file api

docs/api/routes/delivery/file.md

@@ -0,0 +1,40 @@
+# `GET /delivery/{id}/file/{fileId}`
+
+Protected. Requires a valid session cookie (`credentials: 'include'`).
+
+Get delivery attachment file content
+
+Returns the full binary content of an attached file (e.g. PDF or text document)
+for the specified delivery. Supports HTTP caching via ETag (SHA-256 hash) and 304 Not Modified.
+
+
+## Path parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `id` | yes | integer | Delivery (manifest) ID |
+| `fileId` | yes | integer | File ID or attachment ID |
+
+## Query parameters
+
+| Param | Required | Type | Description |
+|-------|----------|------|-------------|
+| `download` | no | boolean | When true, sets Content-Disposition to attachment instead of inline |
+
+## Response `200`
+
+Full binary file content
+
+## Errors
+
+| Status | Description |
+|--------|-------------|
+| 304 | Not modified (If-None-Match matched ETag) |
+| 400 | Invalid id, invalid fileId, or no company selected — `{"error":"…"}` |
+| 401 | Unauthorized — `{"error":"…"}` |
+| 403 | Not authorized — `{"error":"…"}` |
+| 404 | Delivery or file not found — `{"error":"…"}` |
+
+---
+
+_Generated from `@openapi` JSDoc. Do not edit by hand — run `npm run docs:api`._