Update app.py

app.py

@@ -12,123 +12,242 @@ import os
 import time
 import sqlite3
 import hashlib
+import stripe
 
-print("Initializing OmniParse AI Enterprise Terminal v5.5 with Optional Free Plan...")
+print("Initializing OmniParse AI Enterprise v6.0...")
 
-# ─── DATABASE INITIALIZATION ────────────────────────────────────────────────
+# ─── CONFIG ─────────────────────────────────────────────────────────────────
 DB_FILE = "omniparse.db"
+STRIPE_SECRET_KEY = os.environ.get("STRIPE_SECRET_KEY", "")
+STRIPE_WEBHOOK_SECRET = os.environ.get("STRIPE_WEBHOOK_SECRET", "")
+STRIPE_PRICE_ID = os.environ.get("STRIPE_PRICE_ID", "")  # Premium monthly price ID
+APP_URL = os.environ.get("APP_URL", "https://your-space.hf.space")
+
+stripe.api_key = STRIPE_SECRET_KEY
+
+# ─── PLAN LIMITS ────────────────────────────────────────────────────────────
+PLAN_LIMITS = {
+    "free": {
+        "docs_per_day": 3,
+        "chat_enabled": False,
+        "export_enabled": False,
+        "duplicate_check": False,
+        "history_days": 0,
+    },
+    "registered": {
+        "docs_per_day": 20,
+        "chat_enabled": True,
+        "export_enabled": True,
+        "duplicate_check": True,
+        "history_days": 30,
+    },
+    "premium": {
+        "docs_per_day": 999,
+        "chat_enabled": True,
+        "export_enabled": True,
+        "duplicate_check": True,
+        "history_days": 365,
+    },
+}
 
+# ─── DATABASE ────────────────────────────────────────────────────────────────
 def init_db():
     conn = sqlite3.connect(DB_FILE)
-    cursor = conn.cursor()
-    # Tabulka uživatelů
-    cursor.execute('''
-        CREATE TABLE IF NOT EXISTS users (
-            id INTEGER PRIMARY KEY AUTOINCREMENT,
-            username TEXT UNIQUE NOT NULL,
-            password_hash TEXT NOT NULL,
-            salt TEXT NOT NULL
-        )
-    ''')
-    # Tabulka nahraných faktur provázaná na uživatele
-    cursor.execute('''
-        CREATE TABLE IF NOT EXISTS invoices (
-            id INTEGER PRIMARY KEY AUTOINCREMENT,
-            user_id INTEGER NOT NULL,
-            timestamp REAL NOT NULL,
-            filename TEXT,
-            extracted_json TEXT,
-            fields_count INTEGER,
-            FOREIGN KEY(user_id) REFERENCES users(id)
-        )
-    ''')
+    c = conn.cursor()
+    c.execute('''CREATE TABLE IF NOT EXISTS users (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        username TEXT UNIQUE NOT NULL,
+        email TEXT,
+        password_hash TEXT NOT NULL,
+        salt TEXT NOT NULL,
+        plan TEXT DEFAULT 'registered',
+        stripe_customer_id TEXT,
+        stripe_subscription_id TEXT,
+        subscription_status TEXT DEFAULT 'inactive',
+        created_at REAL DEFAULT (strftime('%s','now')),
+        tos_accepted INTEGER DEFAULT 0
+    )''')
+    c.execute('''CREATE TABLE IF NOT EXISTS invoices (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id INTEGER NOT NULL,
+        timestamp REAL NOT NULL,
+        filename TEXT,
+        extracted_json TEXT,
+        fields_count INTEGER,
+        fingerprint TEXT,
+        FOREIGN KEY(user_id) REFERENCES users(id)
+    )''')
+    c.execute('''CREATE TABLE IF NOT EXISTS usage_log (
+        id INTEGER PRIMARY KEY AUTOINCREMENT,
+        user_id INTEGER NOT NULL,
+        action TEXT NOT NULL,
+        timestamp REAL DEFAULT (strftime('%s','now')),
+        FOREIGN KEY(user_id) REFERENCES users(id)
+    )''')
     conn.commit()
     conn.close()
 
 init_db()
 
+# ─── AUTH HELPERS ────────────────────────────────────────────────────────────
 def hash_password(password, salt=None):
     if not salt:
         salt = os.urandom(16).hex()
-    pbkdf2 = hashlib.pbkdf2_hmac('sha256', password.encode('utf-8'), salt.encode('utf-8'), 100000)
-    return pbkdf2.hex(), salt
+    h = hashlib.pbkdf2_hmac('sha256', password.encode(), salt.encode(), 100000)
+    return h.hex(), salt
+
+def get_user(username):
+    conn = sqlite3.connect(DB_FILE)
+    c = conn.cursor()
+    c.execute("SELECT * FROM users WHERE username=?", (username.strip().lower(),))
+    row = c.fetchone()
+    conn.close()
+    if not row:
+        return None
+    cols = ["id","username","email","password_hash","salt","plan","stripe_customer_id",
+            "stripe_subscription_id","subscription_status","created_at","tos_accepted"]
+    return dict(zip(cols, row))
+
+def get_user_plan(username):
+    u = get_user(username)
+    if not u:
+        return "free"
+    if u["plan"] == "premium" and u["subscription_status"] == "active":
+        return "premium"
+    return "registered"
+
+def get_docs_today(user_id):
+    conn = sqlite3.connect(DB_FILE)
+    c = conn.cursor()
+    day_start = time.time() - 86400
+    c.execute("SELECT COUNT(*) FROM invoices WHERE user_id=? AND timestamp>?", (user_id, day_start))
+    count = c.fetchone()[0]
+    conn.close()
+    return count
 
-# ─── AUTH ACTIONS (DATABASE BACKED) ─────────────────────────────────────────
-def db_register(username, password):
+# ─── AUTH ACTIONS ────────────────────────────────────────────────────────────
+def db_register(username, password, email="", tos_accepted=False):
     if not username or not password:
-        return json.dumps({"status": "ERROR", "message": "Zadej jméno i heslo, nesmí to bejt prázdný!"})
-    
+        return json.dumps({"status":"ERROR","message":"Vyplň jméno i heslo!"})
     username = username.strip().lower()
     if username == "guest":
-        return json.dumps({"status": "ERROR", "message": "Jméno 'guest' je rezervované pro Free Plan!"})
-        
+        return json.dumps({"status":"ERROR","message":"Jméno 'guest' je rezervované."})
+    if not tos_accepted:
+        return json.dumps({"status":"ERROR","message":"Musíš přijmout podmínky použití (TOS)."})
     try:
         conn = sqlite3.connect(DB_FILE)
-        cursor = conn.cursor()
-        cursor.execute("SELECT id FROM users WHERE username = ?", (username,))
-        if cursor.fetchone():
+        c = conn.cursor()
+        c.execute("SELECT id FROM users WHERE username=?", (username,))
+        if c.fetchone():
             conn.close()
-            return json.dumps({"status": "ERROR", "message": "Tohle uživatelský jméno už někdo vyfouknul!"})
-        
+            return json.dumps({"status":"ERROR","message":"Uživatel již existuje!"})
         h, salt = hash_password(password)
-        cursor.execute("INSERT INTO users (username, password_hash, salt) VALUES (?, ?, ?)", (username, h, salt))
+        c.execute("INSERT INTO users (username,email,password_hash,salt,plan,tos_accepted) VALUES (?,?,?,?,?,?)",
+                  (username, email.strip().lower(), h, salt, "registered", 1))
         conn.commit()
         conn.close()
-        return json.dumps({"status": "SUCCESS", "message": "Účet je na světě! Teď se můžeš přihlásit."})
+        return json.dumps({"status":"SUCCESS","message":"Účet vytvořen. Přihlaš se."})
     except Exception as e:
-        return json.dumps({"status": "ERROR", "message": f"Chyba databáze: {str(e)}"})
+        return json.dumps({"status":"ERROR","message":f"DB chyba: {e}"})
 
 def db_login(username, password):
     if not username or not password:
-        return json.dumps({"status": "ERROR", "message": "Zadej jméno a heslo, bez toho tě dál nepustím!"})
-    
+        return json.dumps({"status":"ERROR","message":"Zadej jméno a heslo!"})
     username = username.strip().lower()
     try:
         conn = sqlite3.connect(DB_FILE)
-        cursor = conn.cursor()
-        cursor.execute("SELECT id, password_hash, salt FROM users WHERE username = ?", (username,))
-        row = cursor.fetchone()
-        
+        c = conn.cursor()
+        c.execute("SELECT id,password_hash,salt,plan,subscription_status FROM users WHERE username=?", (username,))
+        row = c.fetchone()
         if not row:
             conn.close()
-            return json.dumps({"status": "ERROR", "message": "Tenhle uživatel v databázi vůbec neexistuje!"})
-        
-        user_id, stored_hash, salt = row
-        
-        # Podpora pro session refresh
+            return json.dumps({"status":"ERROR","message":"Uživatel neexistuje."})
+        user_id, stored_hash, salt, plan, sub_status = row
         if password == "SESSION_REFRESH":
-            cursor.execute("SELECT COUNT(*), SUM(fields_count) FROM invoices WHERE user_id = ?", (user_id,))
-            stats = cursor.fetchone()
-            docs_parsed = stats[0] or 0
-            fields_extracted = stats[1] or 0
+            c.execute("SELECT COUNT(*),SUM(fields_count) FROM invoices WHERE user_id=?", (user_id,))
+            s = c.fetchone()
             conn.close()
-            return json.dumps({
-                "status": "SUCCESS",
-                "username": username,
-                "stats": {"docs_parsed": docs_parsed, "fields_extracted": fields_extracted}
-            })
-            
+            effective_plan = "premium" if (plan=="premium" and sub_status=="active") else "registered"
+            return json.dumps({"status":"SUCCESS","username":username,"plan":effective_plan,
+                               "stats":{"docs_parsed":s[0]or 0,"fields_extracted":s[1]or 0},
+                               "limits":PLAN_LIMITS[effective_plan]})
         h, _ = hash_password(password, salt)
         if h != stored_hash:
             conn.close()
-            return json.dumps({"status": "ERROR", "message": "Špatný heslo, zkus to znova!"})
-        
-        cursor.execute("SELECT COUNT(*), SUM(fields_count) FROM invoices WHERE user_id = ?", (user_id,))
-        stats = cursor.fetchone()
-        docs_parsed = stats[0] or 0
-        fields_extracted = stats[1] or 0
+            return json.dumps({"status":"ERROR","message":"Špatné heslo!"})
+        c.execute("SELECT COUNT(*),SUM(fields_count) FROM invoices WHERE user_id=?", (user_id,))
+        s = c.fetchone()
         conn.close()
-        
-        return json.dumps({
-            "status": "SUCCESS",
-            "username": username,
-            "stats": {"docs_parsed": docs_parsed, "fields_extracted": fields_extracted}
-        })
+        effective_plan = "premium" if (plan=="premium" and sub_status=="active") else "registered"
+        return json.dumps({"status":"SUCCESS","username":username,"plan":effective_plan,
+                           "stats":{"docs_parsed":s[0]or 0,"fields_extracted":s[1]or 0},
+                           "limits":PLAN_LIMITS[effective_plan]})
     except Exception as e:
-        return json.dumps({"status": "ERROR", "message": f"Chyba při přihlášení: {str(e)}"})
+        return json.dumps({"status":"ERROR","message":f"Chyba: {e}"})
+
+# ─── STRIPE ACTIONS ──────────────────────────────────────────────────────────
+def create_checkout_session(username):
+    """Returns Stripe Checkout URL for Premium subscription."""
+    if not STRIPE_SECRET_KEY or not STRIPE_PRICE_ID:
+        return json.dumps({"status":"ERROR","message":"Stripe není nakonfigurován (chybí env proměnné)."})
+    u = get_user(username)
+    if not u:
+        return json.dumps({"status":"ERROR","message":"Uživatel nenalezen."})
+    try:
+        customer_id = u.get("stripe_customer_id")
+        if not customer_id:
+            customer = stripe.Customer.create(
+                email=u.get("email") or f"{username}@omniparse.ai",
+                metadata={"username": username}
+            )
+            customer_id = customer.id
+            conn = sqlite3.connect(DB_FILE)
+            conn.execute("UPDATE users SET stripe_customer_id=? WHERE username=?", (customer_id, username))
+            conn.commit()
+            conn.close()
+        session = stripe.checkout.Session.create(
+            customer=customer_id,
+            payment_method_types=["card"],
+            line_items=[{"price": STRIPE_PRICE_ID, "quantity": 1}],
+            mode="subscription",
+            success_url=f"{APP_URL}?payment=success",
+            cancel_url=f"{APP_URL}?payment=cancel",
+            metadata={"username": username}
+        )
+        return json.dumps({"status":"SUCCESS","url":session.url})
+    except Exception as e:
+        return json.dumps({"status":"ERROR","message":str(e)})
 
+def handle_stripe_webhook(payload, sig_header):
+    """Process Stripe webhooks to update subscription status."""
+    try:
+        event = stripe.Webhook.construct_event(payload, sig_header, STRIPE_WEBHOOK_SECRET)
+    except Exception as e:
+        return json.dumps({"status":"ERROR","message":str(e)})
+    
+    et = event["type"]
+    obj = event["data"]["object"]
+    
+    if et in ("customer.subscription.created", "customer.subscription.updated"):
+        sub_status = obj["status"]
+        customer_id = obj["customer"]
+        sub_id = obj["id"]
+        plan = "premium" if sub_status == "active" else "registered"
+        conn = sqlite3.connect(DB_FILE)
+        conn.execute("""UPDATE users SET plan=?,stripe_subscription_id=?,subscription_status=?
+                        WHERE stripe_customer_id=?""", (plan, sub_id, sub_status, customer_id))
+        conn.commit()
+        conn.close()
+    elif et == "customer.subscription.deleted":
+        customer_id = obj["customer"]
+        conn = sqlite3.connect(DB_FILE)
+        conn.execute("""UPDATE users SET plan='registered',subscription_status='canceled'
+                        WHERE stripe_customer_id=?""", (customer_id,))
+        conn.commit()
+        conn.close()
+    return json.dumps({"status":"OK"})
 
-# ─── CORE PARSER ENGINE ─────────────────────────────────────────────────────
+# ─── MODEL ───────────────────────────────────────────────────────────────────
 model_name = "naver-clova-ix/donut-base-finetuned-cord-v2"
 try:
     processor = DonutProcessor.from_pretrained(model_name)
@@ -136,42 +255,61 @@ try:
     device = "cuda" if torch.cuda.is_available() else "cpu"
     model.to(device)
     MODEL_LOADED = True
-    print(f"Model loaded successfully on {device}")
+    print(f"Model loaded on {device}")
 except Exception as e:
     MODEL_LOADED = False
-    processor = None
-    model = None
+    processor = model = None
     device = "cpu"
-    print(f"Model load warning (Using Demo Fallback): {e}")
+    print(f"Model load failed, using demo fallback: {e}")
 
-def clean_and_float(text_value):
+def clean_and_float(v):
     try:
-        cleaned = re.sub(r"[^\d.,]", "", str(text_value)).replace(",", ".")
-        return float(cleaned)
-    except Exception:
+        return float(re.sub(r"[^\d.,]","",str(v)).replace(",","."))
+    except:
         return 0.0
 
+# ─── CORE PARSER ─────────────────────────────────────────────────────────────
 def parse_invoice(image_b64: str, username: str):
     if not image_b64:
-        return json.dumps({"parser_status": "ERROR", "error_log": "Nebyla přijata žádná obrazová data faktury."})
+        return json.dumps({"parser_status":"ERROR","error_log":"Žádná obrazová data."})
+
+    # Determine user context
+    is_guest = (not username or username.strip().lower() in ("guest",""))
+    user_id = None
+    effective_plan = "free"
+    
+    if not is_guest:
+        u = get_user(username)
+        if u:
+            user_id = u["id"]
+            effective_plan = "premium" if (u["plan"]=="premium" and u["subscription_status"]=="active") else "registered"
+            limits = PLAN_LIMITS[effective_plan]
+            # Check daily limit
+            docs_today = get_docs_today(user_id)
+            if docs_today >= limits["docs_per_day"]:
+                return json.dumps({
+                    "parser_status": "LIMIT_REACHED",
+                    "error_log": f"Denní limit {limits['docs_per_day']} dokumentů vyčerpán. Upgraduj na vyšší plán.",
+                    "upgrade_required": effective_plan != "premium"
+                })
+        else:
+            is_guest = True
+    else:
+        limits = PLAN_LIMITS["free"]
 
     try:
         header, _, data = image_b64.partition(",")
         img_bytes = base64.b64decode(data if data else image_b64)
         img = Image.open(io.BytesIO(img_bytes)).convert("RGB")
     except Exception as e:
-        return json.dumps({"parser_status": "ERROR", "error_log": f"Image decode failed: {str(e)}"})
+        return json.dumps({"parser_status":"ERROR","error_log":f"Decode failed: {e}"})
 
     try:
         start_time = time.time()
-
         if MODEL_LOADED and processor and model:
             task_prompt = "<s_cord-v2>"
-            decoder_input_ids = processor.tokenizer(
-                task_prompt, add_special_tokens=False, return_tensors="pt"
-            ).input_ids
+            decoder_input_ids = processor.tokenizer(task_prompt, add_special_tokens=False, return_tensors="pt").input_ids
             pixel_values = processor(img, return_tensors="pt").pixel_values
-
             outputs = model.generate(
                 pixel_values.to(device),
                 decoder_input_ids=decoder_input_ids.to(device),
@@ -182,27 +320,20 @@ def parse_invoice(image_b64: str, username: str):
                 bad_words_ids=[[processor.tokenizer.unk_token_id]],
                 return_dict_in_generate=True,
             )
-
             sequence = processor.batch_decode(outputs.sequences)[0]
-            sequence = sequence.replace(processor.tokenizer.eos_token, "").replace(
-                processor.tokenizer.pad_token, ""
-            )
-            sequence = re.sub(r"<[^>]+>", " ", sequence).strip()
-
+            sequence = sequence.replace(processor.tokenizer.eos_token,"").replace(processor.tokenizer.pad_token,"")
+            sequence = re.sub(r"<[^>]+>"," ",sequence).strip()
             extracted_fields = {}
-            lines = re.split(r"[;\n]", sequence)
-            for line in lines:
+            for line in re.split(r"[;\n]", sequence):
                 if ":" in line:
-                    parts = line.split(":", 1)
-                    key = parts[0].strip().upper().replace(" ", "_")
-                    value = parts[1].strip()
-                    if key and value:
-                        extracted_fields[key] = value
-
+                    k,_,v = line.partition(":")
+                    k = k.strip().upper().replace(" ","_")
+                    v = v.strip()
+                    if k and v:
+                        extracted_fields[k] = v
             if not extracted_fields:
                 extracted_fields["RAW_TEXT"] = sequence.strip()
         else:
-            # Fallback demo data
             extracted_fields = {
                 "STORE_NAME": "TutaGarage Stavby s.r.o.",
                 "TOTAL": "24500.00",
@@ -214,736 +345,938 @@ def parse_invoice(image_b64: str, username: str):
 
         elapsed = round(time.time() - start_time, 2)
         confidence_score = round(random.uniform(0.95, 0.99), 2)
-        human_review = confidence_score < 0.96
+        invoice_fp = extracted_fields.get("INVOICE_NUMBER", extracted_fields.get("TOTAL","UNKNOWN"))
 
-        invoice_fp = extracted_fields.get("INVOICE_NUMBER", extracted_fields.get("TOTAL", "UNKNOWN"))
-        
-        # Kontrola duplicity v rámci přihlášeného uživatele (pokud to není host)
+        # Duplicate check (only for registered+)
         is_duplicate = False
-        is_guest = (not username or username.strip().lower() == "guest")
-
-        if not is_guest and invoice_fp != "UNKNOWN":
+        if not is_guest and user_id and PLAN_LIMITS[effective_plan]["duplicate_check"]:
             try:
                 conn = sqlite3.connect(DB_FILE)
-                cursor = conn.cursor()
-                cursor.execute("SELECT id FROM users WHERE username = ?", (username.strip().lower(),))
-                u_row = cursor.fetchone()
-                if u_row:
-                    user_id = u_row[0]
-                    cursor.execute("SELECT id FROM invoices WHERE user_id = ? AND extracted_json LIKE ?", (user_id, f'%"{invoice_fp}"%'))
-                    if cursor.fetchone():
-                        is_duplicate = True
+                c = conn.cursor()
+                c.execute("SELECT id FROM invoices WHERE user_id=? AND fingerprint=?", (user_id, invoice_fp))
+                is_duplicate = bool(c.fetchone())
                 conn.close()
-            except Exception:
+            except:
                 pass
 
-        subtotal_val = clean_and_float(extracted_fields.get("SUBTOTAL", "0"))
-        tax_val = clean_and_float(extracted_fields.get("TAX", "0"))
-        total_val = clean_and_float(extracted_fields.get("TOTAL", "0"))
-
+        subtotal_val = clean_and_float(extracted_fields.get("SUBTOTAL","0"))
+        tax_val = clean_and_float(extracted_fields.get("TAX","0"))
+        total_val = clean_and_float(extracted_fields.get("TOTAL","0"))
         validation_status = "PASSED"
         if subtotal_val > 0 and total_val > 0:
             if abs((subtotal_val + tax_val) - total_val) > 1.0:
-                validation_status = "WARNING: Math discrepancy detected"
+                validation_status = "WARNING: Nesouhlasí součet"
 
         result = {
             "parser_status": "SUCCESS",
             "parse_time_seconds": elapsed,
+            "plan": effective_plan,
             "security_and_compliance": {
                 "confidence_score": confidence_score,
-                "human_review_required": human_review,
+                "human_review_required": confidence_score < 0.96,
                 "duplicate_detected": is_duplicate,
                 "cross_field_validation": validation_status,
             },
             "extracted_data": extracted_fields,
         }
 
-        # Zápis do DB pouze pokud uživatel NENÍ host
-        if not is_guest:
-            fields_count = len(extracted_fields)
+        # Save to DB
+        if not is_guest and user_id:
             try:
                 conn = sqlite3.connect(DB_FILE)
-                cursor = conn.cursor()
-                cursor.execute("SELECT id FROM users WHERE username = ?", (username.strip().lower(),))
-                u_row = cursor.fetchone()
-                if u_row:
-                    user_id = u_row[0]
-                    cursor.execute(
-                        "INSERT INTO invoices (user_id, timestamp, filename, extracted_json, fields_count) VALUES (?, ?, ?, ?, ?)",
-                        (user_id, time.time(), "uploaded_doc.png", json.dumps(result), fields_count)
-                    )
-                    conn.commit()
-                    
-                    cursor.execute("SELECT COUNT(*), SUM(fields_count) FROM invoices WHERE user_id = ?", (user_id,))
-                    count_row = cursor.fetchone()
-                    result["user_stats"] = {
-                        "docs_parsed": count_row[0] or 0,
-                        "fields_extracted": count_row[1] or 0
-                    }
+                c = conn.cursor()
+                c.execute(
+                    "INSERT INTO invoices (user_id,timestamp,filename,extracted_json,fields_count,fingerprint) VALUES (?,?,?,?,?,?)",
+                    (user_id, time.time(), "uploaded_doc.png", json.dumps(result), len(extracted_fields), invoice_fp)
+                )
+                c.execute("INSERT INTO usage_log (user_id,action) VALUES (?,?)", (user_id,"parse"))
+                conn.commit()
+                c.execute("SELECT COUNT(*),SUM(fields_count) FROM invoices WHERE user_id=?", (user_id,))
+                s = c.fetchone()
                 conn.close()
-            except Exception as db_err:
-                print(f"DB Insert failure: {db_err}")
+                result["user_stats"] = {"docs_parsed": s[0]or 0, "fields_extracted": s[1]or 0}
+                result["docs_today"] = get_docs_today(user_id)
+                result["daily_limit"] = PLAN_LIMITS[effective_plan]["docs_per_day"]
+            except Exception as e:
+                print(f"DB insert error: {e}")
         else:
-            # Pro hosta vrátíme flag, JS si spočítá lokální session statistiky sám
-            result["user_stats"] = {
-                "docs_parsed": "GUEST_MODE",
-                "fields_extracted": "GUEST_MODE"
-            }
-
-        # Generování CSV exportu
-        rows = [["Field", "Value"]]
-        rows.append(["confidence_score", str(confidence_score)])
-        rows.append(["human_review_required", str(human_review)])
-        rows.append(["duplicate_detected", str(is_duplicate)])
-        rows.append(["cross_field_validation", validation_status])
-        rows.append(["parse_time_seconds", str(elapsed)])
-        for k, v in extracted_fields.items():
-            rows.append([k, v])
-
-        csv_path = "/tmp/omniparse_result.csv"
-        df = pd.DataFrame(rows[1:], columns=rows[0])
-        df.to_csv(csv_path, index=False)
-
-        with open(csv_path, "rb") as f:
-            csv_b64 = base64.b64encode(f.read()).decode()
-
-        result["_csv_b64"] = csv_b64
+            result["user_stats"] = {"docs_parsed":"GUEST","fields_extracted":"GUEST"}
+
+        # Export CSV (registered+ only)
+        if not is_guest and PLAN_LIMITS[effective_plan]["export_enabled"]:
+            rows = [["Field","Value"]]
+            rows.append(["confidence_score", str(confidence_score)])
+            rows.append(["duplicate_detected", str(is_duplicate)])
+            rows.append(["cross_field_validation", validation_status])
+            for k,v in extracted_fields.items():
+                rows.append([k,v])
+            df = pd.DataFrame(rows[1:], columns=rows[0])
+            buf = io.StringIO()
+            df.to_csv(buf, index=False)
+            result["_csv_b64"] = base64.b64encode(buf.getvalue().encode()).decode()
+
+        result["feature_flags"] = PLAN_LIMITS[effective_plan]
         return json.dumps(result)
 
     except Exception as e:
-        return json.dumps({"parser_status": "ERROR", "error_log": str(e)})
+        return json.dumps({"parser_status":"ERROR","error_log":str(e)})
 
 
-def agent_chat(user_message: str, extracted_json: str) -> str:
+def agent_chat(user_message: str, extracted_json: str, username: str):
     if not user_message.strip():
         return ""
+    
+    # Check if chat is allowed
+    is_guest = (not username or username.strip().lower() in ("guest",""))
+    if is_guest:
+        return "🔒 AI Audit Companion je dostupný pouze pro registrované uživatele."
+    
+    plan = get_user_plan(username)
+    if not PLAN_LIMITS[plan]["chat_enabled"]:
+        return "🔒 Chat není dostupný ve vašem plánu."
 
     try:
         data = json.loads(extracted_json) if extracted_json else {}
         fields = data.get("extracted_data", {})
         compliance = data.get("security_and_compliance", {})
-    except Exception:
+    except:
         fields = {}
         compliance = {}
 
     if not fields:
-        return "Nejdřív nahraj a vytěž nějakou fakturu, abych měl z čeho brát data, šéfe."
+        return "Nejdřív nahraj a vytěž fakturu."
 
     msg = user_message.lower()
     matched = []
     for key, val in fields.items():
-        clean_key = key.lower().replace("_", " ")
-        if clean_key in msg or any(word in clean_key for word in msg.split() if len(word) > 3):
+        clean_key = key.lower().replace("_"," ")
+        if clean_key in msg or any(word in clean_key for word in msg.split() if len(word)>3):
             matched.append(f"**{key}**: {val}")
-
     if matched:
-        return "Našel jsem tyhle shody:\n" + "\n".join(f"• {m}" for m in matched[:5])
-
-    if any(w in msg for w in ["total", "cena", "castka", "suma", "celkem", "amount"]):
-        total = fields.get("TOTAL", fields.get("TOTAL_PRICE", "nenalezeno"))
-        subtotal = fields.get("SUBTOTAL", "—")
-        tax = fields.get("TAX", "—")
-        return f"💰 **Celková částka**: {total}\n• Základ: {subtotal}\n• Daň/DPH: {tax}"
-
-    if any(w in msg for w in ["vendor", "firma", "kdo", "dodavatel", "spolecnost", "seller", "store"]):
-        vendor = fields.get("STORE_NAME", fields.get("VENDOR", fields.get("COMPANY", "nenalezeno")))
-        return f"🏢 **Dodavatel**: {vendor}"
-
-    if any(w in msg for w in ["date", "datum", "kdy", "vystaveni"]):
-        date = fields.get("DATE", fields.get("INVOICE_DATE", "nenalezeno"))
-        return f"📅 **Datum dokladu**: {date}"
-
-    if any(w in msg for w in ["confidence", "skore", "spolehlivost", "presnost"]):
-        score = compliance.get("confidence_score", "—")
-        return f"🎯 **Spolehlivost modelu**: {score} ({float(score)*100:.0f}% jistota)" if score != "—" else "Skóre nedostupné."
-
-    if any(w in msg for w in ["all", "vsechno", "pole", "data", "vypis"]):
-        lines = [f"• **{k}**: {v}" for k, v in list(fields.items())[:10]]
-        return "📋 **Kompletní extrahovaná data (Top 10)**:\n" + "\n".join(lines)
-
-    keys = list(fields.keys())[:6]
-    return f"Mám vyextrahováno {len(fields)} polí. Zeptej se mě třeba na: {', '.join(keys[:5])}."
-
-
-# ─── GRADIO WRAPPER BRIDGES ─────────────────────────────────────────────────
+        return "Shody:\n" + "\n".join(f"• {m}" for m in matched[:5])
+    if any(w in msg for w in ["total","cena","castka","suma","celkem","amount"]):
+        return f"💰 **Celkem**: {fields.get('TOTAL','—')}\n• Základ: {fields.get('SUBTOTAL','—')}\n• DPH: {fields.get('TAX','—')}"
+    if any(w in msg for w in ["vendor","firma","kdo","dodavatel","store"]):
+        return f"🏢 **Dodavatel**: {fields.get('STORE_NAME',fields.get('VENDOR','—'))}"
+    if any(w in msg for w in ["date","datum","kdy"]):
+        return f"📅 **Datum**: {fields.get('DATE',fields.get('INVOICE_DATE','—'))}"
+    if any(w in msg for w in ["confidence","spolehlivost","presnost"]):
+        s = compliance.get("confidence_score","—")
+        return f"🎯 **Spolehlivost**: {s} ({float(s)*100:.0f}%)" if s != "—" else "Nedostupné."
+    keys = list(fields.keys())[:5]
+    return f"Mám {len(fields)} polí. Zeptej se na: {', '.join(keys)}."
+
+
+# ─── GRADIO WRAPPERS ─────────────────────────────────────────────────────────
 def gr_parse(image_b64, username):
     return parse_invoice(image_b64, username)
 
-def gr_chat(user_msg, extracted_json):
-    return agent_chat(user_msg, extracted_json)
+def gr_chat(user_msg, extracted_json, username):
+    return agent_chat(user_msg, extracted_json, username)
 
+def gr_checkout(username):
+    return create_checkout_session(username)
 
-# ─── STYLING & INTERACTION LAYER ────────────────────────────────────────────
+
+# ─── CSS ─────────────────────────────────────────────────────────────────────
 CUSTOM_CSS = """
-body { margin: 0 !important; padding: 0 !important; background: #09090b !important; }
-.gradio-container { max-width: 100% !important; padding: 0 !important; margin: 0 !important; background: #09090b !important; }
-footer { display: none !important; }
-#hidden-controls { display: none !important; }
+body{margin:0!important;padding:0!important;background:#09090b!important;}
+.gradio-container{max-width:100%!important;padding:0!important;margin:0!important;background:#09090b!important;}
+footer{display:none!important;}
+#hidden-controls{display:none!important;}
 """
 
-HTML_UI = """
+# ─── HTML UI ─────────────────────────────────────────────────────────────────
+HTML_UI = r"""
 <!DOCTYPE html>
 <html lang="cs">
 <head>
 <meta charset="UTF-8"/>
 <meta name="viewport" content="width=device-width,initial-scale=1.0"/>
 <script src="https://cdn.tailwindcss.com"></script>
-<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"/>
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@300;400;500;600;700&family=JetBrains+Mono:wght@400;500&display=swap" rel="stylesheet"/>
 <style>
 *{box-sizing:border-box;margin:0;padding:0;}
 :root{
-  --bg: #09090b;
-  --surface: #111113;
-  --surface2: #18181b;
-  --border: #27272a;
-  --border2: #3f3f46;
-  --text: #e4e4e7;
-  --text2: #a1a1aa;
-  --text3: #71717a;
-  --text4: #52525b;
-  --blue: #3b82f6;
-  --blue-light: #60a5fa;
-  --blue-dark: #1d4ed8;
-  --green: #34d399;
+  --bg:#09090b;--surface:#111113;--surface2:#18181b;--surface3:#1c1c1f;
+  --border:#27272a;--border2:#3f3f46;
+  --text:#e4e4e7;--text2:#a1a1aa;--text3:#71717a;--text4:#52525b;
+  --blue:#3b82f6;--blue-light:#60a5fa;--blue-dark:#1d4ed8;
+  --green:#34d399;--amber:#f59e0b;--red:#ef4444;--purple:#a78bfa;
 }
 body{font-family:'Inter',sans-serif;background:var(--bg);color:var(--text);}
 .card{background:var(--surface2);border:1px solid var(--border);border-radius:14px;}
-.section-label{font-size:10px;font-weight:600;letter-spacing:.1em;text-transform:uppercase;color:var(--text4);}
+.card-glow{box-shadow:0 0 0 1px rgba(59,130,246,.15),0 4px 24px rgba(0,0,0,.4);}
+.section-label{font-size:10px;font-weight:700;letter-spacing:.12em;text-transform:uppercase;color:var(--text4);}
 .drop-zone{border:1.5px dashed var(--border2);border-radius:12px;transition:all .25s ease;cursor:pointer;}
-.drop-zone:hover,.drop-zone.drag-over{border-color:var(--blue);background:rgba(59,130,246,.05);}
-.btn-primary{background:linear-gradient(135deg,var(--blue) 0%,var(--blue-dark) 100%);color:#fff;border:none;border-radius:12px;font-weight:600;font-size:14px;cursor:pointer;transition:all .2s ease;}
-.btn-primary:hover:not(:disabled){filter:brightness(1.1);transform:translateY(-1px);}
-.btn-primary:disabled{opacity:.45;cursor:not-allowed;}
-.btn-secondary{background:var(--surface2);border:1px solid var(--border2);color:var(--text2);border-radius:12px;font-size:14px;font-weight:500;cursor:pointer;transition:all .18s ease;}
+.drop-zone:hover,.drop-zone.drag-over{border-color:var(--blue);background:rgba(59,130,246,.04);}
+.btn-primary{background:linear-gradient(135deg,var(--blue),var(--blue-dark));color:#fff;border:none;border-radius:10px;font-weight:600;font-size:13px;cursor:pointer;transition:all .2s ease;letter-spacing:.01em;}
+.btn-primary:hover:not(:disabled){filter:brightness(1.12);transform:translateY(-1px);box-shadow:0 4px 16px rgba(59,130,246,.35);}
+.btn-primary:disabled{opacity:.4;cursor:not-allowed;transform:none;}
+.btn-secondary{background:var(--surface2);border:1px solid var(--border2);color:var(--text2);border-radius:10px;font-size:13px;font-weight:500;cursor:pointer;transition:all .18s ease;}
 .btn-secondary:hover{border-color:var(--blue-light);color:var(--text);}
-.chat-input{background:var(--surface2);border:1px solid var(--border2);color:var(--text);border-radius:10px;padding:10px 14px;font-size:14px;outline:none;width:100%;}
-.chat-input:focus{border-color:var(--blue);}
+.btn-premium{background:linear-gradient(135deg,#7c3aed,#4f46e5);color:#fff;border:none;border-radius:10px;font-weight:600;font-size:13px;cursor:pointer;transition:all .2s ease;}
+.btn-premium:hover{filter:brightness(1.1);transform:translateY(-1px);box-shadow:0 4px 16px rgba(124,58,237,.35);}
+.btn-danger{background:rgba(239,68,68,.1);border:1px solid rgba(239,68,68,.25);color:#fca5a5;border-radius:8px;font-size:12px;font-weight:500;cursor:pointer;padding:6px 14px;transition:all .18s;}
+.btn-danger:hover{background:rgba(239,68,68,.2);}
+.input-field{background:var(--surface2);border:1px solid var(--border2);color:var(--text);border-radius:10px;padding:10px 14px;font-size:13px;outline:none;width:100%;transition:border .18s;}
+.input-field:focus{border-color:var(--blue);}
 .code-view{background:#0d1117;border:1px solid #21262d;border-radius:10px;font-family:'JetBrains Mono',monospace;}
-.dl-card{background:linear-gradient(135deg,rgba(59,130,246,.07) 0%,rgba(29,78,216,.04) 100%);border:1px solid rgba(59,130,246,.2);border-radius:12px;}
+.dl-card{background:linear-gradient(135deg,rgba(59,130,246,.06),rgba(29,78,216,.03));border:1px solid rgba(59,130,246,.18);border-radius:12px;}
 .grad{background:linear-gradient(135deg,#60a5fa,#a78bfa);-webkit-background-clip:text;-webkit-text-fill-color:transparent;}
-.spin{animation:spin 0.8s linear infinite;}
+.grad-premium{background:linear-gradient(135deg,#a78bfa,#7c3aed);-webkit-background-clip:text;-webkit-text-fill-color:transparent;}
+.spin{animation:spin .8s linear infinite;}
 @keyframes spin{to{transform:rotate(360deg);}}
-.toast{animation:slideIn .3s ease;}
+.toast{animation:slideIn .3s ease;pointer-events:none;}
 @keyframes slideIn{from{transform:translateX(110%);opacity:0;}to{transform:translateX(0);opacity:1;}}
+.badge{display:inline-flex;align-items:center;gap:4px;padding:2px 10px;border-radius:100px;font-size:10px;font-weight:700;letter-spacing:.05em;}
+.badge-free{background:rgba(245,158,11,.1);color:#fbbf24;border:1px solid rgba(245,158,11,.2);}
+.badge-registered{background:rgba(59,130,246,.1);color:#60a5fa;border:1px solid rgba(59,130,246,.2);}
+.badge-premium{background:rgba(167,139,250,.12);color:#c4b5fd;border:1px solid rgba(167,139,250,.25);}
+.limit-bar-track{background:var(--border);border-radius:100px;height:4px;overflow:hidden;}
+.limit-bar-fill{height:4px;border-radius:100px;background:linear-gradient(90deg,var(--blue),var(--blue-light));transition:width .5s ease;}
+.limit-bar-fill.warn{background:linear-gradient(90deg,var(--amber),#fcd34d);}
+.limit-bar-fill.danger{background:linear-gradient(90deg,var(--red),#fca5a5);}
+.modal-overlay{position:fixed;inset:0;background:rgba(0,0,0,.7);backdrop-filter:blur(6px);z-index:200;display:flex;align-items:center;justify-content:center;padding:16px;}
+.tab-btn{padding:8px 18px;border-radius:8px;font-size:13px;font-weight:500;cursor:pointer;border:none;transition:all .18s;}
+.tab-btn.active{background:var(--surface3);color:var(--text);border:1px solid var(--border2);}
+.tab-btn.inactive{background:transparent;color:var(--text3);}
+.tab-btn.inactive:hover{color:var(--text2);}
+.plan-card{border:2px solid var(--border);border-radius:16px;padding:24px;transition:all .2s;cursor:default;}
+.plan-card.current{border-color:var(--blue);}
+.plan-card.premium-card{border-color:rgba(167,139,250,.4);background:linear-gradient(135deg,rgba(124,58,237,.05),rgba(79,70,229,.03));}
+.tos-scroll{background:var(--surface);border:1px solid var(--border);border-radius:10px;padding:16px;max-height:200px;overflow-y:auto;font-size:11px;color:var(--text2);line-height:1.6;}
 </style>
 </head>
 <body>
 
-<div id="toast-root" style="position:fixed;top:16px;right:16px;z-index:9999;display:flex;flex-direction:column;gap:8px;"></div>
+<div id="toast-root" style="position:fixed;top:16px;right:16px;z-index:9999;display:flex;flex-direction:column;gap:8px;width:300px;"></div>
 
-<!-- ═══ 1. AUTHENTICATION OVERLAY SCREEN ═══ -->
+<!-- ═══ AUTH SCREEN ═══ -->
 <div id="auth-screen" class="fixed inset-0 z-50 flex items-center justify-center bg-[#09090b] p-4">
-  <div class="card w-full max-w-md p-8 space-y-5">
+  <div class="card card-glow w-full max-w-sm p-8 space-y-5">
     <div class="text-center space-y-2">
-      <div class="mx-auto w-12 h-12 rounded-xl bg-gradient-to-br from-blue-500 to-blue-700 flex items-center justify-center shadow-lg shadow-blue-500/25">
+      <div class="mx-auto w-12 h-12 rounded-xl bg-gradient-to-br from-blue-500 to-blue-700 flex items-center justify-center shadow-lg shadow-blue-500/20">
         <svg width="22" height="22" viewBox="0 0 16 16" fill="none"><path d="M2 3h12M2 6h8M2 9h10M2 12h6" stroke="white" stroke-width="1.5" stroke-linecap="round"/><circle cx="13" cy="11" r="2.5" stroke="white" stroke-width="1.2"/><path d="M15 13l1.5 1.5" stroke="white" stroke-width="1.2" stroke-linecap="round"/></svg>
       </div>
-      <h2 class="text-2xl font-bold tracking-tight text-white">OmniParse <span class="grad">AI</span></h2>
-      <p class="text-xs text-zinc-400">Multi-User Document Data-Mining Terminal</p>
+      <h2 class="text-xl font-bold text-white">OmniParse <span class="grad">AI</span></h2>
+      <p class="text-[11px] text-zinc-500">Document Intelligence Platform</p>
     </div>
-    
+
+    <!-- Tabs -->
+    <div class="flex gap-1 bg-zinc-900 p-1 rounded-lg">
+      <button onclick="switchAuthTab('login')" id="tab-login" class="tab-btn active flex-1 text-center">Přihlásit</button>
+      <button onclick="switchAuthTab('register')" id="tab-register" class="tab-btn inactive flex-1 text-center">Registrovat</button>
+    </div>
+
     <div class="space-y-3">
       <div>
         <label class="block text-[10px] font-bold uppercase tracking-wider text-zinc-500 mb-1">Uživatelské jméno</label>
-        <input type="text" id="auth-username" class="chat-input text-xs" placeholder="Zadej login...">
+        <input type="text" id="auth-username" class="input-field text-xs" placeholder="login..." onkeydown="if(event.key==='Enter')handleAuthAction(currentAuthTab)"/>
+      </div>
+      <div id="auth-email-row" style="display:none;">
+        <label class="block text-[10px] font-bold uppercase tracking-wider text-zinc-500 mb-1">E-mail (volitelný, pro platby)</label>
+        <input type="email" id="auth-email" class="input-field text-xs" placeholder="email@domena.cz"/>
       </div>
       <div>
         <label class="block text-[10px] font-bold uppercase tracking-wider text-zinc-500 mb-1">Heslo</label>
-        <input type="password" id="auth-password" class="chat-input text-xs" placeholder="••••••••">
+        <input type="password" id="auth-password" class="input-field text-xs" placeholder="••••••••" onkeydown="if(event.key==='Enter')handleAuthAction(currentAuthTab)"/>
+      </div>
+      <div id="tos-row" style="display:none;" class="space-y-2">
+        <div class="tos-scroll">
+          <strong>Podmínky použití (ToS) a GDPR</strong><br/><br/>
+          Používáním OmniParse AI souhlasíš se zpracováním nahrávaných dokumentů pro účely extrakce dat. Data jsou zpracovávána na serverech Hugging Face Spaces. Neposkytujeme data třetím stranám. Máš právo na výmaz svých dat dle GDPR. Platby jsou zpracovávány přes Stripe. Služba je poskytována "tak jak je" bez záruky přesnosti. Pro podporu: support@omniparse.ai. Minimální věk: 18 let. Zásady ochrany osobních údajů a plné ToS na: <a href="#" style="color:var(--blue)">omniparse.ai/terms</a>.<br/><br/>
+          <strong>Disclaimer:</strong> OmniParse AI je nástroj pro asistenci – výstupy nejsou právně závazné. Vždy ověřuj výstupy před použitím v účetnictví či právních procesech.
+        </div>
+        <label style="display:flex;align-items:center;gap:8px;cursor:pointer;">
+          <input type="checkbox" id="tos-checkbox" style="width:14px;height:14px;accent-color:var(--blue)"/>
+          <span class="text-[11px] text-zinc-400">Souhlasím s podmínkami použití a zpracováním osobních údajů (GDPR)</span>
+        </label>
       </div>
     </div>
-    
-    <div class="flex flex-col gap-2 pt-1">
-      <button onclick="handleAuthAction('login')" class="btn-primary w-full py-2.5 font-semibold text-xs">
-        Přihlásit se do systému ⚡
-      </button>
-      <button onclick="handleAuthAction('register')" class="btn-secondary w-full py-2.5 text-xs">
-        Registrovat nový cloudový účet
+
+    <div class="flex flex-col gap-2">
+      <button onclick="handleAuthAction(currentAuthTab)" id="auth-main-btn" class="btn-primary w-full py-2.5 font-semibold text-xs">
+        Přihlásit se ⚡
       </button>
-      
       <div class="relative flex py-2 items-center">
         <div class="flex-grow border-t border-zinc-800"></div>
         <span class="flex-shrink mx-3 text-[10px] text-zinc-600 font-bold uppercase">Nebo</span>
         <div class="flex-grow border-t border-zinc-800"></div>
       </div>
-      
-      <button onclick="bypassAuthAsGuest()" class="w-full py-2 bg-zinc-900 border border-zinc-800 hover:border-zinc-700 text-zinc-300 rounded-xl text-xs font-semibold transition-all">
-        Pokračovat bez registrace (Free Plan) →
+      <button onclick="bypassAuthAsGuest()" class="w-full py-2 bg-zinc-900 border border-zinc-800 hover:border-zinc-700 text-zinc-400 rounded-xl text-xs font-medium transition-all">
+        Pokračovat bez registrace (Free: 3 dok./den, bez exportu) →
       </button>
     </div>
   </div>
 </div>
 
 
-<!-- ═══ 2. MAIN APPLICATION WORKSPACE ═══ -->
-<div id="app-screen" style="display: none;">
-  <header style="border-bottom:1px solid var(--border);background:rgba(9,9,11,.92);backdrop-filter:blur(16px); position:sticky; top:0; z-index:40;">
-    <div style="max-width:1280px;margin:0 auto;padding:0 24px;height:56px;display:flex;align-items:center;justify-content:space-between;">
+<!-- ═══ UPGRADE MODAL ═══ -->
+<div id="upgrade-modal" class="modal-overlay" style="display:none;">
+  <div class="card card-glow w-full max-w-lg p-8 space-y-6">
+    <div class="flex justify-between items-start">
+      <div>
+        <h3 class="text-lg font-bold text-white">Upgrade plánu</h3>
+        <p class="text-xs text-zinc-500 mt-1">Odemkni plný výkon OmniParse AI</p>
+      </div>
+      <button onclick="closeUpgradeModal()" class="text-zinc-500 hover:text-zinc-300 text-lg">✕</button>
+    </div>
+    <div class="grid grid-cols-2 gap-4">
+      <!-- Free -->
+      <div class="plan-card" id="plan-free-card">
+        <div class="text-sm font-bold text-zinc-400 mb-1">Free</div>
+        <div class="text-2xl font-black text-white mb-3">0 Kč</div>
+        <ul class="space-y-1.5 text-xs text-zinc-400">
+          <li>✓ 3 dokumenty / den</li>
+          <li class="text-zinc-600">✗ Chat AI</li>
+          <li class="text-zinc-600">✗ CSV Export</li>
+          <li class="text-zinc-600">✗ Detekce duplicit</li>
+          <li class="text-zinc-600">✗ Historie</li>
+        </ul>
+      </div>
+      <!-- Registered -->
+      <div class="plan-card" id="plan-reg-card">
+        <div class="text-sm font-bold text-blue-400 mb-1">Registrovaný</div>
+        <div class="text-2xl font-black text-white mb-3">0 Kč</div>
+        <ul class="space-y-1.5 text-xs text-zinc-300">
+          <li>✓ 20 dokumentů / den</li>
+          <li>✓ Chat AI</li>
+          <li>✓ CSV Export</li>
+          <li>✓ Detekce duplicit</li>
+          <li>✓ 30 dní historie</li>
+        </ul>
+      </div>
+    </div>
+    <div class="plan-card premium-card" id="plan-prem-card">
+      <div class="flex justify-between items-center mb-2">
+        <div class="text-sm font-bold"><span class="grad-premium">Premium</span></div>
+        <span class="badge badge-premium">⭐ DOPORUČENO</span>
+      </div>
+      <div class="text-2xl font-black text-white mb-3">299 Kč<span class="text-sm font-normal text-zinc-500"> / měsíc</span></div>
+      <ul class="space-y-1.5 text-xs text-zinc-300 mb-4">
+        <li>✓ <strong>Neomezené</strong> dokumenty</li>
+        <li>✓ Chat AI</li>
+        <li>✓ CSV Export</li>
+        <li>✓ Detekce duplicit</li>
+        <li>✓ 365 dní historie</li>
+        <li>✓ Prioritní zpracování</li>
+      </ul>
+      <button onclick="startPremiumCheckout()" id="stripe-btn" class="btn-premium w-full py-2.5 text-sm">
+        Přejít na platbu (Stripe) →
+      </button>
+      <p class="text-[10px] text-zinc-600 text-center mt-2">Bezpečná platba · Zrušení kdykoliv · PCI DSS</p>
+    </div>
+    <p class="text-[10px] text-zinc-600 text-center">Platby zpracovává Stripe Inc. · OmniParse neuchovává čísla karet.</p>
+  </div>
+</div>
+
+
+<!-- ═══ MAIN APP ═══ -->
+<div id="app-screen" style="display:none;">
+  <!-- Header -->
+  <header style="border-bottom:1px solid var(--border);background:rgba(9,9,11,.95);backdrop-filter:blur(20px);position:sticky;top:0;z-index:40;">
+    <div style="max-width:1400px;margin:0 auto;padding:0 24px;height:56px;display:flex;align-items:center;justify-content:space-between;">
       <div style="display:flex;align-items:center;gap:12px;">
-        <div style="width:32px;height:32px;border-radius:8px;background:linear-gradient(135deg,#3b82f6,#1d4ed8);display:flex;align-items:center;justify-content:center;">
+        <div style="width:32px;height:32px;border-radius:8px;background:linear-gradient(135deg,#3b82f6,#1d4ed8);display:flex;align-items:center;justify-content:center;flex-shrink:0;">
           <svg width="16" height="16" viewBox="0 0 16 16" fill="none"><path d="M2 3h12M2 6h8M2 9h10M2 12h6" stroke="white" stroke-width="1.5" stroke-linecap="round"/><circle cx="13" cy="11" r="2.5" stroke="white" stroke-width="1.2"/><path d="M15 13l1.5 1.5" stroke="white" stroke-width="1.2" stroke-linecap="round"/></svg>
         </div>
-        <span style="color:#fff;font-weight:600;font-size:15px;">OmniParse <span class="grad">AI</span></span>
+        <span style="color:#fff;font-weight:700;font-size:15px;letter-spacing:-.01em;">OmniParse <span class="grad">AI</span></span>
+        <span id="plan-badge" class="badge badge-free">FREE</span>
       </div>
-      
-      <div style="display:flex;align-items:center;gap:16px;">
-        <div style="display:flex;align-items:center;gap:8px;padding:6px 12px;border-radius:8px;background:var(--surface2);border:1px solid var(--border);">
-          <span id="status-dot" style="width:8px;height:8px;border-radius:50%;background:#34d399;"></span>
-          <span id="status-text" style="font-size:12px;color:var(--text2);font-weight:500;">System Ready</span>
+      <div style="display:flex;align-items:center;gap:10px;">
+        <div style="display:flex;align-items:center;gap:6px;padding:5px 12px;border-radius:8px;background:var(--surface2);border:1px solid var(--border);">
+          <span id="status-dot" style="width:7px;height:7px;border-radius:50%;background:#34d399;flex-shrink:0;"></span>
+          <span id="status-text" style="font-size:11px;color:var(--text2);font-weight:500;">Ready</span>
         </div>
-        <span id="user-display" class="text-sm font-medium"></span>
-        <button onclick="handleLogout()" class="text-xs text-red-400 hover:underline">Zpět na login / Odhlásit</button>
+        <span id="user-display" style="font-size:12px;font-weight:500;color:var(--text2);"></span>
+        <button onclick="openUpgradeModal()" id="upgrade-btn" class="btn-premium px-3 py-1.5 text-xs" style="display:none;">⭐ Upgrade</button>
+        <button onclick="handleLogout()" class="btn-danger">Odhlásit</button>
       </div>
     </div>
   </header>
-  
-  <main style="max-width:1280px;margin:0 auto;padding:24px;">
-    <!-- Stats Banner -->
-    <div class="grid grid-cols-4 gap-3 mb-5">
+
+  <main style="max-width:1400px;margin:0 auto;padding:24px;display:flex;flex-direction:column;gap:20px;">
+    
+    <!-- Stats + Limit Bar -->
+    <div class="grid grid-cols-4 gap-3">
       <div class="card p-4 flex items-center gap-3">
-        <div class="text-2xl">📄</div>
-        <div><p class="text-[10px] text-zinc-500 uppercase font-bold">Zpracované dokumenty</p><p id="st-docs" class="text-lg font-bold text-white">0</p></div>
+        <div style="font-size:22px;">📄</div>
+        <div>
+          <p class="section-label mb-0.5">Dokumenty</p>
+          <p id="st-docs" style="font-size:20px;font-weight:800;color:var(--text);">0</p>
+        </div>
       </div>
       <div class="card p-4 flex items-center gap-3">
-        <div class="text-2xl">⚡</div>
-        <div><p class="text-[10px] text-zinc-500 uppercase font-bold">Vytěžená pole</p><p id="st-fields" class="text-lg font-bold text-white">0</p></div>
+        <div style="font-size:22px;">⚡</div>
+        <div>
+          <p class="section-label mb-0.5">Vytěžená pole</p>
+          <p id="st-fields" style="font-size:20px;font-weight:800;color:var(--text);">0</p>
+        </div>
       </div>
       <div class="card p-4 flex items-center gap-3">
-        <div class="text-2xl">⏱️</div>
-        <div><p class="text-[10px] text-zinc-500 uppercase font-bold">Čas operace</p><p id="st-time" class="text-lg font-bold text-white">—</p></div>
+        <div style="font-size:22px;">⏱️</div>
+        <div>
+          <p class="section-label mb-0.5">Čas operace</p>
+          <p id="st-time" style="font-size:20px;font-weight:800;color:var(--text);">—</p>
+        </div>
       </div>
       <div class="card p-4 flex items-center gap-3">
-        <div class="text-2xl">🎯</div>
-        <div><p class="text-[10px] text-zinc-500 uppercase font-bold">Spolehlivost</p><p id="st-conf" class="text-lg font-bold text-white">—</p></div>
+        <div style="font-size:22px;">🎯</div>
+        <div>
+          <p class="section-label mb-0.5">Spolehlivost</p>
+          <p id="st-conf" style="font-size:20px;font-weight:800;color:var(--text);">—</p>
+        </div>
       </div>
     </div>
-    
-    <!-- Workspace Grid -->
+
+    <!-- Daily Limit Indicator -->
+    <div id="limit-indicator" class="card p-4 flex items-center gap-4" style="display:none!important;">
+      <div style="flex:1;">
+        <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:6px;">
+          <span style="font-size:11px;font-weight:600;color:var(--text2);">Denní limit</span>
+          <span id="limit-text" style="font-size:11px;color:var(--text3);">0 / 3</span>
+        </div>
+        <div class="limit-bar-track"><div id="limit-bar" class="limit-bar-fill" style="width:0%;"></div></div>
+      </div>
+      <button onclick="openUpgradeModal()" style="font-size:11px;color:var(--blue);white-space:nowrap;cursor:pointer;background:none;border:none;">Upgrade →</button>
+    </div>
+
+    <!-- Workspace -->
     <div style="display:grid;grid-template-columns:1fr 1fr;gap:20px;">
-      <!-- Left Controls -->
-      <div class="space-y-4">
+      <!-- Left -->
+      <div style="display:flex;flex-direction:column;gap:16px;">
         <div class="card p-5 space-y-4">
-          <div class="flex justify-between items-center">
-            <span class="text-sm font-semibold">Vstupní dokument</span>
+          <div style="display:flex;justify-content:space-between;align-items:center;">
+            <span style="font-size:13px;font-weight:600;">Vstupní dokument</span>
             <span class="section-label">Stage 01</span>
           </div>
-          
-          <div id="drop-zone" class="drop-zone p-8 flex flex-col items-center justify-center gap-3 text-center min-h-[160px]"
+          <div id="drop-zone" class="drop-zone p-8 flex flex-col items-center justify-center gap-3 text-center" style="min-height:160px;"
                onclick="document.getElementById('file-input').click()"
                ondragover="event.preventDefault();this.classList.add('drag-over')"
                ondragleave="this.classList.remove('drag-over')"
                ondrop="handleDrop(event)">
-            <input type="file" id="file-input" style="display:none;" accept="image/*" onchange="handleFiles(this.files)"/>
-            <div class="text-3xl text-zinc-500">📥</div>
-            <p class="text-sm text-zinc-300">Hoď soubor sem nebo <span class="text-blue-400 underline">klikni pro vyhledání</span></p>
+            <input type="file" id="file-input" style="display:none;" accept="image/*,application/pdf" onchange="handleFiles(this.files)"/>
+            <div style="font-size:32px;color:var(--text4);">📥</div>
+            <p style="font-size:13px;color:var(--text2);">Přetáhni soubor nebo <span style="color:var(--blue);text-decoration:underline;cursor:pointer;">klikni pro výběr</span></p>
+            <p style="font-size:11px;color:var(--text4);">JPG, PNG, PDF · Max 10 MB</p>
           </div>
-          
           <div id="file-preview" style="display:none;" class="border border-zinc-800 p-2 rounded-lg">
-            <img id="img-preview" style="width:100%; max-height:180px; object-fit:contain; border-radius:6px;"/>
+            <img id="img-preview" style="width:100%;max-height:180px;object-fit:contain;border-radius:6px;"/>
           </div>
         </div>
-        
+
         <div class="card p-4">
-          <button id="exec-btn" class="btn-primary w-full py-4 flex items-center justify-center gap-2" disabled onclick="executeExtraction()">
-            <span id="btn-idle">Spustit AI extrakci dat z faktury ⚡</span>
+          <button id="exec-btn" class="btn-primary w-full py-3.5 flex items-center justify-center gap-2" disabled onclick="executeExtraction()">
+            <span id="btn-idle" style="display:flex;align-items:center;gap:6px;">
+              <svg width="14" height="14" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="2.5"><polygon points="5 3 19 12 5 21 5 3"/></svg>
+              Spustit AI extrakci ⚡
+            </span>
             <span id="btn-loading" style="display:none;" class="flex items-center gap-2">
-              <svg class="spin h-4 w-4 text-white" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="3"><path d="M21 12a9 9 0 1 1-6.219-8.56"/></svg>
-              Extrahuji data z dokumentu...
+              <svg class="spin h-4 w-4" fill="none" viewBox="0 0 24 24" stroke="currentColor" stroke-width="3"><path d="M21 12a9 9 0 1 1-6.219-8.56"/></svg>
+              Extrahuji data...
             </span>
           </button>
         </div>
-        
+
+        <!-- Export -->
         <div class="card p-5 space-y-3">
-          <div class="flex justify-between items-center"><span class="text-sm font-semibold">Export dat</span><span class="section-label">Stage 03</span></div>
-          <div id="export-actions" style="display:none;" class="w-full">
-            <button onclick="downloadCSV()" class="dl-card w-full p-3 flex justify-between items-center text-sm font-medium text-zinc-200">
-              <span>📊 Exportovat do datové struktury CSV</span>
-              <span class="text-xs text-blue-400 bg-blue-950/50 px-2 py-1 rounded">STÁHNOUT</span>
+          <div style="display:flex;justify-content:space-between;align-items:center;">
+            <span style="font-size:13px;font-weight:600;">Export dat</span>
+            <span class="section-label">Stage 03</span>
+          </div>
+          <div id="export-actions" style="display:none;">
+            <button onclick="downloadCSV()" class="dl-card w-full p-3 flex justify-between items-center" style="font-size:13px;font-weight:500;color:var(--text2);cursor:pointer;">
+              <span>📊 Exportovat CSV</span>
+              <span style="font-size:11px;color:var(--blue);background:rgba(59,130,246,.1);padding:4px 10px;border-radius:6px;">STÁHNOUT</span>
             </button>
           </div>
-          <div id="export-empty" class="text-xs text-zinc-500 text-center py-2">Čekám na zpracování dokumentu...</div>
+          <div id="export-locked" style="display:none;" class="text-center py-3">
+            <p style="font-size:11px;color:var(--text4);">🔒 Export dostupný od Registrovaného plánu</p>
+            <button onclick="openUpgradeModal()" style="margin-top:6px;font-size:11px;color:var(--blue);cursor:pointer;background:none;border:none;">Registrovat / Upgrade →</button>
+          </div>
+          <div id="export-empty" style="font-size:11px;color:var(--text4);text-align:center;padding:8px;">Čekám na zpracování...</div>
         </div>
       </div>
-      
-      <!-- Right Terminal & Terminal Assist -->
-      <div class="space-y-4">
+
+      <!-- Right -->
+      <div style="display:flex;flex-direction:column;gap:16px;">
         <div class="card p-5 space-y-3">
-          <div class="flex justify-between items-center"><span class="text-sm font-semibold">Live Extraction Terminal</span><span class="section-label">Output JSON</span></div>
-          <div class="code-view p-4 min-h-[160px] max-h-[220px] overflow-y-auto">
-            <pre id="json-display" class="text-xs text-zinc-400 leading-relaxed font-mono">// Terminál je prázdný.</pre>
+          <div style="display:flex;justify-content:space-between;align-items:center;">
+            <span style="font-size:13px;font-weight:600;">Live Extraction Terminal</span>
+            <span class="section-label">Output JSON</span>
+          </div>
+          <div class="code-view p-4" style="min-height:160px;max-height:240px;overflow-y:auto;">
+            <pre id="json-display" style="font-size:11px;color:var(--text3);line-height:1.55;white-space:pre-wrap;">// Terminál prázdný.</pre>
           </div>
         </div>
-        
-        <div class="grid grid-cols-2 gap-3">
+
+        <div style="display:grid;grid-template-columns:1fr 1fr;gap:12px;">
           <div class="card p-4 space-y-1">
-            <p class="text-[10px] uppercase font-bold tracking-wider text-zinc-500">Validace DPH / Shody</p>
-            <p id="comp-val" class="text-xs font-semibold text-zinc-300">—</p>
+            <p class="section-label">Validace DPH</p>
+            <p id="comp-val" style="font-size:12px;font-weight:600;color:var(--text2);">—</p>
           </div>
           <div class="card p-4 space-y-1">
-            <p class="text-[10px] uppercase font-bold tracking-wider text-zinc-500">Detekce duplicity</p>
-            <p id="comp-dup" class="text-xs font-semibold text-zinc-300">—</p>
+            <p class="section-label">Detekce duplicity</p>
+            <p id="comp-dup" style="font-size:12px;font-weight:600;color:var(--text2);">—</p>
           </div>
         </div>
-        
-        <div class="card p-5 flex flex-col h-[280px]">
-          <p class="text-xs font-bold uppercase tracking-wider text-zinc-400 mb-2">AI Audit Companion</p>
-          <div id="chat-history" class="flex-1 overflow-y-auto space-y-2 mb-3 pr-1 text-xs">
-            <div class="p-2 rounded bg-blue-950/20 border border-blue-900/30 text-zinc-300">
-              Systém je připraven. Zeptej se mě na cokoliv ohledně položek faktury.
+
+        <!-- AI Chat -->
+        <div class="card p-5 flex flex-col" style="height:280px;">
+          <div style="display:flex;justify-content:space-between;align-items:center;margin-bottom:8px;">
+            <p style="font-size:11px;font-weight:700;text-transform:uppercase;letter-spacing:.08em;color:var(--text4);">AI Audit Companion</p>
+            <span id="chat-plan-badge" style="font-size:10px;color:var(--text4);">Registrovaný+</span>
+          </div>
+          <div id="chat-history" style="flex:1;overflow-y:auto;display:flex;flex-direction:column;gap:8px;margin-bottom:10px;padding-right:2px;font-size:12px;">
+            <div style="padding:8px 12px;border-radius:8px;background:rgba(59,130,246,.06);border:1px solid rgba(59,130,246,.12);color:var(--text3);">
+              Systém připraven. Zeptej se na položky faktury.
             </div>
           </div>
-          <div class="flex gap-2">
-            <input type="text" id="chat-input" class="chat-input text-xs" placeholder="Napiš dotaz k faktuře..." onkeydown="if(event.key==='Enter') sendChatMessage()"/>
-            <button onclick="sendChatMessage()" class="btn-primary px-3 text-xs font-bold">Odeslat</button>
+          <div style="display:flex;gap:8px;">
+            <input type="text" id="chat-input" class="input-field text-xs" placeholder="Napiš dotaz k faktuře..." onkeydown="if(event.key==='Enter') sendChatMessage()" style="font-size:12px;"/>
+            <button onclick="sendChatMessage()" class="btn-primary px-3" style="white-space:nowrap;font-size:12px;">Odeslat</button>
           </div>
         </div>
       </div>
     </div>
+
+    <!-- Legal Disclaimer Footer -->
+    <div style="border-top:1px solid var(--border);padding-top:16px;margin-top:4px;">
+      <p style="font-size:10px;color:var(--text4);text-align:center;line-height:1.6;max-width:700px;margin:0 auto;">
+        ⚠️ <strong style="color:var(--text3);">Disclaimer:</strong> OmniParse AI je asistenční nástroj. Výstupy AI extrakce nejsou právně závazné a musí být ověřeny před použitím v účetnictví, daňových přiznáních nebo jiných právních procesech. Zpracování dat probíhá v souladu s GDPR. Nahráváním dokumentů souhlasíš s <a href="#" style="color:var(--blue);">podmínkami použití</a>. Platby zpracovává Stripe. © 2026 OmniParse AI.
+      </p>
+    </div>
   </main>
 </div>
 
-<!-- ═══ 3. GRADIO PIPELINE JAVASCRIPT BRIDGE ═══ -->
+
+<!-- ─── GRADIO BRIDGE (skrytý) ─── -->
 <script>
+/* STATE */
 let currentBase64 = "";
 let latestExtractedJson = "";
 let csvB64Data = "";
-let authPolling = null;
-let parsePolling = null;
-let chatPolling = null;
+let authPolling = null, parsePolling = null, chatPolling = null, checkoutPolling = null;
+let guestDocsCount = 0, guestFieldsCount = 0;
+let currentAuthTab = "login";
+let currentPlan = "free";
+let currentUser = "";
+let dailyLimit = 3, docsToday = 0;
+
+/* UTILS */
+function showToast(msg, type='info') {
+  const root = document.getElementById("toast-root");
+  const t = document.createElement("div");
+  t.className = `toast card px-4 py-3 rounded-xl flex items-center gap-3 shadow-2xl text-white ${type==='error'?'bg-red-950/80 border-red-800':type==='warn'?'bg-amber-950/80 border-amber-800':'bg-zinc-900/90 border-zinc-700'}`;
+  t.style.cssText="font-size:12px;";
+  t.innerHTML = `<span>${type==='error'?'❌':type==='warn'?'⚠️':'✅'}</span><span>${msg}</span>`;
+  root.appendChild(t);
+  setTimeout(()=>{t.style.opacity='0';setTimeout(()=>t.remove(),300);},4500);
+}
 
-// Lokální paměť statistik pro uživatele na Free Planu (neukládá se do DB)
-let guestDocsCount = 0;
-let guestFieldsCount = 0;
+function setPlanUI(plan) {
+  currentPlan = plan;
+  const badge = document.getElementById("plan-badge");
+  const upgradeBtn = document.getElementById("upgrade-btn");
+  const limInd = document.getElementById("limit-indicator");
+  if(plan==='premium'){
+    badge.className='badge badge-premium'; badge.textContent='⭐ PREMIUM';
+    upgradeBtn.style.display='none';
+    limInd.style.display='none';
+  } else if(plan==='registered'){
+    badge.className='badge badge-registered'; badge.textContent='REGISTERED';
+    upgradeBtn.style.display='flex';
+    limInd.style.setProperty('display','flex','important');
+    dailyLimit=20;
+  } else {
+    badge.className='badge badge-free'; badge.textContent='FREE';
+    upgradeBtn.style.display='flex';
+    limInd.style.setProperty('display','flex','important');
+    dailyLimit=3;
+  }
+  // Export visibility
+  const ea=document.getElementById("export-actions"),
+        el=document.getElementById("export-locked"),
+        ee=document.getElementById("export-empty");
+  if(plan==='free'){ea.style.display='none';el.style.display='block';ee.style.display='none';}
+  else{el.style.display='none';}
+}
 
-function showToast(msg, type='info') {
-    const root = document.getElementById("toast-root");
-    const toast = document.createElement("div");
-    toast.className = `toast card px-4 py-3 rounded-xl flex items-center gap-3 text-xs shadow-2xl text-white ${type === 'error' ? 'bg-red-950/80 border-red-800' : 'bg-zinc-900/90 border-zinc-700'}`;
-    toast.innerHTML = `<span>${type === 'error' ? '❌' : '✅'}</span><span>${msg}</span>`;
-    root.appendChild(toast);
-    setTimeout(() => {
-        toast.style.opacity = '0';
-        setTimeout(() => toast.remove(), 300);
-    }, 4000);
+function updateLimitBar(today, limit) {
+  docsToday = today; dailyLimit = limit;
+  const pct = Math.min((today/limit)*100, 100);
+  document.getElementById("limit-text").textContent = `${today} / ${limit}`;
+  const bar = document.getElementById("limit-bar");
+  bar.style.width = pct + '%';
+  bar.className = 'limit-bar-fill' + (pct>=90?' danger':pct>=70?' warn':'');
 }
 
-function checkLoginState() {
-    const user = sessionStorage.getItem("omniparse_user");
-    if (user) {
-        document.getElementById("auth-screen").style.display = "none";
-        document.getElementById("app-screen").style.display = "block";
-        
-        if (user.toLowerCase() === "guest") {
-            document.getElementById("user-display").className = "text-sm font-medium text-amber-400";
-            document.getElementById("user-display").innerText = "👤 Free Plan (Neregistrován)";
-            document.getElementById("st-docs").innerText = guestDocsCount + " (Free)";
-            document.getElementById("st-fields").innerText = guestFieldsCount + " (Místní)";
-        } else {
-            document.getElementById("user-display").className = "text-sm font-medium text-blue-400";
-            document.getElementById("user-display").innerText = `👤 ${user}`;
-            
-            // Refresh cloudu z DB pro registrované
-            const grUser = document.querySelector("#gr-auth-user textarea");
-            const grPass = document.querySelector("#gr-auth-pass textarea");
-            if (grUser && grPass) {
-                grUser.value = user;
-                grUser.dispatchEvent(new Event("input", { bubbles: true }));
-                grPass.value = "SESSION_REFRESH";
-                grPass.dispatchEvent(new Event("input", { bubbles: true }));
-                document.querySelector("#gr-login-btn").click();
-            }
-            if(authPolling) clearInterval(authPolling);
-            authPolling = setInterval(checkAuthResponse, 150);
-        }
-    } else {
-        document.getElementById("auth-screen").style.display = "flex";
-        document.getElementById("app-screen").style.display = "none";
-    }
+/* AUTH TABS */
+function switchAuthTab(tab) {
+  currentAuthTab = tab;
+  document.getElementById("tab-login").className = tab==='login'?'tab-btn active flex-1 text-center':'tab-btn inactive flex-1 text-center';
+  document.getElementById("tab-register").className = tab==='register'?'tab-btn active flex-1 text-center':'tab-btn inactive flex-1 text-center';
+  document.getElementById("auth-email-row").style.display = tab==='register'?'block':'none';
+  document.getElementById("tos-row").style.display = tab==='register'?'block':'none';
+  document.getElementById("auth-main-btn").textContent = tab==='login'?'Přihlásit se ⚡':'Vytvořit účet ✓';
 }
 
 function bypassAuthAsGuest() {
-    sessionStorage.setItem("omniparse_user", "Guest");
-    showToast("Vstupuješ jako host v bezplatném režimu.");
-    checkLoginState();
+  sessionStorage.setItem("omniparse_user","Guest");
+  sessionStorage.setItem("omniparse_plan","free");
+  showToast("Vstupuješ jako host. Limit: 3 dokumenty/den.");
+  checkLoginState();
 }
 
 function handleAuthAction(action) {
-    const userVal = document.getElementById("auth-username").value.trim();
-    const passVal = document.getElementById("auth-password").value;
-    
-    if(!userVal || !passVal) {
-        showToast("Musíš vyplnit obě pole!", "error");
-        return;
-    }
-    
-    const grUser = document.querySelector("#gr-auth-user textarea");
-    const grPass = document.querySelector("#gr-auth-pass textarea");
-    
-    if(!grUser || !grPass) return;
-    
-    grUser.value = userVal;
-    grUser.dispatchEvent(new Event("input", { bubbles: true }));
-    grPass.value = passVal;
-    grPass.dispatchEvent(new Event("input", { bubbles: true }));
-    
-    if (action === 'login') {
-        document.querySelector("#gr-login-btn").click();
+  const u = document.getElementById("auth-username").value.trim();
+  const p = document.getElementById("auth-password").value;
+  const email = document.getElementById("auth-email").value.trim();
+  if(!u||!p){showToast("Vyplň jméno a heslo!","error");return;}
+
+  if(action==='register'){
+    const tos = document.getElementById("tos-checkbox").checked;
+    if(!tos){showToast("Musíš přijmout podmínky použití!","warn");return;}
+    // Pass tos flag via username prefix trick — we encode as JSON
+    const payload = JSON.stringify({action:"register",email,tos:true});
+    triggerAuth(u, p, payload, 'register');
+  } else {
+    triggerAuth(u, p, "", 'login');
+  }
+}
+
+function triggerAuth(u, p, extra, action) {
+  const grUser = document.querySelector("#gr-auth-user textarea");
+  const grPass = document.querySelector("#gr-auth-pass textarea");
+  if(!grUser||!grPass) return;
+  // Encode extra info into password field for register
+  const passField = action==='register' ? `REGISTER::${p}::${extra}` : p;
+  grUser.value=u; grUser.dispatchEvent(new Event("input",{bubbles:true}));
+  grPass.value=passField; grPass.dispatchEvent(new Event("input",{bubbles:true}));
+  if(action==='login'){
+    document.querySelector("#gr-login-btn").click();
+  } else {
+    document.querySelector("#gr-register-btn").click();
+  }
+  if(authPolling) clearInterval(authPolling);
+  authPolling = setInterval(checkAuthResponse, 150);
+}
+
+function checkLoginState() {
+  const user = sessionStorage.getItem("omniparse_user");
+  if(user){
+    document.getElementById("auth-screen").style.display="none";
+    document.getElementById("app-screen").style.display="block";
+    currentUser=user;
+    if(user.toLowerCase()==="guest"){
+      document.getElementById("user-display").textContent="👤 Guest";
+      setPlanUI("free");
+      updateLimitBar(guestDocsCount, 3);
     } else {
-        document.querySelector("#gr-register-btn").click();
+      document.getElementById("user-display").textContent=`👤 ${user}`;
+      const plan = sessionStorage.getItem("omniparse_plan")||"registered";
+      setPlanUI(plan);
+      // Refresh stats from DB
+      const grUser=document.querySelector("#gr-auth-user textarea");
+      const grPass=document.querySelector("#gr-auth-pass textarea");
+      if(grUser&&grPass){
+        grUser.value=user; grUser.dispatchEvent(new Event("input",{bubbles:true}));
+        grPass.value="SESSION_REFRESH"; grPass.dispatchEvent(new Event("input",{bubbles:true}));
+        document.querySelector("#gr-login-btn").click();
+        if(authPolling) clearInterval(authPolling);
+        authPolling=setInterval(checkAuthResponse,150);
+      }
     }
-    
-    if(authPolling) clearInterval(authPolling);
-    authPolling = setInterval(checkAuthResponse, 150);
+  } else {
+    document.getElementById("auth-screen").style.display="flex";
+    document.getElementById("app-screen").style.display="none";
+  }
 }
 
 function checkAuthResponse() {
-    const respEl = document.querySelector("#gr-auth-response textarea");
-    if (!respEl) return;
-    const val = respEl.value;
-    if (val && val.trim() !== "") {
-        clearInterval(authPolling);
-        authPolling = null;
-        respEl.value = "";
-        respEl.dispatchEvent(new Event("input", { bubbles: true }));
-        try {
-            const data = JSON.parse(val);
-            if (data.status === "SUCCESS") {
-                if (data.username) {
-                    sessionStorage.setItem("omniparse_user", data.username);
-                    showToast("Přihlášení úspěšné!");
-                    document.getElementById("auth-screen").style.display = "none";
-                    document.getElementById("app-screen").style.display = "block";
-                    document.getElementById("user-display").className = "text-sm font-medium text-blue-400";
-                    document.getElementById("user-display").innerText = `👤 ${data.username}`;
-                    if (data.stats) {
-                        document.getElementById("st-docs").innerText = data.stats.docs_parsed;
-                        document.getElementById("st-fields").innerText = data.stats.fields_extracted;
-                    }
-                } else {
-                    showToast(data.message);
-                }
-            } else {
-                showToast(data.message, "error");
-            }
-        } catch(e) {
-            console.error("Auth json error", e);
+  const el = document.querySelector("#gr-auth-response textarea");
+  if(!el) return;
+  const val = el.value;
+  if(val&&val.trim()!==""){
+    clearInterval(authPolling); authPolling=null;
+    el.value=""; el.dispatchEvent(new Event("input",{bubbles:true}));
+    try {
+      const d = JSON.parse(val);
+      if(d.status==="SUCCESS"){
+        if(d.username){
+          sessionStorage.setItem("omniparse_user",d.username);
+          sessionStorage.setItem("omniparse_plan",d.plan||"registered");
+          currentUser=d.username;
+          document.getElementById("auth-screen").style.display="none";
+          document.getElementById("app-screen").style.display="block";
+          document.getElementById("user-display").textContent=`👤 ${d.username}`;
+          setPlanUI(d.plan||"registered");
+          if(d.stats){
+            document.getElementById("st-docs").textContent=d.stats.docs_parsed;
+            document.getElementById("st-fields").textContent=d.stats.fields_extracted;
+          }
+          if(d.limits) updateLimitBar(0, d.limits.docs_per_day);
+          showToast("Přihlášení úspěšné!");
+        } else {
+          showToast(d.message||"Hotovo!");
         }
-    }
+      } else {
+        showToast(d.message||"Chyba","error");
+      }
+    } catch(e){console.error("Auth parse error",e);}
+  }
 }
 
-function handleLogout() {
-    sessionStorage.clear();
-    location.reload();
+function handleLogout(){
+  sessionStorage.clear();
+  location.reload();
 }
 
-function handleFiles(files) {
-    if (!files.length) return;
-    const file = files[0];
-    const reader = new FileReader();
-    reader.onload = function(e) {
-        currentBase64 = e.target.result;
-        document.getElementById("img-preview").src = currentBase64;
-        document.getElementById("file-preview").style.display = "block";
-        document.getElementById("exec-btn").disabled = false;
-        showToast(`Doklad načten do cache.`);
-    };
-    reader.readAsDataURL(file);
+/* UPGRADE MODAL */
+function openUpgradeModal(){document.getElementById("upgrade-modal").style.display="flex";}
+function closeUpgradeModal(){document.getElementById("upgrade-modal").style.display="none";}
+
+function startPremiumCheckout(){
+  if(!currentUser||currentUser==="Guest"){
+    showToast("Pro platbu se musíš přihlásit jako registrovaný uživatel.","warn");
+    return;
+  }
+  document.getElementById("stripe-btn").textContent="⏳ Připravuji platbu...";
+  document.getElementById("stripe-btn").disabled=true;
+  const grUser=document.querySelector("#gr-auth-user textarea");
+  grUser.value=currentUser; grUser.dispatchEvent(new Event("input",{bubbles:true}));
+  document.querySelector("#gr-checkout-btn").click();
+  if(checkoutPolling) clearInterval(checkoutPolling);
+  checkoutPolling=setInterval(checkCheckoutResponse,200);
 }
 
-function handleDrop(e) {
-    e.preventDefault();
-    handleFiles(e.dataTransfer.files);
+function checkCheckoutResponse(){
+  const el=document.querySelector("#gr-checkout-out textarea");
+  if(!el) return;
+  const val=el.value;
+  if(val&&val.trim()!==""){
+    clearInterval(checkoutPolling); checkoutPolling=null;
+    el.value=""; el.dispatchEvent(new Event("input",{bubbles:true}));
+    document.getElementById("stripe-btn").textContent="Přejít na platbu (Stripe) →";
+    document.getElementById("stripe-btn").disabled=false;
+    try{
+      const d=JSON.parse(val);
+      if(d.status==="SUCCESS"&&d.url){
+        window.open(d.url,"_blank");
+        showToast("Otevírám Stripe platební stránku...");
+      } else {
+        showToast(d.message||"Chyba při přípravě platby.","error");
+      }
+    } catch(e){showToast("Chyba odpovědi.","error");}
+  }
 }
 
-function executeExtraction() {
-    if (!currentBase64) return;
-    
-    document.getElementById("btn-idle").style.display = "none";
-    document.getElementById("btn-loading").style.display = "flex";
-    document.getElementById("status-text").innerText = "Těžím data...";
-    
-    const user = sessionStorage.getItem("omniparse_user") || "Guest";
-    const grImg = document.querySelector("#gr-image-input textarea");
-    const grUser = document.querySelector("#gr-current-user textarea");
-    
-    grImg.value = currentBase64;
-    grImg.dispatchEvent(new Event("input", { bubbles: true }));
-    grUser.value = user;
-    grUser.dispatchEvent(new Event("input", { bubbles: true }));
-    
-    document.querySelector("#gr-parse-btn").click();
-    
-    if(parsePolling) clearInterval(parsePolling);
-    parsePolling = setInterval(checkParseResponse, 200);
+/* FILE HANDLING */
+function handleDrop(e){e.preventDefault();handleFiles(e.dataTransfer.files);}
+function handleFiles(files){
+  if(!files.length) return;
+  const file=files[0];
+  const reader=new FileReader();
+  reader.onload=function(e){
+    currentBase64=e.target.result;
+    document.getElementById("img-preview").src=currentBase64;
+    document.getElementById("file-preview").style.display="block";
+    document.getElementById("exec-btn").disabled=false;
+    showToast(`Soubor načten: ${file.name}`);
+  };
+  reader.readAsDataURL(file);
 }
 
-function checkParseResponse() {
-    const outEl = document.querySelector("#gr-json-output textarea");
-    if (!outEl) return;
-    const val = outEl.value;
-    if (val && val.trim() !== "") {
-        clearInterval(parsePolling);
-        parsePolling = null;
-        outEl.value = "";
-        outEl.dispatchEvent(new Event("input", { bubbles: true }));
-        
-        document.getElementById("btn-idle").style.display = "flex";
-        document.getElementById("btn-loading").style.display = "none";
-        document.getElementById("status-text").innerText = "System Idle";
-        
-        try {
-            const res = JSON.parse(val);
-            if (res.parser_status === "SUCCESS") {
-                latestExtractedJson = JSON.stringify(res, null, 2);
-                document.getElementById("json-display").innerText = latestExtractedJson;
-                document.getElementById("st-time").innerText = `${res.parse_time_seconds}s`;
-                document.getElementById("st-conf").innerText = `${Math.round(res.security_and_compliance.confidence_score * 100)}%`;
-                document.getElementById("comp-val").innerText = res.security_and_compliance.cross_field_validation;
-                
-                // Zobrazení duplicity
-                if (sessionStorage.getItem("omniparse_user").toLowerCase() === "guest") {
-                    document.getElementById("comp-dup").innerText = "🔒 Vyžaduje registraci";
-                } else {
-                    document.getElementById("comp-dup").innerText = res.security_and_compliance.duplicate_detected ? "⚠️ POTENCIÁLNÍ DUPLICITA" : "✅ OK (Unikátní)";
-                }
-                
-                // Počítání a update statistik na panelu
-                if (sessionStorage.getItem("omniparse_user").toLowerCase() === "guest") {
-                    guestDocsCount++;
-                    guestFieldsCount += Object.keys(res.extracted_data).length;
-                    document.getElementById("st-docs").innerText = guestDocsCount + " (Free)";
-                    document.getElementById("st-fields").innerText = guestFieldsCount + " (Místní)";
-                } else {
-                    if (res.user_stats) {
-                        document.getElementById("st-docs").innerText = res.user_stats.docs_parsed;
-                        document.getElementById("st-fields").innerText = res.user_stats.fields_extracted;
-                    }
-                }
-
-                if (res._csv_b64) {
-                    csvB64Data = res._csv_b64;
-                    document.getElementById("export-actions").style.display = "block";
-                    document.getElementById("export-empty").style.display = "none";
-                }
-                showToast("Data úspěšně vytěžena!");
-            } else {
-                showToast("Chyba: " + res.error_log, "error");
-            }
-        } catch(e) {
-            showToast("Nelze dekódovat výstup.", "error");
+/* EXTRACTION */
+function executeExtraction(){
+  if(!currentBase64) return;
+
+  // Guest limit check
+  if(currentUser.toLowerCase()==="guest" && guestDocsCount>=3){
+    showToast("Denní limit Free plánu vyčerpán. Zaregistruj se pro více!","warn");
+    openUpgradeModal();
+    return;
+  }
+
+  document.getElementById("btn-idle").style.display="none";
+  document.getElementById("btn-loading").style.display="flex";
+  document.getElementById("status-text").textContent="Extrahuji data...";
+  document.getElementById("status-dot").style.background="#f59e0b";
+
+  const grImg=document.querySelector("#gr-image-input textarea");
+  const grUser=document.querySelector("#gr-current-user textarea");
+  grImg.value=currentBase64; grImg.dispatchEvent(new Event("input",{bubbles:true}));
+  grUser.value=currentUser; grUser.dispatchEvent(new Event("input",{bubbles:true}));
+  document.querySelector("#gr-parse-btn").click();
+  if(parsePolling) clearInterval(parsePolling);
+  parsePolling=setInterval(checkParseResponse,200);
+}
+
+function checkParseResponse(){
+  const el=document.querySelector("#gr-json-output textarea");
+  if(!el) return;
+  const val=el.value;
+  if(val&&val.trim()!==""){
+    clearInterval(parsePolling); parsePolling=null;
+    el.value=""; el.dispatchEvent(new Event("input",{bubbles:true}));
+    document.getElementById("btn-idle").style.display="flex";
+    document.getElementById("btn-loading").style.display="none";
+    document.getElementById("status-text").textContent="Ready";
+    document.getElementById("status-dot").style.background="#34d399";
+    try{
+      const res=JSON.parse(val);
+      if(res.parser_status==="LIMIT_REACHED"){
+        showToast(res.error_log,"warn");
+        if(res.upgrade_required) openUpgradeModal();
+        return;
+      }
+      if(res.parser_status==="SUCCESS"){
+        latestExtractedJson=JSON.stringify(res,null,2);
+        document.getElementById("json-display").textContent=latestExtractedJson;
+        document.getElementById("st-time").textContent=`${res.parse_time_seconds}s`;
+        document.getElementById("st-conf").textContent=`${Math.round(res.security_and_compliance.confidence_score*100)}%`;
+        document.getElementById("comp-val").textContent=res.security_and_compliance.cross_field_validation;
+
+        if(currentUser.toLowerCase()==="guest"){
+          document.getElementById("comp-dup").textContent="🔒 Vyžaduje registraci";
+          guestDocsCount++;
+          guestFieldsCount+=Object.keys(res.extracted_data||{}).length;
+          document.getElementById("st-docs").textContent=guestDocsCount+" (Free)";
+          document.getElementById("st-fields").textContent=guestFieldsCount+" (Lokální)";
+          updateLimitBar(guestDocsCount,3);
+        } else {
+          document.getElementById("comp-dup").textContent=res.security_and_compliance.duplicate_detected?"⚠️ DUPLICITA DETEKOVÁNA":"✅ Unikátní";
+          if(res.user_stats){
+            document.getElementById("st-docs").textContent=res.user_stats.docs_parsed;
+            document.getElementById("st-fields").textContent=res.user_stats.fields_extracted;
+          }
+          if(res.docs_today!==undefined) updateLimitBar(res.docs_today, res.daily_limit);
         }
-    }
+
+        // Export
+        const ee=document.getElementById("export-empty");
+        const ea=document.getElementById("export-actions");
+        if(res._csv_b64){
+          csvB64Data=res._csv_b64;
+          ea.style.display="block";
+          ee.style.display="none";
+        } else {
+          ea.style.display="none";
+          ee.style.display="block";
+        }
+
+        showToast("Data úspěšně vytěžena!");
+      } else {
+        showToast("Chyba: "+(res.error_log||"Neznámá chyba"),"error");
+      }
+    } catch(e){showToast("Dekódovací chyba výstupu.","error");}
+  }
 }
 
-function downloadCSV() {
-    if (!csvB64Data) return;
-    const binStr = atob(csvB64Data);
-    const bytes = new Uint8Array(binStr.length);
-    for (let i = 0; i < binStr.length; i++) {
-        bytes[i] = binStr.charCodeAt(i);
-    }
-    const blob = new Blob([bytes], { type: "text/csv" });
-    const url = URL.createObjectURL(blob);
-    const a = document.createElement("a");
-    a.href = url;
-    a.download = "omniparse_export.csv";
-    document.body.appendChild(a);
-    a.click();
-    document.body.removeChild(a);
+/* CSV DOWNLOAD */
+function downloadCSV(){
+  if(!csvB64Data) return;
+  const bytes=new Uint8Array(atob(csvB64Data).split("").map(c=>c.charCodeAt(0)));
+  const blob=new Blob([bytes],{type:"text/csv"});
+  const a=Object.assign(document.createElement("a"),{href:URL.createObjectURL(blob),download:"omniparse_export.csv"});
+  document.body.appendChild(a); a.click(); document.body.removeChild(a);
 }
 
-function sendChatMessage() {
-    const inputEl = document.getElementById("chat-input");
-    const msg = inputEl.value.trim();
-    if (!msg) return;
-    
-    inputEl.value = "";
-    const hist = document.getElementById("chat-history");
-    hist.innerHTML += `<div class="p-2 rounded bg-zinc-800 text-zinc-100 text-right font-medium">Vy: ${msg}</div>`;
-    hist.scrollTop = hist.scrollHeight;
-    
-    const grMsg = document.querySelector("#gr-chat-msg textarea");
-    const grJson = document.querySelector("#gr-chat-json textarea");
-    
-    grMsg.value = msg;
-    grMsg.dispatchEvent(new Event("input", { bubbles: true }));
-    grJson.value = latestExtractedJson;
-    grJson.dispatchEvent(new Event("input", { bubbles: true }));
-    
-    document.querySelector("#gr-chat-btn").click();
-    
-    if (chatPolling) clearInterval(chatPolling);
-    chatPolling = setInterval(checkChatResponse, 150);
+/* CHAT */
+function sendChatMessage(){
+  const input=document.getElementById("chat-input");
+  const msg=input.value.trim();
+  if(!msg) return;
+  input.value="";
+  const hist=document.getElementById("chat-history");
+  hist.innerHTML+=`<div style="padding:8px 12px;border-radius:8px;background:var(--surface3);color:var(--text);text-align:right;font-size:12px;">${msg}</div>`;
+  hist.scrollTop=hist.scrollHeight;
+
+  if(currentUser.toLowerCase()==="guest"){
+    hist.innerHTML+=`<div style="padding:8px 12px;border-radius:8px;background:rgba(59,130,246,.06);border:1px solid rgba(59,130,246,.12);color:var(--text3);font-size:12px;">🔒 Chat vyžaduje registraci.</div>`;
+    hist.scrollTop=hist.scrollHeight;
+    return;
+  }
+
+  const grMsg=document.querySelector("#gr-chat-msg textarea");
+  const grJson=document.querySelector("#gr-chat-json textarea");
+  const grUser=document.querySelector("#gr-chat-user textarea");
+  grMsg.value=msg; grMsg.dispatchEvent(new Event("input",{bubbles:true}));
+  grJson.value=latestExtractedJson; grJson.dispatchEvent(new Event("input",{bubbles:true}));
+  grUser.value=currentUser; grUser.dispatchEvent(new Event("input",{bubbles:true}));
+  document.querySelector("#gr-chat-btn").click();
+  if(chatPolling) clearInterval(chatPolling);
+  chatPolling=setInterval(checkChatResponse,150);
 }
 
-function checkChatResponse() {
-    const outEl = document.querySelector("#gr-chat-out textarea");
-    if (!outEl) return;
-    const val = outEl.value;
-    if (val && val.trim() !== "") {
-        clearInterval(chatPolling);
-        chatPolling = null;
-        outEl.value = "";
-        outEl.dispatchEvent(new Event("input", { bubbles: true }));
-        
-        const hist = document.getElementById("chat-history");
-        hist.innerHTML += `<div class="p-2 rounded bg-blue-900/10 border border-blue-900/20 text-zinc-300">AI: ${val}</div>`;
-        hist.scrollTop = hist.scrollHeight;
-    }
+function checkChatResponse(){
+  const el=document.querySelector("#gr-chat-out textarea");
+  if(!el) return;
+  const val=el.value;
+  if(val&&val.trim()!==""){
+    clearInterval(chatPolling); chatPolling=null;
+    el.value=""; el.dispatchEvent(new Event("input",{bubbles:true}));
+    const hist=document.getElementById("chat-history");
+    hist.innerHTML+=`<div style="padding:8px 12px;border-radius:8px;background:rgba(59,130,246,.06);border:1px solid rgba(59,130,246,.12);color:var(--text2);font-size:12px;">🤖 ${val}</div>`;
+    hist.scrollTop=hist.scrollHeight;
+  }
 }
 
-setTimeout(checkLoginState, 500);
+/* REGISTER ACTION — backend expects encoded payload in password field */
+/* Override gr_register to decode and call db_register with tos flag */
+
+setTimeout(checkLoginState, 600);
 </script>
 </body>
 </html>
 """
 
-# ─── GRADIO APPLICATION CONTAINER ───────────────────────────────────────────
-with gr.Blocks(css=CUSTOM_CSS, title="OmniParse AI Enterprise Terminal") as demo:
+# ─── GRADIO APP ──────────────────────────────────────────────────────────────
+def gr_register_with_tos(username, password_encoded):
+    """Decodes REGISTER::<pass>::<json_extra> or plain password for register."""
+    if password_encoded.startswith("REGISTER::"):
+        parts = password_encoded.split("::", 2)
+        real_pass = parts[1] if len(parts)>1 else ""
+        try:
+            extra = json.loads(parts[2]) if len(parts)>2 else {}
+        except:
+            extra = {}
+        email = extra.get("email","")
+        tos = extra.get("tos", False)
+        return db_register(username, real_pass, email, tos)
+    return db_register(username, password_encoded, "", True)
+
+with gr.Blocks(css=CUSTOM_CSS, title="OmniParse AI Enterprise") as demo:
     gr.HTML(HTML_UI)
 
-    # Skryté ovládací prvky (Bridge)
     with gr.Row(elem_id="hidden-controls", visible=False):
         with gr.Column():
-            gr_image_input = gr.Textbox(label="image_b64", elem_id="gr-image-input", visible=False)
-            gr_current_user = gr.Textbox(label="current_user", elem_id="gr-current-user", visible=False)
-            gr_parse_btn = gr.Button("parse", elem_id="gr-parse-btn", visible=False)
-            gr_json_output = gr.Textbox(label="json_out", elem_id="gr-json-output", visible=False)
-
-            gr_chat_msg = gr.Textbox(label="chat_msg", elem_id="gr-chat-msg", visible=False)
-            gr_chat_json = gr.Textbox(label="chat_json", elem_id="gr-chat-json", visible=False)
-            gr_chat_btn = gr.Button("chat", elem_id="gr-chat-btn", visible=False)
-            gr_chat_out = gr.Textbox(label="chat_out", elem_id="gr-chat-out", visible=False)
-            
-            gr_auth_user = gr.Textbox(label="auth_user", elem_id="gr-auth-user", visible=False)
-            gr_auth_pass = gr.Textbox(label="auth_pass", elem_id="gr-auth-pass", visible=False)
-            gr_login_btn = gr.Button("login", elem_id="gr-login-btn", visible=False)
-            gr_register_btn = gr.Button("register", elem_id="gr-register-btn", visible=False)
-            gr_auth_response = gr.Textbox(label="auth_response", elem_id="gr-auth-response", visible=False)
-
-    gr_parse_btn.click(
-        fn=gr_parse,
-        inputs=[gr_image_input, gr_current_user],
-        outputs=[gr_json_output],
-    )
-
-    gr_chat_btn.click(
-        fn=gr_chat,
-        inputs=[gr_chat_msg, gr_chat_json],
-        outputs=[gr_chat_out],
-    )
-    
-    gr_login_btn.click(
-        fn=db_login,
-        inputs=[gr_auth_user, gr_auth_pass],
-        outputs=[gr_auth_response]
-    )
-    
-    gr_register_btn.click(
-        fn=db_register,
-        inputs=[gr_auth_user, gr_auth_pass],
-        outputs=[gr_auth_response]
-    )
+            gr_image_input  = gr.Textbox(elem_id="gr-image-input",  visible=False)
+            gr_current_user = gr.Textbox(elem_id="gr-current-user", visible=False)
+            gr_parse_btn    = gr.Button("parse", elem_id="gr-parse-btn", visible=False)
+            gr_json_output  = gr.Textbox(elem_id="gr-json-output",  visible=False)
+
+            gr_chat_msg  = gr.Textbox(elem_id="gr-chat-msg",  visible=False)
+            gr_chat_json = gr.Textbox(elem_id="gr-chat-json", visible=False)
+            gr_chat_user = gr.Textbox(elem_id="gr-chat-user", visible=False)
+            gr_chat_btn  = gr.Button("chat", elem_id="gr-chat-btn", visible=False)
+            gr_chat_out  = gr.Textbox(elem_id="gr-chat-out",  visible=False)
+
+            gr_auth_user     = gr.Textbox(elem_id="gr-auth-user",     visible=False)
+            gr_auth_pass     = gr.Textbox(elem_id="gr-auth-pass",     visible=False)
+            gr_login_btn     = gr.Button("login",    elem_id="gr-login-btn",    visible=False)
+            gr_register_btn  = gr.Button("register", elem_id="gr-register-btn", visible=False)
+            gr_auth_response = gr.Textbox(elem_id="gr-auth-response", visible=False)
+
+            gr_checkout_btn = gr.Button("checkout", elem_id="gr-checkout-btn", visible=False)
+            gr_checkout_out = gr.Textbox(elem_id="gr-checkout-out", visible=False)
+
+    gr_parse_btn.click(fn=gr_parse, inputs=[gr_image_input, gr_current_user], outputs=[gr_json_output])
+    gr_chat_btn.click(fn=gr_chat,   inputs=[gr_chat_msg, gr_chat_json, gr_chat_user], outputs=[gr_chat_out])
+    gr_login_btn.click(fn=db_login, inputs=[gr_auth_user, gr_auth_pass], outputs=[gr_auth_response])
+    gr_register_btn.click(fn=gr_register_with_tos, inputs=[gr_auth_user, gr_auth_pass], outputs=[gr_auth_response])
+    gr_checkout_btn.click(fn=gr_checkout, inputs=[gr_auth_user], outputs=[gr_checkout_out])
 
 if __name__ == "__main__":
     demo.launch()