Update app.py

app.py

@@ -21,7 +21,7 @@ from supabase import create_client, Client
 from groq import Groq
 
 # ==========================================
-# 1. KONFIGURACE A BEZPEČNOSTNÍ HLAVIČKY
+# 1. KONFIGURACE A BEZPEČNOST
 # ==========================================
 logging.basicConfig(level=logging.INFO)
 logger = logging.getLogger(__name__)
@@ -36,12 +36,13 @@ STRIPE_PRICE_BASIC = os.getenv("STRIPE_PRICE_BASIC", "price_basic")
 STRIPE_PRICE_PRO = os.getenv("STRIPE_PRICE_PRO", "price_pro")
 STRIPE_PRICE_ENTERPRISE = os.getenv("STRIPE_PRICE_ENTERPRISE", "price_ent")
 
+# Bezpečná inicializace (degradace pokud chybí API klíče)
 stripe.api_key = STRIPE_SECRET_KEY
-supabase: Client = create_client(SUPABASE_URL, SUPABASE_KEY) if SUPABASE_URL else None
+supabase: Client = create_client(SUPABASE_URL, SUPABASE_KEY) if SUPABASE_URL and SUPABASE_KEY else None
 groq_client = Groq(api_key=GROQ_API_KEY) if GROQ_API_KEY else None
 
 # ==========================================
-# 2. RATE LIMITING A BEZPEČNOST
+# 2. RATE LIMITING A VALIDACE
 # ==========================================
 class RateLimiter:
     def __init__(self):
@@ -76,7 +77,7 @@ def validate_password_strength(password: str) -> bool:
     return True
 
 # ==========================================
-# 3. AUTENTIZACE A SESSIONS
+# 3. AUTENTIZACE
 # ==========================================
 def hash_password(password: str) -> str:
     return bcrypt.hashpw(password.encode('utf-8'), bcrypt.gensalt(rounds=12)).decode('utf-8')
@@ -101,11 +102,11 @@ def get_user_from_session(token: str):
     return user_res.data[0] if user_res.data else None
 
 # ==========================================
-# 4. AI PIPELINE (OCR + LLM EXTRAKCE)
+# 4. AI PIPELINE
 # ==========================================
 def ocr_tesseract(image: Image.Image) -> str:
     try: return pytesseract.image_to_string(image, lang='eng')
-    except Exception as e: return ""
+    except: return ""
 
 def extract_with_groq(text: str) -> dict:
     if not groq_client: return {}
@@ -156,12 +157,25 @@ def process_invoice_file(file_path: str, user_id: int) -> dict:
     except Exception as e: return {"filename": os.path.basename(file_path), "status": "error", "error": str(e)}
 
 # ==========================================
-# 5. GRADIO UI A BACKEND FUNKCE
+# 5. GRADIO BACKEND FUNKCE
 # ==========================================
-with open("styles.css", "r", encoding="utf-8") as f: CUSTOM_CSS = f.read()
+CUSTOM_CSS = """
+:root { --bg-primary: #09090b; --bg-secondary: #18181b; --bg-tertiary: #27272a; --border: #3f3f46; --text-primary: #f4f4f5; --text-secondary: #a1a1aa; --accent: #10b981; --accent-hover: #059669; --danger: #ef4444; }
+* { box-sizing: border-box; font-family: 'Inter', sans-serif; }
+body { background-color: var(--bg-primary) !important; color: var(--text-primary) !important; }
+.gradio-container { max-width: 100% !important; padding: 0 !important; background: var(--bg-primary) !important; }
+#header { padding: 20px 40px; border-bottom: 1px solid var(--border); display: flex; justify-content: space-between; align-items: center; width: 100%; }
+#hero { padding: 80px 40px; text-align: center; }
+#hero h1 { font-size: 48px; margin-bottom: 16px; color: var(--text-primary); }
+#hero p { font-size: 18px; color: var(--text-secondary); max-width: 600px; margin: 0 auto 32px auto; }
+.main-btn { background: var(--accent) !important; color: white !important; border: none !important; padding: 12px 24px !important; border-radius: 6px !important; font-weight: 600 !important; cursor: pointer !important; transition: 0.2s !important; font-size: 16px !important; }
+.main-btn:hover { background: var(--accent-hover) !important; }
+.nav-btn { background: var(--bg-secondary) !important; color: var(--text-primary) !important; border: 1px solid var(--border) !important; text-align: left !important; margin-bottom: 8px !important; }
+.card { background-color: var(--bg-secondary); border: 1px solid var(--border); border-radius: 8px; padding: 24px; margin-bottom: 16px; text-align: center; }
+footer { display: none !important; }
+"""
 
-ICON_BOLT = '<svg class="icon" viewBox="0 0 24 24"><path d="M11 21h-1l1-7H7.5c-.58 0-.57-.32-.38-.66.19-.34.05-.08.07-.12C8.48 10.94 10.42 7.54 13 3h1l-1 7h3.5c.49 0 .56.33.47.51l-.07.15C12.96 17.55 11 21 11 21z"/></svg>'
-ICON_UPLOAD = '<svg class="icon" viewBox="0 0 24 24"><path d="M9 16h6v-6h4l-7-7-7 7h4zm-4 2h14v2H5z"/></svg>'
+ICON_BOLT = '<svg style="width:24px;height:24px;display:inline-block;vertical-align:middle;margin-right:8px;" viewBox="0 0 24 24" fill="currentColor"><path d="M11 21h-1l1-7H7.5c-.58 0-.57-.32-.38-.66.19-.34.05-.08.07-.12C8.48 10.94 10.42 7.54 13 3h1l-1 7h3.5c.49 0 .56.33.47.51l-.07.15C12.96 17.55 11 21 11 21z"/></svg>'
 
 def get_user_invoices(user_dict):
     if not user_dict or not supabase: return pd.DataFrame()
@@ -169,7 +183,6 @@ def get_user_invoices(user_dict):
     return pd.DataFrame(res.data)
 
 def export_invoices_csv(user_dict):
-    """Vygeneruje CSV soubor pro stažení."""
     df = get_user_invoices(user_dict)
     if df.empty: return None
     temp = tempfile.NamedTemporaryFile(delete=False, suffix=".csv")
@@ -177,7 +190,6 @@ def export_invoices_csv(user_dict):
     return temp.name
 
 def check_stripe_return(request: gr.Request):
-    """Polling pro Stripe po návratu z checkoutu."""
     if not request or 'checkout' not in request.query_params: return ""
     if request.query_params.get('checkout') == 'success':
         session_id = request.query_params.get('session_id')
@@ -195,6 +207,7 @@ def check_stripe_return(request: gr.Request):
 def handle_login(email, password, request: gr.Request):
     ip = request.client.host if request else "127.0.0.1"
     if rate_limiter.is_rate_limited(f"login_{ip}", 5, 300): return None, "🚨 Příliš mnoho pokusů. Zkuste to za 5 minut."
+    if not supabase: return None, "DB Error"
     res = supabase.table("users").select("*").eq("email", email).execute()
     if not res.data: return None, "Neplatné přihlašovací údaje."
     user = res.data[0]
@@ -206,6 +219,7 @@ def handle_signup(name, email, password, request: gr.Request):
     if rate_limiter.is_rate_limited(f"signup_{ip}", 3, 3600): return None, "Příliš mnoho registrací z této IP."
     if not validate_password_strength(password): return None, "Heslo musí mít min 12 znaků, 1 velké písmeno, 1 číslo a 1 speciální znak."
     if check_password_leaked(password): return None, "Toto heslo bylo nalezen v databázi uniklých hesel."
+    if not supabase: return None, "DB Error"
     exists = supabase.table("users").select("id").eq("email", email).execute()
     if exists.data: return None, "E-mail je již registrován."
     hashed = hash_password(password)
@@ -242,22 +256,18 @@ def create_stripe_checkout(plan: str, user_dict):
 with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", neutral_hue="zinc")) as app:
     user_state = gr.State(None)
     stripe_status = gr.Markdown("", visible=False)
-    
-    # Skrytý trigger pro Stripe callback
     app.load(fn=check_stripe_return, outputs=stripe_status)
     
     # VIEW 1: LANDING
     with gr.Group(visible=True) as landing_view:
-        gr.HTML(f"""
-        <div id="header"><div>{ICON_BOLT} OmniParse AI</div><button class="btn-primary" onclick="document.getElementById('auth-trigger').click();">Log In</button></div>
-        <div style="padding: 80px 40px; text-align: center;">
-            <h1 style="font-size: 48px; margin-bottom: 16px;">Invoice processing in <span style="color: #10b981;">seconds</span>, not hours.</h1>
-            <p style="font-size: 18px; color: #a1a1aa; max-width: 600px; margin: 0 auto 32px auto;">AI extracts vendor, dates, amounts and line items from any PDF or image. Export to CSV, JSON or Excel. Connect via API.</p>
-            <button class="btn-primary" style="font-size: 18px; padding: 15px 30px;" onclick="document.getElementById('signup-trigger').click();">Start Free — 20 invoices</button>
-        </div>""")
-        auth_trigger = gr.Button("Auth", elem_id="auth-trigger", visible=False)
-        signup_trigger = gr.Button("Signup", elem_id="signup-trigger", visible=False)
-        
+        with gr.Row(elem_id="header"):
+            gr.HTML(f"<div style='font-weight:bold;font-size:20px;'>{ICON_BOLT} OmniParse AI</div>")
+            auth_trigger = gr.Button("Log In", elem_classes="main-btn", size="sm")
+        with gr.Column(elem_id="hero"):
+            gr.HTML("<h1>Invoice processing in <span style='color: #10b981;'>seconds</span>, not hours.</h1>")
+            gr.HTML("<p>AI extracts vendor, dates, amounts and line items from any PDF or image. Export to CSV, JSON or Excel. Connect via API.</p>")
+            signup_trigger = gr.Button("Start Free — 20 invoices", elem_classes="main-btn", size="lg")
+            
     # VIEW 2: AUTH
     with gr.Group(visible=False) as auth_view:
         with gr.Tabs():
@@ -272,17 +282,18 @@ with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", ne
                 signup_pass = gr.Textbox(label="Password (Min 12 chars, 1 upper, 1 number, 1 symbol)", type="password")
                 signup_btn = gr.Button("Create Account", variant="primary")
                 signup_msg = gr.Markdown()
-            back_btn = gr.Button("Back to Landing")
+            back_btn = gr.Button("Back to Landing", variant="stop")
 
     # VIEW 3: DASHBOARD
     with gr.Group(visible=False) as dashboard_view:
-        gr.HTML(f"<div id='header'><div>{ICON_BOLT} OmniParse Dashboard</div></div>")
+        with gr.Row(elem_id="header"):
+            gr.HTML(f"<div style='font-weight:bold;font-size:20px;'>{ICON_BOLT} Dashboard</div>")
+            nav_logout = gr.Button("Log Out", variant="stop", size="sm")
         with gr.Row():
             with gr.Column(scale=1):
-                nav_upload = gr.Button(f"{ICON_UPLOAD} Upload")
-                nav_invoices = gr.Button("My Invoices")
-                nav_upgrade = gr.Button("Upgrade")
-                nav_logout = gr.Button("Log Out", variant="stop")
+                nav_upload = gr.Button("Upload", elem_classes="nav-btn")
+                nav_invoices = gr.Button("My Invoices", elem_classes="nav-btn")
+                nav_upgrade = gr.Button("Upgrade", elem_classes="nav-btn")
             with gr.Column(scale=4):
                 with gr.Group(visible=True) as dash_upload:
                     upload_component = gr.File(file_count="multiple", file_types=[".pdf", ".png", ".jpg"])
@@ -295,14 +306,15 @@ with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", ne
                     csv_file = gr.File(label="Stáhnout CSV", visible=False)
                     
                 with gr.Group(visible=False) as dash_upgrade:
-                    gr.HTML("<h2>Upgrade Plan</h2>")
+                    gr.HTML("<h2 style='text-align:center;'>Upgrade Plan</h2>")
                     with gr.Row():
-                        gr.HTML("<div class='card'><h3>Basic</h3><p>$29/mo</p></div>")
-                        gr.HTML("<div class='card'><h3>Pro</h3><p>$129/mo</p></div>")
-                        gr.HTML("<div class='card'><h3>Enterprise</h3><p>$499/mo</p></div>")
-                    upgrade_basic_btn = gr.Button("Upgrade to Basic")
-                    upgrade_pro_btn = gr.Button("Upgrade to Pro")
-                    upgrade_ent_btn = gr.Button("Upgrade to Enterprise")
+                        gr.HTML("<div class='card'><h3>Basic</h3><p style='font-size:24px;color:#10b981;'>$29/mo</p></div>")
+                        gr.HTML("<div class='card'><h3>Pro</h3><p style='font-size:24px;color:#10b981;'>$129/mo</p></div>")
+                        gr.HTML("<div class='card'><h3>Enterprise</h3><p style='font-size:24px;color:#10b981;'>$499/mo</p></div>")
+                    with gr.Row():
+                        upgrade_basic_btn = gr.Button("Upgrade to Basic")
+                        upgrade_pro_btn = gr.Button("Upgrade to Pro")
+                        upgrade_ent_btn = gr.Button("Upgrade to Enterprise")
                     checkout_url = gr.Markdown()
 
     # EVENT HANDLERY
@@ -323,9 +335,10 @@ with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", ne
     signup_btn.click(fn=handle_signup, inputs=[signup_name, signup_email, signup_pass], outputs=[user_state, signup_msg])
     
     def nav_switch(view_name):
-        if view_name == "upload": return gr.update(visible=True), gr.update(visible=False), gr.update(visible=False)
-        elif view_name == "invoices": return gr.update(visible=False), gr.update(visible=True), gr.update(visible=False)
-        elif view_name == "upgrade": return gr.update(visible=False), gr.update(visible=False), gr.update(visible=True)
+        u = gr.update(visible=False)
+        if view_name == "upload": return gr.update(visible=True), u, u
+        elif view_name == "invoices": return u, gr.update(visible=True), u
+        elif view_name == "upgrade": return u, u, gr.update(visible=True)
         
     nav_upload.click(fn=lambda: nav_switch("upload"), outputs=[dash_upload, dash_invoices, dash_upgrade])
     nav_invoices.click(fn=lambda: nav_switch("invoices"), outputs=[dash_upload, dash_invoices, dash_upgrade])
@@ -342,8 +355,10 @@ with gr.Blocks(css=CUSTOM_CSS, theme=gr.themes.Default(primary_hue="emerald", ne
     upgrade_pro_btn.click(fn=lambda u: create_stripe_checkout("pro", u), inputs=[user_state], outputs=[checkout_url])
     upgrade_ent_btn.click(fn=lambda u: create_stripe_checkout("enterprise", u), inputs=[user_state], outputs=[checkout_url])
     
-    nav_logout.click(fn=lambda: (None, gr.update(visible=True), gr.update(visible=False), gr.update(visible=False)), 
-                     outputs=[user_state, landing_view, auth_view, dashboard_view])
+    def logout():
+        return None, gr.update(visible=True), gr.update(visible=False), gr.update(visible=False)
+    
+    nav_logout.click(fn=logout, outputs=[user_state, landing_view, auth_view, dashboard_view])
 
 if __name__ == "__main__":
     app.launch(server_name="0.0.0.0", server_port=7860)