included serverside mime detection

src/services/routes-service.js

@@ -7,7 +7,7 @@ import { parseGpx } from './gpx.js';
 import { distanceMeters, routeMetrics } from './geo.js';
 import {
   ensureRouteDirectories, moveUploadedFile, routeDirectory,
-  softDeleteRouteDirectory, restoreRouteDirectory, resolveStoredFile, removeUpload
+  softDeleteRouteDirectory, restoreRouteDirectory, resolveStoredFile, removeUpload, removeStoredFile
 } from './storage.js';
 
 const slugify = value => value.toLowerCase().normalize('NFKD').replace(/[\u0300-\u036f]/g, '').replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '').slice(0, 80) || `route-${Date.now()}`;
@@ -188,6 +188,22 @@ export function updatePoi(db, routeId, poiId, fields) {
   return listPois(db, existing.route_id).find(poi => poi.id === Number(poiId));
 }
 
+export function deletePoi(db, routeId, poiId) {
+  const existing = db.prepare(`SELECT p.id, p.audio_path FROM pois p JOIN routes r ON r.id = p.route_id
+    WHERE p.id = ? AND p.route_id = ? AND r.status = 'active'`).get(poiId, routeId);
+  if (!existing) throw new HttpError(404, 'POI nicht gefunden.');
+
+  const images = db.prepare('SELECT path FROM poi_images WHERE poi_id = ?').all(poiId);
+  transaction(db, () => {
+    db.prepare('DELETE FROM poi_images WHERE poi_id = ?').run(poiId);
+    db.prepare('DELETE FROM pois WHERE id = ? AND route_id = ?').run(poiId, routeId);
+  });
+
+  for (const image of images) removeStoredFile(image.path);
+  removeStoredFile(existing.audio_path);
+  return { id: poiId, routeId, deleted: true };
+}
+
 export function softDeleteRoute(db, id) {
   const route = db.prepare("SELECT * FROM routes WHERE id = ? AND status = 'active'").get(id);
   if (!route) throw new HttpError(404, 'Aktive Strecke nicht gefunden.');