docs: record live Twitch concept milestone

2026-08-17 12:03:37 -07:00
parent df984690ce
commit 9ebd1ea283
1 changed files with 70 additions and 0 deletions
@@ -0,0 +1,70 @@
 _model: devlog-entry
 ---
 schema_version: 1
 ---
 title: Twungeon reaches a live Twitch concept milestone
 ---
 date: 2026-08-17
 ---
 author: Codex and Christopher Chambers
 ---
 summary: Twungeon moved from a local proof of concept to a live Twitch-connected deployment with broadcaster OAuth, Extension identity sharing, Channel Points resurrection, a focused viewer control panel, and an authenticated spawn button.
 ---
 tags: implementation, concept validation, deployment, Twitch, Twitch Extension, OAuth, Channel Points, Twurple, Cloudflare, testing
 ---
 source_commit: df984690cedf84fc58d3eb6e2000d2df567a8d5d
 ---
 body:
 Twungeon is now running as a live Twitch-connected concept on the
 [Labyricorn Twitch channel](https://www.twitch.tv/labyricorn). The deployed
 service connects Twurple chat and EventSub to the broadcaster account, verifies
 Twitch Extension identity on the server, and serves the Extension through the
 public Cloudflare tunnel at `https://twungeon.labyricorn.com`.
 The authentication path required more than supplying a static token. Twungeon
 now provides a confidential OAuth authorization-code flow with state
 validation, checks that Twitch returned the configured broadcaster and required
 scopes, stores access and refresh credentials outside the repository with
 restricted permissions, and persists refreshed credentials atomically. The
 Extension exchanges its signed Twitch JWT for a short-lived Twungeon session;
 the shared Extension secret remains server-side.
 The first setup attempt exposed several integration mismatches. The original
 Twitch application had been registered as a public client before the callback
 endpoint existed, so live server authorization required a new confidential
 application and the exact HTTPS `/oauth/callback` redirect. Enabling identity
 linking also made a privacy notice mandatory before the Extension version could
 advance. Both requirements are now reflected in the implementation and operator
 documentation.
 The first live Extension view rendered the complete broadcast game instead of
 a compact control surface. The shared frontend now switches to a controller-only
 layout at `/extension`, while `/` remains the full game view used by the stream.
 Cloudflare also continued serving an older JavaScript bundle during testing;
 static responses now use `Cache-Control: no-store`, and the Extension loads a
 versioned script URL to force the current controller code.
 Spawning revealed one final usability gap. Chat `!spawn` was not sufficient for
 the broadcaster because a channel owner cannot follow their own channel, and
 the Extension offered no direct alternative. The control panel now includes a
 **Spawn character** button backed by an authenticated server endpoint. It uses
 the verified Twitch viewer ID, applies the normal follower rule, and treats the
 configured broadcaster as eligible. The same eligibility correction also
 allows broadcaster chat spawning.
 The current deployment reports healthy with the Twitch adapter ready. Viewers
 can authorize their identity, spawn from the Extension, and use the movement,
 attack, heal, and pass controls for their own character. The configured custom
 Channel Points reward drives resurrection through EventSub. The final automated
 run passed linting, strict type checking, 24 domain tests, 10 integration and
 multi-viewer tests, and the production build.
 This establishes the live interaction concept, but it is not a claim that every
 MVP acceptance gate is complete. Broader real-viewer, multi-viewer, usability,
 fault-injection, soak, and independent-operator evidence remains to be recorded.
 Game state is still intentionally in memory, so restarting the service starts a
 new run.
 The live Twitch integration and spawn-control milestone are recorded in
 [commit `df984690cedf84fc58d3eb6e2000d2df567a8d5d`](https://git.labyricorn.com/Labyricorn/Twungeon/commit/df984690cedf84fc58d3eb6e2000d2df567a8d5d).