chore(release): 1.1.0

- playout: run-scoped R2 manifest URIs (candidate a rewrite via rewriteManifestToRun)
- tests: playlist_rewrite_test.go (rewrite + publish integration + slate guard)
- docs: STREAMING, cloudflare-workers-setup, architecture (incl. Level-2 diagram)
- release housekeeping: TODO->DONE, CHANGELOG 1.1.0, version bump

docs/architecture/README.md

@@ -156,11 +156,12 @@ graph TD
 graph TB
     subgraph "Cloudflare Edge"
         CF[CDN + WAF<br/>Cache Rules]
-        R2[R2 Bucket<br/>media + HLS]
-        WORKERS[Workers<br/>SPA hosting]
+        R2["R2 Bucket<br/>media + HLS<br/>hls/r-{runID}/… run-scoped"]
+        MEDIA[linearvoid-media Worker<br/>R2-bound · media.linearvoid.tv]
+        WORKERS[linearvoid-frontend Worker<br/>SPA hosting]
     end
 
-    subgraph "Docker Host (Hetzner CX22)"
+    subgraph "Docker Host"
         NGINX[nginx<br/>:80/:443<br/>proxy + auth]
         CHAT[chat service<br/>:3000<br/>Go + gorilla/websocket]
         PLAYOUT[playout service<br/>:8081<br/>Go + FFmpeg]
@@ -173,13 +174,14 @@ graph TB
         ADMIN[Admin Browser<br/>SPA + uploads]
     end
 
-    VIEWER -->|HTTPS| CF
-    VIEWER -->|WSS| NGINX
+    VIEWER -->|HTTPS SPA| CF
+    VIEWER -->|WSS Chat| NGINX
+    VIEWER -->|HTTPS /hls| MEDIA
     ADMIN -->|HTTPS| CF
     CF --> NGINX
+    MEDIA --> R2
     NGINX --> CHAT
     NGINX --> PLAYOUT
-    NGINX -->|/hls/*| R2
     CHAT --> REDIS
     CHAT --> DB
     PLAYOUT --> R2
@@ -189,7 +191,8 @@ graph TB
 **Playout Service** (`backend/playout/src/playlist.go`)
 
 - Role: continuous HLS encoding loop via FFmpeg concat demuxer.
-- Input: `data/playlist/playlist.txt` (ordered MP4 paths); Output: HLS segments (`.m4s`, `.ts`) + live `.m3u8` to `data/hls/`, mirrored to R2.
+- Input: `data/playlist/playlist.txt` (ordered MP4 paths); Output: HLS segments (`.m4s`, `.ts`) + live `.m3u8` to `data/hls/`, mirrored to R2 run-scoped under `hls/r-{runID}/…`.
+- Run-scoped manifest: before publishing the live `hls/playlist.m3u8`, `publishManifest` rewrites bare media URIs to the current run folder (`rewriteManifestToRun`), so manifest → segment links resolve on `media.linearvoid.tv`. See [`STREAMING.md`](../STREAMING.md).
 - Resilience: restart counter (>5/60s → slate); Prometheus on 8081.
 - Validation: ffprobe gate (codec/fps/resolution/keyframe); `-validate` mode checks playlist without running.
 - Seamless looping: resets HLS only when playlist fingerprint (SHA-256) changes, crash/slate recovery, or first run; else continues via `-start_number`.
@@ -267,7 +270,7 @@ graph TB
 
 1. Admin adds normalized MP4 to R2 + updates playlist.
 2. Playout worker (FFmpeg concat loop) reads next file, packages HLS segments (2s).
-3. Segments uploaded to R2 with unique immutable names; live `.m3u8` updated.
+3. Segments uploaded to R2 with unique immutable, run-scoped names (`hls/r-{runID}/…`); the live `.m3u8` is published referencing those run-prefixed URIs (see `STREAMING.md`).
 4. Viewer loads SPA → requests manifest → hls.js follows current edge.
 5. Cloudflare serves `.m4s`/`.ts` from nearest edge cache (origin hit once per POP/region).
 6. Parallel WebSocket to chat service for synchronized interaction.
@@ -400,7 +403,7 @@ _Cache rules baseline_: `.ts`/`.m4s` Cache Everything, long TTL, immutable; `.m3
 
 _Edge security/controls_: enforce HTTPS/WSS + redirect HTTP; WAF baseline; rate limits on abusive patterns (auth/admin); minimize origin exposure.
 
-_Worker & header policy_: the `linearvoid-media` Worker ([`infrastructure/cloudflare/`](../../infrastructure/cloudflare/), R2-bound) owns `media.linearvoid.tv` and enforces immutable caching for segments, short TTL for live manifests, plus HLS CORS/Range; the `linearvoid-frontend` Worker ([`frontend/wrangler.toml`](../../frontend/wrangler.toml)) serves the static SPA on `linearvoid.tv`. Automated deploys: `workers-deploy.yml` (SPA) and `workers-media-deploy.yml` (media).
+_Worker & header policy_: the `linearvoid-media` Worker ([`infrastructure/cloudflare/`](../../infrastructure/cloudflare/), R2-bound) owns `media.linearvoid.tv` and enforces immutable caching for segments, short TTL for live manifests, plus HLS CORS/Range; it is a faithful path→R2 mapper and does **not** rewrite manifest URIs at serve time (playout rewrites them to run-scoped paths at publish — see [`STREAMING.md`](../STREAMING.md)). The `linearvoid-frontend` Worker ([`frontend/wrangler.toml`](../../frontend/wrangler.toml)) serves the static SPA on `linearvoid.tv`. Automated deploys: `workers-deploy.yml` (SPA) and `workers-media-deploy.yml` (media). Ops detail: [`cloudflare-workers-setup.md`](../operations/cloudflare-workers-setup.md).
 
 _Operations & validation_: verify cache status progression (MISS→HIT), manifest freshness under active playout; track hit ratio, request/error rates, ToS/cost posture.