Photo storage and delivery for photo-sharing apps

import { Dreep, DreepLimitError } from "dreep";

const dreep = new Dreep({
  apiKey: process.env.DREEP_API_KEY,
  signingSecret: process.env.DREEP_SIGNING_SECRET,
});

// Once, at setup: albums/ and every folder under it are Signed.
await dreep.createFolder({ path: "albums", accessControlType: "signed", defaultExpirySeconds: 600 });

// POST /api/albums/:albumId/photos/presign (user already authenticated)
export const presignAlbumPhoto = async ({ userId, albumId, filename, contentType, sizeBytes }) => {
  try {
    const upload = await dreep.presignUpload({
      filename,
      contentType, // "image/heic" straight from the phone is fine
      sizeBytes,
      folder: "albums/" + userId + "/" + albumId,
    });
    return { id: upload.id, uploadUrl: upload.uploadUrl };
  } catch (error) {
    if (error instanceof DreepLimitError) {
      // Project plan limit reached: error.featureKey, error.used, error.limit
      return { error: "storage_full" };
    }
    throw error;
  }
};

// Only after checking the viewer may open this album.
export const albumPhotoUrls = ({ asset }) => ({
  thumb: dreep.signedUrl(asset, {
    expiresIn: 600,
    transform: { width: 384, height: 384, fit: "cover", gravity: "attention", format: "avif", quality: 65 },
  }),
  full: dreep.signedUrl(asset, {
    expiresIn: 600,
    transform: { width: 1920, fit: "inside", format: "avif", quality: 75 },
  }),
});

// Once, at setup: albums/ and every folder under it are Signed.
_, err := client.CreateFolder(ctx, dreep.CreateFolderOptions{
	Path:                 "albums",
	AccessControlType:    dreep.AccessSigned,
	DefaultExpirySeconds: 600,
})

// Per photo in a private album, after checking the viewer's access.
// dreep-go signs the original only, so pass nil. Sign resized thumbnails
// with the JavaScript SDK until the Go SDK signs transform parameters.
photo, err := client.SignedURL(asset.ID, 10*time.Minute, nil)

// Plan limits come back as 402s you can branch on.
if key, ok := dreep.FeatureLimit(err); ok {
	log.Printf("plan limit reached on %s", key)
}

# Once: a Signed root for private albums
curl -X POST https://api.dreep.cloud/api/v1/folders \
  -H "Authorization: Bearer $DREEP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"path":"albums","accessControlType":"signed","defaultExpirySeconds":600}'

# Per photo: presign into the user's album (HEIC accepted as is)
curl -X POST https://api.dreep.cloud/api/v1/upload/presign \
  -H "Authorization: Bearer $DREEP_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"filename":"IMG_4120.HEIC","contentType":"image/heic","sizeBytes":3145728,
       "folder":"albums/u_193/summer-2026"}'

# A public post, delivered as AVIF regardless of the HEIC original
curl -o post.avif "https://cdn.dreep.cloud/api/v1/fetch/$ASSET_ID?width=1080&fit=inside&format=avif&quality=75"