[eugene-mux]

Summary

• integrate inspection, planning, conversion, generated-output validation, fallback, and transport startup into DirectUpload
• replace lock-based inspection and preparation lifecycle coordination with actors and an ordered async command boundary
• preserve completion-versus-cancellation arbitration and attempt-scoped stale-cancellation protection
• add storage preflight and owned temporary-output cleanup
• require explicit conversion intent and probe real source decodability before planning conversion
• keep AVFoundation sample transfer isolated and serialize reader cancellation with sample consumption

Impact

Eligible inputs can now pass through, convert with the planned codec/HDR behavior, or fall back to the original upload according to the existing confirmation handler contract. Generated output is re-inspected and validated before transport. Cancellation cannot advance a stale attempt or delete files outside the configured temporary-output provider.

---

Note

High Risk
Changes the core upload preparation path, concurrency model, and media I/O/cancellation behavior; incorrect lifecycle or validation could upload wrong files or leak/delete temp outputs.

Overview
DirectUpload preparation is reworked around Standard Input planning instead of separate rescale-only and non-standard conversion branches. After inspection, the SDK probes device/source capabilities, runs StandardInputPlanner, then either uploads the original, converts with an explicit StandardInputConversion, or fails into the existing nonStandardInputHandler fallback path.

Conversion always receives a non-optional conversion plan; generated files are re-inspected and validated with StandardInputOutputValidator (including new timeline facts from StandardInputTimelineInspector) before transport. Temporary storage preflight reserves space and owned standardized outputs are deleted on cancel, validation failure, or transport failure.

Concurrency moves from locks to actors for inspection operations/registry and preparation lifecycle, plus an ordered DirectUploadLifecycleCommandQueue and DirectUploadTransportCommitCoordinator so start/cancel/commit stay serialized and URL de-duplication stays atomic. AVFoundationUploadInputInspector and sample/timeline readers are async, with reader cancellation coordinated on the consuming task rather than concurrent cancelReading().

^{Reviewed by Cursor Bugbot for commit c47e2ff. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 41af308. Configure here.}