finishing QDRO section

app/api/templates.py

@@ -13,6 +13,8 @@ from __future__ import annotations
 
 from typing import List, Optional, Dict, Any, Union
 from fastapi import APIRouter, Depends, HTTPException, status, UploadFile, File, Form, Query
+from fastapi.responses import StreamingResponse
+import os
 from sqlalchemy.orm import Session
 from sqlalchemy import func, or_, exists
 import hashlib
@@ -410,6 +412,49 @@ async def preview_template(
     )
 
 
+@router.get("/{template_id}/download")
+async def download_template(
+    template_id: int,
+    version_id: Optional[int] = Query(None, description="Optional specific version id to download"),
+    db: Session = Depends(get_db),
+    current_user: User = Depends(get_current_user),
+):
+    tpl = db.query(DocumentTemplate).filter(DocumentTemplate.id == template_id).first()
+    if not tpl:
+        raise HTTPException(status_code=404, detail="Template not found")
+
+    # Determine which version to serve
+    resolved_version_id = version_id or tpl.current_version_id
+    if not resolved_version_id:
+        raise HTTPException(status_code=404, detail="Template has no approved version")
+
+    ver = (
+        db.query(DocumentTemplateVersion)
+        .filter(DocumentTemplateVersion.id == resolved_version_id, DocumentTemplateVersion.template_id == tpl.id)
+        .first()
+    )
+    if not ver:
+        raise HTTPException(status_code=404, detail="Version not found")
+
+    storage = get_default_storage()
+    try:
+        content = storage.open_bytes(ver.storage_path)
+    except Exception:
+        raise HTTPException(status_code=404, detail="Stored file not found")
+
+    # Derive original filename from storage_path (uuid_prefix_originalname)
+    base = os.path.basename(ver.storage_path)
+    if "_" in base:
+        original_name = base.split("_", 1)[1]
+    else:
+        original_name = base
+
+    headers = {
+        "Content-Disposition": f"attachment; filename=\"{original_name}\"",
+    }
+    return StreamingResponse(iter([content]), media_type=ver.mime_type, headers=headers)
+
+
 @router.get("/{template_id}/keywords", response_model=KeywordsResponse)
 async def list_keywords(
     template_id: int,