feat(repairs): add repair documents

frontend/athena/app/api/repairs/[id]/documents/[documentId]/download/route.ts

@@ -0,0 +1,18 @@
+import { NextRequest } from "next/server";
+
+import { proxyHermesStreamRequest } from "@/lib/server/hermes-proxy";
+
+type Params = {
+  params: Promise<{
+    id: string;
+    documentId: string;
+  }>;
+};
+
+export async function GET(request: NextRequest, { params }: Params) {
+  const { id, documentId } = await params;
+  return proxyHermesStreamRequest(
+    request,
+    `/repairs/${id}/documents/${documentId}/download${request.nextUrl.search}`,
+  );
+}

frontend/athena/app/api/repairs/[id]/documents/[documentId]/route.ts

@@ -0,0 +1,40 @@
+import { NextRequest } from "next/server";
+
+import { proxyHermesRequest } from "@/lib/server/hermes-proxy";
+import { assertSameOrigin } from "@/lib/server/request-guards";
+
+type Params = {
+  params: Promise<{
+    id: string;
+    documentId: string;
+  }>;
+};
+
+async function proxyDocumentRequest(request: NextRequest, { params }: Params) {
+  const { id, documentId } = await params;
+  return proxyHermesRequest(request, `/repairs/${id}/documents/${documentId}`);
+}
+
+export async function GET(request: NextRequest, context: Params) {
+  return proxyDocumentRequest(request, context);
+}
+
+export async function PUT(request: NextRequest, context: Params) {
+  const originError = assertSameOrigin(request);
+
+  if (originError) {
+    return originError;
+  }
+
+  return proxyDocumentRequest(request, context);
+}
+
+export async function DELETE(request: NextRequest, context: Params) {
+  const originError = assertSameOrigin(request);
+
+  if (originError) {
+    return originError;
+  }
+
+  return proxyDocumentRequest(request, context);
+}

frontend/athena/app/api/repairs/[id]/documents/route.ts

@@ -0,0 +1,14 @@
+import { NextRequest } from "next/server";
+
+import { proxyHermesRequest } from "@/lib/server/hermes-proxy";
+
+type Params = {
+  params: Promise<{
+    id: string;
+  }>;
+};
+
+export async function GET(request: NextRequest, { params }: Params) {
+  const { id } = await params;
+  return proxyHermesRequest(request, `/repairs/${id}/documents`);
+}

frontend/athena/app/api/repairs/[id]/documents/upload/route.ts

@@ -0,0 +1,21 @@
+import { NextRequest } from "next/server";
+
+import { proxyHermesRequest } from "@/lib/server/hermes-proxy";
+import { assertSameOrigin } from "@/lib/server/request-guards";
+
+type Params = {
+  params: Promise<{
+    id: string;
+  }>;
+};
+
+export async function POST(request: NextRequest, { params }: Params) {
+  const originError = assertSameOrigin(request);
+
+  if (originError) {
+    return originError;
+  }
+
+  const { id } = await params;
+  return proxyHermesRequest(request, `/repairs/${id}/documents/upload`);
+}

frontend/athena/app/repairs/[id]/page.tsx

@@ -6,6 +6,7 @@ import { ArrowLeft, CheckCircle2, Copy, Edit, Link2, Mail, Send, ShieldCheck, Wr
 
 import DetailSection from "@/components/common/DetailSection";
 import { useToast } from "@/components/common/ToastProvider";
+import RepairDocumentsSection from "@/components/repairs/RepairDocumentsSection";
 import RepairFormDialog from "@/components/repairs/RepairFormDialog";
 import { RepairPriorityBadge, RepairStatusBadge, statusLabels } from "@/components/repairs/RepairStatusBadge";
 import RepairStatusDialog from "@/components/repairs/RepairStatusDialog";
@@ -426,6 +427,10 @@ export default function RepairDetailPage({ params }: Params) {
         })()}
       </DetailSection>
 
+      <DetailSection title="Dokumente & Bilder">
+        <RepairDocumentsSection repairId={repair.id} canUpdate={canUpdate} />
+      </DetailSection>
+
       <DetailSection title="Audit und Aktivität vorbereitet">
         <p className="text-sm text-slate-500">Reparaturaktionen werden in den Audit Logs erfasst und erscheinen im Activity Feed, wenn `repairs.read` vorhanden ist.</p>
         <Link href="/audit-logs" className={buttonVariants({ variant: "outline", size: "sm", className: "mt-4" })}>Audit Logs öffnen</Link>