fix: oprava updateData v Redis storage (node-redis v5 nemá executeIsolated)

- Socket.io Redis adapter pro sdílený stav přes repliky
- graceful shutdown serveru
- WATCH/MULTI v updateData pro race-condition-safe aktualizace
- lease mechanismus pro push reminder (zabrání duplicitnímu odesílání)
- k8s/ manifesty pro testovací kind cluster
- Dockerfile: opraven EXPOSE port na 3001
- .gitignore: ignorovány Claude pracovní soubory

.gitignore

@@ -4,3 +4,6 @@ types/gen
 .mcp.json
 .claude/settings.local.json
 server/public/
+.claude/*.lock
+.claude/worktrees
+.playwright-mcp

.vscode/launch.json

@@ -0,0 +1,32 @@
+{
+  "version": "0.2.0",
+  "configurations": [
+    {
+      "name": "Server (ts-node, debug)",
+      "type": "node",
+      "request": "launch",
+      "cwd": "${workspaceFolder}/server",
+      "runtimeArgs": ["-r", "ts-node/register"],
+      "program": "${workspaceFolder}/server/src/index.ts",
+      "env": { "NODE_ENV": "development" },
+      "console": "integratedTerminal",
+      "skipFiles": ["<node_internals>/**"],
+      "preLaunchTask": "types: openapi-ts"
+    },
+    {
+      "name": "Client (vite + Edge)",
+      "type": "msedge",
+      "request": "launch",
+      "url": "http://localhost:3000",
+      "webRoot": "${workspaceFolder}/client",
+      "preLaunchTask": "client: vite"
+    }
+  ],
+  "compounds": [
+    {
+      "name": "Dev: server + client",
+      "configurations": ["Server (ts-node, debug)", "Client (vite + Edge)"],
+      "stopAll": true
+    }
+  ]
+}

.vscode/tasks.json

@@ -0,0 +1,67 @@
+{
+  "version": "2.0.0",
+  "tasks": [
+    {
+      "label": "types: openapi-ts",
+      "type": "shell",
+      "command": "yarn openapi-ts",
+      "options": {
+        "cwd": "${workspaceFolder}/types"
+      },
+      "presentation": {
+        "reveal": "silent",
+        "panel": "dedicated"
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "server: startReload",
+      "type": "shell",
+      "command": "yarn startReload",
+      "options": {
+        "cwd": "${workspaceFolder}/server",
+        "env": {
+          "NODE_ENV": "development"
+        }
+      },
+      "isBackground": true,
+      "presentation": {
+        "reveal": "always",
+        "panel": "dedicated",
+        "group": "dev"
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "client: vite",
+      "type": "shell",
+      "command": "yarn start",
+      "options": {
+        "cwd": "${workspaceFolder}/client"
+      },
+      "isBackground": true,
+      "presentation": {
+        "reveal": "always",
+        "panel": "dedicated",
+        "group": "dev"
+      },
+      "problemMatcher": []
+    },
+    {
+      "label": "dev: server+client",
+      "dependsOn": [
+        "server: startReload",
+        "client: vite"
+      ]
+    },
+    {
+      "label": "dev: all",
+      "dependsOrder": "sequence",
+      "dependsOn": [
+        "types: openapi-ts",
+        "dev: server+client"
+      ],
+      "problemMatcher": []
+    }
+  ]
+}

Dockerfile

@@ -76,7 +76,7 @@ WORKDIR /app
 # Export /data/db.json do složky /data
 VOLUME ["/data"]
 
-EXPOSE 3000
+EXPOSE 3001
 
 CMD [ "node", "./server/src/index.js" ]
 

TODO.md

@@ -1,4 +1,9 @@
 # TODO
+
+## HA / multi-replica follow-ups
+- [ ] `foodRoutes.ts` per-pod rate limiter (`rateLimits` map) — s více replikami může uživatel překročit limit ~N× rychleji; přesunout do Redis (např. `INCR` + `EXPIRE`)
+- [ ] `easterEggRoutes.ts` — náhodně generované URL easter eggů jsou per-pod; URL funguje pouze na podu, který ji vygeneroval; zvážit deterministické seedy nebo sdílení přes Redis
+- [ ] `service.ts` — komplexní víceúrovňové funkce (`addChoice`, `removeChoiceIfPresent`) provádějí více po sobě jdoucích zápisů do stejného Redis klíče; pro plnou atomicitu je potřeba per-klíčový distribuovaný zámek (Redlock nebo `SET NX EX`) nebo sloučení logiky do jednoho `updateData` volání
 - [ ] HTTP_REMOTE_TRUSTED_IPS se nikde nevalidují, hlavičky jsou přijímány odkudkoli
 - [ ] V případě zapnutí přihlašování přes trusted headers nefunguje standardní přihlášení (nevrátí žádnou odpověď)
   - [ ] Nemělo by se jít dostat na přihlašovací formulář (měla by tam být nanejvýš hláška nebo přesměrování) 

client/public/sw.js

@@ -7,6 +7,7 @@ self.addEventListener('push', (event) => {
             body: data.body,
             icon: '/favicon.ico',
             tag: 'lunch-reminder',
+            data: { login: data.login, token: data.token },
             actions: [
                 { action: 'neobedvam', title: 'Mám vlastní/neobědvám' },
             ],
@@ -18,28 +19,26 @@ self.addEventListener('notificationclick', (event) => {
     event.notification.close();
 
     if (event.action === 'neobedvam') {
+        const { login, token } = event.notification.data ?? {};
+        if (login && token) {
             event.waitUntil(
-            self.registration.pushManager.getSubscription().then((subscription) => {
-                if (!subscription) return;
-                return fetch('/api/notifications/push/quickChoice', {
+                fetch('/api/notifications/push/quickChoice', {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json' },
-                    body: JSON.stringify({ endpoint: subscription.endpoint }),
-                });
+                    body: JSON.stringify({ login, token }),
                 })
             );
+        }
         return;
     }
 
     event.waitUntil(
         self.clients.matchAll({ type: 'window' }).then((clientList) => {
-            // Pokud je již otevřené okno, zaostříme na něj
             for (const client of clientList) {
                 if (client.url.includes(self.location.origin) && 'focus' in client) {
                     return client.focus();
                 }
             }
-            // Jinak otevřeme nové
             return self.clients.openWindow('/');
         })
     );

client/src/App.scss

@@ -226,6 +226,7 @@ body {
   &:hover svg {
     transform: rotate(15deg);
   }
+
 }
 
 // ============================================

client/src/App.tsx

@@ -1,6 +1,6 @@
 import React, { useContext, useEffect, useMemo, useRef, useState, useCallback } from 'react';
 import 'bootstrap/dist/css/bootstrap.min.css';
-import { EVENT_DISCONNECT, EVENT_MESSAGE, SocketContext } from './context/socket';
+import { EVENT_DISCONNECT, EVENT_MESSAGE, EVENT_PENDING_QR, SocketContext } from './context/socket';
 import { useAuth } from './context/auth';
 import Login from './Login';
 import { Alert, Button, Col, Form, Row, Table } from 'react-bootstrap';
@@ -13,13 +13,15 @@ import './App.scss';
 import { faCircleCheck, faNoteSticky, faTrashCan, faComment } from '@fortawesome/free-regular-svg-icons';
 import { useSettings } from './context/settings';
 import Footer from './components/Footer';
-import { faBasketShopping, faChainBroken, faChevronLeft, faChevronRight, faGear, faMoneyBillTransfer, faSatelliteDish, faSearch, faTriangleExclamation } from '@fortawesome/free-solid-svg-icons';
+import { faArrowUpRightFromSquare, faBasketShopping, faChainBroken, faChevronLeft, faChevronRight, faGear, faMoneyBillTransfer, faSatelliteDish, faSearch, faTriangleExclamation } from '@fortawesome/free-solid-svg-icons';
+import { useNavigate } from 'react-router-dom';
 import Loader from './components/Loader';
 import { getHumanDateTime, isInTheFuture, formatDateString } from './Utils';
 import NoteModal from './components/modals/NoteModal';
+import ConfirmModal from './components/modals/ConfirmModal';
 import PayForAllModal from './components/modals/PayForAllModal';
 import { useEasterEgg } from './context/eggs';
-import { ClientData, Food, PizzaOrder, DepartureTime, PizzaDayState, Restaurant, RestaurantDayMenu, RestaurantDayMenuMap, LunchChoice, LocationLunchChoicesMap, UserLunchChoice, PizzaVariant, getData, getEasterEggImage, addPizza, removePizza, updatePizzaDayNote, createPizzaDay, deletePizzaDay, lockPizzaDay, unlockPizzaDay, finishOrder, finishDelivery, addChoice, jdemeObed, removeChoices, removeChoice, updateNote, changeDepartureTime, setBuyer, dismissQr, generateQr } from '../../types';
+import { ClientData, Food, MealSlot, PendingQr, PizzaOrder, DepartureTime, PizzaDayState, Restaurant, RestaurantDayMenu, RestaurantDayMenuMap, LunchChoice, LocationLunchChoicesMap, UserLunchChoice, PizzaVariant, getData, getEasterEggImage, addPizza, removePizza, updatePizzaDayNote, createPizzaDay, deletePizzaDay, lockPizzaDay, unlockPizzaDay, finishOrder, finishDelivery, addChoice, jdemeObed, removeChoices, removeChoice, updateNote, changeDepartureTime, setBuyer, dismissQr, generateQr } from '../../types';
 import { getLunchChoiceName } from './enums';
 // import FallingLeaves, { LEAF_PRESETS, LEAF_COLOR_THEMES } from './FallingLeaves';
 // import './FallingLeaves.scss';
@@ -59,6 +61,7 @@ const EASTER_EGG_DEFAULT_DURATION = 0.75;
 function App() {
   const auth = useAuth();
   const settings = useSettings();
+  const navigate = useNavigate();
   const [easterEgg, _] = useEasterEgg(auth);
   const [isConnected, setIsConnected] = useState<boolean>(false);
   const [data, setData] = useState<ClientData>();
@@ -75,6 +78,7 @@ function App() {
   const [dayIndex, setDayIndex] = useState<number>();
   const [loadingPizzaDay, setLoadingPizzaDay] = useState<boolean>(false);
   const [noteModalOpen, setNoteModalOpen] = useState<boolean>(false);
+  const [dismissQrId, setDismissQrId] = useState<string | null>(null);
   const [payForAllLocationKey, setPayForAllLocationKey] = useState<LunchChoice | null>(null);
   const [eggImage, setEggImage] = useState<Blob>();
   const eggRef = useRef<HTMLImageElement>(null);
@@ -126,19 +130,46 @@ function App() {
     });
     socket.on(EVENT_MESSAGE, (newData: ClientData) => {
       // console.log("Přijata nová data ze socketu", newData);
+      if (newData.slot === MealSlot.EXTRA) return;
       // Aktualizujeme pouze, pokud jsme dostali data pro den, který máme aktuálně zobrazený
       if (dayIndexRef.current == null || newData.dayIndex === dayIndexRef.current) {
         setData(newData);
       }
     });
+    socket.on(EVENT_PENDING_QR, (pendingQr: PendingQr) => {
+      setData(prev => prev ? { ...prev, pendingQrs: [...(prev.pendingQrs ?? []), pendingQr] } : prev);
+    });
 
     return () => {
       socket.off(EVENT_CONNECT);
       socket.off(EVENT_DISCONNECT);
       socket.off(EVENT_MESSAGE);
+      socket.off(EVENT_PENDING_QR);
     }
   }, [socket]);
 
+  // Připojení do osobní socket místnosti po přihlášení
+  useEffect(() => {
+    if (auth?.login) {
+      socket.emit('join', auth.login);
+    }
+  }, [auth?.login, socket]);
+
+  // Po znovupřipojení socketu znovu vstoupit do místnosti a obnovit data
+  useEffect(() => {
+    const onReconnect = () => {
+      if (auth?.login) socket.emit('join', auth.login);
+      getData({ query: { dayIndex: dayIndexRef.current } }).then(response => {
+        if (response.data) {
+          setData(response.data);
+          setFood(response.data.menus);
+        }
+      });
+    };
+    socket.io.on('reconnect', onReconnect);
+    return () => { socket.io.off('reconnect', onReconnect); };
+  }, [socket, auth?.login]);
+
   useEffect(() => {
     if (!auth?.login || !data?.choices) {
       return
@@ -437,7 +468,7 @@ function App() {
     data.pizzaList?.forEach((pizza, index) => {
       const group: SelectSearchOption = { name: pizza.name, type: "group", items: [] }
       pizza.sizes.forEach((size, sizeIndex) => {
-        const name = `${size.size} (${size.price} Kč)`;
+        const name = `${size.size} (${size.price / 100} Kč)`;
         const value = `pizza|${index}|${sizeIndex}`;
         group.items?.push({ name, value });
       })
@@ -446,7 +477,7 @@ function App() {
     if (data.salatList?.length) {
       const salatGroup: SelectSearchOption = { name: "Saláty", type: "group", items: [] }
       data.salatList.forEach((salat, index) => {
-        salatGroup.items?.push({ name: `${salat.name} (${salat.price} Kč)`, value: `salat|${index}` });
+        salatGroup.items?.push({ name: `${salat.name} (${salat.price / 100} Kč)`, value: `salat|${index}` });
       });
       suggestions.push(salatGroup);
     }
@@ -720,6 +751,9 @@ function App() {
                                               markAsBuyer();
                                             }} icon={faBasketShopping} className={isBuyer ? 'buyer-icon' : 'action-icon'} style={{ cursor: 'pointer' }} />
                                           </span>}
+                                          {login === auth.login && locationKey === LunchChoice.OBJEDNAVAM && <span title='Přejít na stránku objednávek'>
+                                            <FontAwesomeIcon onClick={() => navigate('/objednani')} icon={faArrowUpRightFromSquare} className='action-icon' style={{ cursor: 'pointer' }} />
+                                          </span>}
                                           {login !== auth.login && locationKey === LunchChoice.OBJEDNAVAM && isBuyer && <span title='Objednávající'>
                                             <FontAwesomeIcon onClick={() => {
                                               copyNote(userPayload.note!);
@@ -892,18 +926,12 @@ function App() {
               {data.pendingQrs.map(qr => (
                 <div key={qr.id} className='qr-code mb-3'>
                   <p>
-                    <strong>{formatDateString(qr.date)}</strong> — {qr.creator} ({qr.totalPrice} Kč)
+                    <strong>{formatDateString(qr.date)}</strong> — {qr.creator} ({qr.totalPrice / 100} Kč)
                     {qr.purpose && <><br /><span className="text-muted">{qr.purpose}</span></>}
                   </p>
                   <img src={`/api/qr?login=${auth.login}&id=${qr.id}`} alt='QR kód' />
                   <div className='mt-2'>
-                    <Button variant="success" onClick={async () => {
-                      await dismissQr({ body: { id: qr.id } });
-                      const response = await getData({ query: { dayIndex } });
-                      if (response.data) {
-                        setData(response.data);
-                      }
-                    }}>
+                    <Button variant="success" onClick={() => setDismissQrId(qr.id)}>
                       Zaplatil jsem
                     </Button>
                   </div>
@@ -919,6 +947,24 @@ function App() {
       /> */}
       <Footer />
       <NoteModal isOpen={noteModalOpen} onClose={() => setNoteModalOpen(false)} onSave={saveNote} />
+      <ConfirmModal
+        isOpen={dismissQrId !== null}
+        title="Potvrzení platby"
+        message="Opravdu jste zaplatili? QR kód bude odstraněn."
+        confirmLabel="Zaplatil jsem"
+        confirmVariant="success"
+        onClose={() => setDismissQrId(null)}
+        onConfirm={async () => {
+          if (!dismissQrId) return;
+          const id = dismissQrId;
+          setDismissQrId(null);
+          await dismissQr({ body: { id } });
+          const response = await getData({ query: { dayIndex } });
+          if (response.data) {
+            setData(response.data);
+          }
+        }}
+      />
       {payForAllLocationKey && data && (
         <PayForAllModal
           isOpen

client/src/AppRoutes.tsx

@@ -5,14 +5,24 @@ import { SnowOverlay } from 'react-snow-overlay';
 import { ToastContainer } from "react-toastify";
 import { SocketContext, socket } from "./context/socket";
 import StatsPage from "./pages/StatsPage";
+import OrderGroupsPage from "./pages/OrderGroupsPage";
 import App from "./App";
 
 export const STATS_URL = '/stats';
+export const OBJEDNANI_URL = '/objednani';
 
 export default function AppRoutes() {
     return (
         <Routes>
             <Route path={STATS_URL} element={<StatsPage />} />
+            <Route path={OBJEDNANI_URL} element={
+                <ProvideSettings>
+                    <SocketContext.Provider value={socket}>
+                        <OrderGroupsPage />
+                        <ToastContainer />
+                    </SocketContext.Provider>
+                </ProvideSettings>
+            } />
             <Route path="/" element={
                 <ProvideSettings>
                     <SocketContext.Provider value={socket}>

client/src/components/Header.tsx

@@ -3,6 +3,7 @@ import { Navbar, Nav, NavDropdown, Modal, Button } from "react-bootstrap";
 import { useAuth } from "../context/auth";
 import SettingsModal from "./modals/SettingsModal";
 import { useSettings, ThemePreference } from "../context/settings";
+import HuePicker from "./HuePicker";
 import FeaturesVotingModal from "./modals/FeaturesVotingModal";
 import PizzaCalculatorModal from "./modals/PizzaCalculatorModal";
 import RefreshMenuModal from "./modals/RefreshMenuModal";
@@ -10,7 +11,7 @@ import GenerateQrModal from "./modals/GenerateQrModal";
 import GenerateMockDataModal from "./modals/GenerateMockDataModal";
 import ClearMockDataModal from "./modals/ClearMockDataModal";
 import { useNavigate } from "react-router";
-import { STATS_URL } from "../AppRoutes";
+import { STATS_URL, OBJEDNANI_URL } from "../AppRoutes";
 import { FeatureRequest, getVotes, updateVote, LunchChoices, getChangelogs } from "../../../types";
 import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
 import { faSun, faMoon } from "@fortawesome/free-solid-svg-icons";
@@ -40,25 +41,7 @@ export default function Header({ choices, dayIndex }: Props) {
     const [clearMockModalOpen, setClearMockModalOpen] = useState<boolean>(false);
     const [featureVotes, setFeatureVotes] = useState<FeatureRequest[] | undefined>([]);
 
-    // Zjistíme aktuální efektivní téma (pro zobrazení správné ikony)
-    const [effectiveTheme, setEffectiveTheme] = useState<'light' | 'dark'>('light');
-
-    useEffect(() => {
-        const updateEffectiveTheme = () => {
-            if (settings?.themePreference === 'system') {
-                const isDark = window.matchMedia('(prefers-color-scheme: dark)').matches;
-                setEffectiveTheme(isDark ? 'dark' : 'light');
-            } else {
-                setEffectiveTheme(settings?.themePreference || 'light');
-            }
-        };
-
-        updateEffectiveTheme();
-
-        const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)');
-        mediaQuery.addEventListener('change', updateEffectiveTheme);
-        return () => mediaQuery.removeEventListener('change', updateEffectiveTheme);
-    }, [settings?.themePreference]);
+    const effectiveDark = settings?.effectiveDark ?? false;
 
     useEffect(() => {
         if (auth?.login) {
@@ -110,8 +93,7 @@ export default function Header({ choices, dayIndex }: Props) {
     }
 
     const toggleTheme = () => {
-        // Přepínáme mezi light a dark (ignorujeme system pro jednoduchost)
-        const newTheme: ThemePreference = effectiveTheme === 'dark' ? 'light' : 'dark';
+        const newTheme: ThemePreference = effectiveDark ? 'light' : 'dark';
         settings?.setThemePreference(newTheme);
     }
 
@@ -195,11 +177,16 @@ export default function Header({ choices, dayIndex }: Props) {
                 <button
                     className="theme-toggle"
                     onClick={toggleTheme}
-                    title={effectiveTheme === 'dark' ? 'Přepnout na světlý režim' : 'Přepnout na tmavý režim'}
-                    aria-label="Přepnout barevný motiv"
+                    title={effectiveDark ? 'Přepnout na světlý režim' : 'Přepnout na tmavý režim'}
+                    aria-label="Přepnout světlý/tmavý režim"
                 >
-                    <FontAwesomeIcon icon={effectiveTheme === 'dark' ? faSun : faMoon} />
+                    <FontAwesomeIcon icon={effectiveDark ? faSun : faMoon} />
                 </button>
+                <HuePicker
+                    accentHue={settings?.accentHue ?? 142}
+                    isDark={effectiveDark}
+                    onChange={hue => settings?.setAccentHue(hue)}
+                />
                 <NavDropdown align="end" title={auth?.login} id="basic-nav-dropdown">
                     <NavDropdown.Item onClick={() => setSettingsModalOpen(true)}>Nastavení</NavDropdown.Item>
                     <NavDropdown.Item onClick={() => setRefreshMenuModalOpen(true)}>Přenačtení menu</NavDropdown.Item>
@@ -207,6 +194,7 @@ export default function Header({ choices, dayIndex }: Props) {
                     <NavDropdown.Item onClick={() => setPizzaModalOpen(true)}>Pizza kalkulačka</NavDropdown.Item>
                     <NavDropdown.Item onClick={handleQrMenuClick}>Generování QR kódů</NavDropdown.Item>
                     <NavDropdown.Item onClick={() => navigate(STATS_URL)}>Statistiky</NavDropdown.Item>
+                    <NavDropdown.Item onClick={() => navigate(OBJEDNANI_URL)}>Objednání</NavDropdown.Item>
                     <NavDropdown.Item onClick={() => {
                         getChangelogs().then(response => {
                             const entries = response.data ?? {};

client/src/components/HuePicker.scss

@@ -0,0 +1,138 @@
+.hue-picker-dropdown {
+  .dropdown-toggle {
+    background: transparent !important;
+    border: none !important;
+    color: var(--luncher-navbar-text) !important;
+    padding: 8px 12px;
+    font-size: 1.1rem;
+    display: flex;
+    align-items: center;
+    cursor: pointer;
+    border-radius: var(--luncher-radius-sm);
+    transition: var(--luncher-transition);
+
+    &::after {
+      display: none;
+    }
+
+    &:hover {
+      background: rgba(255, 255, 255, 0.1) !important;
+      transform: scale(1.1);
+    }
+
+    &:focus {
+      outline: none;
+      box-shadow: 0 0 0 2px rgba(255, 255, 255, 0.3) !important;
+    }
+  }
+}
+
+.hue-picker-panel {
+  padding: 0 !important;
+  min-width: 240px;
+
+  .hue-picker-inner {
+    padding: 14px 16px;
+  }
+
+  .hue-picker-label {
+    font-size: 0.75rem;
+    font-weight: 600;
+    text-transform: uppercase;
+    letter-spacing: 0.5px;
+    color: var(--luncher-text-secondary);
+    margin-bottom: 12px;
+  }
+}
+
+.hue-slider {
+  -webkit-appearance: none;
+  appearance: none;
+  width: 100%;
+  height: 12px;
+  border-radius: 6px;
+  background: linear-gradient(
+    to right,
+    hsl(0 70% 50%), hsl(30 70% 50%), hsl(60 70% 50%), hsl(90 70% 50%),
+    hsl(120 70% 50%), hsl(150 70% 50%), hsl(180 70% 50%), hsl(210 70% 50%),
+    hsl(240 70% 50%), hsl(270 70% 50%), hsl(300 70% 50%), hsl(330 70% 50%), hsl(360 70% 50%)
+  );
+  outline: none;
+  cursor: pointer;
+  margin-bottom: 14px;
+
+  &::-webkit-slider-thumb {
+    -webkit-appearance: none;
+    appearance: none;
+    width: 20px;
+    height: 20px;
+    border-radius: 50%;
+    background: white;
+    border: 2px solid rgba(0, 0, 0, 0.25);
+    cursor: pointer;
+    box-shadow: 0 1px 4px rgba(0, 0, 0, 0.3);
+    transition: transform 0.15s ease;
+
+    &:hover {
+      transform: scale(1.15);
+    }
+  }
+
+  &::-moz-range-thumb {
+    width: 20px;
+    height: 20px;
+    border-radius: 50%;
+    background: white;
+    border: 2px solid rgba(0, 0, 0, 0.25);
+    cursor: pointer;
+    box-shadow: 0 1px 4px rgba(0, 0, 0, 0.3);
+  }
+}
+
+.hue-presets {
+  display: flex;
+  gap: 8px;
+  margin-bottom: 14px;
+
+  .hue-swatch {
+    width: 26px;
+    height: 26px;
+    border-radius: 50%;
+    border: 2px solid transparent;
+    cursor: pointer;
+    padding: 0;
+    transition: transform 0.15s ease, border-color 0.15s ease;
+    box-shadow: 0 1px 3px rgba(0, 0, 0, 0.2);
+
+    &:hover {
+      transform: scale(1.15);
+    }
+
+    &.active {
+      border-color: var(--luncher-text);
+      transform: scale(1.1);
+    }
+  }
+}
+
+.hue-preview {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  padding-top: 4px;
+  border-top: 1px solid var(--luncher-border);
+
+  .hue-preview-chip {
+    width: 32px;
+    height: 32px;
+    border-radius: var(--luncher-radius-sm);
+    flex-shrink: 0;
+    box-shadow: 0 1px 3px rgba(0, 0, 0, 0.2);
+    transition: background 0.2s ease;
+  }
+
+  span {
+    font-size: 0.8rem;
+    color: var(--luncher-text-secondary);
+  }
+}

client/src/components/HuePicker.tsx

@@ -0,0 +1,71 @@
+import { Dropdown } from 'react-bootstrap';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faPalette } from '@fortawesome/free-solid-svg-icons';
+import './HuePicker.scss';
+
+const PRESETS = [
+  { hue: 142, label: 'Zelená' },
+  { hue: 217, label: 'Modrá' },
+  { hue: 263, label: 'Fialová' },
+  { hue: 0, label: 'Červená' },
+  { hue: 28, label: 'Oranžová' },
+  { hue: 340, label: 'Růžová' },
+];
+
+type Props = {
+  accentHue: number;
+  isDark: boolean;
+  onChange: (hue: number) => void;
+};
+
+function swatchColor(hue: number, isDark: boolean): string {
+  return `hsl(${hue} 70% ${isDark ? 55 : 38}%)`;
+}
+
+export default function HuePicker({ accentHue, isDark, onChange }: Props) {
+  return (
+    <Dropdown align="end" autoClose="outside" className="hue-picker-dropdown">
+      <Dropdown.Toggle
+        as="button"
+        className="theme-toggle"
+        aria-label="Barva zvýraznění"
+        title="Barva zvýraznění"
+      >
+        <FontAwesomeIcon icon={faPalette} />
+      </Dropdown.Toggle>
+      <Dropdown.Menu className="hue-picker-panel">
+        <div className="hue-picker-inner">
+          <div className="hue-picker-label">Barva zvýraznění</div>
+          <input
+            type="range"
+            min={0}
+            max={360}
+            value={accentHue}
+            onChange={e => onChange(parseInt(e.target.value, 10))}
+            className="hue-slider"
+            aria-label="Odstín barvy zvýraznění"
+          />
+          <div className="hue-presets">
+            {PRESETS.map(p => (
+              <button
+                key={p.hue}
+                className={`hue-swatch${accentHue === p.hue ? ' active' : ''}`}
+                style={{ background: swatchColor(p.hue, isDark) }}
+                title={p.label}
+                onClick={() => onChange(p.hue)}
+                aria-label={p.label}
+              />
+            ))}
+          </div>
+          <div className="hue-preview">
+            <div
+              className="hue-preview-chip"
+              style={{ background: swatchColor(accentHue, isDark) }}
+            />
+            <span>Aktuální barva zvýraznění</span>
+          </div>
+        </div>
+      </Dropdown.Menu>
+    </Dropdown>
+  );
+}

client/src/components/PizzaOrderList.tsx

@@ -48,7 +48,7 @@ export default function PizzaOrderList({ state, orders, onDelete, creator }: Rea
                         borderTop: '2px solid var(--luncher-border)'
                     }}>
                         <td colSpan={4} style={{ padding: '16px 20px', border: 'none' }}>Celkem</td>
-                        <td style={{ padding: '16px 20px', border: 'none', textAlign: 'right', color: 'var(--luncher-primary)' }}>{`${total} Kč`}</td>
+                        <td style={{ padding: '16px 20px', border: 'none', textAlign: 'right', color: 'var(--luncher-primary)' }}>{`${total / 100} Kč`}</td>
                     </tr>
                 </tbody>
             </Table>

client/src/components/PizzaOrderRow.tsx

@@ -26,7 +26,7 @@ export default function PizzaOrderRow({ creator, order, state, onDelete, onFeeMo
         <td>{order.customer}</td>
         <td>{order.pizzaList!.map<React.ReactNode>(pizzaOrder =>
             <span key={pizzaOrder.name}>
-                {`${pizzaOrder.name}, ${pizzaOrder.size} (${pizzaOrder.price} Kč)`}
+                {`${pizzaOrder.name}, ${pizzaOrder.size} (${pizzaOrder.price / 100} Kč)`}
                 {auth?.login === order.customer && state === PizzaDayState.CREATED &&
                     <span title='Odstranit'>
                         <FontAwesomeIcon onClick={() => {
@@ -38,10 +38,10 @@ export default function PizzaOrderRow({ creator, order, state, onDelete, onFeeMo
             .reduce((prev, curr, index) => [prev, <br key={`br-${index}`} />, curr])}
         </td>
         <td style={{ maxWidth: "200px" }}>{order.note ?? '-'}</td>
-        <td style={{ maxWidth: "200px" }}>{order.fee?.price ? `${order.fee.price} Kč${order.fee.text ? ` (${order.fee.text})` : ''}` : '-'}</td>
+        <td style={{ maxWidth: "200px" }}>{order.fee?.price ? `${order.fee.price / 100} Kč${order.fee.text ? ` (${order.fee.text})` : ''}` : '-'}</td>
         <td>
-            {order.totalPrice} Kč{auth?.login === creator && state === PizzaDayState.CREATED && <span title='Nastavit příplatek'><FontAwesomeIcon onClick={() => { setIsFeeModalOpen(true) }} className='action-icon' icon={faMoneyBill1} /></span>}
+            {order.totalPrice / 100} Kč{auth?.login === creator && state === PizzaDayState.CREATED && <span title='Nastavit příplatek'><FontAwesomeIcon onClick={() => { setIsFeeModalOpen(true) }} className='action-icon' icon={faMoneyBill1} /></span>}
         </td>
-        <PizzaAdditionalFeeModal customerName={order.customer} isOpen={isFeeModalOpen} onClose={() => setIsFeeModalOpen(false)} onSave={saveFees} initialValues={{ text: order.fee?.text, price: order.fee?.price?.toString() }} />
+        <PizzaAdditionalFeeModal customerName={order.customer} isOpen={isFeeModalOpen} onClose={() => setIsFeeModalOpen(false)} onSave={saveFees} initialValues={{ text: order.fee?.text, price: order.fee?.price != null ? String(order.fee.price / 100) : undefined }} />
     </>
 }

client/src/components/modals/ConfirmModal.tsx

@@ -0,0 +1,26 @@
+import { Modal, Button } from "react-bootstrap";
+
+type Props = {
+    isOpen: boolean;
+    title: string;
+    message: string;
+    confirmLabel?: string;
+    confirmVariant?: string;
+    onConfirm: () => void;
+    onClose: () => void;
+};
+
+export default function ConfirmModal({ isOpen, title, message, confirmLabel = "Potvrdit", confirmVariant = "primary", onConfirm, onClose }: Readonly<Props>) {
+    return (
+        <Modal show={isOpen} onHide={onClose}>
+            <Modal.Header closeButton>
+                <Modal.Title>{title}</Modal.Title>
+            </Modal.Header>
+            <Modal.Body>{message}</Modal.Body>
+            <Modal.Footer>
+                <Button variant="secondary" onClick={onClose}>Zrušit</Button>
+                <Button variant={confirmVariant} onClick={onConfirm}>{confirmLabel}</Button>
+            </Modal.Footer>
+        </Modal>
+    );
+}

client/src/components/modals/EditGroupFeesModal.tsx

@@ -0,0 +1,197 @@
+import { useState, useEffect } from "react";
+import { Modal, Button, Form, Table, Alert } from "react-bootstrap";
+import { updateGroupFees, OrderGroup, OrderGroupMember } from "../../../../types";
+
+type Props = {
+    isOpen: boolean;
+    onClose: () => void;
+    group: OrderGroup;
+    onSaved: (data: any) => void;
+};
+
+function parseHal(s: string): number {
+    const n = parseFloat(s.replace(',', '.'));
+    return isNaN(n) || n < 0 ? 0 : Math.round(n * 100);
+}
+
+function parsePercent(s: string): number {
+    const n = parseFloat(s.replace(',', '.'));
+    return isNaN(n) || n < 0 ? 0 : Math.round(n);
+}
+
+function computeMemberTotal(member: OrderGroupMember, feeShare: number, discountType: string, discountValue: number, memberCount: number): number {
+    const base = member.amount ?? 0;
+    const surcharge = member.surchargeAmount ?? 0;
+    const discount = discountType === 'percent'
+        ? Math.round((base + surcharge) * discountValue / 100)
+        : Math.round(discountValue / memberCount);
+    return base + surcharge + feeShare - discount;
+}
+
+export default function EditGroupFeesModal({ isOpen, onClose, group, onSaved }: Readonly<Props>) {
+    const [fees, setFees] = useState('');
+    const [shipping, setShipping] = useState('');
+    const [tip, setTip] = useState('');
+    const [discountType, setDiscountType] = useState<'percent' | 'fixed'>('percent');
+    const [discountValue, setDiscountValue] = useState('');
+    const [error, setError] = useState<string | null>(null);
+    const [loading, setLoading] = useState(false);
+
+    useEffect(() => {
+        if (!isOpen) return;
+        setFees(group.fees ? String(group.fees / 100) : '');
+        setShipping(group.shipping ? String(group.shipping / 100) : '');
+        setTip(group.tip ? String(group.tip / 100) : '');
+        setDiscountType((group.discountType as 'percent' | 'fixed') ?? 'percent');
+        setDiscountValue(group.discountValue
+            ? ((group.discountType as string) === 'fixed' ? String(group.discountValue / 100) : String(group.discountValue))
+            : '');
+        setError(null);
+    }, [isOpen, group]);
+
+    const memberEntries = Object.entries(group.members) as [string, OrderGroupMember][];
+    const memberCount = memberEntries.length;
+
+    const feesNum = parseHal(fees);
+    const shippingNum = parseHal(shipping);
+    const tipNum = parseHal(tip);
+    const discountNum = discountType === 'percent' ? parsePercent(discountValue) : parseHal(discountValue);
+    const totalFees = feesNum + shippingNum + tipNum;
+    const feeShare = memberCount > 0 ? Math.round(totalFees / memberCount) : 0;
+
+    const handleSave = async () => {
+        setError(null);
+        setLoading(true);
+        try {
+            const res = await updateGroupFees({
+                body: {
+                    id: group.id,
+                    fees: feesNum,
+                    shipping: shippingNum,
+                    tip: tipNum,
+                    discountType: discountNum > 0 ? discountType : undefined,
+                    discountValue: discountNum > 0 ? discountNum : undefined,
+                }
+            });
+            if (res.error) {
+                setError((res.error as any).error || 'Nastala chyba');
+            } else {
+                onSaved(res.data);
+                onClose();
+            }
+        } catch (e: any) {
+            setError(e.message || 'Nastala chyba');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    return (
+        <Modal show={isOpen} onHide={onClose} size="lg">
+            <Modal.Header closeButton>
+                <Modal.Title><h2>Poplatky skupiny — {group.name}</h2></Modal.Title>
+            </Modal.Header>
+            <Modal.Body>
+                {error && (
+                    <Alert variant="danger" onClose={() => setError(null)} dismissible>{error}</Alert>
+                )}
+
+                <div className="d-flex gap-3 flex-wrap mb-3">
+                    <Form.Group>
+                        <Form.Label>Poplatky (Kč)</Form.Label>
+                        <Form.Control
+                            type="number" min={0} step={0.01}
+                            value={fees} onChange={e => setFees(e.target.value)}
+                            placeholder="0" style={{ width: 110 }}
+                            onKeyDown={e => e.stopPropagation()}
+                        />
+                    </Form.Group>
+                    <Form.Group>
+                        <Form.Label>Doprava (Kč)</Form.Label>
+                        <Form.Control
+                            type="number" min={0} step={0.01}
+                            value={shipping} onChange={e => setShipping(e.target.value)}
+                            placeholder="0" style={{ width: 110 }}
+                            onKeyDown={e => e.stopPropagation()}
+                        />
+                    </Form.Group>
+                    <Form.Group>
+                        <Form.Label>Spropitné (Kč)</Form.Label>
+                        <Form.Control
+                            type="number" min={0} step={0.01}
+                            value={tip} onChange={e => setTip(e.target.value)}
+                            placeholder="0" style={{ width: 110 }}
+                            onKeyDown={e => e.stopPropagation()}
+                        />
+                    </Form.Group>
+                </div>
+
+                <div className="d-flex gap-3 align-items-end flex-wrap mb-3">
+                    <Form.Group>
+                        <Form.Label>Sleva</Form.Label>
+                        <div className="d-flex gap-2 align-items-center">
+                            <Form.Select
+                                value={discountType}
+                                onChange={e => setDiscountType(e.target.value as 'percent' | 'fixed')}
+                                style={{ width: 160 }}
+                            >
+                                <option value="percent">Procentuální (%)</option>
+                                <option value="fixed">Pevná částka (Kč)</option>
+                            </Form.Select>
+                            <Form.Control
+                                type="number" min={0} step={discountType === 'percent' ? 1 : 0.01}
+                                value={discountValue} onChange={e => setDiscountValue(e.target.value)}
+                                placeholder="0" style={{ width: 100 }}
+                                onKeyDown={e => e.stopPropagation()}
+                            />
+                            <span className="text-muted">{discountType === 'percent' ? '%' : 'Kč'}</span>
+                        </div>
+                    </Form.Group>
+                </div>
+
+                <hr />
+                <h6>Náhled celkových částek ({memberCount} členů, {feeShare > 0 ? `poplatek ${feeShare / 100} Kč/os.` : 'bez poplatku'})</h6>
+                <Table size="sm" bordered>
+                    <thead>
+                        <tr>
+                            <th>Člen</th>
+                            <th className="text-end">Základ</th>
+                            <th className="text-end">Příplatek</th>
+                            <th className="text-end">Poplatek</th>
+                            <th className="text-end">Sleva</th>
+                            <th className="text-end fw-bold">Celkem</th>
+                        </tr>
+                    </thead>
+                    <tbody>
+                        {memberEntries.map(([login, member]) => {
+                            const base = member.amount ?? 0;
+                            const surcharge = member.surchargeAmount ?? 0;
+                            const discount = discountNum > 0
+                                ? (discountType === 'percent'
+                                    ? Math.round((base + surcharge) * discountNum / 100)
+                                    : Math.round(discountNum / memberCount))
+                                : 0;
+                            const total = computeMemberTotal(member, feeShare, discountType, discountNum, memberCount);
+                            return (
+                                <tr key={login}>
+                                    <td><strong>{login}</strong></td>
+                                    <td className="text-end">{base > 0 ? `${base / 100} Kč` : '—'}</td>
+                                    <td className="text-end">{surcharge > 0 ? `${surcharge / 100} Kč` : '—'}</td>
+                                    <td className="text-end">{feeShare > 0 ? `${feeShare / 100} Kč` : '—'}</td>
+                                    <td className="text-end text-danger">{discount > 0 ? `-${discount / 100} Kč` : '—'}</td>
+                                    <td className="text-end fw-bold">{total > 0 ? `${total / 100} Kč` : '—'}</td>
+                                </tr>
+                            );
+                        })}
+                    </tbody>
+                </Table>
+            </Modal.Body>
+            <Modal.Footer>
+                <Button variant="secondary" onClick={onClose} disabled={loading}>Storno</Button>
+                <Button variant="primary" onClick={handleSave} disabled={loading}>
+                    {loading ? 'Ukládám...' : 'Uložit'}
+                </Button>
+            </Modal.Footer>
+        </Modal>
+    );
+}

client/src/components/modals/PayForAllModal.tsx

@@ -33,9 +33,7 @@ function parseAmount(s: string): number | null {
     if (!s || s.trim().length === 0) return null;
     const n = parseFloat(s);
     if (isNaN(n) || n < 0) return null;
-    const parts = s.split('.');
-    if (parts.length === 2 && parts[1].length > 2) return null;
-    return Math.round(n * 100) / 100;
+    return Math.round(n * 100);
 }
 
 export default function PayForAllModal({ isOpen, onClose, locationName, locationChoices, menu, payerLogin, bankAccount, bankAccountHolder }: Readonly<Props>) {
@@ -55,11 +53,11 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
             let baseAmountParseFailed = false;
             if (menu) {
                 for (const idx of selectedFoods) {
-                    const price = parsePriceCzk(menu.food?.[idx]?.price);
-                    if (price === null) {
+                    const priceKc = parsePriceCzk(menu.food?.[idx]?.price);
+                    if (priceKc === null) {
                         baseAmountParseFailed = true;
                     } else {
-                        baseAmount += price;
+                        baseAmount += Math.round(priceKc * 100);
                     }
                 }
             }
@@ -84,13 +82,19 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
         if (includedDiners.length === 0) return 0;
         const tip = parseAmount(tipTotal);
         if (tip === null || tip === 0) return 0;
-        return Math.round((tip / includedDiners.length) * 100) / 100;
+        const totalPeople = includedDiners.length + 1;
+        return Math.round(tip / totalPeople);
+    })();
+    const payerTipShare = (() => {
+        const tip = parseAmount(tipTotal);
+        if (!tip) return 0;
+        return tip - tipPerPerson * includedDiners.length;
     })();
 
     const getTotal = (d: DinerEntry): number => {
         const surcharge = parseAmount(d.surchargeAmount) ?? 0;
-        const tip = d.included && d.login !== payerLogin ? tipPerPerson : 0;
-        return Math.round((d.baseAmount + surcharge + tip) * 100) / 100;
+        const tip = d.login === payerLogin ? payerTipShare : tipPerPerson;
+        return d.baseAmount + surcharge + tip;
     };
 
     const handleInclude = useCallback((login: string, checked: boolean) => {
@@ -116,11 +120,6 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                 setError(`Celková částka pro ${d.login} musí být kladná`);
                 return;
             }
-            const amountStr = total.toString();
-            if (amountStr.includes('.') && amountStr.split('.')[1].length > 2) {
-                setError(`Částka pro ${d.login} má více než 2 desetinná místa`);
-                return;
-            }
             const foods = d.selectedFoods.map(i => menu?.food?.[i]?.name).filter(Boolean).join(', ');
             const purposeBase = `Oběd ${locationName}${foods ? ` — ${foods}` : ''}`;
             recipients.push({
@@ -167,7 +166,7 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                     </Alert>
                 ) : (
                     <>
-                        <p>Zaplatili jste za skupinu v restauraci. Nastavte příplatky a dýško, poté vygenerujte QR kódy pro ostatní.</p>
+                        <p>Zaplatili jste za skupinu v restauraci. Nastavte příplatky a společné poplatky, poté vygenerujte QR kódy pro ostatní.</p>
 
                         {!hasMenu && (
                             <Alert variant="info">
@@ -194,7 +193,7 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                                     <th>Strávník</th>
                                     <th>Jídla</th>
                                     <th style={{ width: 220 }}>Příplatek</th>
-                                    <th style={{ width: 90 }}>Dýško</th>
+                                    <th style={{ width: 90 }}>Poplatek</th>
                                     <th style={{ width: 90 }}>Celkem</th>
                                 </tr>
                             </thead>
@@ -220,19 +219,18 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                                             <td>
                                                 <small>
                                                     {foodNames || <span className="text-muted">—</span>}
-                                                    {hasMenu && d.baseAmount > 0 && <span className="text-muted"> ({d.baseAmount} Kč)</span>}
+                                                    {hasMenu && d.baseAmount > 0 && <span className="text-muted"> ({d.baseAmount / 100} Kč)</span>}
                                                     {d.baseAmountParseFailed && <span className="text-warning"> ⚠</span>}
                                                 </small>
                                             </td>
                                             <td>
-                                                {!isPayer && (
                                                 <div className="d-flex gap-1">
                                                     <Form.Control
                                                         type="text"
                                                         placeholder="popis"
                                                         value={d.surchargeText}
                                                         onChange={e => handleSurchargeText(d.login, e.target.value)}
-                                                            disabled={!d.included}
+                                                        disabled={!isPayer && !d.included}
                                                         size="sm"
                                                         onKeyDown={e => e.stopPropagation()}
                                                     />
@@ -241,19 +239,18 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                                                         placeholder="Kč"
                                                         value={d.surchargeAmount}
                                                         onChange={e => handleSurchargeAmount(d.login, e.target.value)}
-                                                            disabled={!d.included}
+                                                        disabled={!isPayer && !d.included}
                                                         size="sm"
                                                         style={{ width: 70 }}
                                                         onKeyDown={e => e.stopPropagation()}
                                                     />
                                                 </div>
-                                                )}
                                             </td>
                                             <td className="text-end">
-                                                {!isPayer && d.included ? `${tipPerPerson} Kč` : '—'}
+                                                {(() => { const s = isPayer ? payerTipShare : tipPerPerson; return s > 0 ? `${s / 100} Kč` : '—'; })()}
                                             </td>
                                             <td className="text-end fw-bold">
-                                                {!isPayer ? `${total} Kč` : '—'}
+                                                {`${total / 100} Kč`}
                                             </td>
                                         </tr>
                                     );
@@ -262,7 +259,7 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                         </Table>
 
                         <div className="d-flex align-items-center gap-2 mt-2">
-                            <label className="mb-0 text-nowrap">Dýško celkem (Kč):</label>
+                            <label className="mb-0 text-nowrap">Poplatky celkem (Kč):</label>
                             <Form.Control
                                 type="text"
                                 placeholder="0"
@@ -274,7 +271,7 @@ export default function PayForAllModal({ isOpen, onClose, locationName, location
                             />
                             <small className="text-muted">
                                 {includedDiners.length > 0 && tipPerPerson > 0
-                                    ? `(${tipPerPerson} Kč / osoba)`
+                                    ? `(${tipPerPerson / 100} Kč / osoba)`
                                     : ''}
                             </small>
                         </div>

client/src/components/modals/PayForGroupModal.tsx

@@ -0,0 +1,222 @@
+import { useState, useEffect } from "react";
+import { Modal, Button, Form, Table, Alert } from "react-bootstrap";
+import { generateQr, OrderGroup, OrderGroupMember, QrRecipient } from "../../../../types";
+
+type Props = {
+    isOpen: boolean;
+    onClose: () => void;
+    onSuccess?: () => void;
+    group: OrderGroup;
+    payerLogin: string;
+    bankAccount: string;
+    bankAccountHolder: string;
+    groupId?: string;
+};
+
+type DinerEntry = {
+    login: string;
+    member: OrderGroupMember;
+    included: boolean;
+};
+
+export default function PayForGroupModal({ isOpen, onClose, onSuccess, group, payerLogin, bankAccount, bankAccountHolder, groupId }: Readonly<Props>) {
+    const [diners, setDiners] = useState<DinerEntry[]>([]);
+    const [error, setError] = useState<string | null>(null);
+    const [loading, setLoading] = useState(false);
+    const [success, setSuccess] = useState(false);
+
+    useEffect(() => {
+        if (!isOpen) return;
+        const entries: DinerEntry[] = (Object.entries(group.members) as [string, OrderGroupMember][]).map(([login, member]) => ({
+            login,
+            member,
+            included: login !== payerLogin,
+        }));
+        setDiners(entries);
+        setError(null);
+        setSuccess(false);
+    }, [isOpen, group, payerLogin]);
+
+    const memberCount = diners.length;
+    const fees = group.fees ?? 0;
+    const shipping = group.shipping ?? 0;
+    const tip = group.tip ?? 0;
+    const totalFees = fees + shipping + tip;
+    const feeShare = memberCount > 0 ? Math.round(totalFees / memberCount) : 0;
+
+    const getMemberTotal = (entry: DinerEntry): number => {
+        const base = entry.member.amount ?? 0;
+        const surcharge = entry.member.surchargeAmount ?? 0;
+        const discountType = group.discountType;
+        const discountValue = group.discountValue ?? 0;
+        const discount = discountValue > 0
+            ? (discountType === 'percent'
+                ? Math.round((base + surcharge) * discountValue / 100)
+                : Math.round(discountValue / memberCount))
+            : 0;
+        return base + surcharge + feeShare - discount;
+    };
+
+    const includedNonPayers = diners.filter(d => d.included && d.login !== payerLogin);
+
+    const handleInclude = (login: string, checked: boolean) => {
+        setDiners(prev => prev.map(d => d.login === login ? { ...d, included: checked } : d));
+    };
+
+    const handleGenerate = async () => {
+        setError(null);
+        const recipients: QrRecipient[] = [];
+
+        for (const d of diners) {
+            if (!d.included || d.login === payerLogin) continue;
+            const total = getMemberTotal(d);
+            if (total <= 0) {
+                setError(`Celková částka pro ${d.login} musí být kladná`);
+                return;
+            }
+            const note = d.member.note?.trim();
+            recipients.push({
+                login: d.login,
+                purpose: note ? note.replace(/[^\x00-\xff*]/g, '').replace(/\*/g, '').substring(0, 60) : `Objednávka ${group.name}`.substring(0, 60),
+                amount: total,
+            });
+        }
+
+        if (recipients.length === 0) {
+            setError("Nebyl vybrán žádný příjemce");
+            return;
+        }
+
+        setLoading(true);
+        try {
+            const response = await generateQr({
+                body: { recipients, bankAccount, bankAccountHolder, ...(groupId ? { groupId } : {}) },
+            });
+            if (response.error) {
+                setError((response.error as any).error || 'Nastala chyba při generování QR kódů');
+            } else {
+                setSuccess(true);
+                onSuccess?.();
+                setTimeout(() => onClose(), 2000);
+            }
+        } catch (e: any) {
+            setError(e.message || 'Nastala chyba při generování QR kódů');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const hasFees = totalFees > 0;
+
+    return (
+        <Modal show={isOpen} onHide={onClose} size="lg">
+            <Modal.Header closeButton>
+                <Modal.Title><h2>Generovat QR — {group.name}</h2></Modal.Title>
+            </Modal.Header>
+            <Modal.Body>
+                {success ? (
+                    <Alert variant="success">
+                        QR kódy byly úspěšně vygenerovány! Uživatelé je uvidí v sekci „Nevyřízené platby".
+                    </Alert>
+                ) : (
+                    <>
+                        <p>Zaplatili jste za skupinu. Vyberte, komu vygenerovat QR kód k úhradě.</p>
+
+                        {error && (
+                            <Alert variant="danger" onClose={() => setError(null)} dismissible>
+                                {error}
+                            </Alert>
+                        )}
+
+                        {hasFees && (
+                            <div className="d-flex gap-3 mb-2 text-muted" style={{ fontSize: '0.9em' }}>
+                                {fees > 0 && <span>Poplatky: <strong>{fees / 100} Kč</strong></span>}
+                                {shipping > 0 && <span>Doprava: <strong>{shipping / 100} Kč</strong></span>}
+                                {tip > 0 && <span>Spropitné: <strong>{tip / 100} Kč</strong></span>}
+                                <span>→ {feeShare / 100} Kč/os.</span>
+                            </div>
+                        )}
+                        {group.discountValue != null && group.discountValue > 0 && (
+                            <div className="mb-2 text-success" style={{ fontSize: '0.9em' }}>
+                                Sleva: {group.discountType === 'percent' ? `${group.discountValue}%` : `${group.discountValue / 100} Kč`}
+                            </div>
+                        )}
+
+                        <Table striped bordered hover responsive size="sm">
+                            <thead>
+                                <tr>
+                                    <th style={{ width: 40 }}></th>
+                                    <th>Člen</th>
+                                    <th style={{ width: 90 }} className="text-end">Základ</th>
+                                    <th style={{ width: 90 }} className="text-end">Příplatek</th>
+                                    {hasFees && <th style={{ width: 90 }} className="text-end">Poplatek</th>}
+                                    <th style={{ width: 90 }} className="text-end fw-bold">Celkem</th>
+                                </tr>
+                            </thead>
+                            <tbody>
+                                {diners.map(d => {
+                                    const isPayer = d.login === payerLogin;
+                                    const total = getMemberTotal(d);
+                                    const surcharge = d.member.surchargeAmount ?? 0;
+                                    return (
+                                        <tr key={d.login} className={!d.included && !isPayer ? 'text-muted' : ''}>
+                                            <td className="text-center">
+                                                {isPayer ? (
+                                                    <small className="text-muted">plátce</small>
+                                                ) : (
+                                                    <Form.Check
+                                                        type="checkbox"
+                                                        checked={d.included}
+                                                        onChange={e => handleInclude(d.login, e.target.checked)}
+                                                    />
+                                                )}
+                                            </td>
+                                            <td>
+                                                <strong>{d.login}</strong>
+                                                {d.member.surchargeText && (
+                                                    <small className="text-muted ms-1">({d.member.surchargeText})</small>
+                                                )}
+                                            </td>
+                                            <td className="text-end">
+                                                {(d.member.amount ?? 0) > 0 ? `${d.member.amount! / 100} Kč` : <span className="text-muted">—</span>}
+                                            </td>
+                                            <td className="text-end">
+                                                {surcharge > 0 ? `${surcharge / 100} Kč` : <span className="text-muted">—</span>}
+                                            </td>
+                                            {hasFees && (
+                                                <td className="text-end">
+                                                    {feeShare > 0 ? `${feeShare / 100} Kč` : '—'}
+                                                </td>
+                                            )}
+                                            <td className="text-end fw-bold">
+                                                {total > 0 ? `${total / 100} Kč` : <span className="text-muted">—</span>}
+                                            </td>
+                                        </tr>
+                                    );
+                                })}
+                            </tbody>
+                        </Table>
+                    </>
+                )}
+            </Modal.Body>
+            <Modal.Footer>
+                {!success && (
+                    <>
+                        <span className="me-auto text-muted">Příjemci: {includedNonPayers.length}</span>
+                        <Button variant="secondary" onClick={onClose} disabled={loading}>Storno</Button>
+                        <Button
+                            variant="primary"
+                            onClick={handleGenerate}
+                            disabled={loading || includedNonPayers.length === 0}
+                        >
+                            {loading ? 'Generuji...' : 'Vygenerovat QR'}
+                        </Button>
+                    </>
+                )}
+                {success && (
+                    <Button variant="secondary" onClick={onClose}>Zavřít</Button>
+                )}
+            </Modal.Footer>
+        </Modal>
+    );
+}

client/src/components/modals/PizzaAdditionalFeeModal.tsx

@@ -15,12 +15,12 @@ export default function PizzaAdditionalFeeModal({ customerName, isOpen, onClose,
     const priceRef = useRef<HTMLInputElement>(null);
 
     const doSubmit = () => {
-        onSave(customerName, textRef.current?.value, Number.parseInt(priceRef.current?.value ?? "0"));
+        onSave(customerName, textRef.current?.value, Math.round(Number.parseFloat(priceRef.current?.value ?? "0") * 100));
     }
 
     const handleKeyDown = (e: React.KeyboardEvent<HTMLInputElement>) => {
         if (e.key === 'Enter') {
-            onSave(customerName, textRef.current?.value, Number.parseInt(priceRef.current?.value ?? "0"));
+            onSave(customerName, textRef.current?.value, Math.round(Number.parseFloat(priceRef.current?.value ?? "0") * 100));
         }
     }
 

client/src/components/modals/StoreAdminModal.tsx

@@ -0,0 +1,119 @@
+import { useState } from "react";
+import { Modal, Button, Form, ListGroup, Alert } from "react-bootstrap";
+import { FontAwesomeIcon } from "@fortawesome/react-fontawesome";
+import { faTrashCan } from "@fortawesome/free-regular-svg-icons";
+import { addStore, deleteStore } from "../../../../types";
+
+type Props = {
+    isOpen: boolean;
+    onClose: () => void;
+    stores: string[];
+    onStoresChanged: (stores: string[]) => void;
+};
+
+export default function StoreAdminModal({ isOpen, onClose, stores, onStoresChanged }: Readonly<Props>) {
+    const [newName, setNewName] = useState('');
+    const [heslo, setHeslo] = useState('');
+    const [loading, setLoading] = useState(false);
+    const [error, setError] = useState<string | null>(null);
+
+    const handleAdd = async () => {
+        if (!newName.trim()) return;
+        setError(null);
+        setLoading(true);
+        try {
+            const res = await addStore({ body: { name: newName.trim(), heslo } });
+            if (res.error) {
+                setError((res.error as any).error || 'Nastala chyba');
+            } else if (res.data) {
+                onStoresChanged(res.data as string[]);
+                setNewName('');
+            }
+        } catch (e: any) {
+            setError(e.message || 'Nastala chyba');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    const handleRemove = async (name: string) => {
+        setError(null);
+        setLoading(true);
+        try {
+            const res = await deleteStore({ body: { name, heslo } });
+            if (res.error) {
+                setError((res.error as any).error || 'Nastala chyba');
+            } else if (res.data) {
+                onStoresChanged(res.data as string[]);
+            }
+        } catch (e: any) {
+            setError(e.message || 'Nastala chyba');
+        } finally {
+            setLoading(false);
+        }
+    };
+
+    return (
+        <Modal show={isOpen} onHide={onClose}>
+            <Modal.Header closeButton>
+                <Modal.Title><h2>Správa obchodů</h2></Modal.Title>
+            </Modal.Header>
+            <Modal.Body>
+                {error && (
+                    <Alert variant="danger" onClose={() => setError(null)} dismissible>
+                        {error}
+                    </Alert>
+                )}
+
+                <Form.Group className="mb-3">
+                    <Form.Label>Admin heslo</Form.Label>
+                    <Form.Control
+                        type="password"
+                        placeholder="Heslo"
+                        value={heslo}
+                        onChange={e => setHeslo(e.target.value)}
+                        onKeyDown={e => e.stopPropagation()}
+                    />
+                </Form.Group>
+
+                <hr />
+                <h6>Přidat obchod</h6>
+                <div className="d-flex gap-2 mb-3">
+                    <Form.Control
+                        type="text"
+                        placeholder="Název obchodu"
+                        value={newName}
+                        onChange={e => setNewName(e.target.value)}
+                        onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleAdd(); }}
+                    />
+                    <Button variant="primary" onClick={handleAdd} disabled={loading || !newName.trim() || !heslo}>
+                        Přidat
+                    </Button>
+                </div>
+
+                <h6>Aktuální seznam</h6>
+                {stores.length === 0 ? (
+                    <p className="text-muted">Žádné obchody v seznamu</p>
+                ) : (
+                    <ListGroup>
+                        {stores.map(s => (
+                            <ListGroup.Item key={s} className="d-flex justify-content-between align-items-center">
+                                {s}
+                                <FontAwesomeIcon
+                                    icon={faTrashCan}
+                                    className="action-icon"
+                                    title="Odebrat"
+                                    onClick={() => handleRemove(s)}
+                                    style={{ cursor: 'pointer' }}
+                                />
+                            </ListGroup.Item>
+                        ))}
+                    </ListGroup>
+                )}
+            </Modal.Body>
+            <Modal.Footer>
+                <Button variant="secondary" onClick={onClose}>Zavřít</Button>
+            </Modal.Footer>
+        </Modal>
+    );
+}

client/src/context/settings.tsx

@@ -4,6 +4,8 @@ const BANK_ACCOUNT_NUMBER_KEY = 'bank_account_number';
 const BANK_ACCOUNT_HOLDER_KEY = 'bank_account_holder_name';
 const HIDE_SOUPS_KEY = 'hide_soups';
 const THEME_KEY = 'theme_preference';
+const ACCENT_HUE_KEY = 'accent_hue';
+const LEGACY_COLOR_THEME_KEY = 'color_theme';
 
 export type ThemePreference = 'system' | 'light' | 'dark';
 
@@ -12,10 +14,13 @@ export type SettingsContextProps = {
   holderName?: string,
   hideSoups?: boolean,
   themePreference: ThemePreference,
+  accentHue: number,
+  effectiveDark: boolean,
   setBankAccountNumber: (accountNumber?: string) => void,
   setBankAccountHolderName: (holderName?: string) => void,
   setHideSoupsOption: (hideSoups?: boolean) => void,
   setThemePreference: (theme: ThemePreference) => void,
+  setAccentHue: (hue: number) => void,
 }
 
 type ContextProps = {
@@ -45,11 +50,74 @@ function getInitialTheme(): ThemePreference {
   return 'system';
 }
 
+function getInitialAccentHue(): number {
+  try {
+    const saved = localStorage.getItem(ACCENT_HUE_KEY);
+    if (saved !== null) {
+      const n = parseInt(saved, 10);
+      if (!isNaN(n) && n >= 0 && n <= 360) return n;
+    }
+    // Migrace ze starého string formátu (green/blue/purple)
+    const old = localStorage.getItem(LEGACY_COLOR_THEME_KEY);
+    if (old === 'blue') return 217;
+    if (old === 'purple') return 263;
+  } catch {
+    // localStorage nedostupný
+  }
+  return 142;
+}
+
+// Převod HSL na relativní jas dle WCAG (pro výpočet kontrastu s bílým textem)
+function hslToRelativeLuminance(h: number, s: number, l: number): number {
+  const sn = s / 100, ln = l / 100;
+  const a = sn * Math.min(ln, 1 - ln);
+  const ch = (n: number) => {
+    const k = (n + h / 30) % 12;
+    return ln - a * Math.max(Math.min(k - 3, 9 - k, 1), -1);
+  };
+  const toLinear = (c: number) => c <= 0.04045 ? c / 12.92 : Math.pow((c + 0.055) / 1.055, 2.4);
+  return 0.2126 * toLinear(ch(0)) + 0.7152 * toLinear(ch(8)) + 0.0722 * toLinear(ch(4));
+}
+
+// Najde nejnižší světlost, při které má barva dostatečný kontrast s bílým textem (WCAG AA 4.5:1)
+function adjustedL(hue: number, sat: number, targetL: number): number {
+  let l = targetL;
+  while (l >= 5) {
+    const lum = hslToRelativeLuminance(hue, sat, l);
+    if (1.05 / (lum + 0.05) >= 4.5) return l;
+    l -= 1;
+  }
+  return l;
+}
+
+function applyAccentColors(hue: number, isDark: boolean): void {
+  const sat = 70;
+  const baseL = adjustedL(hue, sat, isDark ? 55 : 38);
+  const hoverL = isDark ? Math.min(baseL + 10, 80) : Math.max(baseL - 10, 10);
+  const root = document.documentElement;
+  root.style.setProperty('--luncher-primary', `hsl(${hue} ${sat}% ${baseL}%)`);
+  root.style.setProperty('--luncher-primary-hover', `hsl(${hue} ${sat}% ${hoverL}%)`);
+  root.style.setProperty('--luncher-primary-light', isDark
+    ? `hsl(${hue} 60% 12%)`
+    : `hsl(${hue} 60% 92%)`);
+  root.style.setProperty('--luncher-action-icon', `hsl(${hue} ${sat}% ${baseL}%)`);
+  root.style.setProperty('--luncher-success', `hsl(${hue} ${sat}% ${baseL}%)`);
+}
+
 function useProvideSettings(): SettingsContextProps {
   const [bankAccount, setBankAccount] = useState<string | undefined>();
   const [holderName, setHolderName] = useState<string | undefined>();
   const [hideSoups, setHideSoups] = useState<boolean | undefined>();
   const [themePreference, setTheme] = useState<ThemePreference>(getInitialTheme);
+  const [accentHue, setHue] = useState<number>(getInitialAccentHue);
+  const [effectiveDark, setEffectiveDark] = useState<boolean>(() => {
+    try {
+      const pref = localStorage.getItem(THEME_KEY) as ThemePreference | null;
+      if (pref === 'dark') return true;
+      if (pref === 'light') return false;
+    } catch { /* noop */ }
+    return window.matchMedia?.('(prefers-color-scheme: dark)').matches ?? false;
+  });
 
   useEffect(() => {
     const accountNumber = localStorage.getItem(BANK_ACCOUNT_NUMBER_KEY);
@@ -95,24 +163,27 @@ function useProvideSettings(): SettingsContextProps {
   }, [themePreference]);
 
   useEffect(() => {
-    const applyTheme = (theme: 'light' | 'dark') => {
-      document.documentElement.setAttribute('data-bs-theme', theme);
+    const applyTheme = (dark: boolean) => {
+      document.documentElement.setAttribute('data-bs-theme', dark ? 'dark' : 'light');
+      setEffectiveDark(dark);
     };
-
     if (themePreference === 'system') {
-      const mediaQuery = window.matchMedia('(prefers-color-scheme: dark)');
-      applyTheme(mediaQuery.matches ? 'dark' : 'light');
-
-      const handler = (e: MediaQueryListEvent) => {
-        applyTheme(e.matches ? 'dark' : 'light');
-      };
-      mediaQuery.addEventListener('change', handler);
-      return () => mediaQuery.removeEventListener('change', handler);
+      const mq = window.matchMedia('(prefers-color-scheme: dark)');
+      applyTheme(mq.matches);
+      const handler = (e: MediaQueryListEvent) => applyTheme(e.matches);
+      mq.addEventListener('change', handler);
+      return () => mq.removeEventListener('change', handler);
     } else {
-      applyTheme(themePreference);
+      applyTheme(themePreference === 'dark');
     }
   }, [themePreference]);
 
+  // Aplikuje accent barvy při změně hue nebo přepnutí světlý/tmavý
+  useEffect(() => {
+    localStorage.setItem(ACCENT_HUE_KEY, String(accentHue));
+    applyAccentColors(accentHue, effectiveDark);
+  }, [accentHue, effectiveDark]);
+
   function setBankAccountNumber(bankAccount?: string) {
     setBankAccount(bankAccount);
   }
@@ -129,14 +200,21 @@ function useProvideSettings(): SettingsContextProps {
     setTheme(theme);
   }
 
+  function setAccentHue(hue: number) {
+    setHue(hue);
+  }
+
   return {
     bankAccount,
     holderName,
     hideSoups,
     themePreference,
+    accentHue,
+    effectiveDark,
     setBankAccountNumber,
     setBankAccountHolderName,
     setHideSoupsOption,
     setThemePreference,
+    setAccentHue,
   }
 }

client/src/context/socket.js

@@ -8,13 +8,27 @@ if (process.env.NODE_ENV === 'development') {
     socketPath = undefined;
 } else {
     socketUrl = `${globalThis.location.host}`;
-    socketPath = `${globalThis.location.pathname}socket.io`;
+    socketPath = '/socket.io';
 }
 
 export const socket = socketio.connect(socketUrl, { path: socketPath, transports: ["websocket"] });
 export const SocketContext = React.createContext();
 
+// Prohlížeče throttlují setTimeout v neaktivních tabech, což zdržuje automatické
+// znovupřipojení socket.io. Po návratu do tabu nebo focusu okna se připojíme hned.
+document.addEventListener('visibilitychange', () => {
+    if (document.visibilityState === 'visible' && !socket.connected) {
+        socket.connect();
+    }
+});
+window.addEventListener('focus', () => {
+    if (!socket.connected) {
+        socket.connect();
+    }
+});
+
 // Konstanty websocket eventů, musí odpovídat těm na serveru!
 export const EVENT_CONNECT = 'connect';
 export const EVENT_DISCONNECT = 'disconnect';
 export const EVENT_MESSAGE = 'message';
+export const EVENT_PENDING_QR = 'pendingQr';

client/src/pages/OrderGroupsPage.tsx

@@ -0,0 +1,611 @@
+import { useContext, useEffect, useState } from 'react';
+import { Alert, Badge, Button, Card, Form, Modal, OverlayTrigger, Table, Tooltip } from 'react-bootstrap';
+import { FontAwesomeIcon } from '@fortawesome/react-fontawesome';
+import { faTrashCan } from '@fortawesome/free-regular-svg-icons';
+import { faBasketShopping, faCircleCheck, faGear, faLock, faLockOpen, faSearch, faUserPlus } from '@fortawesome/free-solid-svg-icons';
+import {
+    ClientData, GroupState, MealSlot, OrderGroup, OrderGroupMember,
+    getData, createGroup, deleteGroup, addGroupMember, removeGroupMember, updateGroupMember, setGroupState, updateGroupTimes,
+} from '../../../types';
+import { EVENT_MESSAGE, SocketContext } from '../context/socket';
+import { useAuth } from '../context/auth';
+import { useSettings } from '../context/settings';
+import Login from '../Login';
+import Header from '../components/Header';
+import Footer from '../components/Footer';
+import Loader from '../components/Loader';
+import StoreAdminModal from '../components/modals/StoreAdminModal';
+import PayForGroupModal from '../components/modals/PayForGroupModal';
+import EditGroupFeesModal from '../components/modals/EditGroupFeesModal';
+
+const SLOT = MealSlot.EXTRA;
+const TIME_REGEX = /^([01]\d|2[0-3]):[0-5]\d$/;
+
+function stateBadge(state: GroupState) {
+    const map: Record<GroupState, { bg: string; label: string }> = {
+        [GroupState.OPEN]: { bg: 'success', label: 'Otevřeno' },
+        [GroupState.LOCKED]: { bg: 'warning', label: 'Uzamčeno' },
+        [GroupState.ORDERED]: { bg: 'secondary', label: 'Objednáno' },
+    };
+    const { bg, label } = map[state] ?? { bg: 'light', label: state };
+    return <Badge bg={bg}>{label}</Badge>;
+}
+
+export default function OrderGroupsPage() {
+    const auth = useAuth();
+    const settings = useSettings();
+    const socket = useContext(SocketContext);
+    const [data, setData] = useState<ClientData | undefined>();
+    const [failure, setFailure] = useState(false);
+    const [newGroupName, setNewGroupName] = useState('');
+    const [creating, setCreating] = useState(false);
+    const [adminModalOpen, setAdminModalOpen] = useState(false);
+    const [editAmounts, setEditAmounts] = useState<Record<string, string>>({});
+    const [editNotes, setEditNotes] = useState<Record<string, string>>({});
+    const [editSurcharges, setEditSurcharges] = useState<Record<string, { text: string; amount: string }>>({});
+    const [editTimes, setEditTimes] = useState<Record<string, { orderedAt: string; deliveryAt: string }>>({});
+    const [payModal, setPayModal] = useState<OrderGroup | null>(null);
+    const [feesModal, setFeesModal] = useState<OrderGroup | null>(null);
+    const [confirmOrderGroup, setConfirmOrderGroup] = useState<OrderGroup | null>(null);
+    const [pageError, setPageError] = useState<string | null>(null);
+
+    const fetchData = async () => {
+        try {
+            const r = await getData({ query: { slot: SLOT } });
+            if (r.data) setData(r.data);
+        } catch {
+            setFailure(true);
+        }
+    };
+
+    useEffect(() => {
+        if (!auth?.login) return;
+        fetchData();
+    }, [auth?.login]);
+
+    useEffect(() => {
+        socket.on(EVENT_MESSAGE, (newData: ClientData) => {
+            if (newData.slot === SLOT) setData(prev => ({
+                ...newData,
+                stores: newData.stores ?? prev?.stores,
+            }));
+        });
+        return () => { socket.off(EVENT_MESSAGE); };
+    }, [socket]);
+
+    useEffect(() => {
+        const onReconnect = () => fetchData();
+        socket.io.on('reconnect', onReconnect);
+        return () => { socket.io.off('reconnect', onReconnect); };
+    }, [socket]);
+
+    const refresh = async (fn: () => Promise<any>): Promise<boolean> => {
+        setPageError(null);
+        const result = await fn();
+        if (result?.error) {
+            setPageError((result.error as any).error || 'Nastala chyba');
+            await fetchData();
+            return false;
+        }
+        if (result?.data) {
+            setData(result.data);
+            socket.emit?.('message', result.data as ClientData);
+        }
+        return true;
+    };
+
+    const handleCreate = async () => {
+        if (!newGroupName || !auth?.login) return;
+        setCreating(true);
+        const ok = await refresh(() => createGroup({ body: { name: newGroupName } }));
+        if (ok) setNewGroupName('');
+        setCreating(false);
+    };
+
+    const handleJoin = (groupId: string) =>
+        refresh(() => addGroupMember({ body: { id: groupId } }));
+
+    const handleToggleLock = (group: OrderGroup) => {
+        const next = group.state === GroupState.OPEN ? GroupState.LOCKED : GroupState.OPEN;
+        return refresh(() => setGroupState({ body: { id: group.id, state: next } }));
+    };
+
+    const handleConfirmOrdered = async (group: OrderGroup) => {
+        setConfirmOrderGroup(null);
+        await refresh(() => setGroupState({ body: { id: group.id, state: GroupState.ORDERED } }));
+    };
+
+    const handleRevertOrdered = (group: OrderGroup) =>
+        refresh(() => setGroupState({ body: { id: group.id, state: GroupState.LOCKED } }));
+
+    const handleDelete = (groupId: string) =>
+        refresh(() => deleteGroup({ body: { id: groupId } }));
+
+    const handleSaveAmount = async (groupId: string, login: string) => {
+        const key = `${groupId}:${login}`;
+        const raw = editAmounts[key];
+        const n = parseFloat(raw ?? '');
+        if (!raw || isNaN(n) || n < 0) {
+            setPageError('Zadejte platnou kladnou částku');
+            return;
+        }
+        const ok = await refresh(() => updateGroupMember({ body: { id: groupId, login, amount: Math.round(n * 100) } }));
+        if (ok) setEditAmounts(prev => { const next = { ...prev }; delete next[key]; return next; });
+    };
+
+    const handleSaveNote = async (groupId: string, login: string) => {
+        const key = `${groupId}:${login}`;
+        const note = editNotes[key] ?? '';
+        const ok = await refresh(() => updateGroupMember({ body: { id: groupId, login, note } }));
+        if (ok) setEditNotes(prev => { const next = { ...prev }; delete next[key]; return next; });
+    };
+
+    const handleSaveSurcharge = async (groupId: string, login: string) => {
+        const key = `${groupId}:${login}`;
+        const surchargeText = editSurcharges[key]?.text ?? '';
+        const rawAmount = editSurcharges[key]?.amount ?? '';
+        const surchargeAmount = rawAmount === '' ? 0 : parseFloat(rawAmount.replace(',', '.'));
+        if (rawAmount !== '' && (isNaN(surchargeAmount) || surchargeAmount < 0)) {
+            setPageError('Zadejte platnou výši příplatku');
+            return;
+        }
+        const ok = await refresh(() => updateGroupMember({ body: { id: groupId, login, surchargeText, surchargeAmount: rawAmount === '' ? 0 : Math.round(surchargeAmount * 100) } }));
+        if (ok) setEditSurcharges(prev => { const next = { ...prev }; delete next[key]; return next; });
+    };
+
+    const handleSaveTimes = async (group: OrderGroup) => {
+        const times = editTimes[group.id];
+        if (!times) return;
+        const { orderedAt, deliveryAt } = times;
+        if (orderedAt && !TIME_REGEX.test(orderedAt)) {
+            setPageError('Čas objednání musí být ve formátu HH:MM');
+            return;
+        }
+        if (deliveryAt && !TIME_REGEX.test(deliveryAt)) {
+            setPageError('Čas doručení musí být ve formátu HH:MM');
+            return;
+        }
+        const ok = await refresh(() => updateGroupTimes({ body: { id: group.id, orderedAt, deliveryAt } }));
+        if (ok) setEditTimes(prev => { const next = { ...prev }; delete next[group.id]; return next; });
+    };
+
+    const canEditMember = (group: OrderGroup, targetLogin: string) => {
+        if (group.state === GroupState.ORDERED) return false;
+        if (auth?.login === group.creatorLogin) return true;
+        if (auth?.login === targetLogin && group.state === GroupState.OPEN) return true;
+        return false;
+    };
+
+    const canManageMembers = (group: OrderGroup) => {
+        if (group.state === GroupState.ORDERED) return false;
+        if (auth?.login === group.creatorLogin) return true;
+        return group.state === GroupState.OPEN;
+    };
+
+    if (!auth?.login) return <Login />;
+
+    if (failure) return (
+        <Loader icon={faSearch} description="Nepodařilo se načíst data" animation="fa-beat" />
+    );
+
+    if (!data) return (
+        <Loader icon={faSearch} description="Načítám..." animation="fa-bounce" />
+    );
+
+    const stores = data.stores ?? [];
+    const groups = data.groups ?? [];
+
+    return (
+        <div className="app-container">
+            <Header choices={data.choices} />
+            <div className="wrapper">
+                <div className="d-flex align-items-center justify-content-between mb-1">
+                    <h1 className="title mb-0">Objednání</h1>
+                    <Button variant="outline-secondary" size="sm" onClick={() => setAdminModalOpen(true)} title="Správa obchodů">
+                        <FontAwesomeIcon icon={faGear} />
+                    </Button>
+                </div>
+                <p style={{ color: 'var(--luncher-text-muted)' }}>Skupinové objednávky z obchodů a restaurací</p>
+
+                {pageError && (
+                    <Alert variant="danger" dismissible onClose={() => setPageError(null)} className="mt-2">
+                        {pageError}
+                    </Alert>
+                )}
+
+                <div className="content-wrapper">
+                    <div className="content" style={{ maxWidth: 1200 }}>
+                        {/* Vytvoření nové skupiny */}
+                        <div className="choice-section fade-in mb-4">
+                            <h5>Vytvořit skupinu</h5>
+                            {stores.length === 0 ? (
+                                <p className="text-muted">
+                                    Nejsou přidány žádné obchody.{' '}
+                                    <Button variant="link" size="sm" className="p-0" onClick={() => setAdminModalOpen(true)}>
+                                        Přidat obchod
+                                    </Button>
+                                </p>
+                            ) : (
+                                <div className="d-flex gap-2 align-items-end flex-wrap">
+                                    <Form.Select
+                                        value={newGroupName}
+                                        onChange={e => setNewGroupName(e.target.value)}
+                                        style={{ maxWidth: 260 }}
+                                    >
+                                        <option value="">— vyberte obchod —</option>
+                                        {stores.map(s => <option key={s} value={s}>{s}</option>)}
+                                    </Form.Select>
+                                    <Button variant="primary" onClick={handleCreate} disabled={creating || !newGroupName}>
+                                        Vytvořit skupinu
+                                    </Button>
+                                </div>
+                            )}
+                        </div>
+
+                        {/* Seznam skupin */}
+                        {groups.length === 0 && (
+                            <p className="text-muted fade-in">Zatím žádné skupiny pro dnešní den.</p>
+                        )}
+
+                        {groups.map(group => {
+                            const login = auth!.login ?? '';
+                            const isCreator = login === group.creatorLogin;
+                            const isMember = login in group.members;
+                            const isOrdered = group.state === GroupState.ORDERED;
+                            const isLocked = group.state === GroupState.LOCKED;
+                            const memberEntries = Object.entries(group.members) as [string, OrderGroupMember][];
+                            const memberCount = memberEntries.length;
+                            const editingTimes = group.id in editTimes;
+
+                            const totalFees = (group.fees ?? 0) + (group.shipping ?? 0) + (group.tip ?? 0);
+                            const feeShare = memberCount > 0 ? Math.round(totalFees / memberCount) : 0;
+                            const getMemberTotal = (m: OrderGroupMember) => {
+                                const base = m.amount ?? 0;
+                                const surcharge = m.surchargeAmount ?? 0;
+                                const dv = group.discountValue ?? 0;
+                                const discount = dv > 0
+                                    ? (group.discountType === 'percent'
+                                        ? Math.round((base + surcharge) * dv / 100)
+                                        : Math.round(dv / memberCount))
+                                    : 0;
+                                return base + surcharge + feeShare - discount;
+                            };
+
+                            return (
+                                <Card key={group.id} className="mb-3 fade-in">
+                                    <Card.Header className="d-flex justify-content-between align-items-center">
+                                        <div className="d-flex align-items-center gap-2">
+                                            <strong>{group.name}</strong>
+                                            {stateBadge(group.state)}
+                                            <small className="text-muted">zakladatel: {group.creatorLogin}</small>
+                                        </div>
+                                        <div className="d-flex gap-2">
+                                            {isCreator && !isOrdered && (
+                                                <>
+                                                    <Button variant="outline-info" size="sm" onClick={() => setFeesModal(group)} title="Upravit poplatky a slevu">
+                                                        Poplatky
+                                                    </Button>
+                                                    <Button variant="outline-secondary" size="sm" onClick={() => handleToggleLock(group)} title={isLocked ? 'Odemknout' : 'Uzamknout'}>
+                                                        <FontAwesomeIcon icon={isLocked ? faLockOpen : faLock} />
+                                                    </Button>
+                                                    {isLocked && (
+                                                        <Button variant="outline-primary" size="sm" onClick={() => setConfirmOrderGroup(group)}>
+                                                            Objednáno
+                                                        </Button>
+                                                    )}
+                                                    <Button variant="outline-danger" size="sm" onClick={() => handleDelete(group.id)} title="Smazat skupinu">
+                                                        <FontAwesomeIcon icon={faTrashCan} />
+                                                    </Button>
+                                                </>
+                                            )}
+                                            {isCreator && isOrdered && (
+                                                <>
+                                                    {settings?.bankAccount && settings?.holderName && !group.qrGenerated && (
+                                                        <Button variant="primary" size="sm" onClick={() => setPayModal(group)}>
+                                                            <FontAwesomeIcon icon={faBasketShopping} className="me-1" />
+                                                            Generovat QR
+                                                        </Button>
+                                                    )}
+                                                    <Button variant="outline-warning" size="sm" onClick={() => handleRevertOrdered(group)} title="Vrátit na Uzamčeno (smaže QR kódy)">
+                                                        <FontAwesomeIcon icon={faLockOpen} />
+                                                    </Button>
+                                                </>
+                                            )}
+                                            {!isMember && !isOrdered && !isLocked && (
+                                                <Button variant="outline-success" size="sm" onClick={() => handleJoin(group.id)}>
+                                                    <FontAwesomeIcon icon={faUserPlus} className="me-1" />
+                                                    Přidat se
+                                                </Button>
+                                            )}
+                                        </div>
+                                    </Card.Header>
+                                    <Card.Body className="p-0">
+                                        <Table className="mb-0" size="sm">
+                                            <thead>
+                                                <tr>
+                                                    <th>Člen</th>
+                                                    <th style={{ width: 180 }}>Částka (bez slev)</th>
+                                                    <th style={{ width: 220 }}>Příplatek</th>
+                                                    <th>Poznámka</th>
+                                                    <th style={{ width: 160 }}>Celkem (s poplatky)</th>
+                                                    <th style={{ width: 40 }}></th>
+                                                </tr>
+                                            </thead>
+                                            <tbody>
+                                                {memberEntries.map(([memberLogin, member]) => {
+                                                    const key = `${group.id}:${memberLogin}`;
+                                                    const editingAmount = key in editAmounts;
+                                                    const editingNote = key in editNotes;
+                                                    const editingSurcharge = key in editSurcharges;
+                                                    const canEdit = canEditMember(group, memberLogin);
+                                                    const memberTotal = getMemberTotal(member);
+                                                    return (
+                                                        <tr key={memberLogin}>
+                                                            <td>
+                                                                <span className="user-info">
+                                                                    <strong>{memberLogin}</strong>
+                                                                    {memberLogin === group.creatorLogin && (
+                                                                        <OverlayTrigger placement="top" overlay={<Tooltip>Zakladatel / objednávající</Tooltip>}>
+                                                                            <span className="ms-1"><FontAwesomeIcon icon={faBasketShopping} className="buyer-icon" /></span>
+                                                                        </OverlayTrigger>
+                                                                    )}
+                                                                    {member.paid && (
+                                                                        <OverlayTrigger placement="top" overlay={<Tooltip>Zaplaceno</Tooltip>}>
+                                                                            <span className="ms-1"><FontAwesomeIcon icon={faCircleCheck} className="text-success" /></span>
+                                                                        </OverlayTrigger>
+                                                                    )}
+                                                                </span>
+                                                            </td>
+                                                            <td>
+                                                                {canEdit && editingAmount ? (
+                                                                    <div className="d-flex gap-1">
+                                                                        <Form.Control
+                                                                            type="number"
+                                                                            size="sm"
+                                                                            value={editAmounts[key]}
+                                                                            onChange={e => setEditAmounts(prev => ({ ...prev, [key]: e.target.value }))}
+                                                                            onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveAmount(group.id, memberLogin); if (e.key === 'Escape') setEditAmounts(prev => { const n = { ...prev }; delete n[key]; return n; }); }}
+                                                                            style={{ width: 95 }}
+                                                                            autoFocus
+                                                                        />
+                                                                        <Button size="sm" variant="outline-success" onClick={() => handleSaveAmount(group.id, memberLogin)}>✓</Button>
+                                                                    </div>
+                                                                ) : (
+                                                                    <span
+                                                                        style={{ cursor: canEdit ? 'pointer' : undefined }}
+                                                                        onClick={() => canEdit && setEditAmounts(prev => ({ ...prev, [key]: member.amount != null ? String(member.amount / 100) : '' }))}
+                                                                        title={canEdit ? 'Klikněte pro úpravu' : undefined}
+                                                                    >
+                                                                        {member.amount != null ? `${member.amount / 100} Kč` : <span className="text-muted">—</span>}
+                                                                    </span>
+                                                                )}
+                                                            </td>
+                                                            <td>
+                                                                {canEdit && editingSurcharge ? (
+                                                                    <div className="d-flex gap-1">
+                                                                        <Form.Control
+                                                                            type="text"
+                                                                            size="sm"
+                                                                            placeholder="popis"
+                                                                            value={editSurcharges[key]?.text ?? ''}
+                                                                            onChange={e => setEditSurcharges(prev => ({ ...prev, [key]: { ...prev[key], text: e.target.value } }))}
+                                                                            onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveSurcharge(group.id, memberLogin); if (e.key === 'Escape') setEditSurcharges(prev => { const n = { ...prev }; delete n[key]; return n; }); }}
+                                                                            style={{ width: 80 }}
+                                                                            autoFocus
+                                                                        />
+                                                                        <Form.Control
+                                                                            type="number"
+                                                                            size="sm"
+                                                                            placeholder="Kč"
+                                                                            value={editSurcharges[key]?.amount ?? ''}
+                                                                            onChange={e => setEditSurcharges(prev => ({ ...prev, [key]: { ...prev[key], amount: e.target.value } }))}
+                                                                            onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveSurcharge(group.id, memberLogin); if (e.key === 'Escape') setEditSurcharges(prev => { const n = { ...prev }; delete n[key]; return n; }); }}
+                                                                            style={{ width: 60 }}
+                                                                        />
+                                                                        <Button size="sm" variant="outline-success" onClick={() => handleSaveSurcharge(group.id, memberLogin)}>✓</Button>
+                                                                    </div>
+                                                                ) : (
+                                                                    <span
+                                                                        style={{ cursor: canEdit ? 'pointer' : undefined }}
+                                                                        onClick={() => canEdit && setEditSurcharges(prev => ({ ...prev, [key]: { text: member.surchargeText ?? '', amount: member.surchargeAmount != null ? String(member.surchargeAmount / 100) : '' } }))}
+                                                                        title={canEdit ? 'Klikněte pro úpravu příplatku' : undefined}
+                                                                    >
+                                                                        {member.surchargeAmount != null && member.surchargeAmount > 0 ? (
+                                                                            <small>{member.surchargeText ? `${member.surchargeText}: ` : ''}<strong>{member.surchargeAmount / 100} Kč</strong></small>
+                                                                        ) : (
+                                                                            <small className="text-muted">—</small>
+                                                                        )}
+                                                                    </span>
+                                                                )}
+                                                            </td>
+                                                            <td>
+                                                                {canEdit && editingNote ? (
+                                                                    <div className="d-flex gap-1">
+                                                                        <Form.Control
+                                                                            type="text"
+                                                                            size="sm"
+                                                                            value={editNotes[key]}
+                                                                            onChange={e => setEditNotes(prev => ({ ...prev, [key]: e.target.value }))}
+                                                                            onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveNote(group.id, memberLogin); if (e.key === 'Escape') setEditNotes(prev => { const n = { ...prev }; delete n[key]; return n; }); }}
+                                                                            autoFocus
+                                                                        />
+                                                                        <Button size="sm" variant="outline-success" onClick={() => handleSaveNote(group.id, memberLogin)}>✓</Button>
+                                                                    </div>
+                                                                ) : (
+                                                                    <span
+                                                                        style={{ cursor: canEdit ? 'pointer' : undefined }}
+                                                                        onClick={() => canEdit && setEditNotes(prev => ({ ...prev, [key]: member.note ?? '' }))}
+                                                                        title={canEdit ? 'Klikněte pro úpravu poznámky' : undefined}
+                                                                    >
+                                                                        <small className="text-muted">{member.note || '—'}</small>
+                                                                    </span>
+                                                                )}
+                                                            </td>
+                                                            <td className="text-end">
+                                                                <small className={memberTotal > 0 ? 'fw-bold' : 'text-muted'}>
+                                                                    {memberTotal > 0 ? `${memberTotal / 100} Kč` : '—'}
+                                                                </small>
+                                                            </td>
+                                                            <td>
+                                                                <div className="d-flex gap-1 justify-content-end">
+                                                                    {canManageMembers(group) && (isCreator || memberLogin === login) && (memberLogin !== group.creatorLogin) && (
+                                                                        <FontAwesomeIcon
+                                                                            icon={faTrashCan}
+                                                                            className="action-icon"
+                                                                            title={memberLogin === login ? 'Odhlásit se' : 'Odebrat z skupiny'}
+                                                                            onClick={() => refresh(() => removeGroupMember({ body: { id: group.id, login: memberLogin } }))}
+                                                                        />
+                                                                    )}
+                                                                </div>
+                                                            </td>
+                                                        </tr>
+                                                    );
+                                                })}
+                                            </tbody>
+                                            {(() => {
+                                                const sumBase = memberEntries.reduce((sum, [, m]) => sum + (m.amount ?? 0) + (m.surchargeAmount ?? 0), 0);
+                                                const dv = group.discountValue ?? 0;
+                                                const totalDiscount = dv > 0
+                                                    ? (group.discountType === 'percent' ? Math.round(sumBase * dv / 100) : dv)
+                                                    : 0;
+                                                const groupTotal = sumBase + totalFees - totalDiscount;
+                                                return groupTotal > 0 ? (
+                                                    <tfoot>
+                                                        <tr style={{ fontWeight: 700, borderTop: '2px solid var(--luncher-border)' }}>
+                                                            <td colSpan={4} className="text-end" style={{ fontSize: '0.9em' }}>Celkem za skupinu:</td>
+                                                            <td className="text-end">{groupTotal / 100} Kč</td>
+                                                            <td></td>
+                                                        </tr>
+                                                    </tfoot>
+                                                ) : null;
+                                            })()}
+                                        </Table>
+
+                                        {/* Souhrn poplatků a slevy */}
+                                        {(totalFees > 0 || (group.discountValue != null && group.discountValue > 0)) && (
+                                            <div className="px-3 py-2 border-top d-flex gap-3 flex-wrap" style={{ fontSize: '0.85em', color: 'var(--luncher-text-muted)' }}>
+                                                {group.fees != null && group.fees > 0 && <span>Poplatky: <strong>{group.fees / 100} Kč</strong></span>}
+                                                {group.shipping != null && group.shipping > 0 && <span>Doprava: <strong>{group.shipping / 100} Kč</strong></span>}
+                                                {group.tip != null && group.tip > 0 && <span>Spropitné: <strong>{group.tip / 100} Kč</strong></span>}
+                                                {feeShare > 0 && <span>→ <strong>{feeShare / 100} Kč</strong>/os.</span>}
+                                                {group.discountValue != null && group.discountValue > 0 && (
+                                                    <span className="text-success">
+                                                        Sleva: <strong>{group.discountType === 'percent' ? `${group.discountValue}%` : `${group.discountValue / 100} Kč`}</strong>
+                                                    </span>
+                                                )}
+                                            </div>
+                                        )}
+
+                                        {/* Časy objednání a doručení */}
+                                        {isOrdered && (
+                                            <div className="px-3 py-2 border-top">
+                                                {isCreator && editingTimes ? (
+                                                    <div className="d-flex align-items-center gap-3 flex-wrap">
+                                                        <div className="d-flex align-items-center gap-1">
+                                                            <small className="text-muted text-nowrap">Objednáno v:</small>
+                                                            <Form.Control
+                                                                type="text"
+                                                                size="sm"
+                                                                placeholder="HH:MM"
+                                                                value={editTimes[group.id]?.orderedAt ?? ''}
+                                                                onChange={e => setEditTimes(prev => ({ ...prev, [group.id]: { ...prev[group.id], orderedAt: e.target.value } }))}
+                                                                onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveTimes(group); }}
+                                                                style={{ width: 75 }}
+                                                                autoFocus
+                                                            />
+                                                        </div>
+                                                        <div className="d-flex align-items-center gap-1">
+                                                            <small className="text-muted text-nowrap">Doručení v:</small>
+                                                            <Form.Control
+                                                                type="text"
+                                                                size="sm"
+                                                                placeholder="HH:MM"
+                                                                value={editTimes[group.id]?.deliveryAt ?? ''}
+                                                                onChange={e => setEditTimes(prev => ({ ...prev, [group.id]: { ...prev[group.id], deliveryAt: e.target.value } }))}
+                                                                onKeyDown={e => { e.stopPropagation(); if (e.key === 'Enter') handleSaveTimes(group); }}
+                                                                style={{ width: 75 }}
+                                                            />
+                                                        </div>
+                                                        <Button size="sm" variant="outline-success" onClick={() => handleSaveTimes(group)}>Uložit</Button>
+                                                        <Button size="sm" variant="outline-secondary" onClick={() => setEditTimes(prev => { const n = { ...prev }; delete n[group.id]; return n; })}>Zrušit</Button>
+                                                    </div>
+                                                ) : (
+                                                    <div
+                                                        className="d-flex align-items-center gap-3 flex-wrap"
+                                                        style={{ cursor: isCreator ? 'pointer' : undefined }}
+                                                        onClick={() => isCreator && setEditTimes(prev => ({ ...prev, [group.id]: { orderedAt: group.orderedAt ?? '', deliveryAt: group.deliveryAt ?? '' } }))}
+                                                        title={isCreator ? 'Klikněte pro úpravu časů' : undefined}
+                                                    >
+                                                        <small className="text-muted">
+                                                            Objednáno v: <strong>{group.orderedAt ?? '—'}</strong>
+                                                        </small>
+                                                        <small className="text-muted">
+                                                            Doručení v: <strong>{group.deliveryAt ?? '—'}</strong>
+                                                        </small>
+                                                    </div>
+                                                )}
+                                            </div>
+                                        )}
+                                    </Card.Body>
+                                </Card>
+                            );
+                        })}
+                    </div>
+                </div>
+            </div>
+            <Footer />
+
+            {/* Potvrzovací dialog pro přechod do stavu Objednáno */}
+            <Modal show={!!confirmOrderGroup} onHide={() => setConfirmOrderGroup(null)} centered>
+                <Modal.Header closeButton>
+                    <Modal.Title>Potvrdit objednání</Modal.Title>
+                </Modal.Header>
+                <Modal.Body>
+                    Opravdu chcete označit skupinu <strong>{confirmOrderGroup?.name}</strong> jako objednanou?
+                    Tato akce uzavře skupinu a zaznamená čas objednání.
+                </Modal.Body>
+                <Modal.Footer>
+                    <Button variant="secondary" onClick={() => setConfirmOrderGroup(null)}>Zrušit</Button>
+                    <Button variant="primary" onClick={() => confirmOrderGroup && handleConfirmOrdered(confirmOrderGroup)}>
+                        Objednáno
+                    </Button>
+                </Modal.Footer>
+            </Modal>
+
+            <StoreAdminModal
+                isOpen={adminModalOpen}
+                onClose={() => setAdminModalOpen(false)}
+                stores={stores}
+                onStoresChanged={updated => setData(prev => prev ? { ...prev, stores: updated } : prev)}
+            />
+
+            {payModal && settings?.bankAccount && settings?.holderName && (
+                <PayForGroupModal
+                    isOpen={!!payModal}
+                    onClose={() => setPayModal(null)}
+                    onSuccess={fetchData}
+                    group={payModal}
+                    groupId={payModal.id}
+                    payerLogin={auth.login}
+                    bankAccount={settings.bankAccount}
+                    bankAccountHolder={settings.holderName}
+                />
+            )}
+
+            {feesModal && (
+                <EditGroupFeesModal
+                    isOpen={!!feesModal}
+                    onClose={() => setFeesModal(null)}
+                    group={feesModal}
+                    onSaved={newData => {
+                        if (newData) {
+                            setData(newData);
+                            socket.emit?.('message', newData as ClientData);
+                        }
+                        setFeesModal(null);
+                    }}
+                />
+            )}
+        </div>
+    );
+}

client/vite.config.ts

@@ -8,6 +8,7 @@ export default defineConfig({
     plugins: [react(), viteTsconfigPaths()],
     server: {
         open: true,
+        host: '0.0.0.0',
         port: 3000,
         proxy: {
             '/api': 'http://localhost:3001',

e2e/playwright.config.ts

@@ -4,7 +4,10 @@ import path from 'path';
 // Use 127.0.0.1 explicitly — on Node.js 18+/Windows, `localhost` may resolve to ::1
 // (IPv6) while the HTTP server only binds to 0.0.0.0 (IPv4), causing the webServer
 // readiness poll to time out even though the server is listening.
-const BASE_URL = process.env.E2E_BASE_URL ?? 'http://127.0.0.1:3001';
+// Port 3099 avoids conflicts with locally running Docker containers on 3001-3003.
+// Override with E2E_PORT env var if needed.
+const E2E_PORT = process.env.E2E_PORT ?? '3099';
+const BASE_URL = process.env.E2E_BASE_URL ?? `http://127.0.0.1:${E2E_PORT}`;
 
 // Server env vars injected for local runs. In CI these are set at the step level.
 const serverEnv: Record<string, string> = {
@@ -15,6 +18,7 @@ const serverEnv: Record<string, string> = {
     HTTP_REMOTE_USER_ENABLED: 'true',
     HTTP_REMOTE_USER_HEADER_NAME: 'remote-user',
     HTTP_REMOTE_TRUSTED_IPS: process.env.HTTP_REMOTE_TRUSTED_IPS ?? '127.0.0.1,::1,::ffff:127.0.0.1',
+    PORT: E2E_PORT,
 };
 if (process.env.REDIS_HOST) {
     serverEnv.REDIS_HOST = process.env.REDIS_HOST;
@@ -50,7 +54,7 @@ export default defineConfig({
         cwd: path.resolve(__dirname, '../server'),
         // Poll a dedicated health endpoint — polling '/' can stall in Express 5 when
         // server/public/ doesn't exist in the working directory (no finalhandler match).
-        url: `http://127.0.0.1:3001/api/health`,
+        url: `http://127.0.0.1:${E2E_PORT}/api/health`,
         timeout: 15_000,
         reuseExistingServer: !process.env.CI,
         env: serverEnv,

k8s/README.md

@@ -0,0 +1,186 @@
+# Kubernetes — Luncher HA
+
+Manifesty pro nasazení Luncheru na Kubernetes s vysokou dostupností (3 repliky, Redis adapter pro Socket.io, WATCH/MULTI atomické zápisy, graceful shutdown).
+
+## Prerekvizity
+
+- kubectl nakonfigurovaný na cílový cluster
+- `helm` nainstalovaný
+- Redis Stack image přístupný z clusteru (`redis/redis-stack-server:7.2.0-v14`)
+- Obraz `luncher:ha-test` načtený do clusteru (viz níže)
+
+## Lokální kind cluster (testik) — setup
+
+### 1. Smazat a znovu vytvořit cluster s port mappings
+
+```powershell
+$env:KIND_EXPERIMENTAL_PROVIDER = "nerdctl"
+# Přidat nerdctl do PATH (Rancher Desktop)
+$env:PATH += ";$env:LOCALAPPDATA\Programs\Rancher Desktop\resources\resources\win32\bin"
+
+kind delete cluster --name testik
+kind create cluster --name testik --config k8s/kind/testik.yaml
+```
+
+### 2. Sestavit a načíst obraz
+
+```powershell
+docker build -t luncher:ha-test .
+
+# Uložit a načíst přes nerdctl (kind + nerdctl provider)
+nerdctl save luncher:ha-test -o luncher.tar
+kind load image-archive luncher.tar --name testik
+Remove-Item luncher.tar
+```
+
+### 3. Nainstalovat Traefik (rke2-traefik)
+
+> **Prerekvizita (Rancher Desktop):** Pokud Rancher Desktop běží s `kubernetes.options.traefik=true`,
+> host-switch.exe obsadí port 80 dříve než kind. Vypni traefik v k3s:
+> ```powershell
+> rdctl set --kubernetes.options.traefik=false
+> ```
+>
+> **Prerekvizita — inotify limity:** Čtyř-uzlový kind cluster vyčerpá výchozí
+> `fs.inotify.max_user_instances=128`. kube-proxy pak padá s „too many open files".
+> Zvyš limit v rancher-desktop WSL2 (přežije restart WSL2, ale ne reboot — přidej do
+> `/etc/sysctl.d/99-kind.conf` pro trvalost):
+> ```powershell
+> wsl -d rancher-desktop -- sysctl -w fs.inotify.max_user_instances=1280
+> ```
+
+```powershell
+# rke2-traefik je v rke2-charts, ne rancher-charts
+helm repo add rke2-charts https://rke2-charts.rancher.io
+helm repo update
+
+# Nejdřív CRD chart, pak samotný chart
+helm install traefik-crd rke2-charts/rke2-traefik-crd -n kube-system --create-namespace
+helm install traefik rke2-charts/rke2-traefik -n kube-system `
+  --set "tolerations[0].key=node-role.kubernetes.io/control-plane" `
+  --set "tolerations[0].operator=Exists" `
+  --set "tolerations[0].effect=NoSchedule"
+```
+
+Ověř že Traefik DaemonSet běží na control-plane (má hostPort 80):
+```powershell
+kubectl get ds -n kube-system traefik-rke2-traefik
+kubectl get pods -n kube-system -o wide | Select-String traefik
+```
+
+### 4. Nainstalovat Reloader
+
+[stakater/Reloader](https://github.com/stakater/Reloader) sleduje změny Secret a ConfigMap a automaticky spustí rolling restart Deploymentu — odpadá nutnost ručního `kubectl rollout restart` po rotaci `JWT_SECRET` nebo `ADMIN_PASSWORD`.
+
+Manifest je vendorovaný ve verzi v1.4.16 (`k8s/base/reloader.yaml`). Nasadit do `default` namespace:
+
+```powershell
+kubectl apply -f k8s/base/reloader.yaml
+kubectl rollout status deploy/reloader-reloader
+```
+
+Reloader běží cluster-wide díky `ClusterRoleBinding` — nepotřebuje žádnou konfiguraci per-namespace. Deployment Luncheru má anotaci `reloader.stakater.com/auto: "true"`, která říká Reloaderu, ať sleduje všechny Secrety a ConfigMapy odkazované přes `envFrom`.
+
+### 5. Nasadit Luncher
+
+```powershell
+# Namespace + Redis
+kubectl apply -f k8s/base/namespace.yaml
+kubectl apply -f k8s/base/redis-statefulset.yaml
+kubectl apply -f k8s/base/redis-service.yaml
+
+# Počkat na Redis
+kubectl rollout status statefulset/redis -n luncher
+
+# Server secret (nebo použít šablonu server-secret.yaml)
+kubectl create secret generic luncher-secrets -n luncher `
+  --from-literal=JWT_SECRET=dev-secret-change-me `
+  --from-literal=ADMIN_PASSWORD=admin
+
+# Server
+kubectl apply -f k8s/base/server-configmap.yaml
+kubectl apply -f k8s/base/server-deployment.yaml
+kubectl apply -f k8s/base/server-service.yaml
+kubectl apply -f k8s/base/server-pdb.yaml
+kubectl apply -f k8s/base/ingressroute.yaml
+
+# Počkat na server
+kubectl rollout status deploy/luncher -n luncher
+```
+
+## Testovací scénáře
+
+### Baseline
+
+```powershell
+kubectl get pods -n luncher -o wide
+# Ověř: 3 pody na 3 různých worker uzlech, status Running
+```
+
+### Rolling update bez výpadku
+
+V jednom terminálu posílej provoz:
+```powershell
+# Nainstaluj hey: go install github.com/rakyll/hey@latest
+hey -z 60s -c 20 http://luncher.localhost/api/health
+```
+
+Ve druhém terminálu spusť rollout:
+```powershell
+kubectl rollout restart deploy/luncher -n luncher
+```
+
+**Kritérium: 0 non-2xx odpovědí, 0 connection errors.**
+
+### Node drain
+
+```powershell
+kubectl cordon testik-worker2
+kubectl drain testik-worker2 --ignore-daemonsets --delete-emptydir-data
+# PDB zabrání souběžnému drainu druhého nodu
+kubectl get pods -n luncher -o wide  # pody se přeplánují
+kubectl uncordon testik-worker2
+```
+
+### Ověření Socket.io cross-pod
+
+1. Otevři dvě záložky prohlížeče na `http://luncher.localhost`
+2. Z jednoho podu vyvolej změnu:
+   ```powershell
+   kubectl exec -it deploy/luncher -n luncher -- curl -s -X POST localhost:3001/api/...
+   ```
+3. Ověř, že druhá záložka (pravděpodobně jiný pod) obdrží WebSocket event
+
+### Concurrent write test
+
+1. Otevři stejnou Pizza day objednávku ve dvou záložkách
+2. Simuluj souběžné odeslání (otevřít DevTools → síť → odeslat obě požadavky současně)
+3. Ověř Redis: `kubectl exec -it redis-0 -n luncher -- redis-cli JSON.GET luncher:<datum>`
+   — oba zápisy musí být zachovány (WATCH/MULTI retry)
+
+### Auto-rollout při změně Secret / ConfigMap
+
+Reloader automaticky spustí rolling restart, kdykoli se změní `luncher-secrets` nebo `luncher-config`:
+
+```powershell
+# Příklad: rotace admin hesla
+kubectl -n luncher patch secret luncher-secrets --type=merge `
+  -p '{"stringData":{"ADMIN_PASSWORD":"nove-heslo"}}'
+
+# Reloader detekuje změnu resourceVersion a patchne pod template
+kubectl rollout status deploy/luncher -n luncher
+
+# Ověř anotaci přidanou Reloaderem na pod template
+kubectl get deploy luncher -n luncher -o yaml | Select-String "STAKATER"
+```
+
+**Kritérium: pody se automaticky vyrolují bez ručního restartu. PDB zajistí, že alespoň jeden pod zůstane dostupný.**
+
+## Pořadí aplikace manifestů
+
+1. `reloader.yaml` (do `default` namespace — musí být před Deployment)
+2. `namespace.yaml`
+3. `redis-statefulset.yaml` + `redis-service.yaml`
+4. `server-configmap.yaml` + `server-secret.yaml`
+5. `server-deployment.yaml` + `server-service.yaml` + `server-pdb.yaml`
+6. `ingressroute.yaml`

k8s/base/ingressroute.yaml

@@ -0,0 +1,16 @@
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: luncher
+  namespace: luncher
+  annotations:
+    kubernetes.io/ingress.class: traefik
+spec:
+  entryPoints:
+    - web
+  routes:
+    - match: Host(`luncher.localhost`)
+      kind: Rule
+      services:
+        - name: luncher
+          port: 3001

k8s/base/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: luncher

k8s/base/redis-service.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: redis
+  namespace: luncher
+spec:
+  clusterIP: None  # headless — StatefulSet pod discovery
+  selector:
+    app: redis
+  ports:
+    - port: 6379
+      targetPort: 6379

k8s/base/redis-statefulset.yaml

@@ -0,0 +1,50 @@
+apiVersion: apps/v1
+kind: StatefulSet
+metadata:
+  name: redis
+  namespace: luncher
+spec:
+  serviceName: redis
+  replicas: 1
+  selector:
+    matchLabels:
+      app: redis
+  template:
+    metadata:
+      labels:
+        app: redis
+    spec:
+      containers:
+        - name: redis
+          # Redis Stack je nutný — aplikace používá JSON.GET / JSON.SET (modul RedisJSON)
+          image: redis/redis-stack-server:7.2.0-v14
+          ports:
+            - containerPort: 6379
+          resources:
+            requests:
+              cpu: 100m
+              memory: 128Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+          volumeMounts:
+            - name: data
+              mountPath: /data
+          readinessProbe:
+            exec:
+              command: ["redis-cli", "ping"]
+            initialDelaySeconds: 5
+            periodSeconds: 5
+          livenessProbe:
+            exec:
+              command: ["redis-cli", "ping"]
+            initialDelaySeconds: 10
+            periodSeconds: 10
+  volumeClaimTemplates:
+    - metadata:
+        name: data
+      spec:
+        accessModes: ["ReadWriteOnce"]
+        resources:
+          requests:
+            storage: 1Gi

k8s/base/reloader.yaml

@@ -0,0 +1,184 @@
+# stakater/Reloader v1.4.16
+# Zdroj: https://raw.githubusercontent.com/stakater/Reloader/v1.4.16/deployments/kubernetes/reloader.yaml
+# Aktualizace: stáhnout novou verzi ze stejné URL a nahradit tento soubor.
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: reloader-reloader
+  namespace: default
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: reloader-reloader-metadata-role
+  namespace: default
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - configmaps
+  verbs:
+  - list
+  - get
+  - watch
+  - create
+  - update
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: reloader-reloader-role
+rules:
+- apiGroups:
+  - ""
+  resources:
+  - secrets
+  - configmaps
+  verbs:
+  - list
+  - get
+  - watch
+- apiGroups:
+  - apps
+  resources:
+  - deployments
+  - daemonsets
+  - statefulsets
+  verbs:
+  - list
+  - get
+  - update
+  - patch
+- apiGroups:
+  - extensions
+  resources:
+  - deployments
+  - daemonsets
+  verbs:
+  - list
+  - get
+  - update
+  - patch
+- apiGroups:
+  - batch
+  resources:
+  - cronjobs
+  verbs:
+  - list
+  - get
+- apiGroups:
+  - batch
+  resources:
+  - jobs
+  verbs:
+  - create
+  - delete
+  - list
+  - get
+- apiGroups:
+  - ""
+  resources:
+  - events
+  verbs:
+  - create
+  - patch
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: reloader-reloader-metadata-rolebinding
+  namespace: default
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: reloader-reloader-metadata-role
+subjects:
+- kind: ServiceAccount
+  name: reloader-reloader
+  namespace: default
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRoleBinding
+metadata:
+  name: reloader-reloader-role-binding
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: ClusterRole
+  name: reloader-reloader-role
+subjects:
+- kind: ServiceAccount
+  name: reloader-reloader
+  namespace: default
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: reloader-reloader
+  namespace: default
+spec:
+  replicas: 1
+  revisionHistoryLimit: 2
+  selector:
+    matchLabels:
+      app: reloader-reloader
+  template:
+    metadata:
+      labels:
+        app: reloader-reloader
+    spec:
+      containers:
+      - env:
+        - name: GOMAXPROCS
+          valueFrom:
+            resourceFieldRef:
+              divisor: "1"
+              resource: limits.cpu
+        - name: GOMEMLIMIT
+          valueFrom:
+            resourceFieldRef:
+              divisor: "1"
+              resource: limits.memory
+        - name: RELOADER_NAMESPACE
+          valueFrom:
+            fieldRef:
+              fieldPath: metadata.namespace
+        - name: RELOADER_DEPLOYMENT_NAME
+          value: reloader-reloader
+        image: ghcr.io/stakater/reloader:v1.4.16
+        imagePullPolicy: IfNotPresent
+        livenessProbe:
+          failureThreshold: 5
+          httpGet:
+            path: /live
+            port: http
+          initialDelaySeconds: 10
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        name: reloader-reloader
+        ports:
+        - containerPort: 9090
+          name: http
+        readinessProbe:
+          failureThreshold: 5
+          httpGet:
+            path: /metrics
+            port: http
+          initialDelaySeconds: 10
+          periodSeconds: 10
+          successThreshold: 1
+          timeoutSeconds: 5
+        resources:
+          limits:
+            cpu: "1"
+            memory: 512Mi
+          requests:
+            cpu: 10m
+            memory: 512Mi
+        securityContext: {}
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65534
+        seccompProfile:
+          type: RuntimeDefault
+      serviceAccountName: reloader-reloader

k8s/base/server-configmap.yaml

@@ -0,0 +1,12 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: luncher-config
+  namespace: luncher
+data:
+  NODE_ENV: production
+  STORAGE: redis
+  REDIS_HOST: redis
+  REDIS_PORT: "6379"
+  PORT: "3001"
+  HOST: "0.0.0.0"

k8s/base/server-deployment.yaml

@@ -0,0 +1,85 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: luncher
+  namespace: luncher
+spec:
+  replicas: 3
+  selector:
+    matchLabels:
+      app: luncher
+  strategy:
+    type: RollingUpdate
+    rollingUpdate:
+      maxSurge: 0        # nelze přidat extra pod — každý worker je obsazen
+      maxUnavailable: 1  # nejdřív smaž starý pod, pak naplánuj nový
+  template:
+    metadata:
+      labels:
+        app: luncher
+      annotations:
+        reloader.stakater.com/auto: "true"
+    spec:
+      terminationGracePeriodSeconds: 30
+
+      # Rozmístit každý pod na jiný worker uzel
+      affinity:
+        podAntiAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            - labelSelector:
+                matchLabels:
+                  app: luncher
+              topologyKey: kubernetes.io/hostname
+
+      containers:
+        - name: luncher
+          image: luncher:ha-test
+          imagePullPolicy: IfNotPresent
+          ports:
+            - containerPort: 3001
+
+          envFrom:
+            - configMapRef:
+                name: luncher-config
+            - secretRef:
+                name: luncher-secrets
+
+          env:
+            # POD_ID pro leader election scheduleru připomínek
+            - name: POD_ID
+              valueFrom:
+                fieldRef:
+                  fieldPath: metadata.name
+
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 500m
+              memory: 512Mi
+
+          # Liveness — levná kontrola bez externích závislostí
+          livenessProbe:
+            httpGet:
+              path: /api/health
+              port: 3001
+            initialDelaySeconds: 10
+            periodSeconds: 10
+            failureThreshold: 3
+
+          # Readiness — kontroluje Redis; při shutdown vrací 503
+          readinessProbe:
+            httpGet:
+              path: /api/health/ready
+              port: 3001
+            initialDelaySeconds: 10
+            periodSeconds: 5
+            failureThreshold: 2
+
+          # preStop sleep: dá čas kube-proxy a Traefiku odebrat endpoint
+          # dřív než kontejner začne odmítat nová spojení
+          lifecycle:
+            preStop:
+              exec:
+                command: ["sleep", "5"]

k8s/base/server-pdb.yaml

@@ -0,0 +1,10 @@
+apiVersion: policy/v1
+kind: PodDisruptionBudget
+metadata:
+  name: luncher-pdb
+  namespace: luncher
+spec:
+  minAvailable: 2   # ze 3 replik, max 1 voluntary disruption najednou
+  selector:
+    matchLabels:
+      app: luncher

k8s/base/server-secret.yaml

@@ -0,0 +1,14 @@
+# Šablona — hodnoty jsou zástupné symboly.
+# Pro kind test vytvoř secret příkazem:
+#   kubectl create secret generic luncher-secrets -n luncher \
+#     --from-literal=JWT_SECRET=<your-secret> \
+#     --from-literal=ADMIN_PASSWORD=<your-password>
+apiVersion: v1
+kind: Secret
+metadata:
+  name: luncher-secrets
+  namespace: luncher
+type: Opaque
+stringData:
+  JWT_SECRET: CHANGE_ME
+  ADMIN_PASSWORD: CHANGE_ME

k8s/base/server-service.yaml

@@ -0,0 +1,11 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: luncher
+  namespace: luncher
+spec:
+  selector:
+    app: luncher
+  ports:
+    - port: 3001
+      targetPort: 3001

k8s/kind/testik.yaml

@@ -0,0 +1,16 @@
+kind: Cluster
+apiVersion: kind.x-k8s.io/v1alpha4
+nodes:
+  - role: control-plane
+    # Mapuje porty na Windows localhost — luncher.localhost resolves to 127.0.0.1
+    # Traefik na control-plane podu poslouchá na těchto portech přes hostPort
+    extraPortMappings:
+      - containerPort: 80
+        hostPort: 80
+        protocol: TCP
+      - containerPort: 443
+        hostPort: 443
+        protocol: TCP
+  - role: worker
+  - role: worker
+  - role: worker

run_dev.ps1

@@ -0,0 +1,23 @@
+# Spustí server a klienta v samostatných panelech jednoho okna Windows Terminalu.
+# Vyžaduje Windows Terminal (wt.exe) — výchozí součást Windows 11.
+
+$ErrorActionPreference = 'Stop'
+$ScriptDir = $PSScriptRoot
+
+Push-Location (Join-Path $ScriptDir 'types')
+try { yarn openapi-ts } finally { Pop-Location }
+
+if (-not (Get-Command wt.exe -ErrorAction SilentlyContinue)) {
+    Write-Error "wt.exe (Windows Terminal) nebyl nalezen. Nainstalujte z Microsoft Store nebo použijte run_dev.sh v WSL."
+    exit 1
+}
+
+$serverDir = Join-Path $ScriptDir 'server'
+$clientDir = Join-Path $ScriptDir 'client'
+
+# wt splits on ';' before respecting quoting, so encode the compound server command to avoid it
+$serverCmd    = '$env:NODE_ENV = ''development''; yarn startReload'
+$serverCmdB64 = [Convert]::ToBase64String([Text.Encoding]::Unicode.GetBytes($serverCmd))
+
+wt -w 0 new-tab --title 'luncher-server' -d $serverDir pwsh -NoExit -EncodedCommand $serverCmdB64 `; `
+   split-pane -H --title 'luncher-client' -d $clientDir pwsh -NoExit -Command "yarn start"

server/.env.template

@@ -48,3 +48,7 @@
 # Heslo pro bypass rate limitu na endpointu /api/food/refresh (pro skripty/admin).
 # Bez hesla může refresh volat každý přihlášený uživatel (podléhá rate limitu).
 # REFRESH_BYPASS_PASSWORD=
+
+# Admin heslo pro správu seznamu obchodů na stránce /objednani.
+# Bez hesla nelze přidávat ani odebírat obchody ze seznamu (POST/DELETE na /api/stores vrátí 403).
+# ADMIN_PASSWORD=

server/changelogs/2026-04-02.json

@@ -0,0 +1,3 @@
+[
+  "Zobrazení nabídky salátů z Pizza Chefie"
+]

server/changelogs/2026-04-28.json

@@ -0,0 +1,3 @@
+[
+  "Možnost úhrady celého účtu jednou osobou s rozesláním QR kódů ostatním (na Pizza day)"
+]

server/changelogs/2026-05-07.json

@@ -0,0 +1,3 @@
+[
+  "Skupinové objednávky s QR platbou — stránka /objednani (více skupin, každá z jiného obchodu, stavový automat open/locked/ordered)"
+]

server/package.json

@@ -29,6 +29,7 @@
     "typescript": "^5.9.3"
   },
   "dependencies": {
+    "@socket.io/redis-adapter": "^8.3.0",
     "axios": "^1.13.2",
     "cheerio": "^1.1.2",
     "cors": "^2.8.5",

server/src/auth.ts

@@ -9,13 +9,13 @@ import jwt from 'jsonwebtoken';
  */
 export function generateToken(login?: string, trusted?: boolean): string {
     if (!process.env.JWT_SECRET) {
-        throw Error("Není vyplněna proměnná prostředí JWT_SECRET");
+        throw new Error("Není vyplněna proměnná prostředí JWT_SECRET");
     }
     if (process.env.JWT_SECRET.length < 32) {
-        throw Error("Proměnná prostředí JWT_SECRET musí být minimálně 32 znaků");
+        throw new Error("Proměnná prostředí JWT_SECRET musí být minimálně 32 znaků");
     }
     if (!login || login.trim().length === 0) {
-        throw Error("Nebyl předán login");
+        throw new Error("Nebyl předán login");
     }
     const payload = { login, trusted: trusted || false, logoutUrl: process.env.LOGOUT_URL };
     return jwt.sign(payload, process.env.JWT_SECRET);
@@ -28,7 +28,7 @@ export function generateToken(login?: string, trusted?: boolean): string {
  */
 export function verify(token: string): boolean {
     if (!process.env.JWT_SECRET) {
-        throw Error("Není vyplněna proměnná prostředí JWT_SECRET");
+        throw new Error("Není vyplněna proměnná prostředí JWT_SECRET");
     }
     try {
         jwt.verify(token, process.env.JWT_SECRET);
@@ -45,10 +45,10 @@ export function verify(token: string): boolean {
  */
 export function getLogin(token?: string): string {
     if (!process.env.JWT_SECRET) {
-        throw Error("Není vyplněna proměnná prostředí JWT_SECRET");
+        throw new Error("Není vyplněna proměnná prostředí JWT_SECRET");
     }
     if (!token) {
-        throw Error("Nebyl předán token");
+        throw new Error("Nebyl předán token");
     }
     const payload: any = jwt.verify(token, process.env.JWT_SECRET);
     return payload.login;
@@ -61,10 +61,10 @@ export function getLogin(token?: string): string {
  */
 export function getTrusted(token?: string): boolean {
     if (!process.env.JWT_SECRET) {
-        throw Error("Není vyplněna proměnná prostředí JWT_SECRET");
+        throw new Error("Není vyplněna proměnná prostředí JWT_SECRET");
     }
     if (!token) {
-        throw Error("Nebyl předán token");
+        throw new Error("Nebyl předán token");
     }
     const payload: any = jwt.verify(token, process.env.JWT_SECRET);
     return payload.trusted || false;

server/src/chefie.ts

@@ -28,16 +28,16 @@ const buildPizzaUrl = (pizzaUrl: string) => {
     return `${baseUrl}/${pizzaUrl}`;
 }
 
-// Ceny krabic dle velikosti
+// Ceny krabic dle velikosti v haléřích
 const boxPrices: { [key: string]: number } = {
-    "30cm": 13,
-    "35cm": 15,
-    "40cm": 18,
-    "50cm": 25
+    "30cm": 1300,
+    "35cm": 1500,
+    "40cm": 1800,
+    "50cm": 2500
 }
 
-// Cena obalu pro salát
-const SALAT_BOX_PRICE = 13;
+// Cena obalu pro salát v haléřích
+const SALAT_BOX_PRICE = 1300;
 
 /**
  * Stáhne a scrapne aktuální pizzy ze stránek Pizza Chefie.
@@ -79,7 +79,7 @@ export async function downloadPizzy(mock: boolean): Promise<Pizza[]> {
         a.each((i, elm) => {
             const varId = Number.parseInt(elm.attribs.href.split('?varianta=')[1].trim());
             const size = $($(elm).contents().get(0)).text().trim();
-            const price = Number.parseInt($($(elm).contents().get(1)).text().trim().split(" Kč")[0]);
+            const price = Number.parseInt($($(elm).contents().get(1)).text().trim().split(" Kč")[0]) * 100;
             sizes.push({ varId, size, pizzaPrice: price, boxPrice: boxPrices[size], price: price + boxPrices[size] });
         })
         result.push({
@@ -119,7 +119,7 @@ export async function downloadSalaty(mock: boolean): Promise<Salat[]> {
             ingredients.push($(elm).text());
         });
         const priceText = $('.cena > span', salatHtml).first().text().trim();
-        const price = Number.parseInt(priceText.split(' Kč')[0]);
+        const price = Number.parseInt(priceText.split(' Kč')[0]) * 100;
         result.push({ name, ingredients, price: price + SALAT_BOX_PRICE });
     }
     return result;

server/src/groups.ts

@@ -0,0 +1,183 @@
+import crypto from "crypto";
+import getStorage from "./storage";
+import { getClientData, getToday, initIfNeeded } from "./service";
+import { getStores } from "./stores";
+import { removePendingQrsByGroupId } from "./pizza";
+import { ClientData, GroupState, MealSlot, OrderGroup, OrderGroupMember } from "../../types/gen/types.gen";
+import { formatDate } from "./utils";
+
+const storage = getStorage();
+
+async function getExtraData(date?: Date): Promise<ClientData> {
+    await initIfNeeded(date, MealSlot.EXTRA);
+    const data = await getClientData(date, MealSlot.EXTRA);
+    data.stores = await getStores();
+    return data;
+}
+
+function getExtraKey(date?: Date): string {
+    return `${formatDate(date ?? getToday())}_extra`;
+}
+
+async function saveExtraData(data: ClientData, date?: Date): Promise<ClientData> {
+    await storage.setData(getExtraKey(date), data);
+    return data;
+}
+
+function findGroup(data: ClientData, id: string): OrderGroup | undefined {
+    return data.groups?.find(g => g.id === id);
+}
+
+export async function createGroup(creatorLogin: string, name: string, date?: Date): Promise<ClientData> {
+    const stores = await getStores();
+    if (!stores.some(s => s.toLowerCase() === name.trim().toLowerCase())) {
+        throw new Error('Obchod není v seznamu povolených obchodů');
+    }
+    const data = await getExtraData(date);
+    const canonical = stores.find(s => s.toLowerCase() === name.trim().toLowerCase())!;
+    const group: OrderGroup = {
+        id: crypto.randomUUID(),
+        name: canonical,
+        creatorLogin,
+        state: GroupState.OPEN,
+        members: { [creatorLogin]: {} },
+    };
+    data.groups = [...(data.groups ?? []), group];
+    return saveExtraData(data, date);
+}
+
+export async function deleteGroup(login: string, groupId: string, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.creatorLogin !== login) throw new Error('Skupinu může smazat pouze zakladatel');
+    data.groups = (data.groups ?? []).filter(g => g.id !== groupId);
+    return saveExtraData(data, date);
+}
+
+export async function addGroupMember(login: string, groupId: string, targetLogin: string, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.state === GroupState.ORDERED) throw new Error('Skupinu ve stavu "objednáno" nelze upravovat');
+    if (login !== group.creatorLogin && login !== targetLogin) {
+        throw new Error('Přidat jiného uživatele může pouze zakladatel');
+    }
+    if (group.state === GroupState.LOCKED && login !== group.creatorLogin) {
+        throw new Error('Skupinu ve stavu "uzamčeno" může upravovat pouze zakladatel');
+    }
+    if (group.members[targetLogin]) throw new Error('Uživatel je již ve skupině');
+    group.members[targetLogin] = {};
+    return saveExtraData(data, date);
+}
+
+export async function removeGroupMember(login: string, groupId: string, targetLogin: string, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.state === GroupState.ORDERED) throw new Error('Skupinu ve stavu "objednáno" nelze upravovat');
+    if (login !== group.creatorLogin && login !== targetLogin) {
+        throw new Error('Odebrat jiného uživatele může pouze zakladatel');
+    }
+    if (group.state === GroupState.LOCKED && login !== group.creatorLogin) {
+        throw new Error('Skupinu ve stavu "uzamčeno" může upravovat pouze zakladatel');
+    }
+    if (targetLogin === group.creatorLogin) throw new Error('Zakladatel skupiny nemůže být odebrán');
+    if (!group.members[targetLogin]) throw new Error('Uživatel není ve skupině');
+    delete group.members[targetLogin];
+    return saveExtraData(data, date);
+}
+
+export async function updateGroupMember(login: string, groupId: string, targetLogin: string, patch: Partial<OrderGroupMember>, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.state === GroupState.ORDERED) throw new Error('Skupinu ve stavu "objednáno" nelze upravovat');
+    const isSelf = login === targetLogin;
+    const isCreator = login === group.creatorLogin;
+    if (!isSelf && !isCreator) throw new Error('Upravit jiného uživatele může pouze zakladatel');
+    if (!isCreator && group.state === GroupState.LOCKED) {
+        throw new Error('Skupinu ve stavu "uzamčeno" může upravovat pouze zakladatel');
+    }
+    if (!group.members[targetLogin]) throw new Error('Uživatel není ve skupině');
+    group.members[targetLogin] = { ...group.members[targetLogin], ...patch };
+    return saveExtraData(data, date);
+}
+
+const VALID_TRANSITIONS: Record<GroupState, GroupState[]> = {
+    [GroupState.OPEN]: [GroupState.LOCKED],
+    [GroupState.LOCKED]: [GroupState.OPEN, GroupState.ORDERED],
+    [GroupState.ORDERED]: [GroupState.LOCKED],
+};
+
+function getCurrentHHMM(): string {
+    const now = new Date();
+    return `${String(now.getHours()).padStart(2, '0')}:${String(now.getMinutes()).padStart(2, '0')}`;
+}
+
+export async function setGroupState(login: string, groupId: string, newState: GroupState, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.creatorLogin !== login) throw new Error('Stav může měnit pouze zakladatel');
+    if (!VALID_TRANSITIONS[group.state].includes(newState)) {
+        throw new Error(`Nelze přejít ze stavu "${group.state}" do stavu "${newState}"`);
+    }
+    if (newState === GroupState.ORDERED) {
+        group.orderedAt = getCurrentHHMM();
+    }
+    if (group.state === GroupState.ORDERED && newState === GroupState.LOCKED) {
+        const memberLogins = Object.keys(group.members);
+        await removePendingQrsByGroupId(memberLogins, groupId);
+        group.orderedAt = undefined;
+        group.deliveryAt = undefined;
+        group.qrGenerated = undefined;
+        for (const ml of memberLogins) {
+            group.members[ml] = { ...group.members[ml], paid: undefined };
+        }
+    }
+    group.state = newState;
+    return saveExtraData(data, date);
+}
+
+export async function markGroupQrGenerated(login: string, groupId: string, date?: Date): Promise<void> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.creatorLogin !== login) throw new Error('QR kódy může generovat pouze zakladatel');
+    if (group.state !== GroupState.ORDERED) throw new Error('QR kódy lze generovat pouze ve stavu "objednáno"');
+    group.qrGenerated = true;
+    await saveExtraData(data, date);
+}
+
+export async function markGroupMemberPaid(login: string, groupId: string, date?: Date): Promise<ClientData | null> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group || !group.members[login]) return null;
+    group.members[login] = { ...group.members[login], paid: true };
+    return saveExtraData(data, date);
+}
+
+export async function updateGroupFees(login: string, groupId: string, fees?: number, shipping?: number, tip?: number, discountType?: string, discountValue?: number, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.creatorLogin !== login) throw new Error('Poplatky může měnit pouze zakladatel');
+    if (group.state === GroupState.ORDERED) throw new Error('Skupinu ve stavu "objednáno" nelze upravovat');
+    if (fees !== undefined) group.fees = fees > 0 ? fees : undefined;
+    if (shipping !== undefined) group.shipping = shipping > 0 ? shipping : undefined;
+    if (tip !== undefined) group.tip = tip > 0 ? tip : undefined;
+    if (discountType !== undefined) group.discountType = (discountType as any) || undefined;
+    if (discountValue !== undefined) group.discountValue = discountValue > 0 ? discountValue : undefined;
+    return saveExtraData(data, date);
+}
+
+export async function updateGroupTimes(login: string, groupId: string, orderedAt?: string, deliveryAt?: string, date?: Date): Promise<ClientData> {
+    const data = await getExtraData(date);
+    const group = findGroup(data, groupId);
+    if (!group) throw new Error('Skupina nebyla nalezena');
+    if (group.creatorLogin !== login) throw new Error('Časy může měnit pouze zakladatel');
+    if (orderedAt !== undefined) group.orderedAt = orderedAt || undefined;
+    if (deliveryAt !== undefined) group.deliveryAt = deliveryAt || undefined;
+    return saveExtraData(data, date);
+}

server/src/index.ts

@@ -1,16 +1,19 @@
 import express from "express";
 import bodyParser from "body-parser";
 import cors from 'cors';
-import { getData, getDateForWeekIndex, getToday } from "./service";
+import { getData, addChoice, getDateForWeekIndex, getToday } from "./service";
+import { MealSlot } from "../../types/gen/types.gen";
 import dotenv from 'dotenv';
 import path from 'path';
 import { getQr } from "./qr";
 import { generateToken, getLogin, verify } from "./auth";
 import { getIsWeekend, InsufficientPermissions, PizzaDayConflictError, parseToken } from "./utils";
 import { getPendingQrs } from "./pizza";
-import { initWebsocket } from "./websocket";
-import { startReminderScheduler } from "./pushReminder";
+import { initWebsocket, initRedisAdapter, shutdownWebsocketClients, getWebsocket } from "./websocket";
+import { startReminderScheduler, stopReminderScheduler, releaseReminderLease, verifyQuickChoiceToken } from "./pushReminder";
 import { storageReady } from "./storage";
+import getStorage from "./storage";
+import { shutdownRedisStorage } from "./storage/redis";
 import pizzaDayRoutes from "./routes/pizzaDayRoutes";
 import foodRoutes, { refreshMetoda } from "./routes/foodRoutes";
 import votingRoutes from "./routes/votingRoutes";
@@ -20,27 +23,30 @@ import notificationRoutes from "./routes/notificationRoutes";
 import qrRoutes from "./routes/qrRoutes";
 import devRoutes from "./routes/devRoutes";
 import changelogRoutes from "./routes/changelogRoutes";
+import groupRoutes from "./routes/groupRoutes";
+import storeRoutes from "./routes/storeRoutes";
 
 const ENVIRONMENT = process.env.NODE_ENV ?? 'production';
 dotenv.config({ path: path.resolve(__dirname, `../.env.${ENVIRONMENT}`) });
 
-// Validace nastavení JWT tokenu - nemá bez něj smysl vůbec povolit server spustit
 if (!process.env.JWT_SECRET) {
-    throw Error("Není vyplněna proměnná prostředí JWT_SECRET");
+    throw new Error("Není vyplněna proměnná prostředí JWT_SECRET");
 }
 
 const app = express();
 const server = require("http").createServer(app);
+
+// Tune keep-alive timeouts to outlive Traefik's 60s idle timeout.
+// headersTimeout must be strictly greater than keepAliveTimeout.
+server.keepAliveTimeout = 65_000;
+server.headersTimeout   = 66_000;
+server.requestTimeout   = 30_000;
+
 initWebsocket(server);
 
-// Body-parser middleware for parsing JSON
 app.use(bodyParser.json());
+app.use(cors({ origin: '*' }));
 
-app.use(cors({
-    origin: '*'
-}));
-
-// Zapínatelný login přes hlavičky - pokud je zapnutý nepovolí "basicauth"
 const HTTP_REMOTE_USER_ENABLED = process.env.HTTP_REMOTE_USER_ENABLED === 'true' || false;
 const HTTP_REMOTE_USER_HEADER_NAME = process.env.HTTP_REMOTE_USER_HEADER_NAME ?? 'remote-user';
 if (HTTP_REMOTE_USER_ENABLED) {
@@ -48,19 +54,69 @@ if (HTTP_REMOTE_USER_ENABLED) {
         throw new Error('Je zapnutý login z hlaviček, ale není nastaven rozsah adres ze kterých hlavička může přijít.');
     }
     const HTTP_REMOTE_TRUSTED_IPS = process.env.HTTP_REMOTE_TRUSTED_IPS.split(',').map(ip => ip.trim());
-    //TODO: nevim jak udelat console.log pouze pro "debug"
-    //console.log("Budu věřit hlavičkám z: " + HTTP_REMOTE_TRUSTED_IPS);
     app.set('trust proxy', HTTP_REMOTE_TRUSTED_IPS);
     console.log('Zapnutý login přes hlavičky z proxy.');
 }
 
+// ─── Shutdown state ──────────────────────────────────────────────────────────
 
-// ----------- Metody nevyžadující token --------------
+let shuttingDown = false;
 
+async function shutdown(signal: string) {
+    if (shuttingDown) return;
+    shuttingDown = true;
+    console.log(`${signal} received — initiating graceful shutdown`);
+
+    // Hard-exit failsafe: fires before terminationGracePeriodSeconds (30s)
+    setTimeout(() => {
+        console.error('Graceful shutdown timed out, forcing exit');
+        process.exit(1);
+    }, 25_000).unref();
+
+    // Disconnect WebSocket clients so they reconnect to another pod
+    const io = getWebsocket();
+    io?.disconnectSockets(true);
+
+    // Stop accepting new HTTP connections and drain in-flight requests
+    (server as any).closeIdleConnections?.();
+    await new Promise<void>(resolve => server.close(() => resolve()));
+
+    // Stop reminder scheduler and release leader lease
+    stopReminderScheduler();
+    await releaseReminderLease();
+
+    // Shut down Redis pub/sub clients (Socket.io adapter)
+    await shutdownWebsocketClients();
+
+    // Shut down main Redis storage client
+    if (process.env.STORAGE?.toLowerCase() === 'redis') {
+        await shutdownRedisStorage();
+    }
+
+    console.log('Graceful shutdown complete');
+    process.exit(0);
+}
+
+process.on('SIGTERM', () => shutdown('SIGTERM'));
+process.on('SIGINT',  () => shutdown('SIGINT'));
+
+// ─── Routes — no auth required ───────────────────────────────────────────────
+
+/** Liveness probe — cheap, no external deps. */
 app.get("/api/health", (_req, res) => {
     res.status(200).json({ ok: true });
 });
 
+/** Readiness probe — verifies Redis connectivity and rejects traffic during shutdown. */
+app.get("/api/health/ready", async (_req, res) => {
+    if (shuttingDown) {
+        return res.status(503).json({ ok: false, reason: 'shutting down' });
+    }
+    const healthy = await getStorage().healthCheck?.() ?? true;
+    if (!healthy) return res.status(503).json({ ok: false, reason: 'storage unavailable' });
+    res.status(200).json({ ok: true });
+});
+
 app.get("/api/whoami", (req, res) => {
     if (!HTTP_REMOTE_USER_ENABLED) {
         res.status(403).json({ error: 'Není zapnuté přihlášení z hlaviček' });
@@ -73,21 +129,17 @@ app.get("/api/whoami", (req, res) => {
 })
 
 app.post("/api/login", (req, res) => {
-    if (HTTP_REMOTE_USER_ENABLED) { // je rovno app.enabled('trust proxy')
-        // Autentizace pomocí trusted headers
+    if (HTTP_REMOTE_USER_ENABLED) {
         const remoteUser = req.header(HTTP_REMOTE_USER_HEADER_NAME);
-        //const remoteName = req.header('remote-name');
         if (remoteUser && remoteUser.length > 0) {
             res.status(200).json(generateToken(Buffer.from(remoteUser, 'latin1').toString(), true));
         } else {
-            throw Error("Je zapnuto přihlášení přes hlavičky, ale nepřišla hlavička nebo ??");
+            throw new Error("Je zapnuto přihlášení přes hlavičky, ale nepřišla hlavička nebo ??");
         }
     } else {
-        // Klasická autentizace loginem
         if (!req.body?.login || req.body.login.trim().length === 0) {
-            throw Error("Nebyl předán login");
+            throw new Error("Nebyl předán login");
         }
-        // TODO zavést podmínky pro délku loginu (min i max)
         res.status(200).json(generateToken(req.body.login, false));
     }
 });
@@ -108,15 +160,29 @@ app.get("/api/qr", async (req, res) => {
     res.end(img);
 });
 
-// ----------------------------------------------------
+// ─── Semi-public routes ───────────────────────────────────────────────────────
 
-// Přeskočení auth pro refresh dat xd
 app.use("/api/food/refresh", refreshMetoda);
 
-/** Middleware ověřující JWT token */
+app.post("/api/notifications/push/quickChoice", async (req, res, next) => {
+    try {
+        const { login, token } = req.body ?? {};
+        if (!login || typeof login !== 'string' || !token || typeof token !== 'string') {
+            return res.status(400).json({ error: 'Chybí login nebo token' });
+        }
+        if (!verifyQuickChoiceToken(login, token)) {
+            return res.status(403).json({ error: 'Neplatný token' });
+        }
+        const updatedData = await addChoice(login, false, 'NEOBEDVAM', undefined, undefined);
+        getWebsocket().emit("message", updatedData);
+        res.status(200).json({});
+    } catch (e: any) { next(e); }
+});
+
+// ─── Auth middleware ──────────────────────────────────────────────────────────
+
 app.use("/api/", (req, res, next) => {
     if (HTTP_REMOTE_USER_ENABLED) {
-        // Autentizace pomocí trusted headers
         const remoteUser = req.header(HTTP_REMOTE_USER_HEADER_NAME);
         if (process.env.ENABLE_HEADERS_LOGGING === 'yes') {
             delete req.headers["cookie"]
@@ -139,7 +205,8 @@ app.use("/api/", (req, res, next) => {
     next();
 });
 
-/** Vrátí data pro aktuální den. */
+// ─── Authenticated routes ─────────────────────────────────────────────────────
+
 app.get("/api/data", async (req, res) => {
     let date = undefined;
     if (req.query.dayIndex != null && typeof req.query.dayIndex === 'string') {
@@ -148,11 +215,13 @@ app.get("/api/data", async (req, res) => {
             date = getDateForWeekIndex(parseInt(req.query.dayIndex));
         }
     } else if (getIsWeekend(getToday())) {
-        // Na víkendu zobrazíme pátek místo hlášky "Užívejte víkend"
         date = getDateForWeekIndex(4);
     }
-    const data = await getData(date);
-    // Připojíme nevyřízené QR kódy pro přihlášeného uživatele
+    const slotParam = typeof req.query.slot === 'string' ? req.query.slot as MealSlot : undefined;
+    if (slotParam && slotParam !== MealSlot.OBED && slotParam !== MealSlot.EXTRA) {
+        return res.status(400).json({ error: 'Neplatný slot' });
+    }
+    const data = await getData(date, slotParam);
     try {
         const login = getLogin(parseToken(req));
         const pendingQrs = await getPendingQrs(login);
@@ -165,7 +234,6 @@ app.get("/api/data", async (req, res) => {
     res.status(200).json(data);
 });
 
-// Ostatní routes
 app.use("/api/pizzaDay", pizzaDayRoutes);
 app.use("/api/food", foodRoutes);
 app.use("/api/voting", votingRoutes);
@@ -175,11 +243,15 @@ app.use("/api/notifications", notificationRoutes);
 app.use("/api/qr", qrRoutes);
 app.use("/api/dev", devRoutes);
 app.use("/api/changelogs", changelogRoutes);
+app.use("/api/groups", groupRoutes);
+app.use("/api/stores", storeRoutes);
 
-app.use('/stats', express.static('public'));
-app.use(express.static('public'));
+app.use(express.static(path.join(process.cwd(), 'public')));
+app.get('*splat', (_req, res) => {
+    res.sendFile(path.join(process.cwd(), 'public', 'index.html'));
+});
 
-// Middleware pro zpracování chyb
+// Error handling middleware
 app.use((err: any, req: any, res: any, next: any) => {
     if (err instanceof InsufficientPermissions) {
         res.status(403).send({ error: err.message })
@@ -191,18 +263,18 @@ app.use((err: any, req: any, res: any, next: any) => {
     next();
 });
 
+// ─── Bootstrap ────────────────────────────────────────────────────────────────
+
 const PORT = process.env.PORT ?? 3001;
 const HOST = process.env.HOST ?? '0.0.0.0';
 
-storageReady.then(() => {
+storageReady.then(async () => {
+    // Init Redis adapter after storage is connected (only in Redis mode)
+    if (process.env.STORAGE?.toLowerCase() === 'redis') {
+        await initRedisAdapter();
+    }
     server.listen(PORT, () => {
         console.log(`Server listening on ${HOST}, port ${PORT}`);
         startReminderScheduler();
     });
 });
-
-// Umožníme vypnutí serveru přes SIGINT, jinak Docker čeká než ho sestřelí
-process.on('SIGINT', function () {
-    console.log("\nSIGINT (Ctrl-C), vypínám server");
-    process.exit(0);
-});

server/src/mock.ts

@@ -661,30 +661,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 1,
                 size: "30cm",
-                pizzaPrice: 138,
-                boxPrice: 13,
-                price: 151
+                pizzaPrice: 13800,
+                boxPrice: 1300,
+                price: 15100
             },
             {
                 varId: 2,
                 size: "35cm",
-                pizzaPrice: 166,
-                boxPrice: 15,
-                price: 181
+                pizzaPrice: 16600,
+                boxPrice: 1500,
+                price: 18100
             },
             {
                 varId: 3,
                 size: "40cm",
-                pizzaPrice: 223,
-                boxPrice: 18,
-                price: 241
+                pizzaPrice: 22300,
+                boxPrice: 1800,
+                price: 24100
             },
             {
                 varId: 4,
                 size: "50cm",
-                pizzaPrice: 306,
-                boxPrice: 25,
-                price: 331
+                pizzaPrice: 30600,
+                boxPrice: 2500,
+                price: 33100
             }
         ]
     },
@@ -700,30 +700,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 6,
                 size: "30cm",
-                pizzaPrice: 142,
-                boxPrice: 13,
-                price: 155
+                pizzaPrice: 14200,
+                boxPrice: 1300,
+                price: 15500
             },
             {
                 varId: 7,
                 size: "35cm",
-                pizzaPrice: 172,
-                boxPrice: 15,
-                price: 187
+                pizzaPrice: 17200,
+                boxPrice: 1500,
+                price: 18700
             },
             {
                 varId: 8,
                 size: "40cm",
-                pizzaPrice: 233,
-                boxPrice: 18,
-                price: 251
+                pizzaPrice: 23300,
+                boxPrice: 1800,
+                price: 25100
             },
             {
                 varId: 9,
                 size: "50cm",
-                pizzaPrice: 316,
-                boxPrice: 25,
-                price: 341
+                pizzaPrice: 31600,
+                boxPrice: 2500,
+                price: 34100
             }
         ]
     },
@@ -741,30 +741,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 10,
                 size: "30cm",
-                pizzaPrice: 142,
-                boxPrice: 13,
-                price: 155
+                pizzaPrice: 14200,
+                boxPrice: 1300,
+                price: 15500
             },
             {
                 varId: 11,
                 size: "35cm",
-                pizzaPrice: 172,
-                boxPrice: 15,
-                price: 187
+                pizzaPrice: 17200,
+                boxPrice: 1500,
+                price: 18700
             },
             {
                 varId: 12,
                 size: "40cm",
-                pizzaPrice: 233,
-                boxPrice: 18,
-                price: 251
+                pizzaPrice: 23300,
+                boxPrice: 1800,
+                price: 25100
             },
             {
                 varId: 13,
                 size: "50cm",
-                pizzaPrice: 316,
-                boxPrice: 25,
-                price: 341
+                pizzaPrice: 31600,
+                boxPrice: 2500,
+                price: 34100
             }
         ]
     },
@@ -780,30 +780,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 14,
                 size: "30cm",
-                pizzaPrice: 142,
-                boxPrice: 13,
-                price: 155
+                pizzaPrice: 14200,
+                boxPrice: 1300,
+                price: 15500
             },
             {
                 varId: 15,
                 size: "35cm",
-                pizzaPrice: 172,
-                boxPrice: 15,
-                price: 187
+                pizzaPrice: 17200,
+                boxPrice: 1500,
+                price: 18700
             },
             {
                 varId: 16,
                 size: "40cm",
-                pizzaPrice: 233,
-                boxPrice: 18,
-                price: 251
+                pizzaPrice: 23300,
+                boxPrice: 1800,
+                price: 25100
             },
             {
                 varId: 17,
                 size: "50cm",
-                pizzaPrice: 294,
-                boxPrice: 25,
-                price: 319
+                pizzaPrice: 29400,
+                boxPrice: 2500,
+                price: 31900
             }
         ]
     },
@@ -821,30 +821,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 22,
                 size: "30cm",
-                pizzaPrice: 162,
-                boxPrice: 13,
-                price: 175
+                pizzaPrice: 16200,
+                boxPrice: 1300,
+                price: 17500
             },
             {
                 varId: 23,
                 size: "35cm",
-                pizzaPrice: 186,
-                boxPrice: 15,
-                price: 201
+                pizzaPrice: 18600,
+                boxPrice: 1500,
+                price: 20100
             },
             {
                 varId: 24,
                 size: "40cm",
-                pizzaPrice: 263,
-                boxPrice: 18,
-                price: 281
+                pizzaPrice: 26300,
+                boxPrice: 1800,
+                price: 28100
             },
             {
                 varId: 25,
                 size: "50cm",
-                pizzaPrice: 346,
-                boxPrice: 25,
-                price: 371
+                pizzaPrice: 34600,
+                boxPrice: 2500,
+                price: 37100
             }
         ]
     },
@@ -861,30 +861,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 26,
                 size: "30cm",
-                pizzaPrice: 162,
-                boxPrice: 13,
-                price: 175
+                pizzaPrice: 16200,
+                boxPrice: 1300,
+                price: 17500
             },
             {
                 varId: 27,
                 size: "35cm",
-                pizzaPrice: 186,
-                boxPrice: 15,
-                price: 201
+                pizzaPrice: 18600,
+                boxPrice: 1500,
+                price: 20100
             },
             {
                 varId: 28,
                 size: "40cm",
-                pizzaPrice: 263,
-                boxPrice: 18,
-                price: 281
+                pizzaPrice: 26300,
+                boxPrice: 1800,
+                price: 28100
             },
             {
                 varId: 29,
                 size: "50cm",
-                pizzaPrice: 346,
-                boxPrice: 25,
-                price: 371
+                pizzaPrice: 34600,
+                boxPrice: 2500,
+                price: 37100
             }
         ]
     },
@@ -902,30 +902,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 30,
                 size: "30cm",
-                pizzaPrice: 162,
-                boxPrice: 13,
-                price: 175
+                pizzaPrice: 16200,
+                boxPrice: 1300,
+                price: 17500
             },
             {
                 varId: 31,
                 size: "35cm",
-                pizzaPrice: 186,
-                boxPrice: 15,
-                price: 201
+                pizzaPrice: 18600,
+                boxPrice: 1500,
+                price: 20100
             },
             {
                 varId: 32,
                 size: "40cm",
-                pizzaPrice: 263,
-                boxPrice: 18,
-                price: 281
+                pizzaPrice: 26300,
+                boxPrice: 1800,
+                price: 28100
             },
             {
                 varId: 33,
                 size: "50cm",
-                pizzaPrice: 346,
-                boxPrice: 25,
-                price: 371
+                pizzaPrice: 34600,
+                boxPrice: 2500,
+                price: 37100
             }
         ]
     },
@@ -946,30 +946,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 34,
                 size: "30cm",
-                pizzaPrice: 162,
-                boxPrice: 13,
-                price: 175
+                pizzaPrice: 16200,
+                boxPrice: 1300,
+                price: 17500
             },
             {
                 varId: 35,
                 size: "35cm",
-                pizzaPrice: 186,
-                boxPrice: 15,
-                price: 201
+                pizzaPrice: 18600,
+                boxPrice: 1500,
+                price: 20100
             },
             {
                 varId: 36,
                 size: "40cm",
-                pizzaPrice: 263,
-                boxPrice: 18,
-                price: 281
+                pizzaPrice: 26300,
+                boxPrice: 1800,
+                price: 28100
             },
             {
                 varId: 37,
                 size: "50cm",
-                pizzaPrice: 346,
-                boxPrice: 25,
-                price: 371
+                pizzaPrice: 34600,
+                boxPrice: 2500,
+                price: 37100
             }
         ]
     },
@@ -987,30 +987,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 38,
                 size: "30cm",
-                pizzaPrice: 162,
-                boxPrice: 13,
-                price: 175
+                pizzaPrice: 16200,
+                boxPrice: 1300,
+                price: 17500
             },
             {
                 varId: 39,
                 size: "35cm",
-                pizzaPrice: 186,
-                boxPrice: 15,
-                price: 201
+                pizzaPrice: 18600,
+                boxPrice: 1500,
+                price: 20100
             },
             {
                 varId: 40,
                 size: "40cm",
-                pizzaPrice: 263,
-                boxPrice: 18,
-                price: 281
+                pizzaPrice: 26300,
+                boxPrice: 1800,
+                price: 28100
             },
             {
                 varId: 41,
                 size: "50cm",
-                pizzaPrice: 346,
-                boxPrice: 25,
-                price: 371
+                pizzaPrice: 34600,
+                boxPrice: 2500,
+                price: 37100
             }
         ]
     },
@@ -1028,30 +1028,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 42,
                 size: "30cm",
-                pizzaPrice: 172,
-                boxPrice: 13,
-                price: 185
+                pizzaPrice: 17200,
+                boxPrice: 1300,
+                price: 18500
             },
             {
                 varId: 43,
                 size: "35cm",
-                pizzaPrice: 212,
-                boxPrice: 15,
-                price: 227
+                pizzaPrice: 21200,
+                boxPrice: 1500,
+                price: 22700
             },
             {
                 varId: 44,
                 size: "40cm",
-                pizzaPrice: 293,
-                boxPrice: 18,
-                price: 311
+                pizzaPrice: 29300,
+                boxPrice: 1800,
+                price: 31100
             },
             {
                 varId: 45,
                 size: "50cm",
-                pizzaPrice: 376,
-                boxPrice: 25,
-                price: 401
+                pizzaPrice: 37600,
+                boxPrice: 2500,
+                price: 40100
             }
         ]
     },
@@ -1069,30 +1069,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 46,
                 size: "30cm",
-                pizzaPrice: 182,
-                boxPrice: 13,
-                price: 195
+                pizzaPrice: 18200,
+                boxPrice: 1300,
+                price: 19500
             },
             {
                 varId: 47,
                 size: "35cm",
-                pizzaPrice: 222,
-                boxPrice: 15,
-                price: 237
+                pizzaPrice: 22200,
+                boxPrice: 1500,
+                price: 23700
             },
             {
                 varId: 48,
                 size: "40cm",
-                pizzaPrice: 303,
-                boxPrice: 18,
-                price: 321
+                pizzaPrice: 30300,
+                boxPrice: 1800,
+                price: 32100
             },
             {
                 varId: 49,
                 size: "50cm",
-                pizzaPrice: 386,
-                boxPrice: 25,
-                price: 411
+                pizzaPrice: 38600,
+                boxPrice: 2500,
+                price: 41100
             }
         ]
     },
@@ -1114,30 +1114,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 50,
                 size: "30cm",
-                pizzaPrice: 182,
-                boxPrice: 13,
-                price: 195
+                pizzaPrice: 18200,
+                boxPrice: 1300,
+                price: 19500
             },
             {
                 varId: 51,
                 size: "35cm",
-                pizzaPrice: 222,
-                boxPrice: 15,
-                price: 237
+                pizzaPrice: 22200,
+                boxPrice: 1500,
+                price: 23700
             },
             {
                 varId: 52,
                 size: "40cm",
-                pizzaPrice: 303,
-                boxPrice: 18,
-                price: 321
+                pizzaPrice: 30300,
+                boxPrice: 1800,
+                price: 32100
             },
             {
                 varId: 53,
                 size: "50cm",
-                pizzaPrice: 396,
-                boxPrice: 25,
-                price: 421
+                pizzaPrice: 39600,
+                boxPrice: 2500,
+                price: 42100
             }
         ]
     },
@@ -1156,30 +1156,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 54,
                 size: "30cm",
-                pizzaPrice: 182,
-                boxPrice: 13,
-                price: 195
+                pizzaPrice: 18200,
+                boxPrice: 1300,
+                price: 19500
             },
             {
                 varId: 55,
                 size: "35cm",
-                pizzaPrice: 222,
-                boxPrice: 15,
-                price: 237
+                pizzaPrice: 22200,
+                boxPrice: 1500,
+                price: 23700
             },
             {
                 varId: 56,
                 size: "40cm",
-                pizzaPrice: 303,
-                boxPrice: 18,
-                price: 321
+                pizzaPrice: 30300,
+                boxPrice: 1800,
+                price: 32100
             },
             {
                 varId: 57,
                 size: "50cm",
-                pizzaPrice: 396,
-                boxPrice: 25,
-                price: 421
+                pizzaPrice: 39600,
+                boxPrice: 2500,
+                price: 42100
             }
         ]
     },
@@ -1199,30 +1199,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 58,
                 size: "30cm",
-                pizzaPrice: 182,
-                boxPrice: 13,
-                price: 195
+                pizzaPrice: 18200,
+                boxPrice: 1300,
+                price: 19500
             },
             {
                 varId: 59,
                 size: "35cm",
-                pizzaPrice: 222,
-                boxPrice: 15,
-                price: 237
+                pizzaPrice: 22200,
+                boxPrice: 1500,
+                price: 23700
             },
             {
                 varId: 60,
                 size: "40cm",
-                pizzaPrice: 303,
-                boxPrice: 18,
-                price: 321
+                pizzaPrice: 30300,
+                boxPrice: 1800,
+                price: 32100
             },
             {
                 varId: 61,
                 size: "50cm",
-                pizzaPrice: 396,
-                boxPrice: 25,
-                price: 421
+                pizzaPrice: 39600,
+                boxPrice: 2500,
+                price: 42100
             }
         ]
     },
@@ -1241,30 +1241,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 62,
                 size: "30cm",
-                pizzaPrice: 188,
-                boxPrice: 13,
-                price: 201
+                pizzaPrice: 18800,
+                boxPrice: 1300,
+                price: 20100
             },
             {
                 varId: 63,
                 size: "35cm",
-                pizzaPrice: 226,
-                boxPrice: 15,
-                price: 241
+                pizzaPrice: 22600,
+                boxPrice: 1500,
+                price: 24100
             },
             {
                 varId: 64,
                 size: "40cm",
-                pizzaPrice: 313,
-                boxPrice: 18,
-                price: 331
+                pizzaPrice: 31300,
+                boxPrice: 1800,
+                price: 33100
             },
             {
                 varId: 65,
                 size: "50cm",
-                pizzaPrice: 426,
-                boxPrice: 25,
-                price: 451
+                pizzaPrice: 42600,
+                boxPrice: 2500,
+                price: 45100
             }
         ]
     },
@@ -1283,30 +1283,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 66,
                 size: "30cm",
-                pizzaPrice: 188,
-                boxPrice: 13,
-                price: 201
+                pizzaPrice: 18800,
+                boxPrice: 1300,
+                price: 20100
             },
             {
                 varId: 67,
                 size: "35cm",
-                pizzaPrice: 226,
-                boxPrice: 15,
-                price: 241
+                pizzaPrice: 22600,
+                boxPrice: 1500,
+                price: 24100
             },
             {
                 varId: 68,
                 size: "40cm",
-                pizzaPrice: 313,
-                boxPrice: 18,
-                price: 331
+                pizzaPrice: 31300,
+                boxPrice: 1800,
+                price: 33100
             },
             {
                 varId: 69,
                 size: "50cm",
-                pizzaPrice: 426,
-                boxPrice: 25,
-                price: 451
+                pizzaPrice: 42600,
+                boxPrice: 2500,
+                price: 45100
             }
         ]
     },
@@ -1327,30 +1327,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 309,
                 size: "30cm",
-                pizzaPrice: 182,
-                boxPrice: 13,
-                price: 195
+                pizzaPrice: 18200,
+                boxPrice: 1300,
+                price: 19500
             },
             {
                 varId: 310,
                 size: "35cm",
-                pizzaPrice: 222,
-                boxPrice: 15,
-                price: 237
+                pizzaPrice: 22200,
+                boxPrice: 1500,
+                price: 23700
             },
             {
                 varId: 311,
                 size: "40cm",
-                pizzaPrice: 303,
-                boxPrice: 18,
-                price: 321
+                pizzaPrice: 30300,
+                boxPrice: 1800,
+                price: 32100
             },
             {
                 varId: 312,
                 size: "50cm",
-                pizzaPrice: 396,
-                boxPrice: 25,
-                price: 421
+                pizzaPrice: 39600,
+                boxPrice: 2500,
+                price: 42100
             }
         ]
     },
@@ -1369,30 +1369,30 @@ const MOCK_PIZZA_LIST = [
             {
                 varId: 394,
                 size: "30cm",
-                pizzaPrice: 188,
-                boxPrice: 13,
-                price: 201
+                pizzaPrice: 18800,
+                boxPrice: 1300,
+                price: 20100
             },
             {
                 varId: 395,
                 size: "35cm",
-                pizzaPrice: 226,
-                boxPrice: 15,
-                price: 241
+                pizzaPrice: 22600,
+                boxPrice: 1500,
+                price: 24100
             },
             {
                 varId: 396,
                 size: "40cm",
-                pizzaPrice: 313,
-                boxPrice: 18,
-                price: 331
+                pizzaPrice: 31300,
+                boxPrice: 1800,
+                price: 33100
             },
             {
                 varId: 397,
                 size: "50cm",
-                pizzaPrice: 426,
-                boxPrice: 25,
-                price: 451
+                pizzaPrice: 42600,
+                boxPrice: 2500,
+                price: 45100
             }
         ]
     }
@@ -1434,22 +1434,22 @@ const MOCK_SALAT_LIST = [
     {
         name: "Greek",
         ingredients: ["Salát", "Černé olivy", "Paprika mix", "Červená cibule", "Rajčata", "Okurka salátová", "Jogurtový dresing"],
-        price: 174 + 13,
+        price: (174 + 13) * 100,
     },
     {
         name: "Caesar",
         ingredients: ["Salát", "Rajčata", "Kuřecí maso", "Krutony", "Parmazán", "Caesar dresing", "Olivový olej"],
-        price: 184 + 13,
+        price: (184 + 13) * 100,
     },
     {
         name: "Šopský salát",
         ingredients: ["Salátová okurka", "Rajčata", "Paprika mix", "Červená cibule", "Balkánský sýr"],
-        price: 164 + 13,
+        price: (164 + 13) * 100,
     },
     {
         name: "Těstovinový salát",
         ingredients: ["Penne", "Okurka", "Rajčata", "Paprika mix", "Kuřecí maso", "Jogurtový dresing"],
-        price: 184 + 13,
+        price: (184 + 13) * 100,
     },
 ]
 

server/src/pizza.ts

@@ -10,10 +10,6 @@ import crypto from "crypto";
 const storage = getStorage();
 const PENDING_QR_PREFIX = 'pending_qr';
 
-/**
- * Vrátí seznam dostupných pizz pro dnešní den.
- * Stáhne je, pokud je pro dnešní den nemá.
- */
 export async function getPizzaList(): Promise<Pizza[] | undefined> {
     await initIfNeeded();
     let clientData = await getClientData(getToday());
@@ -24,25 +20,17 @@ export async function getPizzaList(): Promise<Pizza[] | undefined> {
     return Promise.resolve(clientData.pizzaList);
 }
 
-/**
- * Uloží seznam dostupných pizz pro dnešní den.
- *
- * @param pizzaList seznam dostupných pizz
- */
 export async function savePizzaList(pizzaList: Pizza[]): Promise<ClientData> {
     await initIfNeeded();
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    clientData.pizzaList = pizzaList;
-    clientData.pizzaListLastUpdate = formatDate(new Date());
-    await storage.setData(today, clientData);
-    return clientData;
+    return storage.updateData<ClientData>(today, (current) => {
+        const data = current ?? ({} as ClientData);
+        data.pizzaList = pizzaList;
+        data.pizzaListLastUpdate = formatDate(new Date());
+        return data;
+    });
 }
 
-/**
- * Vrátí seznam dostupných salátů pro dnešní den.
- * Stáhne je, pokud je pro dnešní den nemá.
- */
 export async function getSalatList(): Promise<Salat[] | undefined> {
     await initIfNeeded();
     let clientData = await getClientData(getToday());
@@ -53,406 +41,250 @@ export async function getSalatList(): Promise<Salat[] | undefined> {
     return Promise.resolve(clientData.salatList);
 }
 
-/**
- * Uloží seznam dostupných salátů pro dnešní den.
- *
- * @param salatList seznam dostupných salátů
- */
 export async function saveSalatList(salatList: Salat[]): Promise<ClientData> {
     await initIfNeeded();
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    clientData.salatList = salatList;
-    await storage.setData(today, clientData);
-    return clientData;
+    return storage.updateData<ClientData>(today, (current) => {
+        const data = current ?? ({} as ClientData);
+        data.salatList = salatList;
+        return data;
+    });
 }
 
-/**
- * Vytvoří pizza day pro aktuální den a vrátí data pro klienta.
- */
 export async function createPizzaDay(creator: string): Promise<ClientData> {
     await initIfNeeded();
-    const clientData = await getClientData(getToday());
-    if (clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den již existuje");
-    }
-    // TODO berka rychlooprava, vyřešit lépe - stahovat jednou, na jediném místě!
+    // Stáhneme pizzy a saláty před samotnou atomickou operací
     const [pizzaList, salatList] = await Promise.all([getPizzaList(), getSalatList()]);
-    const data: ClientData = { pizzaDay: { state: PizzaDayState.CREATED, creator, orders: [] }, pizzaList, salatList, ...clientData };
     const today = formatDate(getToday());
-    await storage.setData(today, data);
-    callNotifikace({ input: { udalost: UdalostEnum.ZAHAJENA_PIZZA, user: creator } })
-    return data;
+    const result = await storage.updateData<ClientData>(today, (current) => {
+        if (!current) throw Error("Data pro dnešní den nejsou inicializována");
+        if (current.pizzaDay) throw Error("Pizza day pro dnešní den již existuje");
+        return { ...current, pizzaDay: { state: PizzaDayState.CREATED, creator, orders: [] }, pizzaList, salatList };
+    });
+    callNotifikace({ input: { udalost: UdalostEnum.ZAHAJENA_PIZZA, user: creator } });
+    return result;
 }
 
-/**
- * Smaže pizza day pro aktuální den.
- */
 export async function deletePizzaDay(login: string): Promise<ClientData> {
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Login uživatele se neshoduje se zakladatelem Pizza Day");
-    }
-    delete clientData.pizzaDay;
     const today = formatDate(getToday());
-    await storage.setData(today, clientData);
-    return clientData;
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.creator !== login) throw Error("Login uživatele se neshoduje se zakladatelem Pizza Day");
+        const data = { ...current };
+        delete data.pizzaDay;
+        return data;
+    });
 }
 
-/**
- * Přidá objednávku pizzy uživateli.
- * 
- * @param login login uživatele
- * @param pizza zvolená pizza
- * @param size zvolená velikost pizzy
- */
 export async function addPizzaOrder(login: string, pizza: Pizza, size: PizzaSize) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
-    }
-    let order: PizzaOrder | undefined = clientData.pizzaDay?.orders?.find(o => o.customer === login);
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.state !== PizzaDayState.CREATED) throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
+        let order: PizzaOrder | undefined = current.pizzaDay.orders?.find(o => o.customer === login);
         if (!order) {
-        order = {
-            customer: login,
-            pizzaList: [],
-            totalPrice: 0,
-            hasQr: false,
-        }
-        clientData.pizzaDay.orders ??= [];
-        clientData.pizzaDay.orders.push(order);
-    }
-    const pizzaOrder: PizzaVariant = {
-        varId: size.varId,
-        name: pizza.name,
-        size: size.size,
-        price: size.price,
+            order = { customer: login, pizzaList: [], totalPrice: 0, hasQr: false };
+            current.pizzaDay.orders ??= [];
+            current.pizzaDay.orders.push(order);
         }
+        const pizzaOrder: PizzaVariant = { varId: size.varId, name: pizza.name, size: size.size, price: size.price };
         order.pizzaList ??= [];
         order.pizzaList.push(pizzaOrder);
         order.totalPrice += pizzaOrder.price;
-    await storage.setData(today, clientData);
-    return clientData;
+        return current;
+    });
 }
 
-/**
- * Přidá objednávku salátu uživateli.
- *
- * @param login login uživatele
- * @param salat zvolený salát
- */
 export async function addSalatOrder(login: string, salat: Salat) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
-    }
-    let order: PizzaOrder | undefined = clientData.pizzaDay?.orders?.find(o => o.customer === login);
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.state !== PizzaDayState.CREATED) throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
+        let order: PizzaOrder | undefined = current.pizzaDay.orders?.find(o => o.customer === login);
         if (!order) {
-        order = {
-            customer: login,
-            pizzaList: [],
-            totalPrice: 0,
-            hasQr: false,
-        }
-        clientData.pizzaDay.orders ??= [];
-        clientData.pizzaDay.orders.push(order);
-    }
-    const salatOrder: PizzaVariant = {
-        varId: 0,
-        name: salat.name,
-        size: "1 porce",
-        price: salat.price,
-        category: 'salat',
+            order = { customer: login, pizzaList: [], totalPrice: 0, hasQr: false };
+            current.pizzaDay.orders ??= [];
+            current.pizzaDay.orders.push(order);
         }
+        const salatOrder: PizzaVariant = { varId: 0, name: salat.name, size: "1 porce", price: salat.price, category: 'salat' };
         order.pizzaList ??= [];
         order.pizzaList.push(salatOrder);
         order.totalPrice += salatOrder.price;
-    await storage.setData(today, clientData);
-    return clientData;
+        return current;
+    });
 }
 
-/**
- * Odstraní všechny pizzy uživatele (celou jeho objednávku).
- * Pokud Pizza day neexistuje nebo není ve stavu CREATED, neudělá nic.
- *
- * @param login login uživatele
- * @param date datum, pro které se objednávka odstraňuje (výchozí je dnešek)
- * @returns aktuální data pro klienta
- */
 export async function removeAllUserPizzas(login: string, date?: Date) {
     const usedDate = date ?? getToday();
     const today = formatDate(usedDate);
-    const clientData = await getClientData(usedDate);
-
-    if (!clientData.pizzaDay) {
-        return clientData; // Pizza day neexistuje, není co mazat
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) return current ?? ({} as ClientData);
+        if (current.pizzaDay.state !== PizzaDayState.CREATED) return current;
+        const orderIndex = current.pizzaDay.orders!.findIndex(o => o.customer === login);
+        if (orderIndex >= 0) current.pizzaDay.orders!.splice(orderIndex, 1);
+        return current;
+    });
 }
 
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED) {
-        return clientData; // Pizza day není ve stavu CREATED, nelze mazat
-    }
-
-    const orderIndex = clientData.pizzaDay.orders!.findIndex(o => o.customer === login);
-    if (orderIndex >= 0) {
-        clientData.pizzaDay.orders!.splice(orderIndex, 1);
-        await storage.setData(today, clientData);
-    }
-
-    return clientData;
-}
-
-/**
- * Odstraní danou objednávku pizzy.
- *
- * @param login login uživatele
- * @param pizzaOrder objednávka pizzy
- */
 export async function removePizzaOrder(login: string, pizzaOrder: PizzaVariant) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    const orderIndex = clientData.pizzaDay.orders!.findIndex(o => o.customer === login);
-    if (orderIndex < 0) {
-        throw Error("Nebyly nalezeny žádné objednávky pro uživatele " + login);
-    }
-    const order = clientData.pizzaDay.orders![orderIndex];
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        const orderIndex = current.pizzaDay.orders!.findIndex(o => o.customer === login);
+        if (orderIndex < 0) throw Error("Nebyly nalezeny žádné objednávky pro uživatele " + login);
+        const order = current.pizzaDay.orders![orderIndex];
         const index = order.pizzaList!.findIndex(o => o.name === pizzaOrder.name && o.size === pizzaOrder.size);
-    if (index < 0) {
-        throw Error("Objednávka s danými parametry nebyla nalezena");
-    }
+        if (index < 0) throw Error("Objednávka s danými parametry nebyla nalezena");
         const price = order.pizzaList![index].price;
         order.pizzaList!.splice(index, 1);
         order.totalPrice -= price;
-    if (order.pizzaList!.length == 0) {
-        clientData.pizzaDay.orders!.splice(orderIndex, 1);
-    }
-    await storage.setData(today, clientData);
-    return clientData;
+        if (order.pizzaList!.length === 0) current.pizzaDay.orders!.splice(orderIndex, 1);
+        return current;
+    });
 }
 
-/**
- * Uzamkne možnost editovat objednávky pizzy.
- *
- * @param login login uživatele
- * @returns aktuální data pro uživatele
- */
 export async function lockPizzaDay(login: string) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Pizza day není spravován uživatelem " + login);
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED && clientData.pizzaDay.state !== PizzaDayState.ORDERED) {
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.creator !== login) throw Error("Pizza day není spravován uživatelem " + login);
+        if (current.pizzaDay.state !== PizzaDayState.CREATED && current.pizzaDay.state !== PizzaDayState.ORDERED) {
             throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED + " nebo " + PizzaDayState.ORDERED);
         }
-    clientData.pizzaDay.state = PizzaDayState.LOCKED;
-    await storage.setData(today, clientData);
-    return clientData;
+        current.pizzaDay.state = PizzaDayState.LOCKED;
+        return current;
+    });
 }
 
-/**
- * Odekmne možnost editovat objednávky pizzy.
- *
- * @param login login uživatele
- * @returns aktuální data pro uživatele
- */
 export async function unlockPizzaDay(login: string) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Pizza day není spravován uživatelem " + login);
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.LOCKED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.LOCKED);
-    }
-    clientData.pizzaDay.state = PizzaDayState.CREATED;
-    await storage.setData(today, clientData);
-    return clientData;
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.creator !== login) throw Error("Pizza day není spravován uživatelem " + login);
+        if (current.pizzaDay.state !== PizzaDayState.LOCKED) throw Error("Pizza day není ve stavu " + PizzaDayState.LOCKED);
+        current.pizzaDay.state = PizzaDayState.CREATED;
+        return current;
+    });
 }
 
-/**
- * Nastaví stav pizza day na "pizzy objednány".
- *
- * @param login login uživatele
- * @returns aktuální data pro uživatele
- */
 export async function finishPizzaOrder(login: string) {
     const today = formatDate(getToday());
-    const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Pizza day není spravován uživatelem " + login);
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.LOCKED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.LOCKED);
-    }
-    clientData.pizzaDay.state = PizzaDayState.ORDERED;
-    await storage.setData(today, clientData);
-    callNotifikace({ input: { udalost: UdalostEnum.OBJEDNANA_PIZZA, user: clientData?.pizzaDay?.creator } })
-    return clientData;
+    const result = await storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.creator !== login) throw Error("Pizza day není spravován uživatelem " + login);
+        if (current.pizzaDay.state !== PizzaDayState.LOCKED) throw Error("Pizza day není ve stavu " + PizzaDayState.LOCKED);
+        current.pizzaDay.state = PizzaDayState.ORDERED;
+        return current;
+    });
+    callNotifikace({ input: { udalost: UdalostEnum.OBJEDNANA_PIZZA, user: result.pizzaDay!.creator! } });
+    return result;
 }
 
-/**
- * Nastaví stav pizza day na "pizzy doručeny".
- * Vygeneruje QR kódy pro všechny objednatele, pokud objednávající má vyplněné číslo účtu a jméno.
- *
- * @param login login uživatele
- * @returns aktuální data pro uživatele
- */
 export async function finishPizzaDelivery(login: string, bankAccount?: string, bankAccountHolder?: string) {
     const today = formatDate(getToday());
+    // Načteme aktuální data pro přípravu QR (potřebujeme objednávky)
     const clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Pizza day není spravován uživatelem " + login);
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.ORDERED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.ORDERED);
-    }
-    clientData.pizzaDay.state = PizzaDayState.DELIVERED;
+    if (!clientData.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+    if (clientData.pizzaDay.creator !== login) throw Error("Pizza day není spravován uživatelem " + login);
+    if (clientData.pizzaDay.state !== PizzaDayState.ORDERED) throw Error("Pizza day není ve stavu " + PizzaDayState.ORDERED);
 
-    // Vygenerujeme QR kód, pokud k tomu máme data
+    // Generujeme QR kódy před atomickým zápisem
+    const pendingQrs: Array<{ customer: string; id: string; pendingQr: PendingQr }> = [];
     if (bankAccount?.length && bankAccountHolder?.length) {
         for (const order of clientData.pizzaDay.orders!) {
-            if (order.customer !== login) { // zatím platí creator = objednávající, a pro toho nemá QR kód smysl
+            if (order.customer !== login) {
                 const id = crypto.randomUUID();
-                let message = order.pizzaList!.map(item =>
+                const message = order.pizzaList!.map(item =>
                     item.category === 'salat' ? `Salát ${item.name}` : `Pizza ${item.name} (${item.size})`
                 ).join(', ');
-                await generateQr(order.customer, bankAccount, bankAccountHolder, order.totalPrice, message, id);
-                order.hasQr = true;
-                // Uložíme nevyřízený QR kód pro persistentní zobrazení
-                await addPendingQr(order.customer, {
-                    id,
-                    date: today,
-                    creator: login,
-                    totalPrice: order.totalPrice,
-                    purpose: message,
+                await generateQr(order.customer, bankAccount, bankAccountHolder, order.totalPrice / 100, message, id);
+                pendingQrs.push({
+                    customer: order.customer, id, pendingQr: {
+                        id, date: today, creator: login, totalPrice: order.totalPrice, purpose: message,
+                    },
                 });
             }
         }
     }
-    await storage.setData(today, clientData);
-    return clientData;
+
+    const result = await storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        current.pizzaDay.state = PizzaDayState.DELIVERED;
+        for (const { customer } of pendingQrs) {
+            const order = current.pizzaDay.orders!.find(o => o.customer === customer);
+            if (order) { order.hasQr = true; }
+        }
+        return current;
+    });
+
+    // Uložení nevyřízených QR kódů mimo hlavní transakci (per-user klíče)
+    for (const { customer, pendingQr } of pendingQrs) {
+        await addPendingQr(customer, pendingQr);
+    }
+
+    return result;
 }
 
-/**
- * Aktualizuje poznámku k Pizza day uživatele.
- * 
- * @param login přihlašovací jméno uživatele
- * @param note nová poznámka k Pizza day
- * @returns aktuální klientská data
- */
 export async function updatePizzaDayNote(login: string, note?: string) {
     const today = formatDate(getToday());
-    let clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED) {
-        throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
-    }
-    const myOrder = clientData.pizzaDay.orders!.find(o => o.customer === login);
-    if (!myOrder?.pizzaList?.length) {
-        throw Error("Pizza day neobsahuje žádné objednávky uživatele " + login);
-    }
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.state !== PizzaDayState.CREATED) throw Error("Pizza day není ve stavu " + PizzaDayState.CREATED);
+        const myOrder = current.pizzaDay.orders!.find(o => o.customer === login);
+        if (!myOrder?.pizzaList?.length) throw Error("Pizza day neobsahuje žádné objednávky uživatele " + login);
         myOrder.note = note;
-    await storage.setData(today, clientData);
-    return clientData;
+        return current;
+    });
 }
 
-/**
- * Aktualizuje příplatek uživatele k objednávce pizzy.
- * V případě nevyplnění ceny je příplatek odebrán.
- * 
- * @param login přihlašovací jméno aktuálního uživatele
- * @param targetLogin přihlašovací jméno uživatele, kterému je nastavován příplatek
- * @param text text popisující příplatek
- * @param price celková cena příplatku
- */
 export async function updatePizzaFee(login: string, targetLogin: string, text?: string, price?: number) {
     const today = formatDate(getToday());
-    let clientData = await getClientData(getToday());
-    if (!clientData.pizzaDay) {
-        throw Error("Pizza day pro dnešní den neexistuje");
-    }
-    if (clientData.pizzaDay.state !== PizzaDayState.CREATED) {
-        throw Error(`Pizza day není ve stavu ${PizzaDayState.CREATED}`);
-    }
-    if (clientData.pizzaDay.creator !== login) {
-        throw Error("Příplatky může měnit pouze zakladatel Pizza day");
-    }
-    const targetOrder = clientData.pizzaDay.orders!.find(o => o.customer === targetLogin);
-    if (!targetOrder?.pizzaList?.length) {
-        throw Error(`Pizza day neobsahuje žádné objednávky uživatele ${targetLogin}`);
-    }
+    return storage.updateData<ClientData>(today, (current) => {
+        if (!current?.pizzaDay) throw Error("Pizza day pro dnešní den neexistuje");
+        if (current.pizzaDay.state !== PizzaDayState.CREATED) throw Error(`Pizza day není ve stavu ${PizzaDayState.CREATED}`);
+        if (current.pizzaDay.creator !== login) throw Error("Příplatky může měnit pouze zakladatel Pizza day");
+        const targetOrder = current.pizzaDay.orders!.find(o => o.customer === targetLogin);
+        if (!targetOrder?.pizzaList?.length) throw Error(`Pizza day neobsahuje žádné objednávky uživatele ${targetLogin}`);
         if (!price) {
             delete targetOrder.fee;
         } else {
             targetOrder.fee = { text, price };
         }
-    // Přepočet ceny
-    targetOrder.totalPrice = targetOrder.pizzaList.reduce((price, pizzaOrder) => price + pizzaOrder.price, 0) + (targetOrder.fee?.price ?? 0);
-    await storage.setData(today, clientData);
-    return clientData;
+        targetOrder.totalPrice = targetOrder.pizzaList.reduce((p, o) => p + o.price, 0) + (targetOrder.fee?.price ?? 0);
+        return current;
+    });
 }
 
-/**
- * Vrátí klíč pro uložení nevyřízených QR kódů uživatele.
- */
 function getPendingQrKey(login: string): string {
     return `${PENDING_QR_PREFIX}_${login}`;
 }
 
-/**
- * Přidá nevyřízený QR kód pro uživatele.
- */
 export async function addPendingQr(login: string, pendingQr: PendingQr): Promise<void> {
-    const key = getPendingQrKey(login);
-    const existing = await storage.getData<PendingQr[]>(key) ?? [];
-    // Deduplikace podle id (ne podle data — jeden den může mít uživatel víc QR kódů)
-    if (!existing.some(qr => qr.id === pendingQr.id)) {
-        existing.push(pendingQr);
-        await storage.setData(key, existing);
-    }
+    await storage.updateData<PendingQr[]>(getPendingQrKey(login), (current) => {
+        const existing = current ?? [];
+        if (!existing.some(qr => qr.id === pendingQr.id)) existing.push(pendingQr);
+        return existing;
+    });
 }
 
-/**
- * Vrátí nevyřízené QR kódy pro uživatele.
- */
 export async function getPendingQrs(login: string): Promise<PendingQr[]> {
     return await storage.getData<PendingQr[]>(getPendingQrKey(login)) ?? [];
 }
 
-/**
- * Označí QR kód jako uhrazený (odstraní ho ze seznamu nevyřízených).
- */
-export async function dismissPendingQr(login: string, id: string): Promise<void> {
-    const key = getPendingQrKey(login);
-    const existing = await storage.getData<PendingQr[]>(key) ?? [];
-    const filtered = existing.filter(qr => qr.id !== id);
-    await storage.setData(key, filtered);
+export async function dismissPendingQr(login: string, id: string): Promise<PendingQr | undefined> {
+    let dismissed: PendingQr | undefined;
+    await storage.updateData<PendingQr[]>(getPendingQrKey(login), (current) => {
+        const existing = current ?? [];
+        dismissed = existing.find(qr => qr.id === id);
+        return existing.filter(qr => qr.id !== id);
+    });
+    return dismissed;
+}
+
+export async function removePendingQrsByGroupId(logins: string[], groupId: string): Promise<void> {
+    for (const login of logins) {
+        await storage.updateData<PendingQr[]>(getPendingQrKey(login), (current) => {
+            return (current ?? []).filter(qr => qr.groupId !== groupId);
+        });
+    }
 }

server/src/pushReminder.ts

@@ -1,11 +1,17 @@
 import webpush from 'web-push';
+import crypto from 'crypto';
 import getStorage from './storage';
+import { getRedisClient } from './storage/redis';
 import { getClientData, getToday } from './service';
 import { getIsWeekend } from './utils';
 import { LunchChoices } from '../../types';
 
 const storage = getStorage();
 const REGISTRY_KEY = 'push_reminder_registry';
+const LEADER_LEASE_KEY = 'luncher:reminder:leader';
+const LEASE_TTL_SECONDS = 90;
+
+const POD_ID = process.env.POD_ID ?? `local-${process.pid}`;
 
 interface RegistryEntry {
     time: string;
@@ -14,13 +20,12 @@ interface RegistryEntry {
 
 type Registry = Record<string, RegistryEntry>;
 
-/** Mapa login → datum (YYYY-MM-DD), kdy byl uživatel naposledy upozorněn. */
-const remindedToday = new Map<string, string>();
+/** Mapa login → timestamp (ms) posledního odeslání připomínky. */
+const lastReminded = new Map<string, number>();
 
-function getTodayDateString(): string {
-    const now = new Date();
-    return `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, '0')}-${String(now.getDate()).padStart(2, '0')}`;
-}
+const REMINDER_COOLDOWN_MS = 60 * 60 * 1000; // 60 minut mezi připomínkami
+
+let reminderInterval: ReturnType<typeof setInterval> | undefined;
 
 function getCurrentTimeHHMM(): string {
     const now = new Date();
@@ -38,28 +43,77 @@ function userHasChoice(choices: LunchChoices, login: string): boolean {
     return false;
 }
 
-async function getRegistry(): Promise<Registry> {
-    return await storage.getData<Registry>(REGISTRY_KEY) ?? {};
+/**
+ * Pokusí se získat nebo obnovit leader lease pro scheduler připomínek.
+ * Vrátí true pokud tato instance smí spustit připomínky.
+ * Při non-Redis storage vždy vrací true (single-process, leader election není potřeba).
+ */
+async function tryAcquireOrRenewLease(): Promise<boolean> {
+    if (process.env.STORAGE?.toLowerCase() !== 'redis') return true;
+    try {
+        const c = getRedisClient();
+        if (!c) return true;
+
+        // Zkusíme získat lease atomicky (SET NX EX)
+        const acquired = await c.set(LEADER_LEASE_KEY, POD_ID, { NX: true, EX: LEASE_TTL_SECONDS });
+        if (acquired !== null) return true; // lease čerstvě získána
+
+        // Pokud jsme ji nedostali, ověříme zda ji držíme my
+        const currentHolder = await c.get(LEADER_LEASE_KEY);
+        if (currentHolder === POD_ID) {
+            // Naše lease — obnovíme TTL
+            await c.set(LEADER_LEASE_KEY, POD_ID, { EX: LEASE_TTL_SECONDS });
+            return true;
+        }
+        return false; // lease drží jiná instance
+    } catch (e) {
+        console.error('Push reminder: chyba při získávání lease, připomínky budou odeslány', e);
+        return true; // při chybě raději spustíme, než vynecháme
+    }
 }
 
-async function saveRegistry(registry: Registry): Promise<void> {
-    await storage.setData(REGISTRY_KEY, registry);
+/** Uvolní leader lease při graceful shutdown. */
+export async function releaseReminderLease(): Promise<void> {
+    if (process.env.STORAGE?.toLowerCase() !== 'redis') return;
+    try {
+        const c = getRedisClient();
+        if (!c) return;
+        const currentHolder = await c.get(LEADER_LEASE_KEY);
+        if (currentHolder === POD_ID) {
+            await c.del(LEADER_LEASE_KEY);
+            console.log('Push reminder: lease uvolněna');
+        }
+    } catch (e) {
+        console.error('Push reminder: chyba při uvolňování lease', e);
+    }
+}
+
+/** Stopne scheduler připomínek. Volá se při graceful shutdown. */
+export function stopReminderScheduler(): void {
+    if (reminderInterval) {
+        clearInterval(reminderInterval);
+        reminderInterval = undefined;
+    }
 }
 
 /** Přidá nebo aktualizuje push subscription pro uživatele. */
 export async function subscribePush(login: string, subscription: webpush.PushSubscription, reminderTime: string): Promise<void> {
-    const registry = await getRegistry();
+    await storage.updateData<Registry>(REGISTRY_KEY, (current) => {
+        const registry = current ?? {};
         registry[login] = { time: reminderTime, subscription };
-    await saveRegistry(registry);
+        return registry;
+    });
     console.log(`Push reminder: uživatel ${login} přihlášen k připomínkám v ${reminderTime}`);
 }
 
 /** Odebere push subscription pro uživatele. */
 export async function unsubscribePush(login: string): Promise<void> {
-    const registry = await getRegistry();
+    await storage.updateData<Registry>(REGISTRY_KEY, (current) => {
+        const registry = current ?? {};
         delete registry[login];
-    await saveRegistry(registry);
-    remindedToday.delete(login);
+        return registry;
+    });
+    lastReminded.delete(login);
     console.log(`Push reminder: uživatel ${login} odhlášen z připomínek`);
 }
 
@@ -68,34 +122,33 @@ export function getVapidPublicKey(): string | undefined {
     return process.env.VAPID_PUBLIC_KEY;
 }
 
-/** Najde login uživatele podle push subscription endpointu. */
-export async function findLoginByEndpoint(endpoint: string): Promise<string | undefined> {
-    const registry = await getRegistry();
-    for (const [login, entry] of Object.entries(registry)) {
-        if (entry.subscription.endpoint === endpoint) {
-            return login;
+function generateQuickChoiceToken(login: string): string {
+    const today = new Date().toISOString().slice(0, 10);
+    const secret = process.env.JWT_SECRET ?? '';
+    return crypto.createHmac('sha256', secret).update(`${login}:${today}`).digest('hex');
 }
-    }
-    return undefined;
+
+/** Ověří jednorázový token z push notifikace. */
+export function verifyQuickChoiceToken(login: string, token: string): boolean {
+    if (!login || !token || token.length !== 64) return false;
+    const expected = generateQuickChoiceToken(login);
+    return crypto.timingSafeEqual(Buffer.from(expected, 'hex'), Buffer.from(token, 'hex'));
 }
 
 /** Zkontroluje a odešle připomínky uživatelům, kteří si nezvolili oběd. */
 async function checkAndSendReminders(): Promise<void> {
-    // Přeskočit víkendy
-    if (getIsWeekend(getToday())) {
-        return;
-    }
+    if (getIsWeekend(getToday())) return;
 
-    const registry = await getRegistry();
+    // Leader election — pouze jeden pod spouští připomínky
+    const isLeader = await tryAcquireOrRenewLease();
+    if (!isLeader) return;
+
+    const registry = await storage.getData<Registry>(REGISTRY_KEY) ?? {};
     const entries = Object.entries(registry);
-    if (entries.length === 0) {
-        return;
-    }
+    if (entries.length === 0) return;
 
     const currentTime = getCurrentTimeHHMM();
-    const todayStr = getTodayDateString();
 
-    // Získáme data pro dnešek jednou pro všechny uživatele
     let clientData;
     try {
         clientData = await getClientData(getToday());
@@ -104,44 +157,45 @@ async function checkAndSendReminders(): Promise<void> {
         return;
     }
 
+    const expiredLogins: string[] = [];
+
     for (const [login, entry] of entries) {
-        // Ještě nedosáhl čas připomínky
-        if (currentTime < entry.time) {
-            continue;
-        }
+        if (currentTime < entry.time) continue;
 
-        // Už jsme dnes připomenuli
-        if (remindedToday.get(login) === todayStr) {
-            continue;
-        }
+        const last = lastReminded.get(login) ?? 0;
+        if (Date.now() - last < REMINDER_COOLDOWN_MS) continue;
 
-        // Uživatel už má zvolenou možnost
-        if (clientData.choices && userHasChoice(clientData.choices, login)) {
-            continue;
-        }
+        if (clientData.choices && userHasChoice(clientData.choices, login)) continue;
 
-        // Odešleme push notifikaci
         try {
             await webpush.sendNotification(
                 entry.subscription,
                 JSON.stringify({
                     title: 'Luncher',
                     body: 'Ještě nemáte zvolený oběd!',
+                    login,
+                    token: generateQuickChoiceToken(login),
                 })
             );
-            remindedToday.set(login, todayStr);
+            lastReminded.set(login, Date.now());
             console.log(`Push reminder: odeslána připomínka uživateli ${login}`);
         } catch (error: any) {
             if (error.statusCode === 410 || error.statusCode === 404) {
-                // Subscription expirovala nebo je neplatná — odebereme z registry
                 console.log(`Push reminder: subscription uživatele ${login} expirovala, odebírám`);
-                delete registry[login];
-                await saveRegistry(registry);
+                expiredLogins.push(login);
             } else {
                 console.error(`Push reminder: chyba při odesílání notifikace uživateli ${login}:`, error);
             }
         }
     }
+
+    if (expiredLogins.length > 0) {
+        await storage.updateData<Registry>(REGISTRY_KEY, (current) => {
+            const r = current ?? {};
+            for (const login of expiredLogins) delete r[login];
+            return r;
+        });
+    }
 }
 
 /** Spustí scheduler pro kontrolu a odesílání připomínek každou minutu. */
@@ -157,7 +211,6 @@ export function startReminderScheduler(): void {
 
     webpush.setVapidDetails(subject, publicKey, privateKey);
 
-    // Spustíme kontrolu každou minutu
-    setInterval(checkAndSendReminders, 60_000);
-    console.log('Push reminder: scheduler spuštěn');
+    reminderInterval = setInterval(checkAndSendReminders, 60_000);
+    console.log(`Push reminder: scheduler spuštěn (POD_ID=${POD_ID})`);
 }

server/src/qr.ts

@@ -31,10 +31,10 @@ export function convertBbanToIban(bankAccountNumber: string): string {
     // Zatím napevno, nemá smysl řešit nic jiného než CZ
     iban = iban.replace('C', '12').replace('Z', '35');
     const remainder = BigInt(iban) % BigInt(97);
-    const checkDigits = BigInt(98) - remainder;
-    iban = `${COUNTRY_CODE}${checkDigits.toString()}${bankCode}${prefix}${accountNumber}`;
+    const checkDigits = (BigInt(98) - remainder).toString().padStart(2, '0');
+    iban = `${COUNTRY_CODE}${checkDigits}${bankCode}${prefix}${accountNumber}`;
     if (iban.length !== 24) {
-        throw Error("Neplatná délka sestaveného IBAN: " + iban.length + ", očekáváno 24");
+        throw new Error("Neplatná délka sestaveného IBAN: " + iban.length + ", očekáváno 24");
     }
     return iban;
 }
@@ -56,10 +56,8 @@ function createStorageKey(customerName: string, id: string): string {
  * @param id unikátní identifikátor (UUID) tohoto QR kódu
  */
 export async function generateQr(customerName: string, bankAccountNumber: string, bankAccountHolder: string, amount: number, message: string, id: string): Promise<void> {
-    // Zpráva pro příjemce nesmí dle standardu obsahovat '*' a být delší než 60 znaků
-    if (message.indexOf('*') >= 0) {
-        message = message.replace(/\*/g, '');
-    }
+    // Zpráva nesmí obsahovat '*' a znaky mimo ISO 8859-1; délka max. 60 znaků
+    message = message.replace(/[^\x00-\xff]/g, '').replace(/\*/g, '');
     if (message.length > 60) {
         message = message.substring(0, 60);
     }

server/src/routes/devRoutes.ts

@@ -189,7 +189,7 @@ router.post("/testPush", async (req, res, next) => {
         webpush.setVapidDetails(subject, publicKey, privateKey);
         await webpush.sendNotification(
             entry.subscription,
-            JSON.stringify({ title: 'Luncher test', body: 'Push notifikace fungují!' })
+            JSON.stringify({ title: 'Luncher test', body: 'Push notifikace fungují!', login })
         );
         res.status(200).json({ ok: true });
     } catch (e: any) { next(e) }

server/src/routes/foodRoutes.ts

@@ -4,7 +4,7 @@ import { addChoice, getDateForWeekIndex, getToday, removeChoice, removeChoices,
 import { getDayOfWeekIndex, parseToken, getFirstWorkDayOfWeek } from "../utils";
 import { getWebsocket } from "../websocket";
 import { callNotifikace } from "../notifikace";
-import { AddChoiceData, ChangeDepartureTimeData, RemoveChoiceData, RemoveChoicesData, UdalostEnum, UpdateNoteData } from "../../../types/gen/types.gen";
+import { AddChoiceData, ChangeDepartureTimeData, MealSlot, RemoveChoiceData, RemoveChoicesData, UdalostEnum, UpdateNoteData } from "../../../types/gen/types.gen";
 
 
 // RateLimit na refresh endpoint
@@ -56,24 +56,34 @@ function checkRateLimit(key: string, limit: number = RATE_LIMIT): boolean {
  */
 const parseValidateFutureDayIndex = (req: Request<{}, any, AddChoiceData["body"] | UpdateNoteData["body"]>) => {
     if (req.body.dayIndex == null) {
-        throw Error(`Nebyl předán index dne v týdnu.`);
+        throw new Error(`Nebyl předán index dne v týdnu.`);
     }
     const todayDayIndex = getDayOfWeekIndex(getToday());
     const dayIndex = req.body.dayIndex;
     if (isNaN(dayIndex)) {
-        throw Error(`Neplatný index dne v týdnu: ${req.body.dayIndex}`);
+        throw new Error(`Neplatný index dne v týdnu: ${req.body.dayIndex}`);
     }
     if (dayIndex < todayDayIndex) {
-        throw Error(`Předaný index dne v týdnu (${dayIndex}) nesmí být nižší než dnešní den (${todayDayIndex})`);
+        throw new Error(`Předaný index dne v týdnu (${dayIndex}) nesmí být nižší než dnešní den (${todayDayIndex})`);
     }
     return dayIndex;
 }
 
+const parseSlot = (body: Record<string, any>): MealSlot | undefined => {
+    const slot = body?.slot;
+    if (slot != null && slot !== MealSlot.OBED) {
+        throw new Error(`Neplatný slot: ${slot}`);
+    }
+    return slot ?? undefined;
+};
+
 const router = express.Router();
 
 router.post("/addChoice", async (req: Request<{}, any, AddChoiceData["body"]>, res, next) => {
     const login = getLogin(parseToken(req));
     const trusted = getTrusted(parseToken(req));
+    let slot: MealSlot | undefined;
+    try { slot = parseSlot(req.body); } catch (e: any) { return res.status(400).json({ error: e.message }); }
     let date = undefined;
     if (req.body.dayIndex != null) {
         let dayIndex;
@@ -85,7 +95,7 @@ router.post("/addChoice", async (req: Request<{}, any, AddChoiceData["body"]>, r
         date = getDateForWeekIndex(dayIndex);
     }
     try {
-        const data = await addChoice(login, trusted, req.body.locationKey, req.body.foodIndex, date);
+        const data = await addChoice(login, trusted, req.body.locationKey, req.body.foodIndex, date, slot);
         getWebsocket().emit("message", data);
         return res.status(200).json(data);
     } catch (e: any) { next(e) }
@@ -94,6 +104,8 @@ router.post("/addChoice", async (req: Request<{}, any, AddChoiceData["body"]>, r
 router.post("/removeChoices", async (req: Request<{}, any, RemoveChoicesData["body"]>, res, next) => {
     const login = getLogin(parseToken(req));
     const trusted = getTrusted(parseToken(req));
+    let slot: MealSlot | undefined;
+    try { slot = parseSlot(req.body); } catch (e: any) { return res.status(400).json({ error: e.message }); }
     let date = undefined;
     if (req.body.dayIndex != null) {
         let dayIndex;
@@ -105,7 +117,7 @@ router.post("/removeChoices", async (req: Request<{}, any, RemoveChoicesData["bo
         date = getDateForWeekIndex(dayIndex);
     }
     try {
-        const data = await removeChoices(login, trusted, req.body.locationKey, date);
+        const data = await removeChoices(login, trusted, req.body.locationKey, date, slot);
         getWebsocket().emit("message", data);
         res.status(200).json(data);
     } catch (e: any) { next(e) }
@@ -114,6 +126,8 @@ router.post("/removeChoices", async (req: Request<{}, any, RemoveChoicesData["bo
 router.post("/removeChoice", async (req: Request<{}, any, RemoveChoiceData["body"]>, res, next) => {
     const login = getLogin(parseToken(req));
     const trusted = getTrusted(parseToken(req));
+    let slot: MealSlot | undefined;
+    try { slot = parseSlot(req.body); } catch (e: any) { return res.status(400).json({ error: e.message }); }
     let date = undefined;
     if (req.body.dayIndex != null) {
         let dayIndex;
@@ -125,7 +139,7 @@ router.post("/removeChoice", async (req: Request<{}, any, RemoveChoiceData["body
         date = getDateForWeekIndex(dayIndex);
     }
     try {
-        const data = await removeChoice(login, trusted, req.body.locationKey, req.body.foodIndex, date);
+        const data = await removeChoice(login, trusted, req.body.locationKey, req.body.foodIndex, date, slot);
         getWebsocket().emit("message", data);
         res.status(200).json(data);
     } catch (e: any) { next(e) }
@@ -135,9 +149,11 @@ router.post("/updateNote", async (req: Request<{}, any, UpdateNoteData["body"]>,
     const login = getLogin(parseToken(req));
     const trusted = getTrusted(parseToken(req));
     const note = req.body.note;
+    let slot: MealSlot | undefined;
+    try { slot = parseSlot(req.body); } catch (e: any) { return res.status(400).json({ error: e.message }); }
     try {
         if (note && note.length > 70) {
-            throw Error("Poznámka může mít maximálně 70 znaků");
+            throw new Error("Poznámka může mít maximálně 70 znaků");
         }
         let date = undefined;
         if (req.body.dayIndex != null) {
@@ -149,7 +165,7 @@ router.post("/updateNote", async (req: Request<{}, any, UpdateNoteData["body"]>,
             }
             date = getDateForWeekIndex(dayIndex);
         }
-        const data = await updateNote(login, trusted, note, date);
+        const data = await updateNote(login, trusted, note, date, slot);
         getWebsocket().emit("message", data);
         res.status(200).json(data);
     } catch (e: any) { next(e) }
@@ -184,8 +200,10 @@ router.post("/jdemeObed", async (req, res, next) => {
 
 router.post("/updateBuyer", async (req, res, next) => {
     const login = getLogin(parseToken(req));
+    let slot: MealSlot | undefined;
+    try { slot = parseSlot(req.body ?? {}); } catch (e: any) { return res.status(400).json({ error: e.message }); }
     try {
-        const data = await updateBuyer(login);
+        const data = await updateBuyer(login, slot);
         getWebsocket().emit("message", data);
         res.status(200).json({});
     } catch (e: any) { next(e) }

server/src/routes/groupRoutes.ts

@@ -0,0 +1,156 @@
+import express, { Request } from "express";
+import { getLogin } from "../auth";
+import { parseToken } from "../utils";
+import { getWebsocket } from "../websocket";
+import { createGroup, deleteGroup, addGroupMember, removeGroupMember, updateGroupMember, setGroupState, updateGroupTimes, updateGroupFees } from "../groups";
+import { GroupState } from "../../../types/gen/types.gen";
+
+const router = express.Router();
+
+function broadcastExtra(data: any) {
+    getWebsocket().emit("message", data);
+}
+
+router.post("/create", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { name } = req.body ?? {};
+    if (!name || typeof name !== 'string') {
+        return res.status(400).json({ error: 'Nebyl předán název skupiny' });
+    }
+    try {
+        const data = await createGroup(login, name);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/delete", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    try {
+        const data = await deleteGroup(login, id);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/addMember", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, login: targetLogin } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    if (targetLogin !== undefined && (typeof targetLogin !== 'string' || targetLogin.trim() === '')) {
+        return res.status(400).json({ error: 'Neplatný login uživatele' });
+    }
+    const target = targetLogin ?? login;
+    try {
+        const data = await addGroupMember(login, id, target);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/removeMember", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, login: targetLogin } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    if (!targetLogin) return res.status(400).json({ error: 'Nebyl předán login uživatele' });
+    try {
+        const data = await removeGroupMember(login, id, targetLogin);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/updateMember", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, login: targetLogin, amount, note, surchargeText, surchargeAmount } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    if (!targetLogin) return res.status(400).json({ error: 'Nebyl předán login uživatele' });
+    const patch: Record<string, any> = {};
+    if (amount !== undefined) {
+        if (!Number.isInteger(amount) || amount < 0) {
+            return res.status(400).json({ error: 'Neplatná částka' });
+        }
+        patch.amount = amount;
+    }
+    if (note !== undefined) {
+        if (typeof note !== 'string') return res.status(400).json({ error: 'Neplatná poznámka' });
+        patch.note = note;
+    }
+    if (surchargeText !== undefined) {
+        if (typeof surchargeText !== 'string') return res.status(400).json({ error: 'Neplatný text příplatku' });
+        patch.surchargeText = surchargeText;
+    }
+    if (surchargeAmount !== undefined) {
+        if (!Number.isInteger(surchargeAmount) || surchargeAmount < 0) {
+            return res.status(400).json({ error: 'Neplatná výše příplatku' });
+        }
+        patch.surchargeAmount = surchargeAmount;
+    }
+    try {
+        const data = await updateGroupMember(login, id, targetLogin, patch);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/setState", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, state } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    if (!state || !Object.values(GroupState).includes(state)) {
+        return res.status(400).json({ error: 'Neplatný stav skupiny' });
+    }
+    try {
+        const data = await setGroupState(login, id, state as GroupState);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/updateFees", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, fees, shipping, tip, discountType, discountValue } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    if (fees !== undefined && (!Number.isInteger(fees) || fees < 0)) {
+        return res.status(400).json({ error: 'Neplatná výše poplatků' });
+    }
+    if (shipping !== undefined && (!Number.isInteger(shipping) || shipping < 0)) {
+        return res.status(400).json({ error: 'Neplatná výše dopravy' });
+    }
+    if (tip !== undefined && (!Number.isInteger(tip) || tip < 0)) {
+        return res.status(400).json({ error: 'Neplatná výše spropitného' });
+    }
+    if (discountType !== undefined && discountType !== '' && !['percent', 'fixed'].includes(discountType)) {
+        return res.status(400).json({ error: 'Neplatný typ slevy' });
+    }
+    if (discountValue !== undefined && (!Number.isInteger(discountValue) || discountValue < 0)) {
+        return res.status(400).json({ error: 'Neplatná výše slevy' });
+    }
+    try {
+        const data = await updateGroupFees(login, id, fees, shipping, tip, discountType, discountValue);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/updateTimes", async (req: Request, res, next) => {
+    const login = getLogin(parseToken(req));
+    const { id, orderedAt, deliveryAt } = req.body ?? {};
+    if (!id) return res.status(400).json({ error: 'Nebylo předáno ID skupiny' });
+    const timeRegex = /^([01]\d|2[0-3]):[0-5]\d$/;
+    if (orderedAt !== undefined && orderedAt !== '' && !timeRegex.test(orderedAt)) {
+        return res.status(400).json({ error: 'Neplatný formát času objednání (očekáváno HH:MM)' });
+    }
+    if (deliveryAt !== undefined && deliveryAt !== '' && !timeRegex.test(deliveryAt)) {
+        return res.status(400).json({ error: 'Neplatný formát času doručení (očekáváno HH:MM)' });
+    }
+    try {
+        const data = await updateGroupTimes(login, id, orderedAt, deliveryAt);
+        broadcastExtra(data);
+        res.status(200).json(data);
+    } catch (e: any) { next(e); }
+});
+
+export default router;

server/src/routes/notificationRoutes.ts

@@ -2,9 +2,7 @@ import express, { Request } from "express";
 import { getLogin } from "../auth";
 import { parseToken } from "../utils";
 import { getNotificationSettings, saveNotificationSettings } from "../notifikace";
-import { subscribePush, unsubscribePush, getVapidPublicKey, findLoginByEndpoint } from "../pushReminder";
-import { addChoice } from "../service";
-import { getWebsocket } from "../websocket";
+import { subscribePush, unsubscribePush, getVapidPublicKey } from "../pushReminder";
 import { UpdateNotificationSettingsData } from "../../../types";
 
 const router = express.Router();
@@ -66,21 +64,4 @@ router.post("/push/unsubscribe", async (req, res, next) => {
     } catch (e: any) { next(e) }
 });
 
-/** Rychlá akce z push notifikace — nastaví volbu bez JWT (identita přes subscription endpoint). */
-router.post("/push/quickChoice", async (req, res, next) => {
-    try {
-        const { endpoint } = req.body;
-        if (!endpoint) {
-            return res.status(400).json({ error: "Nebyl předán endpoint" });
-        }
-        const login = await findLoginByEndpoint(endpoint);
-        if (!login) {
-            return res.status(404).json({ error: "Subscription nenalezena" });
-        }
-        const data = await addChoice(login, false, 'NEOBEDVAM', undefined, undefined);
-        getWebsocket().emit("message", data);
-        res.status(200).json({});
-    } catch (e: any) { next(e) }
-});
-
 export default router;

server/src/routes/pizzaDayRoutes.ts

@@ -1,6 +1,7 @@
 import express, { Request } from "express";
 import { getLogin } from "../auth";
 import { createPizzaDay, deletePizzaDay, getPizzaList, getSalatList, addPizzaOrder, addSalatOrder, removePizzaOrder, lockPizzaDay, unlockPizzaDay, finishPizzaOrder, finishPizzaDelivery, updatePizzaDayNote, updatePizzaFee, dismissPendingQr } from "../pizza";
+import { markGroupMemberPaid } from "../groups";
 import { parseToken } from "../utils";
 import { getWebsocket } from "../websocket";
 import { AddPizzaData, DismissQrData, FinishDeliveryData, RemovePizzaData, UpdatePizzaDayNoteData, UpdatePizzaFeeData } from "../../../types";
@@ -29,10 +30,10 @@ router.post("/add", async (req: Request<{}, any, AddPizzaData["body"]>, res) =>
         const salatIndex = req.body.salatIndex;
         const salaty = await getSalatList();
         if (!salaty) {
-            throw Error("Selhalo získání seznamu dostupných salátů.");
+            throw new Error("Selhalo získání seznamu dostupných salátů.");
         }
         if (!salaty[salatIndex]) {
-            throw Error("Neplatný index salátu: " + salatIndex);
+            throw new Error("Neplatný index salátu: " + salatIndex);
         }
         const data = await addSalatOrder(login, salaty[salatIndex]);
         getWebsocket().emit("message", data);
@@ -40,22 +41,22 @@ router.post("/add", async (req: Request<{}, any, AddPizzaData["body"]>, res) =>
     } else {
         // Přidání pizzy
         if (req.body?.pizzaIndex === undefined || isNaN(req.body.pizzaIndex)) {
-            throw Error("Nebyl předán index pizzy ani salátu");
+            throw new Error("Nebyl předán index pizzy ani salátu");
         }
         const pizzaIndex = req.body.pizzaIndex;
         if (req.body?.pizzaSizeIndex === undefined || isNaN(req.body.pizzaSizeIndex)) {
-            throw Error("Nebyl předán index velikosti pizzy");
+            throw new Error("Nebyl předán index velikosti pizzy");
         }
         const pizzaSizeIndex = req.body.pizzaSizeIndex;
         let pizzy = await getPizzaList();
         if (!pizzy) {
-            throw Error("Selhalo získání seznamu dostupných pizz.");
+            throw new Error("Selhalo získání seznamu dostupných pizz.");
         }
         if (!pizzy[pizzaIndex]) {
-            throw Error("Neplatný index pizzy: " + pizzaIndex);
+            throw new Error("Neplatný index pizzy: " + pizzaIndex);
         }
         if (!pizzy[pizzaIndex].sizes[pizzaSizeIndex]) {
-            throw Error("Neplatný index velikosti pizzy: " + pizzaSizeIndex);
+            throw new Error("Neplatný index velikosti pizzy: " + pizzaSizeIndex);
         }
         const data = await addPizzaOrder(login, pizzy[pizzaIndex], pizzy[pizzaIndex].sizes[pizzaSizeIndex]);
         getWebsocket().emit("message", data);
@@ -66,7 +67,7 @@ router.post("/add", async (req: Request<{}, any, AddPizzaData["body"]>, res) =>
 router.post("/remove", async (req: Request<{}, any, RemovePizzaData["body"]>, res) => {
     const login = getLogin(parseToken(req));
     if (!req.body?.pizzaOrder) {
-        throw Error("Nebyla předána objednávka");
+        throw new Error("Nebyla předána objednávka");
     }
     const data = await removePizzaOrder(login, req.body?.pizzaOrder);
     getWebsocket().emit("message", data);
@@ -105,7 +106,7 @@ router.post("/updatePizzaDayNote", async (req: Request<{}, any, UpdatePizzaDayNo
     const login = getLogin(parseToken(req));
     try {
         if (req.body.note && req.body.note.length > 70) {
-            throw Error("Poznámka může mít maximálně 70 znaků");
+            throw new Error("Poznámka může mít maximálně 70 znaků");
         }
         const data = await updatePizzaDayNote(login, req.body.note);
         getWebsocket().emit("message", data);
@@ -132,7 +133,11 @@ router.post("/dismissQr", async (req: Request<{}, any, DismissQrData["body"]>, r
         return res.status(400).json({ error: "Nebyl předán identifikátor QR kódu" });
     }
     try {
-        await dismissPendingQr(login, req.body.id);
+        const dismissed = await dismissPendingQr(login, req.body.id);
+        if (dismissed?.groupId) {
+            const updatedExtra = await markGroupMemberPaid(login, dismissed.groupId);
+            if (updatedExtra) getWebsocket().emit("message", updatedExtra);
+        }
         res.status(200).json({});
     } catch (e: any) { next(e) }
 });

server/src/routes/qrRoutes.ts

@@ -3,6 +3,8 @@ import { getLogin } from "../auth";
 import { parseToken, formatDate } from "../utils";
 import { generateQr } from "../qr";
 import { addPendingQr } from "../pizza";
+import { markGroupQrGenerated } from "../groups";
+import { emitToUser } from "../websocket";
 import { GenerateQrData } from "../../../types";
 import crypto from "crypto";
 
@@ -14,7 +16,7 @@ const router = express.Router();
 router.post("/generate", async (req: Request<{}, any, GenerateQrData["body"]>, res, next) => {
     const login = getLogin(parseToken(req));
     try {
-        const { recipients, bankAccount, bankAccountHolder } = req.body;
+        const { recipients, bankAccount, bankAccountHolder, groupId } = req.body;
 
         if (!recipients || !Array.isArray(recipients) || recipients.length === 0) {
             return res.status(400).json({ error: "Nebyl předán seznam příjemců" });
@@ -35,27 +37,29 @@ router.post("/generate", async (req: Request<{}, any, GenerateQrData["body"]>, r
             if (!recipient.purpose || recipient.purpose.trim().length === 0) {
                 return res.status(400).json({ error: `Příjemce ${recipient.login} nemá vyplněný účel platby` });
             }
-            if (typeof recipient.amount !== 'number' || recipient.amount <= 0) {
+            if (!Number.isInteger(recipient.amount) || recipient.amount <= 0) {
                 return res.status(400).json({ error: `Příjemce ${recipient.login} má neplatnou částku` });
             }
-            // Validace max 2 desetinná místa
-            const amountStr = recipient.amount.toString();
-            if (amountStr.includes('.') && amountStr.split('.')[1].length > 2) {
-                return res.status(400).json({ error: `Částka pro ${recipient.login} má více než 2 desetinná místa` });
-            }
 
             // Vygenerovat QR kód
             const id = crypto.randomUUID();
-            await generateQr(recipient.login, bankAccount, bankAccountHolder, recipient.amount, recipient.purpose, id);
+            await generateQr(recipient.login, bankAccount, bankAccountHolder, recipient.amount / 100, recipient.purpose, id);
 
-            // Uložit jako nevyřízený QR kód
-            await addPendingQr(recipient.login, {
+            // Uložit jako nevyřízený QR kód a okamžitě doručit příjemci
+            const pendingQr = {
                 id,
                 date: today,
                 creator: login,
                 totalPrice: recipient.amount,
                 purpose: recipient.purpose,
-            });
+                ...(groupId ? { groupId } : {}),
+            };
+            await addPendingQr(recipient.login, pendingQr);
+            emitToUser(recipient.login, 'pendingQr', pendingQr);
+        }
+
+        if (groupId) {
+            await markGroupQrGenerated(login, groupId);
         }
 
         res.status(200).json({ success: true, count: recipients.length });

server/src/routes/storeRoutes.ts

@@ -0,0 +1,51 @@
+import express from "express";
+import { getStores, addStore, removeStore } from "../stores";
+
+const router = express.Router();
+
+router.get("/", async (_req, res, next) => {
+    try {
+        const stores = await getStores();
+        res.status(200).json(stores);
+    } catch (e: any) { next(e); }
+});
+
+router.post("/add", async (req, res, next) => {
+    const { name, heslo } = req.body ?? {};
+    if (!name || typeof name !== 'string') {
+        return res.status(400).json({ error: 'Nebyl předán název obchodu' });
+    }
+    if (!heslo || typeof heslo !== 'string') {
+        return res.status(400).json({ error: 'Nebylo předáno heslo' });
+    }
+    try {
+        const stores = await addStore(name, heslo);
+        res.status(200).json(stores);
+    } catch (e: any) {
+        if (e.message === 'UNAUTHORIZED') {
+            return res.status(403).json({ error: 'Nesprávné heslo' });
+        }
+        next(e);
+    }
+});
+
+router.post("/delete", async (req, res, next) => {
+    const { name, heslo } = req.body ?? {};
+    if (!name || typeof name !== 'string') {
+        return res.status(400).json({ error: 'Nebyl předán název obchodu' });
+    }
+    if (!heslo || typeof heslo !== 'string') {
+        return res.status(400).json({ error: 'Nebylo předáno heslo' });
+    }
+    try {
+        const stores = await removeStore(name, heslo);
+        res.status(200).json(stores);
+    } catch (e: any) {
+        if (e.message === 'UNAUTHORIZED') {
+            return res.status(403).json({ error: 'Nesprávné heslo' });
+        }
+        next(e);
+    }
+});
+
+export default router;

server/src/service.ts

@@ -3,11 +3,17 @@ import getStorage from "./storage";
 import { getMenuSladovnicka, getMenuTechTower, getMenuZastavkaUmichala, getMenuSenkSerikova, StaleWeekError } from "./restaurants";
 import { getTodayMock } from "./mock";
 import { removeAllUserPizzas } from "./pizza";
-import { ClientData, DepartureTime, LunchChoice, PizzaDayState, Restaurant, RestaurantDayMenu, WeekMenu } from "../../types/gen/types.gen";
+import { getStores } from "./stores";
+import { ClientData, DepartureTime, LunchChoice, MealSlot, PizzaDayState, Restaurant, RestaurantDayMenu, WeekMenu } from "../../types/gen/types.gen";
 
 const storage = getStorage();
 const MENU_PREFIX = 'menu';
 
+function getDataKey(date: Date, slot?: MealSlot): string {
+    const base = formatDate(date);
+    return slot === MealSlot.EXTRA ? `${base}_extra` : base;
+}
+
 /** Vrátí dnešní datum, případně fiktivní datum pro účely vývoje a testování. */
 export function getToday(): Date {
     if (process.env.MOCK_DATA === 'true') {
@@ -43,8 +49,11 @@ export function getEmptyData(date?: Date): ClientData {
 /**
  * Vrátí veškerá klientská data pro předaný den, nebo aktuální den, pokud není předán.
  */
-export async function getData(date?: Date): Promise<ClientData> {
-    const clientData = await getClientData(date);
+export async function getData(date?: Date, slot?: MealSlot): Promise<ClientData> {
+    const clientData = await getClientData(date, slot);
+    if (slot === MealSlot.EXTRA) {
+        clientData.stores = await getStores();
+    } else {
         clientData.menus = {
             SLADOVNICKA: await getRestaurantMenu('SLADOVNICKA', date),
             // UMOTLIKU: await getRestaurantMenu('UMOTLIKU', date),
@@ -52,6 +61,7 @@ export async function getData(date?: Date): Promise<ClientData> {
             ZASTAVKAUMICHALA: await getRestaurantMenu('ZASTAVKAUMICHALA', date),
             SENKSERIKOVA: await getRestaurantMenu('SENKSERIKOVA', date),
         }
+    }
     return clientData;
 }
 
@@ -290,8 +300,8 @@ function generateMenuWarnings(menu: RestaurantDayMenu): string[] {
  * 
  * @param date datum
  */
-export async function initIfNeeded(date?: Date) {
-    const usedDate = formatDate(date ?? getToday());
+export async function initIfNeeded(date?: Date, slot?: MealSlot) {
+    const usedDate = getDataKey(date ?? getToday(), slot);
     const hasData = await storage.hasData(usedDate);
     if (!hasData) {
         await storage.setData(usedDate, getEmptyData(date || getToday()));
@@ -307,20 +317,19 @@ export async function initIfNeeded(date?: Date) {
  * @param date datum, ke kterému se volba vztahuje
  * @returns 
  */
-export async function removeChoices(login: string, trusted: boolean, locationKey: LunchChoice, date?: Date) {
-    const selectedDay = formatDate(date ?? getToday());
-    let data = await getClientData(date);
-    validateTrusted(data, login, trusted);
-    if (locationKey in data.choices) {
-        if (data.choices[locationKey] && login in data.choices[locationKey]) {
-            delete data.choices[locationKey][login]
-            if (Object.keys(data.choices[locationKey]).length === 0) {
-                delete data.choices[locationKey]
-            }
-            await storage.setData(selectedDay, data);
-        }
+export async function removeChoices(login: string, trusted: boolean, locationKey: LunchChoice, date?: Date, slot?: MealSlot) {
+    const selectedDay = getDataKey(date ?? getToday(), slot);
+    // Validate trusted flag against current data before atomic update
+    const snapshot = await getClientData(date, slot);
+    validateTrusted(snapshot, login, trusted);
+    return storage.updateData<ClientData>(selectedDay, (current) => {
+        const data = current ?? getEmptyData(date);
+        if (locationKey in data.choices && data.choices[locationKey] && login in data.choices[locationKey]) {
+            delete data.choices[locationKey][login];
+            if (Object.keys(data.choices[locationKey]).length === 0) delete data.choices[locationKey];
         }
         return data;
+    });
 }
 
 /**
@@ -334,20 +343,18 @@ export async function removeChoices(login: string, trusted: boolean, locationKey
  * @param date datum, ke kterému se volba vztahuje
  * @returns 
  */
-export async function removeChoice(login: string, trusted: boolean, locationKey: LunchChoice, foodIndex: number, date?: Date) {
-    const selectedDay = formatDate(date ?? getToday());
-    let data = await getClientData(date);
-    validateTrusted(data, login, trusted);
-    if (locationKey in data.choices) {
-        if (data.choices[locationKey] && login in data.choices[locationKey]) {
+export async function removeChoice(login: string, trusted: boolean, locationKey: LunchChoice, foodIndex: number, date?: Date, slot?: MealSlot) {
+    const selectedDay = getDataKey(date ?? getToday(), slot);
+    const snapshot = await getClientData(date, slot);
+    validateTrusted(snapshot, login, trusted);
+    return storage.updateData<ClientData>(selectedDay, (current) => {
+        const data = current ?? getEmptyData(date);
+        if (locationKey in data.choices && data.choices[locationKey] && login in data.choices[locationKey]) {
             const index = data.choices[locationKey][login].selectedFoods?.indexOf(foodIndex);
-            if (index != null && index > -1) {
-                data.choices[locationKey][login].selectedFoods?.splice(index, 1);
-                await storage.setData(selectedDay, data);
-            }
-        }
+            if (index != null && index > -1) data.choices[locationKey][login].selectedFoods?.splice(index, 1);
         }
         return data;
+    });
 }
 
 /**
@@ -357,9 +364,9 @@ export async function removeChoice(login: string, trusted: boolean, locationKey:
  * @param date datum, ke kterému se volby vztahují
  * @param ignoredLocationKey volba, která nebude odstraněna, pokud existuje
  */
-async function removeChoiceIfPresent(login: string, date?: Date, ignoredLocationKey?: LunchChoice) {
+async function removeChoiceIfPresent(login: string, date?: Date, ignoredLocationKey?: LunchChoice, slot?: MealSlot) {
     const usedDate = date ?? getToday();
-    let data = await getClientData(usedDate);
+    let data = await getClientData(usedDate, slot);
     for (const key of Object.keys(data.choices)) {
         const locationKey = key as LunchChoice;
         if (ignoredLocationKey != null && ignoredLocationKey == locationKey) {
@@ -370,7 +377,7 @@ async function removeChoiceIfPresent(login: string, date?: Date, ignoredLocation
             if (Object.keys(data.choices[locationKey]).length === 0) {
                 delete data.choices[locationKey];
             }
-            await storage.setData(formatDate(usedDate), data);
+            await storage.setData(getDataKey(usedDate, slot), data);
         }
     }
     return data;
@@ -409,13 +416,14 @@ function validateTrusted(data: ClientData, login: string, trusted: boolean) {
  * @param date datum, ke kterému se volba vztahuje
  * @returns aktuální data
  */
-export async function addChoice(login: string, trusted: boolean, locationKey: LunchChoice, foodIndex?: number, date?: Date) {
+export async function addChoice(login: string, trusted: boolean, locationKey: LunchChoice, foodIndex?: number, date?: Date, slot?: MealSlot) {
     const usedDate = date ?? getToday();
-    await initIfNeeded(usedDate);
-    let data = await getClientData(usedDate);
+    await initIfNeeded(usedDate, slot);
+    let data = await getClientData(usedDate, slot);
     validateTrusted(data, login, trusted);
     await validateFoodIndex(locationKey, foodIndex, date);
 
+    if (!slot || slot === MealSlot.OBED) {
         // Pokud uživatel měl vybranou PIZZA a mění na něco jiného
         const hadPizzaChoice = data.choices.PIZZA && login in data.choices.PIZZA;
         if (hadPizzaChoice && locationKey !== LunchChoice.PIZZA && foodIndex == null) {
@@ -435,15 +443,16 @@ export async function addChoice(login: string, trusted: boolean, locationKey: Lu
             // nebo byl již smazán frontendem)
             await removeAllUserPizzas(login, usedDate);
             // Znovu načteme data, protože removeAllUserPizzas je upravila
-        data = await getClientData(usedDate);
+            data = await getClientData(usedDate, slot);
+        }
     }
 
     // Pokud měníme pouze lokaci, mažeme případné předchozí
     if (foodIndex == null) {
-        data = await removeChoiceIfPresent(login, usedDate);
+        data = await removeChoiceIfPresent(login, usedDate, undefined, slot);
     } else {
         // Mažeme případné ostatní volby (měla by být maximálně jedna)
-        data = await removeChoiceIfPresent(login, usedDate, locationKey);
+        data = await removeChoiceIfPresent(login, usedDate, locationKey, slot);
     }
     // TODO vytáhnout inicializaci "prázdné struktury" do vlastní funkce
     data.choices[locationKey] ??= {};
@@ -459,8 +468,7 @@ export async function addChoice(login: string, trusted: boolean, locationKey: Lu
     if (foodIndex != null && !data.choices[locationKey][login].selectedFoods?.includes(foodIndex)) {
         data.choices[locationKey][login].selectedFoods?.push(foodIndex);
     }
-    const selectedDate = formatDate(usedDate);
-    await storage.setData(selectedDate, data);
+    await storage.setData(getDataKey(usedDate, slot), data);
     return data;
 }
 
@@ -474,13 +482,13 @@ export async function addChoice(login: string, trusted: boolean, locationKey: Lu
 async function validateFoodIndex(locationKey: LunchChoice, foodIndex?: number, date?: Date) {
     if (foodIndex != null) {
         if (typeof foodIndex !== 'number') {
-            throw Error(`Neplatný index ${foodIndex} typu ${typeof foodIndex}`);
+            throw new Error(`Neplatný index ${foodIndex} typu ${typeof foodIndex}`);
         }
         if (foodIndex < 0) {
-            throw Error(`Neplatný index ${foodIndex}`);
+            throw new Error(`Neplatný index ${foodIndex}`);
         }
         if (!Object.keys(Restaurant).includes(locationKey)) {
-            throw Error(`Neplatný index ${foodIndex} pro lokalitu ${locationKey} nepodporující indexy`);
+            throw new Error(`Neplatný index ${foodIndex} pro lokalitu ${locationKey} nepodporující indexy`);
         }
         const usedDate = date ?? getToday();
         const menu = await getRestaurantMenu(locationKey as Restaurant, usedDate);
@@ -498,22 +506,20 @@ async function validateFoodIndex(locationKey: LunchChoice, foodIndex?: number, d
  * @param note poznámka
  * @param date datum, ke kterému se volba vztahuje
  */
-export async function updateNote(login: string, trusted: boolean, note?: string, date?: Date) {
+export async function updateNote(login: string, trusted: boolean, note?: string, date?: Date, slot?: MealSlot) {
     const usedDate = date ?? getToday();
-    await initIfNeeded(usedDate);
-    let data = await getClientData(usedDate);
-    validateTrusted(data, login, trusted);
+    await initIfNeeded(usedDate, slot);
+    const snapshot = await getClientData(usedDate, slot);
+    validateTrusted(snapshot, login, trusted);
+    return storage.updateData<ClientData>(getDataKey(usedDate, slot), (current) => {
+        const data = current ?? getEmptyData(date);
         const userEntry = data.choices != null && Object.entries(data.choices).find(entry => entry[1][login] != null);
         if (userEntry) {
-        if (!note?.length) {
-            delete userEntry[1][login].note;
-        } else {
-            userEntry[1][login].note = note;
-        }
-        const selectedDate = formatDate(usedDate);
-        await storage.setData(selectedDate, data);
+            if (!note?.length) delete userEntry[1][login].note;
+            else userEntry[1][login].note = note;
         }
         return data;
+    });
 }
 
 /**
@@ -525,21 +531,18 @@ export async function updateNote(login: string, trusted: boolean, note?: string,
  */
 export async function updateDepartureTime(login: string, time?: string, date?: Date) {
     const usedDate = date ?? getToday();
-    let clientData = await getClientData(usedDate);
-    const found = Object.values(clientData.choices).find(location => login in location);
-    // TODO validace, že se jedná o restauraci
-    if (found) {
-        if (!time?.length) {
-            delete found[login].departureTime;
-        } else {
-            if (!Object.values<string>(DepartureTime).includes(time)) {
+    if (time?.length && !Object.values<string>(DepartureTime).includes(time)) {
         throw Error(`Neplatný čas odchodu ${time}`);
     }
-            found[login].departureTime = time;
+    return storage.updateData<ClientData>(getDataKey(usedDate), (current) => {
+        const data = current ?? getEmptyData(date);
+        const found = Object.values(data.choices).find(location => login in location);
+        if (found) {
+            if (!time?.length) delete found[login].departureTime;
+            else found[login].departureTime = time;
         }
-        await storage.setData(formatDate(usedDate), clientData);
-    }
-    return clientData;
+        return data;
+    });
 }
 
 /**
@@ -548,16 +551,15 @@ export async function updateDepartureTime(login: string, time?: string, date?: D
  * 
  * @param login přihlašovací jméno uživatele
  */
-export async function updateBuyer(login: string) {
+export async function updateBuyer(login: string, slot?: MealSlot) {
     const usedDate = getToday();
-    let clientData = await getClientData(usedDate);
-    const userEntry = clientData.choices?.['OBJEDNAVAM']?.[login];
-    if (!userEntry) {
-        throw new Error("Nelze nastavit objednatele pro uživatele s jinou volbou než \"Budu objednávat\"");
-    }
+    return storage.updateData<ClientData>(getDataKey(usedDate, slot), (current) => {
+        const data = current ?? getEmptyData();
+        const userEntry = data.choices?.['OBJEDNAVAM']?.[login];
+        if (!userEntry) throw new Error("Nelze nastavit objednatele pro uživatele s jinou volbou než \"Budu objednávat\"");
         userEntry.isBuyer = !(userEntry.isBuyer || false);
-    await storage.setData(formatDate(usedDate), clientData);
-    return clientData;
+        return data;
+    });
 }
 
 /**
@@ -566,12 +568,13 @@ export async function updateBuyer(login: string) {
  * @param date datum pro který vrátit data, pokud není vyplněno, je použit dnešní den
  * @returns data pro klienta
  */
-export async function getClientData(date?: Date): Promise<ClientData> {
+export async function getClientData(date?: Date, slot?: MealSlot): Promise<ClientData> {
     const targetDate = date ?? getToday();
-    const dateString = formatDate(targetDate);
+    const dateString = getDataKey(targetDate, slot);
     const clientData = await storage.getData<ClientData>(dateString) || getEmptyData(date);
     return {
         ...clientData,
         todayDayIndex: getDayOfWeekIndex(getToday()),
+        ...(slot === MealSlot.EXTRA ? { slot: MealSlot.EXTRA } : {}),
     }
 }

server/src/stats.ts

@@ -22,13 +22,13 @@ export async function getStats(startDate: string, endDate: string): Promise<Week
     // Dočasná validace, aby to někdo ručně neshodil
     const daysDiff = ((end as any) - (start as any)) / (1000 * 60 * 60 * 24);
     if (daysDiff > 4) {
-        throw Error('Neplatný rozsah');
+        throw new Error('Neplatný rozsah');
     }
 
     const today = new Date();
     today.setHours(23, 59, 59, 999);
     if (end > today) {
-        throw Error('Nelze načíst statistiky pro budoucí datum');
+        throw new Error('Nelze načíst statistiky pro budoucí datum');
     }
 
     const result = [];

server/src/storage/StorageInterface.ts

@@ -1,32 +1,23 @@
 /**
  * Interface pro úložiště dat.
- * 
- * Aktuálně pouze "primitivní" has, get a set odrážející původní JSON DB.
- * Postupem času lze předělat pro efektivnější využití Redis.
  */
 export interface StorageInterface {
 
-    /**
-     * Inicializuje úložiště, pokud je potřeba (např. připojení k databázi).
-     */
     initialize?(): Promise<void>;
 
-    /**
-     * Vrátí příznak, zda existují data pro předaný klíč.
-     * @param key klíč, pro který zjišťujeme data (typicky datum)
-     */
     hasData(key: string): Promise<boolean>;
 
-    /**
-     * Vrátí veškerá data pro předaný klíč.
-     * @param key klíč, pro který vrátit data (typicky datum)
-     */
     getData<Type>(key: string): Promise<Type | undefined>;
 
-    /**
-     * Uloží data pod předaný klíč.
-     * @param key klíč, pod kterým uložit data (typicky datum)
-     * @param data data pro uložení
-     */
     setData<Type>(key: string, data: Type): Promise<void>;
+
+    /**
+     * Atomicky načte, zmutuje a uloží data pod daným klíčem.
+     * V Redis implementaci používá WATCH/MULTI/EXEC retry loop.
+     * Vrátí výslednou hodnotu po aplikaci mutátoru.
+     */
+    updateData<Type>(key: string, mutator: (current: Type | undefined) => Type): Promise<Type>;
+
+    /** Ověří dostupnost úložiště. Vrátí false pokud není dostupné. */
+    healthCheck?(): Promise<boolean>;
 }

server/src/storage/index.ts

@@ -20,7 +20,7 @@ if (!process.env.STORAGE || process.env.STORAGE?.toLowerCase() === JSON_KEY) {
 } else if (process.env.STORAGE?.toLowerCase() === MEMORY_KEY) {
     storage = new MemoryStorage();
 } else {
-    throw Error("Nepodporovaná hodnota proměnné STORAGE: " + process.env.STORAGE + ", podporované jsou 'json', 'redis' nebo 'memory'");
+    throw new Error("Nepodporovaná hodnota proměnné STORAGE: " + process.env.STORAGE + ", podporované jsou 'json', 'redis' nebo 'memory'");
 }
 
 export const storageReady: Promise<void> = storage.initialize

server/src/storage/json.ts

@@ -6,7 +6,6 @@ import * as path from 'path';
 const dbPath = path.resolve(__dirname, '../../data/db.json');
 const dbDir = path.dirname(dbPath);
 
-// Zajistěte, že adresář existuje
 if (!fs.existsSync(dbDir)) {
     fs.mkdirSync(dbDir, { recursive: true });
 }
@@ -29,4 +28,15 @@ export default class JsonStorage implements StorageInterface {
         db.set(key, data);
         return Promise.resolve();
     }
+
+    updateData<Type>(key: string, mutator: (current: Type | undefined) => Type): Promise<Type> {
+        const current = db.get(key) as Type | undefined;
+        const next = mutator(current);
+        db.set(key, next);
+        return Promise.resolve(next);
+    }
+
+    healthCheck(): Promise<boolean> {
+        return Promise.resolve(true);
+    }
 }

server/src/storage/memory.ts

@@ -24,4 +24,15 @@ export default class MemoryStorage implements StorageInterface {
         store.set(key, data);
         return Promise.resolve();
     }
+
+    updateData<Type>(key: string, mutator: (current: Type | undefined) => Type): Promise<Type> {
+        const current = store.get(key) as Type | undefined;
+        const next = mutator(current);
+        store.set(key, next);
+        return Promise.resolve(next);
+    }
+
+    healthCheck(): Promise<boolean> {
+        return Promise.resolve(true);
+    }
 }

server/src/storage/redis.ts

@@ -10,7 +10,7 @@ export default class RedisStorage implements StorageInterface {
     constructor() {
         const HOST = process.env.REDIS_HOST ?? 'localhost';
         const PORT = process.env.REDIS_PORT ?? 6379;
-        client = createClient({ url: `redis://${HOST}:${PORT}` });
+        client = createClient({ url: `redis://${HOST}:${PORT}` }) as RedisClientType;
     }
 
     async initialize() {
@@ -29,6 +29,44 @@ export default class RedisStorage implements StorageInterface {
 
     async setData<Type>(key: string, data: Type) {
         await client.json.set(key, '.', data as any);
-        await client.json.get(key);
+    }
+
+    async updateData<Type>(key: string, mutator: (current: Type | undefined) => Type): Promise<Type> {
+        // node-redis v5 nemá executeIsolated — pro WATCH/MULTI potřebujeme dedikované spojení
+        const c = client.duplicate();
+        await c.connect();
+        try {
+            for (let attempt = 0; attempt < 10; attempt++) {
+                await c.watch(key);
+                const current = await c.json.get(key, { path: '.' }) as Type | undefined;
+                const next = mutator(current);
+                const multi = c.multi();
+                multi.json.set(key, '.', next as any);
+                const result = await multi.exec();
+                if (result !== null) return next;
+            }
+            throw new Error(`updateData: optimistic lock failed after 10 retries for key: ${key}`);
+        } finally {
+            await c.disconnect();
         }
     }
+
+    async healthCheck(): Promise<boolean> {
+        try {
+            const pong = await client.ping();
+            return pong === 'PONG';
+        } catch {
+            return false;
+        }
+    }
+}
+
+/** Vrátí hlavní Redis klient — používá se pro lease připomínkovače a shutdown. */
+export function getRedisClient(): RedisClientType | undefined {
+    return client;
+}
+
+/** Zavře připojení k Redisu. Volá se při graceful shutdown. */
+export async function shutdownRedisStorage(): Promise<void> {
+    await client?.quit();
+}

server/src/stores.ts

@@ -0,0 +1,37 @@
+import getStorage from "./storage";
+
+const storage = getStorage();
+const STORES_KEY = 'stores';
+
+export async function getStores(): Promise<string[]> {
+    return (await storage.getData<string[]>(STORES_KEY)) ?? [];
+}
+
+export async function addStore(name: string, heslo: string): Promise<string[]> {
+    const adminPassword = process.env.ADMIN_PASSWORD;
+    if (!adminPassword || heslo !== adminPassword) {
+        throw new Error('UNAUTHORIZED');
+    }
+    const trimmed = name.trim();
+    if (!trimmed) {
+        throw new Error('Název obchodu nesmí být prázdný');
+    }
+    const stores = await getStores();
+    if (stores.some(s => s.toLowerCase() === trimmed.toLowerCase())) {
+        throw new Error('Obchod s tímto názvem již existuje');
+    }
+    const updated = [...stores, trimmed];
+    await storage.setData(STORES_KEY, updated);
+    return updated;
+}
+
+export async function removeStore(name: string, heslo: string): Promise<string[]> {
+    const adminPassword = process.env.ADMIN_PASSWORD;
+    if (!adminPassword || heslo !== adminPassword) {
+        throw new Error('UNAUTHORIZED');
+    }
+    const stores = await getStores();
+    const updated = stores.filter(s => s.toLowerCase() !== name.trim().toLowerCase());
+    await storage.setData(STORES_KEY, updated);
+    return updated;
+}

server/src/tests/chefie.test.ts

@@ -31,8 +31,8 @@ test('saláty mají name a ingredients', async () => {
 
 test('cena salátu zahrnuje pevný příplatek 13 Kč za obal', async () => {
     const salaty = await downloadSalaty(false);
-    // Caesar sticker price = 129, box = 13
-    expect(salaty[0].price).toBe(129 + 13);
-    // Řecký sticker price = 119, box = 13
-    expect(salaty[1].price).toBe(119 + 13);
+    // Caesar sticker price = 129, box = 13 → (129 + 13) * 100 haléřů
+    expect(salaty[0].price).toBe((129 + 13) * 100);
+    // Řecký sticker price = 119, box = 13 → (119 + 13) * 100 haléřů
+    expect(salaty[1].price).toBe((119 + 13) * 100);
 });

server/src/tests/groups.test.ts

@@ -0,0 +1,195 @@
+import { resetMemoryStorage } from '../storage/memory';
+import { getStores, addStore } from '../stores';
+import { createGroup, deleteGroup, addGroupMember, removeGroupMember, updateGroupMember, setGroupState } from '../groups';
+import { GroupState } from '../../../types/gen/types.gen';
+
+const CREATOR = 'tomas';
+const USER = 'petr';
+const ADMIN_PW = 'testadmin';
+const STORE = 'McDonald\'s';
+const TODAY = new Date('2025-01-10');
+
+beforeEach(async () => {
+    resetMemoryStorage();
+    process.env.ADMIN_PASSWORD = ADMIN_PW;
+    await addStore(STORE, ADMIN_PW);
+});
+
+afterEach(() => {
+    delete process.env.ADMIN_PASSWORD;
+});
+
+describe('createGroup', () => {
+    test('vytvoří skupinu, creator je člen', async () => {
+        const data = await createGroup(CREATOR, STORE, TODAY);
+        expect(data.groups).toHaveLength(1);
+        const group = data.groups![0];
+        expect(group.name).toBe(STORE);
+        expect(group.creatorLogin).toBe(CREATOR);
+        expect(group.state).toBe(GroupState.OPEN);
+        expect(group.members[CREATOR]).toBeDefined();
+    });
+
+    test('odmítne název mimo seznam obchodů', async () => {
+        await expect(createGroup(CREATOR, 'Neznámý obchod', TODAY)).rejects.toThrow('seznam');
+    });
+
+    test('vygeneruje unikátní ID', async () => {
+        const d1 = await createGroup(CREATOR, STORE, TODAY);
+        const d2 = await createGroup(USER, STORE, TODAY);
+        expect(d2.groups).toHaveLength(2);
+        expect(d2.groups![1].id).not.toBe(d2.groups![0].id);
+    });
+});
+
+describe('deleteGroup', () => {
+    test('creator může smazat skupinu', async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        const groupId = d.groups![0].id;
+        const result = await deleteGroup(CREATOR, groupId, TODAY);
+        expect(result.groups).toHaveLength(0);
+    });
+
+    test('nečlen nemůže smazat skupinu', async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        const groupId = d.groups![0].id;
+        await expect(deleteGroup(USER, groupId, TODAY)).rejects.toThrow('zakladatel');
+    });
+
+    test('smazání neexistující skupiny vyhodí chybu', async () => {
+        await expect(deleteGroup(CREATOR, 'nonexistent', TODAY)).rejects.toThrow('nalezena');
+    });
+});
+
+describe('addGroupMember', () => {
+    let groupId: string;
+
+    beforeEach(async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        groupId = d.groups![0].id;
+    });
+
+    test('uživatel se může přidat sám (open)', async () => {
+        const d = await addGroupMember(USER, groupId, USER, TODAY);
+        expect(d.groups![0].members[USER]).toBeDefined();
+    });
+
+    test('creator může přidat jiného uživatele', async () => {
+        const d = await addGroupMember(CREATOR, groupId, USER, TODAY);
+        expect(d.groups![0].members[USER]).toBeDefined();
+    });
+
+    test('nečlen nemůže přidat jiného uživatele', async () => {
+        await expect(addGroupMember(USER, groupId, 'dalsi', TODAY)).rejects.toThrow('zakladatel');
+    });
+
+    test('nelze přidat do skupiny ve stavu ordered', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        await setGroupState(CREATOR, groupId, GroupState.ORDERED, TODAY);
+        await expect(addGroupMember(USER, groupId, USER, TODAY)).rejects.toThrow('objednáno');
+    });
+
+    test('nelze přidat existujícího člena', async () => {
+        await expect(addGroupMember(CREATOR, groupId, CREATOR, TODAY)).rejects.toThrow('již');
+    });
+});
+
+describe('removeGroupMember', () => {
+    let groupId: string;
+
+    beforeEach(async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        groupId = d.groups![0].id;
+        await addGroupMember(CREATOR, groupId, USER, TODAY);
+    });
+
+    test('člen se může odhlásit sám', async () => {
+        const d = await removeGroupMember(USER, groupId, USER, TODAY);
+        expect(d.groups![0].members[USER]).toBeUndefined();
+    });
+
+    test('creator může odebrat jiného člena', async () => {
+        const d = await removeGroupMember(CREATOR, groupId, USER, TODAY);
+        expect(d.groups![0].members[USER]).toBeUndefined();
+    });
+
+    test('nelze odebrat zakladatele', async () => {
+        await expect(removeGroupMember(CREATOR, groupId, CREATOR, TODAY)).rejects.toThrow('Zakladatel');
+    });
+
+    test('nečlen nemůže odebrat jiného', async () => {
+        await expect(removeGroupMember(USER, groupId, CREATOR, TODAY)).rejects.toThrow('zakladatel');
+    });
+});
+
+describe('updateGroupMember', () => {
+    let groupId: string;
+
+    beforeEach(async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        groupId = d.groups![0].id;
+        await addGroupMember(CREATOR, groupId, USER, TODAY);
+    });
+
+    test('člen může upravit svá data (open)', async () => {
+        const d = await updateGroupMember(USER, groupId, USER, { amount: 150, note: 'Big Mac' }, TODAY);
+        expect(d.groups![0].members[USER].amount).toBe(150);
+        expect(d.groups![0].members[USER].note).toBe('Big Mac');
+    });
+
+    test('creator může upravit data jiného člena', async () => {
+        const d = await updateGroupMember(CREATOR, groupId, USER, { amount: 200 }, TODAY);
+        expect(d.groups![0].members[USER].amount).toBe(200);
+    });
+
+    test('člen nemůže upravit data jiného (locked)', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        await expect(updateGroupMember(USER, groupId, USER, { amount: 100 }, TODAY)).rejects.toThrow('uzamčeno');
+    });
+
+    test('nikdo nemůže upravit při stavu ordered', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        await setGroupState(CREATOR, groupId, GroupState.ORDERED, TODAY);
+        await expect(updateGroupMember(CREATOR, groupId, USER, { amount: 100 }, TODAY)).rejects.toThrow('objednáno');
+    });
+});
+
+describe('setGroupState', () => {
+    let groupId: string;
+
+    beforeEach(async () => {
+        const d = await createGroup(CREATOR, STORE, TODAY);
+        groupId = d.groups![0].id;
+    });
+
+    test('open → locked', async () => {
+        const d = await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        expect(d.groups![0].state).toBe(GroupState.LOCKED);
+    });
+
+    test('locked → open (odemčení)', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        const d = await setGroupState(CREATOR, groupId, GroupState.OPEN, TODAY);
+        expect(d.groups![0].state).toBe(GroupState.OPEN);
+    });
+
+    test('locked → ordered', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        const d = await setGroupState(CREATOR, groupId, GroupState.ORDERED, TODAY);
+        expect(d.groups![0].state).toBe(GroupState.ORDERED);
+    });
+
+    test('open → ordered není povoleno', async () => {
+        await expect(setGroupState(CREATOR, groupId, GroupState.ORDERED, TODAY)).rejects.toThrow('Nelze přejít');
+    });
+
+    test('ordered je terminální stav', async () => {
+        await setGroupState(CREATOR, groupId, GroupState.LOCKED, TODAY);
+        await setGroupState(CREATOR, groupId, GroupState.ORDERED, TODAY);
+        await expect(setGroupState(CREATOR, groupId, GroupState.OPEN, TODAY)).rejects.toThrow('Nelze přejít');
+    });
+
+    test('nečlen nemůže měnit stav', async () => {
+        await expect(setGroupState(USER, groupId, GroupState.LOCKED, TODAY)).rejects.toThrow('zakladatel');
+    });
+});

server/src/tests/qrRoutes.test.ts

@@ -28,8 +28,8 @@ beforeEach(() => {
 
 const VALID_BODY = {
     recipients: [
-        { login: 'uzivatel1', purpose: 'Pizza Margherita', amount: 149 },
-        { login: 'uzivatel2', purpose: 'Pizza Diavola', amount: 179 },
+        { login: 'uzivatel1', purpose: 'Pizza Margherita', amount: 14900 },
+        { login: 'uzivatel2', purpose: 'Pizza Diavola', amount: 17900 },
     ],
     bankAccount: '19-2000145399/0800',
     bankAccountHolder: 'Jan Novák',
@@ -76,17 +76,17 @@ test('POST /generate vrátí 400 pro zápornou částku', async () => {
     expect(res.body.error).toContain('částku');
 });
 
-test('POST /generate vrátí 400 pro částku s více než 2 desetinnými místy', async () => {
+test('POST /generate vrátí 400 pro necelou částku', async () => {
     const body = {
         ...VALID_BODY,
-        recipients: [{ login: 'uzivatel1', purpose: 'Pizza', amount: 149.999 }],
+        recipients: [{ login: 'uzivatel1', purpose: 'Pizza', amount: 149.5 }],
     };
     const res = await request(buildApp())
         .post('/api/qr/generate')
         .set('Authorization', TOKEN)
         .send(body);
     expect(res.status).toBe(400);
-    expect(res.body.error).toContain('desetinná');
+    expect(res.body.error).toContain('částku');
 });
 
 test('POST /generate vrátí 400 pro příjemce bez login', async () => {

server/src/tests/service.slot.test.ts

@@ -0,0 +1,60 @@
+const mockStorageData = new Map<string, any>();
+jest.mock('../storage', () => ({
+    __esModule: true,
+    default: () => ({
+        hasData: async (key: string) => mockStorageData.has(key),
+        getData: async <T>(key: string) => mockStorageData.get(key) as T,
+        setData: async <T>(key: string, val: T) => void mockStorageData.set(key, val),
+    }),
+    storageReady: Promise.resolve(),
+}));
+
+import { addChoice, getData } from '../service';
+import { LunchChoice, MealSlot } from '../../../types/gen/types.gen';
+
+const TODAY = new Date('2025-01-10');
+const TODAY_STR = '2025-01-10';
+const TODAY_EXTRA_STR = '2025-01-10_extra';
+
+describe('MealSlot storage isolation', () => {
+    beforeEach(() => {
+        mockStorageData.clear();
+        jest.useFakeTimers();
+        jest.setSystemTime(TODAY);
+    });
+
+    afterEach(() => {
+        jest.useRealTimers();
+    });
+
+    test('addChoice slot=extra writes only to _extra key, not to obed key, and returns slot=EXTRA', async () => {
+        const result = await addChoice('user1', false, LunchChoice.OBJEDNAVAM, undefined, TODAY, MealSlot.EXTRA);
+        expect(result.slot).toBe(MealSlot.EXTRA);
+        expect(mockStorageData.has(TODAY_EXTRA_STR)).toBe(true);
+        expect(mockStorageData.has(TODAY_STR)).toBe(false);
+        const extraData = mockStorageData.get(TODAY_EXTRA_STR);
+        expect(extraData.choices.OBJEDNAVAM?.['user1']).toBeDefined();
+    });
+
+    test('getData slot=extra returns slot===MealSlot.EXTRA and no menus', async () => {
+        await addChoice('user1', false, LunchChoice.OBJEDNAVAM, undefined, TODAY, MealSlot.EXTRA);
+        const result = await getData(TODAY, MealSlot.EXTRA);
+        expect(result.slot).toBe(MealSlot.EXTRA);
+        expect(result.menus).toBeUndefined();
+    });
+
+    test('addChoice slot=extra does not modify obed data even when obed has PIZZA choice', async () => {
+        mockStorageData.set(TODAY_STR, {
+            choices: { PIZZA: { user1: { selectedFoods: [0], trusted: false } } },
+            todayDayIndex: 4,
+            date: '10. 1. 2025',
+            isWeekend: false,
+            dayIndex: 4,
+        });
+
+        await addChoice('user1', false, LunchChoice.OBJEDNAVAM, undefined, TODAY, MealSlot.EXTRA);
+
+        const obed = mockStorageData.get(TODAY_STR);
+        expect(obed.choices.PIZZA?.['user1']).toBeDefined();
+    });
+});

server/src/tests/stores.test.ts

@@ -0,0 +1,78 @@
+import { resetMemoryStorage } from '../storage/memory';
+import { getStores, addStore, removeStore } from '../stores';
+
+const ADMIN_PW = 'testadmin';
+
+beforeEach(() => {
+    resetMemoryStorage();
+    process.env.ADMIN_PASSWORD = ADMIN_PW;
+});
+
+afterEach(() => {
+    delete process.env.ADMIN_PASSWORD;
+});
+
+describe('getStores', () => {
+    test('vrátí prázdné pole, pokud seznam neexistuje', async () => {
+        const stores = await getStores();
+        expect(stores).toEqual([]);
+    });
+});
+
+describe('addStore', () => {
+    test('přidá obchod se správným heslem', async () => {
+        const stores = await addStore('McDonald\'s', ADMIN_PW);
+        expect(stores).toContain('McDonald\'s');
+    });
+
+    test('vyhodí UNAUTHORIZED s nesprávným heslem', async () => {
+        await expect(addStore('KFC', 'spatne')).rejects.toThrow('UNAUTHORIZED');
+    });
+
+    test('vyhodí UNAUTHORIZED pokud ADMIN_PASSWORD není nastaven', async () => {
+        delete process.env.ADMIN_PASSWORD;
+        await expect(addStore('KFC', '')).rejects.toThrow('UNAUTHORIZED');
+    });
+
+    test('odmítne prázdný název', async () => {
+        await expect(addStore('  ', ADMIN_PW)).rejects.toThrow('prázdný');
+    });
+
+    test('odmítne duplikát (case-insensitive)', async () => {
+        await addStore('McDonald\'s', ADMIN_PW);
+        await expect(addStore('mcdonald\'s', ADMIN_PW)).rejects.toThrow('existuje');
+    });
+
+    test('vrátí aktualizovaný seznam', async () => {
+        await addStore('McDonald\'s', ADMIN_PW);
+        const stores = await addStore('KFC', ADMIN_PW);
+        expect(stores).toHaveLength(2);
+        expect(stores).toContain('McDonald\'s');
+        expect(stores).toContain('KFC');
+    });
+});
+
+describe('removeStore', () => {
+    beforeEach(async () => {
+        await addStore('McDonald\'s', ADMIN_PW);
+    });
+
+    test('odebere obchod se správným heslem', async () => {
+        const stores = await removeStore('McDonald\'s', ADMIN_PW);
+        expect(stores).not.toContain('McDonald\'s');
+    });
+
+    test('case-insensitive odebrání', async () => {
+        const stores = await removeStore('MCDONALD\'S', ADMIN_PW);
+        expect(stores).not.toContain('McDonald\'s');
+    });
+
+    test('vyhodí UNAUTHORIZED s nesprávným heslem', async () => {
+        await expect(removeStore('McDonald\'s', 'spatne')).rejects.toThrow('UNAUTHORIZED');
+    });
+
+    test('odebrání neexistujícího obchodu nic nerozbije', async () => {
+        const stores = await removeStore('Neexistuje', ADMIN_PW);
+        expect(stores).toContain('McDonald\'s');
+    });
+});

server/src/utils.ts

@@ -90,7 +90,7 @@ export const parseToken = (req: any) => {
 export const checkQueryParams = (req: any, paramNames: string[]) => {
     for (const name of paramNames) {
         if (req.query[name] == null) {
-            throw Error(`Nebyl předán parametr '${name}' v query požadavku`);
+            throw new Error(`Nebyl předán parametr '${name}' v query požadavku`);
         }
     }
 }
@@ -105,7 +105,7 @@ export const checkQueryParams = (req: any, paramNames: string[]) => {
 export const checkBodyParams = (req: any, paramNames: string[]) => {
     for (const name of paramNames) {
         if (req.body[name] == null) {
-            throw Error(`Nebyl předán parametr '${name}' v těle požadavku`);
+            throw new Error(`Nebyl předán parametr '${name}' v těle požadavku`);
         }
     }
 }

server/src/voting.ts

@@ -1,4 +1,4 @@
-import { FeatureRequest, VotingStats } from "../../types/gen/types.gen";
+import { FeatureRequest } from "../../types/gen/types.gen";
 import getStorage from "./storage";
 
 interface VotingData {
@@ -12,56 +12,28 @@ export interface VotingStatsResult {
 const storage = getStorage();
 const STORAGE_KEY = 'voting';
 
-/**
- * Vrátí pole voleb, pro které uživatel aktuálně hlasuje.
- * 
- * @param login login uživatele
- * @returns pole voleb
- */
 export async function getUserVotes(login: string) {
     const data = await storage.getData<VotingData>(STORAGE_KEY);
     return data?.[login] || [];
 }
 
-/**
- * Aktualizuje hlas uživatele pro konkrétní volbu.
- * 
- * @param login login uživatele
- * @param option volba
- * @param active příznak, zda volbu přidat nebo odebrat
- * @returns aktuální data
- */
 export async function updateFeatureVote(login: string, option: FeatureRequest, active: boolean): Promise<VotingData> {
-    let data = await storage.getData<VotingData>(STORAGE_KEY);
-    data ??= {};
-    if (!(login in data)) {
-        data[login] = [];
-    }
+    return storage.updateData<VotingData>(STORAGE_KEY, (current) => {
+        const data = current ?? {};
+        if (!(login in data)) data[login] = [];
         const index = data[login].indexOf(option);
         if (index > -1) {
-        if (active) {
-            throw Error('Pro tuto možnost jste již hlasovali');
-        } else {
+            if (active) throw Error('Pro tuto možnost jste již hlasovali');
             data[login].splice(index, 1);
-            if (data[login].length === 0) {
-                delete data[login];
-            }
-        }
+            if (data[login].length === 0) delete data[login];
         } else if (active) {
-        if (data[login].length == 4) {
-            throw Error('Je možné hlasovat pro maximálně 4 možnosti');
-        }
+            if (data[login].length === 4) throw Error('Je možné hlasovat pro maximálně 4 možnosti');
             data[login].push(option);
         }
-    await storage.setData(STORAGE_KEY, data);
         return data;
+    });
 }
 
-/**
- * Vrátí agregované statistiky hlasování - počet hlasů pro každou funkci.
- *
- * @returns objekt, kde klíčem je název funkce a hodnotou počet hlasů
- */
 export async function getVotingStats(): Promise<VotingStatsResult> {
     const data = await storage.getData<VotingData>(STORAGE_KEY);
     const stats: VotingStatsResult = {};

server/src/websocket.ts

@@ -1,16 +1,25 @@
 import { DefaultEventsMap, Server } from "socket.io";
+import { createAdapter } from "@socket.io/redis-adapter";
+import { createClient } from "redis";
 
 let io: Server<DefaultEventsMap, DefaultEventsMap, DefaultEventsMap, any>;
+let pubClient: ReturnType<typeof createClient>;
+let subClient: ReturnType<typeof createClient>;
 
 export const initWebsocket = (server: any) => {
     io = new Server(server, {
-        cors: {
-            origin: "*",
-        },
+        cors: { origin: "*" },
+        transports: ["websocket"],
     });
     io.on("connection", (socket) => {
         console.log(`New client connected: ${socket.id}`);
 
+        socket.on("join", (login: string) => {
+            if (login && typeof login === "string") {
+                socket.join(`user:${login}`);
+            }
+        });
+
         socket.on("message", (message) => {
             io.emit("message", message);
         });
@@ -20,8 +29,29 @@ export const initWebsocket = (server: any) => {
         });
     });
     return io;
-}
+};
 
-export const getWebsocket = () => {
-    return io;
-}
+/** Připojí Redis adapter pro cross-pod broadcasting. Volat až po inicializaci Redis klienta. */
+export const initRedisAdapter = async () => {
+    const HOST = process.env.REDIS_HOST ?? 'localhost';
+    const PORT = process.env.REDIS_PORT ?? 6379;
+    const url = `redis://${HOST}:${PORT}`;
+    pubClient = createClient({ url }) as ReturnType<typeof createClient>;
+    subClient = pubClient.duplicate();
+    await Promise.all([pubClient.connect(), subClient.connect()]);
+    io.adapter(createAdapter(pubClient as any, subClient as any));
+    console.log('Socket.io: Redis adapter connected');
+};
+
+/** Zavře pub/sub Redis klienty adaptéru při graceful shutdown. */
+export const shutdownWebsocketClients = async () => {
+    await Promise.allSettled([pubClient?.quit(), subClient?.quit()]);
+};
+
+export const getWebsocket = () => io;
+
+/** Pošle event konkrétnímu přihlášenému uživateli (pokud je připojen). */
+export const emitToUser = (login: string, event: string, data: unknown) => {
+    if (!io) return;
+    io.to(`user:${login}`).emit(event, data);
+};

server/yarn.lock

@@ -1521,6 +1521,15 @@
   resolved "https://registry.yarnpkg.com/@socket.io/component-emitter/-/component-emitter-3.1.2.tgz#821f8442f4175d8f0467b9daf26e3a18e2d02af2"
   integrity sha512-9BCxFwvbGg/RsZK9tjXd8s4UcwR0MWeFQ1XEKIQVVvAGJyINdrqKMcTRyLoK8Rse1GjzLV9cwjWV1olXRWEXVA==
 
+"@socket.io/redis-adapter@^8.3.0":
+  version "8.3.0"
+  resolved "https://registry.yarnpkg.com/@socket.io/redis-adapter/-/redis-adapter-8.3.0.tgz#bdce1e8f34c07df4a8baf98170bf24dc84eaed4a"
+  integrity sha512-ly0cra+48hDmChxmIpnESKrc94LjRL80TEmZVscuQ/WWkRP81nNj8W8cCGMqbI4L6NCuAaPRSzZF1a9GlAxxnA==
+  dependencies:
+    debug "~4.3.1"
+    notepack.io "~3.0.1"
+    uid2 "1.0.0"
+
 "@tsconfig/node10@^1.0.7":
   version "1.0.11"
   resolved "https://registry.yarnpkg.com/@tsconfig/node10/-/node10-1.0.11.tgz#6ee46400685f130e278128c7b38b7e031ff5b2f2"
@@ -2438,6 +2447,13 @@ debug@^4.1.1:
   dependencies:
     ms "^2.1.3"
 
+debug@~4.3.1:
+  version "4.3.7"
+  resolved "https://registry.yarnpkg.com/debug/-/debug-4.3.7.tgz#87945b4151a011d76d95a198d7111c865c360a52"
+  integrity sha512-Er2nc/H7RrMXZBFCEim6TCmMk02Z8vLC2Rbi1KEBggpo0fS6l0S1nnapwmIi3yW/+GOJap1Krg4w0Hg80oCqgQ==
+  dependencies:
+    ms "^2.1.3"
+
 dedent@^1.6.0:
   version "1.7.0"
   resolved "https://registry.yarnpkg.com/dedent/-/dedent-1.7.0.tgz#c1f9445335f0175a96587be245a282ff451446ca"
@@ -3844,6 +3860,11 @@ normalize-path@^3.0.0, normalize-path@~3.0.0:
   resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
   integrity sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==
 
+notepack.io@~3.0.1:
+  version "3.0.1"
+  resolved "https://registry.yarnpkg.com/notepack.io/-/notepack.io-3.0.1.tgz#2c2c9de1bd4e64a79d34e33c413081302a0d4019"
+  integrity sha512-TKC/8zH5pXIAMVQio2TvVDTtPRX+DJPHDqjRbxogtFiByHyzKmy96RA0JtCQJ+WouyyL4A10xomQzgbUT+1jCg==
+
 npm-run-path@^4.0.1:
   version "4.0.1"
   resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-4.0.1.tgz#b7ecd1e5ed53da8e37a55e1c2269e0b97ed748ea"
@@ -4571,6 +4592,11 @@ typescript@^5.9.3:
   resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.9.3.tgz#5b4f59e15310ab17a216f5d6cf53ee476ede670f"
   integrity sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==
 
+uid2@1.0.0:
+  version "1.0.0"
+  resolved "https://registry.yarnpkg.com/uid2/-/uid2-1.0.0.tgz#ef8d95a128d7c5c44defa1a3d052eecc17a06bfb"
+  integrity sha512-+I6aJUv63YAcY9n4mQreLUt0d4lvwkkopDNmpomkAUz0fAkEMV9pRWxN0EjhW1YfRhcuyHg2v3mwddCDW1+LFQ==
+
 undefsafe@^2.0.5:
   version "2.0.5"
   resolved "https://registry.yarnpkg.com/undefsafe/-/undefsafe-2.0.5.tgz#38733b9327bdcd226db889fb723a6efd162e6e2c"

types/api.yml

@@ -81,6 +81,32 @@ paths:
   /changelogs:
     $ref: "./paths/changelogs/getChangelogs.yml"
 
+  # Skupiny objednávek (/api/groups)
+  /groups/create:
+    $ref: "./paths/groups/createGroup.yml"
+  /groups/delete:
+    $ref: "./paths/groups/deleteGroup.yml"
+  /groups/addMember:
+    $ref: "./paths/groups/addMember.yml"
+  /groups/removeMember:
+    $ref: "./paths/groups/removeMember.yml"
+  /groups/updateMember:
+    $ref: "./paths/groups/updateMember.yml"
+  /groups/setState:
+    $ref: "./paths/groups/setState.yml"
+  /groups/updateTimes:
+    $ref: "./paths/groups/updateTimes.yml"
+  /groups/updateFees:
+    $ref: "./paths/groups/updateFees.yml"
+
+  # Správa obchodů (/api/stores)
+  /stores:
+    $ref: "./paths/stores/listStores.yml"
+  /stores/add:
+    $ref: "./paths/stores/addStore.yml"
+  /stores/delete:
+    $ref: "./paths/stores/deleteStore.yml"
+
   # DEV endpointy (/api/dev)
   /dev/generate:
     $ref: "./paths/dev/generate.yml"

types/package-lock.json

@@ -0,0 +1,594 @@
+{
+  "name": "@luncher/types",
+  "version": "1.0.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "@luncher/types",
+      "version": "1.0.0",
+      "license": "MIT",
+      "devDependencies": {
+        "@hey-api/client-fetch": "^0.8.2",
+        "@hey-api/openapi-ts": "^0.64.7",
+        "typescript": "^5.9.3"
+      }
+    },
+    "node_modules/@hey-api/client-fetch": {
+      "version": "0.8.2",
+      "resolved": "https://registry.npmjs.org/@hey-api/client-fetch/-/client-fetch-0.8.2.tgz",
+      "integrity": "sha512-61T4UGfAzY5345vMxWDX8qnSTNRJcOpWuZyvNu3vNebCTLPwMQAM85mhEuBoACdWeRtLhNoUjU0UR5liRyD1bA==",
+      "deprecated": "Starting with v0.73.0, this package is bundled directly inside @hey-api/openapi-ts.",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/hey-api"
+      }
+    },
+    "node_modules/@hey-api/json-schema-ref-parser": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/@hey-api/json-schema-ref-parser/-/json-schema-ref-parser-1.0.2.tgz",
+      "integrity": "sha512-F6LSkttZcT/XiX3ydeDqTY3uRN3BLJMwyMTk4kg/ichZlKUp3+3Odv0WokSmXGSoZGTW/N66FROMYAm5NPdJlA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@jsdevtools/ono": "^7.1.3",
+        "@types/json-schema": "^7.0.15",
+        "js-yaml": "^4.1.0"
+      },
+      "engines": {
+        "node": ">= 16"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/hey-api"
+      }
+    },
+    "node_modules/@hey-api/openapi-ts": {
+      "version": "0.64.7",
+      "resolved": "https://registry.npmjs.org/@hey-api/openapi-ts/-/openapi-ts-0.64.7.tgz",
+      "integrity": "sha512-xpaBzdGAKz7cPuGah1GZWl3zTZquOXRnwmpVCQKEUpvDtSYWBLjSxtAYIqDBjwJkuNHcakZBIWLcappx7slc2g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@hey-api/json-schema-ref-parser": "1.0.2",
+        "c12": "2.0.1",
+        "commander": "13.0.0",
+        "handlebars": "4.7.8"
+      },
+      "bin": {
+        "openapi-ts": "bin/index.cjs"
+      },
+      "engines": {
+        "node": "^18.18.0 || ^20.9.0 || >=22.11.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/hey-api"
+      },
+      "peerDependencies": {
+        "typescript": "^5.5.3"
+      }
+    },
+    "node_modules/@jsdevtools/ono": {
+      "version": "7.1.3",
+      "resolved": "https://registry.npmjs.org/@jsdevtools/ono/-/ono-7.1.3.tgz",
+      "integrity": "sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/json-schema": {
+      "version": "7.0.15",
+      "resolved": "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz",
+      "integrity": "sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/acorn": {
+      "version": "8.14.0",
+      "resolved": "https://registry.npmjs.org/acorn/-/acorn-8.14.0.tgz",
+      "integrity": "sha512-cl669nCJTZBsL97OF4kUQm5g5hC2uihk0NxY3WENAC0TYdILVkAyHymAntgxGkl7K+t0cXIrH5siy5S4XkFycA==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "acorn": "bin/acorn"
+      },
+      "engines": {
+        "node": ">=0.4.0"
+      }
+    },
+    "node_modules/argparse": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz",
+      "integrity": "sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==",
+      "dev": true,
+      "license": "Python-2.0"
+    },
+    "node_modules/c12": {
+      "version": "2.0.1",
+      "resolved": "https://registry.npmjs.org/c12/-/c12-2.0.1.tgz",
+      "integrity": "sha512-Z4JgsKXHG37C6PYUtIxCfLJZvo6FyhHJoClwwb9ftUkLpPSkuYqn6Tr+vnaN8hymm0kIbcg6Ey3kv/Q71k5w/A==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "chokidar": "^4.0.1",
+        "confbox": "^0.1.7",
+        "defu": "^6.1.4",
+        "dotenv": "^16.4.5",
+        "giget": "^1.2.3",
+        "jiti": "^2.3.0",
+        "mlly": "^1.7.1",
+        "ohash": "^1.1.4",
+        "pathe": "^1.1.2",
+        "perfect-debounce": "^1.0.0",
+        "pkg-types": "^1.2.0",
+        "rc9": "^2.1.2"
+      },
+      "peerDependencies": {
+        "magicast": "^0.3.5"
+      },
+      "peerDependenciesMeta": {
+        "magicast": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/chokidar": {
+      "version": "4.0.3",
+      "resolved": "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz",
+      "integrity": "sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "readdirp": "^4.0.1"
+      },
+      "engines": {
+        "node": ">= 14.16.0"
+      },
+      "funding": {
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
+    "node_modules/chownr": {
+      "version": "2.0.0",
+      "resolved": "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz",
+      "integrity": "sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/citty": {
+      "version": "0.1.6",
+      "resolved": "https://registry.npmjs.org/citty/-/citty-0.1.6.tgz",
+      "integrity": "sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "consola": "^3.2.3"
+      }
+    },
+    "node_modules/commander": {
+      "version": "13.0.0",
+      "resolved": "https://registry.npmjs.org/commander/-/commander-13.0.0.tgz",
+      "integrity": "sha512-oPYleIY8wmTVzkvQq10AEok6YcTC4sRUBl8F9gVuwchGVUCTbl/vhLTaQqutuuySYOsu8YTgV+OxKc/8Yvx+mQ==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
+    "node_modules/confbox": {
+      "version": "0.1.8",
+      "resolved": "https://registry.npmjs.org/confbox/-/confbox-0.1.8.tgz",
+      "integrity": "sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/consola": {
+      "version": "3.4.0",
+      "resolved": "https://registry.npmjs.org/consola/-/consola-3.4.0.tgz",
+      "integrity": "sha512-EiPU8G6dQG0GFHNR8ljnZFki/8a+cQwEQ+7wpxdChl02Q8HXlwEZWD5lqAF8vC2sEC3Tehr8hy7vErz88LHyUA==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^14.18.0 || >=16.10.0"
+      }
+    },
+    "node_modules/defu": {
+      "version": "6.1.4",
+      "resolved": "https://registry.npmjs.org/defu/-/defu-6.1.4.tgz",
+      "integrity": "sha512-mEQCMmwJu317oSz8CwdIOdwf3xMif1ttiM8LTufzc3g6kR+9Pe236twL8j3IYT1F7GfRgGcW6MWxzZjLIkuHIg==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/destr": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/destr/-/destr-2.0.3.tgz",
+      "integrity": "sha512-2N3BOUU4gYMpTP24s5rF5iP7BDr7uNTCs4ozw3kf/eKfvWSIu93GEBi5m427YoyJoeOzQ5smuu4nNAPGb8idSQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/dotenv": {
+      "version": "16.4.7",
+      "resolved": "https://registry.npmjs.org/dotenv/-/dotenv-16.4.7.tgz",
+      "integrity": "sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "engines": {
+        "node": ">=12"
+      },
+      "funding": {
+        "url": "https://dotenvx.com"
+      }
+    },
+    "node_modules/fs-minipass": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz",
+      "integrity": "sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "minipass": "^3.0.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/fs-minipass/node_modules/minipass": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz",
+      "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/giget": {
+      "version": "1.2.5",
+      "resolved": "https://registry.npmjs.org/giget/-/giget-1.2.5.tgz",
+      "integrity": "sha512-r1ekGw/Bgpi3HLV3h1MRBIlSAdHoIMklpaQ3OQLFcRw9PwAj2rqigvIbg+dBUI51OxVI2jsEtDywDBjSiuf7Ug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "citty": "^0.1.6",
+        "consola": "^3.4.0",
+        "defu": "^6.1.4",
+        "node-fetch-native": "^1.6.6",
+        "nypm": "^0.5.4",
+        "pathe": "^2.0.3",
+        "tar": "^6.2.1"
+      },
+      "bin": {
+        "giget": "dist/cli.mjs"
+      }
+    },
+    "node_modules/giget/node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/handlebars": {
+      "version": "4.7.8",
+      "resolved": "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz",
+      "integrity": "sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "minimist": "^1.2.5",
+        "neo-async": "^2.6.2",
+        "source-map": "^0.6.1",
+        "wordwrap": "^1.0.0"
+      },
+      "bin": {
+        "handlebars": "bin/handlebars"
+      },
+      "engines": {
+        "node": ">=0.4.7"
+      },
+      "optionalDependencies": {
+        "uglify-js": "^3.1.4"
+      }
+    },
+    "node_modules/jiti": {
+      "version": "2.4.2",
+      "resolved": "https://registry.npmjs.org/jiti/-/jiti-2.4.2.tgz",
+      "integrity": "sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "jiti": "lib/jiti-cli.mjs"
+      }
+    },
+    "node_modules/js-yaml": {
+      "version": "4.1.0",
+      "resolved": "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz",
+      "integrity": "sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "argparse": "^2.0.1"
+      },
+      "bin": {
+        "js-yaml": "bin/js-yaml.js"
+      }
+    },
+    "node_modules/minimist": {
+      "version": "1.2.8",
+      "resolved": "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz",
+      "integrity": "sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==",
+      "dev": true,
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
+    "node_modules/minipass": {
+      "version": "5.0.0",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz",
+      "integrity": "sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==",
+      "dev": true,
+      "license": "ISC",
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/minizlib": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz",
+      "integrity": "sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "minipass": "^3.0.0",
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">= 8"
+      }
+    },
+    "node_modules/minizlib/node_modules/minipass": {
+      "version": "3.3.6",
+      "resolved": "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz",
+      "integrity": "sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=8"
+      }
+    },
+    "node_modules/mkdirp": {
+      "version": "1.0.4",
+      "resolved": "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz",
+      "integrity": "sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==",
+      "dev": true,
+      "license": "MIT",
+      "bin": {
+        "mkdirp": "bin/cmd.js"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/mlly": {
+      "version": "1.7.4",
+      "resolved": "https://registry.npmjs.org/mlly/-/mlly-1.7.4.tgz",
+      "integrity": "sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "acorn": "^8.14.0",
+        "pathe": "^2.0.1",
+        "pkg-types": "^1.3.0",
+        "ufo": "^1.5.4"
+      }
+    },
+    "node_modules/mlly/node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/neo-async": {
+      "version": "2.6.2",
+      "resolved": "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz",
+      "integrity": "sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/node-fetch-native": {
+      "version": "1.6.6",
+      "resolved": "https://registry.npmjs.org/node-fetch-native/-/node-fetch-native-1.6.6.tgz",
+      "integrity": "sha512-8Mc2HhqPdlIfedsuZoc3yioPuzp6b+L5jRCRY1QzuWZh2EGJVQrGppC6V6cF0bLdbW0+O2YpqCA25aF/1lvipQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/nypm": {
+      "version": "0.5.4",
+      "resolved": "https://registry.npmjs.org/nypm/-/nypm-0.5.4.tgz",
+      "integrity": "sha512-X0SNNrZiGU8/e/zAB7sCTtdxWTMSIO73q+xuKgglm2Yvzwlo8UoC5FNySQFCvl84uPaeADkqHUZUkWy4aH4xOA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "citty": "^0.1.6",
+        "consola": "^3.4.0",
+        "pathe": "^2.0.3",
+        "pkg-types": "^1.3.1",
+        "tinyexec": "^0.3.2",
+        "ufo": "^1.5.4"
+      },
+      "bin": {
+        "nypm": "dist/cli.mjs"
+      },
+      "engines": {
+        "node": "^14.16.0 || >=16.10.0"
+      }
+    },
+    "node_modules/nypm/node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/ohash": {
+      "version": "1.1.4",
+      "resolved": "https://registry.npmjs.org/ohash/-/ohash-1.1.4.tgz",
+      "integrity": "sha512-FlDryZAahJmEF3VR3w1KogSEdWX3WhA5GPakFx4J81kEAiHyLMpdLLElS8n8dfNadMgAne/MywcvmogzscVt4g==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pathe": {
+      "version": "1.1.2",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-1.1.2.tgz",
+      "integrity": "sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/perfect-debounce": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/perfect-debounce/-/perfect-debounce-1.0.0.tgz",
+      "integrity": "sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/pkg-types": {
+      "version": "1.3.1",
+      "resolved": "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz",
+      "integrity": "sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "confbox": "^0.1.8",
+        "mlly": "^1.7.4",
+        "pathe": "^2.0.1"
+      }
+    },
+    "node_modules/pkg-types/node_modules/pathe": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz",
+      "integrity": "sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/rc9": {
+      "version": "2.1.2",
+      "resolved": "https://registry.npmjs.org/rc9/-/rc9-2.1.2.tgz",
+      "integrity": "sha512-btXCnMmRIBINM2LDZoEmOogIZU7Qe7zn4BpomSKZ/ykbLObuBdvG+mFq11DL6fjH1DRwHhrlgtYWG96bJiC7Cg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "defu": "^6.1.4",
+        "destr": "^2.0.3"
+      }
+    },
+    "node_modules/readdirp": {
+      "version": "4.1.2",
+      "resolved": "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz",
+      "integrity": "sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": ">= 14.18.0"
+      },
+      "funding": {
+        "type": "individual",
+        "url": "https://paulmillr.com/funding/"
+      }
+    },
+    "node_modules/source-map": {
+      "version": "0.6.1",
+      "resolved": "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz",
+      "integrity": "sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==",
+      "dev": true,
+      "license": "BSD-3-Clause",
+      "engines": {
+        "node": ">=0.10.0"
+      }
+    },
+    "node_modules/tar": {
+      "version": "6.2.1",
+      "resolved": "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz",
+      "integrity": "sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==",
+      "deprecated": "Old versions of tar are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me",
+      "dev": true,
+      "license": "ISC",
+      "dependencies": {
+        "chownr": "^2.0.0",
+        "fs-minipass": "^2.0.0",
+        "minipass": "^5.0.0",
+        "minizlib": "^2.1.1",
+        "mkdirp": "^1.0.3",
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
+    "node_modules/tinyexec": {
+      "version": "0.3.2",
+      "resolved": "https://registry.npmjs.org/tinyexec/-/tinyexec-0.3.2.tgz",
+      "integrity": "sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/typescript": {
+      "version": "5.9.3",
+      "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz",
+      "integrity": "sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==",
+      "dev": true,
+      "license": "Apache-2.0",
+      "bin": {
+        "tsc": "bin/tsc",
+        "tsserver": "bin/tsserver"
+      },
+      "engines": {
+        "node": ">=14.17"
+      }
+    },
+    "node_modules/ufo": {
+      "version": "1.5.4",
+      "resolved": "https://registry.npmjs.org/ufo/-/ufo-1.5.4.tgz",
+      "integrity": "sha512-UsUk3byDzKd04EyoZ7U4DOlxQaD14JUKQl6/P7wiX4FNvUfm3XL246n9W5AmqwW5RSFJ27NAuM0iLscAOYUiGQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/uglify-js": {
+      "version": "3.19.3",
+      "resolved": "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz",
+      "integrity": "sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==",
+      "dev": true,
+      "license": "BSD-2-Clause",
+      "optional": true,
+      "bin": {
+        "uglifyjs": "bin/uglifyjs"
+      },
+      "engines": {
+        "node": ">=0.8.0"
+      }
+    },
+    "node_modules/wordwrap": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz",
+      "integrity": "sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/yallist": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz",
+      "integrity": "sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==",
+      "dev": true,
+      "license": "ISC"
+    }
+  }
+}

types/paths/food/addChoice.yml

@@ -15,6 +15,8 @@ post:
               $ref: "../../schemas/_index.yml#/DayIndex"
             foodIndex:
               $ref: "../../schemas/_index.yml#/FoodIndex"
+            slot:
+              $ref: "../../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/food/removeChoice.yml

@@ -16,6 +16,8 @@ post:
               $ref: "../../schemas/_index.yml#/LunchChoice"
             dayIndex:
               $ref: "../../schemas/_index.yml#/DayIndex"
+            slot:
+              $ref: "../../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/food/removeChoices.yml

@@ -13,6 +13,8 @@ post:
               $ref: "../../schemas/_index.yml#/LunchChoice"
             dayIndex:
               $ref: "../../schemas/_index.yml#/DayIndex"
+            slot:
+              $ref: "../../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/food/updateBuyer.yml

@@ -1,6 +1,14 @@
 post:
   operationId: setBuyer
   summary: Nastavení/odnastavení aktuálně přihlášeného uživatele jako objednatele pro stav "Budu objednávat" pro aktuální den.
+  requestBody:
+    required: false
+    content:
+      application/json:
+        schema:
+          properties:
+            slot:
+              $ref: "../../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       description: Stav byl úspěšně změněn.

types/paths/food/updateNote.yml

@@ -11,6 +11,8 @@ post:
               $ref: "../../schemas/_index.yml#/DayIndex"
             note:
               type: string
+            slot:
+              $ref: "../../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/getData.yml

@@ -9,6 +9,11 @@ get:
         type: integer
         minimum: 0
         maximum: 4
+    - in: query
+      name: slot
+      description: Slot jídla. Pokud není předán, je použit výchozí slot (oběd).
+      schema:
+        $ref: "../schemas/_index.yml#/MealSlot"
   responses:
     "200":
       $ref: "../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/addMember.yml

@@ -0,0 +1,21 @@
+post:
+  operationId: addGroupMember
+  summary: Přidá uživatele do skupiny (sebe, nebo jiného jako zakladatel).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            login:
+              description: Login uživatele (volitelné — pokud není zadán, přidá přihlášeného uživatele)
+              type: string
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/createGroup.yml

@@ -0,0 +1,18 @@
+post:
+  operationId: createGroup
+  summary: Vytvoří novou skupinu objednávky pro aktuální den.
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - name
+          properties:
+            name:
+              description: Název obchodu/restaurace (musí být v seznamu povolených obchodů)
+              type: string
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/deleteGroup.yml

@@ -0,0 +1,18 @@
+post:
+  operationId: deleteGroup
+  summary: Smaže skupinu objednávky (pouze zakladatel).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/removeMember.yml

@@ -0,0 +1,22 @@
+post:
+  operationId: removeGroupMember
+  summary: Odebere uživatele ze skupiny (sebe, nebo jiného jako zakladatel).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+            - login
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            login:
+              description: Login uživatele k odebrání
+              type: string
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/setState.yml

@@ -0,0 +1,21 @@
+post:
+  operationId: setGroupState
+  summary: Změní stav skupiny (pouze zakladatel).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+            - state
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            state:
+              $ref: "../../schemas/_index.yml#/GroupState"
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/updateFees.yml

@@ -0,0 +1,34 @@
+post:
+  operationId: updateGroupFees
+  summary: Aktualizuje skupinové poplatky a slevu (pouze zakladatel, pouze otevřená skupina).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            fees:
+              description: Poplatky (haléře)
+              type: integer
+            shipping:
+              description: Doprava (haléře)
+              type: integer
+            tip:
+              description: Spropitné (haléře)
+              type: integer
+            discountType:
+              description: Typ slevy
+              type: string
+              enum: [percent, fixed]
+            discountValue:
+              description: Hodnota slevy (procenta nebo haléře pro fixed)
+              type: integer
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/updateMember.yml

@@ -0,0 +1,34 @@
+post:
+  operationId: updateGroupMember
+  summary: Aktualizuje data člena skupiny (částka, poznámka, příplatek).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+            - login
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            login:
+              description: Login člena ke změně
+              type: string
+            amount:
+              description: Částka k úhradě v haléřích
+              type: integer
+            note:
+              description: Poznámka
+              type: string
+            surchargeText:
+              description: Popis příplatku
+              type: string
+            surchargeAmount:
+              description: Výše příplatku v haléřích
+              type: integer
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/groups/updateTimes.yml

@@ -0,0 +1,24 @@
+post:
+  operationId: updateGroupTimes
+  summary: Aktualizuje časy objednání a doručení skupiny (pouze zakladatel).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - id
+          properties:
+            id:
+              description: ID skupiny
+              type: string
+            orderedAt:
+              description: Čas objednání ve formátu HH:MM
+              type: string
+            deliveryAt:
+              description: Očekávaný čas doručení ve formátu HH:MM
+              type: string
+  responses:
+    "200":
+      $ref: "../../api.yml#/components/responses/ClientDataResponse"

types/paths/pizzaDay/updatePizzaFee.yml

@@ -16,8 +16,8 @@ post:
               type: string
               description: Textový popis přirážky/slevy
             price:
-              type: number
-              description: Částka přirážky/slevy v Kč
+              type: integer
+              description: Částka přirážky/slevy v haléřích
   responses:
     "200":
       description: Nastavení přirážky/slevy proběhlo úspěšně.

types/paths/stores/addStore.yml

@@ -0,0 +1,28 @@
+post:
+  operationId: addStore
+  summary: Přidá obchod do seznamu povolených (vyžaduje admin heslo).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - name
+            - heslo
+          properties:
+            name:
+              description: Název obchodu/restaurace
+              type: string
+            heslo:
+              description: Admin heslo (ADMIN_PASSWORD)
+              type: string
+  responses:
+    "200":
+      description: Obchod byl přidán
+      content:
+        application/json:
+          schema:
+            type: array
+            items:
+              type: string

types/paths/stores/deleteStore.yml

@@ -0,0 +1,28 @@
+post:
+  operationId: deleteStore
+  summary: Odebere obchod ze seznamu povolených (vyžaduje admin heslo).
+  requestBody:
+    required: true
+    content:
+      application/json:
+        schema:
+          type: object
+          required:
+            - name
+            - heslo
+          properties:
+            name:
+              description: Název obchodu/restaurace k odebrání
+              type: string
+            heslo:
+              description: Admin heslo (ADMIN_PASSWORD)
+              type: string
+  responses:
+    "200":
+      description: Obchod byl odebrán
+      content:
+        application/json:
+          schema:
+            type: array
+            items:
+              type: string

types/paths/stores/listStores.yml

@@ -0,0 +1,12 @@
+get:
+  operationId: listStores
+  summary: Vrátí seznam povolených obchodů/restaurací.
+  responses:
+    "200":
+      description: Seznam obchodů
+      content:
+        application/json:
+          schema:
+            type: array
+            items:
+              type: string

types/schemas/_index.yml

@@ -63,6 +63,19 @@ ClientData:
       type: array
       items:
         $ref: "#/PendingQr"
+    slot:
+      description: Slot jídla, ke kterému se tato data vztahují
+      $ref: "#/MealSlot"
+    groups:
+      description: Skupiny objednávajících pro extra slot
+      type: array
+      items:
+        $ref: "#/OrderGroup"
+    stores:
+      description: Seznam povolených obchodů/restaurací pro extra objednávky
+      type: array
+      items:
+        type: string
 
 # --- OBĚDY ---
 UserLunchChoice:
@@ -135,6 +148,15 @@ LunchChoice:
     - OBJEDNAVAM
     - NEOBEDVAM
     - ROZHODUJI
+MealSlot:
+  description: Slot jídla - oběd nebo extra jídlo (večeře, pozdní oběd)
+  type: string
+  enum:
+    - obed
+    - extra
+  x-enum-varnames:
+    - OBED
+    - EXTRA
 DayIndex:
   description: Index dne v týdnu (0 = pondělí, 4 = pátek)
   type: integer
@@ -250,7 +272,6 @@ DepartureTime:
 FeatureRequest:
   type: string
   enum:
-    - Ruční generování QR kódů mimo Pizza day (např. při objednávání)
     - Možnost označovat si jídla jako oblíbená (taková jídla by se uživateli následně zvýrazňovala)
     - Možnost úhrady v podniku za všechny jednou osobou a následné generování QR ostatním
     - Zrušení \"užívejte víkend\", místo toho umožnit zpětně náhled na uplynulý týden
@@ -263,7 +284,6 @@ FeatureRequest:
     - Celkové vylepšení UI/UX
     - Zlepšení dokumentace/postupů pro ostatní vývojáře
   x-enum-varnames:
-    - CUSTOM_QR
     - FAVORITES
     - SINGLE_PAYMENT
     - NO_WEEKENDS
@@ -400,14 +420,14 @@ PizzaSize:
       description: Velikost pizzy, např. "30cm"
       type: string
     pizzaPrice:
-      description: Cena samotné pizzy v Kč
-      type: number
+      description: Cena samotné pizzy v haléřích
+      type: integer
     boxPrice:
-      description: Cena krabice pizzy v Kč
-      type: number
+      description: Cena krabice pizzy v haléřích
+      type: integer
     price:
-      description: Celková cena (pizza + krabice)
-      type: number
+      description: Celková cena (pizza + krabice) v haléřích
+      type: integer
 Pizza:
   description: Údaje o konkrétní pizze.
   type: object
@@ -450,8 +470,8 @@ PizzaVariant:
       description: Velikost pizzy (např. "30cm"), nebo "1 porce" pro salát
       type: string
     price:
-      description: Cena v Kč, včetně krabice/obalu
-      type: number
+      description: Cena v haléřích, včetně krabice/obalu
+      type: integer
     category:
       description: Kategorie položky (pizza nebo salat)
       type: string
@@ -474,8 +494,8 @@ Salat:
       items:
         type: string
     price:
-      description: Cena salátu v Kč (bez obalu)
-      type: number
+      description: Cena salátu v haléřích (bez obalu)
+      type: integer
 PizzaOrder:
   description: Údaje o objednávce pizzy jednoho uživatele.
   type: object
@@ -501,11 +521,11 @@ PizzaOrder:
           description: Popis příplatku (např. "kuřecí maso navíc")
           type: string
         price:
-          description: Cena příplatku v Kč
-          type: number
+          description: Cena příplatku v haléřích
+          type: integer
     totalPrice:
-      description: Celková cena všech objednaných pizz daného uživatele, včetně krabic a příplatků
-      type: number
+      description: Celková cena všech objednaných pizz daného uživatele v haléřích, včetně krabic a příplatků
+      type: integer
     hasQr:
       description: |
         Příznak, pokud je k této objednávce vygenerován QR kód pro platbu. To je typicky pravda, pokud:
@@ -615,9 +635,9 @@ QrRecipient:
       description: Účel platby (např. "Pizza prosciutto")
       type: string
     amount:
-      description: Částka v Kč (kladné číslo, max 2 desetinná místa)
-      type: number
-      minimum: 0.01
+      description: Částka v haléřích (kladné celé číslo)
+      type: integer
+      minimum: 1
 GenerateQrRequest:
   description: Request pro generování QR kódů
   type: object
@@ -638,6 +658,9 @@ GenerateQrRequest:
     bankAccountHolder:
       description: Jméno držitele bankovního účtu
       type: string
+    groupId:
+      description: ID skupiny objednávky (pro propojení QR kódů se skupinou)
+      type: string
 
 # --- DEV MOCK DATA ---
 GenerateMockDataRequest:
@@ -662,6 +685,93 @@ ClearMockDataRequest:
       description: Index dne v týdnu (0 = pondělí, 4 = pátek). Pokud není zadán, použije se aktuální den.
       $ref: "#/DayIndex"
 
+# --- SKUPINOVÉ OBJEDNÁVKY ---
+GroupState:
+  description: Stav skupiny objednávky
+  type: string
+  enum:
+    - open
+    - locked
+    - ordered
+  x-enum-varnames:
+    - OPEN
+    - LOCKED
+    - ORDERED
+
+OrderGroupMember:
+  description: Data člena skupiny objednávky
+  type: object
+  additionalProperties: false
+  properties:
+    amount:
+      description: Částka k úhradě v haléřích
+      type: integer
+    note:
+      description: Volitelná poznámka (např. co si objednává)
+      type: string
+    surchargeText:
+      description: Popis příplatku
+      type: string
+    surchargeAmount:
+      description: Výše příplatku v haléřích
+      type: integer
+    paid:
+      description: Příznak, zda člen uhradil svůj podíl objednávky
+      type: boolean
+
+OrderGroup:
+  description: Skupina uživatelů objednávajících z jednoho místa
+  type: object
+  additionalProperties: false
+  required:
+    - id
+    - name
+    - creatorLogin
+    - state
+    - members
+  properties:
+    id:
+      description: Unikátní identifikátor skupiny
+      type: string
+    name:
+      description: Název obchodu/restaurace
+      type: string
+    creatorLogin:
+      description: Login zakladatele skupiny
+      type: string
+    state:
+      $ref: "#/GroupState"
+    members:
+      description: Členové skupiny
+      type: object
+      additionalProperties:
+        $ref: "#/OrderGroupMember"
+    orderedAt:
+      description: Čas objednání ve formátu HH:MM
+      type: string
+    deliveryAt:
+      description: Očekávaný čas doručení ve formátu HH:MM
+      type: string
+    fees:
+      description: Poplatky (balení apod.) celkem v haléřích
+      type: integer
+    shipping:
+      description: Doprava v haléřích
+      type: integer
+    tip:
+      description: Spropitné v haléřích
+      type: integer
+    discountType:
+      description: Typ slevy aplikované na objednávku
+      type: string
+      enum: [percent, fixed]
+    discountValue:
+      description: Hodnota slevy (procenta pro typ 'percent', haléře pro typ 'fixed')
+      type: integer
+    qrGenerated:
+      description: Příznak, zda byly pro skupinu vygenerovány QR kódy (blokuje opakované generování)
+      type: boolean
+
 # --- NEVYŘÍZENÉ QR KÓDY ---
 PendingQr:
   description: Nevyřízený QR kód pro platbu
@@ -683,8 +793,11 @@ PendingQr:
       description: Jméno uživatele, který QR vygeneroval (příjemce platby)
       type: string
     totalPrice:
-      description: Celková cena objednávky v Kč
-      type: number
+      description: Celková cena objednávky v haléřích
+      type: integer
     purpose:
       description: Účel platby (např. "Pizza prosciutto")
       type: string
+    groupId:
+      description: ID skupiny objednávky, ke které QR patří
+      type: string

types/yarn.lock

@@ -4,12 +4,12 @@
 
 "@hey-api/client-fetch@^0.8.2":
   version "0.8.2"
-  resolved "https://registry.yarnpkg.com/@hey-api/client-fetch/-/client-fetch-0.8.2.tgz#675aadfbc9478bb8eef5679f11a9334258dff4c8"
+  resolved "https://registry.npmjs.org/@hey-api/client-fetch/-/client-fetch-0.8.2.tgz"
   integrity sha512-61T4UGfAzY5345vMxWDX8qnSTNRJcOpWuZyvNu3vNebCTLPwMQAM85mhEuBoACdWeRtLhNoUjU0UR5liRyD1bA==
 
 "@hey-api/json-schema-ref-parser@1.0.2":
   version "1.0.2"
-  resolved "https://registry.yarnpkg.com/@hey-api/json-schema-ref-parser/-/json-schema-ref-parser-1.0.2.tgz#c3824c5d9d531eeb5c2b2557857a8ad20b5c75a7"
+  resolved "https://registry.npmjs.org/@hey-api/json-schema-ref-parser/-/json-schema-ref-parser-1.0.2.tgz"
   integrity sha512-F6LSkttZcT/XiX3ydeDqTY3uRN3BLJMwyMTk4kg/ichZlKUp3+3Odv0WokSmXGSoZGTW/N66FROMYAm5NPdJlA==
   dependencies:
     "@jsdevtools/ono" "^7.1.3"
@@ -18,7 +18,7 @@
 
 "@hey-api/openapi-ts@^0.64.7":
   version "0.64.7"
-  resolved "https://registry.yarnpkg.com/@hey-api/openapi-ts/-/openapi-ts-0.64.7.tgz#f239d268b4a35b91f5ff25479d15578feb01f365"
+  resolved "https://registry.npmjs.org/@hey-api/openapi-ts/-/openapi-ts-0.64.7.tgz"
   integrity sha512-xpaBzdGAKz7cPuGah1GZWl3zTZquOXRnwmpVCQKEUpvDtSYWBLjSxtAYIqDBjwJkuNHcakZBIWLcappx7slc2g==
   dependencies:
     "@hey-api/json-schema-ref-parser" "1.0.2"
@@ -28,27 +28,27 @@
 
 "@jsdevtools/ono@^7.1.3":
   version "7.1.3"
-  resolved "https://registry.yarnpkg.com/@jsdevtools/ono/-/ono-7.1.3.tgz#9df03bbd7c696a5c58885c34aa06da41c8543796"
+  resolved "https://registry.npmjs.org/@jsdevtools/ono/-/ono-7.1.3.tgz"
   integrity sha512-4JQNk+3mVzK3xh2rqd6RB4J46qUR19azEHBneZyTZM+c456qOrbbM/5xcR8huNCCcbVt7+UmizG6GuUvPvKUYg==
 
 "@types/json-schema@^7.0.15":
   version "7.0.15"
-  resolved "https://registry.yarnpkg.com/@types/json-schema/-/json-schema-7.0.15.tgz#596a1747233694d50f6ad8a7869fcb6f56cf5841"
+  resolved "https://registry.npmjs.org/@types/json-schema/-/json-schema-7.0.15.tgz"
   integrity sha512-5+fP8P8MFNC+AyZCDxrB2pkZFPGzqQWUzpSeuuVLvm8VMcorNYavBqoFcxK8bQz4Qsbn4oUEEem4wDLfcysGHA==
 
 acorn@^8.14.0:
   version "8.14.0"
-  resolved "https://registry.yarnpkg.com/acorn/-/acorn-8.14.0.tgz#063e2c70cac5fb4f6467f0b11152e04c682795b0"
+  resolved "https://registry.npmjs.org/acorn/-/acorn-8.14.0.tgz"
   integrity sha512-cl669nCJTZBsL97OF4kUQm5g5hC2uihk0NxY3WENAC0TYdILVkAyHymAntgxGkl7K+t0cXIrH5siy5S4XkFycA==
 
 argparse@^2.0.1:
   version "2.0.1"
-  resolved "https://registry.yarnpkg.com/argparse/-/argparse-2.0.1.tgz#246f50f3ca78a3240f6c997e8a9bd1eac49e4b38"
+  resolved "https://registry.npmjs.org/argparse/-/argparse-2.0.1.tgz"
   integrity sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==
 
 c12@2.0.1:
   version "2.0.1"
-  resolved "https://registry.yarnpkg.com/c12/-/c12-2.0.1.tgz#5702d280b31a08abba39833494c9b1202f0f5aec"
+  resolved "https://registry.npmjs.org/c12/-/c12-2.0.1.tgz"
   integrity sha512-Z4JgsKXHG37C6PYUtIxCfLJZvo6FyhHJoClwwb9ftUkLpPSkuYqn6Tr+vnaN8hymm0kIbcg6Ey3kv/Q71k5w/A==
   dependencies:
     chokidar "^4.0.1"
@@ -66,63 +66,63 @@ c12@2.0.1:
 
 chokidar@^4.0.1:
   version "4.0.3"
-  resolved "https://registry.yarnpkg.com/chokidar/-/chokidar-4.0.3.tgz#7be37a4c03c9aee1ecfe862a4a23b2c70c205d30"
+  resolved "https://registry.npmjs.org/chokidar/-/chokidar-4.0.3.tgz"
   integrity sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==
   dependencies:
     readdirp "^4.0.1"
 
 chownr@^2.0.0:
   version "2.0.0"
-  resolved "https://registry.yarnpkg.com/chownr/-/chownr-2.0.0.tgz#15bfbe53d2eab4cf70f18a8cd68ebe5b3cb1dece"
+  resolved "https://registry.npmjs.org/chownr/-/chownr-2.0.0.tgz"
   integrity sha512-bIomtDF5KGpdogkLd9VspvFzk9KfpyyGlS8YFVZl7TGPBHL5snIOnxeshwVgPteQ9b4Eydl+pVbIyE1DcvCWgQ==
 
 citty@^0.1.6:
   version "0.1.6"
-  resolved "https://registry.yarnpkg.com/citty/-/citty-0.1.6.tgz#0f7904da1ed4625e1a9ea7e0fa780981aab7c5e4"
+  resolved "https://registry.npmjs.org/citty/-/citty-0.1.6.tgz"
   integrity sha512-tskPPKEs8D2KPafUypv2gxwJP8h/OaJmC82QQGGDQcHvXX43xF2VDACcJVmZ0EuSxkpO9Kc4MlrA3q0+FG58AQ==
   dependencies:
     consola "^3.2.3"
 
 commander@13.0.0:
   version "13.0.0"
-  resolved "https://registry.yarnpkg.com/commander/-/commander-13.0.0.tgz#1b161f60ee3ceb8074583a0f95359a4f8701845c"
+  resolved "https://registry.npmjs.org/commander/-/commander-13.0.0.tgz"
   integrity sha512-oPYleIY8wmTVzkvQq10AEok6YcTC4sRUBl8F9gVuwchGVUCTbl/vhLTaQqutuuySYOsu8YTgV+OxKc/8Yvx+mQ==
 
 confbox@^0.1.7, confbox@^0.1.8:
   version "0.1.8"
-  resolved "https://registry.yarnpkg.com/confbox/-/confbox-0.1.8.tgz#820d73d3b3c82d9bd910652c5d4d599ef8ff8b06"
+  resolved "https://registry.npmjs.org/confbox/-/confbox-0.1.8.tgz"
   integrity sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==
 
 consola@^3.2.3, consola@^3.4.0:
   version "3.4.0"
-  resolved "https://registry.yarnpkg.com/consola/-/consola-3.4.0.tgz#4cfc9348fd85ed16a17940b3032765e31061ab88"
+  resolved "https://registry.npmjs.org/consola/-/consola-3.4.0.tgz"
   integrity sha512-EiPU8G6dQG0GFHNR8ljnZFki/8a+cQwEQ+7wpxdChl02Q8HXlwEZWD5lqAF8vC2sEC3Tehr8hy7vErz88LHyUA==
 
 defu@^6.1.4:
   version "6.1.4"
-  resolved "https://registry.yarnpkg.com/defu/-/defu-6.1.4.tgz#4e0c9cf9ff68fe5f3d7f2765cc1a012dfdcb0479"
+  resolved "https://registry.npmjs.org/defu/-/defu-6.1.4.tgz"
   integrity sha512-mEQCMmwJu317oSz8CwdIOdwf3xMif1ttiM8LTufzc3g6kR+9Pe236twL8j3IYT1F7GfRgGcW6MWxzZjLIkuHIg==
 
 destr@^2.0.3:
   version "2.0.3"
-  resolved "https://registry.yarnpkg.com/destr/-/destr-2.0.3.tgz#7f9e97cb3d16dbdca7be52aca1644ce402cfe449"
+  resolved "https://registry.npmjs.org/destr/-/destr-2.0.3.tgz"
   integrity sha512-2N3BOUU4gYMpTP24s5rF5iP7BDr7uNTCs4ozw3kf/eKfvWSIu93GEBi5m427YoyJoeOzQ5smuu4nNAPGb8idSQ==
 
 dotenv@^16.4.5:
   version "16.4.7"
-  resolved "https://registry.yarnpkg.com/dotenv/-/dotenv-16.4.7.tgz#0e20c5b82950140aa99be360a8a5f52335f53c26"
+  resolved "https://registry.npmjs.org/dotenv/-/dotenv-16.4.7.tgz"
   integrity sha512-47qPchRCykZC03FhkYAhrvwU4xDBFIj1QPqaarj6mdM/hgUzfPHcpkHJOn3mJAufFeeAxAzeGsr5X0M4k6fLZQ==
 
 fs-minipass@^2.0.0:
   version "2.1.0"
-  resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-2.1.0.tgz#7f5036fdbf12c63c169190cbe4199c852271f9fb"
+  resolved "https://registry.npmjs.org/fs-minipass/-/fs-minipass-2.1.0.tgz"
   integrity sha512-V/JgOLFCS+R6Vcq0slCuaeWEdNC3ouDlJMNIsacH2VtALiu9mV4LPrHc5cDl8k5aw6J8jwgWWpiTo5RYhmIzvg==
   dependencies:
     minipass "^3.0.0"
 
 giget@^1.2.3:
   version "1.2.5"
-  resolved "https://registry.yarnpkg.com/giget/-/giget-1.2.5.tgz#0bd4909356a0da75cc1f2b33538f93adec0d202f"
+  resolved "https://registry.npmjs.org/giget/-/giget-1.2.5.tgz"
   integrity sha512-r1ekGw/Bgpi3HLV3h1MRBIlSAdHoIMklpaQ3OQLFcRw9PwAj2rqigvIbg+dBUI51OxVI2jsEtDywDBjSiuf7Ug==
   dependencies:
     citty "^0.1.6"
@@ -135,7 +135,7 @@ giget@^1.2.3:
 
 handlebars@4.7.8:
   version "4.7.8"
-  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.8.tgz#41c42c18b1be2365439188c77c6afae71c0cd9e9"
+  resolved "https://registry.npmjs.org/handlebars/-/handlebars-4.7.8.tgz"
   integrity sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==
   dependencies:
     minimist "^1.2.5"
@@ -147,36 +147,36 @@ handlebars@4.7.8:
 
 jiti@^2.3.0:
   version "2.4.2"
-  resolved "https://registry.yarnpkg.com/jiti/-/jiti-2.4.2.tgz#d19b7732ebb6116b06e2038da74a55366faef560"
+  resolved "https://registry.npmjs.org/jiti/-/jiti-2.4.2.tgz"
   integrity sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==
 
 js-yaml@^4.1.0:
   version "4.1.0"
-  resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.0.tgz#c1fb65f8f5017901cdd2c951864ba18458a10602"
+  resolved "https://registry.npmjs.org/js-yaml/-/js-yaml-4.1.0.tgz"
   integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA==
   dependencies:
     argparse "^2.0.1"
 
 minimist@^1.2.5:
   version "1.2.8"
-  resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.8.tgz#c1a464e7693302e082a075cee0c057741ac4772c"
+  resolved "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
   integrity sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==
 
 minipass@^3.0.0:
   version "3.3.6"
-  resolved "https://registry.yarnpkg.com/minipass/-/minipass-3.3.6.tgz#7bba384db3a1520d18c9c0e5251c3444e95dd94a"
+  resolved "https://registry.npmjs.org/minipass/-/minipass-3.3.6.tgz"
   integrity sha512-DxiNidxSEK+tHG6zOIklvNOwm3hvCrbUrdtzY74U6HKTJxvIDfOUL5W5P2Ghd3DTkhhKPYGqeNUIh5qcM4YBfw==
   dependencies:
     yallist "^4.0.0"
 
 minipass@^5.0.0:
   version "5.0.0"
-  resolved "https://registry.yarnpkg.com/minipass/-/minipass-5.0.0.tgz#3e9788ffb90b694a5d0ec94479a45b5d8738133d"
+  resolved "https://registry.npmjs.org/minipass/-/minipass-5.0.0.tgz"
   integrity sha512-3FnjYuehv9k6ovOEbyOswadCDPX1piCfhV8ncmYtHOjuPwylVWsghTLo7rabjC3Rx5xD4HDx8Wm1xnMF7S5qFQ==
 
 minizlib@^2.1.1:
   version "2.1.2"
-  resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-2.1.2.tgz#e90d3466ba209b932451508a11ce3d3632145931"
+  resolved "https://registry.npmjs.org/minizlib/-/minizlib-2.1.2.tgz"
   integrity sha512-bAxsR8BVfj60DWXHE3u30oHzfl4G7khkSuPW+qvpd7jFRHm7dLxOjUk1EHACJ/hxLY8phGJ0YhYHZo7jil7Qdg==
   dependencies:
     minipass "^3.0.0"
@@ -184,12 +184,12 @@ minizlib@^2.1.1:
 
 mkdirp@^1.0.3:
   version "1.0.4"
-  resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-1.0.4.tgz#3eb5ed62622756d79a5f0e2a221dfebad75c2f7e"
+  resolved "https://registry.npmjs.org/mkdirp/-/mkdirp-1.0.4.tgz"
   integrity sha512-vVqVZQyf3WLx2Shd0qJ9xuvqgAyKPLAiqITEtqW0oIUjzo3PePDd6fW9iFz30ef7Ysp/oiWqbhszeGWW2T6Gzw==
 
 mlly@^1.7.1, mlly@^1.7.4:
   version "1.7.4"
-  resolved "https://registry.yarnpkg.com/mlly/-/mlly-1.7.4.tgz#3d7295ea2358ec7a271eaa5d000a0f84febe100f"
+  resolved "https://registry.npmjs.org/mlly/-/mlly-1.7.4.tgz"
   integrity sha512-qmdSIPC4bDJXgZTCR7XosJiNKySV7O215tsPtDN9iEO/7q/76b/ijtgRu/+epFXSJhijtTCCGp3DWS549P3xKw==
   dependencies:
     acorn "^8.14.0"
@@ -199,17 +199,17 @@ mlly@^1.7.1, mlly@^1.7.4:
 
 neo-async@^2.6.2:
   version "2.6.2"
-  resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.2.tgz#b4aafb93e3aeb2d8174ca53cf163ab7d7308305f"
+  resolved "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz"
   integrity sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw==
 
 node-fetch-native@^1.6.6:
   version "1.6.6"
-  resolved "https://registry.yarnpkg.com/node-fetch-native/-/node-fetch-native-1.6.6.tgz#ae1d0e537af35c2c0b0de81cbff37eedd410aa37"
+  resolved "https://registry.npmjs.org/node-fetch-native/-/node-fetch-native-1.6.6.tgz"
   integrity sha512-8Mc2HhqPdlIfedsuZoc3yioPuzp6b+L5jRCRY1QzuWZh2EGJVQrGppC6V6cF0bLdbW0+O2YpqCA25aF/1lvipQ==
 
 nypm@^0.5.4:
   version "0.5.4"
-  resolved "https://registry.yarnpkg.com/nypm/-/nypm-0.5.4.tgz#a5ab0d8d37f96342328479f88ef58699f29b3051"
+  resolved "https://registry.npmjs.org/nypm/-/nypm-0.5.4.tgz"
   integrity sha512-X0SNNrZiGU8/e/zAB7sCTtdxWTMSIO73q+xuKgglm2Yvzwlo8UoC5FNySQFCvl84uPaeADkqHUZUkWy4aH4xOA==
   dependencies:
     citty "^0.1.6"
@@ -221,27 +221,32 @@ nypm@^0.5.4:
 
 ohash@^1.1.4:
   version "1.1.4"
-  resolved "https://registry.yarnpkg.com/ohash/-/ohash-1.1.4.tgz#ae8d83014ab81157d2c285abf7792e2995fadd72"
+  resolved "https://registry.npmjs.org/ohash/-/ohash-1.1.4.tgz"
   integrity sha512-FlDryZAahJmEF3VR3w1KogSEdWX3WhA5GPakFx4J81kEAiHyLMpdLLElS8n8dfNadMgAne/MywcvmogzscVt4g==
 
 pathe@^1.1.2:
   version "1.1.2"
-  resolved "https://registry.yarnpkg.com/pathe/-/pathe-1.1.2.tgz#6c4cb47a945692e48a1ddd6e4094d170516437ec"
+  resolved "https://registry.npmjs.org/pathe/-/pathe-1.1.2.tgz"
   integrity sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==
 
-pathe@^2.0.1, pathe@^2.0.3:
+pathe@^2.0.1:
   version "2.0.3"
-  resolved "https://registry.yarnpkg.com/pathe/-/pathe-2.0.3.tgz#3ecbec55421685b70a9da872b2cff3e1cbed1716"
+  resolved "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz"
+  integrity sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==
+
+pathe@^2.0.3:
+  version "2.0.3"
+  resolved "https://registry.npmjs.org/pathe/-/pathe-2.0.3.tgz"
   integrity sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==
 
 perfect-debounce@^1.0.0:
   version "1.0.0"
-  resolved "https://registry.yarnpkg.com/perfect-debounce/-/perfect-debounce-1.0.0.tgz#9c2e8bc30b169cc984a58b7d5b28049839591d2a"
+  resolved "https://registry.npmjs.org/perfect-debounce/-/perfect-debounce-1.0.0.tgz"
   integrity sha512-xCy9V055GLEqoFaHoC1SoLIaLmWctgCUaBaWxDZ7/Zx4CTyX7cJQLJOok/orfjZAh9kEYpjJa4d0KcJmCbctZA==
 
 pkg-types@^1.2.0, pkg-types@^1.3.0, pkg-types@^1.3.1:
   version "1.3.1"
-  resolved "https://registry.yarnpkg.com/pkg-types/-/pkg-types-1.3.1.tgz#bd7cc70881192777eef5326c19deb46e890917df"
+  resolved "https://registry.npmjs.org/pkg-types/-/pkg-types-1.3.1.tgz"
   integrity sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==
   dependencies:
     confbox "^0.1.8"
@@ -250,7 +255,7 @@ pkg-types@^1.2.0, pkg-types@^1.3.0, pkg-types@^1.3.1:
 
 rc9@^2.1.2:
   version "2.1.2"
-  resolved "https://registry.yarnpkg.com/rc9/-/rc9-2.1.2.tgz#6282ff638a50caa0a91a31d76af4a0b9cbd1080d"
+  resolved "https://registry.npmjs.org/rc9/-/rc9-2.1.2.tgz"
   integrity sha512-btXCnMmRIBINM2LDZoEmOogIZU7Qe7zn4BpomSKZ/ykbLObuBdvG+mFq11DL6fjH1DRwHhrlgtYWG96bJiC7Cg==
   dependencies:
     defu "^6.1.4"
@@ -258,17 +263,17 @@ rc9@^2.1.2:
 
 readdirp@^4.0.1:
   version "4.1.2"
-  resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-4.1.2.tgz#eb85801435fbf2a7ee58f19e0921b068fc69948d"
+  resolved "https://registry.npmjs.org/readdirp/-/readdirp-4.1.2.tgz"
   integrity sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==
 
 source-map@^0.6.1:
   version "0.6.1"
-  resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
+  resolved "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
   integrity sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==
 
 tar@^6.2.1:
   version "6.2.1"
-  resolved "https://registry.yarnpkg.com/tar/-/tar-6.2.1.tgz#717549c541bc3c2af15751bea94b1dd068d4b03a"
+  resolved "https://registry.npmjs.org/tar/-/tar-6.2.1.tgz"
   integrity sha512-DZ4yORTwrbTj/7MZYq2w+/ZFdI6OZ/f9SFHR+71gIVUZhOQPHzVCLpvRnPgyaMpfWxxk/4ONva3GQSyNIKRv6A==
   dependencies:
     chownr "^2.0.0"
@@ -280,30 +285,30 @@ tar@^6.2.1:
 
 tinyexec@^0.3.2:
   version "0.3.2"
-  resolved "https://registry.yarnpkg.com/tinyexec/-/tinyexec-0.3.2.tgz#941794e657a85e496577995c6eef66f53f42b3d2"
+  resolved "https://registry.npmjs.org/tinyexec/-/tinyexec-0.3.2.tgz"
   integrity sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==
 
-typescript@^5.9.3:
+typescript@^5.5.3, typescript@^5.9.3:
   version "5.9.3"
-  resolved "https://registry.yarnpkg.com/typescript/-/typescript-5.9.3.tgz#5b4f59e15310ab17a216f5d6cf53ee476ede670f"
+  resolved "https://registry.npmjs.org/typescript/-/typescript-5.9.3.tgz"
   integrity sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==
 
 ufo@^1.5.4:
   version "1.5.4"
-  resolved "https://registry.yarnpkg.com/ufo/-/ufo-1.5.4.tgz#16d6949674ca0c9e0fbbae1fa20a71d7b1ded754"
+  resolved "https://registry.npmjs.org/ufo/-/ufo-1.5.4.tgz"
   integrity sha512-UsUk3byDzKd04EyoZ7U4DOlxQaD14JUKQl6/P7wiX4FNvUfm3XL246n9W5AmqwW5RSFJ27NAuM0iLscAOYUiGQ==
 
 uglify-js@^3.1.4:
   version "3.19.3"
-  resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.19.3.tgz#82315e9bbc6f2b25888858acd1fff8441035b77f"
+  resolved "https://registry.npmjs.org/uglify-js/-/uglify-js-3.19.3.tgz"
   integrity sha512-v3Xu+yuwBXisp6QYTcH4UbH+xYJXqnq2m/LtQVWKWzYc1iehYnLixoQDN9FH6/j9/oybfd6W9Ghwkl8+UMKTKQ==
 
 wordwrap@^1.0.0:
   version "1.0.0"
-  resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
+  resolved "https://registry.npmjs.org/wordwrap/-/wordwrap-1.0.0.tgz"
   integrity sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==
 
 yallist@^4.0.0:
   version "4.0.0"
-  resolved "https://registry.yarnpkg.com/yallist/-/yallist-4.0.0.tgz#9bb92790d9c0effec63be73519e11a35019a3a72"
+  resolved "https://registry.npmjs.org/yallist/-/yallist-4.0.0.tgz"
   integrity sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==