Harden PTT audio and the 1.7.1 release (#1423)

Centralize PTT and voice audio-session ownership, harden courier/bridge/outbox delivery and recovery, correct location and delivery-state races, add privacy/release metadata, and ship reproducible universal Arti slices with Release CI coverage. Validated by the full iOS suite, repeated audio/fragment/performance regressions, BitFoundation tests, strict lint and dead-code analysis, universal iOS Release builds, and iOS/macOS archives.
2026-07-26 08:05:21 +00:00 · 2026-07-10 14:04:09 +02:00
parent b205a55523
commit 820c933958
91 changed files with 8381 additions and 1083 deletions
@@ -229,15 +229,17 @@ final class Conversation: ObservableObject, Identifiable {
        // sending < sent < carried < delivered < read. A late `.sent` write
        // (e.g. the optimistic stamp after routing) must not clobber the
        // `.carried` the router already set when it handed a copy to a
-        // courier/bridge, nor a `.delivered`/`.read` ack. Same for the
+        // courier/bridge, nor a `.delivered`/`.read` ack. A late asynchronous
+        // failure is weaker than a confirmed recipient receipt too, so it may
+        // not replace `.delivered`/`.read`. Same for the
        // `.sending` stamp a pre-handshake resend emits asynchronously: it
        // can land after the message already reached `.sent`, and "Sent" was
        // already truthful. (`.failed` → `.sending` stays allowed so a real
        // failure retry is visible.)
        switch (current, new) {
-        case (.read, .delivered), (.read, .carried), (.read, .sent), (.read, .sending):
+        case (.read, .delivered), (.read, .carried), (.read, .sent), (.read, .sending), (.read, .failed):
            return true
-        case (.delivered, .carried), (.delivered, .sent), (.delivered, .sending):
+        case (.delivered, .carried), (.delivered, .sent), (.delivered, .sending), (.delivered, .failed):
            return true
        case (.carried, .sent), (.carried, .sending):
            return true