feat: save logos to media/logo/ subdir, add Logo generator link to admin dropdown

src/app/api/media/[...path]/route.ts

@@ -0,0 +1,43 @@
+import { NextResponse } from "next/server";
+import { readFile } from "fs/promises";
+import { existsSync } from "fs";
+import path from "path";
+
+export const dynamic = "force-dynamic";
+
+const MEDIA_DIR = "public/assets/images/media";
+const ALLOWED_EXT = [".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".bmp"];
+
+export async function GET(
+  _request: Request,
+  { params }: { params: Promise<{ path: string[] }> },
+) {
+  const { path: segments } = await params;
+  const name = segments.join("/");
+  // Prevent path traversal
+  if (name.includes("..") || name.includes("\\")) {
+    return new NextResponse("Forbidden", { status: 403 });
+  }
+  const ext = path.extname(name).toLowerCase();
+  if (!ALLOWED_EXT.includes(ext)) {
+    return new NextResponse("Forbidden", { status: 403 });
+  }
+
+  const filePath = path.join(process.cwd(), MEDIA_DIR, name);
+  if (!existsSync(filePath)) {
+    return new NextResponse("Not found", { status: 404 });
+  }
+
+  const bytes = await readFile(filePath);
+  const mime: Record<string, string> = {
+    ".png": "image/png", ".jpg": "image/jpeg", ".jpeg": "image/jpeg",
+    ".gif": "image/gif", ".webp": "image/webp", ".svg": "image/svg+xml", ".bmp": "image/bmp",
+  };
+
+  return new NextResponse(bytes, {
+    headers: {
+      "Content-Type": mime[ext] ?? "application/octet-stream",
+      "Cache-Control": "public, max-age=86400",
+    },
+  });
+}