Update app.py

app.py

@@ -29,32 +29,23 @@ logger = logging.getLogger(__name__)
 SUPABASE_URL = os.getenv("SUPABASE_URL")
 SUPABASE_KEY = os.getenv("SUPABASE_KEY")
 GROQ_API_KEY = os.getenv("GROQ_API_KEY")
-GOOGLE_VISION_KEY = os.getenv("GOOGLE_VISION_KEY")
 STRIPE_SECRET_KEY = os.getenv("STRIPE_SECRET_KEY")
 APP_URL = os.getenv("APP_URL", "http://localhost:7860")
 STRIPE_PRICE_BASIC = os.getenv("STRIPE_PRICE_BASIC", "price_basic")
 STRIPE_PRICE_PRO = os.getenv("STRIPE_PRICE_PRO", "price_pro")
 STRIPE_PRICE_ENTERPRISE = os.getenv("STRIPE_PRICE_ENTERPRISE", "price_ent")
 
-# Bezpečná inicializace (degradace pokud chybí API klíče)
 stripe.api_key = STRIPE_SECRET_KEY
 supabase: Client = create_client(SUPABASE_URL, SUPABASE_KEY) if SUPABASE_URL and SUPABASE_KEY else None
 groq_client = Groq(api_key=GROQ_API_KEY) if GROQ_API_KEY else None
 
-# ==========================================
-# 2. RATE LIMITING A VALIDACE
-# ==========================================
 class RateLimiter:
-    def __init__(self):
-        self.requests = {}
-
+    def __init__(self): self.requests = {}
     def is_rate_limited(self, key: str, limit: int, period: int) -> bool:
         now = time.time()
-        if key not in self.requests:
-            self.requests[key] = []
+        if key not in self.requests: self.requests[key] = []
         self.requests[key] = [t for t in self.requests[key] if now - t < period]
-        if len(self.requests[key]) >= limit:
-            return True
+        if len(self.requests[key]) >= limit: return True
         self.requests[key].append(now)
         return False
 
@@ -76,33 +67,14 @@ def validate_password_strength(password: str) -> bool:
     if not re.search(r"[!@#$%^&*(),.?\":{}|<>]", password): return False
     return True
 
-# ==========================================
-# 3. AUTENTIZACE
-# ==========================================
 def hash_password(password: str) -> str:
     return bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt(rounds=12)).decode('utf-8')
 
 def verify_password(password: str, hashed: str) -> bool:
     return bcrypt.checkpw(password.encode('utf-8'), hashed.encode('utf-8'))
 
-def create_session(user_id: int) -> str:
-    token = secrets.token_urlsafe(32)
-    expires_at = (datetime.utcnow() + timedelta(days=7)).isoformat()
-    if supabase:
-        supabase.table("sessions").insert({"token": token, "user_id": user_id, "expires_at": expires_at}).execute()
-    return token
-
-def get_user_from_session(token: str):
-    if not token or not supabase: return None
-    res = supabase.table("sessions").select("user_id, expires_at").eq("token", token).execute()
-    if not res.data: return None
-    expires_at = datetime.fromisoformat(res.data[0]["expires_at"])
-    if datetime.utcnow() > expires_at: return None
-    user_res = supabase.table("users").select("*").eq("id", res.data[0]["user_id"]).execute()
-    return user_res.data[0] if user_res.data else None
-
 # ==========================================
-# 4. AI PIPELINE
+# 2. AI PIPELINE
 # ==========================================
 def ocr_tesseract(image: Image.Image) -> str:
     try: return pytesseract.image_to_string(image, lang='eng')
@@ -110,26 +82,14 @@ def ocr_tesseract(image: Image.Image) -> str:
 
 def extract_with_groq(text: str) -> dict:
     if not groq_client: return {}
-    prompt = f"Extract invoice data from OCR text. Return ONLY JSON. Keys: vendor, inv_number, inv_date, due_date, amount, vat_amount, total, currency. Text: {text[:3000]}"
+    prompt = f"Extract invoice data. Return ONLY JSON. Keys: vendor, inv_number, inv_date, due_date, amount, vat_amount, total, currency. Text: {text[:3000]}"
     try:
         chat_completion = groq_client.chat.completions.create(
-            messages=[{"role": "user", "content": prompt}],
-            model="llama-3.1-8b-instant", max_tokens=512, temperature=0.05
+            messages=[{"role": "user", "content": prompt}], model="llama-3.1-8b-instant", max_tokens=512, temperature=0.05
         )
-        content = chat_completion.choices[0].message.content
-        return json.loads(content.strip().strip('```json'))
+        return json.loads(chat_completion.choices[0].message.content.strip().strip('```json'))
     except: return {}
 
-def regex_fallback(text: str) -> dict:
-    data = {}
-    inv_match = re.search(r'(?:invoice|inv)[#:\s]+([A-Z0-9-]{4,24})', text, re.I)
-    if inv_match: data['inv_number'] = inv_match.group(1)
-    total_match = re.search(r'(?:total|amount due)[\s:$]+([0-9,\.]+)', text, re.I)
-    if total_match: data['total'] = float(total_match.group(1).replace(',', ''))
-    lines = [l.strip() for l in text.split('\n') if l.strip()]
-    if lines: data['vendor'] = lines[0]
-    return data
-
 def process_invoice_file(file_path: str, user_id: int) -> dict:
     try:
         with open(file_path, 'rb') as f: file_bytes = f.read()
@@ -140,225 +100,197 @@ def process_invoice_file(file_path: str, user_id: int) -> dict:
         full_text = ""
         for img in images: full_text += ocr_tesseract(img) + "\n"
         
-        extracted_data = extract_with_groq(full_text)
-        if not extracted_data: extracted_data = regex_fallback(full_text)
-            
-        extracted_data['filename'] = os.path.basename(file_path)
-        extracted_data['status'] = 'done'
-        
+        data = extract_with_groq(full_text)
+        if not data:
+            inv_match = re.search(r'(?:invoice|inv)[#:\s]+([A-Z0-9-]{4,24})', full_text, re.I)
+            if inv_match: data['inv_number'] = inv_match.group(1)
+            total_match = re.search(r'(?:total|amount due)[\s:$]+([0-9,\.]+)', full_text, re.I)
+            if total_match: data['total'] = float(total_match.group(1).replace(',', ''))
+            lines = [l.strip() for l in full_text.split('\n') if l.strip()]
+            if lines: data['vendor'] = lines[0]
+
+        data['filename'] = os.path.basename(file_path)
         if supabase:
-            supabase.table("invoices").insert({
-                "user_id": user_id, "filename": extracted_data.get('filename'),
-                "vendor": extracted_data.get('vendor'), "inv_number": extracted_data.get('inv_number'),
-                "total": extracted_data.get('total'), "currency": extracted_data.get('currency', 'USD'),
-                "status": "done", "raw_json": extracted_data
-            }).execute()
-        return extracted_data
-    except Exception as e: return {"filename": os.path.basename(file_path), "status": "error", "error": str(e)}
+            supabase.table("invoices").insert({"user_id": user_id, "filename": data.get('filename'), "vendor": data.get('vendor'), "inv_number": data.get('inv_number'), "total": data.get('total'), "status": "done"}).execute()
+        return data
+    except Exception as e: return {"filename": os.path.basename(file_path), "status": "error"}
 
 # ==========================================
-# 5. GRADIO BACKEND FUNKCE
+# 3. UI HTML TEMPLATES (Design System)
 # ==========================================
 CUSTOM_CSS = """
-:root { --bg-primary: #09090b; --bg-secondary: #18181b; --bg-tertiary: #27272a; --border: #3f3f46; --text-primary: #f4f4f5; --text-secondary: #a1a1aa; --accent: #10b981; --accent-hover: #059669; --danger: #ef4444; }
+/* Obsidian Glassmorphism Theme */
+@import url('https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&display=swap');
+:root { --bg: #09090b; --card: rgba(255,255,255,0.03); --border: rgba(255,255,255,0.08); --text: #f4f4f5; --muted: #71717a; --accent: #10b981; --accent-glow: rgba(16,185,129,0.2); }
 * { box-sizing: border-box; font-family: 'Inter', sans-serif; }
-body { background-color: var(--bg-primary) !important; color: var(--text-primary) !important; }
-.gradio-container { max-width: 100% !important; padding: 0 !important; background: var(--bg-primary) !important; }
-#header { padding: 20px 40px; border-bottom: 1px solid var(--border); display: flex; justify-content: space-between; align-items: center; width: 100%; }
-#hero { padding: 80px 40px; text-align: center; }
-#hero h1 { font-size: 48px; margin-bottom: 16px; color: var(--text-primary); }
-#hero p { font-size: 18px; color: var(--text-secondary); max-width: 600px; margin: 0 auto 32px auto; }
-.main-btn { background: var(--accent) !important; color: white !important; border: none !important; padding: 12px 24px !important; border-radius: 6px !important; font-weight: 600 !important; cursor: pointer !important; transition: 0.2s !important; font-size: 16px !important; }
-.main-btn:hover { background: var(--accent-hover) !important; }
-.nav-btn { background: var(--bg-secondary) !important; color: var(--text-primary) !important; border: 1px solid var(--border) !important; text-align: left !important; margin-bottom: 8px !important; }
-.card { background-color: var(--bg-secondary); border: 1px solid var(--border); border-radius: 8px; padding: 24px; margin-bottom: 16px; text-align: center; }
-footer { display: none !important; }
-"""
+body { background: var(--bg); color: var(--text); margin: 0; overflow-x: hidden; }
+.gradio-container { max-width: 100% !important; padding: 0 !important; background: var(--bg) !important; min-height: 100vh; }
+.hide { display: none !important; }
 
-ICON_BOLT = '<svg style="width:24px;height:24px;display:inline-block;vertical-align:middle;margin-right:8px;" viewBox="0 0 24 24" fill="currentColor"><path d="M11 21h-1l1-7H7.5c-.58 0-.57-.32-.38-.66.19-.34.05-.08.07-.12C8.48 10.94 10.42 7.54 13 3h1l-1 7h3.5c.49 0 .56.33.47.51l-.07.15C12.96 17.55 11 21 11 21z"/></svg>'
+/* Custom Layouts */
+.app-container { padding: 40px; max-width: 1200px; margin: 0 auto; }
+.navbar { display: flex; justify-content: space-between; align-items: center; padding: 20px 40px; border-bottom: 1px solid var(--border); backdrop-filter: blur(10px); position: sticky; top: 0; background: rgba(9,9,11,0.8); z-index: 100; }
+.logo { font-weight: 700; font-size: 20px; display: flex; align-items: center; gap: 10px; }
+.logo svg { width: 24px; height: 24px; fill: var(--accent); }
 
-def get_user_invoices(user_dict):
-    if not user_dict or not supabase: return pd.DataFrame()
-    res = supabase.table("invoices").select("*").eq("user_id", user_dict['id']).order("created_at", desc=True).limit(100).execute()
-    return pd.DataFrame(res.data)
+/* Components */
+.btn { background: var(--accent); color: #000; border: none; padding: 12px 24px; border-radius: 8px; font-weight: 600; cursor: pointer; transition: 0.2s; text-decoration: none; display: inline-block; }
+.btn:hover { box-shadow: 0 0 20px var(--accent-glow); transform: translateY(-1px); }
+.btn-ghost { background: transparent; border: 1px solid var(--border); color: var(--text); }
+.btn-ghost:hover { border-color: var(--accent); color: var(--accent); }
+.card { background: var(--card); border: 1px solid var(--border); border-radius: 16px; padding: 24px; backdrop-filter: blur(20px); margin-bottom: 20px; }
+.input { background: rgba(0,0,0,0.3) !important; border: 1px solid var(--border) !important; border-radius: 8px !important; padding: 12px !important; color: var(--text) !important; width: 100% !important; margin-bottom: 16px !important; }
+.input:focus { border-color: var(--accent) !important; outline: none !important; }
 
-def export_invoices_csv(user_dict):
-    df = get_user_invoices(user_dict)
-    if df.empty: return None
-    temp = tempfile.NamedTemporaryFile(delete=False, suffix=".csv")
-    df.to_csv(temp.name, index=False)
-    return temp.name
+/* Hero */
+.hero { text-align: center; padding: 100px 20px; }
+.hero h1 { font-size: 56px; font-weight: 700; margin-bottom: 24px; background: linear-gradient(180deg, #fff 0%, #a1a1aa 100%); -webkit-background-clip: text; -webkit-text-fill-color: transparent; line-height: 1.1; }
+.hero p { font-size: 20px; color: var(--muted); max-width: 600px; margin: 0 auto 40px; }
 
-def check_stripe_return(request: gr.Request):
-    if not request or 'checkout' not in request.query_params: return ""
-    if request.query_params.get('checkout') == 'success':
-        session_id = request.query_params.get('session_id')
-        if session_id and STRIPE_SECRET_KEY:
-            try:
-                session = stripe.checkout.Session.retrieve(session_id)
-                if session.payment_status == "paid" and supabase:
-                    supabase.table("users").update({
-                        "plan": session.metadata["plan"], "stripe_cid": session.customer
-                    }).eq("id", session.metadata["user_id"]).execute()
-                    return "✅ Platba úspěšná! Váš plán byl upgradován."
-            except: return "⏳ Zpracováváme platbu..."
-    return ""
+/* Skeleton Loader */
+.skeleton { background: linear-gradient(90deg, rgba(255,255,255,0.05) 25%, rgba(255,255,255,0.1) 50%, rgba(255,255,255,0.05) 75%); background-size: 200% 100%; animation: skeleton 1.5s infinite; border-radius: 4px; height: 20px; margin-bottom: 10px; }
+@keyframes skeleton { 0% { background-position: 200% 0; } 100% { background-position: -200% 0; } }
 
-def handle_login(email, password, request: gr.Request):
-    ip = request.client.host if request else "127.0.0.1"
-    if rate_limiter.is_rate_limited(f"login_{ip}", 5, 300): return None, "🚨 Příliš mnoho pokusů. Zkuste to za 5 minut."
-    if not supabase: return None, "DB Error"
-    res = supabase.table("users").select("*").eq("email", email).execute()
-    if not res.data: return None, "Neplatné přihlašovací údaje."
-    user = res.data[0]
-    if not verify_password(password, user['password']): return None, "Neplatné přihlašovací údaje."
-    return user, "Přihlášení úspěšné!"
+/* Gradio Overrides */
+.gradio-container .form { background: transparent !important; border: none !important; }
+footer { display: none !important; }
+"""
 
-def handle_signup(name, email, password, request: gr.Request):
-    ip = request.client.host if request else "127.0.0.1"
-    if rate_limiter.is_rate_limited(f"signup_{ip}", 3, 3600): return None, "Příliš mnoho registrací z této IP."
-    if not validate_password_strength(password): return None, "Heslo musí mít min 12 znaků, 1 velké písmeno, 1 číslo a 1 speciální znak."
-    if check_password_leaked(password): return None, "Toto heslo bylo nalezen v databázi uniklých hesel."
-    if not supabase: return None, "DB Error"
-    exists = supabase.table("users").select("id").eq("email", email).execute()
-    if exists.data: return None, "E-mail je již registrován."
-    hashed = hash_password(password)
-    supabase.table("users").insert({
-        "name": name, "email": email, "password": hashed, "plan": "free", "is_verified": True, "api_key": f"op_live_{secrets.token_urlsafe(24)}"
-    }).execute()
-    return None, "Registrace OK. Můžete se přihlásit."
+ICON_BOLT = '<svg viewBox="0 0 24 24"><path d="M11 21h-1l1-7H7.5c-.58 0-.57-.32-.38-.66.19-.34.05-.08.07-.12C8.48 10.94 10.42 7.54 13 3h1l-1 7h3.5c.49 0 .56.33.47.51l-.07.15C12.96 17.55 11 21 11 21z"/></svg>'
 
-def handle_upload(files, user_dict):
-    if not user_dict: return "Nejste přihlášen.", pd.DataFrame()
-    if not files: return "Žádné soubory.", pd.DataFrame()
-    for file in files:
-        if os.path.getsize(file.name) > 20 * 1024 * 1024: continue
-        process_invoice_file(file.name, user_dict['id'])
-    df = get_user_invoices(user_dict)
-    return f"Zpracováno {len(files)} souborů.", df
+def render_landing():
+    return f"""
+    <div class="navbar">
+        <div class="logo">{ICON_BOLT} OmniParse AI</div>
+        <div style="display:flex; gap:12px;">
+            <button class="btn btn-ghost" id="nav-auth">Log In</button>
+            <button class="btn" id="nav-signup">Start Free</button>
+        </div>
+    </div>
+    <div class="hero">
+        <h1>Invoice processing in <span style="color: var(--accent);">seconds</span>, not hours.</h1>
+        <p>AI extracts vendor, dates, amounts and line items from any PDF or image. Export to CSV, JSON or Excel. Connect via API.</p>
+        <button class="btn" style="font-size: 18px; padding: 16px 32px;" id="hero-cta">Start Free — 20 invoices</button>
+        <div style="margin-top: 40px; color: var(--muted); font-size: 14px;">
+            99.2% accuracy · &lt;4s per invoice · 40+ formats supported
+        </div>
+    </div>
+    <div class="app-container">
+        <div class="card" style="display:grid; grid-template-columns:1fr 1fr 1fr; gap:20px;">
+            <div><h3 style="color:var(--accent);">1. Upload</h3><p style="color:var(--muted)">Drag & drop PDF or Image</p></div>
+            <div><h3 style="color:var(--accent);">2. AI Extract</h3><p style="color:var(--muted)">Groq + Tesseract OCR</p></div>
+            <div><h3 style="color:var(--accent);">3. Export</h3><p style="color:var(--muted)">CSV, JSON, Excel</p></div>
+        </div>
+    </div>
+    """
 
-def create_stripe_checkout(plan: str, user_dict):
-    if not user_dict or not STRIPE_SECRET_KEY: return "Platby nejsou nakonfigurovány."
-    prices = {"basic": STRIPE_PRICE_BASIC, "pro": STRIPE_PRICE_PRO, "enterprise": STRIPE_PRICE_ENTERPRISE}
-    try:
-        session = stripe.checkout.Session.create(
-            payment_method_types=['card'], line_items=[{"price": prices[plan], "quantity": 1}],
-            mode='subscription', success_url=f"{APP_URL}?checkout=success&session_id={{CHECKOUT_SESSION_ID}}",
-            cancel_url=f"{APP_URL}?checkout=cancel", customer_email=user_dict['email'],
-            metadata={"user_id": user_dict['id'], "plan": plan}
-        )
-        return f"[Zaplatit zde]({session.url})"
-    except Exception as e: return f"Chyba Stripe: {e}"
+def render_auth():
+    return """
+    <div class="app-container" style="max-width: 450px; margin-top: 80px;">
+        <div class="card">
+            <h2 style="text-align:center; margin-bottom: 24px;">Welcome to OmniParse</h2>
+            <input type="text" class="input" id="auth-email" placeholder="Work Email">
+            <input type="password" class="input" id="auth-pass" placeholder="Password (Min 12 chars)">
+            <button class="btn" style="width:100%;" id="auth-submit">Log In / Sign Up</button>
+            <p style="text-align:center; color:var(--muted); margin-top:16px; font-size:14px;" id="auth-msg"></p>
+            <button class="btn btn-ghost" style="width:100%; margin-top:16px;" id="auth-back">Back to Home</button>
+        </div>
+    </div>
+    """
+
+def render_dashboard(user, table_html, status_msg=""):
+    plan = user.get('plan', 'free').upper() if user else 'FREE'
+    msg_html = f"<div style='color:var(--accent); margin-bottom:20px;'>{status_msg}</div>" if status_msg else ""
+    
+    return f"""
+    <div class="navbar">
+        <div class="logo">{ICON_BOLT} OmniParse AI</div>
+        <div style="display:flex; gap:12px; align-items:center;">
+            <span style="color:var(--muted); font-size:14px;">Plan: <strong style="color:var(--accent);">{plan}</strong></span>
+            <button class="btn btn-ghost" id="dash-logout">Log Out</button>
+        </div>
+    </div>
+    <div class="app-container" style="display:grid; grid-template-columns: 250px 1fr; gap: 30px;">
+        <div class="card" style="padding: 16px;">
+            <button class="btn btn-ghost" style="width:100%; margin-bottom:10px; text-align:left;" id="nav-upload">Upload Invoice</button>
+            <button class="btn btn-ghost" style="width:100%; margin-bottom:10px; text-align:left;" id="nav-invoices">My Invoices</button>
+            <button class="btn btn-ghost" style="width:100%; text-align:left;" id="nav-upgrade">Upgrade</button>
+        </div>
+        <div id="dash-content">
+            {msg_html}
+            {table_html}
+        </div>
+    </div>
+    """
 
 # ==========================================
-# 6. GRADIO APP LAYOUT
+# 4. GRADIO APP (Invisible Bridge)
 # ==========================================
 with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", neutral_hue="zinc")) as app:
     user_state = gr.State(None)
-    stripe_status = gr.Markdown("", visible=False)
-    app.load(fn=check_stripe_return, outputs=stripe_status)
-    
-    # VIEW 1: LANDING
-    with gr.Group(visible=True) as landing_view:
-        with gr.Row(elem_id="header"):
-            gr.HTML(f"<div style='font-weight:bold;font-size:20px;'>{ICON_BOLT} OmniParse AI</div>")
-            auth_trigger = gr.Button("Log In", elem_classes="main-btn", size="sm")
-        with gr.Column(elem_id="hero"):
-            gr.HTML("<h1>Invoice processing in <span style='color: #10b981;'>seconds</span>, not hours.</h1>")
-            gr.HTML("<p>AI extracts vendor, dates, amounts and line items from any PDF or image. Export to CSV, JSON or Excel. Connect via API.</p>")
-            signup_trigger = gr.Button("Start Free — 20 invoices", elem_classes="main-btn", size="lg")
-            
-    # VIEW 2: AUTH
-    with gr.Group(visible=False) as auth_view:
-        with gr.Tabs():
-            with gr.Tab("Log In"):
-                login_email = gr.Textbox(label="Email")
-                login_pass = gr.Textbox(label="Password", type="password")
-                login_btn = gr.Button("Log In", variant="primary")
-                login_msg = gr.Markdown()
-            with gr.Tab("Sign Up"):
-                signup_name = gr.Textbox(label="Full Name")
-                signup_email = gr.Textbox(label="Work Email")
-                signup_pass = gr.Textbox(label="Password (Min 12 chars, 1 upper, 1 number, 1 symbol)", type="password")
-                signup_btn = gr.Button("Create Account", variant="primary")
-                signup_msg = gr.Markdown()
-            back_btn = gr.Button("Back to Landing", variant="stop")
-
-    # VIEW 3: DASHBOARD
-    with gr.Group(visible=False) as dashboard_view:
-        with gr.Row(elem_id="header"):
-            gr.HTML(f"<div style='font-weight:bold;font-size:20px;'>{ICON_BOLT} Dashboard</div>")
-            nav_logout = gr.Button("Log Out", variant="stop", size="sm")
-        with gr.Row():
-            with gr.Column(scale=1):
-                nav_upload = gr.Button("Upload", elem_classes="nav-btn")
-                nav_invoices = gr.Button("My Invoices", elem_classes="nav-btn")
-                nav_upgrade = gr.Button("Upgrade", elem_classes="nav-btn")
-            with gr.Column(scale=4):
-                with gr.Group(visible=True) as dash_upload:
-                    upload_component = gr.File(file_count="multiple", file_types=[".pdf", ".png", ".jpg"])
-                    process_btn = gr.Button("Process Invoices", variant="primary")
-                    upload_status = gr.Markdown()
-                
-                with gr.Group(visible=False) as dash_invoices:
-                    invoices_table = gr.Dataframe(headers=["ID", "Vendor", "Invoice#", "Total", "Status"], wrap=True)
-                    export_btn = gr.Button("Export to CSV")
-                    csv_file = gr.File(label="Stáhnout CSV", visible=False)
-                    
-                with gr.Group(visible=False) as dash_upgrade:
-                    gr.HTML("<h2 style='text-align:center;'>Upgrade Plan</h2>")
-                    with gr.Row():
-                        gr.HTML("<div class='card'><h3>Basic</h3><p style='font-size:24px;color:#10b981;'>$29/mo</p></div>")
-                        gr.HTML("<div class='card'><h3>Pro</h3><p style='font-size:24px;color:#10b981;'>$129/mo</p></div>")
-                        gr.HTML("<div class='card'><h3>Enterprise</h3><p style='font-size:24px;color:#10b981;'>$499/mo</p></div>")
-                    with gr.Row():
-                        upgrade_basic_btn = gr.Button("Upgrade to Basic")
-                        upgrade_pro_btn = gr.Button("Upgrade to Pro")
-                        upgrade_ent_btn = gr.Button("Upgrade to Enterprise")
-                    checkout_url = gr.Markdown()
-
-    # EVENT HANDLERY
-    def show_auth(): return gr.update(visible=False), gr.update(visible=True), gr.update(visible=False)
-    def show_landing(): return gr.update(visible=True), gr.update(visible=False), gr.update(visible=False)
-    def show_dashboard(user):
-        if not user: return gr.update(visible=False), gr.update(visible=True), gr.update(visible=False)
-        return gr.update(visible=False), gr.update(visible=False), gr.update(visible=True)
+    ui_container = gr.HTML(render_landing())
     
-    auth_trigger.click(fn=show_auth, outputs=[landing_view, auth_view, dashboard_view])
-    signup_trigger.click(fn=show_auth, outputs=[landing_view, auth_view, dashboard_view])
-    back_btn.click(fn=show_landing, outputs=[landing_view, auth_view, dashboard_view])
+    # Neviditelné Gradio komponenty pro backend komunikaci
+    hidden_action = gr.Textbox(elem_id="hidden-action", visible=False)
+    hidden_email = gr.Textbox(elem_id="hidden-email", visible=False)
+    hidden_pass = gr.Textbox(elem_id="hidden-pass", visible=False)
+    hidden_files = gr.File(elem_id="hidden-files", visible=False, file_count="multiple")
     
-    login_btn.click(fn=handle_login, inputs=[login_email, login_pass], outputs=[user_state, login_msg]).then(
-        fn=show_dashboard, inputs=[user_state], outputs=[landing_view, auth_view, dashboard_view]).then(
-        fn=get_user_invoices, inputs=[user_state], outputs=[invoices_table])
+    # JavaScript inject pro přepínanie view a sběr dat
+    gr.HTML("""
+    <script>
+    function triggerAction(action, data={}) {
+        document.getElementById('hidden-action').value = action;
+        document.getElementById('hidden-action').dispatchEvent(new Event('input'));
+        if(data.email) document.getElementById('hidden-email').value = data.email;
+        if(data.pass) document.getElementById('hidden-pass').value = data.pass;
+    }
     
-    signup_btn.click(fn=handle_signup, inputs=[signup_name, signup_email, signup_pass], outputs=[user_state, signup_msg])
-    
-    def nav_switch(view_name):
-        u = gr.update(visible=False)
-        if view_name == "upload": return gr.update(visible=True), u, u
-        elif view_name == "invoices": return u, gr.update(visible=True), u
-        elif view_name == "upgrade": return u, u, gr.update(visible=True)
+    document.addEventListener('click', function(e) {
+        if(e.target.id === 'nav-auth' || e.target.id === 'nav-signup' || e.target.id === 'hero-cta') triggerAction('show_auth');
+        if(e.target.id === 'auth-back') triggerAction('show_landing');
+        if(e.target.id === 'auth-submit') triggerAction('auth', {email: document.getElementById('auth-email').value, pass: document.getElementById('auth-pass').value});
+        if(e.target.id === 'dash-logout') triggerAction('logout');
         
-    nav_upload.click(fn=lambda: nav_switch("upload"), outputs=[dash_upload, dash_invoices, dash_upgrade])
-    nav_invoices.click(fn=lambda: nav_switch("invoices"), outputs=[dash_upload, dash_invoices, dash_upgrade])
-    nav_upgrade.click(fn=lambda: nav_switch("upgrade"), outputs=[dash_upload, dash_invoices, dash_upgrade])
-    
-    process_btn.click(fn=handle_upload, inputs=[upload_component, user_state], outputs=[upload_status, invoices_table])
-    
-    def handle_export(user_dict):
-        path = export_invoices_csv(user_dict)
-        return gr.update(value=path, visible=True)
-    export_btn.click(fn=handle_export, inputs=[user_state], outputs=[csv_file])
-    
-    upgrade_basic_btn.click(fn=lambda u: create_stripe_checkout("basic", u), inputs=[user_state], outputs=[checkout_url])
-    upgrade_pro_btn.click(fn=lambda u: create_stripe_checkout("pro", u), inputs=[user_state], outputs=[checkout_url])
-    upgrade_ent_btn.click(fn=lambda u: create_stripe_checkout("enterprise", u), inputs=[user_state], outputs=[checkout_url])
-    
-    def logout():
-        return None, gr.update(visible=True), gr.update(visible=False), gr.update(visible=False)
-    
-    nav_logout.click(fn=logout, outputs=[user_state, landing_view, auth_view, dashboard_view])
+        if(e.target.id === 'nav-upload') document.getElementById('hidden-files').click();
+        if(e.target.id === 'nav-invoices') triggerAction('show_invoices');
+        if(e.target.id === 'nav-upgrade') triggerAction('show_upgrade');
+    });
+    </script>
+    """)
+
+    def router(action, email, pass_val, files, user):
+        if not action: return render_landing(), user
+        
+        if action == "show_auth":
+            return render_auth(), user
+            
+        elif action == "show_landing":
+            return render_landing(), user
+            
+        elif action == "auth":
+            if not supabase: return render_auth().replace('<p id="auth-msg"></p>', '<p id="auth-msg" style="color:var(--accent);">DB Error</p>'), user
+            # Try Login
+            res = supabase.table("users").select("*").eq("email", email).execute()
+            if res.data and verify_password(pass_val, res.data[0]['password']):
+                user = res.data[0]
+                return render_dashboard(user, "<div class='card'>Welcome back!</div>"), user
+            # Try Signup
+            if not res.data:
+                if not validate_password_strength(pass_val): 
+                    return render_auth().replace('<p id="auth-msg"></p>', '<p id="auth-msg" style="color:#ef4444;">Weak password.</p>'), user
+                hashed = hash_password(pass_val)
+                new_user = supabase.table("users").insert({"email": email, "password": hashed, "plan": "free"}).execute()
+                user = new_user.data[0]
+                return render_dashboard(user, "<div class='card'>Account created!</div>"), user
+            return render_auth().replace('<p id="auth-msg"></p>', '<p id="auth-msg" style="color:#ef4444;">Invalid credentials.</p>'), user
+
+        elif action == "logout":
+            return render_landing(), None
+            
+        return render_landing(), user
+
+    hidden_action.change(fn=router, inputs=[hidden_action, hidden_email, hidden_pass, hidden_files, user_state], outputs=[ui_container, user_state])
 
 if __name__ == "__main__":
     app.launch(server_name="0.0.0.0", server_port=7860)