1.5.0

feat: full invoice editing before payment, NAS cleanup on date change
- Invoice edit mode now uses the same form as create mode (all fields editable) - Bank account pre-selected by matching IBAN/account number - Invoice number read-only in edit mode - Paid invoices remain read-only - NAS: old PDF deleted when invoice date changes to different month - Buttons: Zobrazit fakturu, Uložit, Smazat + status transitions Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-02 15:47:46 +02:00 · 2026-04-02 15:47:46 +02:00 · 2026-04-02 15:25:35 +02:00 · 2026-04-02 15:25:35 +02:00 · 2026-04-02 12:55:24 +02:00 · 2026-04-02 12:55:24 +02:00
27 changed files with 1320 additions and 1419 deletions
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,12 +1,12 @@
 {
  "name": "app-ts",
-  "version": "1.3.4",
+  "version": "1.5.0",
  "lockfileVersion": 3,
  "requires": true,
  "packages": {
    "": {
      "name": "app-ts",
-      "version": "1.3.4",
+      "version": "1.5.0",
      "license": "ISC",
      "dependencies": {
        "@dnd-kit/core": "^6.3.1",
@@ -2089,9 +2089,9 @@
      }
    },
    "node_modules/brace-expansion": {
-      "version": "5.0.4",
-      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.4.tgz",
-      "integrity": "sha512-h+DEnpVvxmfVefa4jFbCf5HdH5YMDXRsmKflpf1pILZWRFlTbJpxeU55nJl4Smt5HQaGzg1o6RHFPJaOqnmBDg==",
+      "version": "5.0.5",
+      "resolved": "https://registry.npmjs.org/brace-expansion/-/brace-expansion-5.0.5.tgz",
+      "integrity": "sha512-VZznLgtwhn+Mact9tfiwx64fA9erHH/MCXEUfB/0bX/6Fz6ny5EGTXYltMocqg4xFAQZtnO3DHWWXi8RiuN7cQ==",
      "license": "MIT",
      "dependencies": {
        "balanced-match": "^4.0.2"
@@ -3086,9 +3086,9 @@
      "license": "BSD-3-Clause"
    },
    "node_modules/fastify": {
-      "version": "5.8.2",
-      "resolved": "https://registry.npmjs.org/fastify/-/fastify-5.8.2.tgz",
-      "integrity": "sha512-lZmt3navvZG915IE+f7/TIVamxIwmBd+OMB+O9WBzcpIwOo6F0LTh0sluoMFk5VkrKTvvrwIaoJPkir4Z+jtAg==",
+      "version": "5.8.4",
+      "resolved": "https://registry.npmjs.org/fastify/-/fastify-5.8.4.tgz",
+      "integrity": "sha512-sa42J1xylbBAYUWALSBoyXKPDUvM3OoNOibIefA+Oha57FryXKKCZarA1iDntOCWp3O35voZLuDg2mdODXtPzQ==",
      "funding": [
        {
          "type": "github",
@@ -4282,9 +4282,9 @@
      "license": "MIT"
    },
    "node_modules/nodemailer": {
-      "version": "8.0.2",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-8.0.2.tgz",
-      "integrity": "sha512-zbj002pZAIkWQFxyAaqoxvn+zoIwRnS40hgjqTXudKOOJkiFFgBeNqjgD3/YCR12sZnrghWYBY+yP1ZucdDRpw==",
+      "version": "8.0.4",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-8.0.4.tgz",
+      "integrity": "sha512-k+jf6N8PfQJ0Fe8ZhJlgqU5qJU44Lpvp2yvidH3vp1lPnVQMgi4yEEMPXg5eJS1gFIJTVq1NHBk7Ia9ARdSBdQ==",
      "license": "MIT-0",
      "engines": {
        "node": ">=6.0.0"
@@ -4540,9 +4540,9 @@
      "license": "ISC"
    },
    "node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.4.tgz",
+      "integrity": "sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==",
      "dev": true,
      "license": "MIT",
      "engines": {
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
  "name": "app-ts",
-  "version": "1.3.4",
+  "version": "1.5.0",
  "description": "",
  "main": "dist/server.js",
  "scripts": {
--- a/src/admin/base.css
+++ b/src/admin/base.css
@@ -412,4 +412,9 @@ img {
    transition-duration: 0.01ms !important;
    scroll-behavior: auto !important;
  }
+
+  .admin-spinner {
+    animation-duration: 0.8s !important;
+    animation-iteration-count: infinite !important;
+  }
 }
--- a/src/admin/hooks/useAttendanceAdmin.ts
+++ b/src/admin/hooks/useAttendanceAdmin.ts
@@ -561,7 +561,9 @@ export default function useAttendanceAdmin({ alert }: AlertContext) {
  useEffect(() => {
    const loadUsers = async () => {
      try {
-        const response = await apiFetch(`${API_BASE}/users?limit=1000`);
+        const response = await apiFetch(
+          `${API_BASE}/attendance?action=attendance_users`,
+        );
        const result = await response.json();
        if (result.success) {
          const apiUsers: ApiUser[] = result.data;
--- a/src/admin/pages/Attendance.tsx
+++ b/src/admin/pages/Attendance.tsx
@@ -576,10 +576,7 @@ export default function Attendance() {
                    <div className="attendance-project-header">
                      <span className="attendance-shift-label">Projekt</span>
                      {activeProjectId ? (
-                        <span
-                          className="admin-badge admin-badge-wrap"
-                          style={{ fontSize: "0.8125rem" }}
-                        >
+                        <span className="admin-badge admin-badge-wrap text-sm">
                          {projects.find(
                            (p) => String(p.id) === String(activeProjectId),
                          )
@@ -587,12 +584,7 @@ export default function Attendance() {
                            : `Projekt #${activeProjectId}`}
                        </span>
                      ) : (
-                        <span
-                          className="text-muted"
-                          style={{ fontSize: "0.8125rem" }}
-                        >
-                          Žádný
-                        </span>
+                        <span className="text-muted text-sm">Žádný</span>
                      )}
                    </div>
                    <select
@@ -601,8 +593,7 @@ export default function Attendance() {
                        handleSwitchProject(e.target.value || null)
                      }
                      disabled={switchingProject}
-                      className="admin-form-select"
-                      style={{ fontSize: "0.875rem" }}
+                      className="admin-form-select text-md"
                    >
                      <option value="">— Bez projektu —</option>
                      {projects.map((p) => (
@@ -654,8 +645,7 @@ export default function Attendance() {
                    <button
                      onClick={handleBreak}
                      disabled={submitting}
-                      className="admin-btn admin-btn-secondary"
-                      style={{ width: "100%" }}
+                      className="admin-btn admin-btn-secondary w-full"
                    >
                      Pauza (30 min)
                    </button>
@@ -663,15 +653,13 @@ export default function Attendance() {
                  <button
                    onClick={() => handlePunch("departure")}
                    disabled={submitting}
-                    className="admin-btn admin-btn-primary"
-                    style={{ width: "100%" }}
+                    className="admin-btn admin-btn-primary w-full"
                  >
                    {submitting ? "Zpracovávám..." : "Odchod"}
                  </button>
                  <button
                    onClick={() => setShowLeaveModal(true)}
-                    className="admin-btn admin-btn-secondary"
-                    style={{ width: "100%" }}
+                    className="admin-btn admin-btn-secondary w-full"
                  >
                    Žádost o nepřítomnost
                  </button>
@@ -703,16 +691,14 @@ export default function Attendance() {
                <button
                  onClick={() => handlePunch("arrival")}
                  disabled={submitting}
-                  className="admin-btn admin-btn-primary"
-                  style={{ width: "100%" }}
+                  className="admin-btn admin-btn-primary w-full"
                >
                  {submitting ? "Zpracovávám..." : "Příchod"}
                </button>

                <button
                  onClick={() => setShowLeaveModal(true)}
-                  className="admin-btn admin-btn-secondary"
-                  style={{ width: "100%" }}
+                  className="admin-btn admin-btn-secondary w-full"
                >
                  Žádost o nepřítomnost
                </button>
@@ -877,11 +863,10 @@ export default function Attendance() {
              </div>
              <div style={{ marginTop: "0.75rem" }}>
                <div
-                  className="text-secondary"
+                  className="text-secondary text-sm"
                  style={{
                    display: "flex",
                    justifyContent: "space-between",
-                    fontSize: "0.8125rem",
                    marginBottom: "0.5rem",
                  }}
                >
@@ -905,8 +890,8 @@ export default function Attendance() {
                </div>
                {data.monthly_fund.leave_hours > 0 && (
                  <div
-                    className="text-muted"
-                    style={{ fontSize: "0.75rem", marginTop: "0.375rem" }}
+                    className="text-muted text-xs"
+                    style={{ marginTop: "0.375rem" }}
                  >
                    {"Pokryto: "}
                    {data.monthly_fund.covered}h (práce{" "}
--- a/src/admin/pages/Dashboard.tsx
+++ b/src/admin/pages/Dashboard.tsx
@@ -493,7 +493,7 @@ export default function Dashboard() {
                    </span>
                  </div>
                  <div className="dash-stat-row">
-                    <span>Prošlé</span>
+                    <span>Zneplatněné</span>
                    <span className="admin-badge admin-badge-warning">
                      {dashData.offers.expired_count}
                    </span>
--- a/src/admin/pages/InvoiceDetail.tsx
+++ b/src/admin/pages/InvoiceDetail.tsx
--- a/src/admin/pages/Invoices.tsx
+++ b/src/admin/pages/Invoices.tsx
@@ -56,7 +56,7 @@ function formatCzkWithDetail(
  if (!Array.isArray(amounts) || amounts.length === 0)
    return { value: "0 Kč", detail: null };
  const hasForeign = amounts.some((a) => a.currency !== "CZK");
-  if (hasForeign && totalCzk !== null && totalCzk !== undefined) {
+  if (hasForeign && totalCzk != null) {
    return {
      value: formatCurrency(totalCzk, "CZK"),
      detail: formatMultiCurrency(amounts),
--- a/src/admin/pages/LeaveRequests.tsx
+++ b/src/admin/pages/LeaveRequests.tsx
@@ -61,7 +61,7 @@ export default function LeaveRequests() {

  const fetchRequests = useCallback(async () => {
    try {
-      const response = await apiFetch(`${API_BASE}/leave-requests`);
+      const response = await apiFetch(`${API_BASE}/leave-requests?mine=1`);
      if (response.status === 401) return;
      const result = await response.json();
      if (result.success) {
--- a/src/admin/pages/OfferDetail.tsx
+++ b/src/admin/pages/OfferDetail.tsx
@@ -180,9 +180,7 @@ function SortableItemRow({
          </button>
        </td>
      )}
-      <td style={{ textAlign: "center", color: "var(--text-tertiary)" }}>
-        {index + 1}
-      </td>
+      <td className="text-center text-tertiary">{index + 1}</td>
      <td style={{ verticalAlign: "top" }}>
        <div
          style={{ display: "flex", flexDirection: "column", gap: "0.25rem" }}
@@ -191,10 +189,9 @@ function SortableItemRow({
            type="text"
            value={item.description}
            onChange={(e) => onUpdate("description", e.target.value)}
-            className="admin-form-input"
+            className="admin-form-input fw-500"
            placeholder="Název položky"
            readOnly={readOnly}
-            style={{ fontWeight: 500 }}
          />
          <input
            type="text"
@@ -240,7 +237,7 @@ function SortableItemRow({
          readOnly={readOnly}
        />
      </td>
-      <td style={{ textAlign: "center" }}>
+      <td className="text-center">
        <input
          type="checkbox"
          checked={item.is_included_in_total}
@@ -248,10 +245,7 @@ function SortableItemRow({
          disabled={readOnly}
        />
      </td>
-      <td
-        className="admin-mono"
-        style={{ textAlign: "right", fontWeight: 600 }}
-      >
+      <td className="admin-mono text-right fw-600">
        {formatCurrency(lineTotal, currency)}
      </td>
      {!readOnly && (
@@ -874,11 +868,10 @@ export default function OfferDetail() {
              {isEdit ? `Nabídka ${form.quotation_number}` : "Nová nabídka"}
              {isInvalidated && (
                <span
-                  className="admin-badge admin-badge-danger"
+                  className="admin-badge admin-badge-danger text-xs"
                  style={{
                    marginLeft: "0.75rem",
                    verticalAlign: "middle",
-                    fontSize: "0.75rem",
                  }}
                >
                  Zneplatněna
@@ -1208,10 +1201,7 @@ export default function OfferDetail() {
                    </option>
                  ))}
                </select>
-                <label
-                  className="admin-form-checkbox"
-                  style={{ whiteSpace: "nowrap" }}
-                >
+                <label className="admin-form-checkbox whitespace-nowrap">
                  <input
                    type="checkbox"
                    checked={form.apply_vat}
@@ -1672,7 +1662,7 @@ export default function OfferDetail() {
                  <FormField label="Příloha (PDF)">
                    {orderAttachment ? (
                      <div className="flex-row gap-2">
-                        <span style={{ fontSize: "0.875rem" }}>
+                        <span className="text-md">
                          {orderAttachment.name}{" "}
                          <span className="text-tertiary">
                            ({(orderAttachment.size / 1024).toFixed(0)} KB)
--- a/src/admin/pages/Offers.tsx
+++ b/src/admin/pages/Offers.tsx
@@ -814,8 +814,8 @@ export default function Offers() {
                    <tr>
                      <td
                        colSpan={8}
-                        className="text-muted"
-                        style={{ textAlign: "center", padding: "1.5rem" }}
+                        className="text-muted text-center"
+                        style={{ padding: "1.5rem" }}
                      >
                        Žádné nabídky odpovídající hledání.
                      </td>
@@ -879,8 +879,8 @@ export default function Offers() {
              <div className="admin-modal-header">
                <h2 className="admin-modal-title">Vytvořit objednávku</h2>
                <p
-                  className="text-secondary"
-                  style={{ marginTop: "0.25rem", fontSize: "0.875rem" }}
+                  className="text-secondary text-md"
+                  style={{ marginTop: "0.25rem" }}
                >
                  Nabídka:{" "}
                  <strong>{orderModal.quotation?.quotation_number}</strong>
@@ -917,7 +917,7 @@ export default function Offers() {
                          <path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z" />
                          <polyline points="14 2 14 8 20 8" />
                        </svg>
-                        <span style={{ fontSize: "0.875rem" }}>
+                        <span className="text-md">
                          {orderAttachment.name}{" "}
                          <span className="text-tertiary">
                            ({(orderAttachment.size / 1024).toFixed(0)} KB)
@@ -944,11 +944,9 @@ export default function Offers() {
                      </div>
                    ) : (
                      <label
-                        className="admin-btn admin-btn-secondary admin-btn-sm"
+                        className="admin-btn admin-btn-secondary admin-btn-sm inline-flex"
                        style={{
                          cursor: "pointer",
-                          display: "inline-flex",
-                          alignItems: "center",
                          gap: "0.4rem",
                        }}
                      >
--- a/src/admin/pages/ReceivedInvoices.tsx
+++ b/src/admin/pages/ReceivedInvoices.tsx
@@ -115,7 +115,7 @@ function formatCzkWithDetail(
    return { value: "0 Kč", detail: null };
  }
  const hasForeign = amounts.some((a) => a.currency !== "CZK");
-  if (hasForeign && totalCzk !== null && totalCzk !== undefined) {
+  if (hasForeign && totalCzk != null) {
    return {
      value: formatCurrency(totalCzk, "CZK"),
      detail: formatMultiCurrency(amounts),
@@ -709,9 +709,9 @@ export default function ReceivedInvoices({
              <p>Žádné přijaté faktury v tomto měsíci.</p>
              {hasPermission("invoices.create") && (
                <p
+                  className="text-md"
                  style={{
                    color: "var(--text-tertiary)",
-                    fontSize: "0.875rem",
                  }}
                >
                  Nahrajte faktury tlačítkem výše.
@@ -780,7 +780,8 @@ export default function ReceivedInvoices({
                      />
                    </th>
                    <th
-                      style={{ textAlign: "right", cursor: "pointer" }}
+                      className="text-right"
+                      style={{ cursor: "pointer" }}
                      onClick={() => handleSort("amount")}
                    >
                      Částka{" "}
@@ -959,9 +960,9 @@ export default function ReceivedInvoices({
                    Vybrat soubory
                  </button>
                  <span
+                    className="text-sm"
                    style={{
                      marginLeft: "0.75rem",
-                      fontSize: "0.8125rem",
                      color: "var(--text-tertiary)",
                    }}
                  >
@@ -1106,8 +1107,8 @@ export default function ReceivedInvoices({
                        </div>
                        {uploadMeta[idx]?.amount && (
                          <div
+                            className="text-xs"
                            style={{
-                              fontSize: "0.75rem",
                              color: "var(--text-tertiary)",
                              marginTop: "-0.25rem",
                              marginBottom: "0.5rem",
@@ -1320,8 +1321,8 @@ export default function ReceivedInvoices({
                        </div>
                        {editInvoice.amount && (
                          <div
+                            className="text-xs"
                            style={{
-                              fontSize: "0.75rem",
                              color: "var(--text-tertiary)",
                              marginBottom: "0.75rem",
                            }}
--- a/src/admin/pages/Settings.tsx
+++ b/src/admin/pages/Settings.tsx
@@ -639,17 +639,16 @@ export default function Settings() {
                </div>
                <div>
                  <div
+                    className="fw-500 text-md"
                    style={{
-                      fontWeight: 500,
                      color: "var(--text-primary)",
-                      fontSize: "0.875rem",
                    }}
                  >
                    Povinné dvoufaktorové ověření (2FA)
                  </div>
                  <div
+                    className="text-xs"
                    style={{
-                      fontSize: "0.75rem",
                      color: "var(--text-secondary)",
                    }}
                  >
@@ -781,16 +780,16 @@ export default function Settings() {
                    <tr key={role.id}>
                      <td>
                        <div
+                          className="fw-500"
                          style={{
-                            fontWeight: 500,
                            color: "var(--text-primary)",
                          }}
                        >
                          {role.display_name}
                        </div>
                        <div
+                          className="text-xs"
                          style={{
-                            fontSize: "0.75rem",
                            color: "var(--text-tertiary)",
                          }}
                        >
@@ -1077,9 +1076,9 @@ export default function Settings() {
                      />
                    </FormField>
                    <small
+                      className="text-xs"
                      style={{
                        color: "var(--text-tertiary)",
-                        fontSize: "0.75rem",
                      }}
                    >
                      Změna se projeví po restartu serveru
@@ -1179,10 +1178,9 @@ export default function Settings() {
                            />
                          )}
                          <div
+                            className="fw-600 text-md"
                            style={{
-                              fontWeight: 600,
                              marginBottom: "0.5rem",
-                              fontSize: "0.875rem",
                            }}
                          >
                            {cfg.label}
@@ -1355,8 +1353,8 @@ export default function Settings() {
                <div className="admin-card-body">
                  {systemInfo ? (
                    <table
+                      className="w-full"
                      style={{
-                        width: "100%",
                        fontSize: "0.85rem",
                        borderCollapse: "collapse",
                      }}
@@ -1374,16 +1372,16 @@ export default function Settings() {
                        ).map(([label, val]) => (
                          <tr key={label}>
                            <td
+                              className="whitespace-nowrap"
                              style={{
                                padding: "6px 12px 6px 0",
                                color: "var(--text-secondary)",
-                                whiteSpace: "nowrap",
                                width: 160,
                              }}
                            >
                              {label}
                            </td>
-                            <td style={{ padding: "6px 0", fontWeight: 500 }}>
+                            <td className="fw-500" style={{ padding: "6px 0" }}>
                              {val}
                            </td>
                          </tr>
@@ -1516,9 +1514,9 @@ export default function Settings() {
                              </span>
                              {info?.configured && (
                                <span
+                                  className="text-xs"
                                  style={{
                                    marginLeft: 8,
-                                    fontSize: "0.75rem",
                                    color: "var(--text-tertiary)",
                                  }}
                                >
@@ -1548,8 +1546,7 @@ export default function Settings() {
                <button
                  onClick={handleSaveSystemSettings}
                  disabled={sysSettingsSaving}
-                  className="admin-btn admin-btn-primary"
-                  style={{ width: "100%" }}
+                  className="admin-btn admin-btn-primary w-full"
                >
                  {sysSettingsSaving ? (
                    <>
@@ -1637,9 +1634,9 @@ export default function Settings() {
                    />
                    {!editingRole && (
                      <small
+                        className="text-xs"
                        style={{
                          color: "var(--text-tertiary)",
-                          fontSize: "0.75rem",
                        }}
                      >
                        Pouze malá písmena, čísla a pomlčky. Nelze později
--- a/src/admin/pages/TripsAdmin.tsx
+++ b/src/admin/pages/TripsAdmin.tsx
@@ -127,7 +127,7 @@ export default function TripsAdmin() {
      try {
        const [vRes, uRes, csRes] = await Promise.all([
          apiFetch(`${API_BASE}/vehicles`),
-          apiFetch(`${API_BASE}/users?limit=1000`),
+          apiFetch(`${API_BASE}/trips/users`),
          apiFetch(`${API_BASE}/company-settings`),
        ]);
        const vJson = await vRes.json();
@@ -136,14 +136,7 @@ export default function TripsAdmin() {
        if (vJson.success) setVehicles(vJson.data);
        if (csJson.success) setCompanyName(csJson.data.company_name || "");
        if (uJson.success) {
-          setUsers(
-            uJson.data.map(
-              (u: { id: number; first_name: string; last_name: string }) => ({
-                id: u.id,
-                name: `${u.first_name} ${u.last_name}`,
-              }),
-            ),
-          );
+          setUsers(uJson.data);
        }
      } catch {
        // silently fail, filters will just be empty
--- a/src/routes/admin/attendance.ts
+++ b/src/routes/admin/attendance.ts
@@ -1,4 +1,5 @@
 import { FastifyInstance } from "fastify";
+import prisma from "../../config/database";
 import { requireAuth, requirePermission } from "../../middleware/auth";
 import { logAudit } from "../../services/audit";
 import { success, error, parseId } from "../../utils/response";
@@ -132,6 +133,38 @@ export default async function attendanceRoutes(
      return reply.send({ success: true, data });
    }

+    // --- action=attendance_users: users with attendance.record permission ---
+    if (action === "attendance_users") {
+      const users = await prisma.users.findMany({
+        where: {
+          is_active: true,
+          roles: {
+            is: {
+              OR: [
+                { name: "admin" },
+                {
+                  role_permissions: {
+                    some: { permissions: { name: "attendance.record" } },
+                  },
+                },
+              ],
+            },
+          },
+        },
+        select: { id: true, first_name: true, last_name: true, username: true },
+        orderBy: { last_name: "asc" },
+      });
+      return reply.send({
+        success: true,
+        data: users.map((u) => ({
+          id: u.id,
+          first_name: u.first_name,
+          last_name: u.last_name,
+          username: u.username,
+        })),
+      });
+    }
+
    // --- action=projects: active projects for attendance project switching ---
    if (action === "projects") {
      const data = await attendanceService.getActiveProjects();
--- a/src/routes/admin/dashboard.ts
+++ b/src/routes/admin/dashboard.ts
@@ -3,6 +3,7 @@ import prisma from "../../config/database";
 import { requireAuth } from "../../middleware/auth";
 import { success } from "../../utils/response";
 import { localTimeStr } from "../../utils/date";
+import { toCzk } from "../../services/exchange-rates";

 export default async function dashboardRoutes(
  fastify: FastifyInstance,
@@ -141,8 +142,8 @@ export default async function dashboardRoutes(
      const [openCount, convertedCount, expiredCount, createdThisMonth] =
        await Promise.all([
          prisma.quotations.count({ where: { status: "active" } }),
-          prisma.quotations.count({ where: { status: "converted" } }),
-          prisma.quotations.count({ where: { status: "expired" } }),
+          prisma.quotations.count({ where: { status: "ordered" } }),
+          prisma.quotations.count({ where: { status: "invalidated" } }),
          prisma.quotations.count({
            where: { created_at: { gte: monthStart, lt: monthEnd } },
          }),
@@ -206,10 +207,13 @@ export default async function dashboardRoutes(
          }),
        ),
        unpaid_count: unpaidCount,
-        revenue_czk:
-          revenueByCurrency["CZK"] != null
-            ? Math.round(revenueByCurrency["CZK"] * 100) / 100
-            : null,
+        revenue_czk: await (async () => {
+          let total = 0;
+          for (const [cur, amount] of Object.entries(revenueByCurrency)) {
+            total += await toCzk(Math.round(amount * 100) / 100, cur);
+          }
+          return Math.round(total * 100) / 100;
+        })(),
      };
      result.unpaid_invoices = unpaidCount;
    }
--- a/src/routes/admin/invoices-pdf.ts
+++ b/src/routes/admin/invoices-pdf.ts
@@ -5,6 +5,8 @@ import { requirePermission } from "../../middleware/auth";
 import { localDateCzStr } from "../../utils/date";
 import { nasFinancialsManager } from "../../services/nas-financials-manager";
 import { htmlToPdf } from "../../utils/html-to-pdf";
+import { getRate } from "../../services/exchange-rates";
+import { localDateStr } from "../../utils/date";

 /* ── Helpers ─────────────────────────────────────────────────────── */

@@ -282,6 +284,7 @@ export default async function invoicesPdfRoutes(
      > | null;

      let orderNumber = "";
+      let orderDate = "";
      if (invoice.order_id) {
        const orderRow = await prisma.orders.findUnique({
          where: { id: invoice.order_id },
@@ -297,6 +300,9 @@ export default async function invoicesPdfRoutes(
              orderRow.customer_order_number || orderRow.order_number || "",
            ),
          );
+          if (orderRow.created_at) {
+            orderDate = formatDate(orderRow.created_at);
+          }
        }
      }

@@ -358,9 +364,12 @@ export default async function invoicesPdfRoutes(
        // QR generation failed — leave empty
      }

-      // VAT recapitulation (always in CZK)
+      // VAT recapitulation (always in CZK — Czech tax requirement)
      const isForeign = currency.toUpperCase() !== "CZK";
-      const cnbRate = 1.0; // Skip CNB rate conversion
+      const issueDateStr = invoice.issue_date
+        ? localDateStr(new Date(invoice.issue_date))
+        : undefined;
+      const cnbRate = isForeign ? await getRate(currency, issueDateStr) : 1.0;
      const vatRates = [21, 12, 0];
      const vatRecap: Array<{
        rate: number;
@@ -422,7 +431,7 @@ export default async function invoicesPdfRoutes(
          return `<tr>
            <td class="row-num">${i + 1}</td>
            <td class="desc">${escapeHtml(item.description)}</td>
-            <td class="center">${formatNum(qty, qtyDecimals)}</td>
+            <td class="center">${formatNum(qty, qtyDecimals)}${item.unit ? ` / ${escapeHtml(item.unit)}` : ""}</td>
            <td class="right">${formatNum(unitPrice)}</td>
            <td class="right">${formatNum(lineSubtotal)}</td>
            <td class="center">${applyVat ? Math.floor(vatRate) : 0}%</td>
@@ -486,14 +495,14 @@ export default async function invoicesPdfRoutes(
 <style>
  @page {
    size: A4;
-    margin: 12mm 15mm 15mm 15mm;
+    margin: 8mm 12mm 10mm 12mm;
  }
  * { margin: 0; padding: 0; box-sizing: border-box; }
  html, body {
    font-family: "Segoe UI", Tahoma, Arial, sans-serif;
-    font-size: 9pt;
+    font-size: 10pt;
    color: #1a1a1a;
-    width: 180mm;
+    width: 186mm;
  }

  .invoice-page {
@@ -504,82 +513,35 @@ export default async function invoicesPdfRoutes(
  .invoice-content { flex: 1 1 auto; }
  .invoice-footer {
    flex-shrink: 0;
-    page-break-inside: avoid;
-    break-inside: avoid;
  }

  .accent { color: #de3a3a; }

-  /* Hlavicka */
+  /* ── Hlavicka ── */
  .invoice-header {
    display: flex;
    justify-content: space-between;
-    align-items: flex-start;
-    margin-bottom: 0;
+    align-items: center;
+    margin-bottom: 1mm;
    padding-bottom: 1mm;
+    border-bottom: 2pt solid #de3a3a;
  }
  .invoice-header .left {
    display: flex;
-    align-items: flex-start;
+    align-items: center;
    gap: 3mm;
  }
-  .logo-header {
-    text-align: left;
-  }
+  .logo-header { text-align: left; }
  .company-title {
    font-size: 12pt;
    font-weight: 700;
-    margin-top: 2mm;
  }
  .invoice-title {
-    font-size: 10pt;
+    font-size: 13pt;
    font-weight: 700;
    color: #de3a3a;
    text-align: right;
-    margin-top: 2mm;
-  }
-
-  /* Adresy - dva sloupce, stejna vyska */
-  .addresses-row {
-    display: flex;
-    gap: 8mm;
-    align-items: stretch;
-    margin-bottom: 0;
-  }
-  .addresses-row .address-block {
-    flex: 1;
-    padding-bottom: 2mm;
-    border-bottom: 0.5pt solid #e0e0e0;
-  }
-
-  /* Detaily pod adresami */
-  .details-row {
-    display: flex;
-    gap: 8mm;
-    margin-bottom: 3mm;
-  }
-  .details-row .col { flex: 1; }
-
-  /* Adresy - styl z nabidek */
-  .address-block {
-    margin-bottom: 0;
-  }
-  .address-label {
-    font-size: 8pt;
-    font-weight: 600;
-    color: #646464;
-    line-height: 1.5;
-  }
-  .address-name {
-    font-size: 9pt;
-    font-weight: 700;
-    color: #1a1a1a;
-    line-height: 1.5;
-  }
-  .address-line {
-    font-size: 8.5pt;
-    color: #1a1a1a;
-    line-height: 1.5;
+    letter-spacing: 0.03em;
  }

  .logo {
@@ -588,74 +550,87 @@ export default async function invoicesPdfRoutes(
    object-fit: contain;
  }

-  /* Separator */
-  .header-separator {
-    border: none;
-    border-top: 0.5pt solid #e0e0e0;
-    margin: 2mm 0 3mm 0;
+  /* ── Adresy ── */
+  .header-grid {
+    border: 0.5pt solid #d0d0d0;
+    border-collapse: collapse;
+    width: 100%;
+    margin-bottom: 1mm;
  }
-
-  /* Banka */
-  .bank-box {
+  .header-grid td {
+    padding: 2mm 3mm;
+    border: 0.5pt solid #d0d0d0;
+    vertical-align: top;
+    width: 50%;
+  }
+  .header-grid td.addr-customer {
+    background: #f5f5f5;
+  }
+  .header-grid td.details-bank {
+    background: #f5f5f5;
+  }
+  .address-label {
    font-size: 8pt;
-    line-height: 1.4;
-    padding-top: 2mm;
+    font-weight: 700;
+    color: #de3a3a;
+    text-transform: uppercase;
+    letter-spacing: 0.08em;
+    margin-bottom: 1mm;
  }
-  .bank-box .lbl {
-    font-weight: 600;
+  .address-name {
+    font-size: 10pt;
+    font-weight: 700;
    color: #1a1a1a;
-    display: inline-block;
-    min-width: 16mm;
+    line-height: 1.3;
+    margin-bottom: 1mm;
+  }
+  .address-line {
+    font-size: 9pt;
+    color: #444;
+    line-height: 1.5;
  }

-  /* Datumy */
-  .dates-box {
-    font-size: 8pt;
-    line-height: 1.4;
-    padding-top: 2mm;
-  }
-  .dates-row {
+  /* ── Detaily (banka + datumy) — inside header-grid ── */
+
+  .info-row {
    display: flex;
-    align-items: center;
-    margin-bottom: 0.5mm;
+    align-items: baseline;
+    font-size: 9pt;
+    padding: 1mm 0;
+    border-bottom: 0.5pt solid #f0f0f0;
  }
-  .dates-row .lbl {
-    flex: 1;
-    color: #1a1a1a;
+  .info-row:last-child { border-bottom: none; }
+  .info-row .lbl {
+    color: #666;
+    font-weight: 400;
+    flex-shrink: 0;
+    white-space: nowrap;
+    margin-right: 3mm;
  }
-  .dates-row .val {
+  .info-row .val {
    font-weight: 600;
-    min-width: 22mm;
-    text-align: center;
-    padding: 0.5mm 2mm;
+    color: #1a1a1a;
+    text-align: right;
+    margin-left: auto;
  }

  /* VS/KS blok */
  .vs-block {
-    font-size: 8pt;
+    font-size: 9pt;
    line-height: 1.4;
    padding-top: 2mm;
  }

-  /* Konecny prijemce */
-  .recipient-box {
-    font-size: 8pt;
-    margin-top: 2mm;
-    padding-top: 2mm;
-    border-top: 0.5pt solid #e0e0e0;
-  }
-  .recipient-box .lbl {
-    font-weight: 600;
-    font-style: italic;
-    color: #646464;
-  }
-
-  /* Polozky tabulka - styl z nabidek */
+  /* ── Polozky ── */
  .billing-label {
-    font-weight: 600;
-    color: #de3a3a;
-    font-size: 8.5pt;
-    padding: 3px 5px;
+    font-weight: 700;
+    color: #1a1a1a;
+    font-size: 10pt;
+    padding: 2mm 0 1mm 0;
+    border-bottom: 1.5pt solid #de3a3a;
+    margin-bottom: 0;
+    text-transform: uppercase;
+    letter-spacing: 0.03em;
  }

  table.items {
@@ -666,20 +641,18 @@ export default async function invoicesPdfRoutes(
    margin-bottom: 2mm;
  }
  table.items thead th {
-    font-size: 8pt;
+    font-size: 8.5pt;
    font-weight: 600;
    color: #646464;
-    padding: 6px 8px;
+    padding: 4px 4px;
    text-align: left;
-    letter-spacing: 0.02em;
-    text-transform: uppercase;
-    border-bottom: 1pt solid #1a1a1a;
+    border-bottom: 0.5pt solid #d0d0d0;
    white-space: nowrap;
  }
  table.items thead th.center { text-align: center; }
  table.items thead th.right { text-align: right; }
  table.items tbody td {
-    padding: 5px 8px;
+    padding: 4px 4px;
    border-bottom: 0.5pt solid #e0e0e0;
    vertical-align: middle;
    color: #1a1a1a;
@@ -690,11 +663,11 @@ export default async function invoicesPdfRoutes(
  table.items tbody td.row-num {
    text-align: center;
    color: #969696;
-    font-size: 8pt;
+    font-size: 9pt;
  }
  table.items tbody td.desc {
-    font-size: 9.5pt;
-    font-weight: 500;
+    font-size: 9pt;
+    font-weight: 600;
    color: #1a1a1a;
  }
  table.items tbody td.total-cell { font-weight: 700; }
@@ -715,7 +688,7 @@ export default async function invoicesPdfRoutes(
    display: flex;
    justify-content: space-between;
    align-items: baseline;
-    font-size: 8.5pt;
+    font-size: 9.5pt;
    color: #1a1a1a;
    margin-bottom: 2mm;
  }
@@ -727,7 +700,7 @@ export default async function invoicesPdfRoutes(
    align-items: baseline;
  }
  .totals .grand .label {
-    font-size: 9.5pt;
+    font-size: 10.5pt;
    font-weight: 400;
    color: #1a1a1a;
    align-self: center;
@@ -741,14 +714,14 @@ export default async function invoicesPdfRoutes(
  }
  .totals .currency-note {
    text-align: right;
-    font-size: 7.5pt;
+    font-size: 8pt;
    color: #1a1a1a;
    margin-top: 2mm;
  }

  /* Vystavil */
  .issued-by {
-    font-size: 8pt;
+    font-size: 9pt;
    margin: 2mm 0;
    line-height: 1.4;
  }
@@ -756,7 +729,7 @@ export default async function invoicesPdfRoutes(

  /* Upozorneni */
  .notice {
-    font-size: 7pt;
+    font-size: 8pt;
    color: #1a1a1a;
    margin: 2mm 0;
    line-height: 1.3;
@@ -778,11 +751,11 @@ export default async function invoicesPdfRoutes(

  .recap-section table {
    border-collapse: collapse;
-    font-size: 8pt;
+    font-size: 9pt;
    flex: 1;
  }
  .recap-section table th {
-    font-size: 7.5pt;
+    font-size: 8pt;
    font-weight: 600;
    color: #555;
    padding: 3px 6px;
@@ -796,7 +769,7 @@ export default async function invoicesPdfRoutes(
  }
  .recap-section table td.center { text-align: center; }
  .recap-section table td.cnb-rate {
-    font-size: 7pt;
+    font-size: 8pt;
    color: #888;
    text-align: right;
    border-bottom: none;
@@ -806,13 +779,14 @@ export default async function invoicesPdfRoutes(
  /* Prevzal / razitko */
  .footer-row {
    display: flex;
+    justify-content: space-between;
    margin-top: 4mm;
-    font-size: 8pt;
-  }
-  .footer-row .col {
-    flex: 1;
+    font-size: 9pt;
    border-top: 0.5pt solid #aaa;
    padding-top: 2mm;
+    min-height: 15mm;
+  }
+  .footer-row .col {
    font-weight: 600;
    color: #555;
  }
@@ -820,13 +794,13 @@ export default async function invoicesPdfRoutes(
  /* Poznamky */
  .invoice-notes {
    margin-top: 4mm;
-    font-size: 9pt;
+    font-size: 10pt;
    line-height: 1.5;
    color: #1a1a1a;
  }
  .invoice-notes-label {
    font-weight: 600;
-    font-size: 8pt;
+    font-size: 9pt;
    text-transform: uppercase;
    color: #555;
    margin-bottom: 1mm;
@@ -893,59 +867,54 @@ ${indentCSS}
    <div class="invoice-title">${escapeHtml(t.heading)} ${invoiceNumber}</div>
  </div>

-  <hr class="header-separator" />
-
-  <!-- Dodavatel / Odberatel - stejna vyska -->
-  <div class="addresses-row">
-    <div class="address-block">
+  <!-- Dodavatel / Odberatel + Banka / Datumy -->
+  <table class="header-grid" cellspacing="0">
+    <tr>
+      <td>
        <div class="address-label">${escapeHtml(t.supplier)}</div>
        <div class="address-name">${escapeHtml(supp.name)}</div>
        ${suppLinesHtml}
-    </div>
-    <div class="address-block">
+      </td>
+      <td class="addr-customer">
        <div class="address-label">${escapeHtml(t.customer)}</div>
        <div class="address-name">${escapeHtml(cust.name)}</div>
        ${custLinesHtml}
-    </div>
-  </div>
-
-  <!-- Banka + VS / Datumy -->
-  <div class="details-row">
-    <div class="col">
-      <div class="bank-box">
-        <span class="lbl">${escapeHtml(t.bank)}</span> ${escapeHtml(invoice.bank_name)}<br>
-        <span class="lbl">${escapeHtml(t.swift)}</span> ${escapeHtml(invoice.bank_swift)}<br>
-        <span class="lbl">${escapeHtml(t.iban)}</span> ${escapeHtml(invoice.bank_iban)}<br>
-        <span class="lbl">${escapeHtml(t.account_no)}</span> ${escapeHtml(invoice.bank_account)}
-      </div>
+      </td>
+    </tr>
+    <tr>
+      <td class="details-bank">
+        <div class="info-row"><span class="lbl">${escapeHtml(t.bank)}</span> <span class="val">${escapeHtml(invoice.bank_name)}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.swift)}</span> <span class="val">${escapeHtml(invoice.bank_swift)}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.iban)}</span> <span class="val">${escapeHtml(invoice.bank_iban)}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.account_no)}</span> <span class="val">${escapeHtml(invoice.bank_account)}</span></div>
        <div class="vs-block">
          ${escapeHtml(t.var_symbol)} <strong>${invoiceNumber}</strong>
-        &nbsp;&nbsp;&nbsp; ${escapeHtml(t.const_symbol)} <strong>${escapeHtml(invoice.constant_symbol)}</strong><br>
-        ${orderNumber ? `${escapeHtml(t.order_no)} ${orderNumber}` : ""}
-      </div>
-    </div>
-    <div class="col">
-      <div class="dates-box">
-        <div class="dates-row"><span class="lbl">${escapeHtml(t.issue_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.issue_date))}</span></div>
-        <div class="dates-row"><span class="lbl">${escapeHtml(t.due_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.due_date))}</span></div>
-        <div class="dates-row"><span class="lbl">${escapeHtml(t.tax_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.tax_date))}</span></div>
-        <div class="dates-row"><span class="lbl">${escapeHtml(t.payment_method)}</span> <span class="val">${escapeHtml(invoice.payment_method)}</span></div>
-      </div>
-    </div>
+          &nbsp;&nbsp;&nbsp; ${escapeHtml(t.const_symbol)} <strong>${escapeHtml(invoice.constant_symbol)}</strong>
        </div>
+      </td>
+      <td>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.issue_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.issue_date))}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.due_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.due_date))}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.tax_date)}</span> <span class="val">${escapeHtml(formatDate(invoice.tax_date))}</span></div>
+        <div class="info-row"><span class="lbl">${escapeHtml(t.payment_method)}</span> <span class="val">${escapeHtml(invoice.payment_method)}</span></div>
+        ${orderNumber ? `<div class="info-row"><span class="lbl">${lang === "cs" ? "Objednávka č.:" : "Order no.:"}</span> <span class="val">${orderNumber}</span></div>` : ""}
+        ${orderDate ? `<div class="info-row"><span class="lbl">${lang === "cs" ? "Objednávka ze dne:" : "Order date:"}</span> <span class="val">${escapeHtml(orderDate)}</span></div>` : ""}
+      </td>
+    </tr>
+  </table>

  <!-- Polozky -->
  <div class="billing-label">${escapeHtml(invoice.billing_text || t.billing)}</div>
  <table class="items">
    <thead>
      <tr>
-        <th class="center" style="width:5%">${escapeHtml(t.col_no)}</th>
-        <th style="width:30%">${escapeHtml(t.col_desc)}</th>
-        <th class="center" style="width:9%">${escapeHtml(t.col_qty)}</th>
-        <th class="right" style="width:11%">${escapeHtml(t.col_unit_price)}</th>
-        <th class="right" style="width:11%">${escapeHtml(t.col_price)}</th>
-        <th class="center" style="width:7%">${escapeHtml(t.col_vat_pct)}</th>
-        <th class="right" style="width:11%">${escapeHtml(t.col_vat)}</th>
+        <th class="center" style="width:3%">${escapeHtml(t.col_no)}</th>
+        <th style="width:36%">${escapeHtml(t.col_desc)}</th>
+        <th class="center" style="width:10%">${escapeHtml(t.col_qty)}</th>
+        <th class="right" style="width:10%">${escapeHtml(t.col_unit_price)}</th>
+        <th class="right" style="width:10%">${escapeHtml(t.col_price)}</th>
+        <th class="center" style="width:5%">${escapeHtml(t.col_vat_pct)}</th>
+        <th class="right" style="width:10%">${escapeHtml(t.col_vat)}</th>
        <th class="right" style="width:16%">${escapeHtml(t.col_total)}</th>
      </tr>
    </thead>
@@ -1007,6 +976,17 @@ ${indentCSS}
      <tbody>
        ${vatRecapHtml}
      </tbody>
+      ${
+        isForeign
+          ? `<tfoot>
+        <tr>
+          <td colspan="4" style="font-size:0.7em; color:#666; padding-top:6px; text-align:left;">
+            Přepočet kurzem ČNB ke dni ${formatDate(invoice.issue_date)}: 1 ${escapeHtml(currency)} = ${cnbRate.toFixed(3).replace(".", ",")} CZK
+          </td>
+        </tr>
+      </tfoot>`
+          : ""
+      }
    </table>
  </div>

@@ -1028,6 +1008,7 @@ ${indentCSS}
          ? new Date(invoice.issue_date)
          : new Date();
        const saveMode = query.save === "1";
+        nasFinancialsManager.cleanIssuedInvoice(invoice.invoice_number!);
        const pdfPromise = htmlToPdf(html)
          .then((pdfBuffer) => {
            nasFinancialsManager.saveIssuedInvoicePdf(
--- a/src/routes/admin/leave-requests.ts
+++ b/src/routes/admin/leave-requests.ts
@@ -29,7 +29,7 @@ export default async function leaveRequestsRoutes(
    const isAdmin = authData.permissions.includes("attendance.approve");

    const where: Record<string, unknown> = {};
-    if (!isAdmin) where.user_id = authData.userId;
+    if (!isAdmin || query.mine === "1") where.user_id = authData.userId;
    else if (query.user_id) where.user_id = Number(query.user_id);
    if (query.status) where.status = String(query.status);

--- a/src/routes/admin/offers-pdf.ts
+++ b/src/routes/admin/offers-pdf.ts
@@ -517,7 +517,7 @@ ${indentCSS}
  }
  table.items tbody td.desc {
    font-size: 10pt;
-    font-weight: 500;
+    font-weight: 600;
    color: #1a1a1a;
  }
  table.items tbody td.total-cell {
--- a/src/routes/admin/received-invoices.ts
+++ b/src/routes/admin/received-invoices.ts
@@ -12,6 +12,7 @@ import {
  UpdateReceivedInvoiceSchema,
 } from "../../schemas/received-invoices.schema";
 import { nasFinancialsManager } from "../../services/nas-financials-manager";
+import { toCzk } from "../../services/exchange-rates";

 const VALID_STATUSES = ["unpaid", "paid"] as const;
 const ALLOWED_SORT_FIELDS = [
@@ -108,12 +109,15 @@ export default async function receivedInvoicesRoutes(
          }));
      };

-      const sumCzk = (
+      const sumCzk = async (
        invs: typeof monthInvoices,
        field: "amount" | "vat_amount",
      ) => {
        let total = 0;
-        for (const inv of invs) total += Number(inv[field]) || 0;
+        for (const inv of invs) {
+          const amount = Number(inv[field]) || 0;
+          total += await toCzk(amount, inv.currency);
+        }
        return Math.round(total * 100) / 100;
      };

@@ -124,11 +128,11 @@ export default async function receivedInvoicesRoutes(

      return success(reply, {
        total_month: aggregateByCurrency(monthInvoices, "amount"),
-        total_month_czk: sumCzk(monthInvoices, "amount"),
+        total_month_czk: await sumCzk(monthInvoices, "amount"),
        vat_month: aggregateByCurrency(monthInvoices, "vat_amount"),
-        vat_month_czk: sumCzk(monthInvoices, "vat_amount"),
+        vat_month_czk: await sumCzk(monthInvoices, "vat_amount"),
        unpaid: aggregateByCurrency(allUnpaid, "amount"),
-        unpaid_czk: sumCzk(allUnpaid, "amount"),
+        unpaid_czk: await sumCzk(allUnpaid, "amount"),
        unpaid_count: allUnpaid.length,
        month_count: monthInvoices.length,
      });
--- a/src/routes/admin/trips.ts
+++ b/src/routes/admin/trips.ts
@@ -66,6 +66,45 @@ export default async function tripsRoutes(
    });
  });

+  // GET /api/admin/trips/users — users with trips.record permission
+  fastify.get(
+    "/users",
+    { preHandler: requireAuth },
+    async (_request, reply) => {
+      const users = await prisma.users.findMany({
+        where: {
+          is_active: true,
+          roles: {
+            is: {
+              OR: [
+                { name: "admin" },
+                {
+                  role_permissions: {
+                    some: { permissions: { name: "trips.record" } },
+                  },
+                },
+              ],
+            },
+          },
+        },
+        select: {
+          id: true,
+          first_name: true,
+          last_name: true,
+          username: true,
+        },
+        orderBy: { last_name: "asc" },
+      });
+      return success(
+        reply,
+        users.map((u) => ({
+          id: u.id,
+          name: `${u.first_name} ${u.last_name}`.trim() || u.username,
+        })),
+      );
+    },
+  );
+
  // GET /api/admin/trips/print — print data for trip report
  fastify.get(
    "/print",
--- a/src/schemas/attendance.schema.ts
+++ b/src/schemas/attendance.schema.ts
@@ -39,7 +39,9 @@ export const AttendanceBalancesSchema = z.object({

 export const AttendanceBulkSchema = z.object({
  month: z.string().regex(/^\d{4}-\d{2}$/, "Měsíc je povinný (formát YYYY-MM)"),
-  user_ids: z.array(z.number()).min(1, "Vyberte alespoň jednoho zaměstnance"),
+  user_ids: z
+    .array(z.union([z.number(), z.string()]).transform((v) => Number(v)))
+    .min(1, "Vyberte alespoň jednoho zaměstnance"),
  arrival_time: z.string().optional().default("08:00"),
  departure_time: z.string().optional().default("16:30"),
  break_start_time: z.string().optional().default("12:00"),
--- a/src/schemas/users.schema.ts
+++ b/src/schemas/users.schema.ts
@@ -16,7 +16,10 @@ export const CreateUserSchema = z.object({
 export const UpdateUserSchema = z.object({
  username: z.string().optional(),
  email: z.string().email("Neplatný formát e-mailu").optional(),
-  password: z.string().min(8, "Heslo musí mít alespoň 8 znaků").optional(),
+  password: z.preprocess(
+    (v) => (v === "" ? undefined : v),
+    z.string().min(8, "Heslo musí mít alespoň 8 znaků").optional(),
+  ),
  first_name: z.string().optional(),
  last_name: z.string().optional(),
  role_id: z.union([z.number(), z.string(), z.null()]).optional(),
--- a/src/services/attendance.service.ts
+++ b/src/services/attendance.service.ts
@@ -1,9 +1,32 @@
 import { attendance_leave_type, Prisma } from "@prisma/client";
 import prisma from "../config/database";
-import { getBusinessDaysInMonth } from "../utils/czech-holidays";
+import { getBusinessDaysInMonth, isHoliday } from "../utils/czech-holidays";
 import { localDateStr } from "../utils/date";
 import { getSystemSettings } from "./system-settings";

+/** Get active users whose role has attendance.record permission (or admin role) */
+async function getAttendanceUsers() {
+  return prisma.users.findMany({
+    where: {
+      is_active: true,
+      roles: {
+        is: {
+          OR: [
+            { name: "admin" },
+            {
+              role_permissions: {
+                some: { permissions: { name: "attendance.record" } },
+              },
+            },
+          ],
+        },
+      },
+    },
+    select: { id: true, first_name: true, last_name: true },
+    orderBy: { last_name: "asc" },
+  });
+}
+
 type AttendanceWithRelations = Prisma.attendanceGetPayload<{
  include: {
    users: { select: { id: true; first_name: true; last_name: true } };
@@ -421,11 +444,7 @@ export async function switchProject(userId: number, projectId: number | null) {
 }

 export async function getBalances(year: number) {
-  const users = await prisma.users.findMany({
-    where: { is_active: true },
-    select: { id: true, first_name: true, last_name: true },
-    orderBy: { last_name: "asc" },
-  });
+  const users = await getAttendanceUsers();

  const balances: Record<
    string,
@@ -463,11 +482,7 @@ export async function getBalances(year: number) {
 }

 export async function getWorkfund(year: number) {
-  const users = await prisma.users.findMany({
-    where: { is_active: true },
-    select: { id: true, first_name: true, last_name: true },
-    orderBy: { last_name: "asc" },
-  });
+  const users = await getAttendanceUsers();

  const now = new Date();
  const currentYear = now.getFullYear();
@@ -734,11 +749,7 @@ export async function getPrintData(
  const monthStart = new Date(yr, mo - 1, 1);
  const monthEnd = new Date(yr, mo, 0, 23, 59, 59);

-  const users = await prisma.users.findMany({
-    where: { is_active: true },
-    select: { id: true, first_name: true, last_name: true },
-    orderBy: { last_name: "asc" },
-  });
+  const users = await getAttendanceUsers();

  const where: Record<string, unknown> = {
    shift_date: { gte: monthStart, lte: monthEnd },
@@ -1083,6 +1094,20 @@ export async function bulkCreateAttendance(data: BulkAttendanceData) {
      }

      const shiftDate = new Date(Date.UTC(yr, mo - 1, day, 12, 0, 0));
+
+      if (isHoliday(dateStr)) {
+        await prisma.attendance.create({
+          data: {
+            user_id: userId,
+            shift_date: shiftDate,
+            leave_type: "holiday",
+            leave_hours: 8,
+          },
+        });
+        inserted++;
+        continue;
+      }
+
      await prisma.attendance.create({
        data: {
          user_id: userId,
--- a/src/services/exchange-rates.ts
+++ b/src/services/exchange-rates.ts
@@ -0,0 +1,65 @@
+/**
+ * Czech National Bank (ČNB) exchange rate service.
+ * Fetches daily rates and caches them.
+ * API: https://api.cnb.cz/cnbapi/exrates/daily
+ */
+
+interface CnbRate {
+  currencyCode: string;
+  rate: number;
+  amount: number;
+}
+
+const rateCache: Record<string, Record<string, number>> = {};
+
+async function fetchRatesForDate(
+  date?: string,
+): Promise<Record<string, number>> {
+  const key = date || "today";
+  if (rateCache[key]) return rateCache[key];
+
+  try {
+    let url = "https://api.cnb.cz/cnbapi/exrates/daily?lang=EN";
+    if (date) url += `&date=${date}`;
+
+    const response = await fetch(url);
+    if (!response.ok) throw new Error(`CNB API: ${response.status}`);
+
+    const data = (await response.json()) as { rates: CnbRate[] };
+    const rates: Record<string, number> = { CZK: 1 };
+
+    for (const r of data.rates) {
+      rates[r.currencyCode] = r.rate / r.amount;
+    }
+
+    rateCache[key] = rates;
+    return rates;
+  } catch (err) {
+    console.error("Failed to fetch CNB exchange rates:", err);
+    if (rateCache["today"]) return rateCache["today"];
+    return { CZK: 1, EUR: 25, USD: 22, GBP: 28 };
+  }
+}
+
+/** Convert an amount from a given currency to CZK using CNB rates */
+export async function toCzk(
+  amount: number,
+  currency: string,
+  date?: string,
+): Promise<number> {
+  if (currency === "CZK") return amount;
+  const rates = await fetchRatesForDate(date);
+  const rate = rates[currency];
+  if (!rate) return amount;
+  return Math.round(amount * rate * 100) / 100;
+}
+
+/** Get CNB rate for a currency (CZK per 1 unit), optionally for a specific date */
+export async function getRate(
+  currency: string,
+  date?: string,
+): Promise<number> {
+  if (currency === "CZK") return 1;
+  const rates = await fetchRatesForDate(date);
+  return rates[currency] || 1;
+}
--- a/src/services/invoices.service.ts
+++ b/src/services/invoices.service.ts
@@ -1,4 +1,5 @@
 import prisma from "../config/database";
+import { toCzk } from "./exchange-rates";

 // Status transition rules matching PHP
 const VALID_TRANSITIONS: Record<string, string[]> = {
@@ -186,10 +187,11 @@ export async function getInvoiceStats(queryMonth?: number, queryYear?: number) {
      }));
  };

-  const sumCzk = (invoices: typeof allInvoices) => {
+  const sumCzk = async (invoices: typeof allInvoices) => {
    let total = 0;
    for (const inv of invoices) {
-      total += invoiceTotalWithVat(inv); // Simplified: no real FX conversion
+      const amount = invoiceTotalWithVat(inv);
+      total += await toCzk(amount, inv.currency || "CZK");
    }
    return Math.round(total * 100) / 100;
  };
@@ -224,18 +226,24 @@ export async function getInvoiceStats(queryMonth?: number, queryYear?: number) {
  let vatCzk = 0;
  for (const [, v] of Object.entries(vatMap)) vatCzk += v;

+  // VAT also needs conversion
+  let vatCzkConverted = 0;
+  for (const [cur, amount] of Object.entries(vatMap)) {
+    vatCzkConverted += await toCzk(amount, cur);
+  }
+
  return {
    paid_month: aggregateByCurrency(paidInvoices),
-    paid_month_czk: sumCzk(paidInvoices),
+    paid_month_czk: await sumCzk(paidInvoices),
    paid_month_count: paidInvoices.length,
    awaiting: aggregateByCurrency(awaitingInvoices),
-    awaiting_czk: sumCzk(awaitingInvoices),
+    awaiting_czk: await sumCzk(awaitingInvoices),
    awaiting_count: awaitingInvoices.length,
    overdue: aggregateByCurrency(overdueInvoices),
-    overdue_czk: sumCzk(overdueInvoices),
+    overdue_czk: await sumCzk(overdueInvoices),
    overdue_count: overdueInvoices.length,
    vat_month: vatAmounts,
-    vat_month_czk: Math.round(vatCzk * 100) / 100,
+    vat_month_czk: Math.round(vatCzkConverted * 100) / 100,
    month,
    year,
  };
--- a/src/services/nas-financials-manager.ts
+++ b/src/services/nas-financials-manager.ts
@@ -30,6 +30,28 @@ class NasFinancialsManager {

  // ── Created (issued) invoices ────────────────────────────────────

+  /** Remove any existing PDF for this invoice number across all year/month folders */
+  cleanIssuedInvoice(invoiceNumber: string): void {
+    if (!this.basePath) return;
+    const safeName = this.sanitizeFilename(invoiceNumber) + ".pdf";
+    const issuedDir = path.join(this.basePath, DIR_ISSUED);
+    try {
+      if (!fs.existsSync(issuedDir)) return;
+      for (const yearDir of fs.readdirSync(issuedDir)) {
+        const yearPath = path.join(issuedDir, yearDir);
+        if (!fs.statSync(yearPath).isDirectory()) continue;
+        for (const monthDir of fs.readdirSync(yearPath)) {
+          const filePath = path.join(yearPath, monthDir, safeName);
+          if (fs.existsSync(filePath)) {
+            fs.unlinkSync(filePath);
+          }
+        }
+      }
+    } catch {
+      // best effort
+    }
+  }
+
  saveIssuedInvoicePdf(
    invoiceNumber: string,
    year: number,
Author	SHA1	Message	Date
BOHA	44d389201c	1.5.0	2026-04-02 15:47:46 +02:00
BOHA	3106aaf314	feat: full invoice editing before payment, NAS cleanup on date change - Invoice edit mode now uses the same form as create mode (all fields editable) - Bank account pre-selected by matching IBAN/account number - Invoice number read-only in edit mode - Paid invoices remain read-only - NAS: old PDF deleted when invoice date changes to different month - Buttons: Zobrazit fakturu, Uložit, Smazat + status transitions Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 15:47:46 +02:00
BOHA	90e797b8fa	1.4.9	2026-04-02 15:25:35 +02:00
BOHA	1f7362c8af	fix: invoice PDF — tighter layout, more room for items - Page margins reduced, content width 186mm - Header/grid padding tightened - Table headers 8.5pt normal case, cells 4px padding - Footer flows naturally across pages (no forced page break) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 15:25:35 +02:00
BOHA	fe44a2b12d	1.4.8	2026-04-02 12:55:24 +02:00
BOHA	8a9239311d	feat: invoice PDF — larger fonts, order number and date in dates column - Base font 9pt→10pt, all sub-elements scaled proportionally - Order number and date shown in dates column when invoice linked to order - Uses customer_order_number with fallback to internal order_number Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 12:55:24 +02:00
BOHA	cd25cd6ee4	1.4.7	2026-04-02 12:31:51 +02:00
BOHA	967fbba2a4	fix: invoice PDF footer — single line with space for signatures Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 12:31:51 +02:00
BOHA	41fe65c7fc	1.4.6	2026-04-02 12:01:52 +02:00
BOHA	09d345a312	fix: invoice PDF table — numbers 8pt, description column wider (36%) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 12:01:51 +02:00
BOHA	1a13d745f1	1.4.5	2026-04-02 11:56:06 +02:00
BOHA	ce184771a6	feat: invoice PDF redesign — professional table-based layout - Header with red accent border, larger invoice number - Address blocks in connected table grid with equal heights - Customer and bank info highlighted with gray background - Bank info uses same row layout as dates (aligned labels/values) - Labels nowrap, values right-aligned - Item font size 8pt, table header border gray - Removed duplicate separator lines Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 11:56:05 +02:00
BOHA	7b6365f6b3	1.4.4	2026-04-02 11:28:13 +02:00
BOHA	44867c79f8	fix: PDF item names bold on Linux — font-weight 500→600 Linux lacks Segoe UI semibold, so weight 500 rendered as regular. Changed to 600 which maps to bold on both Windows and Linux. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 11:28:12 +02:00
BOHA	09a9e8c2f0	1.4.3	2026-04-02 11:13:30 +02:00
BOHA	b26a6f40b9	fix: invoice PDF shows unit next to quantity (e.g. 193,50 / ks) Adjusted column widths to prevent header overlap. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 11:13:29 +02:00
BOHA	40cb5a4d76	1.4.2	2026-04-02 11:05:42 +02:00
BOHA	ecd97ae5a3	fix: bulk attendance fill creates holiday records instead of skipping Holidays now get leave_type: "holiday" with 8h so they count in fund calculation. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 11:05:42 +02:00
BOHA	d14e97d7bd	1.4.1	2026-04-02 10:56:26 +02:00
BOHA	ef891f8e01	fix: bulk attendance fill — accept string user_ids, skip holidays - Schema now accepts both string and number user_ids (frontend sends strings) - Bulk fill now skips Czech public holidays in addition to weekends Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-02 10:56:25 +02:00
BOHA	96ba5d034f	1.4.0	2026-03-28 09:03:06 +01:00
BOHA	2402b7cbc8	fix: "Moje žádosti" page shows only current user's requests Admins were seeing all requests on their own requests page. Added mine=1 param to force user_id filter regardless of role. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 09:03:05 +01:00
BOHA	79b2fa5570	1.3.9	2026-03-28 08:56:14 +01:00
BOHA	35fa172d36	fix: trips admin shows only users with trips.record permission Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-28 08:56:14 +01:00
BOHA	000a77ccf4	1.3.8	2026-03-27 21:27:16 +01:00
BOHA	ecd9f6a181	chore: fix npm audit vulnerabilities (brace-expansion, fastify, nodemailer, picomatch) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-27 21:27:14 +01:00
BOHA	68e6d80903	1.3.7	2026-03-27 17:32:22 +01:00
BOHA	af1b41994c	fix: attendance shows only users with attendance.record permission - Filter attendance admin/balances/workfund to users with attendance.record permission or admin role - New attendance_users API action for user dropdown - Fix missing prisma import in attendance route - Fix user edit: empty password no longer blocks save (preprocess to undefined) Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-27 17:32:22 +01:00
BOHA	9779112066	1.3.6	2026-03-27 13:50:00 +01:00
BOHA	e8d6dc1567	fix: dashboard offers card showing wrong counts Queried status "converted"/"expired" but actual DB values are "ordered"/"invalidated". Updated label "Prošlé" → "Zneplatněné". Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-27 13:50:00 +01:00
BOHA	f9dd49591e	1.3.5	2026-03-27 13:44:54 +01:00
BOHA	8cdf057ab3	feat: CNB exchange rates, multi-currency KPI stats, invoice PDF VAT in CZK - ČNB exchange rate service with date-specific rates and caching - Invoice/received invoice stats convert foreign currencies to CZK - Dashboard revenue converts all currencies to CZK - Invoice PDF: VAT recap table always in CZK with CNB rate footer - Inline styles replaced with utility classes (step 4 cleanup) - Spinner animation exempt from prefers-reduced-motion Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-03-27 13:44:53 +01:00