Guest photo album access behind a per-project toggle

- New guestShowPhotos project setting (default off) with manual migration: guests can view photo albums when enabled
- Guests can never download photos: album access tokens now carry a guest flag enforced by the photo content route, closing a download=true URL bypass; zip downloads remain blocked for guests
- Video group rename/delete buttons only show on the expanded card, matching photo albums
- Wiki: guest photo visibility, accordion album management, video drag & drop, inline previews, group deletion, page-level view toggle

Author: MansiVisuals

docs/wiki/Admin-Settings.md

@@ -176,6 +176,7 @@ Subscribe to project deadlines from any calendar app (Google Calendar, Apple Cal
 - Custom URL slug.
 - Guest mode: view-only access without credentials.
 - Guest latest only: restrict guests to the latest version of each video (default: true).
+- Show photo albums to guests: guests can view photo albums; downloads stay disabled for guests (default: false).
 
 **Workflow**
 - Revision limit (enable/disable with max revisions count).

docs/wiki/Client-Guide.md

@@ -36,7 +36,7 @@ After authentication you see a thumbnail grid of all videos in the project:
 - Approved videos show a checkmark overlay.
 - Videos needing review appear first, followed by approved videos.
 - Click any thumbnail to open the video player.
-- A grid/list toggle switches between thumbnail cards and a compact list.
+- A grid/list toggle in the top bar switches both videos and photo albums between thumbnail cards and a compact list; your choice is remembered.
 
 Above the grid you can see the project title, your name, and an optional project description.
 
@@ -175,12 +175,12 @@ Files you submit are visible to the project admin but are not attached to any sp
 
 ## Photo albums
 
-If the project contains photos, albums appear below the videos. Click an album to open the full-page album view:
+If the project contains photos, albums appear below the videos (for guests only when the project admin has enabled it). Click an album to open the full-page album view:
 
 - The top bar has a back button, a prev/next album selector, and the theme/language toggles.
 - Click any photo to open it in a lightbox; use the arrow keys or on-screen arrows to browse.
 - Select multiple photos (checkbox on each thumbnail) to download just those.
-- If the admin has enabled photo downloads, you can download your selection, the whole album, or all project photos as a ZIP.
+- If the admin has enabled photo downloads, you can download your selection, the whole album, or all project photos as a ZIP. Photo downloads are never available in guest mode.
 
 ## Downloading
 

docs/wiki/Features.md

@@ -17,7 +17,7 @@
 - Photo zip downloads on the share page (selected photos, one album, or the whole project), gated by a per-project toggle.
 - Recipient portal at `/portal`: recipients sign in with a magic link and see all active projects they are assigned to in one place.
 - Loop playback toggle in the video player.
-- Grid/list view toggle for videos on the share page.
+- Grid/list view toggle on the share page, applying to both videos and photo albums.
 - Client asset uploads: allow clients to upload files to projects (configurable per project).
 - Reverse share: allow clients to upload files directly to a project without attaching them to a comment. Toggled per project. Uploaded files appear in a dedicated admin block with download and delete.
 - Bulk select on admin project page: multi-select video assets and client uploads for bulk download or bulk delete.
@@ -55,13 +55,15 @@
 - IP and domain blocking.
 - Browser push notification management.
 - Version control: multiple video versions with revision tracking and optional limits.
-- Guest controls (view-only, latest-version restriction).
+- Guest controls (view-only, latest-version restriction, optional photo album visibility).
 - Asset management: images, audio, subtitles, project files, and documents with content validation.
 - Per-version thumbnails from uploaded image assets.
 - Client uploads block: view, download, and delete files submitted by clients via reverse share, with multi-select bulk actions.
 - Configurable global defaults for new projects (resolution, watermark, downloads, comments, approval).
 - Per-project overrides for global settings.
 - Video reprocessing: re-transcode videos when settings change (resolution, watermark).
+- Inline video previews on the project page (plays the transcoded preview, never the original).
+- One-click video deletion including all versions; drag & drop video files or folders onto the Videos section to upload.
 - Configurable max upload size and max comment attachments.
 - Option to use preview quality for approved playback (instead of original).
 - Privacy disclosure with custom text and GDPR consent tracking.

docs/wiki/Usage-Guide.md

@@ -3,11 +3,13 @@
 ## Creating your first project
 1. Login to the admin panel.
 2. Create a project with title, description, client name/email, and password (recommended).
-3. Upload videos.
+3. Upload videos — use the Upload Video(s) card, or drag video files or entire folders straight onto the Videos section.
 4. Share the client link.
 5. Collect timestamped feedback.
 6. Approve when the client accepts the final version.
 
+On the project page, click a video thumbnail to play its transcoded preview in place (the original file is never streamed). Expanding a video shows the rename and delete buttons next to its name — delete removes the video with all of its versions, while individual versions can be deleted inside the expanded list.
+
 ## Client workflow
 1. Open the share link.
 2. Enter password/OTP if required.
@@ -113,10 +115,11 @@ Reverse share lets clients upload files directly to a project from the share pag
 Projects can hold photo albums alongside videos — useful for stills, BTS shots, or photo deliverables.
 
 **Creating and filling albums (admin):**
-1. Open the project page; the **Photos** section sits below the videos.
-2. Create an album and drag photos onto it, or drop entire folders onto the Photos section — each folder becomes its own album.
-3. The worker generates webp thumbnails automatically; uploads work on both local (TUS) and S3 storage.
-4. Hover an album to pick its cover photo; a sort toggle switches between name and date order.
+1. Open the project page; the **Photo Albums** section sits below the videos.
+2. Create an album and drag photos onto it, or drop entire folders onto the section — each folder becomes its own album.
+3. Click an album to fold it open in place: photos are listed with pagination, and the rename/delete buttons appear next to the album name.
+4. The worker generates webp thumbnails automatically; uploads work on both local (TUS) and S3 storage.
+5. Use the star on a photo row to set it as the album cover; a sort toggle in the section header switches between name and date order.
 
 **Client side:** albums appear on the share page below the videos, with a full-page album view, lightbox, and multi-select. To let clients download photos (selection, album, or all project photos as a ZIP), enable **Allow photo downloads** in the project settings.
 

prisma/migrations/20260710153000_add_guest_show_photos/migration.sql

@@ -0,0 +1 @@
+ALTER TABLE "Project" ADD COLUMN "guestShowPhotos" BOOLEAN NOT NULL DEFAULT false;

prisma/schema.prisma

@@ -56,6 +56,7 @@ model Project {
   authMode        String  @default("PASSWORD") // Authentication mode: PASSWORD, OTP, BOTH, or NONE
   guestMode       Boolean @default(false) // Allow guest access with limited view (videos only, no comments/approval)
   guestLatestOnly Boolean @default(true) // Guests can only view latest version of each video
+  guestShowPhotos Boolean @default(false) // Show photo albums to guests (view-only, downloads stay blocked)
 
   // Revision tracking (optional)
   enableRevisions Boolean @default(false)

src/app/admin/projects/[id]/settings/page.tsx

@@ -41,6 +41,7 @@ interface Project {
   authMode: string
   guestMode: boolean
   guestLatestOnly: boolean
+  guestShowPhotos: boolean
   previewResolution: string
   watermarkEnabled: boolean
   watermarkText: string | null
@@ -90,6 +91,7 @@ export default function ProjectSettingsPage() {
   const [authMode, setAuthMode] = useState('PASSWORD')
   const [guestMode, setGuestMode] = useState(false)
   const [guestLatestOnly, setGuestLatestOnly] = useState(true)
+  const [guestShowPhotos, setGuestShowPhotos] = useState(false)
   const [useCustomSlug, setUseCustomSlug] = useState(false)
   const [customSlugValue, setCustomSlugValue] = useState('')
   const [previewResolution, setPreviewResolution] = useState('720p')
@@ -197,6 +199,7 @@ export default function ProjectSettingsPage() {
         setAuthMode(data.authMode || 'PASSWORD')
         setGuestMode(data.guestMode || false)
         setGuestLatestOnly(data.guestLatestOnly ?? true)
+        setGuestShowPhotos(data.guestShowPhotos ?? false)
         setSharePassword(data.sharePassword || '')
 
         setOriginalSettings({
@@ -311,6 +314,7 @@ export default function ProjectSettingsPage() {
         authMode,
         guestMode,
         guestLatestOnly,
+        guestShowPhotos,
         clientNotificationSchedule,
         clientNotificationTime: (clientNotificationSchedule === 'DAILY' || clientNotificationSchedule === 'WEEKLY') ? clientNotificationTime : null,
         clientNotificationDay: clientNotificationSchedule === 'WEEKLY' ? clientNotificationDay : null,
@@ -1147,6 +1151,22 @@ export default function ProjectSettingsPage() {
                   </div>
                 )}
 
+                {guestMode && (
+                  <div className="flex items-center justify-between gap-4 pt-2 mt-2 border-t border-border">
+                    <div className="space-y-0.5 flex-1">
+                      <Label htmlFor="guestShowPhotos">{t('showPhotosToGuests')}</Label>
+                      <p className="text-xs text-muted-foreground">
+                        {t('showPhotosToGuestsDescription')}
+                      </p>
+                    </div>
+                    <Switch
+                      id="guestShowPhotos"
+                      checked={guestShowPhotos}
+                      onCheckedChange={setGuestShowPhotos}
+                    />
+                  </div>
+                )}
+
                 {authMode === 'NONE' && !guestMode && (
                   <div className="flex items-start gap-2 p-2 bg-warning-visible/50 border border-warning-visible rounded-md">
                     <span className="text-warning text-xs font-bold">!</span>

src/app/api/content/photo/[token]/route.ts

@@ -75,7 +75,7 @@ export async function GET(
       return NextResponse.json({ error: photoMessages.photoNotFound || 'Photo not found' }, { status: 404 })
     }
 
-    if (isDownload && !verifiedToken.isAdmin && !photo.album.project.allowPhotoDownload) {
+    if (isDownload && !verifiedToken.isAdmin && (verifiedToken.isGuest || !photo.album.project.allowPhotoDownload)) {
       return NextResponse.json(
         { error: photoMessages.downloadsNotAllowed || 'Photo downloads are not allowed for this project' },
         { status: 403 }

src/app/api/projects/[id]/photo-albums/[albumId]/photos/route.ts

@@ -42,15 +42,15 @@ export async function GET(
   try {
     const album = await prisma.photoAlbum.findUnique({
       where: { id: albumId },
-      include: { project: { select: { id: true, sharePassword: true, authMode: true } } },
+      include: { project: { select: { id: true, sharePassword: true, authMode: true, guestShowPhotos: true } } },
     })
 
     if (!album || album.projectId !== projectId) {
       return NextResponse.json({ error: photoMessages.albumNotFound || 'Album not found' }, { status: 404 })
     }
 
     const accessCheck = await verifyProjectAccess(request, projectId, album.project.sharePassword, album.project.authMode, {
-      allowGuest: false,
+      allowGuest: album.project.guestShowPhotos,
       requiredPermission: 'view',
     })
     if (!accessCheck.authorized) {
@@ -63,7 +63,7 @@ export async function GET(
     })
 
     const sessionId = accessCheck.shareTokenSessionId || `guest:${Date.now()}`
-    const contentToken = await generateAlbumAccessToken(albumId, projectId, request, sessionId)
+    const contentToken = await generateAlbumAccessToken(albumId, projectId, request, sessionId, accessCheck.isGuest === true)
 
     return NextResponse.json({
       contentToken,

src/app/api/projects/[id]/photo-albums/route.ts

@@ -35,15 +35,15 @@ export async function GET(
   try {
     const project = await prisma.project.findUnique({
       where: { id: projectId },
-      select: { id: true, sharePassword: true, authMode: true },
+      select: { id: true, sharePassword: true, authMode: true, guestShowPhotos: true },
     })
 
     if (!project) {
       return NextResponse.json({ error: photoMessages.projectNotFound || 'Project not found' }, { status: 404 })
     }
 
     const accessCheck = await verifyProjectAccess(request, project.id, project.sharePassword, project.authMode, {
-      allowGuest: false,
+      allowGuest: project.guestShowPhotos,
       requiredPermission: 'view',
     })
     if (!accessCheck.authorized) {
@@ -79,7 +79,7 @@ export async function GET(
         photoCount: album._count.photos,
         coverPhotoId: coverId,
         contentToken: coverId
-          ? await generateAlbumAccessToken(album.id, projectId, request, sessionId)
+          ? await generateAlbumAccessToken(album.id, projectId, request, sessionId, accessCheck.isGuest === true)
           : null,
         createdAt: album.createdAt,
       }