feat(chat): take photos with an in-app camera and edit attachments before sending - #6820

A rotation stops the chat activity. ChatViewModel.onStop then stopped the
MediaRecorder, while the locked and in-progress state of the recording stayed.
The screen still showed a running recording and a truncated file was sent.

The view model now keeps the recorder running when the stopping activity is
changing its configuration. It reads this from the lifecycle owner: ON_STOP
reaches the observer before the body of Activity.onStop runs (API 29+), so a
flag set by the activity in onStop would come too late.
The recorder is still stopped when the user leaves the chat.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

A short tap on the record button switches between voice and video mode. The
mode is stored in AppPreferences and shown by the button icon and a snackbar
hint. The result is a regular video attachment.

In video mode holding the button records with CameraX (front camera, 720p
with fallback, about 2.5 Mbit/s, at most 120 s, then it stops and is sent).
Sliding left cancels, sliding up locks. The gestures, the lock state, the
timer and the locked recording view are shared with the voice recording. The
preview is shown above the input and the camera can be switched during the
recording. An unfinished recording is cancelled and the camera released when
the chat is paused. Too short recordings show a hint, camera errors a
message. The finished mp4 goes through the regular file upload.

Refs nextcloud#6812

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

… popup

The record button used to start a recording on the first touch, so a short
tap that should switch the mode started a recording first. Recording now
starts only when the button is held. A tap shows the record hint as a popup
above the button instead of a snackbar, placed in the window of the button
and kept above it after layout changes.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

The activity is recreated on rotation while the video recorder belonged to
it: onPause cancelled the recording and deleted its file, and binding the
camera to the next activity made the CameraX recorder configure itself in a
state where that is not allowed.

- The video recorder lives in ChatViewModel like the voice recorder. The
  activity attaches its preview and callback, and the recorder lets go of
  them when the activity is destroyed. A result that arrives without an
  activity is delivered to the next one.
- The camera is bound to a lifecycle of the recorder itself, not to the one
  of the activity, so it stays bound while the activity is recreated.
- A new activity picks up the recording and locks it when it was held, so the
  timer, stop, send and cancel are shown.
- The recording is cancelled when the user leaves the chat, not on a
  configuration change.
- A recording cut off by the camera is not lost but shown in the attachment
  preview.
- The video is recorded in the rotation of the sensor.
- A recording is never stopped while a switched camera settles.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

The container of the video recording preview did not consume touches, so
taps on it reached the chat below. Make it consume them and hide it from
TalkBack, where it is only decoration.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

Show recent photos and videos from MediaStore in a 3-column grid with a live
camera tile and multi-select, and keep every former menu entry in a bar below
with unchanged visibility rules. Selected media open the existing attachment
preview with caption. Supports Android 14 partial media access.

Removes AttachmentDialog and dialog_attachment.xml.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

READ_MEDIA_VISUAL_USER_SELECTED turns off the Android 14 compatibility mode,
so isFilesPermissionGranted() must accept the partial grant, otherwise voice
and video messages, camera photos, local files and share-to-Talk ask for
permissions again.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

Add a full screen CameraX capture screen (shutter, front/back lens, flash
off/auto/on, close) behind the TakePhotoInApp result contract. The photo is
returned right after the shutter, without a confirmation step of its own,
and goes to the attachment preview. The camera tile, the camera action of the
attachment sheet and the photo button of the preview use it. The system
ACTION_IMAGE_CAPTURE path is removed; video capture is unchanged.

The capture screen asks CameraX for the full 4:3 resolution explicitly, ignores
a second shutter tap while a photo is taken and keeps the controls on the
device body when the device is rotated. rotationForDeviceOrientation() is
shared with the video message recorder.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

Rework the pre-send attachment preview: the photo fills the screen with the
caption floating over it, a compact bottom panel holds the SD/HD switch and
View-only choice, and a round send button replaces the inline one.

- a tick mark per file excludes it from sending (at least one stays)
- "add more" menu next to the caption: gallery, photo, video
- crop and rotate through the bundled uCrop (setMaxBitmapSize(4096), so uCrop
  does not downscale the picture to the screen size); the result replaces the
  file at the same position and is what gets sent
- brush drawing on a Compose canvas, burned into a full-resolution copy
- the preview result is delivered through the fragment manager, so a send
  after the activity was recreated still uploads the files
- the original image size is shown in display orientation
- selection, uri replacement, drawing geometry and file ownership are pure
  functions covered by unit tests

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

A button at the top edge of the capture screen toggles ImageCapture between
CAPTURE_MODE_MINIMIZE_LATENCY (default, fast) and CAPTURE_MODE_MAXIMIZE_QUALITY.
The choice is kept in AppPreferences (camera_capture_mode). Each saved photo
logs "capture mode=... took=... ms" under the PhotoCamera tag to compare modes.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

…alized it

Send or delete of a locked video recording cleared the lock and the
in-progress state at once, while CameraX was still finalizing the file. A new
recording started in that window was silently dropped in beginRecording().
For video the state is now released in onVideoRecordingFinished(), which
CameraX reaches for every outcome (send, cancel, error, too short). Audio, and
a video recorder which is already idle, are still cleared at once.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

…rded frame

The locked video recording preview was a fixed 180x240dp box floating over the
message bubbles, squashed to about 2:1 in landscape. Now a scrim dims the chat
pane (it blocks touches and is hidden from TalkBack), and the preview is centered
in it in the aspect of the recorded frame, fitted with margins, at most 75% of
the width and 480dp on the longest side. The placement is a pure function
(videoPreviewPlacement) with unit tests; it is recomputed when the pane changes
size and when the recorder learns the frame aspect from CameraX.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

…entation, hide chat from TalkBack

- Center by Gravity.CENTER and change only width and height: the margin
  comparison never settled in RTL and re-laid out the chat every frame.
- The frame aspect is turned into screen coordinates by the difference of the
  recording and the display rotation (screenFrameAspect), so the frame matches
  the picture with auto-rotate off and after a turn during the recording.
- While recording, the siblings of the scrim are hidden from TalkBack and get
  their previous values back afterwards.
- The preview size is recalculated after a camera switch.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

In video mode the locked recording panel is one row: delete, red dot in a
progress ring of the 120 s limit, timer, send. The voice panel is unchanged.
The preview keeps a smaller gap on a short area.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

- Hide the whole recording indicator from TalkBack, so the progress ring
  does not announce its percentage every second.
- Relative padding of the timer, so the gap stays between dot and timer in RTL.
- No inset around the progress ring, so it fills its 24dp.
- The ring scale is set in code only (PROGRESS_MAX).

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

…t by the effective state

requestReadFilesPermissions() did not request READ_MEDIA_VISUAL_USER_SELECTED
on Android 14+, although the manifest declares it, and the result handler
looked only at grantResults[0]. With "selected photos" the first permission is
denied, so a partial access showed a false refusal.

The request is now the set of the attachment sheet (mediaPermissionsToRequest)
plus READ_MEDIA_AUDIO from Android 13 on, as before. The result allows the file
picker if any requested permission was granted or the effective access
(permissionUtil.isFilesPermissionGranted()) is given: before Android 10 the
granted READ permission differs from the WRITE one that check looks at.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

setTargetRotation() dropped a rotation which arrived before start() had built the ImageCapture, so a later photo used
the display rotation. The latest rotation is now stored and applied to every ImageCapture that is built.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5

Two edits in the same millisecond got the same path, so the second result replaced nothing and the old file was
deleted. The output is now reserved with createNewFile() and gets a numeric suffix when the name is taken.

Signed-off-by: Krainov Gleb <krajnov.g@kontentplus.ru>
Assisted-by: Claude-Code:claude-opus-5-5