feat: Add photo management features, duplicate detection, attempt limits, and admin deletion

- Add duplicate photo detection (file hash and URL checking)
- Add max attempts per photo with UI counter
- Simplify penalty system (auto-enable when points > 0)
- Prevent scores from going below 0
- Add admin photo deletion functionality
- Improve navigation with always-visible logout
- Prevent users from guessing their own photos

app/photos/[id]/page.tsx

@@ -0,0 +1,160 @@
+import { auth } from "@/lib/auth"
+import { redirect } from "next/navigation"
+import { prisma } from "@/lib/prisma"
+import GuessForm from "@/components/GuessForm"
+import PhotoImage from "@/components/PhotoImage"
+import DeletePhotoButton from "@/components/DeletePhotoButton"
+
+// Enable caching for this page
+export const revalidate = 60 // Revalidate every 60 seconds
+
+export default async function PhotoPage({ params }: { params: Promise<{ id: string }> }) {
+  const session = await auth()
+
+  if (!session) {
+    redirect("/login")
+  }
+
+  const { id } = await params
+  const photo = await prisma.photo.findUnique({
+    where: { id },
+    include: {
+      uploader: {
+        select: {
+          name: true,
+        },
+      },
+      guesses: {
+        where: {
+          userId: session.user.id,
+        },
+        orderBy: {
+          createdAt: "desc",
+        },
+      },
+    },
+  })
+
+  if (!photo) {
+    return (
+      <div className="max-w-4xl mx-auto px-4 py-8">
+        <div className="bg-white rounded-lg shadow-md p-6">
+          <p className="text-gray-500">Photo not found</p>
+        </div>
+      </div>
+    )
+  }
+
+  const userGuess = photo.guesses[0]
+  const hasCorrectGuess = userGuess?.correct || false
+  const isOwner = photo.uploaderId === session.user.id
+  
+  // Calculate remaining attempts
+  const photoWithMaxAttempts = photo as typeof photo & { maxAttempts: number | null | undefined }
+  const userGuessCount = photo.guesses.length
+  const maxAttempts = photoWithMaxAttempts.maxAttempts ?? null
+  const remainingAttempts = maxAttempts !== null && maxAttempts > 0 
+    ? Math.max(0, maxAttempts - userGuessCount)
+    : null
+  const hasReachedMaxAttempts = maxAttempts !== null && maxAttempts > 0 && userGuessCount >= maxAttempts
+
+  return (
+    <div className="max-w-7xl mx-auto px-4 py-8 overflow-x-hidden">
+      <div className="bg-white rounded-lg shadow-md p-4 sm:p-6">
+        <div className="mb-6">
+          <div className="flex items-center justify-between mb-4">
+            <h1 className="text-2xl font-bold text-gray-900">Guess Who!</h1>
+            {session.user.role === "ADMIN" && (
+              <DeletePhotoButton photoId={photo.id} variant="button" />
+            )}
+          </div>
+          <div className="flex flex-wrap items-center gap-4 mb-2">
+            <p className="text-sm text-gray-500">
+              Uploaded by {photo.uploader.name} on{" "}
+              {new Date(photo.createdAt).toLocaleDateString()}
+            </p>
+            <div className="flex flex-wrap items-center gap-2">
+              <span className="inline-flex items-center px-3 py-1 rounded-full text-sm font-medium bg-purple-100 text-purple-800">
+                +{photo.points} {photo.points === 1 ? "point" : "points"} if correct
+              </span>
+              {(photo as any).penaltyEnabled && (photo as any).penaltyPoints > 0 && (
+                <span className="inline-flex items-center px-3 py-1 rounded-full text-sm font-medium bg-red-100 text-red-800">
+                  -{(photo as any).penaltyPoints} {(photo as any).penaltyPoints === 1 ? "point" : "points"} if wrong
+                </span>
+              )}
+              {maxAttempts !== null && maxAttempts > 0 && (
+                <span className="inline-flex items-center px-3 py-1 rounded-full text-sm font-medium bg-blue-100 text-blue-800">
+                  {maxAttempts} {maxAttempts === 1 ? "attempt" : "attempts"} max
+                </span>
+              )}
+            </div>
+          </div>
+        </div>
+
+        <div className="grid grid-cols-1 lg:grid-cols-2 gap-6 mb-6">
+          <div className="bg-gray-200 rounded-lg overflow-hidden w-full" style={{ maxHeight: "70vh", minHeight: "300px" }}>
+            <div className="relative w-full h-full" style={{ minHeight: "300px", maxHeight: "70vh" }}>
+              <PhotoImage src={photo.url} alt="Photo to guess" />
+            </div>
+          </div>
+
+          <div className="flex flex-col w-full min-w-0">
+            {hasCorrectGuess ? (
+              <div className="bg-green-50 border border-green-200 rounded-lg p-4 mb-6">
+                <p className="text-green-800 font-semibold">
+                  ✅ Correct! You guessed it right!
+                </p>
+                <p className="text-sm text-green-700 mt-1">
+                  The answer was: <strong>{photo.answerName}</strong>
+                </p>
+                <p className="text-sm text-green-700 mt-1">
+                  You earned <strong>{photo.points} {photo.points === 1 ? "point" : "points"}</strong>!
+                </p>
+              </div>
+            ) : userGuess ? (
+              <div className="bg-red-50 border border-red-200 rounded-lg p-4 mb-6">
+                <p className="text-red-800 font-semibold">❌ Wrong guess. Try again!</p>
+                <p className="text-sm text-red-700 mt-1">
+                  Your last guess: <strong>{userGuess.guessText}</strong>
+                </p>
+                {(photo as any).penaltyEnabled && (photo as any).penaltyPoints > 0 && (
+                  <p className="text-sm text-red-700 mt-1">
+                    You lost <strong>{(photo as any).penaltyPoints} {(photo as any).penaltyPoints === 1 ? "point" : "points"}</strong> for this wrong guess.
+                  </p>
+                )}
+              </div>
+            ) : null}
+
+            {!isOwner && !hasCorrectGuess && remainingAttempts !== null && remainingAttempts > 0 && (
+              <div className="bg-blue-50 border border-blue-200 rounded-lg p-3 mb-4">
+                <p className="text-sm text-blue-700">
+                  <strong>Remaining attempts:</strong> {remainingAttempts} of {maxAttempts}
+                </p>
+              </div>
+            )}
+
+            {!isOwner && !hasCorrectGuess && hasReachedMaxAttempts && (
+              <div className="bg-yellow-50 border border-yellow-200 rounded-lg p-4 mb-6">
+                <p className="text-yellow-800 font-semibold">⚠️ Maximum attempts reached</p>
+                <p className="text-sm text-yellow-700 mt-1">
+                  You have used all {maxAttempts} {maxAttempts === 1 ? "attempt" : "attempts"} for this photo.
+                </p>
+              </div>
+            )}
+
+            {isOwner ? (
+              <div className="bg-blue-50 border border-blue-200 rounded-lg p-4">
+                <p className="text-blue-800 font-semibold">📸 This is your photo</p>
+                <p className="text-sm text-blue-700 mt-1">
+                  You cannot guess on photos you uploaded. The answer is: <strong>{photo.answerName}</strong>
+                </p>
+              </div>
+            ) : !hasCorrectGuess && !hasReachedMaxAttempts ? (
+              <GuessForm photoId={photo.id} />
+            ) : null}
+          </div>
+        </div>
+      </div>
+    </div>
+  )
+}

app/photos/page.tsx

@@ -0,0 +1,73 @@
+import { auth } from "@/lib/auth"
+import { redirect } from "next/navigation"
+import { prisma } from "@/lib/prisma"
+import Link from "next/link"
+import PhotoThumbnail from "@/components/PhotoThumbnail"
+import DeletePhotoButton from "@/components/DeletePhotoButton"
+
+// Enable caching for this page
+export const revalidate = 60 // Revalidate every 60 seconds
+
+export default async function PhotosPage() {
+  const session = await auth()
+
+  if (!session) {
+    redirect("/login")
+  }
+
+  // Limit to 50 photos per page for performance
+  const photos = await prisma.photo.findMany({
+    take: 50,
+    orderBy: { createdAt: "desc" },
+    include: {
+      uploader: {
+        select: {
+          name: true,
+        },
+      },
+    },
+  })
+
+  return (
+    <div className="max-w-7xl mx-auto px-4 py-8">
+      <h1 className="text-3xl font-bold text-gray-900 mb-6">All Photos</h1>
+
+      {photos.length === 0 ? (
+        <div className="bg-white rounded-lg shadow-md p-8 text-center">
+          <p className="text-gray-500">No photos yet. Be the first to upload one!</p>
+        </div>
+      ) : (
+        <div className="grid grid-cols-1 sm:grid-cols-2 lg:grid-cols-3 xl:grid-cols-4 gap-6">
+          {photos.map((photo: { id: string; url: string; answerName: string; points: number; createdAt: Date; uploader: { name: string } }) => (
+            <div
+              key={photo.id}
+              className="bg-white rounded-lg shadow-md overflow-hidden hover:shadow-lg transition relative group"
+            >
+              <Link href={`/photos/${photo.id}`}>
+                <div className="aspect-square bg-gray-200 relative">
+                  <PhotoThumbnail src={photo.url} alt="Photo" />
+                </div>
+                <div className="p-4">
+                  <div className="flex items-center justify-between mb-1">
+                    <p className="text-sm text-gray-500">Uploaded by {photo.uploader.name}</p>
+                    <span className="inline-flex items-center px-2 py-0.5 rounded text-xs font-medium bg-purple-100 text-purple-800">
+                      {photo.points} {photo.points === 1 ? "pt" : "pts"}
+                    </span>
+                  </div>
+                  <p className="text-xs text-gray-400 mt-1">
+                    {new Date(photo.createdAt).toLocaleDateString()}
+                  </p>
+                </div>
+              </Link>
+              {session.user.role === "ADMIN" && (
+                <div className="absolute top-2 right-2 opacity-0 group-hover:opacity-100 transition-opacity">
+                  <DeletePhotoButton photoId={photo.id} />
+                </div>
+              )}
+            </div>
+          ))}
+        </div>
+      )}
+    </div>
+  )
+}