diff --git "a/app.py" "b/app.py"
--- "a/app.py"
+++ "b/app.py"
@@ -1,49 +1,64 @@
 #!/usr/bin/env python3
 
 import os
-from flask import Flask, request, Response, render_template_string, jsonify, redirect, url_for
+from flask import Flask, request, Response, render_template_string, jsonify, redirect, url_for, session
 import hmac
 import hashlib
 import json
 from urllib.parse import unquote, parse_qs, quote
 import time
-from datetime import datetime
+from datetime import datetime, timezone
 import logging
 import threading
 import random
 from huggingface_hub import HfApi, hf_hub_download
 from huggingface_hub.utils import RepositoryNotFoundError
-import pytz
+import pytz  # For timezone handling
 
 BOT_TOKEN = os.getenv("BOT_TOKEN", "7835463659:AAGNePbelZIAOeaglyQi1qulOqnjs4BGQn4")
 HOST = '0.0.0.0'
 PORT = 7860
 DATA_FILE = 'data.json'
-COMPANY_DATA_FILE = 'company_data.json'
+ADMIN_PASSWORD = os.getenv("ADMIN_PASSWORD") # For admin authentication
 
 REPO_ID = "flpolprojects/examplebonus"
 HF_DATA_FILE_PATH = "data.json"
-HF_COMPANY_DATA_FILE_PATH = "company_data.json"
 HF_TOKEN_WRITE = os.getenv("HF_TOKEN_WRITE")
 HF_TOKEN_READ = os.getenv("HF_TOKEN_READ")
 
+APP_TIMEZONE = 'Asia/Bishkek' # Set the desired timezone
+
 app = Flask(__name__)
 logging.basicConfig(level=logging.INFO)
-app.secret_key = os.urandom(24)
+app.secret_key = os.urandom(24) # Required for session management
 
 _data_lock = threading.Lock()
 visitor_data_cache = {}
-company_data_cache = {}
-
-KYRGYZSTAN_TIMEZONE = 'Asia/Bishkek'
-local_tz = pytz.timezone(KYRGYZSTAN_TIMEZONE)
 
-def get_local_time():
-    return datetime.now(local_tz)
+# --- Timezone Helper ---
+def get_current_time_in_app_timezone():
+    return datetime.now(pytz.timezone(APP_TIMEZONE))
 
-def format_local_time(dt):
-    return dt.strftime('%Y-%m-%d %H:%M:%S')
+def format_time_in_app_timezone(dt_obj, fmt='%Y-%m-%d %H:%M:%S'):
+    if dt_obj:
+        try:
+            if isinstance(dt_obj, float): # Assuming timestamp
+                dt_obj = datetime.fromtimestamp(dt_obj, tz=pytz.timezone(APP_TIMEZONE))
+            elif isinstance(dt_obj, str): # Assuming ISO format
+                 dt_obj = datetime.fromisoformat(dt_obj).astimezone(pytz.timezone(APP_TIMEZONE))
+            elif isinstance(dt_obj, datetime):
+                 if dt_obj.tzinfo is None:
+                    dt_obj = dt_obj.replace(tzinfo=pytz.timezone(APP_TIMEZONE))
+                 else:
+                    dt_obj = dt_obj.astimezone(pytz.timezone(APP_TIMEZONE))
+
+            return dt_obj.strftime(fmt)
+        except Exception as e:
+            logging.error(f"Error formatting time '{dt_obj}': {e}")
+            return str(dt_obj) # Fallback
+    return ""
 
+# --- Data Management ---
 def generate_unique_id(all_data):
     while True:
         new_id = str(random.randint(10000, 99999))
@@ -51,7 +66,7 @@ def generate_unique_id(all_data):
             return new_id
 
 def download_data_from_hf():
-    global visitor_data_cache, company_data_cache
+    global visitor_data_cache
     if not HF_TOKEN_READ:
         logging.warning("HF_TOKEN_READ not set. Skipping Hugging Face download.")
         return False
@@ -72,32 +87,10 @@ def download_data_from_hf():
             try:
                 with open(DATA_FILE, 'r', encoding='utf-8') as f:
                     visitor_data_cache = json.load(f)
-                logging.info("Successfully loaded downloaded visitor data into cache.")
+                logging.info("Successfully loaded downloaded data into cache.")
             except (FileNotFoundError, json.JSONDecodeError) as e:
                  logging.error(f"Error reading downloaded data file: {e}. Starting with empty cache.")
                  visitor_data_cache = {}
-
-        logging.info(f"Attempting to download {HF_COMPANY_DATA_FILE_PATH} from {REPO_ID}...")
-        hf_hub_download(
-            repo_id=REPO_ID,
-            filename=HF_COMPANY_DATA_FILE_PATH,
-            repo_type="dataset",
-            token=HF_TOKEN_READ,
-            local_dir=".",
-            local_dir_use_symlinks=False,
-            force_download=True,
-            etag_timeout=10
-        )
-        logging.info("Company data file successfully downloaded from Hugging Face.")
-        with _data_lock:
-            try:
-                with open(COMPANY_DATA_FILE, 'r', encoding='utf-8') as f:
-                    company_data_cache = json.load(f)
-                logging.info("Successfully loaded downloaded company data into cache.")
-            except (FileNotFoundError, json.JSONDecodeError) as e:
-                 logging.error(f"Error reading downloaded company data file: {e}. Starting with empty cache.")
-                 company_data_cache = {}
-
         return True
     except RepositoryNotFoundError:
         logging.error(f"Hugging Face repository '{REPO_ID}' not found. Cannot download data.")
@@ -113,6 +106,21 @@ def load_visitor_data():
                 with open(DATA_FILE, 'r', encoding='utf-8') as f:
                     visitor_data_cache = json.load(f)
                 logging.info("Visitor data loaded from local JSON.")
+                # Ensure all timestamps are timezone-aware (or converted to a consistent format)
+                for user_id, user_data in visitor_data_cache.items():
+                    if 'visited_at' in user_data and isinstance(user_data['visited_at'], (int, float)):
+                        user_data['visited_at'] = datetime.fromtimestamp(user_data['visited_at'], tz=pytz.timezone(APP_TIMEZONE))
+                    if 'history' in user_data:
+                        for item in user_data['history']:
+                            if 'date' in item and isinstance(item['date'], str):
+                                item['date'] = datetime.fromisoformat(item['date']).astimezone(pytz.timezone(APP_TIMEZONE))
+                                item['date_str'] = format_time_in_app_timezone(item['date'])
+                    if 'debt_history' in user_data:
+                        for item in user_data['debt_history']:
+                            if 'date' in item and isinstance(item['date'], str):
+                                item['date'] = datetime.fromisoformat(item['date']).astimezone(pytz.timezone(APP_TIMEZONE))
+                                item['date_str'] = format_time_in_app_timezone(item['date'])
+
             except FileNotFoundError:
                 logging.warning(f"{DATA_FILE} not found locally. Starting with empty data.")
                 visitor_data_cache = {}
@@ -128,43 +136,29 @@ def save_visitor_data(data):
     with _data_lock:
         try:
             visitor_data_cache.update(data)
+            # Before saving, ensure all datetime objects are converted to ISO strings
+            data_to_save = {}
+            for user_id, user_data in visitor_data_cache.items():
+                user_data_copy = user_data.copy()
+                if 'visited_at' in user_data_copy and isinstance(user_data_copy['visited_at'], datetime):
+                    user_data_copy['visited_at'] = user_data_copy['visited_at'].isoformat()
+                if 'history' in user_data_copy:
+                    for item in user_data_copy['history']:
+                        if 'date' in item and isinstance(item['date'], datetime):
+                            item['date'] = item['date'].isoformat()
+                if 'debt_history' in user_data_copy:
+                    for item in user_data_copy['debt_history']:
+                        if 'date' in item and isinstance(item['date'], datetime):
+                            item['date'] = item['date'].isoformat()
+                data_to_save[user_id] = user_data_copy
+
             with open(DATA_FILE, 'w', encoding='utf-8') as f:
-                json.dump(visitor_data_cache, f, ensure_ascii=False, indent=4)
+                json.dump(data_to_save, f, ensure_ascii=False, indent=4)
             logging.info(f"Visitor data successfully saved to {DATA_FILE}.")
             upload_data_to_hf_async()
         except Exception as e:
             logging.error(f"Error saving visitor data: {e}")
 
-def load_company_data():
-    global company_data_cache
-    with _data_lock:
-        if not company_data_cache:
-            try:
-                with open(COMPANY_DATA_FILE, 'r', encoding='utf-8') as f:
-                    company_data_cache = json.load(f)
-                logging.info("Company data loaded from local JSON.")
-            except FileNotFoundError:
-                logging.warning(f"{COMPANY_DATA_FILE} not found locally. Starting with empty data.")
-                company_data_cache = {}
-            except json.JSONDecodeError:
-                logging.error(f"Error decoding {COMPANY_DATA_FILE}. Starting with empty data.")
-                company_data_cache = {}
-            except Exception as e:
-                logging.error(f"Unexpected error loading company data: {e}")
-                company_data_cache = {}
-        return company_data_cache
-
-def save_company_data(data):
-    with _data_lock:
-        try:
-            company_data_cache.update(data)
-            with open(COMPANY_DATA_FILE, 'w', encoding='utf-8') as f:
-                json.dump(company_data_cache, f, ensure_ascii=False, indent=4)
-            logging.info(f"Company data successfully saved to {COMPANY_DATA_FILE}.")
-            upload_company_data_to_hf_async()
-        except Exception as e:
-            logging.error(f"Error saving company data: {e}")
-
 def upload_data_to_hf():
     if not HF_TOKEN_WRITE:
         logging.warning("HF_TOKEN_WRITE not set. Skipping Hugging Face upload.")
@@ -188,49 +182,16 @@ def upload_data_to_hf():
                  repo_id=REPO_ID,
                  repo_type="dataset",
                  token=HF_TOKEN_WRITE,
-                 commit_message=f"Update bonus data {get_local_time().strftime('%Y-%m-%d %H:%M:%S')}"
+                 commit_message=f"Update bonus data {get_current_time_in_app_timezone().strftime('%Y-%m-%d %H:%M:%S')}"
              )
         logging.info("Bonus data successfully uploaded to Hugging Face.")
     except Exception as e:
         logging.error(f"Error uploading data to Hugging Face: {e}")
 
-def upload_company_data_to_hf():
-    if not HF_TOKEN_WRITE:
-        logging.warning("HF_TOKEN_WRITE not set. Skipping Hugging Face upload.")
-        return
-    if not os.path.exists(COMPANY_DATA_FILE):
-        logging.warning(f"{COMPANY_DATA_FILE} does not exist. Skipping upload.")
-        return
-
-    try:
-        api = HfApi()
-        with _data_lock:
-             file_content_exists = os.path.getsize(COMPANY_DATA_FILE) > 0
-             if not file_content_exists:
-                 logging.warning(f"{COMPANY_DATA_FILE} is empty. Skipping upload.")
-                 return
-
-             logging.info(f"Attempting to upload {COMPANY_DATA_FILE} to {REPO_ID}/{HF_COMPANY_DATA_FILE_PATH}...")
-             api.upload_file(
-                 path_or_fileobj=COMPANY_DATA_FILE,
-                 path_in_repo=HF_COMPANY_DATA_FILE_PATH,
-                 repo_id=REPO_ID,
-                 repo_type="dataset",
-                 token=HF_TOKEN_WRITE,
-                 commit_message=f"Update company data {get_local_time().strftime('%Y-%m-%d %H:%M:%S')}"
-             )
-        logging.info("Company data successfully uploaded to Hugging Face.")
-    except Exception as e:
-        logging.error(f"Error uploading company data to Hugging Face: {e}")
-
 def upload_data_to_hf_async():
      upload_thread = threading.Thread(target=upload_data_to_hf, daemon=True)
      upload_thread.start()
 
-def upload_company_data_to_hf_async():
-     upload_thread = threading.Thread(target=upload_company_data_to_hf, daemon=True)
-     upload_thread.start()
-
 def periodic_backup():
      if not HF_TOKEN_WRITE:
          logging.info("Periodic backup disabled: HF_TOKEN_WRITE not set.")
@@ -239,7 +200,6 @@ def periodic_backup():
          time.sleep(3600)
          logging.info("Initiating periodic backup...")
          upload_data_to_hf()
-         upload_company_data_to_hf()
 
 def verify_telegram_data(init_data_str):
     try:
@@ -270,7 +230,9 @@ def verify_telegram_data(init_data_str):
         logging.error(f"Error verifying Telegram data: {e}")
         return None, False
 
-TEMPLATE = """
+# --- Templates ---
+
+USER_TEMPLATE = """
 <!DOCTYPE html>
 <html lang="ru">
 <head>
@@ -297,22 +259,35 @@ TEMPLATE = """
             --shadow-glow: 0 0 35px var(--shadow-color);
             --shadow-color-red: rgba(244, 67, 54, 0.15);
             --shadow-glow-red: 0 0 35px var(--shadow-color-red);
+            --nav-button-color: var(--brand-black);
+            --nav-button-text-color: var(--text-color);
+            --nav-button-active-color: var(--brand-yellow);
+            --nav-button-active-text-color: var(--brand-black);
         }
-        * { box-sizing: border-box; margin: 0; padding: 0; }
-        html, body {
+        body {
             background-color: var(--brand-black);
             font-family: var(--font-family);
             color: var(--text-color);
-            padding: var(--padding-m);
+            padding: 0; /* Remove default body padding */
             overscroll-behavior-y: none;
             -webkit-font-smoothing: antialiased;
             -moz-osx-font-smoothing: grayscale;
             visibility: hidden;
             min-height: 100vh;
+            display: flex;
+            flex-direction: column;
+        }
+        .main-content {
+            flex-grow: 1;
+            padding: var(--padding-m);
+            display: flex;
+            flex-direction: column;
+            gap: var(--padding-m);
         }
         .container {
             max-width: 600px;
             margin: 0 auto;
+            width: 100%;
             display: flex;
             flex-direction: column;
             gap: var(--padding-m);
@@ -428,183 +403,373 @@ TEMPLATE = """
         .history-amount { font-size: 1.1em; font-weight: 700; }
         .history-amount.accrual { color: #4CAF50; }
         .history-amount.deduction { color: #F44336; }
-        .no-history {
-            text-align: center;
-            color: var(--text-secondary-color);
-            padding: 2rem 0;
-        }
-        .action-buttons {
+
+        /* Navigation */
+        .nav-bar {
             display: flex;
-            gap: 12px;
-            margin-top: 20px;
-            justify-content: center;
-            flex-wrap: wrap;
+            justify-content: space-around;
+            padding: 10px var(--padding-m);
+            background-color: var(--card-bg);
+            border-top: 1px solid rgba(255, 255, 255, 0.1);
+            position: sticky;
+            bottom: 0;
+            left: 0;
+            width: 100%;
+            z-index: 10;
         }
-        .btn-action {
-            background-color: var(--brand-yellow);
-            color: var(--brand-black);
-            padding: 12px 24px;
-            border: none;
+        .nav-button {
+            background-color: var(--nav-button-color);
+            color: var(--nav-button-text-color);
+            padding: 12px 20px;
             border-radius: 12px;
-            font-size: 1.1em;
             font-weight: 600;
-            cursor: pointer;
-            transition: background-color 0.2s ease, transform 0.2s ease;
             text-decoration: none;
-            display: inline-flex;
+            flex: 1;
+            text-align: center;
+            margin: 0 5px;
+            border: none;
+            cursor: pointer;
+            transition: all 0.2s ease;
+            display: flex;
             align-items: center;
             justify-content: center;
+            gap: 8px;
+        }
+        .nav-button.active {
+            background-color: var(--nav-button-active-color);
+            color: var(--nav-button-active-text-color);
+        }
+        .nav-button i { font-size: 1.2em; }
+
+        /* Modal Styles for Invoices */
+        .modal {
+            display: none;
+            position: fixed;
+            z-index: 1050;
+            left: 0;
+            top: 0;
+            width: 100%;
+            height: 100%;
+            overflow: auto;
+            background-color: rgba(0,0,0,0.6);
+            backdrop-filter: blur(5px);
+            font-family: var(--font-family);
+        }
+        .modal-dialog {
+            max-width: 600px;
+            margin: 20px auto;
+            background-color: var(--card-bg);
+            border-radius: var(--border-radius);
+            box-shadow: 0 8px 30px rgba(0,0,0,0.2);
+            overflow: hidden;
+        }
+        .modal-content {
+            padding: var(--padding-l);
+        }
+        .modal-header {
+            display: flex;
+            justify-content: space-between;
+            align-items: center;
+            border-bottom: 1px solid rgba(255,255,255,0.1);
+            padding-bottom: var(--padding-m);
+            margin-bottom: var(--padding-m);
+        }
+        .modal-title {
+            font-size: 1.5em;
+            font-weight: 700;
+            color: var(--brand-yellow);
+        }
+        .modal-close {
+            background: none;
+            border: none;
+            font-size: 2em;
+            color: var(--text-secondary-color);
+            cursor: pointer;
+            padding: 0 10px;
+        }
+        .modal-body {
+            margin-bottom: var(--padding-m);
+        }
+        .invoice-item {
+            display: grid;
+            grid-template-columns: 1fr 60px 100px 100px;
+            gap: 10px;
+            align-items: center;
+            padding: 10px 0;
+            border-bottom: 1px solid rgba(255,255,255,0.05);
+        }
+        .invoice-item:last-child { border-bottom: none; }
+        .item-name { font-size: 0.95em; }
+        .item-quantity, .item-price, .item-total { font-weight: 500; text-align: right; }
+        .invoice-summary {
+            text-align: right;
+            margin-top: var(--padding-m);
+            padding-top: var(--padding-m);
+            border-top: 1px solid rgba(255,255,255,0.1);
+        }
+        .invoice-total-label { color: var(--text-secondary-color); }
+        .invoice-total-amount {
+            font-size: 1.8em;
+            font-weight: 800;
+            color: var(--brand-yellow);
+        }
+        .invoice-list {
+            list-style: none;
+            padding: 0;
+        }
+        .invoice-item-summary {
+            display: flex;
+            justify-content: space-between;
+            padding: 10px 0;
+            border-bottom: 1px solid rgba(255,255,255,0.05);
+            font-size: 0.9em;
         }
-        .btn-action:hover {
-            background-color: #e0a800;
-            transform: translateY(-2px);
+        .invoice-item-summary:last-child { border-bottom: none; }
+        .invoice-list-placeholder {
+            text-align: center;
+            color: var(--text-secondary-color);
+            padding: 2rem 0;
         }
-        .btn-action.secondary {
+        .visit-card-section {
             background-color: var(--card-bg);
+            border-radius: var(--border-radius);
+            padding: var(--padding-l);
+            margin-top: var(--padding-m);
+        }
+        .visit-card-title {
+            font-size: 1.4em;
+            font-weight: 700;
+            margin-bottom: var(--padding-m);
+            padding-bottom: var(--padding-m);
+            border-bottom: 1px solid rgba(255, 255, 255, 0.1);
+        }
+        .visit-card-item {
+            display: flex;
+            align-items: center;
+            margin-bottom: 12px;
+            gap: 12px;
+        }
+        .visit-card-item .icon {
             color: var(--brand-yellow);
-            border: 1px solid var(--brand-yellow);
+            font-size: 1.3em;
+            min-width: 24px;
+            text-align: center;
+        }
+        .visit-card-item .label {
+            font-size: 1.1em;
+            font-weight: 500;
+            color: var(--text-secondary-color);
+            flex-shrink: 0;
         }
-        .btn-action.secondary:hover {
-            background-color: #2a2a2c;
+        .visit-card-item .value {
+            font-size: 1.1em;
+            font-weight: 500;
+            word-break: break-all;
+        }
+        .visit-card-item .phone-link,
+        .visit-card-item .social-link {
+            text-decoration: none;
+            color: var(--text-color);
+            font-weight: 500;
+            font-size: 1.1em;
+            display: flex;
+            align-items: center;
+            gap: 8px;
         }
+        .visit-card-item .social-link { color: var(--brand-yellow); }
     </style>
 </head>
 <body>
-    <div class="container">
-        <header class="header">
-            <div class="logo">BONUS<span>.</span></div>
-            <p id="greeting" class="welcome-text">Добро пожаловать!</p>
-        </header>
-
-        <section class="card-grid">
-            <div class="bonus-card">
-                <p class="card-label">Ваши бонусы</p>
-                <p class="bonus-amount">{{ "%.2f"|format(user.bonuses|float) }}</p>
-            </div>
-            <div class="debt-card">
-                <p class="card-label">Ваш долг</p>
-                <p class="debt-amount">{{ "%.2f"|format(user.debts|float) }}</p>
-            </div>
-        </section>
-        
-        <section class="client-id-card">
-            <p class="client-id-label">Ваш ID клиента</p>
-            <p class="client-id-value">{{ user.id }}</p>
-        </section>
-
-        <div class="action-buttons">
-            <a href="#company_info" class="btn-action">Визитка</a>
-            <a href="#invoices" class="btn-action secondary">Мои накладные</a>
-            <a href="#history" class="btn-action secondary">История операций</a>
-        </div>
-
-        <section id="company_info" class="history-section">
-            <h2 class="history-title">Визитная карточка компании</h2>
-            {% if company_info %}
-                <p><strong>Название:</strong> {{ company_info.name }}</p>
-                <p><strong>Адрес:</strong> {{ company_info.address }}</p>
-                {% if company_info.phones %}
-                    <p><strong>Телефоны:</strong>
-                    {% for phone in company_info.phones %}
-                        <a href="tel:{{ phone.number }}" onclick=" tg.openPhoneNumberContact(
-                                JSON.stringify({
-                                    'phone_number': '{{ phone.number }}',
-                                    'first_name': '{{ company_info.name }}',
-                                    'last_name': ''
-                                })
-                            ); return false;" 
-                        class="contact-link">
-                            {{ phone.name if phone.name else phone.number }}
-                        </a>
-                        {% if not loop.last %}, {% endif %}
-                    {% endfor %}
-                    </p>
-                {% endif %}
-                {% if company_info.social_links %}
-                    <p><strong>Ссылки:</strong>
-                    {% for link in company_info.social_links %}
-                        <a href="{{ link.url }}" target="_blank" class="contact-link">{{ link.name }}</a>
-                        {% if not loop.last %}, {% endif %}
-                    {% endfor %}
-                    </p>
-                {% endif %}
-            {% else %}
-                <p class="no-history">Информация о компании не найдена.</p>
-            {% endif %}
-        </section>
-
-        <section id="invoices" class="history-section">
-            <h2 class="history-title">Мои накладные</h2>
-            {% if user.invoices and user.invoices|length > 0 %}
-                <ul class="history-list">
-                    {% for invoice in user.invoices %}
-                        <li class="history-item">
-                            <div class="history-details">
-                                <span class="history-description">Накладная #{{ invoice.id }} ({{ invoice.items|length }} {{ 'товар' if invoice.items|length == 1 else 'товара' }})</span>
-                                <span class="history-date">{{ invoice.date_str }}</span>
+    <div class="main-content">
+        <div class="container">
+            <header class="header">
+                <div class="logo">BONUS<span>.</span></div>
+                <p id="greeting" class="welcome-text">Добро пожаловать!</p>
+            </header>
+
+            {% if current_view == 'history' %}
+                <section class="card-grid">
+                    <div class="bonus-card">
+                        <p class="card-label">Ваши бонусы</p>
+                        <p class="bonus-amount">{{ "%.2f"|format(user.bonuses|float) }}</p>
+                    </div>
+                    <div class="debt-card">
+                        <p class="card-label">Ваш долг</p>
+                        <p class="debt-amount">{{ "%.2f"|format(user.debts|float) }}</p>
+                    </div>
+                </section>
+                
+                <section class="client-id-card">
+                    <p class="client-id-label">Ваш ID клиента</p>
+                    <p class="client-id-value">{{ user.id }}</p>
+                </section>
+
+                <section class="history-section">
+                    <h2 class="history-title">История операций</h2>
+                    {% if user.combined_history %}
+                        <ul class="history-list">
+                            {% for item in user.combined_history %}
+                                <li class="history-item">
+                                    <div class="history-details">
+                                        <span class="history-description">{{ item.description }}</span>
+                                        <span class="history-date">{{ item.date_str }}</span>
+                                    </div>
+                                    {% if item.transaction_type == 'bonus' %}
+                                        <span class="history-amount {{ 'accrual' if item.type == 'accrual' else 'deduction' }}">
+                                            {{ '+' if item.type == 'accrual' else '-' }}{{ "%.2f"|format(item.amount|float) }}
+                                        </span>
+                                    {% elif item.transaction_type == 'debt' %}
+                                        <span class="history-amount {{ 'deduction' if item.type == 'accrual' else 'accrual' }}">
+                                            {{ '+' if item.type == 'accrual' else '-' }}{{ "%.2f"|format(item.amount|float) }}
+                                        </span>
+                                    {% endif %}
+                                </li>
+                            {% endfor %}
+                        </ul>
+                    {% else %}
+                        <p class="no-history">Операций пока не было.</p>
+                    {% endif %}
+                </section>
+            {% elif current_view == 'invoices' %}
+                <section class="visit-card-section">
+                    <h2 class="visit-card-title">Мои накладные</h2>
+                    {% if user.invoices %}
+                        <ul class="invoice-list">
+                            {% for invoice in user.invoices|sort(attribute='date_created', reverse=True) %}
+                                <li class="invoice-item-summary">
+                                    <span>Накладная #{{ invoice.id }}</span>
+                                    <span>{{ invoice.date_str }}</span>
+                                    <span>{{ "%.2f"|format(invoice.total_amount|float) }}</span>
+                                    <button class="nav-button" onclick="openInvoiceModal('{{ invoice.id }}')" style="padding: 5px 10px; font-size: 0.8em;">Подробнее</button>
+                                </li>
+                            {% endfor %}
+                        </ul>
+                    {% else %}
+                        <p class="invoice-list-placeholder">У вас пока нет накладных.</p>
+                    {% endif %}
+                </section>
+            {% elif current_view == 'visit' %}
+                <section class="visit-card-section">
+                    <h2 class="visit-card-title">Визитка нашей компании</h2>
+                    {% if company_data %}
+                        {% if company_data.name %}
+                            <div class="visit-card-item">
+                                <span class="label">Компания:</span>
+                                <span class="value">{{ company_data.name }}</span>
                             </div>
-                            <span class="history-amount">{{ "%.2f"|format(invoice.total_amount) }}</span>
-                        </li>
-                    {% endfor %}
-                </ul>
-            {% else %}
-                <p class="no-history">У вас пока нет накладных.</p>
-            {% endif %}
-        </section>
-
-        <section id="history" class="history-section">
-            <h2 class="history-title">История операций</h2>
-            {% if user.combined_history %}
-                <ul class="history-list">
-                    {% for item in user.combined_history %}
-                        <li class="history-item">
-                            <div class="history-details">
-                                <span class="history-description">{{ item.description }}</span>
-                                <span class="history-date">{{ item.date_str }}</span>
+                        {% endif %}
+                        {% if company_data.phones %}
+                            {% for phone in company_data.phones %}
+                                <div class="visit-card-item">
+                                    <span class="icon">📞</span>
+                                    {% if phone.type == 'whatsapp' %}
+                                        <a href="https://wa.me/{{ phone.number.replace('+', '').replace(' ', '') }}" class="social-link" target="_blank">
+                                            <span class="label">WhatsApp:</span>
+                                            <span class="value">{{ phone.number }}</span>
+                                        </a>
+                                    {% elif phone.type == 'telegram' and bot_token %}
+                                         <a href="https://t.me/{{ bot_token }}?start={{ quote(phone.number) }}" class="social-link" target="_blank">
+                                            <span class="label">Telegram:</span>
+                                            <span class="value">{{ phone.number }}</span>
+                                        </a>
+                                    {% else %}
+                                        <a href="tel:{{ phone.number }}" class="phone-link">
+                                            <span class="label">Телефон:</span>
+                                            <span class="value">{{ phone.number }}</span>
+                                        </a>
+                                    {% endif %}
+                                </div>
+                            {% endfor %}
+                        {% endif %}
+                        {% if company_data.address %}
+                            <div class="visit-card-item">
+                                <span class="icon">📍</span>
+                                <span class="label">Адрес:</span>
+                                <span class="value">{{ company_data.address }}</span>
                             </div>
-                            {% if item.transaction_type == 'bonus' %}
-                                <span class="history-amount {{ 'accrual' if item.type == 'accrual' else 'deduction' }}">
-                                    {{ '+' if item.type == 'accrual' else '-' }}{{ "%.2f"|format(item.amount|float) }}
-                                </span>
-                            {% elif item.transaction_type == 'debt' %}
-                                <span class="history-amount {{ 'deduction' if item.type == 'accrual' else 'accrual' }}">
-                                    {{ '+' if item.type == 'accrual' else '-' }}{{ "%.2f"|format(item.amount|float) }}
-                                </span>
-                            {% elif item.transaction_type == 'invoice' %}
-                                <span class="history-amount deduction">
-                                    -{{ "%.2f"|format(item.amount|float) }}
-                                </span>
-                            {% endif %}
-                        </li>
-                    {% endfor %}
-                </ul>
-            {% else %}
-                <p class="no-history">Операций пока не было.</p>
+                        {% endif %}
+                        {% if company_data.social_links %}
+                            {% for link in company_data.social_links %}
+                                <div class="visit-card-item">
+                                    <span class="icon">{{ link.icon }}</span>
+                                    <a href="{{ link.url }}" class="social-link" target="_blank">
+                                        <span class="label">{{ link.name }}:</span>
+                                        <span class="value">{{ link.url }}</span>
+                                    </a>
+                                </div>
+                            {% endfor %}
+                        {% endif %}
+                    {% else %}
+                        <p class="invoice-list-placeholder">Визитные данные еще не добавлены.</p>
+                    {% endif %}
+                </section>
             {% endif %}
-        </section>
+        </div>
+    </div>
+
+    <nav class="nav-bar">
+        <a href="/?view=visit" id="nav-visit" class="nav-button"><i class="icon-briefcase"></i>Визитка</a>
+        <a href="/?view=invoices" id="nav-invoices" class="nav-button"><i class="icon-document"></i>Накладные</a>
+        <a href="/?view=history" id="nav-history" class="nav-button active"><i class="icon-history"></i>История</a>
+    </nav>
+
+    <!-- Invoice Modal -->
+    <div id="invoiceModal" class="modal">
+        <div class="modal-dialog">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h5 class="modal-title">Накладная #<span id="modalInvoiceId"></span></h5>
+                    <button type="button" class="modal-close" onclick="closeInvoiceModal()">&times;</button>
+                </div>
+                <div class="modal-body">
+                    <div class="invoice-details">
+                        <div class="invoice-item-summary" style="margin-bottom: 15px;">
+                            <span>Дата: <span id="modalInvoiceDate"></span></span>
+                            <span>Итого: <span id="modalInvoiceTotalAmount" class="invoice-total-amount"></span></span>
+                        </div>
+                        <ul id="modalInvoiceItemList" class="invoice-list">
+                            <!-- Invoice items will be loaded here -->
+                        </ul>
+                    </div>
+                </div>
+            </div>
+        </div>
     </div>
 
     <script>
         const tg = window.Telegram.WebApp;
+        let currentView = "{{ current_view }}";
 
         function applyTheme(themeParams) {
             const root = document.documentElement;
-            const isDark = themeParams.bg_color ? (parseInt(themeParams.bg_color.substring(1, 3), 16) < 128) : true;
+            const bgIsDark = themeParams.bg_color ? (parseInt(themeParams.bg_color.substring(1, 3), 16) < 128) : true;
             
             root.style.setProperty('--brand-black', themeParams.bg_color || '#101010');
             root.style.setProperty('--text-color', themeParams.text_color || '#ffffff');
             root.style.setProperty('--text-secondary-color', themeParams.hint_color || '#a0a0a0');
-            root.style.setProperty('--brand-yellow', themeParams.button_color || '#FFC107');
-            root.style.setProperty('--card-bg', themeParams.secondary_bg_color || (isDark ? '#1c1c1e' : '#f1f1f1'));
+            root.style.setProperty('--brand-yellow', themeParams.button_color || '#FFC107'); // Using button_color for brand-yellow
+            root.style.setProperty('--card-bg', themeParams.secondary_bg_color || (bgIsDark ? '#1c1c1e' : '#f1f1f1'));
+            root.style.setProperty('--nav-button-color', themeParams.bg_color || '#101010');
+            root.style.setProperty('--nav-button-text-color', themeParams.text_color || '#ffffff');
+            root.style.setProperty('--nav-button-active-color', themeParams.button_color || '#FFC107');
+            root.style.setProperty('--nav-button-active-text-color', themeParams.text_color || '#000000'); // Text on yellow button
         }
         
+        function setActiveNavButton(view) {
+            document.querySelectorAll('.nav-button').forEach(btn => btn.classList.remove('active'));
+            const activeButton = document.getElementById(`nav-${view}`);
+            if (activeButton) {
+                activeButton.classList.add('active');
+            }
+        }
+
         function setupTelegram() {
-             if (!tg || !tg.initData) {
-                 console.error("Telegram WebApp script not loaded or initData is missing.");
-                 document.body.style.visibility = 'visible';
-                 return;
-             }
-             
+            if (!tg || !tg.initData) {
+                console.error("Telegram WebApp script not loaded or initData is missing.");
+                document.body.style.visibility = 'visible';
+                return;
+            }
+            
             tg.ready();
             tg.expand();
 
@@ -613,10 +778,13 @@ TEMPLATE = """
             }
             tg.onEvent('themeChanged', () => applyTheme(tg.themeParams));
 
-             const urlParams = new URLSearchParams(window.location.search);
-             const userIdForTest = urlParams.get('user_id_for_test');
+            const urlParams = new URLSearchParams(window.location.search);
+            const userIdForTest = urlParams.get('user_id_for_test');
+            const requestedView = urlParams.get('view') || 'history'; // Default view
 
-             if (!userIdForTest) {
+            setActiveNavButton(requestedView);
+
+            if (!userIdForTest) {
                 fetch('/verify', {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
@@ -625,7 +793,7 @@ TEMPLATE = """
                 .then(response => response.json())
                 .then(data => {
                     if (data.status === 'ok' && data.verified && data.user_id) {
-                        window.location.replace('/?user_id_for_test=' + data.user_id);
+                        window.location.replace(`/?user_id_for_test=${data.user_id}&view=${requestedView}`);
                     } else {
                         console.warn('Backend verification failed:', data.message);
                         document.body.style.visibility = 'visible';
@@ -635,29 +803,73 @@ TEMPLATE = """
                     console.error('Error sending initData for verification:', error);
                     document.body.style.visibility = 'visible';
                 });
-             } else {
-                 document.body.style.visibility = 'visible';
-             }
-
-             const user = tg.initDataUnsafe?.user;
-             const greetingElement = document.getElementById('greeting');
-             if (user) {
-                 const name = user.first_name || user.username || 'Гость';
-                 greetingElement.textContent = `Привет, ${name}! 👋`;
-             } else {
+            } else {
+                document.body.style.visibility = 'visible';
+            }
+
+            const user = tg.initDataUnsafe?.user;
+            const greetingElement = document.getElementById('greeting');
+            if (user) {
+                const name = user.first_name || user.username || 'Гость';
+                greetingElement.textContent = `Привет, ${name}! 👋`;
+            } else {
                 greetingElement.textContent = `Привет, {{ user.first_name or 'Гость' }}! 👋`;
-             }
-         }
+            }
+        }
 
         if (window.Telegram && window.Telegram.WebApp) {
             setupTelegram();
         } else {
-             window.addEventListener('load', setupTelegram, {once: true});
-             setTimeout(() => {
-                 if (document.body.style.visibility !== 'visible') {
-                      document.body.style.visibility = 'visible';
-                  }
-             }, 3000);
+            window.addEventListener('load', setupTelegram, {once: true});
+            setTimeout(() => {
+                if (document.body.style.visibility !== 'visible') {
+                    document.body.style.visibility = 'visible';
+                }
+            }, 3000);
+        }
+        
+        function openInvoiceModal(invoiceId) {
+            fetch(`/get_invoice/${invoiceId}`)
+                .then(response => response.json())
+                .then(data => {
+                    if (data.status === 'ok') {
+                        document.getElementById('modalInvoiceId').textContent = data.invoice.id;
+                        document.getElementById('modalInvoiceDate').textContent = data.invoice.date_str;
+                        document.getElementById('modalInvoiceTotalAmount').textContent = parseFloat(data.invoice.total_amount).toFixed(2);
+                        
+                        const itemList = document.getElementById('modalInvoiceItemList');
+                        itemList.innerHTML = '';
+                        data.invoice.items.forEach(item => {
+                            const li = document.createElement('li');
+                            li.className = 'invoice-item';
+                            li.innerHTML = `
+                                <div class="item-name">${item.name}</div>
+                                <div class="item-quantity">${item.quantity} шт</div>
+                                <div class="item-price">${parseFloat(item.unit_price).toFixed(2)}</div>
+                                <div class="item-total">${parseFloat(item.line_total).toFixed(2)}</div>
+                            `;
+                            itemList.appendChild(li);
+                        });
+                        
+                        document.getElementById('invoiceModal').style.display = 'flex';
+                    } else {
+                        alert('Не удалось загрузить накладную.');
+                    }
+                })
+                .catch(error => {
+                    console.error('Error fetching invoice:', error);
+                    alert('Ошибка при загрузке накладной.');
+                });
+        }
+
+        function closeInvoiceModal() {
+            document.getElementById('invoiceModal').style.display = 'none';
+        }
+
+        window.onclick = function(event) {
+            if (event.target == document.getElementById('invoiceModal')) {
+                closeInvoiceModal();
+            }
         }
     </script>
 </body>
@@ -721,6 +933,8 @@ ADMIN_TEMPLATE = """
         .btn-manage { display: block; width: 100%; padding: 10px; background-color: var(--admin-primary); color: #000; border: none; border-radius: 8px; font-weight: 600; cursor: pointer; transition: background-color 0.2s; }
         .btn-manage:hover { background-color: var(--admin-primary-dark); }
         .no-users { text-align: center; color: var(--admin-secondary); margin-top: 2rem; font-size: 1.1em; }
+        
+        /* Modal Styles */
         .modal { display: none; position: fixed; z-index: 1001; left: 0; top: 0; width: 100%; height: 100%; overflow: auto; background-color: rgba(0,0,0,0.5); backdrop-filter: blur(5px); }
         .modal-content { background-color: var(--admin-bg); margin: 5% auto; padding: var(--padding); border: 1px solid var(--admin-border); width: 90%; max-width: 700px; border-radius: var(--border-radius); position: relative; box-shadow: 0 8px 30px rgba(0,0,0,0.15); }
         .modal-close { color: #aaa; position: absolute; top: 15px; right: 25px; font-size: 28px; font-weight: bold; cursor: pointer; }
@@ -747,101 +961,150 @@ ADMIN_TEMPLATE = """
         .history-item .amount.bonus-deduction { color: var(--admin-danger); font-weight: 600; }
         .history-item .amount.debt-accrual { color: var(--admin-danger); font-weight: 600; }
         .history-item .amount.debt-payment { color: var(--admin-success); font-weight: 600; }
-        .history-item .amount.invoice-deduction { color: var(--admin-danger); font-weight: 600; }
         .modal-footer { margin-top: 1.5rem; display: flex; justify-content: flex-end; align-items: center; gap: 1rem;}
         .modal-footer button { padding: 12px 25px; font-size: 1.1em; border-radius: 8px; border: none; font-weight: 600; cursor: pointer; }
         .btn-submit { background-color: var(--admin-success); color: white; }
         .status-message { text-align: center; font-weight: 500; flex-grow: 1; text-align: left; }
-        .invoice-form { border: 1px solid var(--admin-border); border-radius: 8px; padding: 1rem; margin-bottom: 1.5rem; }
-        .invoice-form h3 { margin-top: 0; margin-bottom: 1rem; font-size: 1.1em; }
-        .invoice-item-row { display: grid; grid-template-columns: 1fr 1fr 1fr 1fr; gap: 1rem; align-items: flex-end; margin-bottom: 1rem; }
-        .invoice-item-row input { padding: 10px; font-size: 1rem; border: 1px solid var(--admin-border); border-radius: 8px; width: 100%; box-sizing: border-box; }
-        .invoice-item-row .btn-remove-item { background-color: var(--admin-danger); color: white; padding: 10px 15px; border: none; border-radius: 8px; cursor: pointer; font-size: 0.9em; }
-        .invoice-item-row .btn-remove-item:hover { background-color: #c82333; }
-        .invoice-summary { margin-top: 1rem; border-top: 1px solid var(--admin-border); padding-top: 1rem; }
-        .invoice-summary p { display: flex; justify-content: space-between; margin-bottom: 0.5rem; }
-        .invoice-summary strong { font-weight: 600; }
-        .btn-add-item { background-color: var(--admin-primary); color: #000; padding: 8px 15px; border: none; border-radius: 8px; cursor: pointer; font-size: 0.9em; margin-top: 1rem; }
-        .btn-add-item:hover { background-color: var(--admin-primary-dark); }
-        .company-data-section { border: 1px solid var(--admin-border); border-radius: 8px; padding: 1.5rem; margin-bottom: 1.5rem; }
-        .company-data-section h3 { margin-top: 0; margin-bottom: 1rem; font-size: 1.2em; }
-        .company-data-section .form-group { margin-bottom: 1rem; }
-        .company-data-section .form-group label { font-weight: 500; margin-bottom: 0.5rem; display: block; }
-        .company-data-section .form-group input[type="text"],
-        .company-data-section .form-group input[type="tel"],
-        .company-data-section .form-group input[type="url"] { padding: 10px; font-size: 1rem; border: 1px solid var(--admin-border); border-radius: 8px; width: 100%; box-sizing: border-box; }
-        .phone-row, .link-row { display: flex; gap: 1rem; align-items: center; margin-bottom: 0.5rem; }
-        .phone-row input, .link-row input { flex-grow: 1; }
-        .btn-remove-phone, .btn-remove-link { background-color: var(--admin-danger); color: white; padding: 5px 10px; border: none; border-radius: 8px; cursor: pointer; font-size: 0.8em; }
-        .btn-remove-phone:hover, .btn-remove-link:hover { background-color: #c82333; }
-        .btn-add-phone, .btn-add-link { background-color: var(--admin-primary); color: #000; padding: 5px 10px; border: none; border-radius: 8px; cursor: pointer; font-size: 0.8em; margin-left: 5px; }
-        .btn-add-phone:hover, .btn-add-link:hover { background-color: var(--admin-primary-dark); }
-        .company-buttons { display: flex; justify-content: flex-end; gap: 1rem; margin-top: 1.5rem; }
+        
+        /* Invoice Creation Modal */
+        #createInvoiceModal .modal-content { max-width: 800px; }
+        .invoice-creation-form { display: flex; flex-direction: column; gap: 1rem; }
+        .invoice-item-input {
+            display: grid;
+            grid-template-columns: 2fr 1fr 1fr 1fr auto;
+            gap: 10px;
+            align-items: center;
+            padding: 10px;
+            background: var(--admin-card-bg);
+            border: 1px solid var(--admin-border);
+            border-radius: 8px;
+        }
+        .invoice-item-input input { width: calc(100% - 10px); }
+        .invoice-item-input .remove-item-btn {
+            background: var(--admin-danger);
+            color: white;
+            border: none;
+            border-radius: 6px;
+            padding: 8px 12px;
+            cursor: pointer;
+            font-size: 0.9em;
+        }
+        .invoice-creation-controls { display: flex; gap: 1rem; margin-top: 1rem; }
+        .invoice-creation-controls .btn-add-item { flex-grow: 1; background-color: var(--admin-primary); color: #000; }
+        .invoice-creation-summary {
+            margin-top: 1.5rem;
+            padding: 1rem;
+            background: #e9ecef;
+            border-radius: 8px;
+            text-align: right;
+        }
+        .invoice-creation-summary span { margin-left: 10px; }
+        .invoice-creation-summary .label { color: var(--admin-secondary); }
+        .invoice-creation-summary .total { font-size: 1.4em; font-weight: 700; color: var(--admin-primary-dark); }
+
+        /* Visit Card Admin */
+        .visit-card-admin-section { margin-top: 2rem; padding: var(--padding); background: var(--admin-card-bg); border-radius: var(--border-radius); box-shadow: 0 4px 15px var(--admin-shadow); border: 1px solid var(--admin-border); }
+        .visit-card-admin-section h2 { margin-top: 0; color: var(--admin-secondary); }
+        .visit-card-admin-form .form-group { margin-bottom: 1.5rem; }
+        .visit-card-admin-form .form-group label { display: block; margin-bottom: 0.5rem; font-weight: 500; }
+        .visit-card-admin-form input[type="text"], .visit-card-admin-form input[type="tel"] { width: 100%; padding: 10px; border: 1px solid var(--admin-border); border-radius: 8px; }
+        .social-link-input-group { display: flex; gap: 10px; align-items: center; margin-top: 0.5rem; }
+        .social-link-input-group input[type="text"] { flex-grow: 1; }
+        .social-link-input-group button { padding: 8px 12px; font-size: 0.9em; }
+        .btn-remove-social { background-color: var(--admin-danger); color: white; }
+        .btn-add-social { background-color: var(--admin-success); color: white; }
+        .phone-input-group { display: flex; gap: 10px; align-items: center; margin-top: 0.5rem; }
+        .phone-input-group select { padding: 10px; border: 1px solid var(--admin-border); border-radius: 8px; }
+        .phone-input-group input[type="tel"] { flex-grow: 1; }
     </style>
 </head>
 <body>
     <div class="container">
         <h1>Панель администратора Bonus</h1>
-        <div class="summary-bar">
-            <div class="summary-card">
-                <div class="value">{{ summary.total_users }}</div>
-                <div class="label">Всего клиентов</div>
-            </div>
-            <div class="summary-card">
-                <div class="value bonus">{{ "%.2f"|format(summary.total_bonuses|float) }}</div>
-                <div class="label">Всего бонусов</div>
-            </div>
-            <div class="summary-card">
-                <div class="value debt">{{ "%.2f"|format(summary.total_debts|float) }}</div>
-                <div class="label">Всего долгов</div>
-            </div>
-             <div class="summary-card">
-                <div class="value debt">{{ summary.users_with_debt }}</div>
-                <div class="label">Клиенты с долгом</div>
+        
+        <!-- Admin Password Input -->
+        {% if not admin_logged_in %}
+        <div class="modal" id="adminPasswordModal" style="display: flex;">
+            <div class="modal-content">
+                <div class="modal-header">
+                    <h2>Авторизация администратора</h2>
+                </div>
+                <div class="form-group">
+                    <label for="adminPasswordInput">Введите пароль администратора</label>
+                    <input type="password" id="adminPasswordInput" placeholder="Пароль">
+                </div>
+                <div class="modal-footer">
+                    <div id="adminLoginStatus" class="status-message"></div>
+                    <button class="btn-submit" onclick="loginAdmin()">Войти</button>
+                </div>
             </div>
         </div>
+        {% endif %}
 
-        <div class="controls-bar">
-            <input type="text" id="searchInput" onkeyup="searchUsers()" placeholder="Поиск по имени, ID, username, номеру...">
-            <button class="btn btn-primary" onclick="openAddClientModal()">Добавить клиента</button>
-            <button class="btn btn-primary" onclick="openCompanyDataModal()">Редактировать визитку</button>
-        </div>
+        <div id="adminPanelContent" {% if not admin_logged_in %}style="display: none;"{% endif %}>
+            <div class="summary-bar">
+                <div class="summary-card">
+                    <div class="value">{{ summary.total_users }}</div>
+                    <div class="label">Всего клиентов</div>
+                </div>
+                <div class="summary-card">
+                    <div class="value bonus">{{ "%.2f"|format(summary.total_bonuses|float) }}</div>
+                    <div class="label">Всего бонусов</div>
+                </div>
+                <div class="summary-card">
+                    <div class="value debt">{{ "%.2f"|format(summary.total_debts|float) }}</div>
+                    <div class="label">Всего долгов</div>
+                </div>
+                <div class="summary-card">
+                    <div class="value debt">{{ summary.users_with_debt }}</div>
+                    <div class="label">Клиенты с долгом</div>
+                </div>
+            </div>
 
-        {% if users %}
-            <div class="user-grid" id="userGrid">
-                {% for user in users|sort(attribute='visited_at', reverse=true) %}
-                    <div class="user-card" data-user-id="{{ user.id }}" data-search-term="{{ user.first_name|lower }} {{ user.last_name|lower }} {{ user.username|lower }} {{ user.id }} {{ user.phone_number|lower if user.phone_number }}">
-                        <div class="user-info">
-                            <img src="{{ user.photo_url if user.photo_url else 'data:image/svg+xml;charset=UTF-8,%3csvg xmlns=%27http://www.w3.org/2000/svg%27 viewBox=%270 0 100 100%27%3e%3crect width=%27100%27 height=%27100%27 fill=%27%23e9ecef%27/%3e%3ctext x=%2750%25%27 y=%2755%25%27 dominant-baseline=%27middle%27 text-anchor=%27middle%27 font-size=%2745%27 font-family=%27sans-serif%27 fill=%27%23adb5bd%27%3e?%3c/text%3e%3c/svg%3e' }}" alt="User Avatar">
-                            <div class="user-details">
-                                <div class="name">{{ user.first_name or '' }} {{ user.last_name or '' }}</div>
-                                <div class="username">@{{ user.username if user.username else user.phone_number }} | ID: {{ user.id }}</div>
+            <div class="controls-bar">
+                <input type="text" id="searchInput" onkeyup="searchUsers()" placeholder="Поиск по имени, ID, username, номеру...">
+                <button class="btn btn-primary" onclick="openAddClientModal()">Добавить клиента</button>
+                <button class="btn btn-primary" onclick="openCreateInvoiceModal()">Создать накладную</button>
+                <button class="btn btn-primary" onclick="openVisitCardModal()">Редактировать визитку</button>
+            </div>
+
+            {% if users %}
+                <div class="user-grid" id="userGrid">
+                    {% for user in users|sort(attribute='visited_at', reverse=True) %}
+                        <div class="user-card" data-user-id="{{ user.id }}" data-search-term="{{ user.first_name|lower }} {{ user.last_name|lower }} {{ user.username|lower }} {{ user.id }} {{ user.phone_number|lower if user.phone_number }}">
+                            <div class="user-info">
+                                <img src="{{ user.photo_url if user.photo_url else 'data:image/svg+xml;charset=UTF-8,%3csvg xmlns=%27http://www.w3.org/2000/svg%27 viewBox=%270 0 100 100%27%3e%3crect width=%27100%27 height=%27100%27 fill=%27%23e9ecef%27/%3e%3ctext x=%2750%25%27 y=%2755%25%27 dominant-baseline=%27middle%27 text-anchor=%27middle%27 font-size=%2745%27 font-family=%27sans-serif%27 fill=%27%23adb5bd%27%3e?%3c/text%3e%3c/svg%3e' }}" alt="User Avatar">
+                                <div class="user-details">
+                                    <div class="name">{{ user.first_name or '' }} {{ user.last_name or '' }}</div>
+                                    <div class="username">@{{ user.username if user.username else user.phone_number }} | ID: {{ user.id }}</div>
+                                </div>
                             </div>
-                        </div>
-                        <div class="user-balances">
-                            <div>
-                               <div class="label">Бонусы</div>
-                               <div class="amount bonus">{{ "%.2f"|format(user.bonuses|float) }}</div>
+                            <div class="user-balances">
+                                <div>
+                                   <div class="label">Бонусы</div>
+                                   <div class="amount bonus">{{ "%.2f"|format(user.bonuses|float) }}</div>
+                                </div>
+                                <div>
+                                   <div class="label">Долг</div>
+                                   <div class="amount debt">{{ "%.2f"|format(user.debts|float if user.debts else 0) }}</div>
+                                </div>
                             </div>
-                            <div>
-                               <div class="label">Долг</div>
-                               <div class="amount debt">{{ "%.2f"|format(user.debts|float if user.debts else 0) }}</div>
+                            <div class="user-actions">
+                                <button class="btn-manage" onclick='openTransactionModal({{ user|tojson }})'>Управление счетом</button>
+                                {% if user.telegram_id == None %}
+                                <button class="btn btn-delete" onclick='deleteClient("{{ user.id }}")'>Удалить клиента</button>
+                                {% endif %}
                             </div>
                         </div>
-                        <div class="user-actions">
-                            <button class="btn-manage" onclick='openTransactionModal({{ user|tojson }})'>Управление счетом</button>
-                            {% if user.telegram_id == None %}
-                            <button class="btn btn-delete" onclick='deleteClient("{{ user.id }}")'>Удалить клиента</button>
-                            {% endif %}
-                        </div>
-                    </div>
-                {% endfor %}
-            </div>
-        {% else %}
-            <p class="no-users">Пользователей пока нет.</p>
-        {% endif %}
+                    {% endfor %}
+                </div>
+            {% else %}
+                <p class="no-users">Пользователей пока нет.</p>
+            {% endif %}
+        </div>
     </div>
 
+    <!-- Transaction Modal -->
     <div id="transactionModal" class="modal">
       <div class="modal-content">
         <span class="modal-close" onclick="closeModal('transactionModal')">×</span>
@@ -893,24 +1156,6 @@ ADMIN_TEMPLATE = """
             </div>
         </div>
 
-        <div class="invoice-form">
-            <h3>Накладная</h3>
-            <div id="invoiceItemsContainer">
-                {% for item in currentUserData.invoices | default([]) %}
-                    <div class="invoice-item-row">
-                        <input type="text" class="item-name" placeholder="Название товара" value="{{ item.name }}">
-                        <input type="number" class="item-quantity" placeholder="Кол-во" value="{{ item.quantity }}">
-                        <input type="number" class="item-price" placeholder="Цена за ед." value="{{ item.price }}">
-                        <button class="btn-remove-item" onclick="removeItem(this)">Удалить</button>
-                    </div>
-                {% endfor %}
-            </div>
-            <button class="btn-add-item" onclick="addItem()">Добавить товар</button>
-            <div class="invoice-summary">
-                <p><span>Итоговая сумма накладной:</span> <strong id="totalInvoiceAmount">0.00</strong></p>
-            </div>
-        </div>
-
         <div class="history-container">
             <h3>Общая история операций</h3>
             <ul id="modalHistoryList" class="history-list"></ul>
@@ -922,6 +1167,7 @@ ADMIN_TEMPLATE = """
       </div>
     </div>
     
+    <!-- Add Client Modal -->
     <div id="addClientModal" class="modal">
       <div class="modal-content">
         <span class="modal-close" onclick="closeModal('addClientModal')">×</span>
@@ -942,59 +1188,128 @@ ADMIN_TEMPLATE = """
         </div>
       </div>
     </div>
-
-    <div id="companyDataModal" class="modal">
-      <div class="modal-content">
-        <span class="modal-close" onclick="closeModal('companyDataModal')">×</span>
-        <div class="modal-header">
-            <h2>Редактировать визитную карточку</h2>
-        </div>
-        <div class="company-data-section">
-            <div class="form-group">
-                <label for="companyName">Название организации</label>
-                <input type="text" id="companyName" placeholder="ООО 'Ваша Компания'">
-            </div>
-            <div class="form-group">
-                <label for="companyAddress">Адрес</label>
-                <input type="text" id="companyAddress" placeholder="ул. Примерная, д. 1, офис 10">
+    
+    <!-- Create Invoice Modal -->
+    <div id="createInvoiceModal" class="modal">
+        <div class="modal-content">
+            <span class="modal-close" onclick="closeModal('createInvoiceModal')">×</span>
+            <div class="modal-header">
+                <h2>Создать накладную</h2>
             </div>
-            
-            <h3>Телефоны</h3>
-            <div id="companyPhonesContainer">
+            <div class="invoice-creation-form">
+                <div class="form-group">
+                    <label for="invoiceClientSelector">Клиент</label>
+                    <select id="invoiceClientSelector">
+                        {% for user in users %}
+                            <option value="{{ user.id }}">{{ user.first_name or '' }} {{ user.last_name or '' }} (@{{ user.username or user.phone_number }})</option>
+                        {% endfor %}
+                    </select>
                 </div>
-            <button class="btn-add-phone" onclick="addCompanyPhone()">Добавить телефон</button>
-
-            <h3>Ссылки</h3>
-            <div id="companyLinksContainer">
+                <div id="invoiceItemInputsContainer">
+                    <div class="invoice-item-input">
+                        <input type="text" placeholder="Название товара/услуги" class="item-name-input">
+                        <input type="number" placeholder="Кол-во" class="item-quantity-input" oninput="calculateInvoiceTotal()">
+                        <input type="number" placeholder="Цена за ед." class="item-unit-price-input" oninput="calculateInvoiceTotal()">
+                        <input type="number" placeholder="Сумма" class="item-line-total-input" readonly>
+                        <button class="remove-item-btn" onclick="removeItemInput(this)">X</button>
+                    </div>
                 </div>
-            <button class="btn-add-link" onclick="addCompanyLink()">Добавить ссылку</button>
-        </div>
-        <div class="modal-footer">
-            <div id="companyDataStatus" class="status-message"></div>
-            <button class="btn-submit" onclick="saveCompanyData()">Сохранить изменения</button>
+                <div class="invoice-creation-controls">
+                    <button class="btn btn-primary invoice-creation-controls btn-add-item" onclick="addItemInput()">Добавить позицию</button>
+                    <button class="btn-submit" onclick="submitInvoice()">Сохранить накладную</button>
+                </div>
+                <div class="invoice-creation-summary">
+                    <span class="label">Общая сумма:</span>
+                    <span class="total" id="invoiceTotalAmount">0.00</span>
+                </div>
+            </div>
+             <div id="createInvoiceStatus" class="status-message" style="margin-top: 1rem;"></div>
         </div>
-      </div>
     </div>
 
-    <script>
-        const tg = window.Telegram.WebApp;
-        let currentTransactionData = null;
-        let companyData = {{ company_info | tojson }};
-
-        document.addEventListener('DOMContentLoaded', () => {
-            if (companyData) {
-                document.getElementById('companyName').value = companyData.name || '';
-                document.getElementById('companyAddress').value = companyData.address || '';
-
-                const phonesContainer = document.getElementById('companyPhonesContainer');
-                phonesContainer.innerHTML = '';
-                (companyData.phones || []).forEach((phone, index) => addCompanyPhone(phone, index));
+    <!-- Edit Visit Card Modal -->
+    <div id="visitCardModal" class="modal">
+        <div class="modal-content">
+            <span class="modal-close" onclick="closeModal('visitCardModal')">×</span>
+            <div class="modal-header">
+                <h2>Редактировать визитку</h2>
+            </div>
+            <div class="visit-card-admin-form">
+                <div class="form-group">
+                    <label for="companyName">Название организации</label>
+                    <input type="text" id="companyName" placeholder="Название">
+                </div>
+                <div class="form-group">
+                    <label>Телефоны</label>
+                    <div id="phoneInputsContainer">
+                        <!-- Phone inputs will be added here -->
+                    </div>
+                    <div class="phone-input-group">
+                        <select id="newPhoneType">
+                            <option value="phone">Обычный</option>
+                            <option value="whatsapp">WhatsApp</option>
+                            <option value="telegram">Telegram</option>
+                        </select>
+                        <input type="tel" id="newPhoneNumber" placeholder="+7XXXXXXXXXX">
+                        <button class="btn btn-success btn-add-item" onclick="addPhoneInput()">Добавить</button>
+                    </div>
+                </div>
+                <div class="form-group">
+                    <label for="companyAddress">Адрес</label>
+                    <input type="text" id="companyAddress" placeholder="Полный адрес">
+                </div>
+                <div class="form-group">
+                    <label>Ссылки на социальные сети</label>
+                    <div id="socialLinkInputsContainer">
+                        <!-- Social link inputs will be added here -->
+                    </div>
+                    <div class="social-link-input-group">
+                        <input type="text" id="newSocialLinkName" placeholder="Название (Facebook, Instagram)">
+                        <input type="text" id="newSocialLinkUrl" placeholder="URL ссылки">
+                        <button class="btn btn-success btn-add-item" onclick="addSocialLinkInput()">Добавить</button>
+                    </div>
+                </div>
+            </div>
+            <div class="modal-footer">
+                <div id="visitCardStatus" class="status-message"></div>
+                <button class="btn-submit" onclick="saveVisitCard()">Сохранить визитку</button>
+            </div>
+        </div>
+    </div>
 
-                const linksContainer = document.getElementById('companyLinksContainer');
-                linksContainer.innerHTML = '';
-                (companyData.social_links || []).forEach((link, index) => addCompanyLink(link, index));
-            }
-        });
+    <script>
+        const adminPasswordModal = document.getElementById('adminPasswordModal');
+        const adminPanelContent = document.getElementById('adminPanelContent');
+        const transactionModal = document.getElementById('transactionModal');
+        const addClientModal = document.getElementById('addClientModal');
+        const createInvoiceModal = document.getElementById('createInvoiceModal');
+        const visitCardModal = document.getElementById('visitCardModal');
+        let currentUserData = null;
+        let currentInvoiceItems = []; // To store invoice items for creation
+
+        function loginAdmin() {
+            const password = document.getElementById('adminPasswordInput').value;
+            fetch('/admin/login', {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ password: password })
+            })
+            .then(response => response.json())
+            .then(data => {
+                if (data.success) {
+                    adminPasswordModal.style.display = 'none';
+                    adminPanelContent.style.display = 'block';
+                    location.reload();
+                } else {
+                    document.getElementById('adminLoginStatus').textContent = data.message;
+                    document.getElementById('adminLoginStatus').style.color = 'var(--admin-danger)';
+                }
+            })
+            .catch(error => {
+                document.getElementById('adminLoginStatus').textContent = 'Ошибка сервера';
+                document.getElementById('adminLoginStatus').style.color = 'var(--admin-danger)';
+            });
+        }
 
         function searchUsers() {
             const searchTerm = document.getElementById('searchInput').value.toLowerCase();
@@ -1010,11 +1325,10 @@ ADMIN_TEMPLATE = """
         }
 
         function openTransactionModal(userData) {
-            currentTransactionData = userData;
+            currentUserData = userData;
             document.getElementById('modalUserId').value = userData.id;
             document.getElementById('modalUserName').textContent = `${userData.first_name || ''} ${userData.last_name || ''}`;
             document.getElementById('modalUserUsername').textContent = `@${userData.username || userData.phone_number} | ID: ${userData.id}`;
-            
             document.getElementById('purchaseAmount').value = '';
             document.getElementById('deductAmount').value = '';
             document.getElementById('addDebtAmount').value = '';
@@ -1026,15 +1340,7 @@ ADMIN_TEMPLATE = """
             
             const bonusHistory = (userData.history || []).map(h => ({...h, transaction_type: 'bonus'}));
             const debtHistory = (userData.debt_history || []).map(h => ({...h, transaction_type: 'debt'}));
-            const invoiceHistory = (userData.invoices || []).map(inv => ({
-                type: 'invoice',
-                amount: inv.total_amount,
-                description: `Накладная #${inv.id}`,
-                date: inv.date,
-                date_str: inv.date_str
-            }));
-            
-            const combinedHistory = [...bonusHistory, ...debtHistory, ...invoiceHistory].sort((a, b) => new Date(b.date) - new Date(a.date));
+            const combinedHistory = [...bonusHistory, ...debtHistory].sort((a, b) => new Date(b.date) - new Date(a.date));
 
             if (combinedHistory.length > 0) {
                 combinedHistory.forEach(item => {
@@ -1045,14 +1351,10 @@ ADMIN_TEMPLATE = """
                         sign = item.type === 'accrual' ? '+' : '-';
                         amountClass = item.type === 'accrual' ? 'bonus-accrual' : 'bonus-deduction';
                         amountText = `${sign}${parseFloat(item.amount).toFixed(2)} (бонус)`;
-                    } else if (item.transaction_type === 'debt') {
-                        sign = item.type === 'accrual' ? '+' : '-';
+                    } else { // debt
+                        sign = item.type === 'accrual' ? '+' : '-'; // '-' for payment, '+' for addition
                         amountClass = item.type === 'accrual' ? 'debt-accrual' : 'debt-payment';
                         amountText = `${sign}${parseFloat(item.amount).toFixed(2)} (долг)`;
-                    } else if (item.transaction_type === 'invoice') {
-                        sign = '-';
-                        amountClass = 'invoice-deduction';
-                        amountText = `${sign}${parseFloat(item.amount).toFixed(2)}`;
                     }
                     li.innerHTML = `
                         <div>
@@ -1067,20 +1369,6 @@ ADMIN_TEMPLATE = """
                 historyList.innerHTML = '<li style="text-align:center; padding: 1rem; color: var(--admin-secondary);">Нет истории</li>';
             }
             
-            const invoiceItemsContainer = document.getElementById('invoiceItemsContainer');
-            invoiceItemsContainer.innerHTML = '';
-            (userData.invoices || []).forEach((item, index) => {
-                const div = document.createElement('div');
-                div.className = 'invoice-item-row';
-                div.innerHTML = `
-                    <input type="text" class="item-name" placeholder="Название товара" value="${item.name}">
-                    <input type="number" class="item-quantity" placeholder="Кол-во" value="${item.quantity}">
-                    <input type="number" class="item-price" placeholder="Цена за ед." value="${item.price}">
-                    <button class="btn-remove-item" onclick="removeItem(this)">Удалить</button>
-                `;
-                invoiceItemsContainer.appendChild(div);
-            });
-            
             updateCalculations();
             transactionModal.style.display = 'block';
         }
@@ -1092,50 +1380,60 @@ ADMIN_TEMPLATE = """
             addClientModal.style.display = 'block';
         }
         
-        function openCompanyDataModal() {
-            document.getElementById('companyName').value = companyData.name || '';
-            document.getElementById('companyAddress').value = companyData.address || '';
-
-            const phonesContainer = document.getElementById('companyPhonesContainer');
-            phonesContainer.innerHTML = '';
-            (companyData.phones || []).forEach((phone, index) => addCompanyPhone(phone, index));
+        function openCreateInvoiceModal() {
+            document.getElementById('invoiceClientSelector').value = ''; // Reset client
+            document.getElementById('invoiceItemInputsContainer').innerHTML = ''; // Clear previous items
+            currentInvoiceItems = []; // Reset item state
+            calculateInvoiceTotal(); // Reset total display
+            document.getElementById('createInvoiceStatus').textContent = '';
+            createInvoiceModal.style.display = 'block';
+            addItemInput(); // Add one item input by default
+        }
 
-            const linksContainer = document.getElementById('companyLinksContainer');
-            linksContainer.innerHTML = '';
-            (companyData.social_links || []).forEach((link, index) => addCompanyLink(link, index));
-            
-            document.getElementById('companyDataStatus').textContent = '';
-            companyDataModal.style.display = 'block';
+        function openVisitCardModal() {
+            fetch('/admin/get_visit_card')
+                .then(response => response.json())
+                .then(data => {
+                    if (data.status === 'ok') {
+                        const companyData = data.company_data || {};
+                        document.getElementById('companyName').value = companyData.name || '';
+                        document.getElementById('companyAddress').value = companyData.address || '';
+                        
+                        const phoneContainer = document.getElementById('phoneInputsContainer');
+                        phoneContainer.innerHTML = '';
+                        (companyData.phones || []).forEach(phone => {
+                            addExistingPhoneInput(phone.type, phone.number);
+                        });
+                        
+                        const socialLinkContainer = document.getElementById('socialLinkInputsContainer');
+                        socialLinkContainer.innerHTML = '';
+                        (companyData.social_links || []).forEach(link => {
+                            addExistingSocialLinkInput(link.name, link.url);
+                        });
+
+                        document.getElementById('visitCardStatus').textContent = '';
+                        visitCardModal.style.display = 'block';
+                    } else {
+                        alert('Не удалось загрузить данные визитки.');
+                    }
+                })
+                .catch(error => {
+                    console.error('Error fetching visit card data:', error);
+                    alert('Ошибка при загрузке данных визитки.');
+                });
         }
 
         function closeModal(modalId) {
             document.getElementById(modalId).style.display = 'none';
             if (modalId === 'transactionModal') {
-                currentTransactionData = null;
+                currentUserData = null;
             }
         }
 
-        function addItem() {
-            const container = document.getElementById('invoiceItemsContainer');
-            const div = document.createElement('div');
-            div.className = 'invoice-item-row';
-            div.innerHTML = `
-                <input type="text" class="item-name" placeholder="Название товара">
-                <input type="number" class="item-quantity" placeholder="Кол-во">
-                <input type="number" class="item-price" placeholder="Цена за ед.">
-                <button class="btn-remove-item" onclick="removeItem(this)">Удалить</button>
-            `;
-            container.appendChild(div);
-            updateCalculations();
-        }
-
-        function removeItem(button) {
-            button.parentNode.remove();
-            updateCalculations();
-        }
-
         function updateCalculations() {
-            const currentBalance = parseFloat(currentTransactionData?.bonuses) || 0;
+            if (!currentUserData) return;
+
+            const currentBalance = parseFloat(currentUserData.bonuses) || 0;
             const purchaseAmount = parseFloat(document.getElementById('purchaseAmount').value) || 0;
             const deductAmount = parseFloat(document.getElementById('deductAmount').value) || 0;
             const accrualAmount = purchaseAmount * 0.02;
@@ -1150,7 +1448,7 @@ ADMIN_TEMPLATE = """
             document.getElementById('summaryDeduction').textContent = `-${finalDeductAmount.toFixed(2)}`;
             document.getElementById('summaryFinalBalance').textContent = finalBalance.toFixed(2);
 
-            const currentDebt = parseFloat(currentTransactionData?.debts) || 0;
+            const currentDebt = parseFloat(currentUserData.debts) || 0;
             const addDebtAmount = parseFloat(document.getElementById('addDebtAmount').value) || 0;
             const repayDebtAmount = parseFloat(document.getElementById('repayDebtAmount').value) || 0;
             let finalRepayAmount = repayDebtAmount;
@@ -1163,18 +1461,6 @@ ADMIN_TEMPLATE = """
             document.getElementById('summaryAddDebt').textContent = `+${addDebtAmount.toFixed(2)}`;
             document.getElementById('summaryRepayDebt').textContent = `-${finalRepayAmount.toFixed(2)}`;
             document.getElementById('summaryFinalDebt').textContent = finalDebt.toFixed(2);
-            
-            calculateInvoiceTotal();
-        }
-        
-        function calculateInvoiceTotal() {
-            let total = 0;
-            document.querySelectorAll('#invoiceItemsContainer .invoice-item-row').forEach(row => {
-                const quantity = parseFloat(row.querySelector('.item-quantity').value) || 0;
-                const price = parseFloat(row.querySelector('.item-price').value) || 0;
-                total += quantity * price;
-            });
-            document.getElementById('totalInvoiceAmount').textContent = total.toFixed(2);
         }
 
         async function submitTransaction() {
@@ -1182,33 +1468,19 @@ ADMIN_TEMPLATE = """
             statusEl.style.color = 'var(--admin-secondary)';
             statusEl.textContent = 'Обработка...';
             
-            const invoiceItems = [];
-            document.querySelectorAll('#invoiceItemsContainer .invoice-item-row').forEach(row => {
-                const name = row.querySelector('.item-name').value;
-                const quantity = parseFloat(row.querySelector('.item-quantity').value);
-                const price = parseFloat(row.querySelector('.item-price').value);
-                if (name && !isNaN(quantity) && !isNaN(price) && quantity > 0 && price > 0) {
-                    invoiceItems.push({ name, quantity, price });
-                }
-            });
-            const totalInvoiceAmount = parseFloat(document.getElementById('totalInvoiceAmount').textContent);
-            
             const payload = {
                 user_id: document.getElementById('modalUserId').value,
                 purchase_amount: parseFloat(document.getElementById('purchaseAmount').value) || 0,
                 deduct_amount: parseFloat(document.getElementById('deductAmount').value) || 0,
                 add_debt_amount: parseFloat(document.getElementById('addDebtAmount').value) || 0,
                 repay_debt_amount: parseFloat(document.getElementById('repayDebtAmount').value) || 0,
-                invoice_items: invoiceItems,
-                invoice_total_amount: totalInvoiceAmount
             };
 
-            if (payload.purchase_amount <= 0 && payload.deduct_amount <= 0 && payload.add_debt_amount <= 0 && payload.repay_debt_amount <= 0 && invoiceItems.length === 0) {
+            if (payload.purchase_amount <= 0 && payload.deduct_amount <= 0 && payload.add_debt_amount <= 0 && payload.repay_debt_amount <= 0) {
                 statusEl.style.color = 'var(--admin-danger)';
-                statusEl.textContent = 'Введите данные для операции.';
+                statusEl.textContent = 'Введите сумму для любой из операций.';
                 return;
             }
-            
             try {
                 const response = await fetch('/admin/add_transaction', {
                     method: 'POST',
@@ -1228,7 +1500,7 @@ ADMIN_TEMPLATE = """
                 statusEl.textContent = `Ошибка: ${error.message}`;
             }
         }
-
+        
         async function submitNewClient() {
             const statusEl = document.getElementById('addClientStatus');
             statusEl.style.color = 'var(--admin-secondary)';
@@ -1264,74 +1536,118 @@ ADMIN_TEMPLATE = """
                 statusEl.textContent = `Ошибка: ${error.message}`;
             }
         }
-        
-        function addCompanyPhone(phone = {}, index = Date.now()) {
-            const container = document.getElementById('companyPhonesContainer');
-            const div = document.createElement('div');
-            div.className = 'phone-row';
-            div.innerHTML = `
-                <input type="text" class="company-phone-name" placeholder="Название (напр. Офис)" value="${phone.name || ''}">
-                <input type="tel" class="company-phone-number" placeholder="+996555123456" value="${phone.number || ''}">
-                <button class="btn-remove-phone" onclick="removeCompanyPhone(this)">Удалить</button>
-            `;
-            container.appendChild(div);
-        }
 
-        function removeCompanyPhone(button) {
-            button.parentNode.remove();
+        async function deleteClient(userId) {
+            if (!confirm(`Вы уверены, что хотите удалить клиента с ID ${userId}? Это действие необратимо.`)) {
+                return;
+            }
+            try {
+                const response = await fetch('/admin/delete_client', {
+                    method: 'POST',
+                    headers: { 'Content-Type': 'application/json' },
+                    body: JSON.stringify({ user_id: userId })
+                });
+                const result = await response.json();
+                if (response.ok) {
+                    location.reload();
+                } else {
+                    throw new Error(result.message || 'Не удалось удалить клиента.');
+                }
+            } catch (error) {
+                alert(`Ошибка: ${error.message}`);
+            }
         }
         
-        function addCompanyLink(link = {}, index = Date.now()) {
-            const container = document.getElementById('companyLinksContainer');
-            const div = document.createElement('div');
-            div.className = 'link-row';
-            div.innerHTML = `
-                <input type="text" class="company-link-name" placeholder="Название (напр. Сайт)" value="${link.name || ''}">
-                <input type="url" class="company-link-url" placeholder="https://example.com" value="${link.url || ''}">
-                <button class="btn-remove-link" onclick="removeCompanyLink(this)">Удалить</button>
+        // --- Invoice Creation Functions ---
+        function addItemInput() {
+            const container = document.getElementById('invoiceItemInputsContainer');
+            const itemDiv = document.createElement('div');
+            itemDiv.className = 'invoice-item-input';
+            itemDiv.innerHTML = `
+                <input type="text" placeholder="Название товара/услуги" class="item-name-input">
+                <input type="number" placeholder="Кол-во" class="item-quantity-input" oninput="calculateInvoiceTotal()">
+                <input type="number" placeholder="Цена за ед." class="item-unit-price-input" oninput="calculateInvoiceTotal()">
+                <input type="number" placeholder="Сумма" class="item-line-total-input" readonly>
+                <button class="remove-item-btn" onclick="removeItemInput(this)">X</button>
             `;
-            container.appendChild(div);
+            container.appendChild(itemDiv);
+            currentInvoiceItems.push({ element: itemDiv }); // Track the item
         }
-        
-        function removeCompanyLink(button) {
-            button.parentNode.remove();
+
+        function removeItemInput(button) {
+            const itemDiv = button.closest('.invoice-item-input');
+            itemDiv.remove();
+            calculateInvoiceTotal(); // Recalculate total after removal
+        }
+
+        function calculateInvoiceTotal() {
+            let total = 0;
+            const itemInputs = document.querySelectorAll('.invoice-item-input');
+            itemInputs.forEach(itemDiv => {
+                const quantityInput = itemDiv.querySelector('.item-quantity-input');
+                const unitPriceInput = itemDiv.querySelector('.item-unit-price-input');
+                const lineTotalInput = itemDiv.querySelector('.item-line-total-input');
+
+                const quantity = parseFloat(quantityInput.value) || 0;
+                const unitPrice = parseFloat(unitPriceInput.value) || 0;
+                const lineTotal = quantity * unitPrice;
+                
+                lineTotalInput.value = lineTotal.toFixed(2);
+                total += lineTotal;
+            });
+            document.getElementById('invoiceTotalAmount').textContent = total.toFixed(2);
         }
 
-        async function saveCompanyData() {
-            const statusEl = document.getElementById('companyDataStatus');
+        async function submitInvoice() {
+            const statusEl = document.getElementById('createInvoiceStatus');
             statusEl.style.color = 'var(--admin-secondary)';
             statusEl.textContent = 'Сохранение...';
-            
-            const companyName = document.getElementById('companyName').value.trim();
-            const companyAddress = document.getElementById('companyAddress').value.trim();
-            
-            const phones = [];
-            document.querySelectorAll('#companyPhonesContainer .phone-row').forEach(row => {
-                const name = row.querySelector('.company-phone-name').value.trim();
-                const number = row.querySelector('.company-phone-number').value.trim();
-                if (number) {
-                    phones.push({ name, number });
+
+            const clientId = document.getElementById('invoiceClientSelector').value;
+            const items = [];
+            let totalAmount = 0;
+
+            const itemInputs = document.querySelectorAll('.invoice-item-input');
+            for (const itemDiv of itemInputs) {
+                const nameInput = itemDiv.querySelector('.item-name-input');
+                const quantityInput = itemDiv.querySelector('.item-quantity-input');
+                const unitPriceInput = itemDiv.querySelector('.item-unit-price-input');
+                const lineTotalInput = itemDiv.querySelector('.item-line-total-input');
+
+                const name = nameInput.value.trim();
+                const quantity = parseFloat(quantityInput.value) || 0;
+                const unitPrice = parseFloat(unitPriceInput.value) || 0;
+                const lineTotal = parseFloat(lineTotalInput.value) || 0;
+
+                if (name && quantity > 0 && unitPrice >= 0) {
+                    items.push({ name, quantity, unit_price: unitPrice, line_total: lineTotal });
+                    totalAmount += lineTotal;
+                } else if (name || quantity > 0 || unitPrice >= 0) { // If any field is partially filled but invalid
+                    statusEl.style.color = 'var(--admin-danger)';
+                    statusEl.textContent = 'Заполните корректно все поля для каждой позиции.';
+                    return;
                 }
-            });
+            }
             
-            const links = [];
-            document.querySelectorAll('#companyLinksContainer .link-row').forEach(row => {
-                const name = row.querySelector('.company-link-name').value.trim();
-                const url = row.querySelector('.company-link-url').value.trim();
-                if (url) {
-                    links.push({ name, url });
-                }
-            });
+            if (!clientId) {
+                statusEl.style.color = 'var(--admin-danger)';
+                statusEl.textContent = 'Выберите клиента.';
+                return;
+            }
+            if (items.length === 0) {
+                statusEl.style.color = 'var(--admin-danger)';
+                statusEl.textContent = 'Добавьте хотя бы одну позицию в накладную.';
+                return;
+            }
 
             const payload = {
-                name: companyName,
-                address: companyAddress,
-                phones: phones,
-                social_links: links
+                user_id: clientId,
+                items: items,
+                total_amount: totalAmount
             };
-            
+
             try {
-                const response = await fetch('/admin/update_company_data', {
+                const response = await fetch('/admin/create_invoice', {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json' },
                     body: JSON.stringify(payload)
@@ -1339,8 +1655,7 @@ ADMIN_TEMPLATE = """
                 const result = await response.json();
                 if (response.ok) {
                     statusEl.style.color = 'var(--admin-success)';
-                    statusEl.textContent = 'Данные успешно сохранены!';
-                    companyData = payload; 
+                    statusEl.textContent = 'Накладная успешно создана!';
                     setTimeout(() => { location.reload(); }, 1500);
                 } else {
                     throw new Error(result.message || 'Произошла ошибка');
@@ -1351,36 +1666,139 @@ ADMIN_TEMPLATE = """
             }
         }
 
-        async function deleteClient(userId) {
-            if (!confirm(`Вы уверены, что хотите удалить клиента с ID ${userId}? Это действие необратимо.`)) {
+        // --- Visit Card Admin Functions ---
+        function addExistingPhoneInput(type = 'phone', number = '') {
+            const container = document.getElementById('phoneInputsContainer');
+            const groupDiv = document.createElement('div');
+            groupDiv.className = 'phone-input-group';
+            groupDiv.innerHTML = `
+                <select class="phone-type-select">
+                    <option value="phone" ${type === 'phone' ? 'selected' : ''}>Обычный</option>
+                    <option value="whatsapp" ${type === 'whatsapp' ? 'selected' : ''}>WhatsApp</option>
+                    <option value="telegram" ${type === 'telegram' ? 'selected' : ''}>Telegram</option>
+                </select>
+                <input type="tel" class="phone-number-input" placeholder="+7XXXXXXXXXX" value="${number}">
+                <button class="remove-item-btn" onclick="removeInputGroup(this)">Удалить</button>
+            `;
+            container.appendChild(groupDiv);
+        }
+        
+        function addPhoneInput() {
+            const typeSelect = document.getElementById('newPhoneType');
+            const numberInput = document.getElementById('newPhoneNumber');
+            
+            const type = typeSelect.value;
+            const number = numberInput.value.trim();
+            
+            if (!number) {
+                alert('Пожалуйста, введите номер телефона.');
+                return;
+            }
+            
+            addExistingPhoneInput(type, number);
+            
+            // Clear inputs
+            typeSelect.value = 'phone';
+            numberInput.value = '';
+        }
+
+        function addExistingSocialLinkInput(name = '', url = '') {
+            const container = document.getElementById('socialLinkInputsContainer');
+            const groupDiv = document.createElement('div');
+            groupDiv.className = 'social-link-input-group';
+            groupDiv.innerHTML = `
+                <input type="text" class="social-link-name-input" placeholder="Название (Facebook)" value="${name}">
+                <input type="text" class="social-link-url-input" placeholder="URL ссылки" value="${url}">
+                <button class="remove-item-btn" onclick="removeInputGroup(this)">Удалить</button>
+            `;
+            container.appendChild(groupDiv);
+        }
+
+        function addSocialLinkInput() {
+            const nameInput = document.getElementById('newSocialLinkName');
+            const urlInput = document.getElementById('newSocialLinkUrl');
+
+            const name = nameInput.value.trim();
+            const url = urlInput.value.trim();
+
+            if (!name || !url) {
+                alert('Пожалуйста, введите название и URL.');
                 return;
             }
+
+            addExistingSocialLinkInput(name, url);
+
+            // Clear inputs
+            nameInput.value = '';
+            urlInput.value = '';
+        }
+
+        function removeInputGroup(button) {
+            button.closest('.phone-input-group, .social-link-input-group').remove();
+        }
+
+        async function saveVisitCard() {
+            const statusEl = document.getElementById('visitCardStatus');
+            statusEl.style.color = 'var(--admin-secondary)';
+            statusEl.textContent = 'Сохранение...';
+
+            const companyData = {
+                name: document.getElementById('companyName').value.trim(),
+                address: document.getElementById('companyAddress').value.trim(),
+                phones: [],
+                social_links: []
+            };
+
+            document.querySelectorAll('#phoneInputsContainer .phone-input-group').forEach(group => {
+                const type = group.querySelector('.phone-type-select').value;
+                const number = group.querySelector('.phone-number-input').value.trim();
+                if (number) {
+                    companyData.phones.push({ type, number });
+                }
+            });
+
+            document.querySelectorAll('#socialLinkInputsContainer .social-link-input-group').forEach(group => {
+                const name = group.querySelector('.social-link-name-input').value.trim();
+                const url = group.querySelector('.social-link-url-input').value.trim();
+                if (name && url) {
+                    companyData.social_links.push({ name, url });
+                }
+            });
+
             try {
-                const response = await fetch('/admin/delete_client', {
+                const response = await fetch('/admin/save_visit_card', {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ user_id: userId })
+                    body: JSON.stringify(companyData)
                 });
                 const result = await response.json();
                 if (response.ok) {
-                    location.reload();
+                    statusEl.style.color = 'var(--admin-success)';
+                    statusEl.textContent = 'Визитка успешно сохранена!';
+                    setTimeout(() => { location.reload(); }, 1500);
                 } else {
-                    throw new Error(result.message || 'Не удалось удалить клиента.');
+                    throw new Error(result.message || 'Произошла ошибка');
                 }
             } catch (error) {
-                alert(`Ошибка: ${error.message}`);
+                statusEl.style.color = 'var(--admin-danger)';
+                statusEl.textContent = `Ошибка: ${error.message}`;
             }
         }
 
-        window.onclick = function(event) {
-            if (event.target == transactionModal) {
-                closeModal('transactionModal');
-            }
-            if (event.target == addClientModal) {
-                closeModal('addClientModal');
+        // Initial setup for modals that might be opened on load
+        document.addEventListener('DOMContentLoaded', (event) => {
+            if ({{ admin_logged_in|lower }}) {
+                adminPanelContent.style.display = 'block';
             }
-            if (event.target == companyDataModal) {
-                closeModal('companyDataModal');
+        });
+
+        window.onclick = function(event) {
+            if (event.target == transactionModal) closeModal('transactionModal');
+            if (event.target == addClientModal) closeModal('addClientModal');
+            if (event.target == createInvoiceModal) closeModal('createInvoiceModal');
+            if (event.target == visitCardModal) closeModal('visitCardModal');
+            if (event.target == adminPasswordModal) { // Prevent closing password modal by clicking outside
+                 event.stopPropagation(); 
             }
         }
     </script>
@@ -1388,48 +1806,81 @@ ADMIN_TEMPLATE = """
 </html>
 """
 
+# --- Admin Authentication ---
+def admin_login_required(f):
+    @wraps(f)
+    def decorated_function(*args, **kwargs):
+        if not session.get('admin_logged_in'):
+            return redirect(url_for('admin_panel')) # Redirect to login page
+        return f(*args, **kwargs)
+    return decorated_function
+
+# --- Routes ---
+
 @app.route('/')
 def index():
     user_id_str = request.args.get('user_id_for_test')
+    current_view = request.args.get('view', 'history') # Default view is 'history'
     
-    current_visitor_data = load_visitor_data()
-    current_company_data = load_company_data()
+    current_data = load_visitor_data()
     user_data = {}
 
-    if user_id_str and user_id_str in current_visitor_data:
-        user_data = current_visitor_data[user_id_str]
+    if user_id_str and user_id_str in current_data:
+        user_data = current_data[user_id_str]
         user_data['id'] = user_id_str
 
-        bonus_history = user_data.get('history', [])
-        for item in bonus_history:
-            item['transaction_type'] = 'bonus'
+        # Process history with proper timezone formatting
+        if 'history' in user_data:
+            for item in user_data['history']:
+                item['transaction_type'] = 'bonus'
+                item['date_str'] = format_time_in_app_timezone(item.get('date'))
+        else:
+            user_data['history'] = []
 
-        debt_history = user_data.get('debt_history', [])
-        for item in debt_history:
-            item['transaction_type'] = 'debt'
-            
-        invoice_history = user_data.get('invoices', [])
-        for item in invoice_history:
-            item['transaction_type'] = 'invoice'
+        if 'debt_history' in user_data:
+            for item in user_data['debt_history']:
+                item['transaction_type'] = 'debt'
+                item['date_str'] = format_time_in_app_timezone(item.get('date'))
+        else:
+            user_data['debt_history'] = []
 
         combined_history = sorted(
-            bonus_history + debt_history + invoice_history,
-            key=lambda x: x['date'],
+            user_data.get('history', []) + user_data.get('debt_history', []),
+            key=lambda x: x.get('date', '1970-01-01'), # Safely get date for sorting
             reverse=True
         )
         user_data['combined_history'] = combined_history
-    else:
+        
+        # Process invoices with proper timezone formatting
+        if 'invoices' in user_data:
+            for invoice in user_data['invoices']:
+                invoice['date_str'] = format_time_in_app_timezone(invoice.get('date_created'))
+        else:
+            user_data['invoices'] = []
+
+    else: # Fallback if user_id_for_test is invalid or missing
         user_data = {
             "id": "N/A",
             "bonuses": 0,
             "debts": 0,
             "history": [],
             "debt_history": [],
-            "invoices": [],
-            "combined_history": []
+            "combined_history": [],
+            "invoices": []
         }
 
-    return render_template_string(TEMPLATE, user=user_data, company_info=current_company_data)
+    # Fetch company data for visit card view
+    company_data = {}
+    if current_view == 'visit':
+        try:
+            with open('company_data.json', 'r', encoding='utf-8') as f:
+                company_data = json.load(f)
+        except FileNotFoundError:
+            logging.warning("company_data.json not found.")
+        except json.JSONDecodeError:
+            logging.error("Error decoding company_data.json.")
+            
+    return render_template_string(USER_TEMPLATE, user=user_data, current_view=current_view, company_data=company_data, bot_token=BOT_TOKEN)
 
 @app.route('/verify', methods=['POST'])
 def verify_data():
@@ -1453,7 +1904,7 @@ def verify_data():
         if is_valid:
             tg_user_id = user_info_dict.get('id')
             if tg_user_id:
-                now = get_local_time()
+                now_aware = get_current_time_in_app_timezone()
                 all_data = load_visitor_data()
                 
                 existing_user_key = None
@@ -1462,40 +1913,35 @@ def verify_data():
                         existing_user_key = key
                         break
                 
+                user_entry = {}
+                user_id_to_save = None
+
                 if existing_user_key:
                     user_entry = all_data[existing_user_key]
-                    user_entry.update({
-                        'first_name': user_info_dict.get('first_name'),
-                        'last_name': user_info_dict.get('last_name'),
-                        'username': user_info_dict.get('username'),
-                        'photo_url': user_info_dict.get('photo_url'),
-                        'language_code': user_info_dict.get('language_code'),
-                        'visited_at': now.timestamp(),
-                        'visited_at_str': format_local_time(now)
-                    })
                     user_id_to_save = existing_user_key
                 else:
-                    new_user_id = generate_unique_id(all_data)
-                    user_entry = {
-                        'id': new_user_id,
-                        'telegram_id': tg_user_id,
-                        'first_name': user_info_dict.get('first_name'),
-                        'last_name': user_info_dict.get('last_name'),
-                        'username': user_info_dict.get('username'),
-                        'photo_url': user_info_dict.get('photo_url'),
-                        'language_code': user_info_dict.get('language_code'),
-                        'is_premium': user_info_dict.get('is_premium', False),
-                        'phone_number': None,
-                        'visited_at': now.timestamp(),
-                        'visited_at_str': format_local_time(now),
-                        'bonuses': 0,
-                        'history': [],
-                        'debts': 0,
-                        'debt_history': [],
-                        'invoices': []
-                    }
-                    user_id_to_save = new_user_id
-                
+                    user_id_to_save = generate_unique_id(all_data)
+                    user_entry = { 'id': user_id_to_save } # Initialize with ID
+
+                user_entry.update({
+                    'telegram_id': tg_user_id,
+                    'first_name': user_info_dict.get('first_name'),
+                    'last_name': user_info_dict.get('last_name'),
+                    'username': user_info_dict.get('username'),
+                    'photo_url': user_info_dict.get('photo_url'),
+                    'language_code': user_info_dict.get('language_code'),
+                    'is_premium': user_info_dict.get('is_premium', False),
+                    'visited_at': now_aware, # Store as datetime object
+                    'visited_at_str': now_aware.strftime('%Y-%m-%d %H:%M:%S') # For direct display if needed
+                })
+
+                # Ensure default fields exist if it's a new entry or an old one missing them
+                user_entry.setdefault('bonuses', 0)
+                user_entry.setdefault('history', [])
+                user_entry.setdefault('debts', 0)
+                user_entry.setdefault('debt_history', [])
+                user_entry.setdefault('invoices', [])
+
                 save_visitor_data({user_id_to_save: user_entry})
                 
                 return jsonify({"status": "ok", "verified": True, "user_id": user_id_to_save})
@@ -1509,13 +1955,44 @@ def verify_data():
         logging.exception("Error in /verify endpoint")
         return jsonify({"status": "error", "message": "Internal server error"}), 500
 
+@app.route('/get_invoice/<invoice_id>')
+def get_invoice(invoice_id):
+    user_id_str = request.args.get('user_id_for_test') # Need to know which user's invoice to get
+    if not user_id_str:
+        return jsonify({"status": "error", "message": "User ID not provided."}), 400
+
+    all_data = load_visitor_data()
+    user_data = all_data.get(user_id_str)
+
+    if not user_data:
+        return jsonify({"status": "error", "message": "User not found."}), 404
+
+    invoice = next((inv for inv in user_data.get('invoices', []) if inv['id'] == invoice_id), None)
+
+    if invoice:
+        # Ensure dates are formatted correctly for display in modal
+        invoice['date_str'] = format_time_in_app_timezone(invoice.get('date_created'))
+        return jsonify({"status": "ok", "invoice": invoice})
+    else:
+        return jsonify({"status": "error", "message": "Invoice not found for this user."}), 404
+
+# --- Admin Routes ---
 @app.route('/admin')
 def admin_panel():
-    current_visitor_data = load_visitor_data()
-    current_company_data = load_company_data()
+    if not ADMIN_PASSWORD:
+        return Response("Admin password not set. Access denied.", status=403)
+        
+    if not session.get('admin_logged_in'):
+        return render_template_string(ADMIN_TEMPLATE, admin_logged_in=False)
+
+    current_data = load_visitor_data()
     users_list = []
-    for user_id, user_data in current_visitor_data.items():
-        user_data['id'] = user_id
+    for user_id, user_data in current_data.items():
+        user_data['id'] = user_id # Ensure user ID is present
+        # Format dates for display
+        if 'visited_at' in user_data:
+             user_data['visited_at_str'] = format_time_in_app_timezone(user_data['visited_at'])
+        
         users_list.append(user_data)
     
     total_users = len(users_list)
@@ -1530,10 +2007,27 @@ def admin_panel():
         "users_with_debt": users_with_debt
     }
     
-    return render_template_string(ADMIN_TEMPLATE, users=users_list, summary=summary_stats, company_info=current_company_data)
+    return render_template_string(ADMIN_TEMPLATE, users=users_list, summary=summary_stats, admin_logged_in=True)
+
+@app.route('/admin/login', methods=['POST'])
+def admin_login():
+    if not ADMIN_PASSWORD:
+        return jsonify({"success": False, "message": "Пароль администратора не установлен."}), 403
+        
+    data = request.get_json()
+    password = data.get('password')
+
+    if password == ADMIN_PASSWORD:
+        session['admin_logged_in'] = True
+        return jsonify({"success": True, "message": "Авторизация успешна."})
+    else:
+        return jsonify({"success": False, "message": "Неверный пароль."}), 401
 
 @app.route('/admin/add_client', methods=['POST'])
 def add_client():
+    if not session.get('admin_logged_in'):
+        return Response("Access Denied", status=403)
+
     try:
         data = request.get_json()
         phone_number = data.get('phone_number')
@@ -1548,7 +2042,7 @@ def add_client():
             if user.get('phone_number') == phone_number:
                 return jsonify({"status": "error", "message": "Клиент с таким номером телефона уже существует."}), 409
 
-        now = get_local_time()
+        now_aware = get_current_time_in_app_timezone()
         new_id = generate_unique_id(all_data)
         
         new_client = {
@@ -1561,8 +2055,8 @@ def add_client():
             'language_code': 'ru',
             'is_premium': False,
             'phone_number': phone_number,
-            'visited_at': now.timestamp(),
-            'visited_at_str': format_local_time(now),
+            'visited_at': now_aware,
+            'visited_at_str': now_aware.strftime('%Y-%m-%d %H:%M:%S'),
             'bonuses': 0,
             'history': [],
             'debts': 0,
@@ -1580,6 +2074,9 @@ def add_client():
 
 @app.route('/admin/add_transaction', methods=['POST'])
 def add_transaction():
+    if not session.get('admin_logged_in'):
+        return Response("Access Denied", status=403)
+        
     try:
         data = request.get_json()
         user_id = data.get('user_id')
@@ -1587,8 +2084,6 @@ def add_transaction():
         deduct_amount = float(data.get('deduct_amount', 0))
         add_debt_amount = float(data.get('add_debt_amount', 0))
         repay_debt_amount = float(data.get('repay_debt_amount', 0))
-        invoice_items = data.get('invoice_items', [])
-        invoice_total_amount = float(data.get('invoice_total_amount', 0))
 
         if not user_id:
             return jsonify({"status": "error", "message": "User ID is required"}), 400
@@ -1600,9 +2095,9 @@ def add_transaction():
             return jsonify({"status": "error", "message": "User not found"}), 404
 
         user = all_data[user_id_str]
-        now = get_local_time()
-        now_iso = now.isoformat()
-        now_str = format_local_time(now)
+        now_aware = get_current_time_in_app_timezone()
+        now_iso = now_aware.isoformat()
+        now_str = now_aware.strftime('%Y-%m-%d %H:%M:%S') # For display
         
         if deduct_amount > user.get('bonuses', 0):
              return jsonify({"status": "error", "message": "Недостаточно бонусов для списания"}), 400
@@ -1619,8 +2114,8 @@ def add_transaction():
         if accrual_amount > 0:
             user['history'].append({
                 "type": "accrual", "amount": accrual_amount,
-                "description": f"Начисление с покупки {purchase_amount}",
-                "date": now_iso, "date_str": now_str
+                "description": f"Начисление с покупки {purchase_amount:.2f}",
+                "date": now_iso, "date_str": now_str # Store ISO and display string
             })
         if deduct_amount > 0:
             user['history'].append({
@@ -1647,35 +2142,6 @@ def add_transaction():
                 "date": now_iso, "date_str": now_str
             })
         
-        # Invoice operation
-        if invoice_items and invoice_total_amount > 0:
-            invoice_id = len(user.get('invoices', [])) + 1
-            new_invoice = {
-                "id": invoice_id,
-                "items": invoice_items,
-                "total_amount": invoice_total_amount,
-                "date": now_iso,
-                "date_str": now_str
-            }
-            if 'invoices' not in user or not isinstance(user['invoices'], list):
-                user['invoices'] = []
-            user['invoices'].append(new_invoice)
-            
-            # Deduct invoice total from user's bonuses if they exist
-            if user['bonuses'] >= invoice_total_amount:
-                user['bonuses'] -= invoice_total_amount
-                user['history'].append({
-                    "type": "deduction", "amount": invoice_total_amount,
-                    "description": f"Оплата накладной #{invoice_id}",
-                    "date": now_iso, "date_str": now_str
-                })
-            else:
-                # Optionally handle insufficient bonuses, maybe add to debt or inform user
-                logging.warning(f"User {user_id_str} has insufficient bonuses to pay for invoice #{invoice_id}.")
-                # For now, just record the invoice and don't deduct if bonuses are insufficient.
-                # A more complex system might add to debt here.
-                pass
-
         save_visitor_data({user_id_str: user})
 
         return jsonify({
@@ -1687,34 +2153,11 @@ def add_transaction():
         logging.exception("Error in /admin/add_transaction endpoint")
         return jsonify({"status": "error", "message": str(e)}), 500
 
-@app.route('/admin/update_company_data', methods=['POST'])
-def update_company_data():
-    try:
-        data = request.get_json()
-        company_name = data.get('name')
-        company_address = data.get('address')
-        phones = data.get('phones', [])
-        social_links = data.get('social_links', [])
-
-        if not company_name or not company_address:
-            return jsonify({"status": "error", "message": "Название компании и адрес обязательны."}), 400
-
-        updated_company_data = {
-            'name': company_name,
-            'address': company_address,
-            'phones': phones,
-            'social_links': social_links
-        }
-        
-        save_company_data(updated_company_data)
-        return jsonify({"status": "ok", "message": "Company data updated successfully"}), 200
-
-    except Exception as e:
-        logging.exception("Error in /admin/update_company_data endpoint")
-        return jsonify({"status": "error", "message": str(e)}), 500
-
 @app.route('/admin/delete_client', methods=['POST'])
 def delete_client():
+    if not session.get('admin_logged_in'):
+        return Response("Access Denied", status=403)
+        
     try:
         data = request.get_json()
         user_id = data.get('user_id')
@@ -1723,15 +2166,16 @@ def delete_client():
             return jsonify({"status": "error", "message": "User ID is required"}), 400
 
         user_id_str = str(user_id)
-        load_visitor_data()
+        load_visitor_data() # Ensure data is loaded
 
         with _data_lock:
             if user_id_str not in visitor_data_cache:
                 return jsonify({"status": "error", "message": "User not found"}), 404
 
             user_to_delete = visitor_data_cache[user_id_str]
+            # Prevent deletion of Telegram-linked users if necessary, or add a confirmation
             if user_to_delete.get('telegram_id') is not None:
-                return jsonify({"status": "error", "message": "Cannot delete a Telegram-linked user"}), 403
+                 return jsonify({"status": "error", "message": "Нельзя удалить клиента, связанного с Telegram. Сначала отвяжите его или удалите через Telegram."}), 403
 
             del visitor_data_cache[user_id_str]
 
@@ -1750,6 +2194,106 @@ def delete_client():
         logging.exception("Error in /admin/delete_client endpoint")
         return jsonify({"status": "error", "message": str(e)}), 500
 
+@app.route('/admin/create_invoice', methods=['POST'])
+def create_invoice():
+    if not session.get('admin_logged_in'):
+        return Response("Access Denied", status=403)
+
+    try:
+        data = request.get_json()
+        user_id = data.get('user_id')
+        items = data.get('items', [])
+        total_amount = float(data.get('total_amount', 0))
+
+        if not user_id:
+            return jsonify({"status": "error", "message": "User ID is required."}), 400
+        if not items:
+            return jsonify({"status": "error", "message": "Invoice must contain at least one item."}), 400
+
+        user_id_str = str(user_id)
+        all_data = load_visitor_data()
+
+        if user_id_str not in all_data:
+            return jsonify({"status": "error", "message": "User not found."}), 404
+
+        user = all_data[user_id_str]
+        now_aware = get_current_time_in_app_timezone()
+        now_iso = now_aware.isoformat()
+        now_str = now_aware.strftime('%Y-%m-%d %H:%M:%S')
+        
+        # Generate a unique ID for the invoice
+        invoice_id = str(random.randint(100000, 999999))
+        if 'invoices' in user:
+            while any(inv['id'] == invoice_id for inv in user['invoices']):
+                invoice_id = str(random.randint(100000, 999999))
+        else:
+            user['invoices'] = []
+
+        new_invoice = {
+            'id': invoice_id,
+            'user_id': user_id_str,
+            'date_created': now_iso,
+            'date_created_str': now_str,
+            'total_amount': total_amount,
+            'items': items
+        }
+        
+        user['invoices'].append(new_invoice)
+        
+        save_visitor_data({user_id_str: user})
+        
+        return jsonify({"status": "ok", "message": "Invoice created successfully", "invoice_id": invoice_id}), 201
+
+    except Exception as e:
+        logging.exception("Error in /admin/create_invoice endpoint")
+        return jsonify({"status": "error", "message": str(e)}), 500
+
+@app.route('/admin/get_visit_card', methods=['GET'])
+def get_visit_card():
+    try:
+        company_data = {}
+        try:
+            with open('company_data.json', 'r', encoding='utf-8') as f:
+                company_data = json.load(f)
+        except FileNotFoundError:
+            logging.warning("company_data.json not found.")
+        except json.JSONDecodeError:
+            logging.error("Error decoding company_data.json.")
+            return jsonify({"status": "error", "message": "Error reading company data."}), 500
+            
+        return jsonify({"status": "ok", "company_data": company_data})
+
+    except Exception as e:
+        logging.exception("Error in /admin/get_visit_card endpoint")
+        return jsonify({"status": "error", "message": str(e)}), 500
+
+@app.route('/admin/save_visit_card', methods=['POST'])
+def save_visit_card():
+    if not session.get('admin_logged_in'):
+        return Response("Access Denied", status=403)
+
+    try:
+        data = request.get_json()
+        
+        # Basic validation
+        if not isinstance(data, dict):
+            return jsonify({"status": "error", "message": "Invalid data format."}), 400
+
+        # Save to company_data.json
+        try:
+            with open('company_data.json', 'w', encoding='utf-8') as f:
+                json.dump(data, f, ensure_ascii=False, indent=4)
+            logging.info("Visit card data saved to company_data.json.")
+            return jsonify({"status": "ok", "message": "Visit card data saved successfully."}), 200
+        except Exception as e:
+            logging.error(f"Error saving visit card data: {e}")
+            return jsonify({"status": "error", "message": "Failed to save visit card data."}), 500
+
+    except Exception as e:
+        logging.exception("Error in /admin/save_visit_card endpoint")
+        return jsonify({"status": "error", "message": str(e)}), 500
+
+
 if __name__ == '__main__':
     print("--- BONUS SYSTEM SERVER ---")
     print(f"Server starting on http://{HOST}:{PORT}")
@@ -1759,15 +2303,25 @@ if __name__ == '__main__':
          print("Attempting initial data download from Hugging Face...")
          download_data_from_hf()
 
-    load_visitor_data()
-    load_company_data()
+    load_visitor_data() # Load data on startup
+
+    if not ADMIN_PASSWORD:
+        print("\n" + "="*50)
+        print("WARNING: ADMIN_PASSWORD is not set.")
+        print("Access to the /admin panel will be DENIED.")
+        print("Set the ADMIN_PASSWORD environment variable to enable admin access.")
+        print("="*50 + "\n")
+    else:
+        print("\nAdmin panel is protected by password.")
 
-    print("WARNING: The /admin route is NOT protected. Implement proper authentication for production.")
-    
     if HF_TOKEN_WRITE:
         backup_thread = threading.Thread(target=periodic_backup, daemon=True)
         backup_thread.start()
         print("Periodic backup thread started (every hour).")
+    else:
+        print("Periodic backup disabled: HF_TOKEN_WRITE not set.")
 
     print("--- Server Ready ---")
-    app.run(host=HOST, port=PORT, debug=False)
\ No newline at end of file
+    app.run(host=HOST, port=PORT, debug=False)
+
+