feat: Phase 1 video upload support (Blossom-compliant-ish)

crates/sprout-media/Cargo.toml

@@ -25,6 +25,11 @@ image = { version = "0.25", default-features = false, features = ["jpeg", "png",
 blurhash = "0.2"
 imagesize = "0.14"
 bytes = "1"
+mp4 = "0.14"
+tempfile = "3"
+tokio-util = { version = "0.7", features = ["io"] }
+futures-util = "0.3"
+futures-core = "0.3"
 
 [dev-dependencies]
 tokio = { workspace = true, features = ["test-util"] }

crates/sprout-media/src/auth.rs

@@ -15,6 +15,7 @@ use crate::error::MediaError;
 pub fn verify_blossom_auth_event(
     auth_event: &nostr::Event,
     server_domain: Option<&str>,
+    max_age_secs: u64,
 ) -> Result<(), MediaError> {
     // 1. Verify Schnorr signature
     auth_event
@@ -84,8 +85,7 @@ pub fn verify_blossom_auth_event(
     if created > now + 5 {
         return Err(MediaError::TimestampOutOfWindow);
     }
-    const MAX_AGE_SECS: u64 = 600; // 10 minutes
-    if now > created + MAX_AGE_SECS {
+    if now > created + max_age_secs {
         return Err(MediaError::TimestampOutOfWindow);
     }
 
@@ -117,8 +117,9 @@ pub fn verify_blossom_upload_auth(
     auth_event: &nostr::Event,
     sha256: &str,
     server_domain: Option<&str>,
+    max_age_secs: u64,
 ) -> Result<(), MediaError> {
-    verify_blossom_auth_event(auth_event, server_domain)?;
+    verify_blossom_auth_event(auth_event, server_domain, max_age_secs)?;
 
     // At least one x tag must match the body sha256 (BUD-11 §6)
     let has_matching_x = auth_event
@@ -156,15 +157,15 @@ mod tests {
         let keys = Keys::generate();
         let sha256 = "a".repeat(64);
         let event = build_valid_auth(&keys, &sha256);
-        assert!(verify_blossom_upload_auth(&event, &sha256, None).is_ok());
+        assert!(verify_blossom_upload_auth(&event, &sha256, None, 600).is_ok());
     }
 
     #[test]
     fn test_verify_auth_event_valid() {
         let keys = Keys::generate();
         let sha256 = "a".repeat(64);
         let event = build_valid_auth(&keys, &sha256);
-        assert!(verify_blossom_auth_event(&event, None).is_ok());
+        assert!(verify_blossom_auth_event(&event, None, 600).is_ok());
     }
 
     #[test]
@@ -174,7 +175,7 @@ mod tests {
         let event = build_valid_auth(&keys, &sha256);
         let wrong_hash = "b".repeat(64);
         assert!(matches!(
-            verify_blossom_upload_auth(&event, &wrong_hash, None),
+            verify_blossom_upload_auth(&event, &wrong_hash, None, 600),
             Err(MediaError::HashMismatch)
         ));
     }
@@ -194,7 +195,7 @@ mod tests {
             .sign_with_keys(&keys)
             .unwrap();
         assert!(matches!(
-            verify_blossom_upload_auth(&event, &sha256, None),
+            verify_blossom_upload_auth(&event, &sha256, None, 600),
             Err(MediaError::InvalidAuthKind)
         ));
     }
@@ -216,7 +217,7 @@ mod tests {
             .sign_with_keys(&keys)
             .unwrap();
         // Should pass because at least one x tag matches
-        assert!(verify_blossom_upload_auth(&event, &sha256, None).is_ok());
+        assert!(verify_blossom_upload_auth(&event, &sha256, None, 600).is_ok());
     }
 
     #[test]
@@ -236,14 +237,16 @@ mod tests {
             .unwrap();
         // Should fail — server tag present but doesn't match our domain
         assert!(matches!(
-            verify_blossom_upload_auth(&event, &sha256, Some("sprout.example.com")),
+            verify_blossom_upload_auth(&event, &sha256, Some("sprout.example.com"), 600),
             Err(MediaError::ServerMismatch)
         ));
         // Should pass when our domain matches
-        assert!(verify_blossom_upload_auth(&event, &sha256, Some("other.example.com")).is_ok());
+        assert!(
+            verify_blossom_upload_auth(&event, &sha256, Some("other.example.com"), 600).is_ok()
+        );
         // Should fail when server_domain is None — fail closed
         assert!(matches!(
-            verify_blossom_upload_auth(&event, &sha256, None),
+            verify_blossom_upload_auth(&event, &sha256, None, 600),
             Err(MediaError::ServerMismatch)
         ));
     }
@@ -254,7 +257,7 @@ mod tests {
         let sha256 = "a".repeat(64);
         let event = build_valid_auth(&keys, &sha256);
         // No server tags → passes regardless of our domain
-        assert!(verify_blossom_upload_auth(&event, &sha256, Some("any.domain.com")).is_ok());
+        assert!(verify_blossom_upload_auth(&event, &sha256, Some("any.domain.com"), 600).is_ok());
     }
 
     #[test]
@@ -273,7 +276,7 @@ mod tests {
             .sign_with_keys(&keys)
             .unwrap();
         assert!(matches!(
-            verify_blossom_auth_event(&event, None),
+            verify_blossom_auth_event(&event, None, 600),
             Err(MediaError::InvalidAuthEvent)
         ));
     }

crates/sprout-media/src/config.rs

@@ -1,5 +1,9 @@
 //! Media storage configuration.
 
+fn default_max_video_bytes() -> u64 {
+    524_288_000 // 500 MB
+}
+
 /// Configuration for media storage (S3/MinIO).
 #[derive(Debug, Clone, serde::Deserialize)]
 pub struct MediaConfig {
@@ -15,6 +19,9 @@ pub struct MediaConfig {
     pub max_image_bytes: u64,
     /// Maximum upload size for animated GIFs (bytes). Default: 10 MB.
     pub max_gif_bytes: u64,
+    /// Maximum upload size for video files (bytes). Default: 500 MB.
+    #[serde(default = "default_max_video_bytes")]
+    pub max_video_bytes: u64,
     /// Public base URL for media URLs in BlobDescriptor (must include `/media` path).
     pub public_base_url: String,
     /// Server authority for BUD-11 server tag validation.
@@ -46,6 +53,9 @@ impl MediaConfig {
         if self.max_gif_bytes == 0 || self.max_gif_bytes > self.max_image_bytes {
             return Err("max_gif_bytes must be > 0 and <= max_image_bytes".to_string());
         }
+        if self.max_video_bytes == 0 {
+            return Err("max_video_bytes must be > 0".to_string());
+        }
         Ok(())
     }
 }

crates/sprout-media/src/error.rs

@@ -54,6 +54,27 @@ pub enum MediaError {
     TokenRevoked,
     #[error("pubkey mismatch")]
     PubkeyMismatch,
+    /// Video codec is not H.264 (avc1).
+    #[error("unsupported video codec: only H.264 (avc1) is accepted")]
+    WrongCodec,
+    /// Video duration exceeds the 600-second limit.
+    #[error("video too long: duration exceeds 600 seconds")]
+    DurationTooLong,
+    /// Video resolution exceeds 3840×2160.
+    #[error("video resolution too high: maximum is 3840x2160")]
+    ResolutionTooHigh,
+    /// MP4 moov atom appears after mdat — not fast-start.
+    #[error("moov atom not at front of file (not fast-start)")]
+    MoovNotAtFront,
+    /// Container is not MP4 (e.g. MOV, MKV).
+    #[error("unsupported container: only MP4 is accepted")]
+    UnsupportedContainer,
+    /// MP4 metadata could not be parsed.
+    #[error("invalid video data")]
+    InvalidVideo,
+    /// I/O error during streaming upload.
+    #[error("io error: {0}")]
+    Io(String),
 }
 
 impl From<image::ImageError> for MediaError {
@@ -109,10 +130,16 @@ impl IntoResponse for MediaError {
                 )
             }
             Self::InsufficientScope => (StatusCode::FORBIDDEN, self.to_string()),
+            Self::UnsupportedContainer => (StatusCode::UNSUPPORTED_MEDIA_TYPE, self.to_string()),
+            Self::WrongCodec
+            | Self::DurationTooLong
+            | Self::ResolutionTooHigh
+            | Self::MoovNotAtFront
+            | Self::InvalidVideo => (StatusCode::BAD_REQUEST, self.to_string()),
             Self::UnknownContentType | Self::InvalidImage => {
                 (StatusCode::BAD_REQUEST, self.to_string())
             }
-            Self::StorageError(_) | Self::Internal => {
+            Self::Io(_) | Self::StorageError(_) | Self::Internal => {
                 tracing::error!(error = %self, "media storage error");
                 (StatusCode::INTERNAL_SERVER_ERROR, "internal error".into())
             }

crates/sprout-media/src/lib.rs

@@ -13,6 +13,7 @@ pub mod validation;
 
 pub use config::MediaConfig;
 pub use error::MediaError;
-pub use storage::{BlobHeadMeta, BlobMeta, MediaStorage};
+pub use storage::{BlobHeadMeta, BlobMeta, ByteStream, MediaStorage};
 pub use types::BlobDescriptor;
-pub use upload::process_upload;
+pub use upload::{process_upload, process_video_upload};
+pub use validation::{validate_video_file, VideoMeta};