lib

commit 832523ed3652cec1dc9e657c84ffa22666375918
parent 6c8294d6ac4639d0ded0815237909adce3093412
Author: triesap <tyson@radroots.org>
Date:   Sun,  9 Aug 2026 18:37:24 +0000

merge: reconcile actionable media draft state

- Preserve service hardening and mobile runtime histories.
- Derive aggregate media state from persisted prerequisites.
- Keep verified and failed drafts editable until queueing.
- Retain real-I/O regression coverage and orphan evidence.

Diffstat:
M
crates/mobile_core/src/runtime/product_surface/outbox.rs
 | 
26
+++++---------------------
M
crates/mobile_ffi/tests/local_mvp_real_io.rs
 | 
2
++

2 files changed, 7 insertions(+), 21 deletions(-)
diff --git a/crates/mobile_core/src/runtime/product_surface/outbox.rs b/crates/mobile_core/src/runtime/product_surface/outbox.rs
@@ -884,15 +884,7 @@ impl RadrootsRuntime {
             media.failure_code = None;
         }
         media.validate()?;
-        let next_stage = match stage {
-            Phase1MediaStage::Pending | Phase1MediaStage::Preparing => {
-                AuthoredDraftStage::MediaPreparing
-            }
-            Phase1MediaStage::Uploading
-            | Phase1MediaStage::Verified
-            | Phase1MediaStage::Failed
-            | Phase1MediaStage::Orphaned => AuthoredDraftStage::MediaUploading,
-        };
+        let next_stage = draft_stage_for_media(&payload.media);
         let next = head
             .successor(payload.encode()?, next_stage, None, updated_at_unix_ms)
             .map_err(|_| Phase1DraftError::RevisionConflict)?;
@@ -946,13 +938,9 @@ impl RadrootsRuntime {
         media.verified_at_unix_ms = Some(receipt.verified_at_unix_ms());
         media.orphan = None;
         media.validate()?;
+        let next_stage = draft_stage_for_media(&payload.media);
         let next = head
-            .successor(
-                payload.encode()?,
-                AuthoredDraftStage::MediaUploading,
-                None,
-                updated_at_unix_ms,
-            )
+            .successor(payload.encode()?, next_stage, None, updated_at_unix_ms)
             .map_err(|_| Phase1DraftError::RevisionConflict)?;
         let receipt = storage
             .append_authored_draft(next, Some(expected))
@@ -1016,13 +1004,9 @@ impl RadrootsRuntime {
             recorded_at_unix_ms: updated_at_unix_ms,
         });
         media.validate()?;
+        let next_stage = draft_stage_for_media(&payload.media);
         let next = head
-            .successor(
-                payload.encode()?,
-                AuthoredDraftStage::MediaUploading,
-                None,
-                updated_at_unix_ms,
-            )
+            .successor(payload.encode()?, next_stage, None, updated_at_unix_ms)
             .map_err(|_| Phase1DraftError::RevisionConflict)?;
         let receipt = storage
             .append_authored_draft(next, Some(expected))
diff --git a/crates/mobile_ffi/tests/local_mvp_real_io.rs b/crates/mobile_ffi/tests/local_mvp_real_io.rs
@@ -233,6 +233,7 @@ async fn public_runtime_completes_the_local_mvp_against_real_protocol_services()
                 .await
                 .expect("upload and re-fetch exact media");
             assert_eq!(uploaded.media[0].stage, FfiMediaStage::Verified);
+            assert_eq!(uploaded.state, FfiOutboxState::MediaPreparing);
             let evidence = publisher
                 .sdk_blossom_evidence()
                 .expect("Blossom evidence")
@@ -818,6 +819,7 @@ async fn prove_corrupted_media_fails(
         .await
         .expect("durable corrupt-media status");
     assert_eq!(failed.media[0].stage, FfiMediaStage::Failed);
+    assert_eq!(failed.state, FfiOutboxState::MediaPreparing);
     assert!(failed.media[0].possible_orphan);
     let evidence = runtime
         .sdk_blossom_evidence()