MAI CALL - step 6

packages/api/package.json

@@ -16,6 +16,7 @@
   },
   "dependencies": {
     "@repo/db": "workspace:*",
+    "@repo/storage": "workspace:*",
     "@trpc/server": "^11.0.0",
     "pino": "^9.5.0",
     "superjson": "^2.2.2",

packages/api/src/routers/_app.ts

@@ -2,11 +2,13 @@ import { router } from '../trpc';
 import { pingRouter } from './ping';
 import { workstationRouter } from './workstation';
 import { userRouter } from './user';
+import { storageRouter } from './storage';
 
 export const appRouter = router({
   ping: pingRouter,
   workstation: workstationRouter,
   user: userRouter,
+  storage: storageRouter,
 });
 
 export type AppRouter = typeof appRouter;

packages/api/src/routers/storage.ts

@@ -0,0 +1,45 @@
+import { randomUUID } from 'node:crypto';
+import { makeStorage } from '@repo/storage';
+import { z } from 'zod';
+import { protectedProcedure, router } from '../trpc';
+
+const CONTENT_TYPES = ['image/jpeg', 'image/png', 'image/webp'] as const;
+const EXT_MAP: Record<(typeof CONTENT_TYPES)[number], string> = {
+  'image/jpeg': 'jpg',
+  'image/png': 'png',
+  'image/webp': 'webp',
+};
+
+const photoKeySchema = z
+  .string()
+  .regex(/^tenants\/[a-z0-9-]+\/maintenance\/[a-z0-9-]+\.(jpg|jpeg|png|webp)$/);
+
+export const storageRouter = router({
+  signPhotoUpload: protectedProcedure
+    .input(
+      z.object({
+        contentType: z.enum(CONTENT_TYPES),
+        byteSize: z.number().int().min(1).max(10 * 1024 * 1024),
+      }),
+    )
+    .mutation(async ({ ctx, input }) => {
+      const ext = EXT_MAP[input.contentType];
+      const photoKey = `tenants/${ctx.tenantId}/maintenance/${randomUUID()}.${ext}`;
+      const storage = makeStorage();
+      const { url: uploadUrl, expiresAt } = await storage.signPut(
+        photoKey,
+        input.contentType,
+        input.byteSize,
+        300, // 5 min
+      );
+      return { uploadUrl, photoKey, expiresAt };
+    }),
+
+  signPhotoDownload: protectedProcedure
+    .input(z.object({ photoKey: photoKeySchema }))
+    .query(async ({ input }) => {
+      const storage = makeStorage();
+      const { url, expiresAt } = await storage.signGet(input.photoKey, 60); // 1 min
+      return { url, expiresAt };
+    }),
+});