fix(mobile): send file attachments on queued follow-ups

The previous commit filtered files out of onQueueFollowUp and called it a
queue limitation. That was wrong, and worse than it looked.

Pylon's follow-up command already takes the same attachment union as
thread.turn.start (orchestration.ts), its own comment says the server
normalizer branches on `"dataUrl" in attachment` for both, and web passes
identical attachments to followUpInputQueue and startTurn. Files were
always supported; the filter was a fix for a type error dressed up as a
design decision.

The consequence was silent data loss on an ordinary path, not an edge case:
the composer's send button routes to handleQueueFollowUp whenever a session
is running, so attaching a file mid-turn and pressing send filtered it out
of the payload, and because clearComposerDraftContent ran without
deferAttachmentCleanup the sweep then deleted the local copy. Composer
cleared, message queued without the file, no warning, bytes gone.

Now mirrors onSendMessage and use-project-actions: enforce the attachment
cap, validate against the server's advertised limits, upload through
prepareTurnAttachments, defer cleanup until the queue call succeeds, release
minted uploads and restore with allowOverflow on failure.

Also switches the four file glyphs to `tintColorClassName` rather than
upstream's hardcoded #a3a3a3. An earlier attempt subscribed to the theme
directly and tripped no-mobile-uniwind-theme-escape-hatches; AppSymbol
exists precisely so callers do not do that.

Author: rynfar

apps/mobile/src/components/ComposerAttachmentStrip.tsx

@@ -75,7 +75,12 @@ export function ComposerAttachmentStrip(props: ComposerAttachmentStripProps) {
                   borderRadius: radius,
                 }}
               >
-                <SymbolView name="doc.text" size={22} tintColor="#a3a3a3" type="monochrome" />
+                <SymbolView
+                  name="doc.text"
+                  size={22}
+                  tintColorClassName="accent-icon-subtle"
+                  type="monochrome"
+                />
                 <Text className="w-full text-center text-2xs text-foreground" numberOfLines={1}>
                   {attachment.name}
                 </Text>

apps/mobile/src/features/threads/ThreadComposer.tsx

@@ -418,9 +418,6 @@ const ContextWindowIndicator = memo(function ContextWindowIndicator(props: {
 export const ThreadComposer = memo(function ThreadComposer(props: ThreadComposerProps) {
   const navigation = useNavigation();
   const foregroundColor = useUniwindTheme()["--color-foreground"];
-  // Upstream hardcodes #a3a3a3 here; Pylon reads the theme so the file glyph
-  // tracks light/dark like every other subtle icon.
-  const iconSubtleColor = useUniwindTheme()["--color-icon-subtle"];
   const bodyText = useScaledTextRole("body");
   const fallbackInputRef = useRef<ComposerEditorHandle>(null);
   const inputRef = props.editorRef ?? fallbackInputRef;
@@ -1595,7 +1592,7 @@ export const ThreadComposer = memo(function ThreadComposer(props: ThreadComposer
                     <SymbolView
                       name="doc.text"
                       size={15}
-                      tintColor={iconSubtleColor}
+                      tintColorClassName="accent-icon-subtle"
                       type="monochrome"
                     />
                   </View>

apps/mobile/src/features/threads/ThreadFeed.tsx

@@ -322,7 +322,12 @@ function MessageAttachmentFile(props: {
       {opening ? (
         <ActivityIndicator size="small" />
       ) : (
-        <SymbolView name="doc.text" size={16} tintColor="#a3a3a3" type="monochrome" />
+        <SymbolView
+          name="doc.text"
+          size={16}
+          tintColorClassName="accent-icon-subtle"
+          type="monochrome"
+        />
       )}
       <Text className="min-w-0 flex-1 text-sm text-foreground" numberOfLines={1}>
         {attachment.name}
@@ -341,7 +346,12 @@ function MessageAttachmentFile(props: {
 function MessageAttachmentUnknown(props: { readonly name: string }) {
   return (
     <View className="flex-row items-center gap-2 py-1">
-      <SymbolView name="doc.text" size={16} tintColor="#a3a3a3" type="monochrome" />
+      <SymbolView
+        name="doc.text"
+        size={16}
+        tintColorClassName="accent-icon-subtle"
+        type="monochrome"
+      />
       <Text className="min-w-0 flex-1 text-sm text-foreground" numberOfLines={1}>
         {props.name}
       </Text>

apps/mobile/src/state/use-thread-composer-state.ts

@@ -58,12 +58,12 @@ import { deriveActiveWorkStartedAt } from "@t3tools/shared/orchestrationTiming";
 import { makeQueuedMessageMetadata } from "../lib/commandMetadata";
 import {
   convertPastedImagesToAttachments,
-  toUploadChatImageAttachments,
   pasteComposerClipboard,
   pickComposerFiles,
   pickComposerImages,
 } from "../lib/composerImages";
 import type { DraftComposerImageAttachment } from "../lib/composerImages";
+import { prepareTurnAttachments, validateDraftFileAttachments } from "../lib/attachmentUpload";
 import { scopedThreadKey } from "../lib/scopedEntities";
 import {
   resolveModelSelectionRuntimeMode,
@@ -72,6 +72,7 @@ import {
 import { copyTextWithHaptic } from "../lib/copyTextWithHaptic";
 import { buildThreadFeed } from "../lib/threadActivity";
 import { appAtomRegistry } from "../state/atom-registry";
+import { serverEnvironment } from "../state/server";
 import {
   appendComposerDraftAttachments,
   appendComposerDraftText,
@@ -680,9 +681,55 @@ export function useThreadComposerState() {
     const attachments = draft.attachments;
     if (text.length === 0 && attachments.length === 0) return null;
 
+    if (attachments.length > PROVIDER_SEND_TURN_MAX_ATTACHMENTS) {
+      Alert.alert(
+        "Too many attachments",
+        `Remove attachments until there are at most ${PROVIDER_SEND_TURN_MAX_ATTACHMENTS}.`,
+      );
+      return null;
+    }
+    const attachmentError = validateDraftFileAttachments({
+      attachments,
+      serverConfig: appAtomRegistry.get(
+        serverEnvironment.configValueAtom(selectedThreadShell.environmentId),
+      ),
+    });
+    if (attachmentError !== null) {
+      setPendingConnectionError(attachmentError);
+      return null;
+    }
+
     const metadata = makeQueuedMessageMetadata();
     const messageId = MessageId.make(metadata.messageId);
-    clearComposerDraftContent(threadKey);
+    // The follow-up command takes the same attachment union as thread.turn.start
+    // and the server normalizer branches on `"dataUrl" in attachment` for both,
+    // so files belong here exactly as they do on a normal send. Upload them
+    // first; sending the draft form would queue broken references.
+    let prepared: Awaited<ReturnType<typeof prepareTurnAttachments>>;
+    try {
+      prepared = await prepareTurnAttachments({
+        environmentId: selectedThreadShell.environmentId,
+        attachments,
+        persistUploadedReferences: async (draftAttachments) => {
+          await mergeComposerDraftContent(threadKey, { text, attachments: draftAttachments });
+          return "persisted";
+        },
+      });
+    } catch (error) {
+      setPendingConnectionError(
+        error instanceof Error ? error.message : "An attachment could not upload.",
+      );
+      return null;
+    }
+    if (prepared.status !== "ready") {
+      setPendingConnectionError("The attachments are no longer available.");
+      return null;
+    }
+
+    // Defer cleanup: the sweep would otherwise delete the local bytes while the
+    // queue call is still in flight, leaving a failure restore pointing at
+    // files that no longer exist.
+    clearComposerDraftContent(threadKey, { deferAttachmentCleanup: true });
     const result = await followUpInputQueue({
       environmentId: selectedThreadShell.environmentId,
       input: {
@@ -692,20 +739,18 @@ export function useThreadComposerState() {
           messageId,
           role: "user",
           text,
-          // Pylon's follow-up queue has no upload step, so it can only carry
-          // inline images. This mirrors what projectThreadStartTurn does when
-          // no upload has run. Files are filtered rather than sent as broken
-          // references; queuing a follow-up with a file is a known gap.
-          attachments: toUploadChatImageAttachments(
-            attachments.filter((attachment) => attachment.type === "image"),
-          ),
+          attachments: prepared.attachments,
         },
         createdAt: metadata.createdAt,
       },
     });
     if (result._tag === "Failure") {
+      prepared.releaseUploads();
       await mergeComposerDraftContent(threadKey, { text, attachments: [] });
-      appendComposerDraftAttachments(threadKey, attachments);
+      // Uncapped append, matching onSendMessage: the capped merge path would
+      // silently drop this message's files if the user attached more while the
+      // call was in flight.
+      appendComposerDraftAttachments(threadKey, attachments, { allowOverflow: true });
       if (!isAtomCommandInterrupted(result)) {
         const error = squashAtomCommandFailure(result);
         setPendingConnectionError(
@@ -714,6 +759,8 @@ export function useThreadComposerState() {
       }
       return null;
     }
+    // Queued successfully, so the message owns the bytes now.
+    scheduleUnusedComposerAttachmentCleanup(attachments);
     return messageId;
   }, [
     followUpInputQueue,