feat: back up the phone's photos to a group, once a day on Wi-FiHEADmain

The Android application sends the photos taken on the phone to one folder of
one group chosen by the member (docs/MESHBAY_DESIGN.md §9.12). The phone lists
MediaStore, keeps a ledger of what was sent and hands each photo's bytes to the
page by an opaque token on the packaged origin; the page decides when a run is
due and uploads through the existing path, one photo at a time under a slot.

- Once a day from the last finished run, on an unmetered network only;
  "Back up now" asks first on mobile data. Leaving Wi-Fi stops after the file
  in flight.
- Photos already on the phone are sent by default, newest first, under
  <folder>/YYYY/MM; edits are sent beside the original as -edited-<date>.
- Additive by construction: nothing is ever deleted, renamed or replaced on
  the node, and a photo deleted on the node is not sent again.
- A confirmation names the group, owner, members, folder and size when the
  destination or starting point changes; a lasting refusal (disk full, folder
  read-only or gone, no longer a member) is said once and retried a day later.
- No ACCESS_MEDIA_LOCATION, so the platform redacts photo locations.
- A dataSync foreground service keeps a run going with the screen off.

HEIC/HEIF photos are sent but not shown in Photos yet (§15.2).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 16 insertions, 0 deletions

diff --git a/packages/meshbay-android/app/src/main/assets/bridge/meshbay-bridge.js b/packages/meshbay-android/app/src/main/assets/bridge/meshbay-bridge.js
index 82e556d..edfdb11 100644
--- a/packages/meshbay-android/app/src/main/assets/bridge/meshbay-bridge.js
+++ b/packages/meshbay-android/app/src/main/assets/bridge/meshbay-bridge.js
@@ -197,6 +197,22 @@
         call('push:remember', subscription, account, secret, since),
     },
 
+    // Photo backup (§9.12): the phone lists its photos, keeps what was sent,
+    // and hands each photo's bytes over at /photosync/<token> on this origin.
+    // The page decides when and does the sending. Phone-only, like `push`.
+    photoSync: {
+      status: () => call('photosync:status'),
+      permit: () => call('photosync:permit'),
+      albums: () => call('photosync:albums'),
+      configure: (settings) => call('photosync:configure', settings || null),
+      estimate: (settings) => call('photosync:estimate', settings),
+      plan: () => call('photosync:plan'),
+      sent: (token, dir, name) => call('photosync:sent', token, dir, name),
+      completed: () => call('photosync:completed'),
+      failed: (code, text) => call('photosync:failed', code, text),
+      keepAlive: (on, text) => call('photosync:keep-alive', on === true, text || ''),
+    },
+
     // Where downloads go, chosen once. A display name comes back, never a URI.
     folder: {
       choose: () => call('folder:choose'),