feat(media): add reference-aware S3 image delivery

app/api/admin/media/[id]/complete/route.ts

@@ -0,0 +1,29 @@
+import * as z from "zod";
+
+import { requireAdmin } from "@/lib/auth/server";
+import { completePendingMedia } from "@/lib/media/repository";
+
+export async function POST(
+  _request: Request,
+  context: { params: Promise<{ id: string }> },
+) {
+  await requireAdmin();
+  const { id } = await context.params;
+  if (!z.string().uuid().safeParse(id).success) {
+    return Response.json({ error: "invalid-id" }, { status: 400 });
+  }
+  const result = await completePendingMedia(id);
+  if (result.status === "ready") {
+    return Response.json({
+      media: {
+        id: result.media.id,
+        fileName: result.media.fileName,
+        mimeType: result.media.mimeType,
+        byteSize: result.media.byteSize,
+        url: `/media/${result.media.id}`,
+      },
+    });
+  }
+  const status = result.status === "not-found" ? 404 : result.status === "missing" ? 409 : 422;
+  return Response.json({ error: result.status }, { status });
+}

app/api/admin/media/[id]/route.ts

@@ -0,0 +1,19 @@
+import * as z from "zod";
+
+import { requireAdmin } from "@/lib/auth/server";
+import { discardUnreferencedMedia } from "@/lib/media/repository";
+
+export async function DELETE(
+  _request: Request,
+  context: { params: Promise<{ id: string }> },
+) {
+  await requireAdmin();
+  const { id } = await context.params;
+  if (!z.string().uuid().safeParse(id).success) {
+    return Response.json({ error: "invalid-id" }, { status: 400 });
+  }
+  const deleted = await discardUnreferencedMedia(id);
+  return deleted
+    ? new Response(null, { status: 204 })
+    : Response.json({ error: "media-is-referenced-or-missing" }, { status: 409 });
+}

app/api/admin/media/presign/route.ts

@@ -0,0 +1,32 @@
+import { requireAdmin } from "@/lib/auth/server";
+import { createPendingMedia } from "@/lib/media/repository";
+import { mediaUploadSchema } from "@/lib/media/validation";
+
+export async function POST(request: Request) {
+  const admin = await requireAdmin();
+  let input: unknown;
+  try {
+    input = await request.json();
+  } catch {
+    return Response.json({ error: "invalid-json" }, { status: 400 });
+  }
+  const parsed = mediaUploadSchema.safeParse(input);
+  if (!parsed.success) {
+    return Response.json(
+      { error: "invalid-media", issues: parsed.error.issues.map((issue) => issue.message) },
+      { status: 400 },
+    );
+  }
+  try {
+    const upload = await createPendingMedia(parsed.data, admin.user.id);
+    return Response.json({
+      mediaId: upload.id,
+      uploadUrl: upload.uploadUrl,
+      method: "PUT",
+      headers: { "Content-Type": parsed.data.mimeType },
+      expiresIn: upload.expiresIn,
+    });
+  } catch {
+    return Response.json({ error: "storage-unavailable" }, { status: 503 });
+  }
+}