From 778cb72c8a0902bd0b8159ebd3bb7eff93f28c83 Mon Sep 17 00:00:00 2001
From: grm <grm@eyesin.space>
Date: Mon, 14 Sep 2026 23:51:55 +0300
Subject: Turn the image library into a file library, with a per-blog upload
 limit

Bloggers want to attach PDFs, archives, audio and other files to posts,
not only images. The Images tab becomes Files: any type is accepted,
listed by kind with search, paging, rename and multi-file upload, and the
editor's paste/drop/"Insert file" takes anything (images are shown,
everything else becomes a link). The default limit goes from 5 to 10 MB
and the superadmin can override it per blog from /admin/.

Files stay in Postgres so one pg_dump is still the whole blog. The bytea
column is STORAGE EXTERNAL and /media streams it in substring() slices,
so serving never holds a whole file in memory whatever limit a blog gets.

Serving any type on the root domain, which carries the session cookie,
needs a policy: uploads are typed by sniffing (the extension may only
refine a generic sniff to an allowlisted type) and only images, PDF,
plain text, audio and video render inline; HTML, SVG, XML, scripts,
archives and binaries always go out as application/octet-stream with
Content-Disposition: attachment.

The body cap moves out of requireAuth into guardPOST, which runs after
withBlog has resolved the blog and so knows its limit.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Sd8UPWrvyYCLj97JexNw3A
---
 internal/store/images.go | 57 ------------------------------------------------
 1 file changed, 57 deletions(-)
 delete mode 100644 internal/store/images.go

(limited to 'internal/store/images.go')

diff --git a/internal/store/images.go b/internal/store/images.go
deleted file mode 100644
index b222468..0000000
--- a/internal/store/images.go
+++ /dev/null
@@ -1,57 +0,0 @@
-package store
-
-import (
-	"context"
-	"time"
-
-	"github.com/google/uuid"
-)
-
-type Image struct {
-	ID          uuid.UUID
-	Filename    string
-	ContentType string
-	Size        int
-	Data        []byte // only populated by ImageData
-	CreatedAt   time.Time
-}
-
-func (bs *BlogStore) CreateImage(ctx context.Context, filename, contentType string, data []byte) (*Image, error) {
-	img := &Image{ID: uuid.New(), Filename: filename, ContentType: contentType, Size: len(data)}
-	err := bs.db.QueryRow(ctx, `INSERT INTO images (id, filename, content_type, size, data) VALUES ($1,$2,$3,$4,$5) RETURNING created_at`,
-		img.ID, filename, contentType, len(data), data).Scan(&img.CreatedAt)
-	return img, err
-}
-
-func (bs *BlogStore) ListImages(ctx context.Context) ([]Image, error) {
-	rows, err := bs.db.Query(ctx, `SELECT id, filename, content_type, size, created_at FROM images ORDER BY created_at DESC`)
-	if err != nil {
-		return nil, err
-	}
-	defer rows.Close()
-	var out []Image
-	for rows.Next() {
-		var i Image
-		if err := rows.Scan(&i.ID, &i.Filename, &i.ContentType, &i.Size, &i.CreatedAt); err != nil {
-			return nil, err
-		}
-		out = append(out, i)
-	}
-	return out, rows.Err()
-}
-
-// ImageData loads an image including its bytes.
-func (bs *BlogStore) ImageData(ctx context.Context, id uuid.UUID) (*Image, error) {
-	var i Image
-	err := bs.db.QueryRow(ctx, `SELECT id, filename, content_type, size, data, created_at FROM images WHERE id=$1`, id).
-		Scan(&i.ID, &i.Filename, &i.ContentType, &i.Size, &i.Data, &i.CreatedAt)
-	if err != nil {
-		return nil, wrap(err)
-	}
-	return &i, nil
-}
-
-func (bs *BlogStore) DeleteImage(ctx context.Context, id uuid.UUID) error {
-	_, err := bs.db.Exec(ctx, `DELETE FROM images WHERE id=$1`, id)
-	return err
-}
-- 
cgit v1.2.3