yo, i'm wil — i build things that actually work

export async function handler(req, res) {
  // input validation
  const validated = schema.parse(req.body)
  
  // auth & authorization
  const user = await authenticate(req)
  if (!user.can('create')) {
    return res.status(403).json({
      error: 'Forbidden'
    })
  }
  
  // business logic
  const result = await db.transaction()
  
  // structured logging
  logger.info('resource_created', {
    userId: user.id,
    resourceId: result.id
  })
  
  return res.json(result)
}