jackandClaude Opus 4.8 cc6e2bdad4 Actually delete legacy incoming media on explicit delete and /clear ...

Explicit deletion of LEGACY (non-stable-ID) incoming media left the
decrypted payload on disk indefinitely, waiting for 100MB oldest-first
quota cleanup. Restore real deletion safely with the machinery this PR
built: BLEIncomingFileStore.removeLegacyIncomingFile unlinks under the
payload-coordination lock only when the path is not pending delivery,
not held by a deletion reservation, and not owned by a stable receipt
or journal entry; otherwise the file keeps the leave-for-quota
fallback. The view model routes per-bubble deletes and /clear through
the gated unlink once no bubble in any conversation references the
basename.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-07-26 13:44:10 +02:00

..

MockBLEBus.swift

Remove dead code found by full Periphery audit; add scan config + advisory CI (#1410)

2026-07-08 11:24:19 +02:00

MockBLEService.swift

Remove dead code found by full Periphery audit; add scan config + advisory CI (#1410)

2026-07-08 11:24:19 +02:00

MockIdentityManager.swift

Encrypt private media before BLE fragmentation (#1434)

2026-07-26 12:17:22 +02:00

MockKeychain.swift

Make panic wipe deterministic and device-bound (#1431)

2026-07-26 10:28:50 +02:00

MockTransport.swift

Actually delete legacy incoming media on explicit delete and /clear

2026-07-26 13:44:10 +02:00