Add file attachments to questions (new question form + admin reply)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

src/app/api/questions/route.ts

@@ -4,6 +4,18 @@ import { auth } from "@/lib/auth";
 import { prisma } from "@/lib/prisma";
 import { sendQuestionCreatedEmail } from "@/lib/email";
 
+interface FileAttachment {
+  name: string;
+  url: string;
+  size: number;
+}
+
+function buildS3Prefix(): string {
+  const endpoint = process.env.S3_ENDPOINT ?? "";
+  const bucket = process.env.S3_BUCKET ?? "";
+  return `${endpoint}/${bucket}/`;
+}
+
 export async function GET() {
   const session = await auth.api.getSession({ headers: await headers() });
   if (!session) return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
@@ -59,16 +71,29 @@ export async function POST(req: NextRequest) {
   } catch {
     return NextResponse.json({ error: "Invalid JSON" }, { status: 400 });
   }
-  const { title, text, courseId } = body as {
+  const { title, text, courseId, files } = body as {
     title: string;
     text: string;
     courseId?: string;
+    files?: FileAttachment[];
   };
 
   if (!title?.trim() || !text?.trim()) {
     return NextResponse.json({ error: "title and text are required" }, { status: 400 });
   }
 
+  const s3Prefix = buildS3Prefix();
+  const safeFiles = files
+    ?.filter(
+      (f) =>
+        typeof f.name === "string" &&
+        typeof f.url === "string" &&
+        f.url.startsWith("https://") &&
+        f.url.startsWith(s3Prefix) &&
+        typeof f.size === "number"
+    )
+    .map((f) => ({ name: f.name.slice(0, 255), url: f.url, size: Math.max(0, f.size) }));
+
   const question = await prisma.studentQuestion.create({
     data: {
       userId: session.user.id,
@@ -78,6 +103,7 @@ export async function POST(req: NextRequest) {
         create: {
           authorId: session.user.id,
           text: text.trim(),
+          files: safeFiles?.length ? (safeFiles as object[]) : undefined,
         },
       },
     },