feat: BreakPilot PWA - Full codebase (clean push without large binaries)

All services: admin-v2, studio-v2, website, ai-compliance-sdk,
consent-service, klausur-service, voice-service, and infrastructure.
Large PDFs and compiled binaries excluded via .gitignore.

studio-v2/app/api/recordings/[...path]/route.ts

@@ -0,0 +1,106 @@
+import { NextRequest, NextResponse } from 'next/server'
+
+/**
+ * Proxy for recordings API endpoints
+ * Routes requests to the backend service to avoid mixed-content/CORS issues
+ */
+
+const BACKEND_URL = process.env.BACKEND_URL || 'http://localhost:8000'
+
+async function proxyRequest(
+  request: NextRequest,
+  params: { path: string[] }
+): Promise<NextResponse> {
+  const path = params.path.join('/')
+  const url = `${BACKEND_URL}/api/recordings/${path}`
+
+  try {
+    const headers: HeadersInit = {}
+
+    // Forward content-type if present
+    const contentType = request.headers.get('content-type')
+    if (contentType) {
+      headers['Content-Type'] = contentType
+    }
+
+    // Forward authorization header if present
+    const authHeader = request.headers.get('authorization')
+    if (authHeader) {
+      headers['Authorization'] = authHeader
+    }
+
+    const fetchOptions: RequestInit = {
+      method: request.method,
+      headers,
+    }
+
+    // Add body for POST/PUT/PATCH requests
+    if (['POST', 'PUT', 'PATCH'].includes(request.method)) {
+      fetchOptions.body = await request.text()
+    }
+
+    const response = await fetch(url, fetchOptions)
+
+    // Get response data
+    const responseContentType = response.headers.get('content-type')
+
+    // Handle binary data (like video files)
+    if (responseContentType?.includes('video') || responseContentType?.includes('octet-stream')) {
+      const data = await response.arrayBuffer()
+      return new NextResponse(data, {
+        status: response.status,
+        headers: {
+          'Content-Type': responseContentType,
+          'Content-Disposition': response.headers.get('content-disposition') || '',
+        },
+      })
+    }
+
+    // Handle JSON and text
+    const data = await response.text()
+    return new NextResponse(data, {
+      status: response.status,
+      headers: {
+        'Content-Type': responseContentType || 'application/json',
+      },
+    })
+  } catch (error) {
+    console.error(`Failed to proxy ${request.method} ${url}:`, error)
+    return NextResponse.json(
+      { error: 'Backend nicht erreichbar', details: error instanceof Error ? error.message : 'Unknown error' },
+      { status: 502 }
+    )
+  }
+}
+
+export async function GET(
+  request: NextRequest,
+  context: { params: Promise<{ path: string[] }> }
+) {
+  const params = await context.params
+  return proxyRequest(request, params)
+}
+
+export async function POST(
+  request: NextRequest,
+  context: { params: Promise<{ path: string[] }> }
+) {
+  const params = await context.params
+  return proxyRequest(request, params)
+}
+
+export async function PUT(
+  request: NextRequest,
+  context: { params: Promise<{ path: string[] }> }
+) {
+  const params = await context.params
+  return proxyRequest(request, params)
+}
+
+export async function DELETE(
+  request: NextRequest,
+  context: { params: Promise<{ path: string[] }> }
+) {
+  const params = await context.params
+  return proxyRequest(request, params)
+}