${(err as Error).message}): publishing VP8 instead`);
+      producer = await produce(findCodec(codecs, 'vp8'));
     }
+    // unpublish() may have run while this was being made (a publish, a
+    // quality change or a track swap under way).
+    await this.keepProducer(producer, generation, 'camera');
+    this.cameraEncodings = encodings;
+    await this.pauseOnServer(producer);
+    await this.applyDegradationPreference(producer);
+    this.syncLimitWatch();
+    return producer;
+  }
+
+  /**
+   * Keep a producer just made -- unless unpublish() ran while it was being
+   * made. Kept, it would publish again what was just unpublished, so it is
+   * closed instead, on both ends.
+   */
+  private async keepProducer(producer: Producer, generation: number, what: string): Promise<void> {
+    if (generation !== this.publishGeneration) {
+      producer.close();
+      await this.rpc('closeProducer', { producerId: producer.id }).catch(() => undefined);
+      throw new Error(unpublishedWhile(what));
+    }
+    this.producers.set(producer.id, producer);
+  }
+
+  /**
+   * mediasoup-client makes a producer paused when its track is off, and the
+   * server makes every producer live. Unless the server is told, viewers get
+   * black video or silence from a camera or microphone they are told is on.
+   */
+  private async pauseOnServer(producer: Producer): Promise<void> {
+    if (producer.paused) await this.rpc('pauseProducer', { producerId: producer.id, paused: true });
+  }
+
+  /**
+   * H.264 or VP8 for the camera (see chooseCodec), with the device's own
+   * capability entry for it: produce() must only ever get one of those.
+   */
+  private async cameraCodec(
+    codecs: RtpCodecCapability[] | undefined,
+    encodings: VideoEncoding[],
+    width: number,
+    height: number,
+    quality: VideoQuality,
+  ): Promise<{ codec: 'vp8' | 'h264'; capability?: RtpCodecCapability }> {
+    const requested = normalizeCodec(this.publishOptions.codec);
+    const env = currentEnv();
+    const phoneOrTablet = isPhoneOrTablet(env);
+    const h264 = findCodec(codecs, 'h264');
+    let h264Hardware: boolean | null = null;
+    if (requested === 'auto' && phoneOrTablet && h264) {
+      const top = topLayerSize(width, height, quality);
+      h264Hardware = await h264HardwareEncode({ width: top.width, height: top.height, bitrate: encodings[encodings.length - 1].maxBitrate });
+    }
+    const choice = chooseCodec({ requested, phoneOrTablet, appleMobile: isAppleMobile(env), h264Available: Boolean(h264), h264Hardware });
+    if (choice.warning) this.reportCodecFallback(choice.warning);
+    else if (requested === 'auto' && phoneOrTablet && !h264) this.reportCodecFallback('this browser cannot send H.264 to this server: publishing VP8');
+    if (choice.codec === 'h264' && h264) return { codec: 'h264', capability: h264 };
+    return { codec: 'vp8', capability: findCodec(codecs, 'vp8') };
+  }
+
+  /** A forced H.264 that could not be used is the app's to hear about; 'auto' just notes it, once. */
+  private reportCodecFallback(message: string): void {
+    if (normalizeCodec(this.publishOptions.codec) === 'h264') {
+      this.emit('error', new Error(message));
+    } else if (!this.codecFallbackLogged) {
+      this.codecFallbackLogged = true;
+      console.warn(`[voltkit-rtc] ${message}`);
+    }
+  }
+
+  /** Best effort: a browser that ignores or refuses it keeps its own default. */
+  private async applyDegradationPreference(producer: Producer): Promise<void> {
+    const preference = this.publishOptions.degradationPreference;
+    const sender = producer.rtpSender;
+    if (!sender) return;
+    if (preference !== 'maintain-resolution' && preference !== 'maintain-framerate' && preference !== 'balanced') return;
+    try {
+      const parameters = sender.getParameters();
+      parameters.degradationPreference = preference;
+      await sender.setParameters(parameters);
+    } catch {
+      // Unsupported here; the encoder keeps the browser's own trade-off.
+    }
+  }
+
+  /** videoLimited sampling runs while a camera is published and someone listens. */
+  private syncLimitWatch(): void {
+    this.limitWatch.set(!this.closedByUs && this.cameraProducer() !== undefined && this.listenerCount('videoLimited') > 0);
   }
 
   /**
@@ -690,9 +1244,13 @@ export class StreamClient {
    * when the tracks have genuinely ended.
    */
   private async republish(): Promise<void> {
+    // unpublish() can run while this is under way, and wins: nothing it
+    // stopped is published again.
+    const generation = this.publishGeneration;
     // Music is not a device and cannot be "gone": publish it again whatever
     // happens to the camera and microphone below.
-    if (this.music) await this.produceMusic(this.music).catch((err) => this.emit('error', err as Error));
+    if (this.music) await this.produceMusic(this.music, generation).catch((err) => this.emit('error', err as Error));
+    if (generation !== this.publishGeneration) return;
 
     let stream = this.localStream;
     if (!stream && !this.publishConstraints) return; // music was all that was being published
@@ -703,7 +1261,18 @@ export class StreamClient {
         this.emit('error', new Error('cannot restore the broadcast: the devices are gone'));
         return;
       }
+      const ended = stream;
       stream = await navigator.mediaDevices.getUserMedia(this.publishConstraints);
+      if (generation !== this.publishGeneration) {
+        for (const track of stream.getTracks()) track.stop();
+        return;
+      }
+      // New devices come back switched on. A camera or microphone the user
+      // had switched off stays off: a dropped connection is no reason to
+      // switch it back on.
+      for (const track of stream.getTracks()) {
+        if (ended?.getTracks().some((t) => t.kind === track.kind && !t.enabled)) track.enabled = false;
+      }
       this.localStream = stream;
       this.emit('localStreamChanged', stream);
     }
@@ -725,10 +1294,15 @@ export class StreamClient {
    * the user has not interacted with.
    */
   async publishMusic(input: MusicInput, options?: MusicOptions): Promise<void> {
+    const generation = this.publishGeneration;
     if (this.music) await this.stopMusic();
     const music = new MusicSource(input, options);
     try {
-      await this.produceMusic(music);
+      await this.produceMusic(music, generation);
+      // Checked again here: an unpublish() after the producer was kept has
+      // already closed it, and the music must not be remembered for a
+      // reconnect to publish again.
+      if (generation !== this.publishGeneration) throw new Error(unpublishedWhile('music'));
     } catch (err) {
       music.close();
       throw err;
@@ -738,8 +1312,9 @@ export class StreamClient {
     this.emitLocalMedia();
   }
 
-  private async produceMusic(music: MusicSource): Promise<void> {
+  private async produceMusic(music: MusicSource, generation: number): Promise<void> {
     const transport = await this.ensureSendTransport();
+    if (generation !== this.publishGeneration) throw new Error(unpublishedWhile('music'));
     const producer = await transport.produce({
       track: music.track,
       stopTracks: false,
@@ -748,8 +1323,10 @@ export class StreamClient {
       codecOptions: { opusStereo: true, opusDtx: false, opusFec: true, opusMaxAverageBitrate: 128_000 },
       appData: { source: 'music' },
     });
-    this.producers.set(producer.id, producer);
+    await this.keepProducer(producer, generation, 'music');
     this.musicProducerId = producer.id;
+    // Music switched off before a reconnect comes back paused here.
+    await this.pauseOnServer(producer);
   }
 
   /** True while music is published, whether or not it is switched on. */
@@ -816,6 +1393,14 @@ export class StreamClient {
     const consumer = await transport.consume(params);
     this.consumers.set(remote.producerId, consumer);
 
+    // Layers asked for before a reconnect: the new consumer gets them before
+    // its first frame instead of starting at the full picture. Not getting
+    // them costs data, not the track, so a refusal is only reported.
+    const layers = this.preferredLayers.get(remote.producerId);
+    if (layers) {
+      await this.rpc('setPreferredLayers', { consumerId: consumer.id, ...layers }).catch((err) => this.emit('error', err as Error));
+    }
+
     // The server created it paused. Resume only now that our end exists,
     // otherwise the first frames arrive before there is anything to decode them.
     await this.rpc('resumeConsumer', { consumerId: consumer.id });
@@ -882,20 +1467,33 @@ export class StreamClient {
 
   /** Stop publishing entirely and release the local devices. */
   async unpublish(): Promise<void> {
+    // All of it takes effect now; only telling the server is waited for. So
+    // publish() and unpublish() act in the order they are called: a publish
+    // called while this still waits is not undone by it, and one already
+    // under way stops at its next step (keepProducer).
+    this.publishGeneration += 1;
     const ids = [...this.producers.keys()];
     for (const producer of this.producers.values()) producer.close();
     this.producers.clear();
-    for (const id of ids) {
-      await this.rpc('closeProducer', { producerId: id }).catch(() => undefined);
-    }
+    this.cameraEncodings = null;
+    // Start over for the next publish, and clear a limitation still showing:
+    // nothing is being held back once nothing is being sent.
+    const cleared = this.limitWatch.reset();
+    if (cleared) this.emit('videoLimited', cleared);
     this.localStream?.getTracks().forEach((t) => t.stop());
     this.localStream = null;
+    // Forgotten with the stream: kept, a reconnect would ask for the camera
+    // and microphone again and publish them, after the app unpublished them.
+    this.publishConstraints = null;
     this.music?.close();
     this.music = null;
     this.musicProducerId = null;
     this.wasPublishing = false;
     this.emit('localStreamChanged', null);
     this.emit('localMediaChanged', { micEnabled: false, camEnabled: false, musicEnabled: false });
+    for (const id of ids) {
+      await this.rpc('closeProducer', { producerId: id }).catch(() => undefined);
+    }
   }
 
   get local(): MediaStream | null {