feat: phase 4 completed

src/app/api/messages/[messageId]/attachments/route.ts

@@ -0,0 +1,29 @@
+import { NextResponse } from "next/server";
+import { getServerSession } from "next-auth";
+import { authOptions } from "@/lib/auth/options";
+import { prisma } from "@/lib/prisma";
+
+export async function GET(
+  req: Request,
+  { params }: { params: Promise<{ messageId: string }> }
+) {
+  const { messageId } = await params;
+  const session = await getServerSession(authOptions);
+
+  if (!session?.user?.id) {
+    return new NextResponse("Unauthorized", { status: 401 });
+  }
+
+  const message = await prisma.message.findUnique({
+    where: { id: messageId, userId: session.user.id },
+    include: { attachments: true },
+  });
+
+  if (!message) {
+    return new NextResponse("Not found", { status: 404 });
+  }
+
+  return NextResponse.json(
+    message.attachments.map((a) => ({ id: a.id, fileName: a.fileName }))
+  );
+}