Somewhere to put everything people upload.

import { storage, db } from 'hatchable';
import crypto from 'node:crypto';

export const methods = ['POST'];
export const access = 'member';

export default async function (req, res) {
  // multipart posts arrive already parsed:
  // { field, filename, contentType, buffer }
  const file = (req.files || []).find(
    f => f.field === 'photo'
  );
  if (!file) return res.status(400).json({ error: 'No file.' });
  if (file.buffer.length > 10 * 1024 * 1024) {
    return res.status(413).json({ error: 'Max 10 MB.' });
  }

  const ext = file.filename.split('.').pop().toLowerCase();
  const key = `photos/${req.member.id}/${crypto.randomUUID()}.${ext}`;
  await storage.put(key, file.buffer, file.contentType);

  // store the KEY, never the URL
  await db.query(
    'INSERT INTO photos (member_id, storage_key) VALUES ($1, $2)',
    [req.member.id, key]
  );
  res.json({ ok: true });
}

import { storage, db } from 'hatchable';

export const access = 'member';

export default async function (req, res) {
  const { rows } = await db.query(
    `SELECT id, storage_key
       FROM photos
      WHERE member_id = $1
      ORDER BY id DESC
      LIMIT $2`,
    [req.member.id, 50]
  );

  // the key is permanent. the link is minted here,
  // fresh on every render, and lives about an hour.
  const photos = await Promise.all(
    rows.map(async r => ({
      id: r.id,
      url: await storage.url(r.storage_key),
    }))
  );

  res.json({ photos });
}