feat(quest): add support for private images in answers

app/lang/de.json

@@ -216,6 +216,8 @@
       "finalize": "Antwort finalisieren",
       "finalize_explain": "Dies gibt den Admins die Möglichkeit deine Antwort zu bewerten und dir Punkte zu geben. Du kannst deine Antwort anschließend nicht mehr ändern!",
       "last_update": "Letztes Update: {date} von {name}",
+      "private_image": "Privates Bild",
+      "private_image_explain": "Private Bilder werden in der öffentlichen Galerie, Diashow und im Showcase ausgeblendet. Admins können sie weiterhin zur Bewertung sehen.",
       "required_answer": "Erforderliche Antwort",
       "review": "Bewertung",
       "reviewed_by": "von {name} am {date}",

app/lang/en.json

@@ -216,6 +216,8 @@
       "finalize": "Finalize answer",
       "finalize_explain": "This allows the admins to review your answer and give you points. You cannot change your answer afterwards!",
       "last_update": "Last update: {date} by {name}",
+      "private_image": "Private image",
+      "private_image_explain": "Private images are hidden from the public gallery, diashow and showcase. Admins can still see them for review.",
       "required_answer": "Required Answer",
       "review": "Review",
       "reviewed_by": "by {name} at {date}",

app/pages/hunt/[huntSlug]/[questSlug]/index.vue

@@ -72,6 +72,11 @@ useHead({
 
 const answer = ref(data.value?.answer?.text);
 const final = ref(data.value?.answer?.final || false);
+const privateImage = ref(data.value?.answer?.picture?.private ?? false);
+
+const privateChanged = computed(
+  () => (data.value?.answer?.picture?.private ?? false) !== privateImage.value
+);
 
 const textType = {
   TEXT: 'text',
@@ -114,6 +119,7 @@ async function submit() {
   if (final.value) {
     body.set('final', 'true');
   }
+  body.set('private', privateImage.value ? 'true' : 'false');
   if (newImage.value) {
     uploadingImage.value = true;
     compressing.value = true;
@@ -141,6 +147,7 @@ async function submit() {
 
     await refresh();
     answer.value = data.value?.answer?.text;
+    privateImage.value = data.value?.answer?.picture?.private ?? false;
     newImage.value = undefined;
   } catch (e) {
     if (xhr.status === 418) {
@@ -325,6 +332,13 @@ async function submit() {
                 type="single"
                 file-types="jpg,png,jpeg"
               />
+              <VaCheckbox
+                v-if="newImageURL || data.answer?.picture"
+                v-model="privateImage"
+                :disabled="uploading || data.answer?.final"
+                :label="t('page.quest.private_image')"
+                :messages="t('page.quest.private_image_explain')"
+              />
               <p v-if="data.answer?.updatedAt">
                 {{
                   t('page.quest.last_update', {
@@ -352,7 +366,8 @@ async function submit() {
                   !(
                     newImage ||
                     data.answer?.text !== answer ||
-                    data.answer?.final !== final
+                    data.answer?.final !== final ||
+                    privateChanged
                   ) || uploading
                 "
                 :loading="uploading"

prisma/migrations/20260730235137_add_private_to_file/migration.sql

@@ -0,0 +1,2 @@
+-- AlterTable
+ALTER TABLE "public"."File" ADD COLUMN     "private" BOOLEAN NOT NULL DEFAULT false;

prisma/schema.prisma

@@ -45,6 +45,7 @@ model File {
   id      Int     @id @default(autoincrement())
   uuid    String
   url     String
+  private Boolean @default(false)
 
   creator   User @relation(fields: [creatorId], references: [id], onUpdate: Cascade, onDelete: Cascade)
   creatorId Int

server/api/hunt/[huntId]/diashow.get.ts

@@ -77,7 +77,7 @@ export default defineEventHandler(async (event) => {
             where: {
               final: true,
               picture: {
-                isNot: null
+                private: false
               }
             }
           }
@@ -95,7 +95,7 @@ export default defineEventHandler(async (event) => {
             some: {
               final: true,
               picture: {
-                isNot: null
+                private: false
               }
             }
           }

server/api/hunt/[huntId]/showcase.get.ts

@@ -138,7 +138,8 @@ export default defineEventHandler(async (event) => {
             where: {
               review: {
                 showcase: true
-              }
+              },
+              picture: { private: false }
             },
             orderBy: [
               {
@@ -217,6 +218,7 @@ export default defineEventHandler(async (event) => {
     pictureCount,
     totalScore,
     leaderboard,
-    ...hunt
+    ...hunt,
+    quests: hunt.quests.filter((q) => q.answers.length > 0)
   };
 });

server/api/quest/[questId]/index.get.ts

@@ -71,7 +71,8 @@ export default defineEventHandler(async (event) => {
           text: true,
           picture: {
             select: {
-              url: true
+              url: true,
+              private: true
             }
           },
           review: {

server/api/quest/[questId]/submit.post.ts

@@ -101,7 +101,8 @@ export default defineEventHandler(async (event) => {
         .mime(['image/png', 'image/jpeg', 'image/jpg'])
         .max(10_000_000)
         .optional(),
-      final: zh.boolAsString.optional()
+      final: zh.boolAsString.optional(),
+      private: zh.boolAsString.default(false)
     })
     .parse(formDataObj);
 
@@ -110,7 +111,8 @@ export default defineEventHandler(async (event) => {
       ? quest.answers![0]!
       : {
           updatedAt: null,
-          id: null
+          id: null,
+          picture: null
         };
 
   if (
@@ -158,7 +160,8 @@ export default defineEventHandler(async (event) => {
         const file = await tx.file.create({
           data: {
             ...picture,
-            answerId: prevAnswer.id
+            answerId: prevAnswer.id,
+            private: data.private
           },
           select: { id: true }
         });
@@ -190,6 +193,7 @@ export default defineEventHandler(async (event) => {
           data: {
             ...picture,
             answerId: answer.id,
+            private: data.private,
             answers: {
               connect: answer
             }
@@ -210,6 +214,16 @@ export default defineEventHandler(async (event) => {
           lang: data.lang
         }
       });
+      if (prevAnswer.picture) {
+        await prisma.file.update({
+          where: {
+            id: prevAnswer.picture.id
+          },
+          data: {
+            private: data.private
+          }
+        });
+      }
     } else {
       await prisma.questAnswer.create({
         data: {