Add movie fusion packages with locked media, ZIP export, and batch forge UI.

Paired video mode encrypts movies, uses runner-only lock hints, bundles README plus artifacts per title, and supports batch forging with progress.

server/internal/builder/fusion_upload_test.go

@@ -9,7 +9,7 @@ import (
 	"testing"
 )
 
-func TestSaveUploadedPrepCreatesPrepsDir(t *testing.T) {
+func TestSaveUploadedFusionPayloadCreatesPrepsDir(t *testing.T) {
 	dataDir := t.TempDir()
 	h := &Handler{dataDir: dataDir}
 
@@ -42,16 +42,35 @@ func TestSaveUploadedPrepCreatesPrepsDir(t *testing.T) {
 	}
 	defer f.Close()
 
-	path, cleanup, err := h.saveUploadedPrep(f, fileHeaders[0])
+	path, cleanup, err := h.saveUploadedFusionPayload(f, fileHeaders[0])
 	if err != nil {
 		t.Fatal(err)
 	}
 	defer cleanup()
 
 	if _, err := os.Stat(path); err != nil {
-		t.Fatalf("prep not saved: %v", err)
+		t.Fatalf("payload not saved: %v", err)
 	}
 	if _, err := os.Stat(filepath.Join(dataDir, "preps")); err != nil {
 		t.Fatalf("preps dir not created: %v", err)
 	}
 }
+
+func TestSaveUploadedFusionPayloadRejectsBadExt(t *testing.T) {
+	h := &Handler{dataDir: t.TempDir()}
+	body := &bytes.Buffer{}
+	w := multipart.NewWriter(body)
+	partHeader := make(textproto.MIMEHeader)
+	partHeader.Set("Content-Disposition", `form-data; name="prep_exe"; filename="bad.txt"`)
+	part, _ := w.CreatePart(partHeader)
+	_, _ = part.Write([]byte("x"))
+	w.Close()
+	r := multipart.NewReader(body, w.Boundary())
+	form, _ := r.ReadForm(10 << 20)
+	f, _ := form.File["prep_exe"][0].Open()
+	defer f.Close()
+	_, _, err := h.saveUploadedFusionPayload(f, form.File["prep_exe"][0])
+	if err == nil {
+		t.Fatal("expected error for .txt upload")
+	}
+}