docs

CMakeLists.txt

@@ -104,6 +104,8 @@ set(APP_SOURCES
 	"${APP_DIR}/runtime/RuntimeHost.h"
 	"${APP_DIR}/runtime/HealthTelemetry.cpp"
 	"${APP_DIR}/runtime/HealthTelemetry.h"
+	"${APP_DIR}/runtime/RuntimeCoordinator.cpp"
+	"${APP_DIR}/runtime/RuntimeCoordinator.h"
 	"${APP_DIR}/runtime/RuntimeSnapshotProvider.cpp"
 	"${APP_DIR}/runtime/RuntimeSnapshotProvider.h"
 	"${APP_DIR}/runtime/RuntimeClock.cpp"

apps/LoopThroughWithOpenGLCompositing/LoopThroughWithOpenGLCompositing.sln

@@ -1,28 +0,0 @@
-
-Microsoft Visual Studio Solution File, Format Version 12.00
-# Visual Studio 2013
-VisualStudioVersion = 12.0.21005.1
-MinimumVisualStudioVersion = 10.0.40219.1
-Project("{8BC9CEB8-8B4A-11D0-8D11-00A0C91BC942}") = "LoopThroughWithOpenGLCompositing", "LoopThroughWithOpenGLCompositing.vcxproj", "{92C79085-CA51-4008-95DB-5403D2E19885}"
-EndProject
-Global
-	GlobalSection(SolutionConfigurationPlatforms) = preSolution
-		Debug|Win32 = Debug|Win32
-		Debug|x64 = Debug|x64
-		Release|Win32 = Release|Win32
-		Release|x64 = Release|x64
-	EndGlobalSection
-	GlobalSection(ProjectConfigurationPlatforms) = postSolution
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Debug|Win32.ActiveCfg = Debug|Win32
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Debug|Win32.Build.0 = Debug|Win32
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Debug|x64.ActiveCfg = Debug|x64
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Debug|x64.Build.0 = Debug|x64
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Release|Win32.ActiveCfg = Release|Win32
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Release|Win32.Build.0 = Release|Win32
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Release|x64.ActiveCfg = Release|x64
-		{92C79085-CA51-4008-95DB-5403D2E19885}.Release|x64.Build.0 = Release|x64
-	EndGlobalSection
-	GlobalSection(SolutionProperties) = preSolution
-		HideSolutionNode = FALSE
-	EndGlobalSection
-EndGlobal

apps/LoopThroughWithOpenGLCompositing/LoopThroughWithOpenGLCompositing.vcxproj

@@ -1,299 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project DefaultTargets="Build" ToolsVersion="15.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <ItemGroup Label="ProjectConfigurations">
-    <ProjectConfiguration Include="Debug|Win32">
-      <Configuration>Debug</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Debug|x64">
-      <Configuration>Debug</Configuration>
-      <Platform>x64</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Release|Win32">
-      <Configuration>Release</Configuration>
-      <Platform>Win32</Platform>
-    </ProjectConfiguration>
-    <ProjectConfiguration Include="Release|x64">
-      <Configuration>Release</Configuration>
-      <Platform>x64</Platform>
-    </ProjectConfiguration>
-  </ItemGroup>
-  <PropertyGroup Label="Globals">
-    <ProjectGuid>{92C79085-CA51-4008-95DB-5403D2E19885}</ProjectGuid>
-    <RootNamespace>LoopThroughWithOpenGLCompositing</RootNamespace>
-    <Keyword>Win32Proj</Keyword>
-    <WindowsTargetPlatformVersion>10.0.26100.0</WindowsTargetPlatformVersion>
-  </PropertyGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.Default.props" />
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>MultiByte</CharacterSet>
-    <WholeProgramOptimization>true</WholeProgramOptimization>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>MultiByte</CharacterSet>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>MultiByte</CharacterSet>
-    <WholeProgramOptimization>true</WholeProgramOptimization>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="Configuration">
-    <ConfigurationType>Application</ConfigurationType>
-    <PlatformToolset>v143</PlatformToolset>
-    <CharacterSet>MultiByte</CharacterSet>
-  </PropertyGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.props" />
-  <ImportGroup Label="ExtensionSettings">
-  </ImportGroup>
-  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'" Label="PropertySheets">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'" Label="PropertySheets">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'" Label="PropertySheets">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <ImportGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'" Label="PropertySheets">
-    <Import Project="$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props" Condition="exists('$(UserRootDir)\Microsoft.Cpp.$(Platform).user.props')" Label="LocalAppDataPlatform" />
-  </ImportGroup>
-  <PropertyGroup Label="UserMacros" />
-  <PropertyGroup>
-    <_ProjectFileVersion>12.0.21005.1</_ProjectFileVersion>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <OutDir>$(SolutionDir)$(Configuration)\</OutDir>
-    <IntDir>$(Configuration)\</IntDir>
-    <LinkIncremental>true</LinkIncremental>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
-    <OutDir>$(SolutionDir)$(Platform)\$(Configuration)\</OutDir>
-    <IntDir>$(Platform)\$(Configuration)\</IntDir>
-    <LinkIncremental>true</LinkIncremental>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <OutDir>$(SolutionDir)$(Configuration)\</OutDir>
-    <IntDir>$(Configuration)\</IntDir>
-    <LinkIncremental>false</LinkIncremental>
-  </PropertyGroup>
-  <PropertyGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
-    <OutDir>$(SolutionDir)$(Platform)\$(Configuration)\</OutDir>
-    <IntDir>$(Platform)\$(Configuration)\</IntDir>
-    <LinkIncremental>false</LinkIncremental>
-  </PropertyGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">
-    <ClCompile>
-      <Optimization>Disabled</Optimization>
-      <AdditionalIncludeDirectories>.;control;gl;gl\pipeline;gl\renderer;gl\shader;platform;runtime;shader;videoio;videoio\decklink;%(AdditionalIncludeDirectories)</AdditionalIncludeDirectories>
-      <PreprocessorDefinitions>WIN32;_DEBUG;_WINDOWS;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <BasicRuntimeChecks>EnableFastChecks</BasicRuntimeChecks>
-      <RuntimeLibrary>MultiThreadedDebugDLL</RuntimeLibrary>
-      <PrecompiledHeader />
-      <WarningLevel>Level3</WarningLevel>
-      <DebugInformationFormat>EditAndContinue</DebugInformationFormat>
-      <LanguageStandard>stdcpp17</LanguageStandard>
-    </ClCompile>
-    <Link>
-      <AdditionalDependencies>opengl32.lib;Glu32.lib;Ws2_32.lib;Crypt32.lib;Advapi32.lib;Gdiplus.lib;Ole32.lib;Windowscodecs.lib;%(AdditionalDependencies)</AdditionalDependencies>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-      <SubSystem>Windows</SubSystem>
-      <TargetMachine>MachineX86</TargetMachine>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">
-    <Midl>
-      <TargetEnvironment>X64</TargetEnvironment>
-    </Midl>
-    <ClCompile>
-      <Optimization>Disabled</Optimization>
-      <AdditionalIncludeDirectories>.;control;gl;gl\pipeline;gl\renderer;gl\shader;platform;runtime;shader;videoio;videoio\decklink;%(AdditionalIncludeDirectories)</AdditionalIncludeDirectories>
-      <PreprocessorDefinitions>WIN32;_DEBUG;_WINDOWS;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <BasicRuntimeChecks>EnableFastChecks</BasicRuntimeChecks>
-      <RuntimeLibrary>MultiThreadedDebugDLL</RuntimeLibrary>
-      <PrecompiledHeader />
-      <WarningLevel>Level3</WarningLevel>
-      <DebugInformationFormat>ProgramDatabase</DebugInformationFormat>
-      <LanguageStandard>stdcpp17</LanguageStandard>
-    </ClCompile>
-    <Link>
-      <AdditionalDependencies>opengl32.lib;Glu32.lib;Ws2_32.lib;Crypt32.lib;Advapi32.lib;Gdiplus.lib;Ole32.lib;Windowscodecs.lib;%(AdditionalDependencies)</AdditionalDependencies>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-      <SubSystem>Windows</SubSystem>
-      <TargetMachine>MachineX64</TargetMachine>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">
-    <ClCompile>
-      <Optimization>MaxSpeed</Optimization>
-      <IntrinsicFunctions>true</IntrinsicFunctions>
-      <AdditionalIncludeDirectories>.;control;gl;gl\pipeline;gl\renderer;gl\shader;platform;runtime;shader;videoio;videoio\decklink;%(AdditionalIncludeDirectories)</AdditionalIncludeDirectories>
-      <PreprocessorDefinitions>WIN32;NDEBUG;_WINDOWS;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <RuntimeLibrary>MultiThreadedDLL</RuntimeLibrary>
-      <FunctionLevelLinking>true</FunctionLevelLinking>
-      <PrecompiledHeader />
-      <WarningLevel>Level3</WarningLevel>
-      <DebugInformationFormat>ProgramDatabase</DebugInformationFormat>
-      <LanguageStandard>stdcpp17</LanguageStandard>
-    </ClCompile>
-    <Link>
-      <AdditionalDependencies>opengl32.lib;Glu32.lib;Ws2_32.lib;Crypt32.lib;Advapi32.lib;Gdiplus.lib;Ole32.lib;Windowscodecs.lib;%(AdditionalDependencies)</AdditionalDependencies>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-      <SubSystem>Windows</SubSystem>
-      <OptimizeReferences>true</OptimizeReferences>
-      <EnableCOMDATFolding>true</EnableCOMDATFolding>
-      <TargetMachine>MachineX86</TargetMachine>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemDefinitionGroup Condition="'$(Configuration)|$(Platform)'=='Release|x64'">
-    <Midl>
-      <TargetEnvironment>X64</TargetEnvironment>
-    </Midl>
-    <ClCompile>
-      <Optimization>MaxSpeed</Optimization>
-      <IntrinsicFunctions>true</IntrinsicFunctions>
-      <AdditionalIncludeDirectories>.;control;gl;gl\pipeline;gl\renderer;gl\shader;platform;runtime;shader;videoio;videoio\decklink;%(AdditionalIncludeDirectories)</AdditionalIncludeDirectories>
-      <PreprocessorDefinitions>WIN32;NDEBUG;_WINDOWS;%(PreprocessorDefinitions)</PreprocessorDefinitions>
-      <RuntimeLibrary>MultiThreadedDLL</RuntimeLibrary>
-      <FunctionLevelLinking>true</FunctionLevelLinking>
-      <PrecompiledHeader />
-      <WarningLevel>Level3</WarningLevel>
-      <DebugInformationFormat>ProgramDatabase</DebugInformationFormat>
-      <LanguageStandard>stdcpp17</LanguageStandard>
-    </ClCompile>
-    <Link>
-      <AdditionalDependencies>opengl32.lib;Glu32.lib;Ws2_32.lib;Crypt32.lib;Advapi32.lib;Gdiplus.lib;Ole32.lib;Windowscodecs.lib;%(AdditionalDependencies)</AdditionalDependencies>
-      <GenerateDebugInformation>true</GenerateDebugInformation>
-      <SubSystem>Windows</SubSystem>
-      <OptimizeReferences>true</OptimizeReferences>
-      <EnableCOMDATFolding>true</EnableCOMDATFolding>
-      <TargetMachine>MachineX64</TargetMachine>
-    </Link>
-  </ItemDefinitionGroup>
-  <ItemGroup>
-    <ClCompile Include="control\ControlServer.cpp" />
-    <ClCompile Include="control\ControlServices.cpp" />
-    <ClCompile Include="control\OscServer.cpp" />
-    <ClCompile Include="control\RuntimeControlBridge.cpp" />
-    <ClCompile Include="control\RuntimeServices.cpp" />
-    <ClCompile Include="gl\renderer\GLExtensions.cpp" />
-    <ClCompile Include="gl\shader\GlobalParamsBuffer.cpp" />
-    <ClCompile Include="gl\shader\GlShaderSources.cpp" />
-    <ClCompile Include="LoopThroughWithOpenGLCompositing.cpp" />
-    <ClCompile Include="gl\OpenGLComposite.cpp" />
-    <ClCompile Include="gl\OpenGLCompositeRuntimeControls.cpp" />
-    <ClCompile Include="gl\RenderEngine.cpp" />
-    <ClCompile Include="gl\pipeline\OpenGLRenderPass.cpp" />
-    <ClCompile Include="gl\pipeline\OpenGLRenderPipeline.cpp" />
-    <ClCompile Include="gl\pipeline\ShaderFeedbackBuffers.cpp" />
-    <ClCompile Include="gl\renderer\OpenGLRenderer.cpp" />
-    <ClCompile Include="gl\renderer\RenderTargetPool.cpp" />
-    <ClCompile Include="gl\pipeline\OpenGLVideoIOBridge.cpp" />
-    <ClCompile Include="gl\shader\OpenGLShaderPrograms.cpp" />
-    <ClCompile Include="gl\pipeline\PngScreenshotWriter.cpp" />
-    <ClCompile Include="gl\shader\ShaderProgramCompiler.cpp" />
-    <ClCompile Include="gl\shader\ShaderBuildQueue.cpp" />
-    <ClCompile Include="gl\shader\ShaderTextureBindings.cpp" />
-    <ClCompile Include="gl\shader\TextRasterizer.cpp" />
-    <ClCompile Include="gl\shader\TextureAssetLoader.cpp" />
-    <ClCompile Include="gl\pipeline\TemporalHistoryBuffers.cpp" />
-    <ClCompile Include="stdafx.cpp">
-      <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Debug|Win32'">Create</PrecompiledHeader>
-      <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">Create</PrecompiledHeader>
-      <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Release|Win32'">Create</PrecompiledHeader>
-      <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Release|x64'">Create</PrecompiledHeader>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkAPI_i.c" />
-    <ClCompile Include="videoio\decklink\DeckLinkDisplayMode.cpp" />
-    <ClCompile Include="videoio\decklink\DeckLinkFrameTransfer.cpp" />
-    <ClCompile Include="videoio\decklink\DeckLinkSession.cpp" />
-    <ClCompile Include="videoio\decklink\DeckLinkVideoIOFormat.cpp" />
-    <ClCompile Include="runtime\HealthTelemetry.cpp" />
-    <ClCompile Include="runtime\RuntimeClock.cpp" />
-    <ClCompile Include="runtime\RuntimeHost.cpp" />
-    <ClCompile Include="runtime\RuntimeJson.cpp" />
-    <ClCompile Include="runtime\RuntimeParameterUtils.cpp" />
-    <ClCompile Include="runtime\RuntimeSnapshotProvider.cpp" />
-    <ClCompile Include="runtime\RuntimeStore.cpp" />
-    <ClCompile Include="shader\ShaderCompiler.cpp" />
-    <ClCompile Include="shader\ShaderPackageRegistry.cpp" />
-    <ClCompile Include="videoio\VideoBackend.cpp" />
-    <ClCompile Include="videoio\VideoIOFormat.cpp" />
-    <ClCompile Include="videoio\VideoPlayoutScheduler.cpp" />
-  </ItemGroup>
-  <ItemGroup>
-    <ClInclude Include="control\ControlServer.h" />
-    <ClInclude Include="control\ControlServices.h" />
-    <ClInclude Include="control\OscServer.h" />
-    <ClInclude Include="control\RuntimeControlBridge.h" />
-    <ClInclude Include="control\RuntimeServices.h" />
-    <ClInclude Include="gl\renderer\GLExtensions.h" />
-    <ClInclude Include="gl\shader\GlobalParamsBuffer.h" />
-    <ClInclude Include="gl\renderer\GlRenderConstants.h" />
-    <ClInclude Include="gl\renderer\GlScopedObjects.h" />
-    <ClInclude Include="gl\shader\GlShaderSources.h" />
-    <ClInclude Include="LoopThroughWithOpenGLCompositing.h" />
-    <ClInclude Include="gl\OpenGLComposite.h" />
-    <ClInclude Include="gl\RenderEngine.h" />
-    <ClInclude Include="gl\pipeline\OpenGLRenderPass.h" />
-    <ClInclude Include="gl\pipeline\OpenGLRenderPipeline.h" />
-    <ClInclude Include="gl\pipeline\RenderPassDescriptor.h" />
-    <ClInclude Include="gl\pipeline\ShaderFeedbackBuffers.h" />
-    <ClInclude Include="gl\renderer\OpenGLRenderer.h" />
-    <ClInclude Include="gl\renderer\RenderTargetPool.h" />
-    <ClInclude Include="gl\pipeline\OpenGLVideoIOBridge.h" />
-    <ClInclude Include="gl\shader\OpenGLShaderPrograms.h" />
-    <ClInclude Include="gl\pipeline\PngScreenshotWriter.h" />
-    <ClInclude Include="gl\shader\ShaderProgramCompiler.h" />
-    <ClInclude Include="gl\shader\ShaderBuildQueue.h" />
-    <ClInclude Include="gl\shader\ShaderTextureBindings.h" />
-    <ClInclude Include="gl\shader\Std140Buffer.h" />
-    <ClInclude Include="gl\shader\TextRasterizer.h" />
-    <ClInclude Include="gl\shader\TextureAssetLoader.h" />
-    <ClInclude Include="gl\pipeline\TemporalHistoryBuffers.h" />
-    <ClInclude Include="platform\NativeHandles.h" />
-    <ClInclude Include="platform\NativeSockets.h" />
-    <ClInclude Include="resource.h" />
-    <ClInclude Include="runtime\HealthTelemetry.h" />
-    <ClInclude Include="runtime\RuntimeClock.h" />
-    <ClInclude Include="runtime\RuntimeHost.h" />
-    <ClInclude Include="runtime\RuntimeJson.h" />
-    <ClInclude Include="runtime\RuntimeParameterUtils.h" />
-    <ClInclude Include="runtime\RuntimeSnapshotProvider.h" />
-    <ClInclude Include="runtime\RuntimeStore.h" />
-    <ClInclude Include="shader\ShaderCompiler.h" />
-    <ClInclude Include="shader\ShaderPackageRegistry.h" />
-    <ClInclude Include="shader\ShaderTypes.h" />
-    <ClInclude Include="stdafx.h" />
-    <ClInclude Include="targetver.h" />
-    <ClInclude Include="videoio\decklink\DeckLinkAPI_h.h" />
-    <ClInclude Include="videoio\decklink\DeckLinkDisplayMode.h" />
-    <ClInclude Include="videoio\decklink\DeckLinkFrameTransfer.h" />
-    <ClInclude Include="videoio\decklink\DeckLinkSession.h" />
-    <ClInclude Include="videoio\decklink\DeckLinkVideoIOFormat.h" />
-    <ClInclude Include="videoio\VideoBackend.h" />
-    <ClInclude Include="videoio\VideoIOFormat.h" />
-    <ClInclude Include="videoio\VideoIOTypes.h" />
-    <ClInclude Include="videoio\VideoPlayoutScheduler.h" />
-  </ItemGroup>
-  <ItemGroup>
-    <Image Include="LoopThroughWithOpenGLCompositing.ico" />
-    <Image Include="small.ico" />
-  </ItemGroup>
-  <ItemGroup>
-    <None Include="video_effect.slang" />
-  </ItemGroup>
-  <ItemGroup>
-    <ResourceCompile Include="LoopThroughWithOpenGLCompositing.rc" />
-  </ItemGroup>
-  <ItemGroup>
-    <Midl Include="..\..\3rdParty\Blackmagic DeckLink SDK 16.0\Win\include\DeckLinkAPI.idl" />
-  </ItemGroup>
-  <Import Project="$(VCTargetsPath)\Microsoft.Cpp.targets" />
-  <ImportGroup Label="ExtensionTargets">
-  </ImportGroup>
-</Project>

apps/LoopThroughWithOpenGLCompositing/LoopThroughWithOpenGLCompositing.vcxproj.filters

@@ -1,338 +0,0 @@
-<?xml version="1.0" encoding="utf-8"?>
-<Project ToolsVersion="4.0" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
-  <ItemGroup>
-    <Filter Include="Source Files">
-      <UniqueIdentifier>{4FC737F1-C7A5-4376-A066-2A32D752A2FF}</UniqueIdentifier>
-      <Extensions>cpp;c;cc;cxx;def;odl;idl;hpj;bat;asm;asmx</Extensions>
-    </Filter>
-    <Filter Include="Header Files">
-      <UniqueIdentifier>{93995380-89BD-4b04-88EB-625FBE52EBFB}</UniqueIdentifier>
-      <Extensions>h;hpp;hxx;hm;inl;inc;xsd</Extensions>
-    </Filter>
-    <Filter Include="Resource Files">
-      <UniqueIdentifier>{67DA6AB6-F800-4c08-8B7A-83BB121AAD01}</UniqueIdentifier>
-      <Extensions>rc;ico;cur;bmp;dlg;rc2;rct;bin;rgs;gif;jpg;jpeg;jpe;resx;tiff;tif;png;wav</Extensions>
-    </Filter>
-    <Filter Include="DeckLink API">
-      <UniqueIdentifier>{1eab21d6-58f8-49e0-929b-8a4482e04756}</UniqueIdentifier>
-    </Filter>
-  </ItemGroup>
-  <ItemGroup>
-    <ClCompile Include="control\ControlServer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="control\ControlServices.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="control\OscServer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="control\RuntimeControlBridge.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\renderer\GLExtensions.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\GlobalParamsBuffer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\GlShaderSources.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="LoopThroughWithOpenGLCompositing.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\OpenGLComposite.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\OpenGLCompositeRuntimeControls.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\RenderEngine.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\OpenGLRenderPass.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\OpenGLRenderPipeline.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\ShaderFeedbackBuffers.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\renderer\OpenGLRenderer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\renderer\RenderTargetPool.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\OpenGLShaderPrograms.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\PngScreenshotWriter.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\ShaderProgramCompiler.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\ShaderBuildQueue.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\ShaderTextureBindings.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\TextRasterizer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\shader\TextureAssetLoader.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\TemporalHistoryBuffers.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="gl\pipeline\OpenGLVideoIOBridge.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="stdafx.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkAPI_i.c">
-      <Filter>DeckLink API</Filter>
-    </ClCompile>
-    <ClCompile Include="control\RuntimeServices.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkDisplayMode.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkFrameTransfer.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkSession.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\decklink\DeckLinkVideoIOFormat.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\HealthTelemetry.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeClock.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeHost.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeJson.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeParameterUtils.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeSnapshotProvider.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="runtime\RuntimeStore.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="shader\ShaderCompiler.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="shader\ShaderPackageRegistry.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\VideoBackend.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\VideoIOFormat.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-    <ClCompile Include="videoio\VideoPlayoutScheduler.cpp">
-      <Filter>Source Files</Filter>
-    </ClCompile>
-  </ItemGroup>
-  <ItemGroup>
-    <ClInclude Include="control\ControlServer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="control\ControlServices.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="control\OscServer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="control\RuntimeControlBridge.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\renderer\GLExtensions.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\GlobalParamsBuffer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\renderer\GlRenderConstants.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\renderer\GlScopedObjects.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\GlShaderSources.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="LoopThroughWithOpenGLCompositing.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\OpenGLComposite.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\RenderEngine.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\OpenGLRenderPass.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\OpenGLRenderPipeline.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\RenderPassDescriptor.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\ShaderFeedbackBuffers.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\renderer\OpenGLRenderer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\renderer\RenderTargetPool.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\OpenGLShaderPrograms.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\PngScreenshotWriter.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\ShaderProgramCompiler.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\ShaderBuildQueue.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\ShaderTextureBindings.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\Std140Buffer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\TextRasterizer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\shader\TextureAssetLoader.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\TemporalHistoryBuffers.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="gl\pipeline\OpenGLVideoIOBridge.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="platform\NativeHandles.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="platform\NativeSockets.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="resource.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\HealthTelemetry.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeHost.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeJson.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeParameterUtils.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeSnapshotProvider.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeStore.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="shader\ShaderCompiler.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="shader\ShaderPackageRegistry.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="shader\ShaderTypes.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="stdafx.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="targetver.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="control\RuntimeServices.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\decklink\DeckLinkSession.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\decklink\DeckLinkVideoIOFormat.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\decklink\DeckLinkAPI_h.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\decklink\DeckLinkDisplayMode.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\decklink\DeckLinkFrameTransfer.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\VideoBackend.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="runtime\RuntimeClock.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\VideoIOFormat.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\VideoIOTypes.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-    <ClInclude Include="videoio\VideoPlayoutScheduler.h">
-      <Filter>Header Files</Filter>
-    </ClInclude>
-  </ItemGroup>
-  <ItemGroup>
-    <Image Include="LoopThroughWithOpenGLCompositing.ico">
-      <Filter>Resource Files</Filter>
-    </Image>
-    <Image Include="small.ico">
-      <Filter>Resource Files</Filter>
-    </Image>
-  </ItemGroup>
-  <ItemGroup>
-    <ResourceCompile Include="LoopThroughWithOpenGLCompositing.rc">
-      <Filter>Resource Files</Filter>
-    </ResourceCompile>
-  </ItemGroup>
-  <ItemGroup>
-    <Midl Include="..\..\include\DeckLinkAPI.idl">
-      <Filter>DeckLink API</Filter>
-    </Midl>
-  </ItemGroup>
-  <ItemGroup>
-    <None Include="video_effect.slang">
-      <Filter>Resource Files</Filter>
-    </None>
-  </ItemGroup>
-</Project>

apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp

@@ -101,9 +101,10 @@ OpenGLComposite::OpenGLComposite(HWND hWnd, HDC hDC, HGLRC hRC) :
 	mRuntimeHost = std::make_unique<RuntimeHost>();
 	mRuntimeStore = std::make_unique<RuntimeStore>(*mRuntimeHost);
 	mRuntimeSnapshotProvider = std::make_unique<RuntimeSnapshotProvider>(*mRuntimeHost);
+	mRuntimeCoordinator = std::make_unique<RuntimeCoordinator>(*mRuntimeStore);
 	mRenderEngine = std::make_unique<RenderEngine>(
-		*mRuntimeHost,
 		*mRuntimeSnapshotProvider,
+		mRuntimeHost->GetHealthTelemetry(),
 		pMutex,
 		hGLDC,
 		hGLRC,
@@ -202,7 +203,11 @@ bool OpenGLComposite::InitVideoIO()
 	}
 	if (!mVideoBackend->HasInputDevice() && mRuntimeHost)
 	{
-		mRuntimeHost->SetSignalStatus(false, mVideoBackend->InputFrameWidth(), mVideoBackend->InputFrameHeight(), mVideoBackend->InputDisplayModeName());
+		mRuntimeHost->GetHealthTelemetry().ReportSignalStatus(
+			false,
+			mVideoBackend->InputFrameWidth(),
+			mVideoBackend->InputFrameHeight(),
+			mVideoBackend->InputDisplayModeName());
 	}
 
 	if (!mVideoBackend->ConfigureOutput(videoModes.output, mRuntimeStore && mRuntimeStore->IsExternalKeyingConfigured(), initFailureReason))
@@ -227,27 +232,15 @@ void OpenGLComposite::paintGL(bool force)
 	{
 		if (IsIconic(hGLWnd))
 			return;
-
-		const unsigned previewFps = mRuntimeStore ? mRuntimeStore->GetConfiguredPreviewFps() : 30u;
-		if (previewFps == 0)
-			return;
-
-		const auto now = std::chrono::steady_clock::now();
-		const auto minimumInterval = std::chrono::microseconds(1000000 / (previewFps == 0 ? 1u : previewFps));
-		if (mLastPreviewPresentTime != std::chrono::steady_clock::time_point() &&
-			now - mLastPreviewPresentTime < minimumInterval)
-		{
-			return;
-		}
 	}
 
-	if (!mRenderEngine->TryPresentToWindow(mVideoBackend->OutputFrameWidth(), mVideoBackend->OutputFrameHeight()))
+	const unsigned previewFps = mRuntimeStore ? mRuntimeStore->GetConfiguredPreviewFps() : 30u;
+	if (!mRenderEngine->TryPresentPreview(force, previewFps, mVideoBackend->OutputFrameWidth(), mVideoBackend->OutputFrameHeight()))
 	{
 		ValidateRect(hGLWnd, NULL);
 		return;
 	}
 
-	mLastPreviewPresentTime = std::chrono::steady_clock::now();
 	ValidateRect(hGLWnd, NULL);
 }
 
@@ -336,7 +329,7 @@ bool OpenGLComposite::InitOpenGLState()
 		MessageBoxA(NULL, compilerErrorMessage, "OpenGL shader failed to load or compile", MB_OK);
 		return false;
 	}
-	mCachedLayerRenderStates = mRenderEngine->CommittedLayerStates();
+	mRuntimeStore->SetCompileStatus(true, "Shader layers compiled successfully.");
 	mUseCommittedLayerStates = false;
 
 	mRenderEngine->ResetTemporalHistoryState();
@@ -367,15 +360,8 @@ bool OpenGLComposite::Stop()
 
 bool OpenGLComposite::ReloadShader(bool preserveFeedbackState)
 {
-	mPreserveFeedbackOnNextShaderBuild = preserveFeedbackState;
+	return mRuntimeCoordinator &&
-	if (mRuntimeHost)
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->RequestShaderReload(preserveFeedbackState));
-	{
-		mRuntimeStore->SetCompileStatus(true, "Shader rebuild queued.");
-		mRuntimeStore->ClearReloadRequest();
-	}
-	RequestShaderBuild();
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::RequestScreenshot(std::string& error)
@@ -442,7 +428,7 @@ void OpenGLComposite::renderEffect()
 
 	const auto applyOscOverlays = [&](std::vector<RuntimeRenderState>& states, bool allowCommit)
 	{
-		if (states.empty() || mOscOverlayStates.empty() || !mRuntimeHost)
+		if (states.empty() || mOscOverlayStates.empty())
 			return;
 
 		const double smoothing = ClampOscAlpha(mRuntimeStore ? mRuntimeStore->GetConfiguredOscSmoothing() : 0.0);
@@ -576,66 +562,12 @@ void OpenGLComposite::renderEffect()
 
 	const bool hasInputSource = mVideoBackend->HasInputSource();
 	std::vector<RuntimeRenderState> layerStates;
-	if (mUseCommittedLayerStates)
+	mRenderEngine->ResolveRenderLayerStates(
-	{
+		mUseCommittedLayerStates.load(),
-		layerStates = mRenderEngine->CommittedLayerStates();
+		mVideoBackend->InputFrameWidth(),
-		applyOscOverlays(layerStates, false);
+		mVideoBackend->InputFrameHeight(),
-		if (mRuntimeSnapshotProvider)
+		applyOscOverlays,
-			mRuntimeSnapshotProvider->RefreshDynamicRenderStateFields(layerStates);
+		layerStates);
-	}
-	else if (mRuntimeSnapshotProvider)
-	{
-		const unsigned renderWidth = mVideoBackend->InputFrameWidth();
-		const unsigned renderHeight = mVideoBackend->InputFrameHeight();
-		const RuntimeSnapshotVersions versions = mRuntimeSnapshotProvider->GetVersions();
-		const bool renderStateCacheValid =
-			!mCachedLayerRenderStates.empty() &&
-			mCachedRenderStateVersion == versions.renderStateVersion &&
-			mCachedRenderStateWidth == renderWidth &&
-			mCachedRenderStateHeight == renderHeight;
-
-		if (renderStateCacheValid)
-		{
-			RuntimeRenderStateSnapshot renderSnapshot;
-			renderSnapshot.outputWidth = renderWidth;
-			renderSnapshot.outputHeight = renderHeight;
-			renderSnapshot.versions.renderStateVersion = mCachedRenderStateVersion;
-			renderSnapshot.versions.parameterStateVersion = mCachedParameterStateVersion;
-			renderSnapshot.states = mCachedLayerRenderStates;
-
-			applyOscOverlays(renderSnapshot.states, true);
-			if (mCachedParameterStateVersion != versions.parameterStateVersion &&
-				mRuntimeSnapshotProvider->TryRefreshSnapshotParameters(renderSnapshot))
-			{
-				mCachedParameterStateVersion = renderSnapshot.versions.parameterStateVersion;
-				applyOscOverlays(renderSnapshot.states, true);
-			}
-
-			mCachedLayerRenderStates = renderSnapshot.states;
-			layerStates = renderSnapshot.states;
-			mRuntimeSnapshotProvider->RefreshDynamicRenderStateFields(layerStates);
-		}
-		else
-		{
-			RuntimeRenderStateSnapshot renderSnapshot;
-			if (mRuntimeSnapshotProvider->TryGetRenderStateSnapshot(renderWidth, renderHeight, renderSnapshot))
-			{
-				mCachedLayerRenderStates = renderSnapshot.states;
-				mCachedRenderStateVersion = renderSnapshot.versions.renderStateVersion;
-				mCachedParameterStateVersion = renderSnapshot.versions.parameterStateVersion;
-				mCachedRenderStateWidth = renderSnapshot.outputWidth;
-				mCachedRenderStateHeight = renderSnapshot.outputHeight;
-				applyOscOverlays(mCachedLayerRenderStates, true);
-				layerStates = mCachedLayerRenderStates;
-			}
-			else
-			{
-				applyOscOverlays(mCachedLayerRenderStates, true);
-				layerStates = mCachedLayerRenderStates;
-				mRuntimeSnapshotProvider->RefreshDynamicRenderStateFields(layerStates);
-			}
-		}
-	}
 	const unsigned historyCap = mRuntimeStore ? mRuntimeStore->GetConfiguredMaxTemporalHistoryFrames() : 0;
 	mRenderEngine->RenderLayerStack(
 		hasInputSource,
@@ -657,20 +589,9 @@ void OpenGLComposite::ProcessScreenshotRequest()
 	if (width == 0 || height == 0)
 		return;
 
-	std::vector<unsigned char> bottomUpPixels;
+	std::vector<unsigned char> topDownPixels;
-	if (!mRenderEngine->ReadOutputFrameRgba(width, height, bottomUpPixels))
+	if (!mRenderEngine->CaptureOutputFrameRgbaTopDown(width, height, topDownPixels))
 		return;
-	std::vector<unsigned char> topDownPixels(bottomUpPixels.size());
-
-	const std::size_t rowBytes = static_cast<std::size_t>(width) * 4;
-	for (unsigned y = 0; y < height; ++y)
-	{
-		const unsigned sourceY = height - 1 - y;
-		std::copy(
-			bottomUpPixels.begin() + static_cast<std::ptrdiff_t>(sourceY * rowBytes),
-			bottomUpPixels.begin() + static_cast<std::ptrdiff_t>((sourceY + 1) * rowBytes),
-			topDownPixels.begin() + static_cast<std::ptrdiff_t>(y * rowBytes));
-	}
 
 	try
 	{
@@ -707,14 +628,13 @@ std::filesystem::path OpenGLComposite::BuildScreenshotPath() const
 
 bool OpenGLComposite::ProcessRuntimePollResults()
 {
-	if (!mRuntimeHost || !mRuntimeServices)
+	if (!mRuntimeServices)
 		return true;
 
 	const RuntimePollEvents events = mRuntimeServices->ConsumePollEvents();
 	if (events.failed)
 	{
-		mRuntimeStore->SetCompileStatus(false, events.error);
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->HandleRuntimePollFailure(events.error));
-		broadcastRuntimeState();
 		return false;
 	}
 
@@ -728,29 +648,23 @@ bool OpenGLComposite::ProcessRuntimePollResults()
 			return true;
 
 		char compilerErrorMessage[1024] = {};
-		if (!mRenderEngine->CommitPreparedLayerPrograms(readyBuild, mVideoBackend->InputFrameWidth(), mVideoBackend->InputFrameHeight(), sizeof(compilerErrorMessage), compilerErrorMessage))
+		if (!mRenderEngine->ApplyPreparedShaderBuild(
+			readyBuild,
+			mVideoBackend->InputFrameWidth(),
+			mVideoBackend->InputFrameHeight(),
+			mRuntimeCoordinator && mRuntimeCoordinator->PreserveFeedbackOnNextShaderBuild(),
+			sizeof(compilerErrorMessage),
+			compilerErrorMessage))
 		{
-			mRuntimeStore->SetCompileStatus(false, compilerErrorMessage);
+			ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->HandlePreparedShaderBuildFailure(compilerErrorMessage));
-			mUseCommittedLayerStates = true;
-			mPreserveFeedbackOnNextShaderBuild = false;
-			broadcastRuntimeState();
 			return false;
 		}
 
-		mUseCommittedLayerStates = false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->HandlePreparedShaderBuildSuccess());
-		mCachedLayerRenderStates = mRenderEngine->CommittedLayerStates();
-		mRenderEngine->ResetTemporalHistoryState();
-		if (!mPreserveFeedbackOnNextShaderBuild)
-			mRenderEngine->ResetShaderFeedbackState();
-		mPreserveFeedbackOnNextShaderBuild = false;
-		broadcastRuntimeState();
 		return true;
 	}
 
-	mRuntimeStore->SetCompileStatus(true, "Shader rebuild queued.");
+	ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->HandleRuntimeReloadRequest());
-	mPreserveFeedbackOnNextShaderBuild = false;
-	RequestShaderBuild();
-	broadcastRuntimeState();
 	return true;
 }
 
@@ -759,24 +673,81 @@ void OpenGLComposite::RequestShaderBuild()
 	if (!mShaderBuildQueue || !mVideoBackend)
 		return;
 
-	mUseCommittedLayerStates = true;
-	if (mRuntimeHost)
-		mRuntimeStore->ClearReloadRequest();
 	mShaderBuildQueue->RequestBuild(mVideoBackend->InputFrameWidth(), mVideoBackend->InputFrameHeight());
 }
 
+bool OpenGLComposite::ApplyRuntimeCoordinatorResult(const RuntimeCoordinatorResult& result, std::string* error)
+{
+	if (!result.accepted)
+	{
+		if (error)
+			*error = result.errorMessage;
+		return false;
+	}
+
+	if (result.compileStatusChanged && mRuntimeStore)
+		mRuntimeStore->SetCompileStatus(result.compileStatusSucceeded, result.compileStatusMessage);
+
+	if (result.clearReloadRequest && mRuntimeStore)
+		mRuntimeStore->ClearReloadRequest();
+
+	switch (result.committedStateMode)
+	{
+	case RuntimeCoordinatorCommittedStateMode::UseCommittedStates:
+		mUseCommittedLayerStates = true;
+		break;
+	case RuntimeCoordinatorCommittedStateMode::UseLiveSnapshots:
+		mUseCommittedLayerStates = false;
+		break;
+	case RuntimeCoordinatorCommittedStateMode::Unchanged:
+	default:
+		break;
+	}
+
+	if (result.clearTransientOscState)
+	{
+		mOscOverlayStates.clear();
+		if (mRuntimeServices)
+			mRuntimeServices->ClearOscState();
+	}
+
+	ApplyRuntimeCoordinatorRenderReset(result.renderResetScope);
+
+	if (result.shaderBuildRequested)
+		RequestShaderBuild();
+
+	if (result.runtimeStateBroadcastRequired)
+		broadcastRuntimeState();
+
+	return true;
+}
+
+void OpenGLComposite::ApplyRuntimeCoordinatorRenderReset(RuntimeCoordinatorRenderResetScope resetScope)
+{
+	if (!mRenderEngine)
+		return;
+
+	switch (resetScope)
+	{
+	case RuntimeCoordinatorRenderResetScope::TemporalHistoryOnly:
+		mRenderEngine->ResetTemporalHistoryState();
+		break;
+	case RuntimeCoordinatorRenderResetScope::TemporalHistoryAndFeedback:
+		mRenderEngine->ResetTemporalHistoryState();
+		mRenderEngine->ResetShaderFeedbackState();
+		break;
+	case RuntimeCoordinatorRenderResetScope::None:
+	default:
+		break;
+	}
+}
+
 void OpenGLComposite::broadcastRuntimeState()
 {
 	if (mRuntimeServices)
 		mRuntimeServices->BroadcastState();
 }
 
-void OpenGLComposite::resetTemporalHistoryState()
-{
-	mRenderEngine->ResetTemporalHistoryState();
-	mRenderEngine->ResetShaderFeedbackState();
-}
-
 bool OpenGLComposite::CheckOpenGLExtensions()
 {
 	return true;

apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.h

@@ -12,6 +12,7 @@
 #include <comutil.h>
 
 #include "GLExtensions.h"
+#include "RuntimeCoordinator.h"
 #include "RuntimeHost.h"
 #include "RuntimeSnapshotProvider.h"
 #include "RuntimeStore.h"
@@ -91,30 +92,25 @@ private:
 
 	std::unique_ptr<RuntimeHost>				mRuntimeHost;
 	std::unique_ptr<RuntimeStore>			mRuntimeStore;
+	std::unique_ptr<RuntimeCoordinator>		mRuntimeCoordinator;
 	std::unique_ptr<RuntimeSnapshotProvider>	mRuntimeSnapshotProvider;
 	std::unique_ptr<RenderEngine>			mRenderEngine;
 	std::unique_ptr<ShaderBuildQueue>		mShaderBuildQueue;
 	std::unique_ptr<RuntimeServices>		mRuntimeServices;
 	std::unique_ptr<VideoBackend>			mVideoBackend;
-	std::vector<RuntimeRenderState>			mCachedLayerRenderStates;
-	uint64_t								mCachedRenderStateVersion = 0;
-	uint64_t								mCachedParameterStateVersion = 0;
-	unsigned								mCachedRenderStateWidth = 0;
-	unsigned								mCachedRenderStateHeight = 0;
 	std::map<std::string, OscOverlayState>	mOscOverlayStates;
 	std::atomic<bool>						mUseCommittedLayerStates;
 	std::atomic<bool>						mScreenshotRequested;
-	std::chrono::steady_clock::time_point	mLastPreviewPresentTime;
-	bool									mPreserveFeedbackOnNextShaderBuild = false;
 
 	bool InitOpenGLState();
 	void renderEffect();
 	bool ProcessRuntimePollResults();
 	void RequestShaderBuild();
+	bool ApplyRuntimeCoordinatorResult(const RuntimeCoordinatorResult& result, std::string* error = nullptr);
+	void ApplyRuntimeCoordinatorRenderReset(RuntimeCoordinatorRenderResetScope resetScope);
 	void ProcessScreenshotRequest();
 	std::filesystem::path BuildScreenshotPath() const;
 	void broadcastRuntimeState();
-	void resetTemporalHistoryState();
 };
 
 #endif		// __OPENGL_COMPOSITE_H__

apps/LoopThroughWithOpenGLCompositing/gl/OpenGLCompositeRuntimeControls.cpp

@@ -38,62 +38,38 @@ std::string OpenGLComposite::GetOscAddress() const
 
 bool OpenGLComposite::AddLayer(const std::string& shaderId, std::string& error)
 {
-	if (!mRuntimeStore->CreateStoredLayer(shaderId, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->AddLayer(shaderId), &error);
-
-	ReloadShader(true);
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::RemoveLayer(const std::string& layerId, std::string& error)
 {
-	if (!mRuntimeStore->DeleteStoredLayer(layerId, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->RemoveLayer(layerId), &error);
-
-	ReloadShader(true);
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::MoveLayer(const std::string& layerId, int direction, std::string& error)
 {
-	if (!mRuntimeStore->MoveStoredLayer(layerId, direction, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->MoveLayer(layerId, direction), &error);
-
-	ReloadShader(true);
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::MoveLayerToIndex(const std::string& layerId, std::size_t targetIndex, std::string& error)
 {
-	if (!mRuntimeStore->MoveStoredLayerToIndex(layerId, targetIndex, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->MoveLayerToIndex(layerId, targetIndex), &error);
-
-	ReloadShader(true);
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::SetLayerBypass(const std::string& layerId, bool bypassed, std::string& error)
 {
-	if (!mRuntimeStore->SetStoredLayerBypassState(layerId, bypassed, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->SetLayerBypass(layerId, bypassed), &error);
-
-	ReloadShader();
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::SetLayerShader(const std::string& layerId, const std::string& shaderId, std::string& error)
 {
-	if (!mRuntimeStore->SetStoredLayerShaderSelection(layerId, shaderId, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->SetLayerShader(layerId, shaderId), &error);
-
-	ReloadShader();
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::UpdateLayerParameterJson(const std::string& layerId, const std::string& parameterId, const std::string& valueJson, std::string& error)
@@ -102,11 +78,8 @@ bool OpenGLComposite::UpdateLayerParameterJson(const std::string& layerId, const
 	if (!ParseJson(valueJson, parsedValue, error))
 		return false;
 
-	if (!mRuntimeStore->SetStoredParameterValue(layerId, parameterId, parsedValue, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->UpdateLayerParameter(layerId, parameterId, parsedValue), &error);
-
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::UpdateLayerParameterByControlKeyJson(const std::string& layerKey, const std::string& parameterKey, const std::string& valueJson, std::string& error)
@@ -115,42 +88,24 @@ bool OpenGLComposite::UpdateLayerParameterByControlKeyJson(const std::string& la
 	if (!ParseJson(valueJson, parsedValue, error))
 		return false;
 
-	if (!mRuntimeStore->SetStoredParameterValueByControlKey(layerKey, parameterKey, parsedValue, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->UpdateLayerParameterByControlKey(layerKey, parameterKey, parsedValue), &error);
-
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::ResetLayerParameters(const std::string& layerId, std::string& error)
 {
-	if (!mRuntimeStore->ResetStoredLayerParameterValues(layerId, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->ResetLayerParameters(layerId), &error);
-
-	mOscOverlayStates.clear();
-	if (mRuntimeServices)
-		mRuntimeServices->ClearOscState();
-	resetTemporalHistoryState();
-
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::SaveStackPreset(const std::string& presetName, std::string& error)
 {
-	if (!mRuntimeStore->SaveStackPresetSnapshot(presetName, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->SaveStackPreset(presetName), &error);
-
-	broadcastRuntimeState();
-	return true;
 }
 
 bool OpenGLComposite::LoadStackPreset(const std::string& presetName, std::string& error)
 {
-	if (!mRuntimeStore->LoadStackPresetSnapshot(presetName, error))
+	return mRuntimeCoordinator &&
-		return false;
+		ApplyRuntimeCoordinatorResult(mRuntimeCoordinator->LoadStackPreset(presetName), &error);
-
-	ReloadShader();
-	broadcastRuntimeState();
-	return true;
 }

apps/LoopThroughWithOpenGLCompositing/gl/RenderEngine.cpp

@@ -2,9 +2,12 @@
 
 #include <gl/gl.h>
 
+#include <algorithm>
+#include <cstddef>
+
 RenderEngine::RenderEngine(
-	RuntimeHost& runtimeHost,
 	RuntimeSnapshotProvider& runtimeSnapshotProvider,
+	HealthTelemetry& healthTelemetry,
 	CRITICAL_SECTION& mutex,
 	HDC hdc,
 	HGLRC hglrc,
@@ -13,8 +16,9 @@ RenderEngine::RenderEngine(
 	PreviewPaintCallback previewPaint) :
 	mRenderer(),
 	mRenderPass(mRenderer),
-	mRenderPipeline(mRenderer, runtimeHost, std::move(renderEffect), std::move(screenshotReady), std::move(previewPaint)),
+	mRenderPipeline(mRenderer, runtimeSnapshotProvider, healthTelemetry, std::move(renderEffect), std::move(screenshotReady), std::move(previewPaint)),
-	mShaderPrograms(mRenderer, runtimeHost, runtimeSnapshotProvider),
+	mShaderPrograms(mRenderer, runtimeSnapshotProvider),
+	mRuntimeSnapshotProvider(runtimeSnapshotProvider),
 	mMutex(mutex),
 	mHdc(hdc),
 	mHglrc(hglrc)
@@ -65,6 +69,28 @@ bool RenderEngine::CommitPreparedLayerPrograms(const PreparedShaderBuild& prepar
 	return mShaderPrograms.CommitPreparedLayerPrograms(preparedBuild, inputFrameWidth, inputFrameHeight, errorMessageSize, errorMessage);
 }
 
+bool RenderEngine::ApplyPreparedShaderBuild(
+	const PreparedShaderBuild& preparedBuild,
+	unsigned inputFrameWidth,
+	unsigned inputFrameHeight,
+	bool preserveFeedbackState,
+	int errorMessageSize,
+	char* errorMessage)
+{
+	if (!CommitPreparedLayerPrograms(preparedBuild, inputFrameWidth, inputFrameHeight, errorMessageSize, errorMessage))
+		return false;
+
+	mCachedLayerRenderStates = mShaderPrograms.CommittedLayerStates();
+	mCachedRenderStateVersion = preparedBuild.renderSnapshot.versions.renderStateVersion;
+	mCachedParameterStateVersion = preparedBuild.renderSnapshot.versions.parameterStateVersion;
+	mCachedRenderStateWidth = preparedBuild.renderSnapshot.outputWidth;
+	mCachedRenderStateHeight = preparedBuild.renderSnapshot.outputHeight;
+	ResetTemporalHistoryState();
+	if (!preserveFeedbackState)
+		ResetShaderFeedbackState();
+	return true;
+}
+
 const std::vector<RuntimeRenderState>& RenderEngine::CommittedLayerStates() const
 {
 	return mShaderPrograms.CommittedLayerStates();
@@ -85,12 +111,27 @@ void RenderEngine::ResizeView(int width, int height)
 	mRenderer.ResizeView(width, height);
 }
 
-bool RenderEngine::TryPresentToWindow(unsigned outputFrameWidth, unsigned outputFrameHeight)
+bool RenderEngine::TryPresentPreview(bool force, unsigned previewFps, unsigned outputFrameWidth, unsigned outputFrameHeight)
 {
+	if (!force)
+	{
+		if (previewFps == 0)
+			return false;
+
+		const auto now = std::chrono::steady_clock::now();
+		const auto minimumInterval = std::chrono::microseconds(1000000 / (previewFps == 0 ? 1u : previewFps));
+		if (mLastPreviewPresentTime != std::chrono::steady_clock::time_point() &&
+			now - mLastPreviewPresentTime < minimumInterval)
+		{
+			return false;
+		}
+	}
+
 	if (!TryEnterCriticalSection(&mMutex))
 		return false;
 
 	mRenderer.PresentToWindow(mHdc, outputFrameWidth, outputFrameHeight);
+	mLastPreviewPresentTime = std::chrono::steady_clock::now();
 	LeaveCriticalSection(&mMutex);
 	return true;
 }
@@ -133,6 +174,76 @@ bool RenderEngine::RenderOutputFrame(const RenderPipelineFrameContext& context,
 	return rendered;
 }
 
+bool RenderEngine::ResolveRenderLayerStates(
+	bool useCommittedLayerStates,
+	unsigned renderWidth,
+	unsigned renderHeight,
+	OverlayApplier overlayApplier,
+	std::vector<RuntimeRenderState>& layerStates)
+{
+	layerStates.clear();
+	if (useCommittedLayerStates)
+	{
+		layerStates = mShaderPrograms.CommittedLayerStates();
+		if (overlayApplier)
+			overlayApplier(layerStates, false);
+		mRuntimeSnapshotProvider.RefreshDynamicRenderStateFields(layerStates);
+		return true;
+	}
+
+	const RuntimeSnapshotVersions versions = mRuntimeSnapshotProvider.GetVersions();
+	const bool renderStateCacheValid =
+		!mCachedLayerRenderStates.empty() &&
+		mCachedRenderStateVersion == versions.renderStateVersion &&
+		mCachedRenderStateWidth == renderWidth &&
+		mCachedRenderStateHeight == renderHeight;
+
+	if (renderStateCacheValid)
+	{
+		RuntimeRenderStateSnapshot renderSnapshot;
+		renderSnapshot.outputWidth = renderWidth;
+		renderSnapshot.outputHeight = renderHeight;
+		renderSnapshot.versions.renderStateVersion = mCachedRenderStateVersion;
+		renderSnapshot.versions.parameterStateVersion = mCachedParameterStateVersion;
+		renderSnapshot.states = mCachedLayerRenderStates;
+
+		if (overlayApplier)
+			overlayApplier(renderSnapshot.states, true);
+		if (mCachedParameterStateVersion != versions.parameterStateVersion &&
+			mRuntimeSnapshotProvider.TryRefreshSnapshotParameters(renderSnapshot))
+		{
+			mCachedParameterStateVersion = renderSnapshot.versions.parameterStateVersion;
+			if (overlayApplier)
+				overlayApplier(renderSnapshot.states, true);
+		}
+
+		mCachedLayerRenderStates = renderSnapshot.states;
+		layerStates = renderSnapshot.states;
+		mRuntimeSnapshotProvider.RefreshDynamicRenderStateFields(layerStates);
+		return true;
+	}
+
+	RuntimeRenderStateSnapshot renderSnapshot;
+	if (mRuntimeSnapshotProvider.TryGetRenderStateSnapshot(renderWidth, renderHeight, renderSnapshot))
+	{
+		mCachedLayerRenderStates = renderSnapshot.states;
+		mCachedRenderStateVersion = renderSnapshot.versions.renderStateVersion;
+		mCachedParameterStateVersion = renderSnapshot.versions.parameterStateVersion;
+		mCachedRenderStateWidth = renderSnapshot.outputWidth;
+		mCachedRenderStateHeight = renderSnapshot.outputHeight;
+		if (overlayApplier)
+			overlayApplier(mCachedLayerRenderStates, true);
+		layerStates = mCachedLayerRenderStates;
+		return true;
+	}
+
+	if (overlayApplier)
+		overlayApplier(mCachedLayerRenderStates, true);
+	layerStates = mCachedLayerRenderStates;
+	mRuntimeSnapshotProvider.RefreshDynamicRenderStateFields(layerStates);
+	return !layerStates.empty();
+}
+
 void RenderEngine::RenderLayerStack(
 	bool hasInputSource,
 	const std::vector<RuntimeRenderState>& layerStates,
@@ -178,3 +289,23 @@ bool RenderEngine::ReadOutputFrameRgba(unsigned width, unsigned height, std::vec
 	LeaveCriticalSection(&mMutex);
 	return true;
 }
+
+bool RenderEngine::CaptureOutputFrameRgbaTopDown(unsigned width, unsigned height, std::vector<unsigned char>& topDownPixels)
+{
+	std::vector<unsigned char> bottomUpPixels;
+	if (!ReadOutputFrameRgba(width, height, bottomUpPixels))
+		return false;
+
+	topDownPixels.resize(bottomUpPixels.size());
+	const std::size_t rowBytes = static_cast<std::size_t>(width) * 4;
+	for (unsigned y = 0; y < height; ++y)
+	{
+		const unsigned sourceY = height - 1 - y;
+		std::copy(
+			bottomUpPixels.begin() + static_cast<std::ptrdiff_t>(sourceY * rowBytes),
+			bottomUpPixels.begin() + static_cast<std::ptrdiff_t>((sourceY + 1) * rowBytes),
+			topDownPixels.begin() + static_cast<std::ptrdiff_t>(y * rowBytes));
+	}
+
+	return true;
+}

apps/LoopThroughWithOpenGLCompositing/gl/RenderEngine.h

@@ -4,11 +4,13 @@
 #include "OpenGLRenderPipeline.h"
 #include "OpenGLRenderer.h"
 #include "OpenGLShaderPrograms.h"
-#include "RuntimeHost.h"
+#include "HealthTelemetry.h"
 #include "RuntimeSnapshotProvider.h"
 
 #include <windows.h>
 
+#include <cstdint>
+#include <chrono>
 #include <functional>
 #include <string>
 #include <vector>
@@ -19,10 +21,11 @@ public:
 	using RenderEffectCallback = std::function<void()>;
 	using ScreenshotCallback = std::function<void()>;
 	using PreviewPaintCallback = std::function<void()>;
+	using OverlayApplier = std::function<void(std::vector<RuntimeRenderState>& states, bool allowCommit)>;
 
 	RenderEngine(
-		RuntimeHost& runtimeHost,
 		RuntimeSnapshotProvider& runtimeSnapshotProvider,
+		HealthTelemetry& healthTelemetry,
 		CRITICAL_SECTION& mutex,
 		HDC hdc,
 		HGLRC hglrc,
@@ -43,14 +46,27 @@ public:
 		std::string& error);
 	bool CompileLayerPrograms(unsigned inputFrameWidth, unsigned inputFrameHeight, int errorMessageSize, char* errorMessage);
 	bool CommitPreparedLayerPrograms(const PreparedShaderBuild& preparedBuild, unsigned inputFrameWidth, unsigned inputFrameHeight, int errorMessageSize, char* errorMessage);
+	bool ApplyPreparedShaderBuild(
+		const PreparedShaderBuild& preparedBuild,
+		unsigned inputFrameWidth,
+		unsigned inputFrameHeight,
+		bool preserveFeedbackState,
+		int errorMessageSize,
+		char* errorMessage);
 
 	const std::vector<RuntimeRenderState>& CommittedLayerStates() const;
 	void ResetTemporalHistoryState();
 	void ResetShaderFeedbackState();
 	void ResizeView(int width, int height);
-	bool TryPresentToWindow(unsigned outputFrameWidth, unsigned outputFrameHeight);
+	bool TryPresentPreview(bool force, unsigned previewFps, unsigned outputFrameWidth, unsigned outputFrameHeight);
 	bool TryUploadInputFrame(const VideoIOFrame& inputFrame, const VideoIOState& videoState);
 	bool RenderOutputFrame(const RenderPipelineFrameContext& context, VideoIOOutputFrame& outputFrame);
+	bool ResolveRenderLayerStates(
+		bool useCommittedLayerStates,
+		unsigned renderWidth,
+		unsigned renderHeight,
+		OverlayApplier overlayApplier,
+		std::vector<RuntimeRenderState>& layerStates);
 	void RenderLayerStack(
 		bool hasInputSource,
 		const std::vector<RuntimeRenderState>& layerStates,
@@ -60,13 +76,21 @@ public:
 		VideoIOPixelFormat inputPixelFormat,
 		unsigned historyCap);
 	bool ReadOutputFrameRgba(unsigned width, unsigned height, std::vector<unsigned char>& bottomUpPixels);
+	bool CaptureOutputFrameRgbaTopDown(unsigned width, unsigned height, std::vector<unsigned char>& topDownPixels);
 
 private:
 	OpenGLRenderer mRenderer;
 	OpenGLRenderPass mRenderPass;
 	OpenGLRenderPipeline mRenderPipeline;
 	OpenGLShaderPrograms mShaderPrograms;
+	RuntimeSnapshotProvider& mRuntimeSnapshotProvider;
 	CRITICAL_SECTION& mMutex;
 	HDC mHdc;
 	HGLRC mHglrc;
+	std::vector<RuntimeRenderState> mCachedLayerRenderStates;
+	uint64_t mCachedRenderStateVersion = 0;
+	uint64_t mCachedParameterStateVersion = 0;
+	unsigned mCachedRenderStateWidth = 0;
+	unsigned mCachedRenderStateHeight = 0;
+	std::chrono::steady_clock::time_point mLastPreviewPresentTime;
 };

apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp

@@ -1,7 +1,8 @@
 #include "OpenGLRenderPipeline.h"
 
+#include "HealthTelemetry.h"
 #include "OpenGLRenderer.h"
-#include "RuntimeHost.h"
+#include "RuntimeSnapshotProvider.h"
 #include "VideoIOFormat.h"
 
 #include <cstring>
@@ -11,12 +12,14 @@
 
 OpenGLRenderPipeline::OpenGLRenderPipeline(
 	OpenGLRenderer& renderer,
-	RuntimeHost& runtimeHost,
+	RuntimeSnapshotProvider& runtimeSnapshotProvider,
+	HealthTelemetry& healthTelemetry,
 	RenderEffectCallback renderEffect,
 	OutputReadyCallback outputReady,
 	PaintCallback paint) :
 	mRenderer(renderer),
-	mRuntimeHost(runtimeHost),
+	mRuntimeSnapshotProvider(runtimeSnapshotProvider),
+	mHealthTelemetry(healthTelemetry),
 	mRenderEffect(renderEffect),
 	mOutputReady(outputReady),
 	mPaint(paint)
@@ -47,8 +50,8 @@ bool OpenGLRenderPipeline::RenderFrame(const RenderPipelineFrameContext& context
 
 	const auto renderEndTime = std::chrono::steady_clock::now();
 	const double renderMilliseconds = std::chrono::duration_cast<std::chrono::duration<double, std::milli>>(renderEndTime - renderStartTime).count();
-	mRuntimeHost.GetHealthTelemetry().TryRecordPerformanceStats(state.frameBudgetMilliseconds, renderMilliseconds);
+	mHealthTelemetry.TryRecordPerformanceStats(state.frameBudgetMilliseconds, renderMilliseconds);
-	mRuntimeHost.TryAdvanceFrame();
+	mRuntimeSnapshotProvider.TryAdvanceFrame();
 
 	ReadOutputFrame(state, outputFrame);
 	if (mPaint)

apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.h

@@ -8,7 +8,8 @@
 #include <vector>
 
 class OpenGLRenderer;
-class RuntimeHost;
+class HealthTelemetry;
+class RuntimeSnapshotProvider;
 
 struct RenderPipelineFrameContext
 {
@@ -25,7 +26,8 @@ public:
 
 	OpenGLRenderPipeline(
 		OpenGLRenderer& renderer,
-		RuntimeHost& runtimeHost,
+		RuntimeSnapshotProvider& runtimeSnapshotProvider,
+		HealthTelemetry& healthTelemetry,
 		RenderEffectCallback renderEffect,
 		OutputReadyCallback outputReady,
 		PaintCallback paint);
@@ -53,7 +55,8 @@ private:
 	void ReadOutputFrame(const VideoIOState& state, VideoIOOutputFrame& outputFrame);
 
 	OpenGLRenderer& mRenderer;
-	RuntimeHost& mRuntimeHost;
+	RuntimeSnapshotProvider& mRuntimeSnapshotProvider;
+	HealthTelemetry& mHealthTelemetry;
 	RenderEffectCallback mRenderEffect;
 	OutputReadyCallback mOutputReady;
 	PaintCallback mPaint;

apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp

@@ -1,81 +1,25 @@
 #include "OpenGLVideoIOBridge.h"
 
-#include "HealthTelemetry.h"
 #include "RenderEngine.h"
 
-#include <chrono>
+OpenGLVideoIOBridge::OpenGLVideoIOBridge(RenderEngine& renderEngine) :
-
+	mRenderEngine(renderEngine)
-OpenGLVideoIOBridge::OpenGLVideoIOBridge(
-	VideoIODevice& videoIO,
-	RenderEngine& renderEngine,
-	HealthTelemetry& healthTelemetry) :
-	mVideoIO(videoIO),
-	mRenderEngine(renderEngine),
-	mHealthTelemetry(healthTelemetry)
 {
 }
 
-void OpenGLVideoIOBridge::RecordFramePacing(VideoIOCompletionResult completionResult)
+void OpenGLVideoIOBridge::UploadInputFrame(const VideoIOFrame& inputFrame, const VideoIOState& state)
 {
-	const auto now = std::chrono::steady_clock::now();
-	if (mLastPlayoutCompletionTime != std::chrono::steady_clock::time_point())
-	{
-		mCompletionIntervalMilliseconds = std::chrono::duration_cast<std::chrono::duration<double, std::milli>>(now - mLastPlayoutCompletionTime).count();
-		if (mSmoothedCompletionIntervalMilliseconds <= 0.0)
-			mSmoothedCompletionIntervalMilliseconds = mCompletionIntervalMilliseconds;
-		else
-			mSmoothedCompletionIntervalMilliseconds = mSmoothedCompletionIntervalMilliseconds * 0.9 + mCompletionIntervalMilliseconds * 0.1;
-		if (mCompletionIntervalMilliseconds > mMaxCompletionIntervalMilliseconds)
-			mMaxCompletionIntervalMilliseconds = mCompletionIntervalMilliseconds;
-	}
-	mLastPlayoutCompletionTime = now;
-
-	if (completionResult == VideoIOCompletionResult::DisplayedLate)
-		++mLateFrameCount;
-	else if (completionResult == VideoIOCompletionResult::Dropped)
-		++mDroppedFrameCount;
-	else if (completionResult == VideoIOCompletionResult::Flushed)
-		++mFlushedFrameCount;
-
-	mHealthTelemetry.TryRecordFramePacingStats(
-		mCompletionIntervalMilliseconds,
-		mSmoothedCompletionIntervalMilliseconds,
-		mMaxCompletionIntervalMilliseconds,
-		mLateFrameCount,
-		mDroppedFrameCount,
-		mFlushedFrameCount);
-}
-
-void OpenGLVideoIOBridge::VideoFrameArrived(const VideoIOFrame& inputFrame)
-{
-	const VideoIOState& state = mVideoIO.State();
-	mHealthTelemetry.TryReportSignalStatus(!inputFrame.hasNoInputSource, state.inputFrameSize.width, state.inputFrameSize.height, state.inputDisplayModeName);
-
 	if (inputFrame.hasNoInputSource || inputFrame.bytes == nullptr)
 		return;							// don't transfer texture when there's no input
 
 	mRenderEngine.TryUploadInputFrame(inputFrame, state);
 }
 
-void OpenGLVideoIOBridge::PlayoutFrameCompleted(const VideoIOCompletion& completion)
+void OpenGLVideoIOBridge::RenderScheduledFrame(const VideoIOState& state, const VideoIOCompletion& completion, VideoIOOutputFrame& outputFrame)
 {
-	RecordFramePacing(completion.result);
-
-	VideoIOOutputFrame outputFrame;
-	if (!mVideoIO.BeginOutputFrame(outputFrame))
-		return;
-	const VideoIOState& state = mVideoIO.State();
 	RenderPipelineFrameContext frameContext;
 	frameContext.videoState = state;
 	frameContext.completion = completion;
 
 	mRenderEngine.RenderOutputFrame(frameContext, outputFrame);
-
-	mVideoIO.EndOutputFrame(outputFrame);
-
-	mVideoIO.AccountForCompletionResult(completion.result);
-
-	// Schedule the next frame for playout after the GL bridge is released so
-	// input uploads are not blocked by non-GL output bookkeeping.
-	mVideoIO.ScheduleOutputFrame(outputFrame);
 }

apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.h

@@ -2,34 +2,16 @@
 
 #include "OpenGLRenderPipeline.h"
 
-#include <chrono>
-#include <cstdint>
-
-class HealthTelemetry;
 class RenderEngine;
 
 class OpenGLVideoIOBridge
 {
 public:
-	OpenGLVideoIOBridge(
+	explicit OpenGLVideoIOBridge(RenderEngine& renderEngine);
-		VideoIODevice& videoIO,
-		RenderEngine& renderEngine,
-		HealthTelemetry& healthTelemetry);
 
-	void VideoFrameArrived(const VideoIOFrame& inputFrame);
+	void UploadInputFrame(const VideoIOFrame& inputFrame, const VideoIOState& state);
-	void PlayoutFrameCompleted(const VideoIOCompletion& completion);
+	void RenderScheduledFrame(const VideoIOState& state, const VideoIOCompletion& completion, VideoIOOutputFrame& outputFrame);
 
 private:
-	void RecordFramePacing(VideoIOCompletionResult completionResult);
-
-	VideoIODevice& mVideoIO;
 	RenderEngine& mRenderEngine;
-	HealthTelemetry& mHealthTelemetry;
-	std::chrono::steady_clock::time_point mLastPlayoutCompletionTime;
-	double mCompletionIntervalMilliseconds = 0.0;
-	double mSmoothedCompletionIntervalMilliseconds = 0.0;
-	double mMaxCompletionIntervalMilliseconds = 0.0;
-	uint64_t mLateFrameCount = 0;
-	uint64_t mDroppedFrameCount = 0;
-	uint64_t mFlushedFrameCount = 0;
 };

apps/LoopThroughWithOpenGLCompositing/gl/shader/OpenGLShaderPrograms.cpp

@@ -29,12 +29,11 @@ std::size_t RequiredTemporaryRenderTargets(const std::vector<OpenGLRenderer::Lay
 }
 }
 
-OpenGLShaderPrograms::OpenGLShaderPrograms(OpenGLRenderer& renderer, RuntimeHost& runtimeHost, RuntimeSnapshotProvider& runtimeSnapshotProvider) :
+OpenGLShaderPrograms::OpenGLShaderPrograms(OpenGLRenderer& renderer, RuntimeSnapshotProvider& runtimeSnapshotProvider) :
 	mRenderer(renderer),
-	mRuntimeHost(runtimeHost),
 	mRuntimeSnapshotProvider(runtimeSnapshotProvider),
 	mGlobalParamsBuffer(renderer),
-	mCompiler(renderer, runtimeHost, mTextureBindings)
+	mCompiler(renderer, runtimeSnapshotProvider, mTextureBindings)
 {
 }
 
@@ -44,7 +43,7 @@ bool OpenGLShaderPrograms::CompileLayerPrograms(unsigned inputFrameWidth, unsign
 		mRuntimeSnapshotProvider.GetRenderStateSnapshot(inputFrameWidth, inputFrameHeight);
 	const std::vector<RuntimeRenderState>& layerStates = renderSnapshot.states;
 	std::string temporalError;
-	const unsigned historyCap = mRuntimeHost.GetMaxTemporalHistoryFrames();
+	const unsigned historyCap = mRuntimeSnapshotProvider.GetMaxTemporalHistoryFrames();
 	if (!mRenderer.TemporalHistory().ValidateTextureUnitBudget(layerStates, historyCap, temporalError))
 	{
 		CopyErrorMessage(temporalError, errorMessageSize, errorMessage);
@@ -92,9 +91,6 @@ bool OpenGLShaderPrograms::CompileLayerPrograms(unsigned inputFrameWidth, unsign
 	mRenderer.ReplaceLayerPrograms(newPrograms);
 	mCommittedLayerStates = renderSnapshot.states;
 
-	mRuntimeHost.SetCompileStatus(true, "Shader layers compiled successfully.");
-	mRuntimeHost.ClearReloadRequest();
-
 	return true;
 }
 
@@ -107,7 +103,7 @@ bool OpenGLShaderPrograms::CommitPreparedLayerPrograms(const PreparedShaderBuild
 	}
 
 	std::string temporalError;
-	const unsigned historyCap = mRuntimeHost.GetMaxTemporalHistoryFrames();
+	const unsigned historyCap = mRuntimeSnapshotProvider.GetMaxTemporalHistoryFrames();
 	if (!mRenderer.TemporalHistory().ValidateTextureUnitBudget(preparedBuild.renderSnapshot.states, historyCap, temporalError))
 	{
 		CopyErrorMessage(temporalError, errorMessageSize, errorMessage);
@@ -155,9 +151,6 @@ bool OpenGLShaderPrograms::CommitPreparedLayerPrograms(const PreparedShaderBuild
 	mRenderer.ReplaceLayerPrograms(newPrograms);
 	mCommittedLayerStates = preparedBuild.renderSnapshot.states;
 
-	mRuntimeHost.SetCompileStatus(true, "Shader layers compiled successfully.");
-	mRuntimeHost.ClearReloadRequest();
-
 	return true;
 }
 

apps/LoopThroughWithOpenGLCompositing/gl/shader/OpenGLShaderPrograms.h

@@ -2,7 +2,6 @@
 
 #include "GlobalParamsBuffer.h"
 #include "OpenGLRenderer.h"
-#include "RuntimeHost.h"
 #include "RuntimeSnapshotProvider.h"
 #include "ShaderBuildQueue.h"
 #include "ShaderTypes.h"
@@ -16,7 +15,7 @@ class OpenGLShaderPrograms
 public:
 	using LayerProgram = OpenGLRenderer::LayerProgram;
 
-	OpenGLShaderPrograms(OpenGLRenderer& renderer, RuntimeHost& runtimeHost, RuntimeSnapshotProvider& runtimeSnapshotProvider);
+	OpenGLShaderPrograms(OpenGLRenderer& renderer, RuntimeSnapshotProvider& runtimeSnapshotProvider);
 
 	bool CompileLayerPrograms(unsigned inputFrameWidth, unsigned inputFrameHeight, int errorMessageSize, char* errorMessage);
 	bool CommitPreparedLayerPrograms(const PreparedShaderBuild& preparedBuild, unsigned inputFrameWidth, unsigned inputFrameHeight, int errorMessageSize, char* errorMessage);
@@ -33,7 +32,6 @@ public:
 
 private:
 	OpenGLRenderer& mRenderer;
-	RuntimeHost& mRuntimeHost;
 	RuntimeSnapshotProvider& mRuntimeSnapshotProvider;
 	ShaderTextureBindings mTextureBindings;
 	GlobalParamsBuffer mGlobalParamsBuffer;

apps/LoopThroughWithOpenGLCompositing/gl/shader/ShaderProgramCompiler.cpp

@@ -19,9 +19,9 @@ void CopyErrorMessage(const std::string& message, int errorMessageSize, char* er
 }
 }
 
-ShaderProgramCompiler::ShaderProgramCompiler(OpenGLRenderer& renderer, RuntimeHost& runtimeHost, ShaderTextureBindings& textureBindings) :
+ShaderProgramCompiler::ShaderProgramCompiler(OpenGLRenderer& renderer, RuntimeSnapshotProvider& runtimeSnapshotProvider, ShaderTextureBindings& textureBindings) :
 	mRenderer(renderer),
-	mRuntimeHost(runtimeHost),
+	mRuntimeSnapshotProvider(runtimeSnapshotProvider),
 	mTextureBindings(textureBindings)
 {
 }
@@ -31,7 +31,7 @@ bool ShaderProgramCompiler::CompileLayerProgram(const RuntimeRenderState& state,
 	std::vector<ShaderPassBuildSource> passSources;
 	std::string loadError;
 
-	if (!mRuntimeHost.BuildLayerPassFragmentShaderSources(state.layerId, passSources, loadError))
+	if (!mRuntimeSnapshotProvider.BuildLayerPassFragmentShaderSources(state.layerId, passSources, loadError))
 	{
 		CopyErrorMessage(loadError, errorMessageSize, errorMessage);
 		return false;
@@ -117,7 +117,7 @@ bool ShaderProgramCompiler::CompilePreparedLayerProgram(const RuntimeRenderState
 		passProgram.passId = passSource.passId;
 		passProgram.inputNames = passSource.inputNames;
 		passProgram.outputName = passSource.outputName;
-		passProgram.shaderTextureBase = mTextureBindings.ResolveShaderTextureBase(state, mRuntimeHost.GetMaxTemporalHistoryFrames());
+		passProgram.shaderTextureBase = mTextureBindings.ResolveShaderTextureBase(state, mRuntimeSnapshotProvider.GetMaxTemporalHistoryFrames());
 		passProgram.textureBindings.swap(textureBindings);
 		passProgram.textBindings.swap(textBindings);
 
@@ -125,7 +125,7 @@ bool ShaderProgramCompiler::CompilePreparedLayerProgram(const RuntimeRenderState
 		if (globalParamsIndex != GL_INVALID_INDEX)
 			glUniformBlockBinding(newProgram.get(), globalParamsIndex, kGlobalParamsBindingPoint);
 
-		const unsigned historyCap = mRuntimeHost.GetMaxTemporalHistoryFrames();
+		const unsigned historyCap = mRuntimeSnapshotProvider.GetMaxTemporalHistoryFrames();
 		glUseProgram(newProgram.get());
 		mTextureBindings.AssignLayerSamplerUniforms(newProgram.get(), state, passProgram, historyCap);
 		glUseProgram(0);

apps/LoopThroughWithOpenGLCompositing/gl/shader/ShaderProgramCompiler.h

@@ -1,7 +1,7 @@
 #pragma once
 
 #include "OpenGLRenderer.h"
-#include "RuntimeHost.h"
+#include "RuntimeSnapshotProvider.h"
 #include "ShaderTextureBindings.h"
 
 #include <string>
@@ -13,7 +13,7 @@ public:
 	using LayerProgram = OpenGLRenderer::LayerProgram;
 	using PassProgram = OpenGLRenderer::LayerProgram::PassProgram;
 
-	ShaderProgramCompiler(OpenGLRenderer& renderer, RuntimeHost& runtimeHost, ShaderTextureBindings& textureBindings);
+	ShaderProgramCompiler(OpenGLRenderer& renderer, RuntimeSnapshotProvider& runtimeSnapshotProvider, ShaderTextureBindings& textureBindings);
 
 	bool CompileLayerProgram(const RuntimeRenderState& state, LayerProgram& layerProgram, int errorMessageSize, char* errorMessage);
 	bool CompilePreparedLayerProgram(const RuntimeRenderState& state, const std::vector<ShaderPassBuildSource>& passSources, LayerProgram& layerProgram, int errorMessageSize, char* errorMessage);
@@ -22,6 +22,6 @@ public:
 
 private:
 	OpenGLRenderer& mRenderer;
-	RuntimeHost& mRuntimeHost;
+	RuntimeSnapshotProvider& mRuntimeSnapshotProvider;
 	ShaderTextureBindings& mTextureBindings;
 };

apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeCoordinator.cpp

@@ -0,0 +1,173 @@
+#include "RuntimeCoordinator.h"
+
+#include "RuntimeStore.h"
+
+RuntimeCoordinator::RuntimeCoordinator(RuntimeStore& runtimeStore) :
+	mRuntimeStore(runtimeStore)
+{
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::AddLayer(const std::string& shaderId)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.CreateStoredLayer(shaderId, error), error, true, true);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::RemoveLayer(const std::string& layerId)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.DeleteStoredLayer(layerId, error), error, true, true);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::MoveLayer(const std::string& layerId, int direction)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.MoveStoredLayer(layerId, direction, error), error, true, true);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::MoveLayerToIndex(const std::string& layerId, std::size_t targetIndex)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.MoveStoredLayerToIndex(layerId, targetIndex, error), error, true, true);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::SetLayerBypass(const std::string& layerId, bool bypassed)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.SetStoredLayerBypassState(layerId, bypassed, error), error, true, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::SetLayerShader(const std::string& layerId, const std::string& shaderId)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.SetStoredLayerShaderSelection(layerId, shaderId, error), error, true, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::UpdateLayerParameter(const std::string& layerId, const std::string& parameterId, const JsonValue& newValue)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.SetStoredParameterValue(layerId, parameterId, newValue, error), error, false, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::UpdateLayerParameterByControlKey(const std::string& layerKey, const std::string& parameterKey, const JsonValue& newValue)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.SetStoredParameterValueByControlKey(layerKey, parameterKey, newValue, error), error, false, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::ResetLayerParameters(const std::string& layerId)
+{
+	std::string error;
+	RuntimeCoordinatorResult result = ApplyStoreMutation(mRuntimeStore.ResetStoredLayerParameterValues(layerId, error), error, false, false);
+	if (!result.accepted)
+		return result;
+
+	result.clearTransientOscState = true;
+	result.renderResetScope = RuntimeCoordinatorRenderResetScope::TemporalHistoryAndFeedback;
+	return result;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::SaveStackPreset(const std::string& presetName)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.SaveStackPresetSnapshot(presetName, error), error, false, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::LoadStackPreset(const std::string& presetName)
+{
+	std::string error;
+	return ApplyStoreMutation(mRuntimeStore.LoadStackPresetSnapshot(presetName, error), error, true, false);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::RequestShaderReload(bool preserveFeedbackState)
+{
+	return BuildQueuedReloadResult(preserveFeedbackState);
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::HandleRuntimePollFailure(const std::string& error)
+{
+	RuntimeCoordinatorResult result;
+	result.accepted = true;
+	result.runtimeStateBroadcastRequired = true;
+	result.compileStatusChanged = true;
+	result.compileStatusSucceeded = false;
+	result.compileStatusMessage = error;
+	return result;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::HandlePreparedShaderBuildFailure(const std::string& error)
+{
+	mPreserveFeedbackOnNextShaderBuild = false;
+
+	RuntimeCoordinatorResult result;
+	result.accepted = true;
+	result.runtimeStateBroadcastRequired = true;
+	result.compileStatusChanged = true;
+	result.compileStatusSucceeded = false;
+	result.compileStatusMessage = error;
+	result.committedStateMode = RuntimeCoordinatorCommittedStateMode::UseCommittedStates;
+	return result;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::HandlePreparedShaderBuildSuccess()
+{
+	RuntimeCoordinatorResult result;
+	result.accepted = true;
+	result.runtimeStateBroadcastRequired = true;
+	result.compileStatusChanged = true;
+	result.compileStatusSucceeded = true;
+	result.compileStatusMessage = "Shader layers compiled successfully.";
+	result.committedStateMode = RuntimeCoordinatorCommittedStateMode::UseLiveSnapshots;
+	mPreserveFeedbackOnNextShaderBuild = false;
+	return result;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::HandleRuntimeReloadRequest()
+{
+	return BuildQueuedReloadResult(false);
+}
+
+bool RuntimeCoordinator::PreserveFeedbackOnNextShaderBuild() const
+{
+	return mPreserveFeedbackOnNextShaderBuild;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::ApplyStoreMutation(bool succeeded, const std::string& errorMessage, bool reloadRequired, bool preserveFeedbackState)
+{
+	if (!succeeded)
+	{
+		RuntimeCoordinatorResult result;
+		result.accepted = false;
+		result.errorMessage = errorMessage;
+		return result;
+	}
+
+	if (reloadRequired)
+		return BuildQueuedReloadResult(preserveFeedbackState);
+
+	return BuildAcceptedNoReloadResult();
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::BuildQueuedReloadResult(bool preserveFeedbackState)
+{
+	mPreserveFeedbackOnNextShaderBuild = preserveFeedbackState;
+
+	RuntimeCoordinatorResult result;
+	result.accepted = true;
+	result.runtimeStateBroadcastRequired = true;
+	result.shaderBuildRequested = true;
+	result.compileStatusChanged = true;
+	result.compileStatusSucceeded = true;
+	result.compileStatusMessage = "Shader rebuild queued.";
+	result.clearReloadRequest = true;
+	result.committedStateMode = RuntimeCoordinatorCommittedStateMode::UseCommittedStates;
+	return result;
+}
+
+RuntimeCoordinatorResult RuntimeCoordinator::BuildAcceptedNoReloadResult() const
+{
+	RuntimeCoordinatorResult result;
+	result.accepted = true;
+	result.runtimeStateBroadcastRequired = true;
+	return result;
+}

apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeCoordinator.h

@@ -0,0 +1,70 @@
+#pragma once
+
+#include "RuntimeJson.h"
+
+#include <cstddef>
+#include <string>
+
+class RuntimeStore;
+
+enum class RuntimeCoordinatorCommittedStateMode
+{
+	Unchanged,
+	UseCommittedStates,
+	UseLiveSnapshots
+};
+
+enum class RuntimeCoordinatorRenderResetScope
+{
+	None,
+	TemporalHistoryOnly,
+	TemporalHistoryAndFeedback
+};
+
+struct RuntimeCoordinatorResult
+{
+	bool accepted = false;
+	bool runtimeStateBroadcastRequired = false;
+	bool shaderBuildRequested = false;
+	bool clearTransientOscState = false;
+	bool compileStatusChanged = false;
+	bool compileStatusSucceeded = false;
+	bool clearReloadRequest = false;
+	RuntimeCoordinatorCommittedStateMode committedStateMode = RuntimeCoordinatorCommittedStateMode::Unchanged;
+	RuntimeCoordinatorRenderResetScope renderResetScope = RuntimeCoordinatorRenderResetScope::None;
+	std::string compileStatusMessage;
+	std::string errorMessage;
+};
+
+class RuntimeCoordinator
+{
+public:
+	explicit RuntimeCoordinator(RuntimeStore& runtimeStore);
+
+	RuntimeCoordinatorResult AddLayer(const std::string& shaderId);
+	RuntimeCoordinatorResult RemoveLayer(const std::string& layerId);
+	RuntimeCoordinatorResult MoveLayer(const std::string& layerId, int direction);
+	RuntimeCoordinatorResult MoveLayerToIndex(const std::string& layerId, std::size_t targetIndex);
+	RuntimeCoordinatorResult SetLayerBypass(const std::string& layerId, bool bypassed);
+	RuntimeCoordinatorResult SetLayerShader(const std::string& layerId, const std::string& shaderId);
+	RuntimeCoordinatorResult UpdateLayerParameter(const std::string& layerId, const std::string& parameterId, const JsonValue& newValue);
+	RuntimeCoordinatorResult UpdateLayerParameterByControlKey(const std::string& layerKey, const std::string& parameterKey, const JsonValue& newValue);
+	RuntimeCoordinatorResult ResetLayerParameters(const std::string& layerId);
+	RuntimeCoordinatorResult SaveStackPreset(const std::string& presetName);
+	RuntimeCoordinatorResult LoadStackPreset(const std::string& presetName);
+
+	RuntimeCoordinatorResult RequestShaderReload(bool preserveFeedbackState = false);
+	RuntimeCoordinatorResult HandleRuntimePollFailure(const std::string& error);
+	RuntimeCoordinatorResult HandlePreparedShaderBuildFailure(const std::string& error);
+	RuntimeCoordinatorResult HandlePreparedShaderBuildSuccess();
+	RuntimeCoordinatorResult HandleRuntimeReloadRequest();
+	bool PreserveFeedbackOnNextShaderBuild() const;
+
+private:
+	RuntimeCoordinatorResult ApplyStoreMutation(bool succeeded, const std::string& errorMessage, bool reloadRequired, bool preserveFeedbackState);
+	RuntimeCoordinatorResult BuildQueuedReloadResult(bool preserveFeedbackState);
+	RuntimeCoordinatorResult BuildAcceptedNoReloadResult() const;
+
+	RuntimeStore& mRuntimeStore;
+	bool mPreserveFeedbackOnNextShaderBuild = false;
+};

apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeSnapshotProvider.cpp

@@ -12,6 +12,11 @@ bool RuntimeSnapshotProvider::BuildLayerPassFragmentShaderSources(const std::str
 	return mRuntimeHost.BuildLayerPassFragmentShaderSources(layerId, passSources, error);
 }
 
+unsigned RuntimeSnapshotProvider::GetMaxTemporalHistoryFrames() const
+{
+	return mRuntimeHost.GetMaxTemporalHistoryFrames();
+}
+
 RuntimeSnapshotVersions RuntimeSnapshotProvider::GetVersions() const
 {
 	RuntimeSnapshotVersions versions;
@@ -35,6 +40,16 @@ RuntimeRenderFrameContext RuntimeSnapshotProvider::GetFrameContext() const
 	return frameContext;
 }
 
+void RuntimeSnapshotProvider::AdvanceFrame()
+{
+	mRuntimeHost.AdvanceFrame();
+}
+
+bool RuntimeSnapshotProvider::TryAdvanceFrame()
+{
+	return mRuntimeHost.TryAdvanceFrame();
+}
+
 RuntimeRenderStateSnapshot RuntimeSnapshotProvider::GetRenderStateSnapshot(unsigned outputWidth, unsigned outputHeight) const
 {
 	for (;;)

apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeSnapshotProvider.h

@@ -35,8 +35,11 @@ public:
 	explicit RuntimeSnapshotProvider(RuntimeHost& runtimeHost);
 
 	bool BuildLayerPassFragmentShaderSources(const std::string& layerId, std::vector<ShaderPassBuildSource>& passSources, std::string& error) const;
+	unsigned GetMaxTemporalHistoryFrames() const;
 	RuntimeSnapshotVersions GetVersions() const;
 	RuntimeRenderFrameContext GetFrameContext() const;
+	void AdvanceFrame();
+	bool TryAdvanceFrame();
 	RuntimeRenderStateSnapshot GetRenderStateSnapshot(unsigned outputWidth, unsigned outputHeight) const;
 	bool TryGetRenderStateSnapshot(unsigned outputWidth, unsigned outputHeight, RuntimeRenderStateSnapshot& snapshot) const;
 	bool TryRefreshSnapshotParameters(RuntimeRenderStateSnapshot& snapshot) const;

apps/LoopThroughWithOpenGLCompositing/videoio/VideoBackend.cpp

@@ -2,12 +2,15 @@
 
 #include "DeckLinkSession.h"
 #include "OpenGLVideoIOBridge.h"
-#include "RenderEngine.h"
 #include "HealthTelemetry.h"
+#include "RenderEngine.h"
+
+#include <chrono>
 
 VideoBackend::VideoBackend(RenderEngine& renderEngine, HealthTelemetry& healthTelemetry) :
+	mHealthTelemetry(healthTelemetry),
 	mVideoIODevice(std::make_unique<DeckLinkSession>()),
-	mBridge(std::make_unique<OpenGLVideoIOBridge>(*mVideoIODevice, renderEngine, healthTelemetry))
+	mBridge(std::make_unique<OpenGLVideoIOBridge>(renderEngine))
 {
 }
 
@@ -35,7 +38,7 @@ bool VideoBackend::SelectPreferredFormats(const VideoFormatSelection& videoModes
 bool VideoBackend::ConfigureInput(const VideoFormat& inputVideoMode, std::string& error)
 {
 	return mVideoIODevice->ConfigureInput(
-		[this](const VideoIOFrame& frame) { mBridge->VideoFrameArrived(frame); },
+		[this](const VideoIOFrame& frame) { HandleInputFrame(frame); },
 		inputVideoMode,
 		error);
 }
@@ -43,7 +46,7 @@ bool VideoBackend::ConfigureInput(const VideoFormat& inputVideoMode, std::string
 bool VideoBackend::ConfigureOutput(const VideoFormat& outputVideoMode, bool externalKeyingEnabled, std::string& error)
 {
 	return mVideoIODevice->ConfigureOutput(
-		[this](const VideoIOCompletion& completion) { mBridge->PlayoutFrameCompleted(completion); },
+		[this](const VideoIOCompletion& completion) { HandleOutputFrameCompletion(completion); },
 		outputVideoMode,
 		externalKeyingEnabled,
 		error);
@@ -173,3 +176,63 @@ void VideoBackend::SetStatusMessage(const std::string& message)
 {
 	mVideoIODevice->SetStatusMessage(message);
 }
+
+void VideoBackend::HandleInputFrame(const VideoIOFrame& frame)
+{
+	const VideoIOState& state = mVideoIODevice->State();
+	mHealthTelemetry.TryReportSignalStatus(!frame.hasNoInputSource, state.inputFrameSize.width, state.inputFrameSize.height, state.inputDisplayModeName);
+
+	if (mBridge)
+		mBridge->UploadInputFrame(frame, state);
+}
+
+void VideoBackend::HandleOutputFrameCompletion(const VideoIOCompletion& completion)
+{
+	RecordFramePacing(completion.result);
+
+	VideoIOOutputFrame outputFrame;
+	if (!BeginOutputFrame(outputFrame))
+		return;
+
+	const VideoIOState& state = mVideoIODevice->State();
+	if (mBridge)
+		mBridge->RenderScheduledFrame(state, completion, outputFrame);
+
+	EndOutputFrame(outputFrame);
+	AccountForCompletionResult(completion.result);
+
+	// Schedule the next frame after render work is complete so device-side
+	// bookkeeping stays with the backend seam and the bridge stays render-only.
+	ScheduleOutputFrame(outputFrame);
+}
+
+void VideoBackend::RecordFramePacing(VideoIOCompletionResult completionResult)
+{
+	const auto now = std::chrono::steady_clock::now();
+	if (mLastPlayoutCompletionTime != std::chrono::steady_clock::time_point())
+	{
+		mCompletionIntervalMilliseconds = std::chrono::duration_cast<std::chrono::duration<double, std::milli>>(now - mLastPlayoutCompletionTime).count();
+		if (mSmoothedCompletionIntervalMilliseconds <= 0.0)
+			mSmoothedCompletionIntervalMilliseconds = mCompletionIntervalMilliseconds;
+		else
+			mSmoothedCompletionIntervalMilliseconds = mSmoothedCompletionIntervalMilliseconds * 0.9 + mCompletionIntervalMilliseconds * 0.1;
+		if (mCompletionIntervalMilliseconds > mMaxCompletionIntervalMilliseconds)
+			mMaxCompletionIntervalMilliseconds = mCompletionIntervalMilliseconds;
+	}
+	mLastPlayoutCompletionTime = now;
+
+	if (completionResult == VideoIOCompletionResult::DisplayedLate)
+		++mLateFrameCount;
+	else if (completionResult == VideoIOCompletionResult::Dropped)
+		++mDroppedFrameCount;
+	else if (completionResult == VideoIOCompletionResult::Flushed)
+		++mFlushedFrameCount;
+
+	mHealthTelemetry.TryRecordFramePacingStats(
+		mCompletionIntervalMilliseconds,
+		mSmoothedCompletionIntervalMilliseconds,
+		mMaxCompletionIntervalMilliseconds,
+		mLateFrameCount,
+		mDroppedFrameCount,
+		mFlushedFrameCount);
+}

apps/LoopThroughWithOpenGLCompositing/videoio/VideoBackend.h

@@ -2,6 +2,8 @@
 
 #include "VideoIOTypes.h"
 
+#include <chrono>
+#include <cstdint>
 #include <memory>
 #include <string>
 
@@ -50,6 +52,18 @@ public:
 	void SetStatusMessage(const std::string& message);
 
 private:
+	void HandleInputFrame(const VideoIOFrame& frame);
+	void HandleOutputFrameCompletion(const VideoIOCompletion& completion);
+	void RecordFramePacing(VideoIOCompletionResult completionResult);
+
+	HealthTelemetry& mHealthTelemetry;
 	std::unique_ptr<VideoIODevice> mVideoIODevice;
 	std::unique_ptr<OpenGLVideoIOBridge> mBridge;
+	std::chrono::steady_clock::time_point mLastPlayoutCompletionTime;
+	double mCompletionIntervalMilliseconds = 0.0;
+	double mSmoothedCompletionIntervalMilliseconds = 0.0;
+	double mMaxCompletionIntervalMilliseconds = 0.0;
+	uint64_t mLateFrameCount = 0;
+	uint64_t mDroppedFrameCount = 0;
+	uint64_t mFlushedFrameCount = 0;
 };

apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp

@@ -417,11 +417,21 @@ double DeckLinkSession::FrameBudgetMilliseconds() const
 	return mScheduler.FrameBudgetMilliseconds();
 }
 
-bool DeckLinkSession::BeginOutputFrame(VideoIOOutputFrame& frame)
+bool DeckLinkSession::AcquireNextOutputVideoFrame(CComPtr<IDeckLinkMutableVideoFrame>& outputVideoFrame)
 {
-	CComPtr<IDeckLinkMutableVideoFrame> outputVideoFrame = outputVideoFrameQueue.front();
+	if (outputVideoFrameQueue.empty())
+		return false;
+
+	outputVideoFrame = outputVideoFrameQueue.front();
 	outputVideoFrameQueue.push_back(outputVideoFrame);
 	outputVideoFrameQueue.pop_front();
+	return outputVideoFrame != nullptr;
+}
+
+bool DeckLinkSession::PopulateOutputFrame(IDeckLinkMutableVideoFrame* outputVideoFrame, VideoIOOutputFrame& frame)
+{
+	if (outputVideoFrame == nullptr)
+		return false;
 
 	CComPtr<IDeckLinkVideoBuffer> outputVideoFrameBuffer;
 	if (outputVideoFrame->QueryInterface(IID_IDeckLinkVideoBuffer, (void**)&outputVideoFrameBuffer) != S_OK)
@@ -438,11 +448,44 @@ bool DeckLinkSession::BeginOutputFrame(VideoIOOutputFrame& frame)
 	frame.width = mState.outputFrameSize.width;
 	frame.height = mState.outputFrameSize.height;
 	frame.pixelFormat = mState.outputPixelFormat;
-	frame.nativeFrame = outputVideoFrame.p;
+	frame.nativeFrame = outputVideoFrame;
 	frame.nativeBuffer = outputVideoFrameBuffer.Detach();
 	return true;
 }
 
+bool DeckLinkSession::ScheduleFrame(IDeckLinkMutableVideoFrame* outputVideoFrame)
+{
+	const VideoIOScheduleTime scheduleTime = mScheduler.NextScheduleTime();
+	return outputVideoFrame != nullptr &&
+		output->ScheduleVideoFrame(outputVideoFrame, scheduleTime.streamTime, scheduleTime.duration, scheduleTime.timeScale) == S_OK;
+}
+
+bool DeckLinkSession::ScheduleBlackFrame(IDeckLinkMutableVideoFrame* outputVideoFrame)
+{
+	if (outputVideoFrame == nullptr)
+		return false;
+
+	CComPtr<IDeckLinkVideoBuffer> outputVideoFrameBuffer;
+	if (outputVideoFrame->QueryInterface(IID_IDeckLinkVideoBuffer, (void**)&outputVideoFrameBuffer) != S_OK)
+		return false;
+
+	if (outputVideoFrameBuffer->StartAccess(bmdBufferAccessWrite) != S_OK)
+		return false;
+
+	void* pFrame = nullptr;
+	outputVideoFrameBuffer->GetBytes((void**)&pFrame);
+	memset(pFrame, 0, outputVideoFrame->GetRowBytes() * mState.outputFrameSize.height);
+
+	outputVideoFrameBuffer->EndAccess(bmdBufferAccessWrite);
+	return ScheduleFrame(outputVideoFrame);
+}
+
+bool DeckLinkSession::BeginOutputFrame(VideoIOOutputFrame& frame)
+{
+	CComPtr<IDeckLinkMutableVideoFrame> outputVideoFrame;
+	return AcquireNextOutputVideoFrame(outputVideoFrame) && PopulateOutputFrame(outputVideoFrame, frame);
+}
+
 void DeckLinkSession::EndOutputFrame(VideoIOOutputFrame& frame)
 {
 	IDeckLinkVideoBuffer* outputVideoFrameBuffer = static_cast<IDeckLinkVideoBuffer*>(frame.nativeBuffer);
@@ -463,11 +506,7 @@ void DeckLinkSession::AccountForCompletionResult(VideoIOCompletionResult complet
 bool DeckLinkSession::ScheduleOutputFrame(const VideoIOOutputFrame& frame)
 {
 	IDeckLinkMutableVideoFrame* outputVideoFrame = static_cast<IDeckLinkMutableVideoFrame*>(frame.nativeFrame);
-	const VideoIOScheduleTime scheduleTime = mScheduler.NextScheduleTime();
+	return ScheduleFrame(outputVideoFrame);
-	if (outputVideoFrame == nullptr || output->ScheduleVideoFrame(outputVideoFrame, scheduleTime.streamTime, scheduleTime.duration, scheduleTime.timeScale) != S_OK)
-		return false;
-
-	return true;
 }
 
 bool DeckLinkSession::Start()
@@ -486,31 +525,13 @@ bool DeckLinkSession::Start()
 
 	for (unsigned i = 0; i < kPrerollFrameCount; i++)
 	{
-		CComPtr<IDeckLinkMutableVideoFrame> outputVideoFrame = outputVideoFrameQueue.front();
+		CComPtr<IDeckLinkMutableVideoFrame> outputVideoFrame;
-		outputVideoFrameQueue.push_back(outputVideoFrame);
+		if (!AcquireNextOutputVideoFrame(outputVideoFrame))
-		outputVideoFrameQueue.pop_front();
-
-		CComPtr<IDeckLinkVideoBuffer> outputVideoFrameBuffer;
-		if (outputVideoFrame->QueryInterface(IID_IDeckLinkVideoBuffer, (void**)&outputVideoFrameBuffer) != S_OK)
 		{
-			MessageBoxA(NULL, "Could not query the preroll output frame buffer.", "DeckLink start failed", MB_OK | MB_ICONERROR);
+			MessageBoxA(NULL, "Could not acquire a preroll output frame.", "DeckLink start failed", MB_OK | MB_ICONERROR);
 			return false;
 		}
-
+		if (!ScheduleBlackFrame(outputVideoFrame))
-		if (outputVideoFrameBuffer->StartAccess(bmdBufferAccessWrite) != S_OK)
-		{
-			MessageBoxA(NULL, "Could not write to the preroll output frame buffer.", "DeckLink start failed", MB_OK | MB_ICONERROR);
-			return false;
-		}
-
-		void* pFrame = nullptr;
-		outputVideoFrameBuffer->GetBytes((void**)&pFrame);
-		memset(pFrame, 0, outputVideoFrame->GetRowBytes() * mState.outputFrameSize.height);
-
-		outputVideoFrameBuffer->EndAccess(bmdBufferAccessWrite);
-
-		const VideoIOScheduleTime scheduleTime = mScheduler.NextScheduleTime();
-		if (output->ScheduleVideoFrame(outputVideoFrame, scheduleTime.streamTime, scheduleTime.duration, scheduleTime.timeScale) != S_OK)
 		{
 			MessageBoxA(NULL, "Could not schedule a preroll output frame.", "DeckLink start failed", MB_OK | MB_ICONERROR);
 			return false;
@@ -599,23 +620,23 @@ void DeckLinkSession::HandlePlayoutFrameCompleted(IDeckLinkVideoFrame*, BMDOutpu
 		return;
 
 	VideoIOCompletion completion;
+	completion.result = TranslateCompletionResult(completionResult);
+	mOutputFrameCallback(completion);
+}
+
+VideoIOCompletionResult DeckLinkSession::TranslateCompletionResult(BMDOutputFrameCompletionResult completionResult)
+{
 	switch (completionResult)
 	{
 	case bmdOutputFrameDisplayedLate:
-		completion.result = VideoIOCompletionResult::DisplayedLate;
+		return VideoIOCompletionResult::DisplayedLate;
-		break;
 	case bmdOutputFrameDropped:
-		completion.result = VideoIOCompletionResult::Dropped;
+		return VideoIOCompletionResult::Dropped;
-		break;
 	case bmdOutputFrameFlushed:
-		completion.result = VideoIOCompletionResult::Flushed;
+		return VideoIOCompletionResult::Flushed;
-		break;
 	case bmdOutputFrameCompleted:
-		completion.result = VideoIOCompletionResult::Completed;
+		return VideoIOCompletionResult::Completed;
-		break;
 	default:
-		completion.result = VideoIOCompletionResult::Unknown;
+		return VideoIOCompletionResult::Unknown;
-		break;
 	}
-	mOutputFrameCallback(completion);
 }

apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.h

@@ -66,6 +66,12 @@ public:
 	void HandlePlayoutFrameCompleted(IDeckLinkVideoFrame* completedFrame, BMDOutputFrameCompletionResult completionResult);
 
 private:
+	bool AcquireNextOutputVideoFrame(CComPtr<IDeckLinkMutableVideoFrame>& outputVideoFrame);
+	bool PopulateOutputFrame(IDeckLinkMutableVideoFrame* outputVideoFrame, VideoIOOutputFrame& frame);
+	bool ScheduleFrame(IDeckLinkMutableVideoFrame* outputVideoFrame);
+	bool ScheduleBlackFrame(IDeckLinkMutableVideoFrame* outputVideoFrame);
+	static VideoIOCompletionResult TranslateCompletionResult(BMDOutputFrameCompletionResult completionResult);
+
 	CComPtr<CaptureDelegate>				captureDelegate;
 	CComPtr<PlayoutDelegate>				playoutDelegate;
 	CComPtr<IDeckLinkInput>					input;

docs/ARCHITECTURE_RESILIENCE_REVIEW.md

@@ -362,7 +362,11 @@ Target split:
   - persisted config
   - persisted layer stack
   - preset persistence
-- `RuntimeSnapshot`
+- `RuntimeCoordinator`
+  - mutation validation and classification
+  - committed-live versus transient policy
+  - snapshot and persistence requests
+- `RuntimeSnapshotProvider`
   - render-facing immutable or near-immutable snapshots
   - parameter values prepared for the render path
 - `ControlServices`
@@ -376,7 +380,7 @@ Target split:
 - `VideoBackend`
   - DeckLink input/output lifecycle
   - pacing and scheduling
-- `Health/Telemetry`
+- `HealthTelemetry`
   - logging
   - counters
   - timing traces
@@ -395,6 +399,8 @@ Suggested deliverables:
 - a list of allowed dependencies between subsystems
 - a dedicated Phase 1 design note:
   - [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md)
+- a subsystem design bundle index:
+  - [docs/subsystems/README.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/README.md)
 
 ### Phase 2. Introduce an internal event model
 

docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md

@@ -59,7 +59,7 @@ The following current code paths are the strongest evidence for the split propos
 
 ## Target Subsystems
 
-The long-term architecture should converge on six primary subsystems:
+The long-term architecture should converge on seven primary subsystems:
 
 1. `RuntimeStore`
 2. `RuntimeCoordinator`
@@ -71,6 +71,61 @@ The long-term architecture should converge on six primary subsystems:
 
 The split below is intentionally sharper than the current code. The point is to make ownership obvious.
 
+Subsystem-specific design notes that elaborate these boundaries live under [docs/subsystems](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems).
+
+## Phase 1 Document Set
+
+This document is the parent note for the Phase 1 subsystem package. The bundle index and subsystem notes live here:
+
+- [Subsystem Design Index](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/README.md)
+- [RuntimeStore.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeStore.md)
+- [RuntimeCoordinator.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeCoordinator.md)
+- [RuntimeSnapshotProvider.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeSnapshotProvider.md)
+- [ControlServices.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/ControlServices.md)
+- [RenderEngine.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RenderEngine.md)
+- [VideoBackend.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/VideoBackend.md)
+- [HealthTelemetry.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/HealthTelemetry.md)
+
+## Current Implementation Foothold
+
+The codebase now has an initial Phase 1 compatibility split in place:
+
+- `RuntimeStore`
+  - [RuntimeStore.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeStore.h)
+  - [RuntimeStore.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeStore.cpp)
+- `RuntimeCoordinator`
+  - [RuntimeCoordinator.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeCoordinator.h)
+  - [RuntimeCoordinator.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeCoordinator.cpp)
+- `RuntimeSnapshotProvider`
+  - [RuntimeSnapshotProvider.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeSnapshotProvider.h)
+  - [RuntimeSnapshotProvider.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeSnapshotProvider.cpp)
+- `ControlServices`
+  - [ControlServices.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServices.h)
+  - [ControlServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServices.cpp)
+- `HealthTelemetry`
+  - [HealthTelemetry.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/HealthTelemetry.h)
+  - [HealthTelemetry.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/HealthTelemetry.cpp)
+- `RenderEngine`
+  - [RenderEngine.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/RenderEngine.h)
+  - [RenderEngine.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/RenderEngine.cpp)
+- `VideoBackend`
+  - [VideoBackend.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/VideoBackend.h)
+  - [VideoBackend.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/VideoBackend.cpp)
+
+These are still compatibility seams, not a completed subsystem extraction. Most of them continue to delegate heavily to `RuntimeHost`, `OpenGLComposite`, `DeckLinkSession`, and the existing bridge/pipeline classes. Their purpose is to give later Phase 1 work real code boundaries that can be expanded in parallel:
+
+- store-facing UI/runtime control calls in `OpenGLCompositeRuntimeControls.cpp` now route through `RuntimeStore`
+- mutation and reload policy now routes through `RuntimeCoordinator`
+- render-state and shader-build reads in `OpenGLComposite.cpp`, `OpenGLShaderPrograms.cpp`, and `ShaderBuildQueue.cpp` now route through `RuntimeSnapshotProvider`
+- service ingress and polling coordination now route through `ControlServices`
+- timing and status writes now route through `HealthTelemetry`
+- render-side frame advancement and render-performance reporting now flow through `RuntimeSnapshotProvider` and `HealthTelemetry` instead of directly through `RuntimeHost`
+- `OpenGLComposite` now owns a `RenderEngine` seam for renderer, pipeline, render-pass, and shader-program responsibilities
+- `OpenGLComposite` now owns a `VideoBackend` seam for device/session ownership and callback wiring
+- `OpenGLVideoIOBridge` now acts as an explicit compatibility adapter between `VideoBackend` and `RenderEngine`, instead of `OpenGLComposite` directly owning both sides
+
+That means the next parallel Phase 1 work can focus on moving responsibility behind these seams instead of first inventing them.
+
 ## Subsystem Responsibilities
 
 ### `RuntimeStore`

docs/subsystems/ControlServices.md

@@ -0,0 +1,589 @@
+# ControlServices Subsystem Design
+
+This document expands the `ControlServices` subsystem described in [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md). It defines the target role of `ControlServices` as the ingress boundary for non-render control sources and the normalization layer that turns external input into typed internal actions.
+
+The intent here is to make `ControlServices` explicit enough that later phases can extract it from the current `RuntimeServices` / `ControlServer` / `OscServer` mix without inventing new boundaries ad hoc.
+
+## Purpose
+
+`ControlServices` is the subsystem that accepts external control traffic and turns it into safe, typed, low-cost input for the rest of the app.
+
+In the target architecture, `ControlServices` should:
+
+- own ingress for OSC, HTTP/REST-style control routes, WebSocket session management, and file-watch/reload signals
+- normalize transport-specific payloads into typed internal actions or events
+- apply ingress-local buffering, coalescing, deduplication, and rate limiting where useful
+- expose service timing and health observations to `HealthTelemetry`
+- forward normalized actions into `RuntimeCoordinator`
+
+It should not:
+
+- decide persistence policy
+- mutate persisted state directly
+- build render snapshots
+- own render-local overlay state
+- own device timing or playout policy
+
+This subsystem is intentionally narrow in authority and broad in transport coverage.
+
+## Why This Subsystem Exists
+
+Today the app already has a recognizable control-services slice, but it is spread across several classes:
+
+- `RuntimeServices` hosts control server startup, OSC queues, deferred OSC commits, and file-watch polling:
+  - [RuntimeServices.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.h:26)
+  - [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:24)
+- `ControlServer` owns HTTP, WebSocket upgrade, static asset serving, and direct callback-based route dispatch:
+  - [ControlServer.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServer.h:15)
+  - [ControlServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServer.cpp:88)
+- `OscServer` owns UDP socket receive, OSC decode, and parameter callback dispatch:
+  - [OscServer.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/OscServer.h:11)
+  - [OscServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/OscServer.cpp:58)
+
+The current shape works, but it mixes:
+
+- transport handling
+- action normalization
+- direct callback dispatch
+- coarse background polling
+- transient queue ownership
+- UI broadcast behavior
+- partial runtime mutation coordination
+
+That overlap is exactly what Phase 1 is trying to remove.
+
+## Design Goals
+
+`ControlServices` should optimize for:
+
+- low-latency ingress without forcing immediate whole-app work
+- clear transport boundaries
+- deterministic normalization of external input
+- isolation of service-specific timing concerns
+- easy replacement of polling flows with typed events
+- no direct knowledge of render-local implementation details
+- safe behavior under bursty traffic such as high-rate OSC
+
+## Subsystem Responsibilities
+
+`ControlServices` owns the following concerns.
+
+### 1. Transport Ingress
+
+It accepts input from external control-facing sources such as:
+
+- OSC/UDP parameter control
+- HTTP API requests from the native control UI or external clients
+- WebSocket connection lifecycle for state consumers
+- file-watch triggers and manual reload requests
+- future automation ingress such as MIDI, serial, or remote control bridges
+
+The key rule is that transport-specific details stop here.
+
+### 2. Action Normalization
+
+Every ingress path should be converted into a typed internal action or event before it touches runtime policy.
+
+Examples:
+
+- OSC `/layer/param` traffic becomes `AutomationTargetReceived`
+- `POST /api/layers/add` becomes `LayerAddRequested`
+- `POST /api/reload` becomes `ShaderReloadRequested`
+- file-watch changes become `RegistryChangedDetected` or `ReloadRequested`
+
+The rest of the app should not need to know whether an action came from UDP, HTTP, the embedded UI, or a background watcher.
+
+### 3. Ingress-Local Buffering and Coalescing
+
+`ControlServices` may maintain short-lived queues or coalesced maps when that is the correct place to absorb bursty input.
+
+Examples:
+
+- latest-value coalescing per OSC route
+- pending reload edge detection
+- bounded outbound state-broadcast requests
+- short-lived delivery queues for already-classified follow-up work, as long as commit and persistence policy still belong to `RuntimeCoordinator`
+
+This state is ingress-local and must not become a substitute for committed runtime state.
+
+### 4. WebSocket Session Management
+
+The subsystem owns connection lifecycle for clients that observe runtime state, but it does not own the authoritative runtime model.
+
+It is responsible for:
+
+- accepting WebSocket upgrades
+- tracking connected clients
+- forwarding serialized state snapshots or health payloads produced elsewhere
+- applying broadcast throttling or collapse policies when necessary
+
+It is not responsible for deciding what the authoritative state is.
+
+### 5. File-Watch and Reload Ingress
+
+The subsystem should own the detection side of registry/file changes and reload requests.
+
+It may:
+
+- observe filesystem changes
+- debounce bursts of related file events
+- translate those changes into typed reload actions
+
+It should not directly trigger render rebuilds or mutate shader/package state itself.
+
+### 6. Service Health and Timing Reporting
+
+`ControlServices` should emit operational signals into `HealthTelemetry`, including:
+
+- OSC packet rate
+- OSC decode failures
+- queue depth / coalesced route count
+- dropped or collapsed ingress events
+- HTTP error counts
+- WebSocket connection count
+- reload request frequency
+- file-watch failures
+- service-thread startup/shutdown errors
+
+## Explicit Non-Responsibilities
+
+The following must stay outside `ControlServices` in the target design.
+
+### Persistence Decisions
+
+The subsystem may report that an input requested a state change, but it should not decide whether that change is persisted.
+
+That belongs to `RuntimeCoordinator` and `RuntimeStore`.
+
+### Render Snapshot Publication
+
+`ControlServices` must not publish render-facing snapshots or poke render-local structures directly.
+
+### Render-Local Overlay Ownership
+
+Live OSC overlays, temporal state, shader feedback, and render-only transient state belong to `RenderEngine`.
+
+`ControlServices` may ingest automation targets, but it should not own how those targets are applied inside the render domain.
+
+### Hardware Timing or Playout Recovery
+
+Device scheduling, queue headroom, and callback recovery belong to `VideoBackend`, not the control ingress path.
+
+## Ingress Boundary Model
+
+The clean boundary for `ControlServices` is:
+
+- external transport in
+- typed action/event out
+
+That implies three layers inside the subsystem.
+
+### Transport Adapters
+
+These are protocol-facing components.
+
+Examples:
+
+- `OscIngress`
+- `HttpControlIngress`
+- `WebSocketSessionHost`
+- `FileWatchIngress`
+
+Responsibilities:
+
+- socket/file watcher lifecycle
+- protocol decoding
+- request framing
+- transport-level validation
+- low-level authentication or origin checks later if added
+
+### Normalization Layer
+
+This layer translates decoded transport input into typed actions.
+
+Responsibilities:
+
+- route parsing
+- payload type normalization
+- parameter name/key resolution where that is purely syntactic
+- conversion from transport-specific errors into typed ingress errors
+
+This layer should not perform deep runtime mutation policy.
+
+### Service Coordination Shell
+
+This shell owns:
+
+- startup/shutdown ordering for ingress services
+- shared ingress-local queues
+- service-thread lifecycle
+- handing normalized actions to `RuntimeCoordinator`
+- handing outbound snapshot payloads to WebSocket clients
+
+This shell is the spiritual successor to the hosting part of current `RuntimeServices`, but with a much narrower responsibility set.
+
+## Service Timing Concerns
+
+`ControlServices` is the correct place to isolate transport-level timing concerns that should not leak into whole-app state policy.
+
+### OSC Timing
+
+Current behavior already points in the right direction:
+
+- OSC receive is on its own thread in `OscServer`
+- latest values are coalesced by route in `RuntimeServices`
+- updates are applied once per render tick rather than per packet
+
+Relevant code:
+
+- [OscServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/OscServer.cpp:95)
+- [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:65)
+- [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:82)
+
+Target rule:
+
+- network receive and decode stay inside `ControlServices`
+- coalescing policy stays inside `ControlServices`
+- classification of the resulting action belongs to `RuntimeCoordinator`
+- render-local application belongs to `RenderEngine`
+
+This keeps high-rate ingress cheap without giving the service layer authority over render behavior or committed-state policy.
+
+### HTTP / UI Timing
+
+HTTP control requests are operator-facing and usually low-rate, but the UI can still generate bursts through slider drags or repeated parameter edits.
+
+`ControlServices` should:
+
+- normalize each request into a typed action
+- allow collapse/throttle policies for purely observational outbound state pushes
+- avoid synchronous full-state serialization on every ingress event where possible
+
+It should not decide whether a request results in immediate, deferred, transient, or persisted mutation. That is a coordinator concern.
+
+### WebSocket Broadcast Timing
+
+Outbound state streaming is control-plane behavior, not core runtime ownership.
+
+Current code already distinguishes immediate and requested broadcasts:
+
+- [ControlServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServer.cpp:163)
+- [ControlServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServer.cpp:170)
+
+Target rule:
+
+- `ControlServices` may own broadcast scheduling and collapse policy
+- the source state payload should come from snapshot/telemetry producers, not from service-owned mutable state
+
+### File-Watch Timing
+
+Current file-watch and deferred OSC commit work run on a coarse poll loop:
+
+- [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:194)
+
+This is one of the cleaner migration opportunities in the whole app.
+
+Target rule:
+
+- file-watch detection belongs in `ControlServices`
+- coarse polling should eventually be replaced with either event-driven watching or a narrower, typed background loop
+- detected changes should be debounced and surfaced as typed reload-related actions
+
+### Service Backpressure
+
+`ControlServices` needs explicit backpressure rules for high-rate sources.
+
+Recommended policies:
+
+- coalesce latest-value automation by route
+- bound per-service queues
+- count and report dropped/coalesced events
+- prefer collapsing observation work before collapsing operator mutations
+- never let service queues become hidden durable state
+
+## Interfaces
+
+These are suggested target-facing interfaces, not final class signatures.
+
+### Subsystem Shell
+
+Possible top-level responsibilities:
+
+- `Start(...)`
+- `Stop()`
+- `PublishStateSnapshot(...)`
+- `PublishHealthSnapshot(...)`
+- `DrainNormalizedActions(...)`
+
+The shell should feel like a host for ingress adapters plus a normalization/buffering boundary.
+
+### OSC Ingress
+
+Possible responsibilities:
+
+- `StartOscIngress(...)`
+- `StopOscIngress()`
+- `ConfigureOscBinding(...)`
+- `EnqueueDecodedOscMessage(...)`
+- `DrainCoalescedAutomationTargets(...)`
+
+### HTTP / Web Control Ingress
+
+Possible responsibilities:
+
+- `StartHttpIngress(...)`
+- `StopHttpIngress()`
+- `HandleHttpRequest(...)`
+- `HandleWebSocketUpgrade(...)`
+- `QueueStateBroadcastRequest()`
+
+### File-Watch Ingress
+
+Possible responsibilities:
+
+- `StartFileWatchIngress(...)`
+- `StopFileWatchIngress()`
+- `PollOrConsumeFileEvents(...)`
+- `DrainReloadSignals(...)`
+
+### Normalized Action Types
+
+These should likely become shared event/action definitions in Phase 2, but `ControlServices` should be designed around them now.
+
+Examples:
+
+- `LayerAddRequested`
+- `LayerRemovedRequested`
+- `LayerReorderedRequested`
+- `LayerBypassSetRequested`
+- `LayerShaderSetRequested`
+- `ParameterSetRequested`
+- `LayerResetRequested`
+- `StackPresetSaveRequested`
+- `StackPresetLoadRequested`
+- `ShaderReloadRequested`
+- `ScreenshotRequested`
+- `AutomationTargetReceived`
+- `RegistryChangeDetected`
+
+## Data Ownership Inside The Subsystem
+
+`ControlServices` is allowed to own ingress-local ephemeral state.
+
+Examples:
+
+- connected WebSocket client list
+- pending broadcast flag
+- coalesced OSC route map
+- outstanding decoded-but-undrained action queue
+- file-watch debounce state
+- transport error counters before publication to telemetry
+
+It should not own:
+
+- authoritative layer stack state
+- committed parameter values
+- render snapshots
+- playout queue state
+- shader feedback or render overlays
+
+The rule is simple:
+
+- if the state exists only to absorb or forward external input, it can live here
+- if the state defines how the app should behave over time, it belongs elsewhere
+
+## Outbound Boundaries
+
+`ControlServices` talks outward in only a few approved directions.
+
+### To `RuntimeCoordinator`
+
+Primary outbound path.
+
+It sends:
+
+- normalized mutation requests
+- automation targets
+- reload requests
+- stack preset requests
+
+It does not send:
+
+- transport-specific objects such as raw sockets or OSC packet structures
+- render-facing state objects
+
+### To `HealthTelemetry`
+
+Observation-only relationship.
+
+It sends:
+
+- counters
+- warnings
+- timing samples
+- service health transitions
+
+It should not use `HealthTelemetry` as a hidden control path.
+
+### From Snapshot / Telemetry Producers To Web Clients
+
+`ControlServices` may deliver serialized outbound payloads to WebSocket clients, but the authoritative payload contents should be produced by the owning subsystems.
+
+That means a later design may look like:
+
+- `RuntimeSnapshotProvider` provides render-facing snapshot payloads or a runtime-state projection derived from those published snapshots
+- `RuntimeCoordinator` or a later runtime-read-model helper provides control-plane runtime summaries when the UI needs more than raw render state
+- `HealthTelemetry` provides health payloads
+- `ControlServices` delivers them to connected observers
+
+## Current Code Mapping
+
+This section maps the current implementation onto the target subsystem.
+
+### Current `RuntimeServices`
+
+Should split into:
+
+- `ControlServices` shell
+- temporary compatibility adapter into `RuntimeCoordinator`
+- removal of any direct runtime-state mutation responsibilities over time
+
+Likely keep under `ControlServices`:
+
+- service startup/shutdown
+- OSC update coalescing
+- Web control hosting shell
+- file-watch ingress hosting
+
+Should move out later:
+
+- direct `RuntimeHost` polling dependency
+- deferred OSC commit behavior as currently implemented through direct host mutation
+- any remaining direct state-broadcast decisions tied to runtime internals
+
+### Current `ControlServer`
+
+Should become primarily:
+
+- HTTP ingress adapter
+- WebSocket session host
+- static asset/doc host if that remains embedded
+
+The callback table in current code:
+
+- [ControlServer.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/ControlServer.h:18)
+
+is a useful migration aid, but long-term it should evolve from callback-per-action toward typed action emission.
+
+### Current `OscServer`
+
+Should remain transport-focused.
+
+Its clean long-term responsibilities are:
+
+- UDP socket lifecycle
+- OSC frame decode
+- syntactic route extraction
+- emitting decoded automation payloads into the `ControlServices` shell
+
+It should not own any runtime state semantics beyond ingress decoding.
+
+## Migration Plan
+
+The safest migration is incremental.
+
+### Step 1. Name The Boundary Explicitly
+
+Create and use the `ControlServices` name in docs and future interfaces before moving all logic.
+
+This document is part of that step.
+
+### Step 2. Convert Callback Thinking Into Action Thinking
+
+Without changing all runtime code at once, introduce typed action/event shapes for the major ingress paths.
+
+The goal is for transports to emit actions, even if temporary adapters still call into existing code.
+
+### Step 3. Extract Service Hosting From `OpenGLComposite`
+
+`OpenGLComposite` currently owns `RuntimeServices` startup and consumption:
+
+- [OpenGLComposite.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp:312)
+- [OpenGLComposite.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp:723)
+
+That should move toward a composition root or subsystem host arrangement where render is no longer the owner of control ingress.
+
+### Step 4. Remove Direct `RuntimeHost` Dependency
+
+Current polling and deferred OSC commit work directly against `RuntimeHost`:
+
+- [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:194)
+
+That should be replaced with coordinator-facing actions and later event-driven flows.
+
+### Step 5. Split Out Observation Delivery
+
+WebSocket outbound delivery can stay in `ControlServices`, but serialization ownership should move toward the owning subsystems so the service layer stops assembling authoritative state itself.
+
+## Risks
+
+### Risk 1. Recreating `RuntimeHost` Coupling Under A New Name
+
+If `ControlServices` is allowed to keep direct knowledge of runtime mutation internals, it will become a renamed version of the same coupling problem.
+
+Mitigation:
+
+- keep the boundary strict
+- route mutations through coordinator interfaces
+- treat direct host calls as temporary compatibility only
+
+### Risk 2. Service Queues Becoming Hidden State Authority
+
+Latest-value OSC maps and reload debounce flags are appropriate here. Full committed runtime state is not.
+
+Mitigation:
+
+- define ingress-local versus authoritative state explicitly
+- bound queues
+- publish queue metrics into telemetry
+
+### Risk 3. WebSocket Broadcast Path Reintroducing Heavy Synchronous Work
+
+If `ControlServices` becomes the place where whole runtime state is rebuilt or serialized on every input, it will recreate timing stalls.
+
+Mitigation:
+
+- broadcast snapshots produced elsewhere
+- collapse redundant outbound requests
+- track serialization/broadcast timing in telemetry
+
+### Risk 4. Polling Surviving Too Long As Architecture
+
+Some polling may remain during migration, but it should not become the permanent contract.
+
+Mitigation:
+
+- isolate polling behind ingress interfaces
+- make replacement with event-driven flows a planned Phase 2/3 outcome
+
+## Open Questions
+
+- Should the embedded static UI/docs hosting stay inside `ControlServices`, or move to a thinner app-shell concern while control APIs remain in `ControlServices`?
+- Should outbound state for WebSocket clients be one combined payload or separate runtime and health channels?
+- How much route/key resolution should happen in `ControlServices` versus `RuntimeCoordinator`?
+- Should any deferred automation-settle delivery remain in `ControlServices`, or should all commit/settle policy move entirely into coordinator/render ownership once the live-state model is formalized?
+- When file watching is modernized, should reload classification live entirely in `ControlServices`, or should it emit a lower-level `FilesChanged` event and let `RuntimeCoordinator` decide reload semantics?
+- Will future non-OSC automation sources reuse the same `AutomationTargetReceived` path, or need source-specific typed actions for policy reasons?
+
+## Short Version
+
+`ControlServices` should become the app's clean ingress boundary:
+
+- transport handling stays here
+- input normalization stays here
+- ingress-local buffering stays here
+- mutation policy does not
+- authoritative runtime state does not
+- render-local transient state does not
+
+If later phases keep that line sharp, the app gains a control layer that is fast, testable, and timing-aware without becoming another shared state authority.

docs/subsystems/HealthTelemetry.md

@@ -0,0 +1,644 @@
+# HealthTelemetry Subsystem Design
+
+This document expands the `HealthTelemetry` subsystem introduced in [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md).
+
+`HealthTelemetry` is the subsystem that owns operational visibility for the app. Its purpose is to gather health state, warnings, counters, logs, and timing observations from the other subsystems and publish them in a structured way without becoming a second control plane.
+
+Today, those responsibilities are fragmented across `RuntimeHost` status setters, ad hoc `OutputDebugStringA` calls, callback-local warnings, and UI-facing runtime-state payloads. The result is that the app can often detect problems, but it does not yet have one clear place that answers:
+
+- what is healthy right now
+- what is degraded right now
+- what has recently gone wrong
+- which subsystem is under pressure
+- how timing behavior is trending over time
+
+`HealthTelemetry` is the target boundary that should answer those questions.
+
+## Why This Subsystem Exists
+
+The current code already contains meaningful health and timing signals, but they are spread through unrelated ownership domains:
+
+- `RuntimeHost` stores signal and timing status:
+  - [RuntimeHost.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.h:41)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1353)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1415)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1441)
+- render and bridge code report timing by writing back into `RuntimeHost`:
+  - [OpenGLRenderPipeline.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp:50)
+  - [OpenGLVideoIOBridge.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:49)
+- backend warning paths still log directly:
+  - [DeckLinkFrameTransfer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkFrameTransfer.cpp:84)
+  - [DeckLinkSession.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:305)
+- control ingress failures still log directly:
+  - [OscServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/OscServer.cpp:142)
+  - [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:100)
+
+This creates several recurring problems:
+
+- health information shares storage and lock scope with runtime state
+- warnings are not consistently classified by subsystem or severity
+- timing data is hard to compare across render, control, and backend paths
+- UI connection state and operational state are too closely coupled
+- logging is mostly text-first instead of structured-first
+- recovery behavior is hard to audit because the app does not retain a coherent health snapshot
+
+`HealthTelemetry` exists so later phases can move timing and health concerns out of `RuntimeHost`, out of callback-local logging, and into one subsystem whose only job is observation and reporting.
+
+## Design Goals
+
+`HealthTelemetry` should optimize for:
+
+- one authoritative home for operational visibility
+- structured health state per subsystem
+- timing and counter recording that does not require a UI to be connected
+- low-friction reporting from render, backend, coordinator, and services
+- explicit degraded-mode reporting instead of only raw text logs
+- support for live operator summaries and deeper engineering diagnostics
+- minimal risk of telemetry writes becoming a render or callback bottleneck
+
+## Responsibilities
+
+`HealthTelemetry` owns structured operational visibility.
+
+Primary responsibilities:
+
+- accept timing samples from major subsystems
+- accept counter deltas and point-in-time gauges
+- accept warning, error, and degraded-state transitions
+- collect subsystem-scoped health state
+- collect operator-visible summary state
+- collect structured log entries
+- build stable health snapshots for UI, diagnostics, and later persistence/export if desired
+- retain recent history needed for short-term troubleshooting
+- classify observations by subsystem, severity, and category
+
+Secondary responsibilities that still fit here:
+
+- smoothing or rolling-window summaries for timing metrics
+- mapping raw subsystem observations into operator-facing health summaries
+- deduplicating repeated warnings
+- tracking warning open/clear lifecycles
+- providing bounded in-memory history for recent logs and warning transitions
+
+## Explicit Non-Responsibilities
+
+`HealthTelemetry` should not become a behavior owner.
+
+It does not own:
+
+- layer stack truth
+- persistence policy
+- render scheduling
+- DeckLink scheduling
+- OSC buffering or routing
+- reload coordination
+- shader compilation
+- recovery actions themselves
+
+It also should not decide:
+
+- whether render should skip a frame
+- whether VideoBackend should increase queue depth
+- whether RuntimeCoordinator should reject a mutation
+- whether ControlServices should drop or coalesce ingress traffic
+
+Those decisions belong to the subsystem being observed. `HealthTelemetry` may describe that a subsystem is degraded, but it must not quietly become the mechanism that tells the app how to react.
+
+## Ownership Boundaries
+
+`HealthTelemetry` owns the following state categories.
+
+### Structured Log State
+
+Examples:
+
+- subsystem name
+- severity
+- category
+- timestamp
+- message
+- optional structured fields such as layer id, preset name, queue depth, or shader id
+
+This replaces the idea that `OutputDebugStringA` text is itself the main diagnostic product.
+
+### Warning And Error State
+
+Examples:
+
+- active warning set
+- warning occurrence counts
+- first-seen and last-seen timestamps
+- clear timestamps
+- subsystem-scoped degraded flags
+
+This is the durable in-memory operational state that should answer "what is currently wrong?" even if no UI was connected when the warning was raised.
+
+### Timing State
+
+Examples:
+
+- render duration
+- frame budget
+- playout completion interval
+- smoothed completion interval
+- queue depth
+- input upload skip count
+- async readback fallback count
+- control ingress lag or queue depth
+- snapshot publication cost
+
+This state should be organized as time-series-like rolling telemetry, not as a grab bag of unrelated `double` fields mixed into the runtime store.
+
+### Health Snapshot State
+
+Examples:
+
+- current subsystem health summaries
+- current operator-facing overall health summary
+- most recent warning list
+- recent counters and timing summaries
+- "degraded but still running" status
+
+This is the material that `ControlServices` or a diagnostics endpoint may later publish.
+
+## State Model
+
+The subsystem should model health and telemetry in a way that supports both machine-friendly and operator-friendly views.
+
+Suggested conceptual model:
+
+- `TelemetryLogEntry`
+- `TelemetryWarningRecord`
+- `TelemetryCounterState`
+- `TelemetryGaugeState`
+- `TelemetryTimingSeries`
+- `SubsystemHealthState`
+- `HealthSnapshot`
+
+Important distinction:
+
+- raw observations are append/update operations
+- health snapshots are derived read models
+
+That distinction matters because the system should be able to retain richer recent telemetry internally than what is necessarily sent to the UI on every refresh.
+
+## Subsystem Health Domains
+
+`HealthTelemetry` should track health by subsystem rather than as one flat status blob.
+
+At minimum, Phase 1 should assume domains for:
+
+- `RuntimeStore`
+- `RuntimeCoordinator`
+- `RuntimeSnapshotProvider`
+- `ControlServices`
+- `RenderEngine`
+- `VideoBackend`
+
+Optional cross-cutting domain:
+
+- `ApplicationShell`
+
+Each domain should be able to express states such as:
+
+- `Healthy`
+- `Warning`
+- `Degraded`
+- `Error`
+- `Unavailable`
+
+The exact enum can change, but the design should preserve the idea that each subsystem reports into its own health lane first, and only then is an overall status derived.
+
+## Logging Boundaries
+
+Logging belongs here, but logging should be structured-first.
+
+Expected inputs:
+
+- subsystem-scoped debug information
+- warning and error messages
+- recovery events
+- notable state transitions
+- significant operator actions that matter for diagnostics
+
+Expected design rules:
+
+- textual messages are still useful, but they should be wrapped in a structured log entry
+- repeated transient failures should be rate-limited or deduplicated at the telemetry layer where possible
+- log storage should be bounded in memory
+- UI publication should read from health/log snapshots, not scrape stdout/debug output
+
+Examples of current direct log paths that should eventually move behind `HealthTelemetry`:
+
+- OSC decode/dispatch failures
+- screenshot write failures
+- DeckLink fallback warnings
+- late/dropped frame warnings
+
+## Metrics And Timing Boundaries
+
+Timing and metrics should also move here, but their ownership line matters.
+
+`HealthTelemetry` should own:
+
+- metric collection interfaces
+- rolling summaries
+- recent history buffers
+- warning thresholds if the app later chooses to define them declaratively
+- operator-facing derived summaries
+
+The producing subsystem should still own:
+
+- the meaning of the measurement
+- when it is sampled
+- whether it triggers local mitigation
+
+Examples:
+
+- `RenderEngine` owns when render duration is sampled
+- `VideoBackend` owns when queue depth or playout lateness is sampled
+- `ControlServices` owns when ingress backlog is sampled
+- `RuntimeSnapshotProvider` owns when snapshot publish/build timing is sampled
+
+`HealthTelemetry` should not invent those timings by inference. It records them when producers report them.
+
+## Proposed Interfaces
+
+These are target-shape interfaces, not final signatures.
+
+### Write/Record Interface
+
+Core write-side operations could look like:
+
+```cpp
+enum class TelemetrySeverity;
+enum class TelemetrySubsystem;
+
+struct TelemetryLogEntry;
+struct TelemetryWarning;
+struct TelemetryTimingSample;
+struct TelemetryCounterDelta;
+struct TelemetryGaugeUpdate;
+
+class IHealthTelemetry
+{
+public:
+    virtual void AppendLogEntry(const TelemetryLogEntry& entry) = 0;
+    virtual void RaiseWarning(const TelemetryWarning& warning) = 0;
+    virtual void ClearWarning(std::string_view warningKey) = 0;
+    virtual void RecordTimingSample(const TelemetryTimingSample& sample) = 0;
+    virtual void RecordCounterDelta(const TelemetryCounterDelta& delta) = 0;
+    virtual void RecordGauge(const TelemetryGaugeUpdate& gauge) = 0;
+    virtual void ReportSubsystemState(TelemetrySubsystem subsystem,
+                                      SubsystemHealthState state) = 0;
+};
+```
+
+The key is that every subsystem should be able to publish observations without also needing to know how UI payloads, rolling summaries, or log retention are implemented.
+
+### Read Interface
+
+Expected read-side operations:
+
+- `BuildHealthSnapshot()`
+- `GetSubsystemHealth(...)`
+- `GetRecentLogs(...)`
+- `GetActiveWarnings()`
+- `GetRecentTimingSummary(...)`
+
+Design notes:
+
+- the read interface should return stable snapshots or read models
+- UI/websocket publication should consume those snapshots through `ControlServices`
+- read-side access should not require direct knowledge of internal ring buffers or lock layout
+
+## Producer Expectations By Subsystem
+
+The parent Phase 1 design already allows multiple subsystems to publish into telemetry. This section makes that concrete.
+
+### From `RuntimeCoordinator`
+
+Expected observations:
+
+- mutation rejected
+- reload requested
+- preset apply failed
+- transient state cleared due to compatibility rules
+- policy-driven degraded notices such as repeated invalid external control input
+
+### From `RuntimeSnapshotProvider`
+
+Expected observations:
+
+- snapshot publication duration
+- snapshot build failure
+- snapshot version churn metrics
+- repeated publish retries or stale-snapshot conditions
+
+### From `ControlServices`
+
+Expected observations:
+
+- OSC decode failures
+- websocket broadcast failures
+- REST/control transport errors
+- ingress queue depth
+- coalescing/drop counts
+- file-watch reload request activity
+
+### From `RenderEngine`
+
+Expected observations:
+
+- frame render duration
+- upload duration
+- readback duration
+- fallback to synchronous readback
+- preview present timing
+- render-local state resets caused by reload or incompatibility
+
+### From `VideoBackend`
+
+Expected observations:
+
+- current playout queue depth
+- input signal state
+- late frames
+- dropped frames
+- backend mode changes
+- fallback from 10-bit to 8-bit input
+- output-only black-frame mode
+
+## Current Code Mapping
+
+The current codebase already contains several telemetry responsibilities that should migrate here.
+
+### `RuntimeHost` Status Setters
+
+These are the clearest existing candidates:
+
+- `SetSignalStatus(...)`
+- `TrySetSignalStatus(...)`
+- `SetPerformanceStats(...)`
+- `TrySetPerformanceStats(...)`
+- `SetFramePacingStats(...)`
+- `TrySetFramePacingStats(...)`
+
+See:
+
+- [RuntimeHost.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.h:41)
+- [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1353)
+- [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1415)
+- [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1441)
+
+In the target architecture, this kind of state should no longer sit on the same object that owns persistent layer truth.
+
+### Render Timing Production
+
+Current render timing is produced in:
+
+- [OpenGLRenderPipeline.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp:50)
+
+That timing sample should conceptually become:
+
+- `RenderEngine -> HealthTelemetry::RecordTimingSample(...)`
+
+not:
+
+- `RenderEngine -> RuntimeHost::TrySetPerformanceStats(...)`
+
+### Playout And Signal Status Production
+
+Current signal and frame pacing updates are produced in:
+
+- [OpenGLVideoIOBridge.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:49)
+- [OpenGLVideoIOBridge.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:61)
+
+These should eventually become structured `VideoBackend` observations instead of bridge-to-host status writes.
+
+### Direct Warning And Log Paths
+
+Current examples:
+
+- late/dropped frame warnings:
+  - [DeckLinkFrameTransfer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkFrameTransfer.cpp:84)
+- backend fallback warnings:
+  - [DeckLinkSession.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:305)
+  - [DeckLinkSession.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:320)
+- OSC errors:
+  - [OscServer.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/OscServer.cpp:142)
+  - [RuntimeServices.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.cpp:100)
+
+All of these are clear migration candidates for `AppendLogEntry(...)`, `RaiseWarning(...)`, or counter/timing updates.
+
+## Health Snapshot Contract
+
+`HealthTelemetry` should expose one coherent health snapshot that other publication layers can consume.
+
+That snapshot should be able to answer, at minimum:
+
+- what the overall app health is
+- whether input signal is present
+- whether playout is healthy, degraded, or underrunning
+- whether render timing is within budget
+- what active warnings exist
+- what recent notable events occurred
+- what the current subsystem-specific states are
+
+The important boundary is:
+
+- `HealthTelemetry` builds the health snapshot
+- `ControlServices` may publish it
+- UI consumes it
+
+That avoids rebuilding health summaries ad hoc in UI-facing runtime state serializers.
+
+## Concurrency Expectations
+
+This subsystem will likely receive updates from multiple threads:
+
+- control ingress threads
+- render thread
+- backend callback threads
+- coordinator/service threads
+
+So the design should assume:
+
+- low-contention write paths
+- bounded memory
+- no long-held global mutex that callbacks and render both depend on
+
+Phase 1 does not require lock-free implementation, but it does require the architecture to avoid recreating the `RuntimeHost` problem where health writes share the same lock as durable state and render-facing concerns.
+
+Practical expectations:
+
+- per-domain aggregation or lightweight internal locking is acceptable
+- read snapshots should be cheap and stable
+- callback paths should record telemetry cheaply and return
+
+## Migration Plan From Current Code
+
+The safest migration path is to peel telemetry responsibilities away from the existing classes incrementally.
+
+### Step 1: Introduce The `HealthTelemetry` Interface
+
+Create a small interface and health model types first.
+
+Initial responsibilities:
+
+- append structured logs
+- record timing samples
+- record counter deltas
+- raise and clear warnings
+- build a read-only health snapshot
+
+The first implementation can still be backed by simple in-memory structures.
+
+### Step 2: Move New Observations Off `RuntimeHost`
+
+Before removing old setters, route new health-style work into `HealthTelemetry` instead of adding more `RuntimeHost` status fields.
+
+This prevents the old status surface from growing during migration.
+
+### Step 3: Replace `RuntimeHost` Status Setters With Telemetry Producers
+
+Refactor:
+
+- render timing writes
+- signal status writes
+- playout pacing writes
+
+so they publish structured observations instead of mutating store-adjacent fields.
+
+### Step 4: Replace Direct `OutputDebugStringA` Warning Paths
+
+Wrap common warning/error cases in telemetry producers.
+
+This includes:
+
+- OSC decode/dispatch failures
+- DeckLink late/dropped frame notifications
+- backend fallback notices
+- screenshot write failures
+
+Direct debug output can remain as a sink of telemetry if desired, but not as the primary source of truth.
+
+### Step 5: Publish Health Snapshot Through UI/Diagnostics Paths
+
+Once the snapshot format exists, let `ControlServices` publish health summaries and recent warnings explicitly rather than depending on the runtime-state payload alone.
+
+## Risks
+
+### 1. Telemetry becomes a hidden behavior controller
+
+If warning states start being used as the indirect way subsystems tell each other what to do, the subsystem boundary will fail.
+
+Guardrail:
+
+- telemetry observes and reports
+- it does not coordinate or command
+
+### 2. Logging stays string-only
+
+If the subsystem only centralizes text logging without structure, later diagnostics will still be difficult.
+
+Guardrail:
+
+- severity, subsystem, category, and optional fields should be first-class
+
+### 3. Timing writes become too expensive
+
+If every sample requires heavy locking or snapshot rebuilds, render and callback timing could regress.
+
+Guardrail:
+
+- cheap recording path
+- derived summaries built separately from hot-path writes
+
+### 4. Health snapshot duplicates runtime truth
+
+If health snapshots start storing copies of durable runtime state, the subsystem boundary will blur again.
+
+Guardrail:
+
+- health snapshots summarize operational state
+- they do not become a second runtime store
+
+### 5. Warning severity semantics drift by subsystem
+
+If each subsystem invents its own meaning for warning/degraded/error, operator visibility becomes noisy and inconsistent.
+
+Guardrail:
+
+- define shared severity and health-state vocabulary early
+
+## Open Questions
+
+### 1. Should debug-output sinks remain enabled by default?
+
+Current recommendation:
+
+- yes, as a sink fed by structured telemetry entries, not as the source of truth
+
+### 2. How much timing history should be retained in memory?
+
+Current recommendation:
+
+- enough for short-term live troubleshooting and UI summaries
+- not an unbounded time-series archive
+
+### 3. Should operator-facing health and engineering diagnostics use the same snapshot?
+
+Current recommendation:
+
+- share one core telemetry model
+- allow separate derived views for concise operator summaries versus deeper engineering detail
+
+### 4. Where should threshold policy live if the app later formalizes warnings like "render over budget"?
+
+Current recommendation:
+
+- telemetry may evaluate declared thresholds
+- subsystem owners still own mitigation behavior
+
+### 5. Should input signal presence remain part of runtime state or move fully into telemetry?
+
+Current recommendation:
+
+- treat it as operational health state under `VideoBackend` reporting into telemetry
+- avoid keeping it as a core durable runtime-store concern
+
+## Success Criteria For This Subsystem
+
+`HealthTelemetry` can be considered well-defined once the codebase can say, without ambiguity:
+
+- all major subsystems have one place to publish timing, warnings, and counters
+- health and timing state no longer share ownership with durable runtime state
+- the UI can consume a stable health snapshot without scraping unrelated runtime fields
+- direct debug-string warning paths are being retired or wrapped behind structured telemetry
+- degraded-but-running conditions are visible as first-class state
+
+## Short Version
+
+`HealthTelemetry` is the subsystem that should answer:
+
+- what is healthy right now
+- what is degraded right now
+- what recent warnings and errors occurred
+- how render, control, and playout timing are behaving
+
+It should:
+
+- collect structured logs
+- collect warnings and counters
+- collect timing samples and gauges
+- build stable health snapshots for publication
+
+It should not:
+
+- own core runtime truth
+- decide app behavior
+- coordinate recovery actions
+- become a replacement for the render or backend policy layers
+
+If this boundary holds, later phases can remove timing and warning state from `RuntimeHost` and move toward a much more diagnosable live system.

docs/subsystems/README.md

@@ -0,0 +1,62 @@
+# Phase 1 Subsystem Design Index
+
+This directory contains the subsystem-specific design notes for Phase 1 of the architecture roadmap.
+
+Start here if you want the Phase 1 package to read as one coherent deliverable rather than as separate subsystem writeups.
+
+Parent documents:
+
+- [Architecture Resilience Review](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/ARCHITECTURE_RESILIENCE_REVIEW.md)
+- [Phase 1: Subsystem Boundaries and Target Architecture](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md)
+
+## How This Set Fits Together
+
+- [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md) defines the top-level subsystem split, dependency rules, state categories, and migration guardrails.
+- The notes in this directory expand each subsystem boundary without changing the parent Phase 1 design.
+- The subsystem notes are meant to be read as design companions, not as independent alternate architectures.
+
+## Recommended Reading Order
+
+1. [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md)
+2. [RuntimeStore.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeStore.md)
+3. [RuntimeCoordinator.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeCoordinator.md)
+4. [RuntimeSnapshotProvider.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeSnapshotProvider.md)
+5. [ControlServices.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/ControlServices.md)
+6. [RenderEngine.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RenderEngine.md)
+7. [VideoBackend.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/VideoBackend.md)
+8. [HealthTelemetry.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/HealthTelemetry.md)
+
+That order mirrors the intended dependency story:
+
+- durable state first
+- mutation and publication next
+- ingress and render boundaries after that
+- device timing and operational visibility last
+
+## Subsystem Notes
+
+- [RuntimeStore.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeStore.md)
+  Durable runtime config, persisted layer state, presets, and package metadata ownership.
+- [RuntimeCoordinator.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeCoordinator.md)
+  Mutation validation, state classification, reset/reload policy, and publication/persistence requests.
+- [RuntimeSnapshotProvider.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RuntimeSnapshotProvider.md)
+  Render-facing snapshot build, publication, and versioning boundaries.
+- [ControlServices.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/ControlServices.md)
+  OSC, HTTP/WebSocket, and file-watch ingress plus normalization and service-local buffering.
+- [RenderEngine.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/RenderEngine.md)
+  Sole-owner render/GL boundary, render-local transient state, preview, and playout-ready frame production.
+- [VideoBackend.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/VideoBackend.md)
+  Device lifecycle, input/output pacing, buffer policy, and producer/consumer playout direction.
+- [HealthTelemetry.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/subsystems/HealthTelemetry.md)
+  Logs, warnings, counters, timing traces, and subsystem health snapshots.
+
+## What Phase 1 Should Settle
+
+Phase 1 should leave the project with:
+
+- one agreed subsystem vocabulary
+- one agreed dependency direction map
+- one agreed state-category model
+- one agreed current-to-target migration story
+
+Phase 1 does not need to settle every later implementation detail. The subsystem notes intentionally leave some questions open where later phases need room to choose concrete mechanics.

docs/subsystems/RenderEngine.md

@@ -0,0 +1,478 @@
+# RenderEngine Subsystem Design
+
+This document expands the `RenderEngine` portion of [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md). It defines the target ownership, boundaries, and migration shape for the rendering subsystem so later phases can move GL work out of today's mixed orchestration paths without inventing new boundaries on the fly.
+
+The intent here is not to force a one-step rewrite. It is to make the target render boundary explicit enough that later work on events, `RuntimeHost` splitting, and backend decoupling all land in the same place.
+
+## Purpose
+
+`RenderEngine` is the live frame-production subsystem.
+
+It owns:
+
+- GL context ownership in the target architecture
+- render loop cadence and render task execution
+- shader program and render-pass execution once build outputs are available
+- capture texture upload scheduling once frames are accepted for render
+- temporal history resources
+- shader feedback resources
+- render-local transient overlays
+- preview-ready frame production
+- playout-ready frame production
+- render-local reset and rebuild behavior
+
+It does not own:
+
+- persisted runtime state
+- high-level mutation policy
+- OSC/UI ingress
+- device discovery or callback policy
+- playout queue policy
+- operator-visible health policy beyond publishing observations
+
+In the Phase 1 terminology, `RenderEngine` consumes snapshots plus render-local transient state and produces completed visual frames plus timing signals.
+
+## Why This Subsystem Needs A Sharp Boundary
+
+The current rendering path is split across several classes:
+
+- [OpenGLComposite.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp:86) constructs the renderer, render pipeline, shader programs, runtime services, and video bridge in one owner.
+- [OpenGLRenderPipeline.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp:31) performs pass execution, pack/readback, preview paint, and performance stat publication.
+- [OpenGLVideoIOBridge.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:58) accepts capture frames and still performs render work from the playout completion callback path.
+- `OpenGLComposite` still holds render-local overlay behavior and shader rebuild handling alongside runtime orchestration responsibilities.
+
+That split is workable today, but it creates architectural pressure:
+
+- GL ownership is thread-shared instead of sole-owned.
+- render and playout timing are still callback-coupled.
+- preview and playout are produced in the same immediate path.
+- render-local transient state is too easy to leak back into runtime-facing code.
+- it is difficult to test render behavior separately from app bootstrap and hardware integration.
+
+`RenderEngine` exists to absorb that responsibility into one subsystem with one direction of ownership.
+
+## Responsibilities
+
+### 1. Sole GL Ownership
+
+In the target design, `RenderEngine` should be the only subsystem that performs long-lived GL work.
+
+That includes:
+
+- context binding and release policy
+- framebuffer and texture lifetime
+- shader program binding and draw execution
+- upload/readback buffer lifetime
+- preview blit or present paths
+- render-local resource reset on rebuild or video-format changes
+
+This is the most important boundary. Other subsystems may request work or provide data, but they should not directly perform GL commands.
+
+### 2. Snapshot Consumption
+
+`RenderEngine` should consume immutable or near-immutable render snapshots from `RuntimeSnapshotProvider`.
+
+It is responsible for:
+
+- detecting snapshot version changes
+- rebuilding or re-binding render-local resources when the snapshot changes
+- resolving render-pass execution from snapshot contents
+- separating structural snapshot changes from transient overlay changes
+
+It should not inspect mutable runtime store objects directly.
+
+### 3. Frame Production
+
+`RenderEngine` should produce completed frames for two consumers:
+
+- preview presentation
+- `VideoBackend` playout consumption
+
+Those outputs may share most of their render work, but they are not equal-priority outputs. The subsystem rule from Phase 1 should be preserved:
+
+- playout is the primary timing-sensitive output
+- preview is subordinate and best-effort
+
+### 4. Render-Local Transient State
+
+`RenderEngine` owns transient visual state that affects output but is not persisted truth.
+
+Examples:
+
+- temporal history textures
+- feedback ping-pong buffers
+- render-local OSC/live overlay state
+- queued input frames accepted for upload
+- cached readback frames
+- preview-only presentation state
+- in-flight rebuild generations
+
+This state should remain render-local even when it influences visible output.
+
+### 5. Shader Build Application
+
+Compilation itself may eventually move into a separate build service, but once shader build outputs exist, `RenderEngine` owns:
+
+- program creation/link usage
+- pass graph application
+- sampler/texture binding layout application
+- resource reallocation required by shader shape changes
+- safe invalidation of old render-local feedback/history resources
+
+### 6. Render Timing Publication
+
+`RenderEngine` should publish observations to `HealthTelemetry` such as:
+
+- frame render duration
+- upload duration
+- pass execution duration
+- pack/readback duration
+- preview present timing
+- rebuild stalls
+- dropped/skipped input uploads
+- output frame production latency
+
+It should publish them, not own the health policy built from them.
+
+## Non-Responsibilities
+
+The target boundary should remain explicit about what does not belong here.
+
+`RenderEngine` should not:
+
+- decide whether a parameter mutation is persisted
+- normalize OSC/UI actions
+- choose device modes
+- own DeckLink callback behavior
+- own playout headroom policy
+- perform stack preset serialization
+- broadcast UI state
+- treat telemetry as a control plane
+
+Those rules matter because the current codebase often solves timing issues by letting the render path reach sideways into nearby systems.
+
+## GL Ownership Model
+
+## Target Rule
+
+One subsystem owns GL. In practice that should mean one render thread becomes the long-lived GL owner in a later phase.
+
+The render thread should:
+
+- create or adopt the GL context
+- execute all frame production work
+- perform accepted texture uploads
+- execute all pass graphs
+- manage async readback and output packing
+- manage feedback/history resets and reallocations
+
+Other threads should interact with the subsystem through queues, snapshots, and completion signals, not by borrowing the GL context.
+
+## Current State
+
+Today GL work is still shared across callback-driven entrypoints:
+
+- input upload occurs in [OpenGLVideoIOBridge::VideoFrameArrived()](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:58)
+- playout-triggered render occurs in [OpenGLVideoIOBridge::PlayoutFrameCompleted()](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:95)
+- render-pass execution occurs in [OpenGLRenderPipeline::RenderFrame()](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp:31)
+
+The `CRITICAL_SECTION` protects correctness, but it is not the target architectural model.
+
+## Migration Direction
+
+Phase 1 should treat the current bridge lock as a temporary compatibility mechanism. The target path should be:
+
+1. input callback enqueues frame payloads or references
+2. render thread accepts the latest usable input frame
+3. render thread performs uploads on its own cadence
+4. render thread produces completed output frames ahead of backend demand
+5. backend callbacks only dequeue and schedule pre-rendered frames
+
+That removes the need for callback threads to ever own GL.
+
+## Render Loop Boundaries
+
+`RenderEngine` should own a render loop with explicit phases. A good target shape is:
+
+1. drain render-side commands and accepted service events
+2. swap to the latest published snapshot if needed
+3. apply render-local transient overlays
+4. accept or coalesce latest input frame for upload
+5. perform required uploads
+6. execute pass graph
+7. update temporal and feedback resources
+8. pack and stage output frame(s)
+9. publish preview-ready image if due
+10. publish playout-ready frame(s) to `VideoBackend`
+11. emit timing and health samples
+
+The important property is that preview, playout preparation, feedback maintenance, and upload execution all happen under one render-owned cadence rather than as ad hoc side effects of unrelated callbacks.
+
+## Snapshot And Overlay Interaction
+
+`RenderEngine` should treat snapshots and overlays as different layers of state.
+
+### Snapshot Inputs
+
+Snapshots should provide:
+
+- layer stack structure
+- shader/package selections
+- validated committed parameter values
+- pass graph definitions
+- resource requirements derived from runtime state
+
+### Render-Local Overlay Inputs
+
+Overlays should provide:
+
+- active automation targets
+- smoothed transient parameter overrides
+- temporary visual state that should not persist back into the store
+- queued reset/rebuild invalidations for render-local resources
+
+### Resolution Rule
+
+The render-side resolution order should be:
+
+1. snapshot committed state forms the baseline
+2. render-local transient overlays are applied on top
+3. feedback/history resources influence shading as render-local inputs
+4. completed frame is produced without mutating the underlying snapshot
+
+This is especially important after the OSC work already moved toward render-local overlays. Phase 1 should keep that direction: render consumes committed truth plus transient live overlays, but render does not become the owner of persisted truth.
+
+## Preview And Playout Relationship
+
+Preview should be a subordinate consumer of render results, not a peer that can disturb playout timing.
+
+### Target Rule
+
+- playout deadlines come first
+- preview is best-effort
+- preview cadence may be reduced independently
+- preview failure must not stall output frame production
+
+### Current State
+
+Today preview still hangs off the render pipeline path through `mPaint()` in [OpenGLRenderPipeline::RenderFrame()](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLRenderPipeline.cpp:54). That keeps preview close enough to the playout path that it is still part of the same timing surface.
+
+### Target Shape
+
+`RenderEngine` should internally distinguish:
+
+- playout-ready frame production
+- preview presentation or preview-copy publication
+
+Possible later implementations:
+
+- playout frame and preview frame share one composite render, but preview present is decoupled and rate-limited
+- render publishes a preview texture handle or CPU-side preview image to a preview presenter
+- preview updates are skipped under load without affecting playout queue fill
+
+The exact implementation can change later, but the subsystem contract should already assume preview is subordinate.
+
+## Interaction With `RuntimeSnapshotProvider`
+
+`RenderEngine` should depend on `RuntimeSnapshotProvider`, not on `RuntimeStore`.
+
+Expected interactions:
+
+- query latest snapshot version
+- consume latest stable snapshot
+- detect structural versus parameter-only changes
+- request no mutation back into the snapshot provider during render
+
+Expected non-interactions:
+
+- no direct persistence reads/writes
+- no raw store mutation
+- no direct service ingress handling
+
+This is one of the main Phase 1 guardrails, because the current code often achieves convenience by letting render reach back into runtime-owned mutable objects.
+
+## Interaction With `VideoBackend`
+
+The target dependency direction stays:
+
+- `VideoBackend -> RenderEngine`
+
+That means:
+
+- backend requests or consumes ready frames
+- backend reports output timing/completion events
+- render does not own output device policy
+
+`RenderEngine` should expose frame-production and queue-facing interfaces, while `VideoBackend` owns:
+
+- device callback handling
+- output scheduling policy
+- buffer pool policy
+- backend state transitions
+
+In later phases, this should evolve toward a producer/consumer queue where:
+
+- render produces completed frames ahead of demand
+- backend consumes already-produced frames
+- callbacks drive dequeue/schedule/accounting only
+
+## Current Code Mapping
+
+The following current responsibilities should converge into `RenderEngine`.
+
+### From `OpenGLComposite`
+
+- render-local overlay management
+- render-facing rebuild application
+- screenshot-related render execution hooks
+- render bootstrap ownership currently mixed with app bootstrap
+
+### From `OpenGLRenderPipeline`
+
+- frame render orchestration
+- output pack conversion
+- async readback state
+- output frame caching
+- preview-ready signal publication
+
+### From `OpenGLVideoIOBridge`
+
+- GL texture upload execution should move under render ownership
+- playout callback render work should move out of the callback path
+
+### Remains Outside `RenderEngine`
+
+- device callback registration
+- playout scheduling policy
+- signal/device status lifecycle
+- runtime mutation policy
+
+## Suggested Internal Components
+
+This document does not require final class names, but `RenderEngine` will likely be easier to evolve if it is not one monolithic replacement for `OpenGLComposite`.
+
+Reasonable internal pieces could include:
+
+- `RenderLoopController`
+- `RenderSnapshotConsumer`
+- `RenderOverlayState`
+- `RenderInputQueue`
+- `RenderPassExecutor`
+- `RenderHistoryManager`
+- `RenderOutputStager`
+- `PreviewPresenter`
+
+Those are internal implementation helpers. They should not become new cross-cutting subsystem boundaries by themselves.
+
+## Public Interface Shape
+
+Aligned with the Phase 1 design, `RenderEngine` should eventually expose operations in this family:
+
+- `StartRenderLoop(...)`
+- `StopRenderLoop()`
+- `ConsumeSnapshot(...)`
+- `EnqueueInputFrame(...)`
+- `ApplyOverlayUpdate(...)`
+- `RequestRenderLocalReset(...)`
+- `HandleRebuildOutputs(...)`
+- `TryProduceOutputFrame(...)`
+- `GetPreviewFrame(...)`
+- `ReportRenderState()`
+
+Interface goals:
+
+- calls are explicit about whether they mutate render-local state or request frame production
+- no caller needs direct GL access
+- preview and playout are exposed as outputs, not as reasons for callers to enter the render path
+
+## Migration Plan From Current Code
+
+### Step 1. Name The Boundary
+
+Treat `OpenGLRenderPipeline` plus the render portions of `OpenGLComposite` and `OpenGLVideoIOBridge` as conceptually belonging to `RenderEngine`, even before physical extraction is complete.
+
+### Step 2. Stop New Render Work From Escaping
+
+As new features are added, keep:
+
+- feedback buffers
+- temporal history
+- render-local overlays
+- preview state
+
+inside render-owned code paths instead of putting them back into `RuntimeHost` or service layers.
+
+### Step 3. Isolate Snapshot Consumption
+
+Introduce snapshot-facing APIs so render no longer depends on broad `RuntimeHost` state access for frame production.
+
+### Step 4. Move Uploads Onto Render Ownership
+
+Input callbacks should enqueue or hand off frame data; render executes the upload.
+
+### Step 5. Break Callback-Driven Rendering
+
+Move from "render in playout completion callback" to "render ahead and let backend consume ready frames."
+
+### Step 6. Decouple Preview Cadence
+
+Make preview a best-effort presentation path with its own skip/rate-limit policy.
+
+### Step 7. Narrow `OpenGLComposite`
+
+After the above, `OpenGLComposite` should collapse toward a composition root and legacy adapter rather than remaining the owner of render behavior.
+
+## Risks
+
+### Latency Risk
+
+Moving to queue-based frame production can accidentally increase latency if headroom is allowed to grow without policy. `RenderEngine` should therefore expose queue-friendly production, but `VideoBackend` must still own explicit latency/headroom policy.
+
+### Resource Churn Risk
+
+Snapshot changes, shader rebuilds, and video-format changes can cause expensive reallocation of:
+
+- feedback surfaces
+- history buffers
+- output pack resources
+- readback buffers
+
+The subsystem needs clear structural-change boundaries so parameter-only changes do not trigger broad resource churn.
+
+### Preview Coupling Risk
+
+If preview remains too close to the render/playout path, it can continue to steal budget from output production even after the rest of the subsystem is cleaned up.
+
+### Readback Deadline Risk
+
+The current async readback path still falls back to synchronous reads when the deadline is missed. That behavior may remain necessary, but `RenderEngine` should treat it as a degraded-path metric, not as an invisible normal case.
+
+### Overlay Complexity Risk
+
+Render-local overlays are powerful, but they can become a hidden second state model if not kept clearly subordinate to committed snapshot state.
+
+## Open Questions
+
+- Should preview become a separate presenter helper inside `RenderEngine`, or remain a subordinate callback/output sink?
+- Where should screenshot capture live long-term: inside `RenderEngine`, or in a small render consumer layered on top of it?
+- Should shader compilation outputs be delivered to render as whole-framegraph rebuild packages, or incrementally by layer/pass?
+- How should input frame ownership work under load: newest-only, bounded queue, or policy selected by backend mode?
+- Should render expose one playout-ready frame at a time, or a bounded ring the backend drains directly?
+- What exact distinction should the snapshot provider publish between structural changes and parameter-only changes so render rebuilds stay cheap?
+
+## Phase 1 Exit Criteria For `RenderEngine`
+
+For Phase 1, this subsystem design is sufficiently defined once the project agrees that:
+
+- render is the sole long-term owner of GL work
+- render consumes snapshots, not mutable runtime store objects
+- preview is subordinate to playout
+- feedback/history/overlays are render-local transient state
+- backend callbacks should converge toward dequeue/schedule behavior rather than direct rendering
+- current render responsibilities in `OpenGLComposite`, `OpenGLRenderPipeline`, and `OpenGLVideoIOBridge` are expected to migrate under this subsystem
+
+## Short Version
+
+`RenderEngine` should become the subsystem that owns live GPU execution and nothing else.
+
+It consumes committed snapshots plus render-local overlays, owns the full GL lifecycle, produces preview and playout-ready frames, and publishes timing observations. It should not own persistence, control ingress, or hardware scheduling policy. If later phases hold to that line, timing work and render-state work can get cleaner without reintroducing the same cross-thread coupling in a different form.

docs/subsystems/RuntimeCoordinator.md

@@ -0,0 +1,555 @@
+# RuntimeCoordinator Design Note
+
+This document defines the target design for the `RuntimeCoordinator` subsystem introduced in [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md).
+
+`RuntimeCoordinator` is the mutation and policy layer for the app. Its job is to accept already-normalized actions from ingress systems, decide whether those actions are valid, classify how they should affect durable and live state, and trigger downstream publication or persistence work without taking ownership of rendering, device callbacks, or disk serialization details.
+
+## Why This Subsystem Exists
+
+Today the app's mutation path is split across several places:
+
+- `RuntimeHost` performs validation, mutation, persistence, render-state invalidation, and some status updates:
+  - [RuntimeHost.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.h:15)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:891)
+- `OpenGLComposite` currently acts like an orchestration shell and a mutation coordinator at the same time:
+  - [OpenGLCompositeRuntimeControls.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLCompositeRuntimeControls.cpp:1)
+- `RuntimeServices` still owns some deferred control flow around OSC commit and polling:
+  - [RuntimeServices.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.h:46)
+
+That overlap makes several kinds of regressions more likely:
+
+- persistence policy leaks into control handlers
+- render invalidation rules are spread across UI and non-UI paths
+- transient automation behavior is hard to reason about
+- reload behavior is partly a render concern and partly a runtime concern
+- future event-model work has no single policy owner to target
+
+`RuntimeCoordinator` exists to centralize those decisions without becoming a new monolith.
+
+## Core Responsibilities
+
+`RuntimeCoordinator` should own the following responsibilities.
+
+### 1. Mutation intake after normalization
+
+`RuntimeCoordinator` accepts typed, already-parsed actions from `ControlServices` or composition-root adapters. Examples:
+
+- add/remove/move layer
+- change shader on a layer
+- change a parameter value
+- reset a layer
+- save or load a stack preset
+- request a shader/package reload
+- apply a transient automation target
+- commit or clear transient overlay state
+
+The coordinator should not parse JSON, decode OSC payloads, or inspect HTTP payload syntax. That belongs to ingress systems.
+
+### 2. Validation and policy decisions
+
+The coordinator validates whether a requested mutation is allowed and decides how it should behave.
+
+Examples:
+
+- whether a layer id exists
+- whether a shader id is valid
+- whether a parameter exists on the targeted shader
+- whether a value is within the definition's allowed range or enum set
+- whether a trigger should update committed state, transient state, or both
+- whether a structural change should preserve compatible transient state such as feedback buffers
+
+This is the main policy surface that is currently spread between `RuntimeHost` methods such as:
+
+- `AddLayer(...)`
+- `SetLayerShader(...)`
+- `UpdateLayerParameter(...)`
+- `UpdateLayerParameterByControlKey(...)`
+- `ApplyOscTargetByControlKey(...)`
+- `ResetLayerParameters(...)`
+
+See [RuntimeHost.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.h:15).
+
+### 3. State classification
+
+The coordinator decides which state category a mutation affects:
+
+- persisted state
+- committed live state
+- transient live overlay state
+- health/timing state only
+
+The design rule is that classification belongs here, not in the ingress layer and not in render code.
+
+### 4. Snapshot publication requests
+
+When a mutation changes render-facing state, the coordinator asks `RuntimeSnapshotProvider` to publish a new snapshot or mark one dirty for publication.
+
+The coordinator does not build render snapshots itself.
+
+### 5. Persistence requests
+
+When a mutation changes durable state, the coordinator asks `RuntimeStore` to record the new authoritative state and, when applicable, request persistence through the store's write path.
+
+The coordinator does not serialize files directly.
+
+### 6. Cross-subsystem consistency policy
+
+The coordinator is where "what else must happen if this changes?" lives.
+
+Examples:
+
+- a layer add/remove/move may require:
+  - store mutation
+  - snapshot republish
+  - compatibility-preserving render-state reset policy
+  - optional UI-state notification via later event-model work
+- a stack preset load may require:
+  - replacement of committed layer stack state
+  - invalidation of transient overlay state that no longer maps cleanly
+  - snapshot republish
+  - deferred persistence request
+- an automation target may require:
+  - transient overlay update only
+  - no persistence write
+  - optional later commit into committed live state if policy says so
+
+## Explicit Non-Responsibilities
+
+`RuntimeCoordinator` should explicitly not own the following.
+
+### Not a persistence engine
+
+It does not:
+
+- read or write files
+- decide file formats
+- own preset storage layout
+- perform debounced disk flushing logic
+
+Those belong in `RuntimeStore` and later persistence helpers.
+
+### Not a render engine
+
+It does not:
+
+- own GL objects
+- perform shader compilation
+- reset temporal history textures directly
+- build render passes
+- hold frame queues
+
+It may request policy outcomes that cause render-local resets, but render performs the work.
+
+### Not a hardware/backend owner
+
+It does not:
+
+- configure DeckLink
+- react directly to device callbacks
+- schedule playout
+- own input signal callbacks
+
+### Not an ingress transport layer
+
+It does not:
+
+- parse OSC wire messages
+- host websockets
+- own HTTP handlers
+- own polling loops
+
+### Not a health reporting sink
+
+It can emit mutation outcomes and warnings to `HealthTelemetry`, but it should not own counters, logs, or dashboards.
+
+## Mutation Policy
+
+The coordinator should use a small number of policy classes of mutation behavior rather than ad hoc per-call decisions.
+
+### Durable mutation
+
+Updates authoritative state that should survive beyond the current session flow.
+
+Examples:
+
+- add/remove/move layer
+- change selected shader on a layer
+- update a parameter via UI or API
+- load a stack preset
+- reset a layer to defaults
+
+Expected coordinator behavior:
+
+1. validate the request
+2. normalize the target and value if needed
+3. update committed/durable state via `RuntimeStore`
+4. request snapshot publication
+5. request persistence according to policy
+
+### Live committed mutation
+
+Updates committed current-session state that should be treated as true until changed again, but may not need synchronous persistence.
+
+Examples:
+
+- a UI action that changes a parameter repeatedly while dragging
+- a manual operator bypass toggle during live use
+
+Expected coordinator behavior:
+
+1. update committed live state
+2. request snapshot publication
+3. decide whether persistence should happen immediately, be debounced, or be deferred
+
+### Transient overlay mutation
+
+Affects output but should not masquerade as stored truth.
+
+Examples:
+
+- active OSC automation target
+- short-lived trigger-driven visual automation state
+
+Expected coordinator behavior:
+
+1. validate the route and target parameter
+2. classify the action as transient
+3. update overlay state through the appropriate owner boundary
+4. avoid persistence unless a separate commit policy is invoked
+
+### Coordination-only mutation
+
+A request that mainly exists to trigger a flow rather than edit value state.
+
+Examples:
+
+- request reload
+- request publish-now
+- request clear transient state on reset/rebuild
+
+## Interaction With State Categories
+
+This section restates the Phase 1 state model specifically from the coordinator's perspective.
+
+### Persisted state
+
+`RuntimeCoordinator` does not own persisted state, but it decides when persisted state should change.
+
+Typical interaction:
+
+- validate request
+- call into `RuntimeStore`
+- receive success/failure
+- request persistence if policy says this mutation should be durable
+
+### Committed live state
+
+This is the coordinator's primary logical domain.
+
+Even if the implementation initially stores committed live state inside `RuntimeHost` or later inside `RuntimeStore`, the coordinator should be considered the policy owner of:
+
+- current layer stack composition
+- current selected shaders
+- current bypass flags
+- current operator-authored parameter values
+
+### Transient live overlay state
+
+The coordinator defines the rules for transient state, but should not become the long-term storage owner for render-local transient data.
+
+The expected split is:
+
+- coordinator owns policy
+- `ControlServices` may own short ingress-side queues and coalescing buffers
+- `RenderEngine` owns render-local transient application state
+- `VideoBackend` owns playout and device transient state
+
+For OSC specifically, the coordinator should eventually decide:
+
+- whether an automation change is transient-only
+- whether it should later commit into committed live state
+- what reset/reload actions invalidate it
+
+### Health and timing state
+
+The coordinator may emit events like:
+
+- mutation rejected
+- reload requested
+- preset load succeeded/failed
+- transient state cleared because structure changed
+
+But those are observations into `HealthTelemetry`, not coordinator-owned data.
+
+## Proposed Interfaces
+
+These are target-shape interfaces, not final signatures.
+
+### Input-facing API
+
+Core mutation entrypoints could look like:
+
+```cpp
+struct RuntimeMutationRequest;
+struct RuntimeMutationResult;
+struct ReloadRequest;
+struct OverlayCommitRequest;
+
+class RuntimeCoordinator
+{
+public:
+    RuntimeMutationResult ApplyMutation(const RuntimeMutationRequest& request);
+    RuntimeMutationResult ApplyAutomationTarget(const RuntimeMutationRequest& request);
+    RuntimeMutationResult ResetLayer(const std::string& layerId);
+    RuntimeMutationResult RequestReload(const ReloadRequest& request);
+    RuntimeMutationResult CommitOverlayState(const OverlayCommitRequest& request);
+    RuntimeMutationResult ClearTransientStateForScope(const RuntimeResetScope& scope);
+};
+```
+
+The important point is not the exact names. It is that ingress systems send typed requests into one policy owner.
+
+### Downstream collaborators
+
+The coordinator likely needs collaborators conceptually equivalent to:
+
+- `IRuntimeStore`
+- `IRuntimeSnapshotProvider`
+- `IHealthTelemetry`
+- later, a compatibility shim for still-existing `RuntimeHost` behavior during migration
+
+### Mutation result shape
+
+A useful result structure should carry more than success/failure. It should support policy-driven downstream behavior without re-deriving the decision elsewhere.
+
+Suggested fields:
+
+- `accepted`
+- `errorMessage`
+- `stateChanged`
+- `persistedStateChanged`
+- `committedLiveStateChanged`
+- `transientStateChanged`
+- `snapshotPublicationRequired`
+- `persistenceRequested`
+- `renderResetScope`
+- `telemetryNotes`
+
+This prevents callers from guessing whether they need to reload, publish, or persist.
+
+## Current Code Mapping
+
+The current app does not have a separate coordinator class, but several existing code paths are clearly doing coordinator work.
+
+### `OpenGLCompositeRuntimeControls.cpp`
+
+Methods like:
+
+- `AddLayer(...)`
+- `RemoveLayer(...)`
+- `MoveLayer(...)`
+- `SetLayerBypass(...)`
+- `SetLayerShader(...)`
+- `UpdateLayerParameterJson(...)`
+- `ResetLayerParameters(...)`
+- `SaveStackPreset(...)`
+- `LoadStackPreset(...)`
+
+currently do this pattern:
+
+1. call `RuntimeHost` mutation
+2. decide whether to call `ReloadShader(...)`
+3. call `broadcastRuntimeState()`
+
+See [OpenGLCompositeRuntimeControls.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLCompositeRuntimeControls.cpp:1).
+
+That "call host, then decide reload/broadcast policy" logic is a direct candidate for migration into `RuntimeCoordinator`.
+
+### `RuntimeHost`
+
+`RuntimeHost` currently combines:
+
+- mutation validation
+- state mutation
+- value normalization
+- persistence writes
+- render-state dirty marking
+
+Examples in [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:891):
+
+- `AddLayer(...)`
+- `SetLayerShader(...)`
+- `UpdateLayerParameter(...)`
+- `UpdateLayerParameterByControlKey(...)`
+- `ApplyOscTargetByControlKey(...)`
+- `ResetLayerParameters(...)`
+- `LoadStackPreset(...)`
+
+The target design is not to move all implementation in one step. It is to peel policy and orchestration decisions away first.
+
+### `RuntimeServices`
+
+Current OSC-specific flow in `RuntimeServices` includes:
+
+- queueing updates
+- applying pending updates
+- queueing commits
+- consuming completed commits
+- clearing OSC state
+
+See [RuntimeServices.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/control/RuntimeServices.h:46).
+
+The coordinator should eventually own the rules for when these updates are transient, when they commit, and what reset/reload does to them, while `ControlServices` keeps only the ingress mechanics.
+
+## Recommended Internal Model
+
+The coordinator should remain small enough to reason about. A good target is to split its internal logic into policy-focused helpers rather than letting one class become another `RuntimeHost`.
+
+Possible internal helper concepts:
+
+- `LayerMutationPolicy`
+- `ParameterMutationPolicy`
+- `PresetMutationPolicy`
+- `ReloadPolicy`
+- `OverlayPolicy`
+
+That can still be presented as one subsystem to the rest of the app, while keeping the implementation testable.
+
+## Snapshot Publication Contract
+
+The coordinator should never force callers to know whether a snapshot must be rebuilt. That policy should be owned here.
+
+Examples:
+
+- parameter changes require snapshot publication
+- layer reorder requires snapshot publication
+- shader swap requires snapshot publication and render-local rebuild work
+- stack preset load requires snapshot publication and likely broader transient-state invalidation
+- pure health/status changes do not require snapshot publication
+
+This contract matters because current call sites often use coarse actions like `ReloadShader()` after structural edits. The coordinator should return a more precise outcome than "reload or not."
+
+## Reload and Reset Policy
+
+Reload and reset behavior has been a recurring source of edge cases in the current app, especially with shader feedback, temporal history, and OSC overlay state.
+
+The coordinator should define explicit reset scopes such as:
+
+- parameter-values-only reset
+- committed-live-state reset for a layer
+- transient-overlay reset for a layer
+- render-local-history reset for a layer
+- whole-stack structural reset
+- reload-induced compatibility reset
+
+That allows later phases to stop encoding reset behavior implicitly in UI handlers or render rebuild code.
+
+## Migration Plan From Current Code
+
+The coordinator should be introduced incrementally.
+
+### Step 1. Define request and result types
+
+Introduce typed mutation request/result objects without changing most internals yet.
+
+### Step 2. Wrap current `RuntimeHost` mutations behind coordinator entrypoints
+
+The first implementation can still delegate heavily into `RuntimeHost`, but the call sites should stop deciding policy on their own.
+
+For example, instead of:
+
+1. `OpenGLComposite::AddLayer()`
+2. `RuntimeHost::AddLayer()`
+3. `ReloadShader(true)`
+4. `broadcastRuntimeState()`
+
+the flow becomes:
+
+1. `OpenGLComposite` or `ControlServices` creates a typed request
+2. `RuntimeCoordinator::ApplyMutation(...)`
+3. coordinator returns a result describing snapshot, reset, and persistence needs
+4. composition root dispatches those downstream effects
+
+### Step 3. Move validation and classification out of `RuntimeHost`
+
+Once coordinator entrypoints are stable, pull up:
+
+- mutation classification
+- reset/reload policy
+- transient-versus-durable decisions
+
+while leaving raw store operations in place.
+
+### Step 4. Narrow `RuntimeHost` into store and snapshot collaborators
+
+Only after the coordinator is clearly owning policy should `RuntimeHost` be split into real target subsystems.
+
+## Key Risks
+
+### Risk 1. Coordinator becomes a new god object
+
+If the coordinator starts owning persistence details, status counters, or render reset mechanics directly, it will just recreate the current problem under a new name.
+
+Mitigation:
+
+- keep collaborators explicit
+- keep request/result types narrow
+- avoid direct dependencies on render or backend internals
+
+### Risk 2. Call sites bypass coordinator during migration
+
+If new code continues calling `RuntimeHost` directly for convenience, the architecture will fork into two policy systems.
+
+Mitigation:
+
+- treat the coordinator as the required entrypoint for new non-render mutations
+- add compatibility adapters rather than parallel mutation paths
+
+### Risk 3. Too much policy stays implicit in return conventions
+
+If callers still infer policy from "which method was called," the coordinator will not actually clarify the system.
+
+Mitigation:
+
+- return explicit mutation outcomes
+- define reset and publication scopes as named concepts
+
+### Risk 4. Transient-state ownership remains fuzzy
+
+OSC overlay behavior, feedback invalidation, and reload compatibility can easily blur subsystem boundaries again.
+
+Mitigation:
+
+- coordinator owns classification rules
+- subsystem owners retain storage ownership
+- reset scopes are explicit
+
+## Open Questions
+
+- Should committed live state remain physically stored in `RuntimeStore`, or should the coordinator gain a live-session companion object before Phase 3?
+- Should preset load/save stay synchronous through early migration, or should the coordinator always treat them as policy requests whose persistence effects may complete later?
+- Should reload requests be modeled as a dedicated mutation class distinct from ordinary control mutations from the start?
+- How much normalization of parameter values should remain in store-side helpers versus moving into coordinator policy helpers?
+- Should transient overlay commit policy be global, or parameter-definition-driven for specific shader controls?
+- What is the minimal reset-scope vocabulary needed to avoid hard-coding reload behavior in `RenderEngine` later?
+
+## Short Version
+
+`RuntimeCoordinator` is where the app decides what a valid change means.
+
+It should:
+
+- accept typed mutations from ingress systems
+- validate and classify them
+- update durable and committed state through `RuntimeStore`
+- request render-facing publication through `RuntimeSnapshotProvider`
+- request persistence when policy requires it
+- define reset, reload, and transient-overlay rules
+
+It should not:
+
+- parse transport payloads
+- own GL work
+- own device callbacks
+- write files directly
+- become a replacement monolith for every kind of state

docs/subsystems/RuntimeSnapshotProvider.md

@@ -0,0 +1,489 @@
+# RuntimeSnapshotProvider Subsystem Design
+
+This document expands the `RuntimeSnapshotProvider` subsystem from [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md) into a concrete subsystem design.
+
+The goal of `RuntimeSnapshotProvider` is to separate render-facing state publication from both runtime mutation policy and durable storage. In the target architecture, render should consume published snapshots rather than reaching into `RuntimeStore` or lock-protected live objects directly.
+
+## Purpose
+
+`RuntimeSnapshotProvider` is the boundary between runtime-owned state and render-consumable state.
+
+It exists to solve three current problems:
+
+- render state is still built directly out of `RuntimeHost` under a shared mutex
+- render reads and refreshes partially mutable cached layer state in more than one place
+- state publication, state versioning, and dynamic frame-field refresh are not yet explicit subsystems
+
+Today the closest current behavior lives in:
+
+- [RuntimeHost::GetLayerRenderStates(...)](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1535)
+- [RuntimeHost::TryGetLayerRenderStates(...)](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1543)
+- [RuntimeHost::TryRefreshCachedLayerStates(...)](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1554)
+- [RuntimeHost::RefreshDynamicRenderStateFields(...)](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1582)
+- [RuntimeHost::BuildLayerRenderStatesLocked(...)](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1598)
+- the render-side cache usage in [OpenGLComposite.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp:589)
+
+`RuntimeSnapshotProvider` should absorb that responsibility, but in a cleaner and more publish-oriented way.
+
+## Responsibilities
+
+`RuntimeSnapshotProvider` is responsible for:
+
+- building render-facing snapshots from durable store state plus whatever committed-live state view the Phase 3 split ultimately exposes
+- publishing stable, versioned snapshots that can be consumed without large shared mutable locks
+- separating structural snapshot changes from dynamic frame fields
+- translating runtime layer state into render-ready layer descriptors
+- attaching immutable or near-immutable shader/package-derived data needed by render
+- giving `RenderEngine` a cheap read path for the latest committed snapshot
+- making snapshot invalidation and publication rules explicit
+
+It is not responsible for:
+
+- deciding whether a mutation is valid
+- classifying a change as transient versus durable
+- directly accepting OSC/UI/file-watch requests
+- disk persistence
+- GL resource allocation
+- shader compilation execution
+- render-local transient overlays such as live OSC overlay state, temporal history textures, or feedback textures
+
+## Design Principles
+
+### Render consumes published state, not store internals
+
+The render side should never need to walk `RuntimeStore` structures directly or perform per-frame reconstruction under the store lock.
+
+### Structural data and dynamic frame fields are different classes of data
+
+The layer stack, shader ids, parameter definitions, texture assets, font assets, feedback declarations, and temporal requirements change relatively infrequently. Frame count, wall time, UTC time, and similar values change every frame.
+
+`RuntimeSnapshotProvider` should publish structural snapshots and provide a separate mechanism for frame-local dynamic enrichment, rather than rebuilding everything for every frame.
+
+### Snapshot reads should be cheap and explicit
+
+The render side should be able to say:
+
+- give me the latest published snapshot
+- tell me whether the structural snapshot version changed
+- apply dynamic frame fields for this frame
+
+without having to infer cache validity from multiple host-owned counters and fallback lock behavior.
+
+### Published shape should be stable
+
+The shape of render-facing layer state should remain consistent across phases even if the underlying store or coordination model changes.
+
+## Snapshot Inputs
+
+`RuntimeSnapshotProvider` should build from a read-oriented runtime view, not from direct mutation calls.
+
+That view will likely include:
+
+- durable configuration and layer-stack data from `RuntimeStore`
+- committed live values from either:
+  - `RuntimeStore`, while committed live state is still co-located there, or
+  - a coordinator-owned live-state companion once Phase 3 finishes the split
+- package and manifest metadata required to describe render-facing layer structure
+
+The important Phase 1 rule is not "the provider always reads one specific object." It is:
+
+- the provider consumes read-oriented committed runtime state
+- the provider does not own mutation policy
+- render consumes the provider's published output instead of reaching back into whichever runtime object currently stores the truth
+
+## Snapshot Model
+
+The subsystem should publish a render snapshot object rather than loose vectors and ad hoc version getters.
+
+Suggested top-level shape:
+
+```cpp
+struct RuntimeRenderSnapshot
+{
+	uint64_t snapshotVersion = 0;
+	uint64_t structureVersion = 0;
+	uint64_t parameterVersion = 0;
+	uint64_t packageVersion = 0;
+	uint64_t publicationSequence = 0;
+	unsigned inputWidth = 0;
+	unsigned inputHeight = 0;
+	unsigned outputWidth = 0;
+	unsigned outputHeight = 0;
+	std::vector<RuntimeRenderLayerSnapshot> layers;
+};
+```
+
+Suggested per-layer shape:
+
+```cpp
+struct RuntimeRenderLayerSnapshot
+{
+	std::string layerId;
+	std::string shaderId;
+	std::string shaderName;
+	double mixAmount = 1.0;
+	double bypass = 0.0;
+	std::vector<ShaderParameterDefinition> parameterDefinitions;
+	std::map<std::string, ShaderParameterValue> parameterValues;
+	std::vector<ShaderTextureAsset> textureAssets;
+	std::vector<ShaderFontAsset> fontAssets;
+	bool isTemporal = false;
+	TemporalHistorySource temporalHistorySource = TemporalHistorySource::None;
+	unsigned requestedTemporalHistoryLength = 0;
+	unsigned effectiveTemporalHistoryLength = 0;
+	FeedbackSettings feedback;
+};
+```
+
+This is intentionally close to today’s [RuntimeRenderState](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/shader/ShaderTypes.h:134), but split so dynamic fields are not embedded in the published structural snapshot.
+
+Suggested per-frame dynamic supplement:
+
+```cpp
+struct RuntimeRenderFrameContext
+{
+	double timeSeconds = 0.0;
+	double utcTimeSeconds = 0.0;
+	double utcOffsetSeconds = 0.0;
+	double startupRandom = 0.0;
+	double frameCount = 0.0;
+};
+```
+
+`RenderEngine` can combine `RuntimeRenderSnapshot` and `RuntimeRenderFrameContext` into its final frame-local render input without forcing snapshot republish every frame.
+
+## Publication Rules
+
+The provider should publish a new structural snapshot when any render-relevant structural or committed-live field changes, including:
+
+- layer add/remove/reorder
+- shader id change on a layer
+- layer bypass change
+- parameter value change that is part of committed live state
+- shader package metadata refresh that changes parameter definitions, assets, temporal declarations, or feedback declarations
+- input or output dimensions that change render-facing layer interpretation
+- stack preset load that changes any render-facing state
+
+The provider should not publish a new structural snapshot just because:
+
+- time advanced by one frame
+- frame count increased
+- preview cadence changed
+- render-local transient overlay state changed
+- temporal history or feedback textures changed
+- device playout queue state changed
+
+That distinction matters because the current model effectively mixes structural publication with frame-local refresh and lock-driven fallback logic.
+
+## Versioning Model
+
+The provider should own explicit version domains rather than exposing only host-wide counters.
+
+Recommended version domains:
+
+- `structureVersion`
+  - changes when the layer graph or shader/package-derived structure changes
+- `parameterVersion`
+  - changes when committed parameter or bypass values change
+- `packageVersion`
+  - changes when shader manifests or package-derived metadata relevant to render changes
+- `snapshotVersion`
+  - a composed version for consumers that only need a single fast invalidation key
+- `publicationSequence`
+  - monotonic sequence number for diagnostics and telemetry
+
+Recommended rules:
+
+- `snapshotVersion` changes whenever any render-visible aspect of the structural snapshot changes
+- `structureVersion` should not change for pure parameter edits
+- `parameterVersion` should not change for time-only updates
+- dynamic frame context should not require any version change
+
+This makes later cache policy much cleaner:
+
+- shader rebuild decisions can key off structure/package changes
+- parameter buffer refresh can key off parameter changes
+- frame-local updates can ignore snapshot publication entirely
+
+## Snapshot Read Rules
+
+The target read contract for `RenderEngine` should be:
+
+1. acquire the latest published snapshot atomically or under a very small provider-owned read lock
+2. compare relevant versions with the render-side cached state
+3. if unchanged, reuse render-local compiled/cached resources
+4. if changed, rebuild only the portions implied by the changed version domains
+5. attach the current `RuntimeRenderFrameContext` for the frame being rendered
+
+Important rule:
+
+- `RenderEngine` should never partially mutate the provider’s published snapshot in place
+
+That means today’s `TryRefreshCachedLayerStates(...)` behavior is a migration waypoint, not a target pattern. Once the provider exists, the render side should treat the snapshot as immutable input and keep any overlays or last-frame adjusted values inside `RenderEngine`.
+
+## Render-Facing Data Shape Rules
+
+The published snapshot should contain exactly the data render needs to interpret a layer, but not render-local execution artifacts.
+
+Include:
+
+- layer identity
+- shader identity and display name
+- parameter definitions
+- committed parameter values
+- bypass and mix flags needed for layer evaluation
+- texture and font asset declarations
+- temporal settings
+- feedback settings
+- input/output dimensions when they affect shader configuration or resource interpretation
+
+Do not include:
+
+- GL object ids
+- framebuffer handles
+- compiled shader programs
+- live texture bindings resolved to hardware units
+- temporal history texture state
+- feedback buffer contents
+- queued OSC overlays
+- queued input frames
+- preview frame caches
+- DeckLink buffer handles
+
+This line is important because current `RuntimeRenderState` is close to render-ready data, but the subsystem contract should stop before actual device or GL execution artifacts.
+
+## Proposed Public Interface
+
+Suggested interface shape:
+
+```cpp
+class IRuntimeSnapshotProvider
+{
+public:
+	virtual ~IRuntimeSnapshotProvider() = default;
+
+	virtual RuntimeRenderSnapshot BuildSnapshot(
+		const RuntimeStoreView& storeView,
+		const SnapshotBuildOptions& options) const = 0;
+
+	virtual void PublishSnapshot(RuntimeRenderSnapshot snapshot) = 0;
+	virtual std::shared_ptr<const RuntimeRenderSnapshot> GetLatestSnapshot() const = 0;
+	virtual uint64_t GetSnapshotVersion() const = 0;
+	virtual RuntimeRenderFrameContext BuildFrameContext() const = 0;
+};
+```
+
+Likely supporting methods:
+
+- `BuildLayerSnapshot(...)`
+- `BuildFrameContext(...)`
+- `ComputeSnapshotVersion(...)`
+- `DidStructureChange(...)`
+- `DidParametersChange(...)`
+- `PublishIfChanged(...)`
+
+Notes:
+
+- `GetLatestSnapshot()` should ideally return a shared immutable snapshot pointer or equivalent stable handle
+- `BuildFrameContext()` may remain provider-owned or later move behind a clock/timing helper if that subsystem becomes more explicit
+- publication should be initiated by `RuntimeCoordinator`, not by render
+
+## Relationship to Other Subsystems
+
+### `RuntimeStore`
+
+`RuntimeSnapshotProvider` depends on store-owned durable data and package metadata through a read-oriented interface or view.
+
+If committed live state remains physically co-located with the store during early migration, the provider may read it through the same view. If committed live state moves behind a coordinator-owned live-session model later, the provider should consume that through a similarly read-oriented view.
+
+It should not mutate the store directly.
+
+### `RuntimeCoordinator`
+
+`RuntimeCoordinator` decides when a mutation requires snapshot republish.
+
+The provider should not reclassify policy. It should only:
+
+- build
+- compare
+- publish
+
+based on the change request it is asked to materialize.
+
+### `RenderEngine`
+
+`RenderEngine` is the main consumer.
+
+It should:
+
+- read the latest published snapshot
+- treat that snapshot as immutable
+- derive render-local artifacts from it
+- keep frame-local overlays and history outside the provider
+
+### `HealthTelemetry`
+
+The provider should emit:
+
+- snapshot publication counts
+- snapshot build duration
+- version bump reason categories
+- publication suppression counts when no effective change occurred
+- warning states if snapshot build repeatedly fails
+
+This is especially important while migrating away from the current lock/fallback model.
+
+## Current Code Mapping
+
+The current code suggests the following migration map.
+
+### Move into `RuntimeSnapshotProvider`
+
+From `RuntimeHost`:
+
+- layer render-state construction from `BuildLayerRenderStatesLocked(...)`
+- render-facing translation of layer persistent state plus package metadata
+- explicit version composition for render-visible state
+- dynamic frame-context construction currently done in `RefreshDynamicRenderStateFields(...)`
+
+### Stop exposing directly from the host/store boundary
+
+Current methods that should become compatibility shims and later disappear:
+
+- `GetLayerRenderStates(...)`
+- `TryGetLayerRenderStates(...)`
+- `TryRefreshCachedLayerStates(...)`
+- `RefreshDynamicRenderStateFields(...)`
+
+### Render-side compatibility during migration
+
+The current `OpenGLComposite` cache path:
+
+- reads versions from `RuntimeHost`
+- conditionally calls `TryRefreshCachedLayerStates(...)`
+- conditionally rebuilds full layer state
+- then reapplies render-local OSC overlay state
+
+During migration, that should become:
+
+1. get latest published snapshot from provider
+2. compare snapshot versions against render-local cache
+3. rebuild only if needed
+4. apply render-local overlay state
+5. attach frame context
+
+That is a much cleaner split than the current mixed lock/cache/fallback flow in [OpenGLComposite.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/OpenGLComposite.cpp:589).
+
+## Migration Plan
+
+### Step 1: Introduce provider types without changing behavior
+
+- define `RuntimeRenderSnapshot`, `RuntimeRenderLayerSnapshot`, and `RuntimeRenderFrameContext`
+- implement provider methods as thin wrappers over current `RuntimeHost` logic
+- keep `RuntimeHost` as the backing source temporarily
+
+### Step 2: Route render reads through the provider
+
+- replace direct `RuntimeHost` layer-state reads with provider snapshot reads
+- preserve current version behavior first, even if internally bridged to existing counters
+
+### Step 3: Separate structural publication from frame context
+
+- stop rebuilding structural layer state just to refresh time and frame values
+- let render request frame context separately each frame
+
+### Step 4: Remove mutable snapshot refresh paths
+
+- retire `TryRefreshCachedLayerStates(...)`
+- publish new snapshots for committed parameter changes instead of mutating render-cached host-derived vectors in place
+
+### Step 5: Move publication triggering fully behind `RuntimeCoordinator`
+
+- no render-driven snapshot rebuilding
+- coordinator requests publication after successful committed mutations and reloads
+
+## Risks
+
+### Risk: snapshot copies become expensive
+
+Publishing whole snapshots on every parameter commit could be expensive if the layer stack grows.
+
+Mitigation:
+
+- use immutable shared snapshots with replace-on-publish semantics
+- consider per-layer structural sharing later if real profiles justify it
+- avoid republishing for frame-local time-only changes
+
+### Risk: unclear boundary between committed state and transient overlay state
+
+If overlays are accidentally folded into the published snapshot, the provider will recreate the coupling that the subsystem split is supposed to remove.
+
+Mitigation:
+
+- keep overlays render-local or coordinator-owned transient state
+- document that snapshots represent committed render-facing truth, not in-flight automation state
+
+### Risk: version domains are under-specified
+
+If version rules are not crisp, render may still over-rebuild or miss needed updates.
+
+Mitigation:
+
+- make version bump reasons explicit
+- log version-domain changes during migration
+- add tests around parameter-only, structure-only, and package-only changes
+
+### Risk: snapshot publication is treated as a background convenience rather than a core contract
+
+If code keeps reaching around the provider into the store, the architecture will remain half-split.
+
+Mitigation:
+
+- treat provider publication as the only supported render-facing state publication path
+- convert direct host/store render-state methods into adapters, then remove them
+
+## Testing Strategy
+
+The provider should be testable without GL or hardware.
+
+Recommended tests:
+
+- snapshot build from a sample layer stack
+- parameter-only mutation increments `parameterVersion` but not `structureVersion`
+- layer reorder increments `structureVersion`
+- shader manifest change increments `packageVersion`
+- frame context changes over time without forcing `snapshotVersion` changes
+- repeated publish with no effective change suppresses unnecessary version bumps
+- feedback and temporal declarations are preserved correctly in published layer snapshots
+
+## Open Questions
+
+- Should output dimensions live inside the top-level snapshot only, or also be copied into each layer snapshot for compatibility with current code paths?
+- Should package-derived compile-ready pass source metadata eventually be published by this provider, or remain a separate build artifact pipeline?
+- Is `BuildFrameContext()` part of the provider long-term, or should timing/clock publication become its own helper owned adjacent to `HealthTelemetry`?
+- Do parameter-only changes always require full snapshot republish, or should later phases add more granular per-layer publication handles?
+- Should the provider own input signal dimensions directly, or should those come from a backend-published runtime environment view supplied during build?
+
+## Completion Criteria For This Subsystem
+
+`RuntimeSnapshotProvider` can be considered architecturally in place once:
+
+- render no longer reads `RuntimeStore` or `RuntimeHost` render state directly
+- render consumes published snapshot handles rather than rebuilding layer vectors from host state
+- dynamic frame fields are supplied separately from structural snapshot publication
+- snapshot version domains are explicit and observable
+- transient overlays remain outside the published snapshot contract
+
+## Short Version
+
+`RuntimeSnapshotProvider` should become the single place that turns committed runtime state into render-consumable published snapshots.
+
+Its contract is:
+
+- build from store-owned state
+- publish immutable or near-immutable render snapshots
+- version them explicitly
+- keep frame-local timing separate
+- give render a cheap, lock-light read path
+
+If that boundary is held, later phases can split `RuntimeHost`, isolate render timing, and decouple playout without inventing a second render-state authority.

docs/subsystems/RuntimeStore.md

@@ -0,0 +1,573 @@
+# RuntimeStore Subsystem Design
+
+This document expands the `RuntimeStore` portion of [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md) into a subsystem-specific design note.
+
+The purpose of `RuntimeStore` is to give the Phase 1 target architecture one clear home for durable runtime data. In the current codebase, that responsibility is spread through `RuntimeHost`, where persistence, mutation entrypoints, render-state building, shader metadata access, and status reporting all share the same object and lock domain. `RuntimeStore` is the design boundary that separates "what the app knows and saves" from "how the app decides to mutate it" and "how rendering consumes it."
+
+## Role In The Phase 1 Architecture
+
+Within the Phase 1 subsystem model, `RuntimeStore` is the durable data authority.
+
+It exists to answer questions like:
+
+- what runtime configuration is currently loaded
+- what the saved layer stack structure is
+- what the saved parameter values are
+- what stack presets exist and what they contain
+- what package and manifest metadata is available for validation and snapshot building
+
+It should not answer questions like:
+
+- should this control mutation be allowed
+- should this OSC value be treated as transient or persisted
+- how should the render thread consume state
+- when should output frames be scheduled
+- what warnings should be shown to the operator
+
+That policy belongs elsewhere:
+
+- mutation policy: `RuntimeCoordinator`
+- render-facing publication: `RuntimeSnapshotProvider`
+- hardware timing: `VideoBackend`
+- operational visibility: `HealthTelemetry`
+
+## Design Goals
+
+`RuntimeStore` should optimize for:
+
+- explicit ownership of durable runtime data
+- predictable disk-backed load and save behavior
+- minimal knowledge of GL, callbacks, or live playout timing
+- stable read models for validation and snapshot building
+- a clean seam for introducing debounced or asynchronous persistence later
+- testability without GPU or DeckLink dependencies
+
+## Responsibilities
+
+`RuntimeStore` owns persisted and operator-authored state.
+
+Primary responsibilities:
+
+- load runtime host configuration from disk
+- load saved runtime state from disk
+- save runtime state snapshots to disk
+- own the stored layer stack model
+- own persisted parameter values and bypass flags
+- own stack preset serialization and deserialization
+- own package/manifest metadata needed across renders and reloads
+- expose query/read APIs over stored state
+- expose write APIs for coordinator-approved durable mutations
+- normalize or repair stored data at load boundaries when necessary
+
+Secondary responsibilities that still fit here:
+
+- path resolution for runtime state and preset files
+- preset name normalization/file-stem safety
+- compatibility handling for older saved-state schemas
+- default seeding of initial persistent state when no saved runtime exists
+
+## Non-Responsibilities
+
+`RuntimeStore` must not become a general convenience layer again.
+
+It does not own:
+
+- render-thread timing
+- GL objects or resource lifetime
+- shader compilation orchestration
+- render-local transient state such as temporal history, feedback buffers, preview caches, or playout queues
+- OSC smoothing, coalescing, or overlay application
+- websocket broadcast policy
+- REST or OSC ingress handling
+- device callbacks, queue-depth policy, or preroll policy
+- app-wide health aggregation
+
+It also should not directly decide:
+
+- whether a mutation is valid in policy terms
+- whether a change should persist immediately, eventually, or not at all
+- when a new render snapshot should be published
+- whether a reload should be treated as config-only, package-only, or render-affecting
+
+Those are coordinator concerns, not store concerns.
+
+## State Ownership
+
+`RuntimeStore` should own the following state categories.
+
+### Runtime Configuration
+
+Examples:
+
+- server/control ports
+- OSC bind address
+- OSC smoothing defaults
+- runtime paths and directory configuration
+- any host-side configuration loaded from `config/runtime-host.json`
+
+This data is durable, file-backed, and not inherently render-local.
+
+### Persistent Layer Stack State
+
+Examples:
+
+- ordered layer list
+- stable layer ids
+- selected shader id per layer
+- bypass state
+- persisted parameter values
+
+This is the stored "official" layer model, not a render-thread working copy.
+
+### Stack Presets
+
+Examples:
+
+- preset names
+- serialized saved layer stacks under `runtime/stack_presets`
+
+Preset files are durable artifacts and should remain in the store domain even if later phases add async writing.
+
+### Shader/Package Metadata Needed As Durable Reference Data
+
+Examples:
+
+- discovered shader package manifests
+- parameter definitions used for validation/default restoration
+- manifest-level capability metadata such as temporal history and feedback declarations
+- package ordering that should survive across reloads
+
+Important distinction:
+
+- manifest and package metadata belongs here
+- render-ready compiled programs and GPU resources do not
+
+### Load-Time Compatibility/Repair State
+
+Examples:
+
+- schema version adaptation
+- default value filling for missing parameters
+- removal or migration of layers that reference missing packages
+- preset compatibility cleanup
+
+This should be treated as store hygiene during ingest, not runtime mutation policy.
+
+## Data Model Boundaries
+
+`RuntimeStore` should present data in durable-model terms rather than live-render terms.
+
+Core model groupings:
+
+- `RuntimeConfigModel`
+- `PersistentLayerStackModel`
+- `LayerStoredState`
+- `StoredParameterValue`
+- `StackPresetModel`
+- `ShaderPackageCatalog` or equivalent durable package registry view
+
+The exact C++ types may differ from these names, but the boundary should hold:
+
+- store models describe durable intent
+- snapshot models describe render consumption
+
+That means `RuntimeStore` should not expose render-optimized structures such as `RuntimeRenderState` directly as its primary interface.
+
+## Interface Shape
+
+The Phase 1 architecture doc already sketches the high-level interface. This section expands it.
+
+### Load / Save Interface
+
+Expected responsibilities:
+
+- `LoadConfig()`
+- `LoadPersistentState()`
+- `SavePersistentStateSnapshot(...)`
+- `LoadStackPreset(...)`
+- `SaveStackPreset(...)`
+- `GetStackPresetNames()`
+
+Design notes:
+
+- `Load*` operations should parse and normalize external file content into durable in-memory models.
+- `Save*` operations should serialize durable models without needing render or control subsystem context.
+- later debounce/background writing should wrap these operations, not redefine their ownership
+
+### Read Interface
+
+Expected responsibilities:
+
+- `GetRuntimeConfig()`
+- `GetStoredLayerStack()`
+- `FindStoredLayer(...)`
+- `GetShaderPackageCatalog()`
+- `GetStackPresetNames()`
+- `BuildPersistenceSnapshot()` or equivalent stable serialization input
+
+Design notes:
+
+- read APIs should support coordinator validation and snapshot building
+- read APIs should avoid exposing raw mutable internals across subsystem boundaries
+- stable read snapshots from the store are fine; render snapshots are still the snapshot provider's job
+
+### Write Interface
+
+Expected responsibilities:
+
+- `SetStoredLayerStack(...)`
+- `ReplaceStoredLayer(...)`
+- `SetStoredParameterValue(...)`
+- `SetStoredBypassState(...)`
+- `SetStoredShaderSelection(...)`
+- `ReplaceShaderPackageCatalog(...)`
+
+Design notes:
+
+- writes should assume the coordinator already decided the mutation is allowed
+- store APIs may still enforce structural invariants and shape correctness
+- writes should not contain ingress-specific policy like OSC smoothing or UI throttling
+
+### Normalization / Validation-Support Interface
+
+Expected responsibilities:
+
+- `NormalizeLoadedState(...)`
+- `EnsureStoredDefaults(...)`
+- `MakeSafePresetFileStem(...)`
+- package lookup helpers for parameter-definition queries
+
+Design notes:
+
+- lightweight structure and schema validation belongs here
+- policy validation belongs in the coordinator
+- render compatibility translation belongs in the snapshot provider
+
+## Concurrency Expectations
+
+`RuntimeStore` should be designed as a shared data authority, but not as the app's global lock for everything.
+
+Phase 1 design expectations:
+
+- coordinator-driven writes may still be synchronized internally
+- read APIs should be safe for coordinator and snapshot-provider use
+- render should not directly take a large mutable store lock in the target architecture
+
+This implies:
+
+- `RuntimeStore` may keep an internal mutex during migration
+- that mutex should protect durable models only
+- render-facing consumers should eventually read via `RuntimeSnapshotProvider`, not by reaching into the store
+
+One of the main goals here is reducing the current situation where `RuntimeHost` lock scope effectively mixes:
+
+- persistent state
+- status reporting
+- render-state caches
+- timing stats
+- reload flags
+
+`RuntimeStore` should sharply narrow that scope.
+
+## Dependency Rules
+
+Per the Phase 1 subsystem design, `RuntimeStore` should sit low in the dependency graph.
+
+Allowed inbound dependencies:
+
+- `RuntimeCoordinator -> RuntimeStore`
+- `RuntimeSnapshotProvider -> RuntimeStore`
+- temporary migration shims from `ControlServices` only where explicitly tolerated
+
+Allowed outbound dependencies:
+
+- file/serialization helpers
+- package manifest parsing helpers
+- pure utility types
+
+Not allowed:
+
+- `RuntimeStore -> RenderEngine`
+- `RuntimeStore -> VideoBackend`
+- `RuntimeStore -> ControlServices`
+- `RuntimeStore -> HealthTelemetry` for behavior control
+
+The store may emit errors or return result objects, but it should not coordinate the rest of the system directly.
+
+## Current Code Mapping
+
+Today, `RuntimeHost` contains most of the responsibilities that should move into `RuntimeStore`.
+
+Key current code paths:
+
+- config load:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1651)
+- persistent state load:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1748)
+- persistent state save:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1842)
+- preset save/load:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1286)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1304)
+- state serialization helpers:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:2061)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:2172)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:2268)
+- path and file helpers:
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:1988)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:2002)
+  - [RuntimeHost.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/runtime/RuntimeHost.cpp:2034)
+
+Durable-state mutation entrypoints that currently live on `RuntimeHost` but conceptually split between coordinator and store:
+
+- layer stack edits:
+  - `AddLayer`
+  - `RemoveLayer`
+  - `MoveLayer`
+  - `MoveLayerToIndex`
+- committed-state edits:
+  - `SetLayerBypass`
+  - `SetLayerShader`
+  - `UpdateLayerParameter`
+  - `ResetLayerParameters`
+
+The target split should be:
+
+- validation/policy/orchestration -> `RuntimeCoordinator`
+- durable state write application -> `RuntimeStore`
+
+Methods that should not move into `RuntimeStore` even though they currently live on `RuntimeHost`:
+
+- render-state building and caching:
+  - `GetLayerRenderStates`
+  - `TryRefreshCachedLayerStates`
+  - `BuildLayerRenderStatesLocked`
+- status/timing reporting:
+  - `SetSignalStatus`
+  - `SetPerformanceStats`
+  - `SetFramePacingStats`
+  - `AdvanceFrame`
+- live reload flags/polling shell:
+  - `PollFileChanges`
+  - `ManualReloadRequested`
+  - `ClearReloadRequest`
+
+Those belong under other target subsystems.
+
+## Proposed Internal Subcomponents
+
+`RuntimeStore` does not need to be one monolithic class forever. A practical internal shape would be:
+
+- `RuntimeConfigStore`
+  - runtime host config load/save and resolved paths
+- `PersistentLayerStore`
+  - durable layer stack and parameter values
+- `StackPresetStore`
+  - preset enumeration/load/save
+- `ShaderPackageCatalogStore`
+  - durable manifest/package metadata
+- `PersistenceWriter` helper
+  - synchronous at first, async/debounced later
+
+These can still be presented through one subsystem façade during migration.
+
+## Persistence Model
+
+The store should treat persistence as durable snapshot management, not incremental side-effect spraying.
+
+Target behavior:
+
+- in-memory durable models are updated first
+- serialization snapshots are built from those models
+- save requests persist a coherent snapshot
+
+This matters because the current code still calls `SavePersistentState()` directly from many mutation paths. That is one of the architectural pressure points already called out in [ARCHITECTURE_RESILIENCE_REVIEW.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/ARCHITECTURE_RESILIENCE_REVIEW.md).
+
+The Phase 1 design for `RuntimeStore` should therefore assume:
+
+- store ownership of serialization remains
+- immediate save-after-mutate is a migration detail, not the final behavioral contract
+
+By Phase 6, a background snapshot writer may sit underneath or beside this subsystem, but the durable model still belongs here.
+
+## Migration Plan From Current Code
+
+The safest migration path is to extract responsibilities by interface, not by big-bang rename.
+
+### Step 1: Introduce The `RuntimeStore` Name And Facade
+
+Create a façade interface that wraps the durable-data parts of `RuntimeHost`.
+
+Initial likely contents:
+
+- config load/save access
+- persistent layer-stack get/set access
+- preset load/save access
+- package catalog read access
+
+At this stage, `RuntimeHost` may still be the implementation behind the façade.
+
+### Step 2: Move Pure Persistence Helpers First
+
+Low-risk extractions:
+
+- path resolution helpers
+- file read/write helpers
+- preset enumeration and serialization helpers
+- persistent-state serialization/deserialization helpers
+
+These have relatively low coupling to GL and backend timing.
+
+### Step 3: Split Durable Models From Render Cache/Status Fields
+
+Move out or conceptually separate:
+
+- `mPersistentState`
+- runtime config fields
+- preset roots and runtime roots
+- package catalog/order metadata
+
+From fields that should stay elsewhere:
+
+- render-state dirty flags and caches
+- status/timing counters
+- reload flags
+
+This is one of the most important separations in the whole program.
+
+### Step 4: Route Durable Mutations Through Coordinator-Owned Policy
+
+Once the coordinator exists, `RuntimeStore` write calls should become lower-level and less policy-rich.
+
+Examples:
+
+- `SetStoredParameterValue(...)` rather than `ApplyOscTargetByControlKey(...)`
+- `ReplaceStoredLayerStack(...)` rather than `LoadStackPreset(...)` directly mutating every downstream concern
+
+### Step 5: Keep Render Off The Store
+
+As `RuntimeSnapshotProvider` arrives, render should stop reading store internals directly.
+
+That is the moment where `RuntimeStore` becomes a proper durable authority instead of a shared mutable app center.
+
+## Risks
+
+### 1. Recreating `RuntimeHost` Under A New Name
+
+The biggest risk is calling something `RuntimeStore` while leaving policy, status, and render-cache behavior attached.
+
+Guardrail:
+
+- only durable data and store hygiene belong here
+
+### 2. Letting Validation Drift Into Persistence
+
+Store-level shape validation is appropriate. High-level mutation policy is not.
+
+Risk examples:
+
+- store decides whether OSC should persist
+- store decides whether a layer reorder should trigger snapshot publication
+- store decides whether a reload is render-only or package-affecting
+
+Those are coordinator decisions.
+
+### 3. Overexposing Mutable Internals
+
+If callers keep direct mutable access to the underlying vectors/maps, the subsystem boundary will exist only on paper.
+
+Guardrail:
+
+- prefer controlled write methods and stable read models
+
+### 4. Coupling Package Metadata Too Tightly To Compile Outputs
+
+Package manifest and parameter-definition metadata belongs here. Compiled program state does not.
+
+Guardrail:
+
+- keep compile products and GPU artifacts out of the store
+
+### 5. Using The Store Lock As A Global Synchronization Shortcut
+
+This would recreate timing and contention issues in a new form.
+
+Guardrail:
+
+- store locking protects durable models only
+- render synchronization must happen through snapshots, not by sharing the store lock
+
+## Open Questions
+
+### 1. How Much Shader Package Data Should Live Here?
+
+Clear yes:
+
+- manifest metadata
+- parameter definitions
+- package discovery/order information
+
+Still open:
+
+- whether compile-ready transformed sources belong here or in a later build-focused subsystem
+
+Current recommendation:
+
+- keep only durable reference/package metadata here
+
+### 2. Should Committed Live State Be Co-Located With Persisted State?
+
+The Phase 1 parent doc leaves open whether committed live state stays in the store or is split with a live companion model owned by the coordinator.
+
+For `RuntimeStore`, the important rule is:
+
+- if a piece of state is part of the durable truth model, the store should own it
+- if it is transient or session-only, it should not be forced into the store just for convenience
+
+### 3. Should Preset Application Be A Store Operation Or A Coordinator Operation?
+
+The file load and preset parse clearly belong here.
+
+The policy question of how a loaded preset affects live state, snapshot publication, overlays, and notifications belongs in the coordinator.
+
+Current recommendation:
+
+- `RuntimeStore` loads preset content
+- `RuntimeCoordinator` decides how to apply it
+
+### 4. How Early Should Async Persistence Land?
+
+Phase 1 does not require it, but the store design should not block it.
+
+Current recommendation:
+
+- keep synchronous save semantics initially if needed
+- shape the interfaces so a background writer can be introduced without changing subsystem ownership
+
+## Success Criteria For This Subsystem
+
+`RuntimeStore` can be considered well-defined once the codebase can say, without ambiguity:
+
+- all durable runtime config and saved layer data has one authoritative home
+- stack presets are owned by that same durable-data subsystem
+- render does not depend on store internals directly
+- timing/status/reporting state is no longer mixed into the same subsystem
+- persistence ownership is clear even before async persistence is introduced
+
+## Short Version
+
+`RuntimeStore` is the subsystem that should answer:
+
+- what durable runtime data exists
+- what saved layer stack and parameters exist
+- what presets and package metadata exist
+- how that durable data is loaded and serialized
+
+It should not answer:
+
+- whether a mutation should happen
+- how rendering should consume state
+- how hardware pacing should work
+- what health warnings should be emitted
+
+If this boundary holds, later phases can safely split `RuntimeHost` without just recreating the same coupling under a different class name.

docs/subsystems/VideoBackend.md

@@ -0,0 +1,689 @@
+# VideoBackend Subsystem Design
+
+This note defines the target design for the `VideoBackend` subsystem introduced in [PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/docs/PHASE_1_SUBSYSTEM_BOUNDARIES_DESIGN.md).
+
+It focuses on input/output device lifecycle, pacing, buffering, and recovery policy for live video I/O. It does not redefine the whole app architecture. Its job is to make the backend boundary concrete enough that later phases can move current DeckLink and bridge code toward one clear ownership model.
+
+## Purpose
+
+`VideoBackend` is the hardware-facing timing subsystem.
+
+It owns:
+
+- video device discovery and capability inspection
+- input and output device configuration
+- input callback handling
+- output callback handling
+- buffer-pool ownership for device-facing frames
+- playout headroom policy
+- queueing and pacing policy between render and hardware
+- input signal presence tracking
+- backend lifecycle and degraded-state transitions
+
+It does not own:
+
+- GL contexts
+- frame composition
+- shader execution
+- persistence
+- control mutation policy
+- render snapshot publication
+
+The core rule is:
+
+- `RenderEngine` produces frames
+- `VideoBackend` moves those frames to and from hardware at the right cadence
+
+## Why This Subsystem Exists
+
+Today the boundary between render and hardware pacing is still too blurred.
+
+The main current pressure points are:
+
+- `OpenGLVideoIOBridge` still performs render-facing work inside the output completion callback:
+  - [OpenGLVideoIOBridge.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:83)
+- `DeckLinkSession` owns device setup, mutable output frame pools, and schedule timing in one class:
+  - [DeckLinkSession.h](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.h:13)
+  - [DeckLinkSession.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:289)
+- the output scheduler currently reacts to late and dropped frames with a fixed skip policy:
+  - [VideoPlayoutScheduler.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/VideoPlayoutScheduler.cpp:26)
+- the current output frame pool and preroll depth are not sourced from one policy object:
+  - `DeckLinkSession::ConfigureOutput()` creates `10` mutable output frames
+  - `kPrerollFrameCount` is currently `12`
+
+Those overlaps make latency, buffering, and recovery behavior harder to reason about.
+
+## Subsystem Responsibilities
+
+`VideoBackend` should own the following responsibilities explicitly.
+
+### 1. Device Discovery and Capability Reporting
+
+The subsystem should:
+
+- discover available input and output devices
+- choose the configured input/output pair
+- inspect mode support and pixel-format support
+- expose capability facts needed by higher layers
+
+Examples:
+
+- input present or absent
+- output present or absent
+- model name
+- keyer support
+- internal/external keying availability
+- supported pixel formats for the configured mode
+- input/output frame sizes
+
+This work is currently mostly in:
+
+- [DeckLinkSession.cpp](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:76)
+
+### 2. Input Lifecycle and Input Callback Handling
+
+The subsystem should:
+
+- configure input mode and pixel format
+- install and own the input callback delegate
+- start and stop capture streams
+- translate hardware input frames into backend-level input frame events
+- track signal-present versus no-input-source conditions
+
+It should not decide how uploaded textures are produced. That belongs to `RenderEngine`.
+
+The backend may expose input frames as:
+
+- borrowed CPU-accessible frame views
+- backend-managed input frame objects
+- typed input events containing signal state and frame payload metadata
+
+This work is currently split across:
+
+- [DeckLinkSession::ConfigureInput](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:221)
+- [CaptureDelegate::VideoInputFrameArrived](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkFrameTransfer.cpp:33)
+- [OpenGLVideoIOBridge::VideoFrameArrived](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:50)
+
+### 3. Output Lifecycle and Output Callback Handling
+
+The subsystem should:
+
+- configure output mode and pixel format
+- own the output frame pool
+- install and own the scheduled-frame completion callback
+- start scheduled playback
+- stop scheduled playback
+- account for completion results such as completed, late, dropped, and flushed
+
+It should not render the next frame in the callback path.
+
+This work is currently split across:
+
+- [DeckLinkSession::ConfigureOutput](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:273)
+- [DeckLinkSession::Start](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkSession.cpp:358)
+- [PlayoutDelegate::ScheduledFrameCompleted](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/videoio/decklink/DeckLinkFrameTransfer.cpp:79)
+
+### 4. Pacing and Scheduling Policy
+
+The subsystem should own:
+
+- target frame duration and timescale
+- schedule time generation
+- preroll policy
+- spare-buffer policy
+- queue headroom policy
+- late-frame and dropped-frame recovery policy
+
+This is not just a utility detail. It is one of the main timing responsibilities of the subsystem.
+
+The current `VideoPlayoutScheduler` is a useful seed, but it is too small and too implicit to represent the eventual backend policy by itself.
+
+### 5. Device-Facing Buffer Pools
+
+The subsystem should own all device-facing buffers that exist to satisfy the hardware API contract.
+
+Examples:
+
+- mutable output frames created through DeckLink
+- any staging buffers required by a future non-DeckLink backend
+- reusable CPU frame containers for hardware ingress/egress
+
+The goal is to make buffer depth and lifetime explicit and measurable.
+
+`RenderEngine` may own render surfaces and GPU readback resources. `VideoBackend` owns the buffers required to talk to the hardware or OS video I/O API.
+
+### 6. Backend Health and Degraded State
+
+The subsystem should publish operational state such as:
+
+- running normally
+- prerolling
+- temporarily late
+- dropping frames
+- no input signal
+- output stopped
+- failed to configure
+
+This state should be reported to `HealthTelemetry`, not hidden inside debug logs or modal dialog paths.
+
+## Boundary With Other Subsystems
+
+This subsystem must stay aligned with the Phase 1 dependency rules.
+
+Allowed directions:
+
+- `VideoBackend -> RenderEngine`
+- `VideoBackend -> HealthTelemetry`
+
+Not allowed in the target design:
+
+- `VideoBackend -> RuntimeStore`
+- `VideoBackend -> RuntimeCoordinator`
+- `VideoBackend -> ControlServices`
+
+The important operational boundary is:
+
+- `VideoBackend` may request or consume rendered output frames
+- it may not own frame composition policy
+
+That means:
+
+- no shader parameter validation here
+- no persistence decisions here
+- no direct mutation of runtime state here
+
+## State Owned by VideoBackend
+
+`VideoBackend` should own the following state categories.
+
+### Device Configuration State
+
+Examples:
+
+- selected device handles
+- configured input/output formats
+- negotiated pixel formats
+- keyer configuration
+- output model name
+- supported keying flags
+
+### Session Lifecycle State
+
+Examples:
+
+- discovered
+- configured
+- prerolling
+- running
+- degraded
+- stopping
+- stopped
+- failed
+
+### Input Runtime State
+
+Examples:
+
+- signal present or missing
+- last observed input format properties
+- input frame counters
+- input callback timestamps
+- queued capture frames awaiting render ingestion
+
+### Output Runtime State
+
+Examples:
+
+- output queue depth
+- scheduled frame index
+- completed frame index
+- late frame count
+- dropped frame count
+- spare buffer count
+- current headroom target
+
+### Backend-Owned Transient Buffers
+
+Examples:
+
+- output mutable frame pool
+- playout ring buffer entries
+- input frame handoff queue
+- staging buffers if required by the device API
+
+This is transient live state, not persisted state.
+
+## Target Lifecycle Model
+
+`VideoBackend` should eventually expose an explicit lifecycle state machine rather than relying on scattered imperative calls.
+
+Suggested states:
+
+1. `uninitialized`
+2. `discovering`
+3. `discovered`
+4. `configuring`
+5. `configured`
+6. `prerolling`
+7. `running`
+8. `degraded`
+9. `stopping`
+10. `stopped`
+11. `failed`
+
+Suggested transition rules:
+
+- `uninitialized -> discovering`
+- `discovering -> discovered | failed`
+- `discovered -> configuring | stopped`
+- `configuring -> configured | failed`
+- `configured -> prerolling | stopped`
+- `prerolling -> running | failed | stopping`
+- `running -> degraded | stopping | failed`
+- `degraded -> running | stopping | failed`
+- `stopping -> stopped`
+
+Why this matters:
+
+- startup failure reporting becomes more predictable
+- backend recovery can become policy-driven
+- telemetry can report backend state directly
+- later backends do not need to mimic DeckLink's exact imperative shape
+
+## Target Timing Model
+
+The long-term timing design should be producer/consumer playout.
+
+### Current Model
+
+Today the callback path effectively does this:
+
+1. DeckLink signals completion.
+2. The callback path asks for a new output buffer.
+3. The callback path enters the shared GL section.
+4. The callback path renders the next frame.
+5. The callback path reads it back.
+6. The callback path schedules the next hardware frame.
+
+That path is visible in:
+
+- [OpenGLVideoIOBridge::PlayoutFrameCompleted](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:83)
+
+This couples output timing directly to render work.
+
+### Target Model
+
+The target model should be:
+
+1. `RenderEngine` produces completed output frames at the configured cadence.
+2. `RenderEngine` places them into a bounded queue owned or mediated by `VideoBackend`.
+3. `VideoBackend` dequeues ready frames when the device needs them.
+4. hardware callbacks only:
+   - record completion results
+   - release or recycle buffers
+   - dequeue and schedule the next ready frame
+   - raise underrun or degraded-state signals if needed
+
+The timing rule becomes:
+
+- render is the producer
+- hardware output is the consumer
+
+This gives the app a clear place to manage:
+
+- target latency
+- playout headroom
+- stale-frame reuse
+- underrun behavior
+- spare buffer policy
+
+## Input Buffering and Pacing
+
+The input side needs a simpler but still explicit handoff model.
+
+Recommended target behavior:
+
+- hardware callbacks push input frames into a bounded ingress queue
+- `RenderEngine` pulls the newest useful input frame when preparing a render
+- if the ingress queue overflows, old frames are discarded according to policy
+
+Recommended default policy for live playout:
+
+- prefer recency over completeness
+- drop stale capture frames instead of blocking render or output
+
+The current "skip upload if the GL bridge is busy" behavior is directionally correct for live timing:
+
+- [OpenGLVideoIOBridge::VideoFrameArrived](/c:/Users/Aiden/Documents/GitHub/video-shader-toys/apps/LoopThroughWithOpenGLCompositing/gl/pipeline/OpenGLVideoIOBridge.cpp:57)
+
+But in the target architecture that decision should move out of GL lock acquisition and into an explicit backend-to-render handoff queue policy.
+
+Suggested input metrics:
+
+- input frames received
+- no-signal transitions
+- input queue depth
+- dropped input frames
+- oldest queued input age
+
+## Output Buffering and Headroom Policy
+
+Output buffering should be policy-driven from one source of truth.
+
+The target design should define a playout buffering policy object with at least:
+
+- target preroll depth
+- minimum spare device buffers
+- maximum queued rendered frames
+- allowed catch-up depth
+- underrun behavior
+
+Example policy fields:
+
+- `targetPrerollFrames`
+- `minSpareOutputBuffers`
+- `maxReadyFrames`
+- `maxCatchUpFrames`
+- `reuseLastFrameOnUnderrun`
+- `allowAdaptiveHeadroom`
+
+This replaces the current split between:
+
+- fixed mutable frame pool size in `DeckLinkSession::ConfigureOutput()`
+- fixed preroll count in `kPrerollFrameCount`
+- fixed skip-ahead recovery in `VideoPlayoutScheduler`
+
+## Underrun and Recovery Policy
+
+The backend should define explicit behavior for when no fresh frame is ready at schedule time.
+
+Candidate policies:
+
+1. Reuse the last completed rendered frame.
+2. Reuse the last scheduled output frame.
+3. Schedule a known black or degraded frame.
+4. Temporarily increase headroom if the system is repeatedly catching up.
+
+Which one is correct may differ by operating mode, but the choice should be explicit rather than incidental.
+
+Similarly, completion-result handling should become measured rather than fixed.
+
+The current scheduler does this:
+
+- late or dropped frame -> `mScheduledFrameIndex += 2`
+
+That is a useful emergency simplification, but not a durable backend contract.
+
+The target backend should instead track:
+
+- scheduled frame index
+- completed frame index
+- backlog depth
+- late streaks
+- dropped streaks
+- current operating headroom
+
+Then recovery can use measured lag, not a hardcoded skip.
+
+## Suggested Public Interface
+
+This is not a final class API. It describes the shape the subsystem should move toward.
+
+### Discovery and Configuration
+
+- `DiscoverDevices(...)`
+- `SelectFormats(...)`
+- `ConfigureInput(...)`
+- `ConfigureOutput(...)`
+- `GetCapabilities()`
+- `GetBackendState()`
+
+### Lifecycle
+
+- `StartCapture()`
+- `StartPlayout()`
+- `StopCapture()`
+- `StopPlayout()`
+- `Shutdown()`
+
+### Input Handoff
+
+- `PollInputFrame(...)` or `TryDequeueInputFrame(...)`
+- `ReportInputSignalState(...)`
+
+### Output Handoff
+
+- `QueueRenderedFrame(...)`
+- `TryDequeueReadyFrameForSchedule(...)`
+- `RecycleCompletedFrame(...)`
+
+### Timing and Recovery
+
+- `SetPlayoutPolicy(...)`
+- `AccountForCompletionResult(...)`
+- `BuildBackendTimingSnapshot()`
+
+### Health Reporting
+
+- `BuildBackendHealthSnapshot()`
+- `GetWarningState()`
+
+## Suggested Internal Components
+
+The subsystem will likely be easier to evolve if its responsibilities are split internally.
+
+Possible internal structure:
+
+### `VideoBackendSession`
+
+Owns:
+
+- high-level lifecycle state
+- configuration
+- input/output subcomponents
+- policy objects
+
+### `InputEndpoint`
+
+Owns:
+
+- input device callback registration
+- input frame queue
+- signal detection state
+
+### `OutputEndpoint`
+
+Owns:
+
+- output device callback registration
+- output device buffer pool
+- schedule/dequeue logic
+- preroll and output queue management
+
+### `PlayoutPolicy`
+
+Owns:
+
+- preroll target
+- spare buffer target
+- underrun behavior
+- catch-up and lateness rules
+
+### `BackendTimingState`
+
+Owns:
+
+- frame counters
+- queue depth snapshots
+- late/dropped streaks
+- observed intervals
+
+These can remain implementation details in Phase 1, but the design should leave room for them.
+
+## Mapping From Current Code
+
+### Current `DeckLinkSession`
+
+Should mostly migrate into:
+
+- `VideoBackend`
+  - device discovery
+  - input configuration
+  - output configuration
+  - keyer capability handling
+  - output frame pool ownership
+  - lifecycle state handling
+
+Candidates to stay backend-owned:
+
+- `DiscoverDevicesAndModes(...)`
+- `SelectPreferredFormats(...)`
+- `ConfigureInput(...)`
+- `ConfigureOutput(...)`
+- `Start()`
+- `Stop()`
+- `HandleVideoInputFrame(...)`
+- `HandlePlayoutFrameCompleted(...)`
+
+### Current `VideoPlayoutScheduler`
+
+Should likely become:
+
+- a backend-owned policy helper or timing component under `VideoBackend`
+
+It is still a backend concern, but it should be expanded beyond a single counter and fixed skip rule.
+
+### Current `OpenGLVideoIOBridge`
+
+Should split between:
+
+- `RenderEngine`
+  - input texture upload scheduling
+  - render submission
+  - readback or output-frame production
+- `VideoBackend`
+  - input ingress queue
+  - output callback and scheduling policy
+  - pacing stats
+
+The most important migration is:
+
+- remove render work from `PlayoutFrameCompleted()`
+
+### Current `RuntimeHost` Status Updates
+
+Frame pacing and signal status setters currently called from the bridge should ultimately be routed through:
+
+- `VideoBackend -> HealthTelemetry`
+
+rather than:
+
+- callback/bridge -> `RuntimeHost`
+
+## Migration Plan
+
+The migration should avoid a flag-day rewrite.
+
+### Step 1. Name the backend boundary explicitly
+
+Create a conceptual `VideoBackend` interface around the existing `VideoIODevice`/`DeckLinkSession` shape without moving all logic at once.
+
+### Step 2. Pull timing policy into backend-owned objects
+
+Move:
+
+- completion accounting
+- headroom configuration
+- frame-pool sizing
+- queue depth reporting
+
+behind explicit backend policy types.
+
+This can happen before changing the render thread model.
+
+### Step 3. Separate callback work from render work
+
+Change the output completion path so it stops rendering immediately in the callback chain.
+
+Intermediate step:
+
+- callback records completion and wakes a playout worker
+
+Target step:
+
+- callback only dequeues and schedules already-ready frames
+
+### Step 4. Move input handoff to a bounded queue
+
+Replace direct callback-to-GL upload behavior with:
+
+- backend-owned input queue
+- render-owned dequeue/upload policy
+
+### Step 5. Introduce explicit backend lifecycle states
+
+Start surfacing:
+
+- configured
+- prerolling
+- running
+- degraded
+- failed
+
+before changing all recovery behavior.
+
+### Step 6. Route backend health to `HealthTelemetry`
+
+Move debug-only warnings and ad hoc status strings toward structured counters and backend snapshots.
+
+## Risks
+
+### Latency Versus Stability Tradeoff
+
+Increasing headroom reduces deadline misses but increases end-to-end latency. The backend must make that tradeoff explicit and configurable enough for live use.
+
+### Hidden Coupling During Migration
+
+The current bridge still mixes backend and render concerns. Partial extraction can accidentally preserve the old coupling under new names if the callback path is not cleaned up deliberately.
+
+### Buffer Ownership Ambiguity
+
+If device-facing buffers and render-facing buffers are not separated clearly, lifetime bugs and timing regressions will remain easy to reintroduce.
+
+### Backend-Specific Assumptions
+
+The first target is still DeckLink-centric. The interface should avoid baking in assumptions that would make alternate backends awkward later.
+
+### Recovery Policy Complexity
+
+A more explicit backend model will surface choices that are currently hidden:
+
+- stale frame reuse
+- black-frame fallback
+- adaptive headroom
+- catch-up rules
+
+That is healthy, but it will require deliberate policy decisions.
+
+## Open Questions
+
+- Should `VideoBackend` own both input and output under one session object long-term, or should it expose distinct input and output endpoints under a shared shell?
+- Should queue ownership sit fully inside `VideoBackend`, or should there be a narrow shared frame-exchange interface between `RenderEngine` and `VideoBackend`?
+- What should the default underrun policy be for live playout: reuse last frame, reuse newest completed frame, or output black?
+- Should adaptive headroom be automatic, operator-configurable, or both?
+- At what point should preview timing be treated as a backend concern versus a render concern? The Phase 1 direction says preview is subordinate to render, not owned by the backend, but later timing work may still require explicit coordination.
+- How much of the current `VideoIOState` belongs inside `VideoBackend` versus `HealthTelemetry` snapshots?
+
+## Short Version
+
+`VideoBackend` should become the subsystem that owns hardware timing, device lifecycle, buffer policy, and playout recovery.
+
+It should not render frames.
+
+The target direction is:
+
+- `RenderEngine` produces frames ahead of need
+- `VideoBackend` consumes and schedules them
+- callbacks become lightweight control-plane events
+- headroom, queue depth, and recovery become explicit backend policy
+- hardware health is reported structurally instead of being inferred from scattered logs and bridge behavior