@voltkit-rtc/client 0.2.0 → 0.4.0

package/dist/esm/index.js

@@ -6,10 +6,14 @@
  * setup, consumer resume ordering and reconnection, each slightly wrong.
  */
 import { Device } from 'mediasoup-client';
+import { chooseCodec, currentEnv, defaultLayerCount, findCodec, h264HardwareEncode, isAppleMobile, isPhoneOrTablet, normalizeCodec, } from './device.js';
 import { MusicSource } from './music.js';
+import { allowedQuality, DEFAULT_VIDEO_POLICY, sameLayout, topLayerSize, videoEncodings, } from './quality.js';
+import { parseReceiveStats, parseSendStats, pruneBaseline, VideoLimitWatch, } from './stats.js';
 export { BroadcastPublisher, WhipError, whipEnd, whipOffer } from './broadcast.js';
 export { AudioMixer, MusicSource } from './music.js';
 export { ChatClient, ChatRpcError } from './chat.js';
+export { allowedQuality, layerBitrate, videoEncodings, VIDEO_QUALITIES } from './quality.js';
 const defaultSource = (kind) => (kind === 'audio' ? 'mic' : 'camera');
 /** An error returned by the server, carrying its machine-readable code. */
 export class RpcError extends Error {
@@ -46,6 +50,14 @@ const CLOSE_REPLACED = 4001;
 /** The server ended the session on purpose and said why first: do not reconnect. */
 const CLOSE_ENDED = 4003;
 const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+const isLayer = (value) => Number.isInteger(value) && value >= 0;
+/**
+ * Where a new camera stream's bandwidth estimate starts, in kbps. Chrome
+ * otherwise starts low and takes many seconds to climb to the top layer.
+ */
+const VIDEO_START_BITRATE_KBPS = 1500;
+/** Why a publish gave up: unpublish() ran while it was under way, and unpublish wins. */
+const unpublishedWhile = (what) => `the ${what} was unpublished while it was being published`;
 export class StreamClient {
     wsUrl;
     ws = null;
@@ -72,14 +84,37 @@ export class StreamClient {
     // disconnected: the room looks healthy and shows nothing.
     wasPublishing = false;
     publishConstraints = null;
+    publishOptions = {};
     /** In-app music being published, kept across reconnects so it can be published again. */
     music = null;
     musicProducerId = null;
     /** What each remote producer carries, so a pause can say "music" rather than just "audio". */
     remoteSources = new Map();
+    /**
+     * The layers asked for each remote video, by producerId. A reconnect
+     * consumes everything again, and the new consumer would otherwise start at
+     * the full picture.
+     */
+    preferredLayers = new Map();
     closedByUs = false;
     reconnecting = false;
     reconnectAttempt = 0;
+    /** Set once a connect() has joined and set up. Only such a session is reconnected. */
+    joinedOnce = false;
+    /** The camera producer's layers, to tell whether a new track fits them. */
+    cameraEncodings = null;
+    // Changes to the camera producer run one at a time. Two overlapping swaps
+    // (an effect toggled on and off quickly) would otherwise both close the
+    // same producer and both produce a new one.
+    cameraQueue = Promise.resolve();
+    // Bumped by unpublish(). A producer still being made when it runs (camera,
+    // microphone or music) belongs to the publish it ended: it is closed, not
+    // kept.
+    publishGeneration = 0;
+    codecFallbackLogged = false;
+    sendStatsBaseline = new Map();
+    recvStatsBaseline = new Map();
+    limitWatch = new VideoLimitWatch((baseline) => this.collectVideoStats(baseline), (event) => this.emit('videoLimited', event));
     constructor(wsUrl, token) {
         this.wsUrl = wsUrl;
         this.token = token;
@@ -91,7 +126,17 @@ export class StreamClient {
             this.listeners.set(event, set);
         }
         set.add(fn);
-        return () => set.delete(fn);
+        // videoLimited costs a getStats every 2 s, so it runs only while heard.
+        if (event === 'videoLimited')
+            this.syncLimitWatch();
+        return () => {
+            set.delete(fn);
+            if (event === 'videoLimited')
+                this.syncLimitWatch();
+        };
+    }
+    listenerCount(event) {
+        return this.listeners.get(event)?.size ?? 0;
     }
     emit(event, ...args) {
         for (const fn of this.listeners.get(event) ?? []) {
@@ -105,12 +150,36 @@ export class StreamClient {
     }
     // ------------------------------------------------------------- connection
     async connect() {
-        await this.openSocket();
-        const result = (await this.rpc('join', { token: this.token }));
-        this.joinResult = result;
-        this.device = new Device();
-        await this.device.load({ routerRtpCapabilities: result.routerRtpCapabilities });
+        let result;
+        try {
+            await this.openSocket();
+            result = (await this.rpc('join', { token: this.token }));
+            this.joinResult = result;
+            this.device = this.createDevice();
+            await this.device.load({ routerRtpCapabilities: result.routerRtpCapabilities });
+        }
+        catch (err) {
+            // A session that never got going: the app has the error. Left open,
+            // the socket would be closed by the server's join deadline instead, and
+            // that close would start reconnecting a session that never began.
+            if (!this.joinedOnce)
+                this.detachSocket();
+            throw err;
+        }
+        // Joined and set up: the next drop gets every reconnect attempt again.
+        // Not when the socket opens -- a join refused with a code worth retrying
+        // (no-capacity) never used them up, and every client of a full cluster
+        // retried about twice a second, forever.
+        this.reconnectAttempt = 0;
+        this.joinedOnce = true;
         this.emit('joined', result);
+        // A video that ended while this client was away sends it no
+        // producerClosed: forget the layers asked for it.
+        const present = new Set(result.producers.map((p) => p.producerId));
+        for (const producerId of this.preferredLayers.keys()) {
+            if (!present.has(producerId))
+                this.preferredLayers.delete(producerId);
+        }
         // Subscribe to everything already publishing before we announce readiness.
         for (const p of result.producers) {
             await this.consume(p).catch((err) => this.emit('error', err));
@@ -123,6 +192,10 @@ export class StreamClient {
         }
         return result;
     }
+    /** A new mediasoup Device for each join. Its own method so tests, which have no WebRTC, can stand one in. */
+    createDevice() {
+        return new Device();
+    }
     openSocket() {
         // Abandon any previous socket first. Its close handler checks identity
         // against `this.ws`, so once it is detached it can no longer trigger a
@@ -134,7 +207,6 @@ export class StreamClient {
             const ws = new WebSocket(url.toString());
             this.ws = ws;
             const onOpen = () => {
-                this.reconnectAttempt = 0;
                 this.emit('connected');
                 resolve();
             };
@@ -160,6 +232,9 @@ export class StreamClient {
                     // displace it, and it would displace us right back, forever.
                     this.emit('error', new Error('this identity connected from somewhere else'));
                     this.closedByUs = true;
+                    // The producers outlive this close until the app calls close(); the
+                    // videoLimited sampling must not, or it reports after `closed`.
+                    this.limitWatch.reset();
                     this.emit('closed', 'replaced');
                     return;
                 }
@@ -167,9 +242,14 @@ export class StreamClient {
                     // Normally roomClosed has already ended the session; this covers a
                     // close that arrived without it.
                     this.closedByUs = true;
+                    this.limitWatch.reset();
                     this.emit('closed', 'room-closed');
                     return;
                 }
+                // Before a first successful join the app is still waiting on
+                // connect(), which reports the failure; there is nothing to restore.
+                if (!this.joinedOnce)
+                    return;
                 void this.scheduleReconnect();
             });
         });
@@ -213,8 +293,13 @@ export class StreamClient {
                     return;
                 try {
                     this.teardownMedia();
-                    await this.connect();
-                    return; // connect() resets the attempt counter once the socket opens
+                    await this.connect(); // which resets the attempt counter once joined
+                    // The socket can drop again while the session is being restored,
+                    // and its close handler then finds this loop still running and
+                    // leaves it to us. Returning would leave the client disconnected
+                    // for good, with no `closed`.
+                    if (this.ws)
+                        return;
                 }
                 catch (err) {
                     this.emit('error', err);
@@ -240,6 +325,9 @@ export class StreamClient {
         this.closedByUs = true;
         this.wasPublishing = false;
         this.teardownMedia();
+        this.preferredLayers.clear();
+        // Nothing is emitted after closing, so not even a clearing videoLimited.
+        this.limitWatch.reset();
         // Producers no longer stop their tracks, so releasing the camera and
         // microphone is ours to do -- otherwise the device light stays on.
         this.localStream?.getTracks().forEach((t) => t.stop());
@@ -258,6 +346,10 @@ export class StreamClient {
             p.close();
         this.producers.clear();
         this.musicProducerId = null;
+        this.cameraEncodings = null;
+        // Paused, not reset: a reconnect's republish starts it again, and a
+        // limitation already reported is not reported twice.
+        this.syncLimitWatch();
         this.sendTransport?.close();
         this.recvTransport?.close();
         this.sendTransport = null;
@@ -326,6 +418,7 @@ export class StreamClient {
                 break;
             case 'producerClosed': {
                 const { producerId, identity } = data;
+                this.preferredLayers.delete(producerId);
                 const consumer = this.consumers.get(producerId);
                 if (!consumer)
                     break; // never consumed it, or already cleaned up
@@ -502,13 +595,26 @@ export class StreamClient {
      *
      * Pass the constraints used to obtain the stream and they will be reused to
      * reacquire the devices if a reconnect finds the tracks have ended.
+     *
+     * `options.quality` picks 1080p, 720p or 480p (see `videoPolicy` for what
+     * the project allows). Capture at least that size for the full picture.
+     * `options.layers`, `codec` and `degradationPreference` tune how the video
+     * is encoded; the defaults suit both phones and computers. The options are
+     * kept for a reconnect's republish.
      */
-    async publish(stream, constraints) {
+    async publish(stream, constraints, options) {
+        const generation = this.publishGeneration;
         const transport = await this.ensureSendTransport();
+        // unpublish() ran first: this publish is over before it began, and must
+        // leave nothing behind that a reconnect would publish again.
+        if (generation !== this.publishGeneration)
+            throw new Error(unpublishedWhile('stream'));
         this.localStream = stream;
         this.wasPublishing = true;
         if (constraints)
             this.publishConstraints = constraints;
+        if (options)
+            this.publishOptions = { ...options };
         const audio = stream.getAudioTracks()[0];
         if (audio) {
             const producer = await transport.produce({
@@ -519,25 +625,380 @@ export class StreamClient {
                 codecOptions: { opusStereo: true, opusDtx: true, opusFec: true },
                 appData: { source: 'mic' },
             });
-            this.producers.set(producer.id, producer);
+            await this.keepProducer(producer, generation, 'microphone');
+            // A microphone handed over switched off, or muted before a reconnect.
+            await this.pauseOnServer(producer);
         }
         const video = stream.getVideoTracks()[0];
         if (video) {
-            // Simulcast from day one: retrofitting it later is genuinely annoying,
-            // and it is what lets one node serve far more viewers.
-            const producer = await transport.produce({
-                track: video,
-                stopTracks: false,
-                encodings: [
-                    { rid: 'q', scaleResolutionDownBy: 4, maxBitrate: 200_000, scalabilityMode: 'L1T3' },
-                    { rid: 'h', scaleResolutionDownBy: 2, maxBitrate: 600_000, scalabilityMode: 'L1T3' },
-                    { rid: 'f', scaleResolutionDownBy: 1, maxBitrate: 1_800_000, scalabilityMode: 'L1T3' },
-                ],
-                codecOptions: { videoGoogleStartBitrate: 1000 },
-                appData: { source: 'camera' },
+            // The track is read when the camera's turn comes: one handed to
+            // replaceVideoTrack while this publish was under way is the one to send.
+            await this.cameraTask(() => this.produceCamera(transport, this.localStream?.getVideoTracks()[0] ?? video, generation));
+        }
+    }
+    /** What this project may publish. Known once joined; 720p before that. */
+    get videoPolicy() {
+        return this.joinResult?.video ?? DEFAULT_VIDEO_POLICY;
+    }
+    /** The quality video is being sent at, after the project's limit. */
+    get videoQuality() {
+        return allowedQuality(this.publishOptions.quality, this.videoPolicy);
+    }
+    /**
+     * Change the video quality while publishing. The camera's producer is
+     * replaced, so viewers see a brief pause while the new one starts. Resolves
+     * to the quality actually used, after the project's limit. Capture at least
+     * that size (for example with `track.applyConstraints`) first.
+     */
+    async setVideoQuality(quality) {
+        this.publishOptions = { ...this.publishOptions, quality };
+        await this.cameraTask(async () => {
+            const current = this.cameraProducer();
+            const track = current?.track;
+            if (!current || !track || track.readyState !== 'live')
+                return;
+            await this.reproduceCamera(current, track);
+        });
+        return this.videoQuality;
+    }
+    /**
+     * Send a different video track from now on: a canvas with effects drawn on
+     * it, the raw camera again, another camera. When the new track needs the
+     * same layers as the current one (the same size, or another size the
+     * project's quality scales alike), viewers see no pause, and the layers
+     * take the new picture's bitrates. Otherwise the camera producer is
+     * replaced, as `setVideoQuality` does. Either way a paused camera stays
+     * paused.
+     *
+     * Your own stream is left as it is: the client keeps a stream of its own
+     * (`local`, announced by `localStreamChanged`) with the new track and your
+     * microphone, and a reconnect republishes that. The track you replaced is
+     * not stopped; it is yours again, switched back on if pausing the camera
+     * had switched it off. Rejects when no camera is being published.
+     */
+    async replaceVideoTrack(track) {
+        if (!track || track.kind !== 'video')
+            throw new TypeError('replaceVideoTrack needs a video track');
+        if (track.readyState === 'ended')
+            throw new Error('replaceVideoTrack: that track has ended');
+        await this.cameraTask(async () => {
+            const current = this.cameraProducer();
+            // Between a dropped connection and the republish there is no producer,
+            // but the camera is still being published: the republish sends this.
+            const reconnecting = !current && this.wasPublishing && (this.localStream?.getVideoTracks().length ?? 0) > 0;
+            if (!current && !reconnecting)
+                throw new Error('replaceVideoTrack: no camera is being published');
+            if (!current) {
+                // The republish reads the camera's state off the track it sends, and
+                // the track being replaced is switched off exactly when the camera is
+                // paused. Hand that state on, or a camera that was off comes back on;
+                // and the old track back switched on, as below.
+                const replaced = this.localStream?.getVideoTracks()[0];
+                if (replaced && replaced !== track) {
+                    track.enabled = replaced.enabled;
+                    replaced.enabled = true;
+                }
+            }
+            this.adoptVideoTrack(track);
+            if (!current || current.track === track)
+                return;
+            const previous = current.track;
+            const paused = current.paused;
+            try {
+                const { width = 0, height = 0 } = track.getSettings();
+                const next = videoEncodings(width, height, this.videoQuality, this.layerCount());
+                if (this.cameraEncodings && sameLayout(this.cameraEncodings, next)) {
+                    await current.replaceTrack({ track });
+                    await this.applyLayerBitrates(current, next);
+                    return;
+                }
+                await this.reproduceCamera(current, track);
+            }
+            finally {
+                // Pausing switched the old track off (mediasoup-client pauses that
+                // way), and nothing switches it back on once it is replaced. It is the
+                // app's again, often the camera its canvas draws from: handed back
+                // off, that canvas stays black after the camera is resumed.
+                if (paused && previous && previous !== this.cameraProducer()?.track)
+                    previous.enabled = true;
+            }
+        });
+    }
+    /**
+     * Give a camera producer whose track was swapped in place the bitrates of
+     * its new picture. The layout matched, but a bigger picture at the same
+     * scales (a 1280×720 canvas for a 960×540 camera) would otherwise stay
+     * capped at the smaller one's. Best effort: a browser that refuses keeps
+     * the old caps.
+     */
+    async applyLayerBitrates(producer, encodings) {
+        const before = this.cameraEncodings;
+        if (before && before.every((encoding, i) => encoding.maxBitrate === encodings[i]?.maxBitrate)) {
+            this.cameraEncodings = encodings;
+            return;
+        }
+        const sender = producer.rtpSender;
+        if (!sender)
+            return;
+        try {
+            const parameters = sender.getParameters();
+            // One entry per layer, smallest first, as they were produced. A browser
+            // that reports them some other way is left with its own.
+            if (parameters.encodings.length !== encodings.length)
+                return;
+            parameters.encodings.forEach((encoding, i) => {
+                encoding.maxBitrate = encodings[i].maxBitrate;
             });
-            this.producers.set(producer.id, producer);
+            await sender.setParameters(parameters);
+            this.cameraEncodings = encodings;
+        }
+        catch {
+            // Unsupported here; the layers keep the caps they were produced with.
+        }
+    }
+    /**
+     * What your camera video is sending now, layer by layer, or null when no
+     * camera is being published. The top-level fields describe the biggest
+     * layer going out. `qualityLimitation` says why it is less than asked:
+     * `cpu` is this device, `bandwidth` the upload, `none` neither (then check
+     * the camera and the light). Bitrates are averaged since the previous call,
+     * so call it every second or two; the first call reports 0.
+     */
+    async getVideoStats() {
+        return this.collectVideoStats(this.sendStatsBaseline);
+    }
+    /**
+     * What this client receives of a remote video (by its `producerId`, from
+     * the `track` event), or null when it is not receiving that video. Bitrates
+     * are averaged since the previous call for it; the first call reports 0.
+     */
+    async getReceiveStats(producerId) {
+        const consumer = this.consumers.get(producerId);
+        if (!consumer || consumer.kind !== 'video')
+            return null;
+        let report;
+        try {
+            report = await consumer.getStats();
+        }
+        catch (err) {
+            if (consumer.closed)
+                return null;
+            throw err;
+        }
+        const live = new Set([...this.consumers.values()].map((c) => c.id));
+        pruneBaseline(this.recvStatsBaseline, (key) => live.has(key));
+        return parseReceiveStats(report.values(), { producerId, baseline: this.recvStatsBaseline, key: consumer.id });
+    }
+    /**
+     * Receive a smaller copy of someone's video (by its `producerId`, from the
+     * `track` event), for a tile that does not need the full picture. Spatial
+     * layer 0 is the smallest copy the publisher sends: a computer sends three
+     * (at 720p 320×180, 640×360 and 1280×720), a phone two (640×360 and
+     * 1280×720), and a layer above the biggest means the biggest. Leave
+     * `temporalLayer` out to keep the full frame rate. It is the most this
+     * client is sent: a connection that cannot carry it still gets less. The
+     * choice is kept across reconnects and forgotten when the track ends.
+     * Rejects for a producer whose video this client is not receiving.
+     */
+    async setPreferredLayers(producerId, spatialLayer, temporalLayer) {
+        if (!isLayer(spatialLayer) || (temporalLayer !== undefined && !isLayer(temporalLayer))) {
+            throw new RangeError('setPreferredLayers: layers are whole numbers from 0');
+        }
+        const consumer = this.consumers.get(producerId);
+        if (!consumer || consumer.kind !== 'video') {
+            throw new Error(`setPreferredLayers: this client is not receiving a video with producerId ${producerId}`);
         }
+        const layers = temporalLayer === undefined ? { spatialLayer } : { spatialLayer, temporalLayer };
+        // Kept first: a reconnect that interrupts the request still applies it.
+        this.preferredLayers.set(producerId, layers);
+        await this.rpc('setPreferredLayers', { consumerId: consumer.id, ...layers });
+    }
+    async collectVideoStats(baseline) {
+        const producer = this.cameraProducer();
+        if (!producer)
+            return null;
+        let report;
+        try {
+            report = await producer.getStats();
+        }
+        catch (err) {
+            if (producer.closed)
+                return null;
+            throw err;
+        }
+        const prefix = `${producer.id}:`;
+        pruneBaseline(baseline, (key) => key.startsWith(prefix));
+        return parseSendStats(report.values(), { quality: this.videoQuality, baseline, keyPrefix: prefix });
+    }
+    cameraProducer() {
+        for (const p of this.producers.values()) {
+            if (p.kind === 'video' && p.appData.source === 'camera')
+                return p;
+        }
+        return undefined;
+    }
+    cameraTask(task) {
+        const run = this.cameraQueue.then(task, task);
+        this.cameraQueue = run.catch(() => undefined);
+        return run;
+    }
+    /** Swap the video in the client's own stream, never the app's. */
+    adoptVideoTrack(track) {
+        const previous = this.localStream;
+        if (previous && previous.getVideoTracks()[0] === track)
+            return;
+        const others = previous ? previous.getTracks().filter((t) => t.kind !== 'video') : [];
+        this.localStream = new MediaStream([...others, track]);
+        this.emit('localStreamChanged', this.localStream);
+    }
+    /** Close the camera producer and produce `track` in its place, paused on both ends if it was. */
+    async reproduceCamera(current, track) {
+        const generation = this.publishGeneration;
+        const paused = current.paused;
+        current.close();
+        this.producers.delete(current.id);
+        this.cameraEncodings = null;
+        this.syncLimitWatch();
+        await this.rpc('closeProducer', { producerId: current.id }).catch(() => undefined);
+        return this.produceCamera(await this.ensureSendTransport(), track, generation, paused);
+    }
+    /** `options.layers` when valid, else 2 on phones and tablets and 3 elsewhere. */
+    layerCount() {
+        const asked = this.publishOptions.layers;
+        return asked === 1 || asked === 2 || asked === 3 ? asked : defaultLayerCount();
+    }
+    /**
+     * Produce the camera from `track`, paused on both ends when `paused`. By
+     * default the track says: one handed over switched off is a camera that is
+     * off, and so is one a pause switched off before a reconnect.
+     */
+    async produceCamera(transport, track, generation, paused = !track.enabled) {
+        if (generation !== this.publishGeneration)
+            throw new Error(unpublishedWhile('camera'));
+        // mediasoup-client starts a producer paused exactly when its track is
+        // off. Setting the track to the camera's state first makes the producer
+        // start in it, and a camera that is off never sends a frame of the new
+        // track; the server is told below.
+        track.enabled = !paused;
+        // Simulcast from day one: it is what lets one node serve far more viewers.
+        // The layers follow the picture's real size, the project's quality and
+        // the device, so the browser sends every layer asked for (see
+        // videoEncodings).
+        const { width = 0, height = 0 } = track.getSettings();
+        const quality = this.videoQuality;
+        const encodings = videoEncodings(width, height, quality, this.layerCount());
+        let codecs;
+        try {
+            codecs = this.device?.sendRtpCapabilities.codecs;
+        }
+        catch {
+            codecs = undefined;
+        }
+        const chosen = await this.cameraCodec(codecs, encodings, width, height, quality);
+        const produce = (codec) => transport.produce({
+            track,
+            stopTracks: false,
+            encodings,
+            codecOptions: { videoGoogleStartBitrate: VIDEO_START_BITRATE_KBPS },
+            ...(codec ? { codec } : {}),
+            appData: { source: 'camera' },
+        });
+        let producer;
+        try {
+            producer = await produce(chosen.capability);
+        }
+        catch (err) {
+            // Never fail a publish over the codec: H.264 refused is VP8 instead.
+            // A closed transport (a reconnect under way) fails either way.
+            if (chosen.codec !== 'h264' || transport.closed)
+                throw err;
+            this.reportCodecFallback(`H.264 was refused (${err.message}): publishing VP8 instead`);
+            producer = await produce(findCodec(codecs, 'vp8'));
+        }
+        // unpublish() may have run while this was being made (a publish, a
+        // quality change or a track swap under way).
+        await this.keepProducer(producer, generation, 'camera');
+        this.cameraEncodings = encodings;
+        await this.pauseOnServer(producer);
+        await this.applyDegradationPreference(producer);
+        this.syncLimitWatch();
+        return producer;
+    }
+    /**
+     * Keep a producer just made -- unless unpublish() ran while it was being
+     * made. Kept, it would publish again what was just unpublished, so it is
+     * closed instead, on both ends.
+     */
+    async keepProducer(producer, generation, what) {
+        if (generation !== this.publishGeneration) {
+            producer.close();
+            await this.rpc('closeProducer', { producerId: producer.id }).catch(() => undefined);
+            throw new Error(unpublishedWhile(what));
+        }
+        this.producers.set(producer.id, producer);
+    }
+    /**
+     * mediasoup-client makes a producer paused when its track is off, and the
+     * server makes every producer live. Unless the server is told, viewers get
+     * black video or silence from a camera or microphone they are told is on.
+     */
+    async pauseOnServer(producer) {
+        if (producer.paused)
+            await this.rpc('pauseProducer', { producerId: producer.id, paused: true });
+    }
+    /**
+     * H.264 or VP8 for the camera (see chooseCodec), with the device's own
+     * capability entry for it: produce() must only ever get one of those.
+     */
+    async cameraCodec(codecs, encodings, width, height, quality) {
+        const requested = normalizeCodec(this.publishOptions.codec);
+        const env = currentEnv();
+        const phoneOrTablet = isPhoneOrTablet(env);
+        const h264 = findCodec(codecs, 'h264');
+        let h264Hardware = null;
+        if (requested === 'auto' && phoneOrTablet && h264) {
+            const top = topLayerSize(width, height, quality);
+            h264Hardware = await h264HardwareEncode({ width: top.width, height: top.height, bitrate: encodings[encodings.length - 1].maxBitrate });
+        }
+        const choice = chooseCodec({ requested, phoneOrTablet, appleMobile: isAppleMobile(env), h264Available: Boolean(h264), h264Hardware });
+        if (choice.warning)
+            this.reportCodecFallback(choice.warning);
+        else if (requested === 'auto' && phoneOrTablet && !h264)
+            this.reportCodecFallback('this browser cannot send H.264 to this server: publishing VP8');
+        if (choice.codec === 'h264' && h264)
+            return { codec: 'h264', capability: h264 };
+        return { codec: 'vp8', capability: findCodec(codecs, 'vp8') };
+    }
+    /** A forced H.264 that could not be used is the app's to hear about; 'auto' just notes it, once. */
+    reportCodecFallback(message) {
+        if (normalizeCodec(this.publishOptions.codec) === 'h264') {
+            this.emit('error', new Error(message));
+        }
+        else if (!this.codecFallbackLogged) {
+            this.codecFallbackLogged = true;
+            console.warn(`[voltkit-rtc] ${message}`);
+        }
+    }
+    /** Best effort: a browser that ignores or refuses it keeps its own default. */
+    async applyDegradationPreference(producer) {
+        const preference = this.publishOptions.degradationPreference;
+        const sender = producer.rtpSender;
+        if (!sender)
+            return;
+        if (preference !== 'maintain-resolution' && preference !== 'maintain-framerate' && preference !== 'balanced')
+            return;
+        try {
+            const parameters = sender.getParameters();
+            parameters.degradationPreference = preference;
+            await sender.setParameters(parameters);
+        }
+        catch {
+            // Unsupported here; the encoder keeps the browser's own trade-off.
+        }
+    }
+    /** videoLimited sampling runs while a camera is published and someone listens. */
+    syncLimitWatch() {
+        this.limitWatch.set(!this.closedByUs && this.cameraProducer() !== undefined && this.listenerCount('videoLimited') > 0);
     }
     /**
      * Re-establish this client's broadcast after a reconnect.
@@ -547,10 +1008,15 @@ export class StreamClient {
      * when the tracks have genuinely ended.
      */
     async republish() {
+        // unpublish() can run while this is under way, and wins: nothing it
+        // stopped is published again.
+        const generation = this.publishGeneration;
         // Music is not a device and cannot be "gone": publish it again whatever
         // happens to the camera and microphone below.
         if (this.music)
-            await this.produceMusic(this.music).catch((err) => this.emit('error', err));
+            await this.produceMusic(this.music, generation).catch((err) => this.emit('error', err));
+        if (generation !== this.publishGeneration)
+            return;
         let stream = this.localStream;
         if (!stream && !this.publishConstraints)
             return; // music was all that was being published
@@ -560,7 +1026,20 @@ export class StreamClient {
                 this.emit('error', new Error('cannot restore the broadcast: the devices are gone'));
                 return;
             }
+            const ended = stream;
             stream = await navigator.mediaDevices.getUserMedia(this.publishConstraints);
+            if (generation !== this.publishGeneration) {
+                for (const track of stream.getTracks())
+                    track.stop();
+                return;
+            }
+            // New devices come back switched on. A camera or microphone the user
+            // had switched off stays off: a dropped connection is no reason to
+            // switch it back on.
+            for (const track of stream.getTracks()) {
+                if (ended?.getTracks().some((t) => t.kind === track.kind && !t.enabled))
+                    track.enabled = false;
+            }
             this.localStream = stream;
             this.emit('localStreamChanged', stream);
         }
@@ -580,11 +1059,17 @@ export class StreamClient {
      * the user has not interacted with.
      */
     async publishMusic(input, options) {
+        const generation = this.publishGeneration;
         if (this.music)
             await this.stopMusic();
         const music = new MusicSource(input, options);
         try {
-            await this.produceMusic(music);
+            await this.produceMusic(music, generation);
+            // Checked again here: an unpublish() after the producer was kept has
+            // already closed it, and the music must not be remembered for a
+            // reconnect to publish again.
+            if (generation !== this.publishGeneration)
+                throw new Error(unpublishedWhile('music'));
         }
         catch (err) {
             music.close();
@@ -594,8 +1079,10 @@ export class StreamClient {
         this.wasPublishing = true;
         this.emitLocalMedia();
     }
-    async produceMusic(music) {
+    async produceMusic(music, generation) {
         const transport = await this.ensureSendTransport();
+        if (generation !== this.publishGeneration)
+            throw new Error(unpublishedWhile('music'));
         const producer = await transport.produce({
             track: music.track,
             stopTracks: false,
@@ -604,8 +1091,10 @@ export class StreamClient {
             codecOptions: { opusStereo: true, opusDtx: false, opusFec: true, opusMaxAverageBitrate: 128_000 },
             appData: { source: 'music' },
         });
-        this.producers.set(producer.id, producer);
+        await this.keepProducer(producer, generation, 'music');
         this.musicProducerId = producer.id;
+        // Music switched off before a reconnect comes back paused here.
+        await this.pauseOnServer(producer);
     }
     /** True while music is published, whether or not it is switched on. */
     get musicPublishing() {
@@ -668,6 +1157,13 @@ export class StreamClient {
         }));
         const consumer = await transport.consume(params);
         this.consumers.set(remote.producerId, consumer);
+        // Layers asked for before a reconnect: the new consumer gets them before
+        // its first frame instead of starting at the full picture. Not getting
+        // them costs data, not the track, so a refusal is only reported.
+        const layers = this.preferredLayers.get(remote.producerId);
+        if (layers) {
+            await this.rpc('setPreferredLayers', { consumerId: consumer.id, ...layers }).catch((err) => this.emit('error', err));
+        }
         // The server created it paused. Resume only now that our end exists,
         // otherwise the first frames arrive before there is anything to decode them.
         await this.rpc('resumeConsumer', { consumerId: consumer.id });
@@ -727,21 +1223,35 @@ export class StreamClient {
     }
     /** Stop publishing entirely and release the local devices. */
     async unpublish() {
+        // All of it takes effect now; only telling the server is waited for. So
+        // publish() and unpublish() act in the order they are called: a publish
+        // called while this still waits is not undone by it, and one already
+        // under way stops at its next step (keepProducer).
+        this.publishGeneration += 1;
         const ids = [...this.producers.keys()];
         for (const producer of this.producers.values())
             producer.close();
         this.producers.clear();
-        for (const id of ids) {
-            await this.rpc('closeProducer', { producerId: id }).catch(() => undefined);
-        }
+        this.cameraEncodings = null;
+        // Start over for the next publish, and clear a limitation still showing:
+        // nothing is being held back once nothing is being sent.
+        const cleared = this.limitWatch.reset();
+        if (cleared)
+            this.emit('videoLimited', cleared);
         this.localStream?.getTracks().forEach((t) => t.stop());
         this.localStream = null;
+        // Forgotten with the stream: kept, a reconnect would ask for the camera
+        // and microphone again and publish them, after the app unpublished them.
+        this.publishConstraints = null;
         this.music?.close();
         this.music = null;
         this.musicProducerId = null;
         this.wasPublishing = false;
         this.emit('localStreamChanged', null);
         this.emit('localMediaChanged', { micEnabled: false, camEnabled: false, musicEnabled: false });
+        for (const id of ids) {
+            await this.rpc('closeProducer', { producerId: id }).catch(() => undefined);
+        }
     }
     get local() {
         return this.localStream;