4grayandClaude Fable 5 58a10d5b55 docs(playback): state the exact override release points ...

Codex round-5 P2 flagged that the media 'ended' event does not clear the
scoped override while the player stays mounted. That is deliberate, not a
gap: a mounted player still owns the session — replay or a seek into an
unbuffered range must keep working against a gated stream, and clearing on
'ended' would 403 exactly the streams this PR fixes. The credentials only
ever travel to the exact origin that issued them, and every dismount path
(channel/source change, player close/destroy, radio close, playerless
selection) releases them. The security doc and the release note now say
precisely that instead of the ambiguous "cleared when playback ends".

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-02 10:08:37 +02:00

..

architecture

docs(playback): state the exact override release points

2026-08-02 10:08:37 +02:00

superpowers

feat(downloads): redesign download manager (#1313)

2026-08-01 18:09:31 +02:00