Let a device hand a file to the server for hashing and validation

server/server.js

@@ -42,7 +42,7 @@ import { createHash }    from 'node:crypto';
 import { brotliCompressSync, constants as zlibConstants } from 'node:zlib';
 import { initDb, upsertUser, recordVideoAccess, getUserData, createProfile, getProfile, saveProfile, createSharedPlaylist, getSharedPlaylist, queueInboxPlaylist, listInbox, deleteInboxItem, countInbox,
          getMedia, upsertMedia, deleteMedia, listMedia, listMediaLru, touchMedia, mediaStats } from './db.js';
-import { createMediaCache, HIGH, LOW } from './media-cache.js';
+import { createMediaCache, HIGH, LOW, validateMedia } from './media-cache.js';
 import * as notesDb from './db.js';
 import { registerNoteRoutes, parseLrc, sanitizeLyrics } from './notes.js';
 import { createRemoteHub } from './remote.js';
@@ -52,6 +52,7 @@ import { admitFile } from './p2p-admit.js';
 import { P2P } from './p2p-config.js';
 import * as p2pDb from './p2p-db.js';
 import { registerP2pRoutes } from './p2p-routes.js';
+import { registerIntakeRoutes } from './p2p-intake.js';
 import { createP2pHub, holdersPayload } from './p2p-hub.js';
 import { sha256Range } from './hash.js';
 import * as innertube from './innertube.js';
@@ -1981,6 +1982,15 @@ app.get('/api/p2p/holders', p2p.gate, async (c) => {
   return c.json(payload, 200, { 'Cache-Control': 'no-store' });
 });
 
+// Device → server intake: the server hashes, validates (and scans when
+// P2P_MALWARE_SCAN=1) before a cid is admitted. docs/p2p-architecture.md flow 7.
+const intake = registerIntakeRoutes(app, {
+  cfg: P2P, p2pDb, gate: p2p.gate, requireDevice: p2p.requireDevice, admitFile,
+  validateMedia: (path, expected, opts) => validateMedia(path, expected,
+    { ...opts, ffmpeg: FFMPEG, ffprobe: process.env.FFPROBE_PATH || 'ffprobe' }),
+  adopt: (videoId, path, info) => media.adoptFile(videoId, path, info),
+});
+
 // ============================================================================
 // GET /sw.js — serve the service worker with BUILD_TAG injected
 //