feat: back up the phone's photos to a group, once a day on Wi-FiHEADmain

The Android application sends the photos taken on the phone to one folder of
one group chosen by the member (docs/MESHBAY_DESIGN.md §9.12). The phone lists
MediaStore, keeps a ledger of what was sent and hands each photo's bytes to the
page by an opaque token on the packaged origin; the page decides when a run is
due and uploads through the existing path, one photo at a time under a slot.

- Once a day from the last finished run, on an unmetered network only;
  "Back up now" asks first on mobile data. Leaving Wi-Fi stops after the file
  in flight.
- Photos already on the phone are sent by default, newest first, under
  <folder>/YYYY/MM; edits are sent beside the original as -edited-<date>.
- Additive by construction: nothing is ever deleted, renamed or replaced on
  the node, and a photo deleted on the node is not sent again.
- A confirmation names the group, owner, members, folder and size when the
  destination or starting point changes; a lasting refusal (disk full, folder
  read-only or gone, no longer a member) is said once and retried a day later.
- No ACCESS_MEDIA_LOCATION, so the platform redacts photo locations.
- A dataSync foreground service keeps a run going with the screen off.

HEIC/HEIF photos are sent but not shown in Photos yet (§15.2).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

1 files changed, 8 insertions, 5 deletions

diff --git a/packages/meshbay-hub/tests/test_android_shell.py b/packages/meshbay-hub/tests/test_android_shell.py
index 129732c..5262aae 100644
--- a/packages/meshbay-hub/tests/test_android_shell.py
+++ b/packages/meshbay-hub/tests/test_android_shell.py
@@ -135,14 +135,17 @@ def test_the_shim_offers_desktop_channels_and_native_answers_each():
     preload = set(re.findall(r"ipcRenderer\.invoke\('([\w:-]+)'", preload_js))
     native = set()
     for path in (SRC / "bridge" / "Channels.kt", SRC / "bridge" / "KeyChannels.kt",
-                 SRC / "cast" / "CastChannels.kt", SRC / "notify" / "PushChannels.kt"):
+                 SRC / "cast" / "CastChannels.kt", SRC / "notify" / "PushChannels.kt",
+                 SRC / "photos" / "PhotoChannels.kt"):
         native |= set(re.findall(r'^\s*"([\w:-]+)" ->', _read(path), flags=re.M))
     shim = _shim_channels()
     assert shim, "no channel found in the shim"
-    # A phone has a push distributor to talk to and a desktop does not; that
-    # family is the one the desktop lacks rather than the one it shares.
-    phone_only = {c for c in shim if c.startswith("push:")}
-    assert phone_only, "the push channels are gone from the shim"
+    # A phone has a push distributor to talk to and a camera roll to back up,
+    # and a desktop has neither; those families are the ones the desktop lacks
+    # rather than the ones it shares.
+    phone_only = {c for c in shim if c.startswith(("push:", "photosync:"))}
+    assert any(c.startswith("push:") for c in phone_only), "the push channels are gone"
+    assert any(c.startswith("photosync:") for c in phone_only), "the backup channels are gone"
     assert shim - phone_only <= preload, f"channels the desktop does not have: {shim - preload}"
     assert shim == native, f"shim and native disagree: {shim ^ native}"