feat(dashboard): show the user's work plan for today

Adds a "Můj plán na dnešek" card near the clock-in: for the logged-in
user it shows today's work-plan entry — category (coloured dot + label),
the project/site (the "where"), the note, and a "součást rozsahu …" badge
only for genuinely multi-day ranges. A muted "Pro dnešek nemáte
naplánováno." empty state when nothing is scheduled.

Server: GET /api/admin/dashboard now returns today_plan, reusing
plan.service resolveCell (override-beats-range precedence) for the current
user + today's local (Prague) date, enriched with the category label +
colour so the widget needs no extra query. Gated by attendance.record /
attendance.manage (the plan permission); omitted otherwise. No migration.

Verified in Chrome: renders today's entry (Práce · OBJ-2026-006 — koko)
with the category colour. tsc -b --noEmit, npm run build, vitest 152/152.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

src/admin/components/dashboard/DashTodayPlan.tsx

@@ -0,0 +1,110 @@
+import Box from "@mui/material/Box";
+import Typography from "@mui/material/Typography";
+import { Card } from "../../ui";
+import { formatDate } from "../../utils/formatters";
+
+/** The logged-in user's resolved work plan for today (see GET /api/admin/dashboard). */
+export interface TodayPlan {
+  shift_date: string;
+  category: string;
+  category_label: string;
+  category_color: string | null;
+  project_id: number | null;
+  project_number: string | null;
+  project_name: string | null;
+  note: string;
+  source: "entry" | "override";
+  rangeFrom: string | null;
+  rangeTo: string | null;
+}
+
+function projectLabel(p: TodayPlan): string {
+  const parts = [p.project_number, p.project_name].filter(Boolean);
+  return parts.length > 0 ? parts.join(" — ") : "Bez projektu";
+}
+
+/**
+ * "Můj plán na dnešek" — shows the logged-in user's work-plan entry for today
+ * (category + project/site + note, with a range badge when the day is part of a
+ * multi-day range). `plan === null` = the user has plan access but nothing is
+ * scheduled today (muted empty state). Rendered near the clock-in on the
+ * dashboard; the caller gates it on the plan permission.
+ */
+export default function DashTodayPlan({ plan }: { plan: TodayPlan | null }) {
+  const color = plan?.category_color || "var(--mui-palette-primary-main)";
+  return (
+    <Card sx={{ mb: 3 }}>
+      <Typography
+        variant="subtitle2"
+        sx={{ mb: 1.5, fontWeight: 600, color: "text.secondary" }}
+      >
+        Můj plán na dnešek
+      </Typography>
+
+      {plan ? (
+        <Box sx={{ display: "flex", flexDirection: "column", gap: 1 }}>
+          <Box
+            sx={{
+              display: "flex",
+              alignItems: "center",
+              gap: 1,
+              flexWrap: "wrap",
+            }}
+          >
+            <Box
+              sx={{
+                display: "inline-flex",
+                alignItems: "center",
+                gap: 0.75,
+                px: 1.25,
+                py: 0.5,
+                borderRadius: 999,
+                border: 1,
+                borderColor: "divider",
+                bgcolor: `color-mix(in srgb, ${color} 12%, transparent)`,
+              }}
+            >
+              <Box
+                sx={{
+                  width: 10,
+                  height: 10,
+                  borderRadius: "50%",
+                  bgcolor: color,
+                  flexShrink: 0,
+                }}
+              />
+              <Typography
+                component="span"
+                sx={{ fontWeight: 700, fontSize: "0.8rem" }}
+              >
+                {plan.category_label}
+              </Typography>
+            </Box>
+            {plan.rangeFrom &&
+              plan.rangeTo &&
+              plan.rangeFrom !== plan.rangeTo && (
+                <Typography variant="caption" color="text.secondary">
+                  součást rozsahu {formatDate(plan.rangeFrom)} –{" "}
+                  {formatDate(plan.rangeTo)}
+                </Typography>
+              )}
+          </Box>
+
+          <Typography variant="h6" sx={{ lineHeight: 1.25 }}>
+            {projectLabel(plan)}
+          </Typography>
+
+          {plan.note && (
+            <Typography variant="body2" color="text.secondary">
+              {plan.note}
+            </Typography>
+          )}
+        </Box>
+      ) : (
+        <Typography variant="body2" color="text.secondary">
+          Pro dnešek nemáte naplánováno.
+        </Typography>
+      )}
+    </Card>
+  );
+}

src/admin/pages/Dashboard.tsx

@@ -19,6 +19,9 @@ import DashActivityFeed from "../components/dashboard/DashActivityFeed";
 import DashAttendanceToday from "../components/dashboard/DashAttendanceToday";
 import DashProfile from "../components/dashboard/DashProfile";
 import DashSessions from "../components/dashboard/DashSessions";
+import DashTodayPlan, {
+  type TodayPlan,
+} from "../components/dashboard/DashTodayPlan";
 
 const API_BASE = "/api/admin";
 
@@ -69,6 +72,7 @@ interface DashData {
   pending_orders?: number;
   unpaid_invoices?: number;
   pending_leave_requests?: number;
+  today_plan?: TodayPlan | null;
   [key: string]: unknown;
 }
 
@@ -317,6 +321,13 @@ export default function Dashboard() {
           <DashKpiCards dashData={dashData ?? null} />
         )}
 
+      {/* My work plan for today — paired with the clock-in below */}
+      {!dashLoading &&
+        (hasPermission("attendance.record") ||
+          hasPermission("attendance.manage")) && (
+          <DashTodayPlan plan={dashData?.today_plan ?? null} />
+        )}
+
       {/* Quick actions */}
       {!dashLoading && (
         <DashQuickActions

src/routes/admin/dashboard.ts

@@ -4,6 +4,7 @@ import { requireAuth } from "../../middleware/auth";
 import { success } from "../../utils/response";
 import { localTimeStr } from "../../utils/date";
 import { toCzk } from "../../services/exchange-rates";
+import { resolveCell } from "../../services/plan.service";
 
 export default async function dashboardRoutes(
   fastify: FastifyInstance,
@@ -42,6 +43,29 @@ export default async function dashboardRoutes(
       result.my_shift = { has_ongoing: myShift !== null };
     }
 
+    // Today's work plan (personal) — powers the "Můj plán na dnešek" card.
+    // resolveCell applies override-beats-range precedence; null = the user has
+    // plan access but nothing is scheduled today. The category key is enriched
+    // with its label + colour so the widget needs no extra query. todayStr uses
+    // local (Europe/Prague) calendar date — the plan's @db.Date day.
+    if (has("attendance.record") || has("attendance.manage")) {
+      const todayStr = `${now.getFullYear()}-${String(now.getMonth() + 1).padStart(2, "0")}-${String(now.getDate()).padStart(2, "0")}`;
+      const cell = await resolveCell(userId, todayStr);
+      if (cell) {
+        const cat = await prisma.plan_categories.findUnique({
+          where: { key: cell.category },
+          select: { label: true, color: true },
+        });
+        result.today_plan = {
+          ...cell,
+          category_label: cat?.label ?? cell.category,
+          category_color: cat?.color ?? null,
+        };
+      } else {
+        result.today_plan = null;
+      }
+    }
+
     // Attendance admin — only for attendance.manage
     if (has("attendance.manage")) {
       const [todayAttendance, onLeaveToday, usersCount] = await Promise.all([