trixy-linux-client/docs/architecture.md

Client boundary

The Linux client is a Svelte/Tauri control surface for trixie-server. It renders server-owned state and sends explicit user actions through the shared versioned HTTP/WebSocket boundary.

The client never stores Twitch refresh tokens or the administrator password, calls Twitch directly, executes plugin code, or treats local UI state as authoritative. Local overlay drafts and display preferences are recoverable presentation data only; the server remains authoritative for publication, authorization, Twitch state, and durable history.