zakladka ustawien

Dockerfile_alpine

@@ -1,66 +0,0 @@
-# =========================
-#  Stage 1 – Build
-# =========================
-FROM python:3.13-alpine AS builder
-
-WORKDIR /app
-
-# Instalacja bibliotek do kompilacji + zależności runtime
-RUN apk add --no-cache \
-    tesseract-ocr \
-    tesseract-ocr-data-pol \
-    poppler-utils \
-    libjpeg-turbo \
-    zlib \
-    libpng \
-    libwebp \
-    libffi \
-    libmagic \
-    && apk add --no-cache --virtual .build-deps \
-    build-base \
-    jpeg-dev \
-    zlib-dev \
-    libpng-dev \
-    libwebp-dev \
-    libffi-dev
-
-# Kopiujemy plik wymagań
-COPY requirements.txt .
-
-# Instalujemy zależności Pythona do folderu tymczasowego
-RUN pip install --no-cache-dir --prefix=/install -r requirements.txt
-
-
-# =========================
-#  Stage 2 – Final image
-# =========================
-FROM python:3.13-alpine
-
-WORKDIR /app
-
-# Instalacja tylko bibliotek runtime (bez dev)
-RUN apk add --no-cache \
-    tesseract-ocr \
-    tesseract-ocr-data-pol \
-    poppler-utils \
-    libjpeg-turbo \
-    zlib \
-    libpng \
-    libwebp \
-    libffi \
-    libmagic
-
-# Kopiujemy zbudowane biblioteki z buildera
-COPY --from=builder /install /usr/local
-
-# Kopiujemy kod aplikacji
-COPY . .
-
-# Ustawiamy entrypoint
-COPY entrypoint.sh /entrypoint.sh
-RUN chmod +x /entrypoint.sh
-
-# Otwieramy port aplikacji
-EXPOSE 8000
-
-ENTRYPOINT ["/entrypoint.sh"]

app.py

@@ -11,7 +11,6 @@ import re
 import traceback
 import bcrypt
 import colorsys
-
 from pillow_heif import register_heif_opener
 from datetime import datetime, timedelta, UTC, timezone
 from urllib.parse import urlparse, urlunparse
@@ -148,39 +147,20 @@ WEBP_SAVE_PARAMS = {
     "quality": 95,  # tylko jeśli lossless=False
 }
 
-
-def read_commit_and_date(filename="version.txt", root_path=None):
+def read_commit(filename="version.txt", root_path=None):
     base = root_path or os.path.dirname(os.path.abspath(__file__))
     path = os.path.join(base, filename)
     if not os.path.exists(path):
-        return None, None
-
+        return None
     try:
         commit = open(path, "r", encoding="utf-8").read().strip()
-        if commit:
-            commit = commit[:12]
+        return commit[:12] if commit else None
     except Exception:
-        commit = None
+        return None
 
-    try:
-        ts = os.path.getmtime(path)
-        date_str = datetime.fromtimestamp(ts).strftime("%Y.%m.%d")
-    except Exception:
-        date_str = None
+commit = read_commit("version.txt", root_path=os.path.dirname(__file__)) or "dev"
+APP_VERSION = commit
 
-    return date_str, commit
-
-
-deploy_date, commit = read_commit_and_date(
-    "version.txt", root_path=os.path.dirname(__file__)
-)
-if not deploy_date:
-    deploy_date = datetime.now().strftime("%Y.%m.%d")
-if not commit:
-    commit = "dev"
-
-
-APP_VERSION = f"{deploy_date}+{commit}"
 app.config["APP_VERSION"] = APP_VERSION
 
 db = SQLAlchemy(app)
@@ -351,6 +331,118 @@ ShoppingList.permitted_users = db.relationship(
 )
 
 
+class AppSetting(db.Model):
+    key = db.Column(db.String(64), primary_key=True)
+    value = db.Column(db.Text, nullable=True)
+
+
+class CategoryColorOverride(db.Model):
+    id = db.Column(db.Integer, primary_key=True)
+    category_id = db.Column(
+        db.Integer, db.ForeignKey("category.id"), unique=True, nullable=False
+    )
+    color_hex = db.Column(db.String(7), nullable=False)  # "#rrggbb"
+
+
+def get_setting(key: str, default: str | None = None) -> str | None:
+    s = db.session.get(AppSetting, key)
+    return s.value if s else default
+
+
+def set_setting(key: str, value: str | None):
+    s = db.session.get(AppSetting, key)
+    if (value or "").strip() == "":
+        if s:
+            db.session.delete(s)
+    else:
+        if not s:
+            s = AppSetting(key=key, value=value)
+            db.session.add(s)
+        else:
+            s.value = value
+
+
+def get_ocr_keywords() -> list[str]:
+    raw = get_setting("ocr_keywords", None)
+    if raw:
+        try:
+            vals = (
+                json.loads(raw)
+                if raw.strip().startswith("[")
+                else [v.strip() for v in raw.split(",")]
+            )
+            return [v for v in vals if v]
+        except Exception:
+            pass
+    # domyślne – obecne w kodzie OCR
+    return [
+        "razem do zapłaty",
+        "do zapłaty",
+        "suma",
+        "kwota",
+        "wartość",
+        "płatność",
+        "total",
+        "amount",
+    ]
+
+
+# 1) nowa funkcja: tylko frazy użytkownika (bez domyślnych)
+def get_user_ocr_keywords_only() -> list[str]:
+    raw = get_setting("ocr_keywords", None)
+    if not raw:
+        return []
+    try:
+        if raw.strip().startswith("["):
+            vals = json.loads(raw)
+        else:
+            vals = [v.strip() for v in raw.split(",")]
+        return [v for v in vals if v]
+    except Exception:
+        return []
+
+
+_BASE_KEYWORDS_BLOCK = r"""
+    (?: 
+        razem\s*do\s*zap[łl][aąo0]ty |
+        do\s*zap[łl][aąo0]ty |
+        suma |
+        kwota |
+        warto[śćs] |
+        płatno[śćs] |
+        total |
+        amount
+    )
+"""
+
+
+def priority_keywords_pattern() -> re.Pattern:
+    user_terms = get_user_ocr_keywords_only()
+    if user_terms:
+
+        escaped = [re.escape(t) for t in user_terms]
+        user_block = " | ".join(escaped)
+        combined = rf"""
+            \b(
+                {_BASE_KEYWORDS_BLOCK}
+                | {user_block}
+            )\b
+        """
+    else:
+        combined = rf"""\b({_BASE_KEYWORDS_BLOCK})\b"""
+    return re.compile(combined, re.IGNORECASE | re.VERBOSE)
+
+
+def category_color_for(c: Category) -> str:
+    ov = CategoryColorOverride.query.filter_by(category_id=c.id).first()
+    return ov.color_hex if ov else category_to_color(c.name)
+
+
+def color_for_category_label(label: str) -> str:
+    cat = Category.query.filter(func.lower(Category.name) == label.lower()).first()
+    return category_color_for(cat) if cat else category_to_color(label)
+
+
 def hash_password(password):
     pepper = app.config["BCRYPT_PEPPER"]
     peppered = (password + pepper).encode("utf-8")
@@ -359,6 +451,14 @@ def hash_password(password):
     return hashed.decode("utf-8")
 
 
+def get_int_setting(key: str, default: int) -> int:
+    try:
+        v = get_setting(key, None)
+        return int(v) if v is not None and str(v).strip() != "" else default
+    except Exception:
+        return default
+
+
 def check_password(stored_hash, password_input):
     pepper = app.config["BCRYPT_PEPPER"]
     peppered = (password_input + pepper).encode("utf-8")
@@ -885,14 +985,39 @@ def get_admin_expense_summary():
     }
 
 
-def category_to_color(name):
-    hash_val = int(hashlib.md5(name.encode("utf-8")).hexdigest(), 16)
-    hue = (hash_val % 360) / 360.0
-    saturation = 0.60 + ((hash_val >> 8) % 17) / 100.0
-    lightness = 0.28 + ((hash_val >> 16) % 11) / 100.0
+def category_to_color(name: str, min_hue_gap_deg: int = 18) -> str:
+    # Stabilny hash -> int
+    hv = int(hashlib.md5(name.encode("utf-8")).hexdigest(), 16)
 
-    r, g, b = colorsys.hls_to_rgb(hue, lightness, saturation)
-    return f"#{int(r*255):02x}{int(g*255):02x}{int(b*255):02x}"
+    # Proste mieszanie bitów, by uniknąć lokalnych skupień
+    def rotl(x, r, bits=128):
+        r %= bits
+        return ((x << r) | (x >> (bits - r))) & ((1 << bits) - 1)
+
+    mix = hv ^ rotl(hv, 37) ^ rotl(hv, 73) ^ rotl(hv, 91)
+
+    # Pełne pokrycie koła barw 0..360
+    hue_deg = mix % 360
+
+    # Odpychanie lokalne po hue, by podobne nazwy nie lądowały zbyt blisko
+    gap = (rotl(mix, 17) % (2 * min_hue_gap_deg)) - min_hue_gap_deg  # [-gap, +gap]
+    hue_deg = (hue_deg + gap) % 360
+
+    # DARK profil: niższa jasność i nieco mniejsza saturacja
+    s = 0.70
+    l = 0.45
+
+    # Wąska wariacja, żeby uniknąć „neonów” i zachować spójność
+    s_var = ((rotl(mix, 29) % 5) - 2) / 100.0  # ±0.02
+    l_var = ((rotl(mix, 53) % 7) - 3) / 100.0  # ±0.03
+    s = min(0.76, max(0.62, s + s_var))
+    l = min(0.50, max(0.40, l + l_var))
+
+    # Konwersja HLS->RGB (colorsys: H,L,S w [0..1])
+    h = hue_deg / 360.0
+    r, g, b = colorsys.hls_to_rgb(h, l, s)
+
+    return f"#{int(round(r*255)):02x}{int(round(g*255)):02x}{int(round(b*255)):02x}"
 
 
 def get_total_expenses_grouped_by_category(
@@ -996,7 +1121,7 @@ def get_total_expenses_grouped_by_category(
         {
             "label": cat,
             "data": [round(data_map[label].get(cat, 0.0), 2) for label in labels],
-            "backgroundColor": category_to_color(cat),
+            "backgroundColor": color_for_category_label(cat),
         }
         for cat in cats
     ]
@@ -1234,8 +1359,15 @@ def get_page_args(
 
 
 def preprocess_image_for_tesseract(image):
+    # czułość 1..10 (domyślnie 5)
+    sens = get_int_setting("ocr_sensitivity", 5)
+    # próg progowy – im wyższa czułość, tym niższy próg (więcej czerni)
+    base_thresh = 150
+    delta = int((sens - 5) * 8)  # krok 8 na stopień
+    thresh = max(90, min(210, base_thresh - delta))
+
     image = ImageOps.autocontrast(image)
-    image = image.point(lambda x: 0 if x < 150 else 255)
+    image = image.point(lambda x: 0 if x < thresh else 255)
     image = image.resize((image.width * 2, image.height * 2), Image.BICUBIC)
     return image
 
@@ -1248,21 +1380,7 @@ def extract_total_tesseract(image):
 
     blacklist_keywords = re.compile(r"\b(ptu|vat|podatek|stawka)\b", re.IGNORECASE)
 
-    priority_keywords = re.compile(
-        r"""
-        \b(
-            razem\s*do\s*zap[łl][aąo0]ty |
-            do\s*zap[łl][aąo0]ty |
-            suma |
-            kwota |
-            warto[śćs] |
-            płatno[śćs] |
-            total |
-            amount
-        )\b
-        """,
-        re.IGNORECASE | re.VERBOSE,
-    )
+    priority_keywords = priority_keywords_pattern()
 
     for line in lines:
         if not line.strip():
@@ -1339,7 +1457,14 @@ def is_ip_blocked(ip):
     attempts = failed_login_attempts[ip]
     while attempts and now - attempts[0] > TIME_WINDOW:
         attempts.popleft()
-    return len(attempts) >= MAX_ATTEMPTS
+    max_attempts = get_int_setting("max_login_attempts", 10)
+    return len(attempts) >= max_attempts
+
+
+def attempts_remaining(ip):
+    attempts = failed_login_attempts[ip]
+    max_attempts = get_int_setting("max_login_attempts", 10)
+    return max(0, max_attempts - len(attempts))
 
 
 def register_failed_attempt(ip):
@@ -1354,11 +1479,6 @@ def reset_failed_attempts(ip):
     failed_login_attempts[ip].clear()
 
 
-def attempts_remaining(ip):
-    attempts = failed_login_attempts[ip]
-    return max(0, MAX_ATTEMPTS - len(attempts))
-
-
 ####################################################
 
 
@@ -1731,8 +1851,7 @@ def main_page():
             l.not_purchased_count = not_purchased_count
             l.total_expense = latest_expenses_map.get(l.id, 0)
             l.category_badges = [
-                {"name": c.name, "color": category_to_color(c.name)}
-                for c in l.categories
+                {"name": c.name, "color": category_color_for(c)} for c in l.categories
             ]
     else:
         for l in all_lists:
@@ -1966,7 +2085,6 @@ def edit_my_list(list_id):
     )
 
 
-
 @app.route("/edit_my_list/<int:list_id>/suggestions", methods=["GET"])
 @login_required
 def edit_my_list_suggestions(list_id: int):
@@ -1992,10 +2110,9 @@ def edit_my_list_suggestions(list_id: int):
         .subquery()
     )
 
-    query = (
-        db.session.query(User.username, subq.c.grant_count, subq.c.last_grant_id)
-        .join(subq, subq.c.uid == User.id)
-    )
+    query = db.session.query(
+        User.username, subq.c.grant_count, subq.c.last_grant_id
+    ).join(subq, subq.c.uid == User.id)
     if q:
         query = query.filter(func.lower(User.username).like(f"{q}%"))
 
@@ -2110,10 +2227,6 @@ def create_list():
 
 @app.route("/list/<int:list_id>")
 @login_required
-# ─────────────────────────────────────────────────────────────────────────────
-# Widok listy właściciela – dopięcie permitted_users do kontekstu
-# ─────────────────────────────────────────────────────────────────────────────
-@login_required
 def view_list(list_id):
     shopping_list = db.session.get(ShoppingList, list_id)
     if not shopping_list:
@@ -2121,35 +2234,57 @@ def view_list(list_id):
 
     is_owner = current_user.id == shopping_list.owner_id
     if not is_owner:
-        flash("Nie jesteś właścicielem listy, przekierowano do widoku publicznego.", "warning")
+        flash(
+            "Nie jesteś właścicielem listy, przekierowano do widoku publicznego.",
+            "warning",
+        )
         if current_user.is_admin:
-            flash("W celu modyfikacji listy, przejdź do panelu administracyjnego.", "info")
+            flash(
+                "W celu modyfikacji listy, przejdź do panelu administracyjnego.", "info"
+            )
         return redirect(url_for("shared_list", token=shopping_list.share_token))
 
-    # Twoja obecna logika ładująca szczegóły listy:
     shopping_list, items, receipts, expenses, total_expense = get_list_details(list_id)
     total_count = len(items)
     purchased_count = len([i for i in items if i.purchased])
     percent = (purchased_count / total_count * 100) if total_count > 0 else 0
 
-    # Uzupełnienie "added_by_display" — jak u Ciebie:
     for item in items:
         if item.added_by != shopping_list.owner_id:
-            item.added_by_display = (item.added_by_user.username if item.added_by_user else "?")
+            item.added_by_display = (
+                item.added_by_user.username if item.added_by_user else "?"
+            )
         else:
             item.added_by_display = None
 
-    # Badges kategorii (jak u Ciebie)
     shopping_list.category_badges = [
-        {"name": c.name, "color": category_to_color(c.name)}
+        {"name": c.name, "color": category_color_for(c)}
         for c in shopping_list.categories
     ]
 
-    # Dane do modala kategorii
+    # Wszystkie kategorie (do selecta)
     categories = Category.query.order_by(Category.name.asc()).all()
     selected_categories_ids = {c.id for c in shopping_list.categories}
 
-    # ⬅️ NOWE: użytkownicy z uprawnieniami do tej listy (dla modala w list.html)
+    # Najczęściej używane kategorie właściciela (top N)
+    popular_categories = (
+        db.session.query(Category)
+        .join(
+            shopping_list_category,
+            shopping_list_category.c.category_id == Category.id,
+        )
+        .join(
+            ShoppingList,
+            ShoppingList.id == shopping_list_category.c.shopping_list_id,
+        )
+        .filter(ShoppingList.owner_id == current_user.id)
+        .group_by(Category.id)
+        .order_by(func.count(ShoppingList.id).desc(), func.lower(Category.name).asc())
+        .limit(6)
+        .all()
+    )
+
+    # Użytkownicy z uprawnieniami do listy
     permitted_users = (
         db.session.query(User)
         .join(ListPermission, ListPermission.user_id == User.id)
@@ -2172,7 +2307,8 @@ def view_list(list_id):
         is_owner=is_owner,
         categories=categories,
         selected_categories=selected_categories_ids,
-        permitted_users=permitted_users,  # ⬅️ ważne dla tokenów w modalu
+        permitted_users=permitted_users,
+        popular_categories=popular_categories,
     )
 
 
@@ -2513,7 +2649,7 @@ def shared_list(token=None, list_id=None):
     shopping_list, items, receipts, expenses, total_expense = get_list_details(list_id)
 
     shopping_list.category_badges = [
-        {"name": c.name, "color": category_to_color(c.name)}
+        {"name": c.name, "color": category_color_for(c)}
         for c in shopping_list.categories
     ]
 
@@ -3720,10 +3856,10 @@ def recalculate_filesizes_all():
     return redirect(url_for("admin_receipts", id="all"))
 
 
-@app.route("/admin/mass_edit_categories", methods=["GET", "POST"])
+@app.route("/admin/edit_categories", methods=["GET", "POST"])
 @login_required
 @admin_required
-def admin_mass_edit_categories():
+def admin_edit_categories():
     page, per_page = get_page_args(default_per_page=50, max_per_page=200)
 
     lists_query = ShoppingList.query.options(
@@ -3751,14 +3887,12 @@ def admin_mass_edit_categories():
                 l.categories.extend(cats)
         db.session.commit()
         flash("Zaktualizowano kategorie dla wybranych list", "success")
-        return redirect(
-            url_for("admin_mass_edit_categories", page=page, per_page=per_page)
-        )
+        return redirect(url_for("admin_edit_categories", page=page, per_page=per_page))
 
     query_string = urlencode({k: v for k, v in request.args.items() if k != "page"})
 
     return render_template(
-        "admin/mass_edit_categories.html",
+        "admin/edit_categories.html",
         lists=lists,
         categories=categories,
         page=page,
@@ -3769,6 +3903,31 @@ def admin_mass_edit_categories():
     )
 
 
+@app.route("/admin/edit_categories/<int:list_id>/save", methods=["POST"])
+@login_required
+@admin_required
+def admin_edit_categories_save(list_id):
+    l = db.session.get(ShoppingList, list_id)
+    if not l:
+        return jsonify(ok=False, error="not_found"), 404
+
+    data = request.get_json(silent=True) or {}
+    ids = data.get("category_ids", [])
+
+    try:
+        ids = [int(x) for x in ids]
+    except (TypeError, ValueError):
+        return jsonify(ok=False, error="bad_ids"), 400
+
+    l.categories.clear()
+    if ids:
+        cats = Category.query.filter(Category.id.in_(ids)).all()
+        l.categories.extend(cats)
+
+    db.session.commit()
+    return jsonify(ok=True, count=len(l.categories)), 200
+
+
 @app.route("/admin/list_items/<int:list_id>")
 @login_required
 @admin_required
@@ -3949,6 +4108,73 @@ def healthcheck():
     return "OK", 200
 
 
+@app.route("/admin/settings", methods=["GET", "POST"])
+@login_required
+@admin_required
+def admin_settings():
+    categories = Category.query.order_by(Category.name.asc()).all()
+
+    if request.method == "POST":
+        ocr_raw = (request.form.get("ocr_keywords") or "").strip()
+        set_setting("ocr_keywords", ocr_raw)
+
+        ocr_sens = (request.form.get("ocr_sensitivity") or "").strip()
+        set_setting("ocr_sensitivity", ocr_sens)
+
+        max_attempts = (request.form.get("max_login_attempts") or "").strip()
+        set_setting("max_login_attempts", max_attempts)
+
+        login_window = (request.form.get("login_window_seconds") or "").strip()
+        if login_window:
+            set_setting("login_window_seconds", login_window)
+
+        for c in categories:
+            field = f"color_{c.id}"
+            vals = request.form.getlist(field) 
+            val = (vals[-1] if vals else "").strip()
+
+            existing = CategoryColorOverride.query.filter_by(category_id=c.id).first()
+            if val and re.fullmatch(r"^#[0-9A-Fa-f]{6}$", val):
+                if not existing:
+                    db.session.add(CategoryColorOverride(category_id=c.id, color_hex=val))
+                else:
+                    existing.color_hex = val
+            else:
+                if existing:
+                    db.session.delete(existing)
+
+        db.session.commit()
+        flash("Zapisano ustawienia.", "success")
+        return redirect(url_for("admin_settings"))
+
+    override_rows = CategoryColorOverride.query.filter(
+        CategoryColorOverride.category_id.in_([c.id for c in categories])
+    ).all()
+    overrides = {row.category_id: row.color_hex for row in override_rows}
+    auto_colors = {c.id: category_to_color(c.name) for c in categories}
+    effective_colors = {
+        c.id: (overrides.get(c.id) or auto_colors[c.id]) for c in categories
+    }
+
+    current_ocr = get_setting("ocr_keywords", "")
+
+    ocr_sensitivity = get_int_setting("ocr_sensitivity", 5)
+    max_login_attempts = get_int_setting("max_login_attempts", 10)
+    login_window_seconds = get_int_setting("login_window_seconds", 3600)
+
+    return render_template(
+        "admin/settings.html",
+        categories=categories,
+        overrides=overrides,
+        auto_colors=auto_colors,
+        effective_colors=effective_colors,
+        current_ocr=current_ocr,
+        ocr_sensitivity=ocr_sensitivity,
+        max_login_attempts=max_login_attempts,
+        login_window_seconds=login_window_seconds,
+    )
+
+
 @app.route("/robots.txt")
 def robots_txt():
     content = (

config.py

@@ -77,9 +77,9 @@ class Config:
     DEFAULT_CATEGORIES = [
         c.strip() for c in os.environ.get(
             "DEFAULT_CATEGORIES",
-            "Spożywcze,Budowlane,Zabawki,Chemia,Inne,Elektronika,Odzież i obuwie,"
+            "Spożywcze,Budowlane,Zabawki,Chemia,Inne,Elektronika,Odzież i obuwie,Jedzenie poza domem,"
             "Artykuły biurowe,Kosmetyki i higiena,Motoryzacja,Ogród i rośliny,"
             "Zwierzęta,Sprzęt sportowy,Książki i prasa,Narzędzia i majsterkowanie,"
-            "RTV / AGD,Apteka i suplementy,Artykuły dekoracyjne,Gry i hobby,Usługi,Pieczywo,Różne,Chiny,Dom,Leki,Odzież,Samochód"
+            "RTV / AGD,Apteka i suplementy,Artykuły dekoracyjne,Gry i hobby,Usługi,Pieczywo,Różne,Chiny,Dom,Leki,Odzież,Samochód,Dzieci"
         ).split(",") if c.strip()
-    ]
+    ]

deploy/varnish/default.vcl.template

@@ -75,6 +75,27 @@ sub vcl_recv {
     set req.http.X-Forwarded-Proto = "https";
   }
 
+  if (req.url == "/healthcheck" || req.http.X-Internal-Check) {
+    set req.http.X-Pass-Reason = "internal";
+    return (pass);
+  }
+
+  if (req.method != "GET" && req.method != "HEAD") {
+    set req.http.X-Pass-Reason = "method";
+    return (pass);
+  }
+
+  if (req.http.Authorization) {
+    set req.http.X-Pass-Reason = "auth";
+    return (pass);
+  }
+
+  # jeśli chcesz PASS przy cookie:
+  # if (req.http.Cookie) {
+  #   set req.http.X-Pass-Reason = "cookie";
+  #   return (pass);
+  # }
+
   return (hash);
 }
 
@@ -107,6 +128,7 @@ sub vcl_backend_response {
   if (beresp.http.Cache-Control ~ "(?i)no-store|private") {
     set beresp.uncacheable = true;
     set beresp.ttl = 0s;
+    set beresp.http.X-Pass-Reason = "no-store";
     return (deliver);
   }
 
@@ -114,6 +136,7 @@ sub vcl_backend_response {
   if (beresp.status >= 300 && beresp.status < 400) {
     set beresp.uncacheable = true;
     set beresp.ttl = 0s;
+    set beresp.http.X-Pass-Reason = "redirect";
     return (deliver);
   }
 
@@ -210,7 +233,14 @@ sub vcl_backend_error {
 # ===== DELIVER =====
 sub vcl_deliver {
   if (obj.uncacheable) {
-    set resp.http.X-Cache = "PASS";
+    if (req.http.X-Pass-Reason) {
+      set resp.http.X-Cache = "PASS:" + req.http.X-Pass-Reason;
+    } else if (resp.http.X-Pass-Reason) {    # z backendu
+      set resp.http.X-Cache = "PASS:" + resp.http.X-Pass-Reason;
+    } else {
+      set resp.http.X-Cache = "PASS";
+    }
+    unset resp.http.X-Pass-Reason;
     unset resp.http.Age;
   } else if (obj.hits > 0) {
     set resp.http.X-Cache = "HIT";

docker-compose.yml

@@ -2,12 +2,16 @@ services:
   app:
     build: .
     container_name: lista-zakupow-app
-    #ports:
-    #  - "${APP_PORT:-8000}:8000"
     expose:
       - "${APP_PORT:-8000}"
     healthcheck:
-      test: ["CMD", "python", "-c", "import urllib.request; import sys; req = urllib.request.Request('http://localhost:${APP_PORT:-8000}/healthcheck', headers={'X-Internal-Check': '${HEALTHCHECK_TOKEN}'}); sys.exit(0) if urllib.request.urlopen(req).read() == b'OK' else sys.exit(1)"]
+      test:
+        [
+          "CMD",
+          "python",
+          "-c",
+          "import urllib.request; import sys; req = urllib.request.Request('http://localhost:${APP_PORT:-8000}/healthcheck', headers={'X-Internal-Check': '${HEALTHCHECK_TOKEN}'}); sys.exit(0) if urllib.request.urlopen(req).read() == b'OK' else sys.exit(1)",
+        ]
       interval: 30s
       timeout: 10s
       retries: 3
@@ -34,13 +38,6 @@ services:
       - ./deploy/varnish/default.vcl:/etc/varnish/default.vcl:ro
     environment:
       - VARNISH_SIZE=256m
-    healthcheck:
-      test: [ "CMD-SHELL", "curl -fsS -H 'X-Internal-Check=${HEALTHCHECK_TOKEN}' http://localhost/healthcheck | grep -q OK" ]
-      interval: 30s
-      timeout: 5s
-      retries: 3
-    env_file:
-      - .env
     networks:
       - lista-zakupow_network
     restart: unless-stopped

static/css/style.css

@@ -812,4 +812,46 @@ td select.tom-dark {
 
 .text-danger {
   color: var(--danger) !important;
-}
+}
+
+/* ========== Kolorowe wskaźniki pod pickerem ========== */
+.color-indicators .indicator {
+  display: grid;
+  grid-template-columns: auto 1fr auto;
+  align-items: center;
+  gap: .5rem;
+}
+
+.color-indicators .bar {
+  height: 10px;
+  border-radius: 6px;
+  border: 1px solid rgba(255,255,255,.25);
+  box-shadow: inset 0 0 0 1px rgba(0,0,0,.25);
+}
+
+/* ========== Swatch + zapisy heksowe ========== */
+.swatch {
+  width: 16px;
+  height: 16px;
+  border-radius: 50%;
+  display: inline-block;
+  border: 1px solid rgba(0,0,0,.15);
+}
+
+.hex,
+.hex-label {
+  font-variant-numeric: lining-nums;
+  letter-spacing: .2px;
+}
+
+/* ========== OCR textarea ========== */
+.settings-ocr-textarea {
+  font: inherit;
+  line-height: 1.45;
+}
+
+/* ========== Odznaka poziomu czułości ========== */
+.sens-badge { font-weight: 600; }
+.sens-low  { background: rgba(108,117,125,.25); color: #ced4da; }  /* szary */
+.sens-mid  { background: rgba(13,110,253,.25);  color: #9ec5fe; }  /* niebieski */
+.sens-high { background: rgba(220,53,69,.25);   color: #f1aeb5; }  /* czerwony */

static/js/admin_settings.js

@@ -0,0 +1,130 @@
+(function () {
+  const form = document.getElementById("settings-form");
+  const resetAllBtn = document.getElementById("reset-all");
+
+  function ensureHiddenClear(input) {
+    let hidden = input.parentElement.querySelector(`input[type="hidden"][name="${input.name}"]`);
+    if (!hidden) {
+      hidden = document.createElement("input");
+      hidden.type = "hidden";
+      hidden.name = input.name;
+      hidden.value = "";
+      input.parentElement.appendChild(hidden);
+    }
+  }
+  function removeHiddenClear(input) {
+    const hidden = input.parentElement.querySelector(`input[type="hidden"][name="${input.name}"]`);
+    if (hidden) hidden.remove();
+  }
+
+  function updatePreview(input) {
+    const card = input.closest(".col-12, .col-md-6, .col-lg-4");
+    const hexAutoEl = card.querySelector(".hex-auto");
+    const hexEffEl  = card.querySelector(".hex-effective");
+    const barAuto   = card.querySelector('.bar[data-kind="auto"]');
+    const barEff    = card.querySelector('.bar[data-kind="effective"]');
+
+    const raw = (input.value || "").trim();
+    const autoHex = hexAutoEl.textContent.trim();
+    const effHex  = (raw || autoHex).toUpperCase();
+
+    if (barEff) barEff.style.backgroundColor = effHex;
+    if (hexEffEl) hexEffEl.textContent = effHex;
+
+    if (!raw) {
+      ensureHiddenClear(input);
+      input.disabled = true;
+    } else {
+      removeHiddenClear(input);
+      input.disabled = false;
+    }
+  }
+
+  form.querySelectorAll(".use-default").forEach(btn => {
+    btn.addEventListener("click", () => {
+      const name = btn.getAttribute("data-target");
+      const input = form.querySelector(`input[name="${name}"]`);
+      if (!input) return;
+      input.value = "";
+      updatePreview(input);
+    });
+  });
+
+  form.querySelectorAll(".reset-one").forEach(btn => {
+    btn.addEventListener("click", () => {
+      const name = btn.getAttribute("data-target");
+      const input = form.querySelector(`input[name="${name}"]`);
+      if (!input) return;
+      input.value = "";
+      updatePreview(input);
+    });
+  });
+
+  resetAllBtn?.addEventListener("click", () => {
+    form.querySelectorAll('input[type="color"].category-color').forEach(input => {
+      input.value = "";
+      updatePreview(input);
+    });
+  });
+
+  form.querySelectorAll('input[type="color"].category-color').forEach(input => {
+    updatePreview(input);
+    input.addEventListener("input", () => updatePreview(input));
+    input.addEventListener("change", () => updatePreview(input));
+  });
+
+  form.addEventListener("submit", () => {
+    form.querySelectorAll('input[type="color"].category-color').forEach(updatePreview);
+  });
+
+  form.querySelectorAll(".use-default").forEach(btn => {
+    btn.addEventListener("click", () => {
+      const name = btn.getAttribute("data-target");
+      const input = form.querySelector(`input[name="${name}"]`);
+      if (!input) return;
+
+      const card = input.closest(".col-12, .col-md-6, .col-lg-4") || input.closest(".col-12");
+      let autoHex = (input.dataset.auto || "").trim();
+      if (!autoHex && card) {
+        autoHex = (card.querySelector(".hex-auto")?.textContent || "").trim();
+      }
+      if (autoHex && !autoHex.startsWith("#")) autoHex = `#${autoHex}`;
+
+      if (autoHex) {
+        input.disabled = false;
+        removeHiddenClear(input);
+        input.value = autoHex;
+        updatePreview(input);
+      }
+    });
+  });
+
+  (function () {
+    const slider = document.getElementById("ocr_sensitivity");
+    const badge  = document.getElementById("ocr_sens_badge");
+    const value  = document.getElementById("ocr_sens_value");
+    if (!slider || !badge || !value) return;
+
+    function labelFor(v) {
+      v = Number(v);
+      if (v <= 3) return "Niski";
+      if (v <= 7) return "Średni";
+      return "Wysoki";
+    }
+    function clsFor(v) {
+      v = Number(v);
+      if (v <= 3) return "sens-low";
+      if (v <= 7) return "sens-mid";
+      return "sens-high";
+    }
+    function update() {
+      value.textContent = `(${slider.value})`;
+      badge.textContent = labelFor(slider.value);
+      badge.classList.remove("sens-low","sens-mid","sens-high");
+      badge.classList.add(clsFor(slider.value));
+    }
+    slider.addEventListener("input", update);
+    slider.addEventListener("change", update);
+    update();
+  })();
+})();

static/js/categories_autosave.js

@@ -0,0 +1,43 @@
+(function () {
+    const $$ = (sel, ctx = document) => Array.from(ctx.querySelectorAll(sel));
+    const $ = (sel, ctx = document) => ctx.querySelector(sel);
+
+    const saveCategories = async (listId, ids, names, listTitle) => {
+        try {
+            const res = await fetch(`/admin/edit_categories/${listId}/save`, {
+                method: 'POST',
+                headers: { 'Content-Type': 'application/json' },
+                body: JSON.stringify({ category_ids: ids })
+            });
+            const data = await res.json().catch(() => ({}));
+            if (!res.ok || !data.ok) throw new Error(data.error || 'save_failed');
+
+            const cats = names.length ? names.join(', ') : 'brak';
+            showToast(`Zapisano kategorie [${cats}] dla listy <b>${listTitle}</b>`, 'success');
+        } catch (err) {
+            console.error('Autosave error:', err);
+            showToast(`Błąd zapisu kategorii dla listy <b>${listTitle}</b>`, 'danger');
+        }
+    };
+
+    const timers = new Map();
+    const debounce = (key, fn, delay = 300) => {
+        clearTimeout(timers.get(key));
+        timers.set(key, setTimeout(fn, delay));
+    };
+
+    $$('.form-select[name^="categories_"]').forEach(select => {
+        const listId = select.getAttribute('data-list-id') || select.name.replace('categories_', '');
+        const listTitle = select.closest('tr')?.querySelector('td a')?.textContent.trim() || `#${listId}`;
+
+        select.addEventListener('change', () => {
+            const selectedOptions = Array.from(select.options).filter(o => o.selected);
+            const ids = selectedOptions.map(o => o.value);              // <-- ID
+            const names = selectedOptions.map(o => o.textContent.trim());
+            debounce(listId, () => saveCategories(listId, ids, names, listTitle));
+        });
+    });
+
+    const fallback = $('#fallback-save-btn');
+    if (fallback) fallback.classList.add('d-none');
+})();

static/js/category_modal.js

@@ -0,0 +1,18 @@
+document.addEventListener('DOMContentLoaded', () => {
+    document.querySelectorAll('#categoriesModal .category-suggestion').forEach(btn => {
+        btn.addEventListener('click', () => {
+            const select = document.getElementById('category_id');
+            if (!select) return;
+
+            select.value = btn.dataset.catId || '';
+            const form = btn.closest('form');
+            if (form) {
+                if (typeof form.requestSubmit === 'function') {
+                    form.requestSubmit();
+                } else {
+                    form.submit();
+                }
+            }
+        });
+    });
+});

static/js/receipt_crop.js

@@ -1,27 +1,45 @@
 (function () {
+    const configs = (window.CROP_CONFIGS && Array.isArray(window.CROP_CONFIGS))
+        ? window.CROP_CONFIGS
+        : (window.CROP_CONFIG ? [window.CROP_CONFIG] : []);
+
+    if (!configs.length) return;
+
     document.addEventListener("DOMContentLoaded", function () {
-        const cropModal = document.getElementById("adminCropModal");
-        const cropImage = document.getElementById("adminCropImage");
-        const spinner = document.getElementById("adminCropLoading");
-        const saveButton = document.getElementById("adminSaveCrop");
+        configs.forEach((cfg) => initCropperSet(cfg));
+    });
+
+    function initCropperSet(cfg) {
+        const {
+            modalId,
+            imageId,
+            spinnerId,
+            saveBtnId,
+            endpoint
+        } = cfg || {};
+
+        const cropModal = document.getElementById(modalId);
+        const cropImage = document.getElementById(imageId);
+        const spinner = document.getElementById(spinnerId);
+        const saveButton = document.getElementById(saveBtnId);
 
         if (!cropModal || !cropImage || !spinner || !saveButton) return;
 
         let cropper;
         let currentReceiptId;
-        const currentEndpoint = "/admin/crop_receipt";
+        const currentEndpoint = endpoint;
 
         cropModal.addEventListener("shown.bs.modal", function (event) {
             const button = event.relatedTarget;
-            const baseSrc = button.getAttribute("data-img-src") || "";
-            const ver = button.getAttribute("data-version") || Date.now();
+            const baseSrc = button?.getAttribute("data-img-src") || "";
+            const ver = button?.getAttribute("data-version") || Date.now();
             const sep = baseSrc.includes("?") ? "&" : "?";
             cropImage.src = baseSrc + sep + "cb=" + ver;
 
-            currentReceiptId = button.getAttribute("data-receipt-id");
+            currentReceiptId = button?.getAttribute("data-receipt-id");
 
             document.querySelectorAll('.cropper-container').forEach(e => e.remove());
-            if (cropper) cropper.destroy();
+            if (cropper && cropper.destroy) cropper.destroy();
             cropImage.onload = () => { cropper = cropUtils.initCropper(cropImage); };
         });
 
@@ -35,5 +53,5 @@
             spinner.classList.remove("d-none");
             cropUtils.handleCrop(currentEndpoint, currentReceiptId, cropper, spinner);
         });
-    });
+    }
 })();

static/js/user_receipt_crop.js

@@ -1,39 +0,0 @@
-(function () {
-    document.addEventListener("DOMContentLoaded", function () {
-        const cropModal = document.getElementById("userCropModal");
-        const cropImage = document.getElementById("userCropImage");
-        const spinner = document.getElementById("userCropLoading");
-        const saveButton = document.getElementById("userSaveCrop");
-
-        if (!cropModal || !cropImage || !spinner || !saveButton) return;
-
-        let cropper;
-        let currentReceiptId;
-        const currentEndpoint = "/user_crop_receipt";
-
-        cropModal.addEventListener("shown.bs.modal", function (event) {
-            const button = event.relatedTarget;
-            const baseSrc = button.getAttribute("data-img-src") || "";
-            const ver = button.getAttribute("data-version") || Date.now();
-            const sep = baseSrc.includes("?") ? "&" : "?";
-            cropImage.src = baseSrc + sep + "cb=" + ver;
-
-            currentReceiptId = button.getAttribute("data-receipt-id");
-
-            document.querySelectorAll('.cropper-container').forEach(e => e.remove());
-            if (cropper) cropper.destroy();
-            cropImage.onload = () => { cropper = cropUtils.initCropper(cropImage); };
-        });
-
-        cropModal.addEventListener("hidden.bs.modal", function () {
-            cropUtils.cleanUpCropper(cropImage, cropper);
-            cropper = null;
-        });
-
-        saveButton.addEventListener("click", function () {
-            if (!cropper) return;
-            spinner.classList.remove("d-none");
-            cropUtils.handleCrop(currentEndpoint, currentReceiptId, cropper, spinner);
-        });
-    });
-})();

templates/admin/admin_panel.html

@@ -13,8 +13,9 @@
       <a href="{{ url_for('list_users') }}" class="btn btn-outline-light btn-sm">👥 Użytkownicy</a>
       <a href="{{ url_for('admin_receipts') }}" class="btn btn-outline-light btn-sm">📸 Paragony</a>
       <a href="{{ url_for('list_products') }}" class="btn btn-outline-light btn-sm">🛍️ Produkty</a>
-      <a href="{{ url_for('admin_mass_edit_categories') }}" class="btn btn-outline-light btn-sm">🗂 Kategorie</a>
+      <a href="{{ url_for('admin_edit_categories') }}" class="btn btn-outline-light btn-sm">🗂 Kategorie</a>
       <a href="{{ url_for('admin_lists_access') }}" class="btn btn-outline-light btn-sm">🔐 Uprawnienia</a>
+      <a href="{{ url_for('admin_settings') }}" class="btn btn-outline-light btn-sm">⚙️ Ustawienia</a>
     </div>
   </div>
 </div>

templates/admin/edit_categories.html

@@ -12,25 +12,24 @@
 <div class="card bg-dark text-white mb-5">
     <div class="card-body">
         <div class="alert alert-warning border-warning text-dark" role="alert">
-            ⚠️ <strong>Uwaga!</strong> Przypisanie więcej niż jednej kategorii do listy może zaburzyć
-            poprawne zliczanie wydatków, ponieważ wydatki tej listy będą jednocześnie
-            klasyfikowane do kilku kategorii.
+            ⚠️ <strong>Uwaga!</strong> Przypisanie więcej niż jednej kategorii do listy może zaburzyć poprawne zliczanie
+            wydatków.
         </div>
 
-        <form method="post">
-            <div class="card bg-dark text-white mb-5">
+        <form method="post" id="mass-edit-form">
+            <div class="card bg-dark text-white mb-4">
                 <div class="card-body p-0">
                     <div class="table-responsive">
-                        <table class="table table-dark align-middle sortable">
-                            <thead>
+                        <table class="table table-dark align-middle sortable mb-0">
+                            <thead class="position-sticky top-0 bg-dark">
                                 <tr>
                                     <th scope="col">ID</th>
                                     <th scope="col">Nazwa listy</th>
                                     <th scope="col">Właściciel</th>
-                                    <th scope="col">Data utworzenia</th>
+                                    <th scope="col">Data</th>
                                     <th scope="col">Status</th>
-                                    <th scope="col">Podgląd produktów</th>
-                                    <th scope="col">Kategorie</th>
+                                    <th scope="col">Podgląd</th>
+                                    <th scope="col" style="min-width: 260px;">Kategorie</th>
                                 </tr>
                             </thead>
                             <tbody>
@@ -44,22 +43,17 @@
                                     <td>
                                         {% if l.owner %}
                                         👤 {{ l.owner.username }} ({{ l.owner.id }})
-                                        {% else %}
-                                        -
-                                        {% endif %}
+                                        {% else %}-{% endif %}
                                     </td>
                                     <td>{{ l.created_at.strftime('%Y-%m-%d %H:%M') if l.created_at else '-' }}</td>
                                     <td>
                                         {% if l.is_archived %}<span
-                                            class="badge rounded-pill bg-secondary">Archiwalna</span>{%
-                                        endif %}
+                                            class="badge rounded-pill bg-secondary me-1">Archiwalna</span>{% endif %}
                                         {% if l.is_temporary %}<span
-                                            class="badge rounded-pill bg-warning text-dark">Tymczasowa</span>{%
+                                            class="badge rounded-pill bg-warning text-dark me-1">Tymczasowa</span>{%
                                         endif %}
-                                        {% if l.is_public %}<span
-                                            class="badge rounded-pill bg-success">Publiczna</span>{% else
-                                        %}
-                                        <span class="badge rounded-pill bg-dark">Prywatna</span>{% endif %}
+                                        {% if l.is_public %}<span class="badge rounded-pill bg-success">Publiczna</span>
+                                        {% else %}<span class="badge rounded-pill bg-dark">Prywatna</span>{% endif %}
                                     </td>
                                     <td>
                                         <button type="button" class="btn btn-sm btn-outline-light preview-btn"
@@ -67,24 +61,25 @@
                                             🔍 Zobacz
                                         </button>
                                     </td>
-                                    <td style="min-width: 220px;">
-                                        <select name="categories_{{ l.id }}" multiple
-                                            class="form-select tom-dark bg-dark text-white border-secondary rounded">
-                                            {% for cat in categories %}
-                                            <option value="{{ cat.id }}" {% if cat in l.categories %}selected{% endif
-                                                %}>
-                                                {{ cat.name }}
-                                            </option>
-                                            {% endfor %}
-                                        </select>
+                                    <td>
+                                        <div class="d-flex align-items-center gap-2">
+                                            <select name="categories_{{ l.id }}" multiple
+                                                class="form-select tom-dark bg-dark text-white border-secondary rounded"
+                                                data-list-id="{{ l.id }}"
+                                                aria-label="Wybierz kategorie dla listy {{ l.id }}">
+                                                {% for cat in categories %}
+                                                <option value="{{ cat.id }}" {% if cat in l.categories %}selected{%
+                                                    endif %}>{{ cat.name }}</option>
+                                                {% endfor %}
+                                            </select>
+                                        </div>
                                     </td>
                                 </tr>
                                 {% endfor %}
+
                                 {% if lists|length == 0 %}
                                 <tr>
-                                    <td colspan="12" class="text-center py-4">
-                                        Brak list zakupowych do wyświetlenia
-                                    </td>
+                                    <td colspan="12" class="text-center py-4">Brak list zakupowych do wyświetlenia</td>
                                 </tr>
                                 {% endif %}
                             </tbody>
@@ -92,9 +87,9 @@
                     </div>
                 </div>
             </div>
-            <div>
-                <button type="submit" class="btn btn-sm btn-outline-light">💾 Zapisz zmiany</button>
-            </div>
+
+            {# Fallback – ukryty przez JS #}
+            <button type="submit" class="btn btn-sm btn-outline-light" id="fallback-save-btn">💾 Zapisz zmiany</button>
         </form>
     </div>
 </div>
@@ -120,8 +115,7 @@
             </li>
             {% for p in range(1, total_pages + 1) %}
             <li class="page-item {% if p == page %}active{% endif %}">
-                <a class="page-link" href="?{{ query_string }}{% if query_string %}&{% endif %}page={{ p }}">{{
-                    p }}</a>
+                <a class="page-link" href="?{{ query_string }}{% if query_string %}&{% endif %}page={{ p }}">{{ p }}</a>
             </li>
             {% endfor %}
             <li class="page-item {% if page >= total_pages %}disabled{% endif %}">
@@ -132,7 +126,6 @@
     </nav>
 </div>
 
-
 <!-- Modal podglądu produktów -->
 <div class="modal fade" id="productPreviewModal" tabindex="-1" aria-labelledby="previewModalLabel" aria-hidden="true">
     <div class="modal-dialog modal-lg modal-dialog-scrollable">
@@ -150,7 +143,9 @@
 </div>
 
 {% endblock %}
+
 {% block scripts %}
 <script src="{{ url_for('static_bp.serve_js', filename='preview_list_modal.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='categories_select_admin.js') }}?v={{ APP_VERSION }}"></script>
+<script src="{{ url_for('static_bp.serve_js', filename='categories_autosave.js') }}?v={{ APP_VERSION }}"></script>
 {% endblock %}

templates/admin/lists_access.html

@@ -55,7 +55,7 @@
       <input type="hidden" name="action" value="save_changes">
 
       <div class="table-responsive">
-        <table class="table table-dark align-middle" id="listsTable">
+        <table class="table table-dark align-middle sortable" id="listsTable">
           <thead class="align-middle">
             <tr>
               <th scope="col" style="width:36px;"></th>
@@ -77,7 +77,7 @@
                 <input type="hidden" name="visible_ids" value="{{ l.id }}">
               </td>
 
-              <td class="text-nowrap">#{{ l.id }}</td>
+              <td class="text-nowrap">{{ l.id }}</td>
 
               <td class="fw-bold align-middle">
                 <a href="{{ url_for('view_list', list_id=l.id) }}" class="text-white text-decoration-none">{{ l.title

templates/admin/receipts.html

@@ -213,7 +213,16 @@
 </div>
 
 {% block scripts %}
-<script src="{{ url_for('static_bp.serve_js', filename='admin_receipt_crop.js') }}?v={{ APP_VERSION }}"></script>
+<script>
+  window.CROP_CONFIG = {
+    modalId: "adminCropModal",
+    imageId: "adminCropImage",
+    spinnerId: "adminCropLoading",
+    saveBtnId: "adminSaveCrop",
+    endpoint: "/admin/crop_receipt"
+  };
+</script>
+<script src="{{ url_for('static_bp.serve_js', filename='receipt_crop.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='receipt_crop_logic.js') }}?v={{ APP_VERSION }}"></script>
 {% endblock %}
 

templates/admin/settings.html

@@ -0,0 +1,145 @@
+{% extends "base.html" %}
+{% block title %}Ustawienia{% endblock %}
+
+{% block content %}
+<div class="d-flex justify-content-between align-items-center flex-wrap mb-4">
+  <h2 class="mb-2">⚙️ Ustawienia</h2>
+  <a href="{{ url_for('admin_panel') }}" class="btn btn-outline-secondary">← Powrót do panelu</a>
+</div>
+
+<form method="post" id="settings-form">
+  <div class="card bg-dark text-white mb-4">
+    <div class="card-header border-0">
+      <strong>🔎 OCR — słowa kluczowe i czułość</strong>
+    </div>
+    <div class="card-body">
+      <p class="small text-info mb-2">
+        Dodaj lokalne frazy (CSV lub JSON), np.: <code>summe, gesamtbetrag, importe total</code>
+      </p>
+      <textarea
+        class="form-control settings-ocr-textarea mb-3"
+        name="ocr_keywords"
+        rows="3"
+        placeholder="suma, razem do zapłaty, total"
+      >{{ current_ocr }}</textarea>
+
+      <label for="ocr_sensitivity" class="form-label d-flex align-items-center gap-2">
+        Poziom czułości OCR
+        <span id="ocr_sens_badge" class="badge rounded-pill sens-badge">Średni</span>
+        <span id="ocr_sens_value" class="small">({{ ocr_sensitivity }})</span>
+      </label>
+      <input
+        type="range"
+        class="form-range"
+        min="1"
+        max="10"
+        step="1"
+        name="ocr_sensitivity"
+        id="ocr_sensitivity"
+        value="{{ ocr_sensitivity }}"
+      >
+      <div class="small mt-1">
+        <ul class="mb-2 ps-3">
+          <li><strong>Zalecane:</strong> <code>5–7</code> (balans dokładności i stabilności).</li>
+          <li><strong>Niskie (1–3):</strong> szybsze, mniejsza wykrywalność trudnych skanów.</li>
+          <li><strong>Średnie (4–7):</strong> dobre na większość paragonów — <em>polecane</em>.</li>
+          <li><strong>Wysokie (8–10):</strong> agresywne binaryzowanie — lepsze dla bladych skanów,
+            ale większe ryzyko fałszywych trafień i wolniejsze działanie.</li>
+        </ul>
+        Tip: jeśli pojawiają się „dziwne” sumy — obniż o 1–2 poziomy.
+      </div>
+    </div>
+  </div>
+
+  <div class="card bg-dark text-white mb-4">
+    <div class="card-header border-0 d-flex align-items-center justify-content-between">
+      <strong>🎨 Kolory kategorii</strong>
+      <button type="button" class="btn btn-outline-light btn-sm" id="reset-all">🔄 Wyczyść nadpisania</button>
+    </div>
+
+    <div class="card-body">
+      <div class="row g-3" id="categories-grid">
+        {% for c in categories %}
+        {% set hex_override = overrides.get(c.id) %}
+        {% set hex_auto = auto_colors[c.id] %}
+        {% set hex_effective = effective_colors[c.id] %}
+        <div class="col-12 col-md-6 col-lg-4">
+          <label class="form-label d-block mb-2">{{ c.name }}</label>
+
+        <div class="input-group">
+        <input
+        type="color"
+        class="form-control form-control-color category-color"
+        name="color_{{ c.id }}"
+        value="{{ hex_override or '' }}"
+        data-auto="{{ hex_auto }}"
+        {% if not hex_override %}data-empty="1"{% endif %}
+        aria-label="Kolor kategorii {{ c.name }}"
+        >
+
+        <div class="btn-group" role="group" aria-label="Akcje koloru">
+            <button type="button"
+                    class="btn btn-outline-light btn-sm reset-one"
+                    data-target="color_{{ c.id }}">
+            🔄 Reset
+            </button>
+            <button type="button"
+                    class="btn btn-outline-light btn-sm use-default"
+                    data-target="color_{{ c.id }}">
+            🎯 Przywróć domyślny
+            </button>
+        </div>
+        </div>
+
+          <div class="color-indicators mt-2">
+            <div class="indicator">
+              <span class="badge text-bg-dark me-2">Efektywny</span>
+              <span class="bar" data-kind="effective" style="background-color: {{ hex_effective }};"></span>
+              <span class="hex hex-effective ms-2">{{ hex_effective|upper }}</span>
+            </div>
+            <div class="indicator mt-1">
+              <span class="badge text-bg-light me-2">Domyślny</span>
+              <span class="bar" data-kind="auto" style="background-color: {{ hex_auto }};"></span>
+              <span class="hex hex-auto ms-2">{{ hex_auto|upper }}</span>
+            </div>
+          </div>
+        </div>
+        {% endfor %}
+      </div>
+    </div>
+  </div>
+
+  <div class="card bg-dark text-white mb-4">
+    <div class="card-header border-0">
+      <strong>🔐 Bezpieczeństwo</strong>
+    </div>
+    <div class="card-body">
+      <label for="max_login_attempts" class="form-label">Limit błędnych logowań (hasło główne)</label>
+      <input
+        type="number"
+        class="form-control"
+        name="max_login_attempts"
+        id="max_login_attempts"
+        min="1"
+        max="20"
+        value="{{ max_login_attempts }}"
+      >
+      <div class="form-text text-muted">
+        Po przekroczeniu limitu IP zostaje tymczasowo zablokowane.
+      </div>
+    </div>
+  </div>
+
+  <div class="mt-4 d-flex">
+    <div class="btn-group" role="group" aria-label="Akcje ustawień">
+      <button type="submit" class="btn btn-outline-light">💾 Zapisz</button>
+      <a href="{{ url_for('admin_panel') }}" class="btn btn-outline-light">❌ Anuluj</a>
+    </div>
+  </div>
+</form>
+{% endblock %}
+
+{% block scripts %}
+<link rel="stylesheet" href="{{ url_for('static_bp.serve_css', filename='admin_settings.css') }}?v={{ APP_VERSION }}">
+<script src="{{ url_for('static_bp.serve_js', filename='admin_settings.js') }}?v={{ APP_VERSION }}"></script>
+{% endblock %}

templates/base.html

@@ -31,7 +31,7 @@
   {% endif %}
 
   {# --- Tom Select CSS tylko dla wybranych podstron --- #}
-  {% set substrings_tomselect = ['/edit_my_list', '/admin/edit_list', '/admin/mass_edit_categories'] %}
+  {% set substrings_tomselect = ['/edit_my_list', '/admin/edit_list', '/admin/edit_categories'] %}
   {% if substrings_tomselect | select("in", request.path) | list | length > 0 %}
   <link href="{{ url_for('static_bp.serve_css_lib', filename='tom-select.bootstrap5.min.css') }}?v={{ APP_VERSION }}"
     rel="stylesheet">
@@ -126,7 +126,7 @@
   <script src="{{ url_for('static_bp.serve_js_lib', filename='cropper.min.js') }}?v={{ APP_VERSION }}"></script>
   {% endif %}
 
-  {% set substrings = ['/edit_my_list', '/admin/edit_list', '/admin/mass_edit_categories'] %}
+  {% set substrings = ['/edit_my_list', '/admin/edit_list', '/admin/edit_categories'] %}
   {% if substrings | select("in", request.path) | list | length > 0 %}
   <script
     src="{{ url_for('static_bp.serve_js_lib', filename='tom-select.complete.min.js') }}?v={{ APP_VERSION }}"></script>

templates/edit_my_list.html

@@ -244,8 +244,17 @@
 {% endblock %}
 
 {% block scripts %}
+<script>
+  window.CROP_CONFIG = {
+    modalId: "userCropModal",
+    imageId: "userCropImage",
+    spinnerId: "userCropLoading",
+    saveBtnId: "userSaveCrop",
+    endpoint: "/user_crop_receipt"
+  };
+</script>
 <script src="{{ url_for('static_bp.serve_js', filename='confirm_delete.js') }}?v={{ APP_VERSION }}"></script>
-<script src="{{ url_for('static_bp.serve_js', filename='user_receipt_crop.js') }}?v={{ APP_VERSION }}"></script>
+<script src="{{ url_for('static_bp.serve_js', filename='receipt_crop.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='receipt_crop_logic.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='select.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='access_users.js') }}?v={{ APP_VERSION }}"></script>

templates/list.html

@@ -204,12 +204,29 @@
   <div class="modal-dialog modal-lg modal-dialog-scrollable">
     <div class="modal-content bg-dark text-white">
       <div class="modal-header">
-        <h5 class="modal-title" id="grantAccessModalLabel">Ustaw kategorię</h5>
+        <h5 class="modal-title" id="categoriesModalLabel">Ustaw kategorię</h5>
         <button type="button" class="btn-close btn-close-white" data-bs-dismiss="modal" aria-label="Zamknij"></button>
       </div>
 
       <form method="post" action="{{ url_for('list_settings', list_id=list.id) }}">
         <div class="modal-body">
+
+          {% if popular_categories %}
+          <div class="mb-3">
+            <div class="small text-secondary mb-1">Najczęściej używane:</div>
+            <div class="d-flex flex-wrap gap-2">
+              {% for cat in popular_categories %}
+              <button type="button" class="btn btn-sm btn-outline-light category-suggestion" data-cat-id="{{ cat.id }}">
+                {{ cat.name }}
+              </button>
+              {% endfor %}
+              <button type="button" class="btn btn-sm btn-outline-secondary category-suggestion" data-cat-id="">
+                – brak –
+              </button>
+            </div>
+          </div>
+          {% endif %}
+
           <div class="mb-4">
             <label for="category_id" class="form-label">🏷️ Kategoria listy</label>
             <select id="category_id" name="category_id"
@@ -234,11 +251,11 @@
           </div>
         </div>
       </form>
-
     </div>
   </div>
 </div>
 
+
 <!-- MODAL: NADAWANIE DOSTĘPU -->
 <div class="modal fade" id="grantAccessModal" tabindex="-1" aria-labelledby="grantAccessModalLabel" aria-hidden="true">
   <div class="modal-dialog modal-lg modal-dialog-scrollable">
@@ -320,6 +337,7 @@
 <script src="{{ url_for('static_bp.serve_js', filename='receipt_upload.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='sort_mode.js') }}?v={{ APP_VERSION }}"></script>
 <script src="{{ url_for('static_bp.serve_js', filename='access_users.js') }}?v={{ APP_VERSION }}"></script>
+<script src="{{ url_for('static_bp.serve_js', filename='category_modal.js') }}?v={{ APP_VERSION }}"></script>
 <script>
   setupList({{ list.id }}, '{{ current_user.username if current_user.is_authenticated else 'Gość' }}');
 </script>