phase 2 and 3

2026-04-21 08:56:51 -05:00
parent b98837a72c
commit d79aaf6ef8
42 changed files with 4962 additions and 19 deletions
@@ -0,0 +1,33 @@
+import { NextResponse, type NextRequest } from "next/server";
+import { prisma } from "@/lib/prisma";
+import { errorResponse, ApiError } from "@/lib/api";
+import { getSessionUser } from "@/lib/session";
+import { mimeForKind, readFileBytes, type FileKind } from "@/lib/files";
+
+// Any signed-in user can download; mime/extension derived from the asset.
+export async function GET(_req: NextRequest, ctx: { params: Promise<{ id: string }> }) {
+  try {
+    const user = await getSessionUser();
+    if (!user) throw new ApiError(401, "unauthenticated", "Sign in required");
+
+    const { id } = await ctx.params;
+    const file = await prisma.fileAsset.findUnique({ where: { id } });
+    if (!file) throw new ApiError(404, "not_found", "File not found");
+
+    const bytes = await readFileBytes(file.path);
+    const mime = mimeForKind(file.kind as FileKind, file.mimeType);
+
+    const body = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
+    return new NextResponse(body as ArrayBuffer, {
+      status: 200,
+      headers: {
+        "content-type": mime,
+        "content-length": String(bytes.byteLength),
+        "content-disposition": `inline; filename="${encodeURIComponent(file.originalName)}"`,
+        "cache-control": "private, max-age=3600",
+      },
+    });
+  } catch (err) {
+    return errorResponse(err);
+  }
+}