Merge pull request 'refactor: code quality improvements across the backend' (#3) from claude-suggested-fixes into main

Reviewed-on: #3

.gitignore

@@ -1,3 +1,6 @@
 # python cache
 **/*.pyc
 .secret
+
+# local tmp folder
+tmp/

.vscode/launch.json

@@ -0,0 +1,33 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "name": "Python Debugger: Flask",
+            "type": "debugpy",
+            "request": "launch",
+            "module": "flask",
+            "python": "${workspaceFolder}/.venv/bin/python",
+            "env": {
+                "FLASK_APP": "app.py",
+                "FLASK_DEBUG": "1"
+            },
+            "args": [
+                "run",
+                "--no-debugger",
+                "--no-reload",
+                "--host", "0.0.0.0",
+                "--port", "5001"
+            ],
+            "jinja": true
+        },
+        {
+            "name": "Python Debugger: Attach",
+            "type": "debugpy",
+            "request": "attach",
+            "connect": {
+                "host": "localhost",
+                "port": 5678
+            }
+        }
+    ]
+}

CLAUDE.md

@@ -4,22 +4,12 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 
 ## Project Status
 
-This is a greenfield project in early discovery/design phase. No source code exists yet. The project aims to automate financial and operational management for a small sports club.
+Flask-based financial management system for FUJ (Frisbee Ultimate Jablonec). Handles attendance-based fee calculation, Fio bank transaction sync, payment reconciliation, and a web dashboard.
-
-See `docs/project-notes.md` for the current brainstorming state, domain model, and open questions that need answering before implementation begins.
 
 ## Key Constraints
 
 - **PII separation**: Member data (names, emails, payment info) must never be committed to git. Enforce config/data separation from day one.
-- **Incremental approach**: Start with highest-ROI automation (likely fee billing & payment tracking), not a full platform.
+- **Configuration**: External service IDs, credentials, and tunable parameters are centralized in `scripts/config.py`. Domain-specific constants (fees, merged months) stay in their respective modules.
-
-## Development Workflow
-
-This project uses a hybrid workflow:
-- Claude.ai chat for brainstorming and design exploration
-- Claude Code for implementation
-
-## When Code Exists
 
 ## Development Setup
 
@@ -40,7 +30,7 @@ Alternatively, use the Makefile:
 - `make web`       - Start dashboard
 - `make image`     - Build Docker image
 
-Requires `credentials.json` in the root for Google Sheets API access.
+Requires `.secret/fuj-management-bot-credentials.json` for Google Sheets API access (configurable via `CREDENTIALS_PATH` env var).
 
 ## Git Commits
 

Makefile

@@ -1,4 +1,4 @@
-.PHONY: help fees match web image run sync sync-2026 test test-v docs
+.PHONY: help fees match web web-debug image run sync sync-2026 test test-v docs
 
 export PYTHONPATH := scripts:$(PYTHONPATH)
 VENV := .venv
@@ -16,6 +16,7 @@ help:
 	@echo "  make fees   - Calculate monthly fees from the attendance sheet"
 	@echo "  make match  - Match Fio bank payments against expected attendance fees"
 	@echo "  make web        - Start a dynamic web dashboard locally"
+	@echo "  make web-debug  - Start a dynamic web dashboard locally in debug mode"
 	@echo "  make image      - Build an OCI container image"
 	@echo "  make run    - Run the built Docker image locally"
 	@echo "  make sync        - Sync Fio transactions to Google Sheets"
@@ -40,6 +41,9 @@ match: $(PYTHON)
 web: $(PYTHON)
 	$(PYTHON) app.py
 
+web-debug: $(PYTHON)
+	FLASK_DEBUG=1 $(PYTHON) app.py
+
 image:
 	docker build -t fuj-management:latest -f build/Dockerfile .
 

app.py

@@ -6,21 +6,42 @@ import time
 import os
 import io
 import qrcode
+import logging
 from flask import Flask, render_template, g, send_file, request
 
+# Configure logging, allowing override via LOG_LEVEL environment variable
+log_level = os.environ.get("LOG_LEVEL", "INFO").upper()
+logging.basicConfig(level=getattr(logging, log_level, logging.INFO), format='%(asctime)s - %(name)s:%(filename)s:%(lineno)d [%(funcName)s] - %(levelname)s - %(message)s')
+
 # Add scripts directory to path to allow importing from it
 scripts_dir = Path(__file__).parent / "scripts"
 sys.path.append(str(scripts_dir))
 
-from attendance import get_members_with_fees, get_junior_members_with_fees, SHEET_ID as ATTENDANCE_SHEET_ID, JUNIOR_SHEET_GID, MERGED_MONTHS
+from config import (
-from match_payments import reconcile, fetch_sheet_data, fetch_exceptions, normalize, DEFAULT_SPREADSHEET_ID as PAYMENTS_SHEET_ID
+    ATTENDANCE_SHEET_ID, PAYMENTS_SHEET_ID, JUNIOR_SHEET_GID,
+    BANK_ACCOUNT, CREDENTIALS_PATH,
+)
+from attendance import get_members_with_fees, get_junior_members_with_fees, ADULT_MERGED_MONTHS, JUNIOR_MERGED_MONTHS
+from match_payments import reconcile, fetch_sheet_data, fetch_exceptions, normalize
+from cache_utils import get_sheet_modified_time, read_cache, write_cache, _LAST_CHECKED
 
-def get_month_labels(sorted_months):
+def get_cached_data(cache_key, sheet_id, fetch_func, *args, serialize=None, deserialize=None, **kwargs):
+    mod_time = get_sheet_modified_time(cache_key)
+    if mod_time:
+        cached = read_cache(cache_key, mod_time)
+        if cached is not None:
+            return deserialize(cached) if deserialize else cached
+    data = fetch_func(*args, **kwargs)
+    if mod_time:
+        write_cache(cache_key, mod_time, serialize(data) if serialize else data)
+    return data
+
+def get_month_labels(sorted_months, merged_months):
     labels = {}
     for m in sorted_months:
         dt = datetime.strptime(m, "%Y-%m")
         # Find which months were merged into m (e.g. 2026-01 is merged into 2026-02)
-        merged_in = sorted([k for k, v in MERGED_MONTHS.items() if v == m])
+        merged_in = sorted([k for k, v in merged_months.items() if v == m])
         if merged_in:
             all_dts = [datetime.strptime(x, "%Y-%m") for x in sorted(merged_in + [m])]
             years = {d.year for d in all_dts}
@@ -36,9 +57,6 @@ def get_month_labels(sorted_months):
 
 app = Flask(__name__)
 
-# Bank account for QR code payments (can be overridden by ENV)
-BANK_ACCOUNT = os.environ.get("BANK_ACCOUNT", "CZ8520100000002800359168")
-
 @app.before_request
 def start_timer():
     g.start_time = time.perf_counter()
@@ -78,22 +96,28 @@ def fees():
     attendance_url = f"https://docs.google.com/spreadsheets/d/{ATTENDANCE_SHEET_ID}/edit"
     payments_url = f"https://docs.google.com/spreadsheets/d/{PAYMENTS_SHEET_ID}/edit"
     
-    members, sorted_months = get_members_with_fees()
+    members_data = get_cached_data("attendance_regular", ATTENDANCE_SHEET_ID, get_members_with_fees)
     record_step("fetch_members")
-    if not members:
+    if not members_data:
         return "No data."
+    members, sorted_months = members_data
 
     # Filter to adults only for display
     results = [(name, fees) for name, tier, fees in members if tier == "A"]
 
     # Format month labels
-    month_labels = get_month_labels(sorted_months)
+    month_labels = get_month_labels(sorted_months, ADULT_MERGED_MONTHS)
 
     monthly_totals = {m: 0 for m in sorted_months}
     
     # Get exceptions for formatting
-    credentials_path = ".secret/fuj-management-bot-credentials.json"
+    credentials_path = CREDENTIALS_PATH
-    exceptions = fetch_exceptions(PAYMENTS_SHEET_ID, credentials_path)
+    exceptions = get_cached_data(
+            "exceptions_dict", PAYMENTS_SHEET_ID, fetch_exceptions,
+            PAYMENTS_SHEET_ID, credentials_path,
+            serialize=lambda d: [[list(k), v] for k, v in d.items()],
+            deserialize=lambda c: {tuple(k): v for k, v in c},
+        )
     record_step("fetch_exceptions")
     
     formatted_results = []
@@ -135,22 +159,28 @@ def fees_juniors():
     attendance_url = f"https://docs.google.com/spreadsheets/d/{ATTENDANCE_SHEET_ID}/edit#gid={JUNIOR_SHEET_GID}"
     payments_url = f"https://docs.google.com/spreadsheets/d/{PAYMENTS_SHEET_ID}/edit"
     
-    members, sorted_months = get_junior_members_with_fees()
+    members_data = get_cached_data("attendance_juniors", ATTENDANCE_SHEET_ID, get_junior_members_with_fees)
     record_step("fetch_junior_members")
-    if not members:
+    if not members_data:
         return "No data."
+    members, sorted_months = members_data
 
     # Sort members by name
     results = sorted([(name, fees) for name, tier, fees in members], key=lambda x: x[0])
 
     # Format month labels
-    month_labels = get_month_labels(sorted_months)
+    month_labels = get_month_labels(sorted_months, JUNIOR_MERGED_MONTHS)
 
     monthly_totals = {m: 0 for m in sorted_months}
     
     # Get exceptions for formatting (reusing payments sheet)
-    credentials_path = ".secret/fuj-management-bot-credentials.json"
+    credentials_path = CREDENTIALS_PATH
-    exceptions = fetch_exceptions(PAYMENTS_SHEET_ID, credentials_path)
+    exceptions = get_cached_data(
+            "exceptions_dict", PAYMENTS_SHEET_ID, fetch_exceptions,
+            PAYMENTS_SHEET_ID, credentials_path,
+            serialize=lambda d: [[list(k), v] for k, v in d.items()],
+            deserialize=lambda c: {tuple(k): v for k, v in c},
+        )
     record_step("fetch_exceptions")
     
     formatted_results = []
@@ -212,22 +242,28 @@ def reconcile_view():
     payments_url = f"https://docs.google.com/spreadsheets/d/{PAYMENTS_SHEET_ID}/edit"
     
     # Use hardcoded credentials path for now, consistent with other scripts
-    credentials_path = ".secret/fuj-management-bot-credentials.json"
+    credentials_path = CREDENTIALS_PATH
     
-    members, sorted_months = get_members_with_fees()
+    members_data = get_cached_data("attendance_regular", ATTENDANCE_SHEET_ID, get_members_with_fees)
     record_step("fetch_members")
-    if not members:
+    if not members_data:
         return "No data."
+    members, sorted_months = members_data
         
-    transactions = fetch_sheet_data(PAYMENTS_SHEET_ID, credentials_path)
+    transactions = get_cached_data("payments_transactions", PAYMENTS_SHEET_ID, fetch_sheet_data, PAYMENTS_SHEET_ID, credentials_path)
     record_step("fetch_payments")
-    exceptions = fetch_exceptions(PAYMENTS_SHEET_ID, credentials_path)
+    exceptions = get_cached_data(
+            "exceptions_dict", PAYMENTS_SHEET_ID, fetch_exceptions,
+            PAYMENTS_SHEET_ID, credentials_path,
+            serialize=lambda d: [[list(k), v] for k, v in d.items()],
+            deserialize=lambda c: {tuple(k): v for k, v in c},
+        )
     record_step("fetch_exceptions")
     result = reconcile(members, sorted_months, transactions, exceptions)
     record_step("reconcile")
     
     # Format month labels
-    month_labels = get_month_labels(sorted_months)
+    month_labels = get_month_labels(sorted_months, ADULT_MERGED_MONTHS)
     
     # Filter to adults for the main table
     adult_names = sorted([name for name, tier, _ in members if tier == "A"])
@@ -235,7 +271,8 @@ def reconcile_view():
     formatted_results = []
     for name in adult_names:
         data = result["members"][name]
-        row = {"name": name, "months": [], "balance": data["total_balance"]}
+        row = {"name": name, "months": [], "balance": data["total_balance"], "unpaid_periods": ""}
+        unpaid_months = []
         for m in sorted_months:
             mdata = data["months"].get(m, {"expected": 0, "original_expected": 0, "paid": 0})
             expected = mdata["expected"]
@@ -253,10 +290,12 @@ def reconcile_view():
                     status = "partial"
                     cell_text = f"{paid}/{expected}"
                     amount_to_pay = expected - paid
+                    unpaid_months.append(month_labels[m])
                 else:
                     status = "unpaid"
                     cell_text = f"UNPAID {expected}"
                     amount_to_pay = expected
+                    unpaid_months.append(month_labels[m])
             elif paid > 0:
                 status = "surplus"
                 cell_text = f"PAID {paid}"
@@ -268,12 +307,13 @@ def reconcile_view():
                 "month": month_labels[m]
             })
             
+        row["unpaid_periods"] = ", ".join(unpaid_months) if unpaid_months else ("Older debt" if data["total_balance"] < 0 else "")
         row["balance"] = data["total_balance"] # Updated to use total_balance
         formatted_results.append(row)
         
     # Format credits and debts
-    credits = sorted([{"name": n, "amount": a["total_balance"]} for n, a in result["members"].items() if a["total_balance"] > 0], key=lambda x: x["name"])
+    credits = sorted([{"name": n, "amount": a["total_balance"]} for n, a in result["members"].items() if a["total_balance"] > 0 and n in adult_names], key=lambda x: x["name"])
-    debts = sorted([{"name": n, "amount": abs(a["total_balance"])} for n, a in result["members"].items() if a["total_balance"] < 0], key=lambda x: x["name"])
+    debts = sorted([{"name": n, "amount": abs(a["total_balance"])} for n, a in result["members"].items() if a["total_balance"] < 0 and n in adult_names], key=lambda x: x["name"])
     # Format unmatched
     unmatched = result["unmatched"]
     import json
@@ -300,16 +340,22 @@ def reconcile_juniors_view():
     attendance_url = f"https://docs.google.com/spreadsheets/d/{ATTENDANCE_SHEET_ID}/edit#gid={JUNIOR_SHEET_GID}"
     payments_url = f"https://docs.google.com/spreadsheets/d/{PAYMENTS_SHEET_ID}/edit"
     
-    credentials_path = ".secret/fuj-management-bot-credentials.json"
+    credentials_path = CREDENTIALS_PATH
     
-    junior_members, sorted_months = get_junior_members_with_fees()
+    junior_members_data = get_cached_data("attendance_juniors", ATTENDANCE_SHEET_ID, get_junior_members_with_fees)
     record_step("fetch_junior_members")
-    if not junior_members:
+    if not junior_members_data:
         return "No data."
+    junior_members, sorted_months = junior_members_data
         
-    transactions = fetch_sheet_data(PAYMENTS_SHEET_ID, credentials_path)
+    transactions = get_cached_data("payments_transactions", PAYMENTS_SHEET_ID, fetch_sheet_data, PAYMENTS_SHEET_ID, credentials_path)
     record_step("fetch_payments")
-    exceptions = fetch_exceptions(PAYMENTS_SHEET_ID, credentials_path)
+    exceptions = get_cached_data(
+            "exceptions_dict", PAYMENTS_SHEET_ID, fetch_exceptions,
+            PAYMENTS_SHEET_ID, credentials_path,
+            serialize=lambda d: [[list(k), v] for k, v in d.items()],
+            deserialize=lambda c: {tuple(k): v for k, v in c},
+        )
     record_step("fetch_exceptions")
 
     # Adapt junior tuple format (name, tier, {month: (fee, total_count, adult_count, junior_count)}) 
@@ -330,7 +376,7 @@ def reconcile_juniors_view():
     record_step("reconcile")
     
     # Format month labels
-    month_labels = get_month_labels(sorted_months)
+    month_labels = get_month_labels(sorted_months, JUNIOR_MERGED_MONTHS)
     
     # Filter to juniors for the main table
     junior_names = sorted([name for name, tier, _ in adapted_members])
@@ -338,7 +384,8 @@ def reconcile_juniors_view():
     formatted_results = []
     for name in junior_names:
         data = result["members"][name]
-        row = {"name": name, "months": [], "balance": data["total_balance"]}
+        row = {"name": name, "months": [], "balance": data["total_balance"], "unpaid_periods": ""}
+        unpaid_months = []
         for m in sorted_months:
             mdata = data["months"].get(m, {"expected": 0, "original_expected": 0, "paid": 0})
             expected = mdata["expected"]
@@ -359,10 +406,12 @@ def reconcile_juniors_view():
                     status = "partial"
                     cell_text = f"{paid}/{expected}"
                     amount_to_pay = expected - paid
+                    unpaid_months.append(month_labels[m])
                 else:
                     status = "unpaid"
                     cell_text = f"UNPAID {expected}"
                     amount_to_pay = expected
+                    unpaid_months.append(month_labels[m])
             elif paid > 0:
                 status = "surplus"
                 cell_text = f"PAID {paid}"
@@ -374,13 +423,13 @@ def reconcile_juniors_view():
                 "month": month_labels[m]
             })
             
+        row["unpaid_periods"] = ", ".join(unpaid_months) if unpaid_months else ("Older debt" if data["total_balance"] < 0 else "")
         row["balance"] = data["total_balance"]
         formatted_results.append(row)
         
     # Format credits and debts
     credits = sorted([{"name": n, "amount": a["total_balance"]} for n, a in result["members"].items() if a["total_balance"] > 0], key=lambda x: x["name"])
     debts = sorted([{"name": n, "amount": abs(a["total_balance"])} for n, a in result["members"].items() if a["total_balance"] < 0], key=lambda x: x["name"])
-    unmatched = result["unmatched"]
     import json
 
     record_step("process_data")
@@ -394,7 +443,7 @@ def reconcile_juniors_view():
         month_labels_json=json.dumps(month_labels),
         credits=credits,
         debts=debts,
-        unmatched=unmatched,
+        unmatched=[],
         attendance_url=attendance_url,
         payments_url=payments_url,
         bank_account=BANK_ACCOUNT
@@ -404,9 +453,9 @@ def reconcile_juniors_view():
 def payments():
     attendance_url = f"https://docs.google.com/spreadsheets/d/{ATTENDANCE_SHEET_ID}/edit"
     payments_url = f"https://docs.google.com/spreadsheets/d/{PAYMENTS_SHEET_ID}/edit"
-    credentials_path = ".secret/fuj-management-bot-credentials.json"
+    credentials_path = CREDENTIALS_PATH
     
-    transactions = fetch_sheet_data(PAYMENTS_SHEET_ID, credentials_path)
+    transactions = get_cached_data("payments_transactions", PAYMENTS_SHEET_ID, fetch_sheet_data, PAYMENTS_SHEET_ID, credentials_path)
     record_step("fetch_payments")
     
     # Group transactions by person
@@ -446,6 +495,10 @@ def qr_code():
     amount = request.args.get("amount", "0")
     message = request.args.get("message", "")
 
+    # Validate account: allow IBAN (letters+digits) or Czech format (digits/digits)
+    if not re.match(r'^[A-Z]{2}\d{2,34}$|^\d{1,16}/\d{4}$', account):
+        account = BANK_ACCOUNT
+
     # QR Platba standard: SPD*1.0*ACC:accountNumber*BC:bankCode*AM:amount*CC:CZK*MSG:message
     acc_parts = account.split('/')
     if len(acc_parts) == 2:
@@ -455,12 +508,14 @@ def qr_code():
 
     try:
         amt_val = float(amount)
+        if amt_val < 0 or amt_val > 10_000_000:
+            amt_val = 0
         amt_str = f"{amt_val:.2f}"
     except ValueError:
         amt_str = "0.00"
 
-    # Message max 60 characters
+    # Message max 60 characters, strip SPD delimiters to prevent injection
-    msg_str = message[:60]
+    msg_str = message[:60].replace("*", "")
     
     qr_data = f"SPD*1.0*ACC:{acc_str}*AM:{amt_str}*CC:CZK*MSG:{msg_str}"
     

build/Dockerfile

@@ -14,7 +14,8 @@ RUN pip install --no-cache-dir \
     google-auth-httplib2 \
     google-auth-oauthlib \
     qrcode \
-    pillow
+    pillow \
+    gunicorn
 
 COPY app.py Makefile ./
 COPY scripts/ ./scripts/

build/entrypoint.sh

@@ -1,8 +1,11 @@
 #!/bin/bash
 set -euo pipefail
 
-echo "[entrypoint] Starting Flask app on port 5001..."
+echo "[entrypoint] Starting gunicorn on port 5001..."
 
-# Running the app directly via python
+exec gunicorn \
-# For a production setup, we would ideally use gunicorn/waitress, but sticking to what's in app.py for now.
+    --bind 0.0.0.0:5001 \
-exec python3 /app/app.py
+    --workers "${GUNICORN_WORKERS:-2}" \
+    --timeout "${GUNICORN_TIMEOUT:-120}" \
+    --access-logfile - \
+    app:app

prompts/outcomes/2026-03-10-cache-data-from-google-sheets.md

@@ -0,0 +1,29 @@
+# Google Sheets Data Caching Implementation
+
+**Date:** 2026-03-11
+**Objective:** Optimize Flask application performance by heavily caching expensive Google Sheets data processing, avoiding redundant HTTP roundtrips to Google APIs, and ensuring rate limits are not exhausted during simple web app reloads.
+
+## Implemented Features
+
+### 1. File-Based JSON Caching (`cache_utils.py`)
+- **Mechanism:** Implemented a new generic caching system that saves API responses and heavily calculated datasets as `.json` files directly to the local `/tmp/` directory.
+- **Drive Metadata Checks:** The cache is validated by asking the Google Drive API (`drive.files().get`) for the remote `modifiedTime` of the target Sheet.
+- **Cache Hit logic:** If the cached version on disk matches the remote `modifiedTime`, the application skips downloading the full CSV payload and computing tuples—instead serving the instant static cache via `json.load`.
+
+### 2. Global API Auth Object Reuse
+- **The Problem:** The `_get_drive_service()` and `get_sheets_service()` implementations were completely rebuilding `googleapiclient.discovery` objects for *every single file check*—re-seeking and exchanging Google Service Account tokens constantly. 
+- **The Fix:** Service objects (`_DRIVE_SERVICE`, `_SHEETS_SERVICE`) are now globally cached in application memory. The server authenticates exactly *once* when it wakes up, dramatically saving milliseconds and network resources across every web request. The underlying `httplib2` and `google-auth` intelligently handle silent token refreshes natively.
+
+### 3. Graceful Configurable Rate Limiting 
+- **In-Memory Debouncing:** Implemented an internal memory state (`_LAST_CHECKED`) inside `cache_utils` that forcefully prevents checking the Drive API `modifiedTime` for a specific file if we already explicitly checked it within the last 5 minutes. This prevents flooding the Google Drive API while clicking wildly around the app GUI. 
+- **Semantic Mappings:** Created a `CACHE_SHEET_MAP` that maps friendly internal cache keys (e.g. `attendance_regular`) back to their raw 44-character Google Sheet IDs.
+
+### 4. HTTP / Socket Timeout Safety Fix
+- **The Bug:** Originally, `socket.setdefaulttimeout(10)` was used to prevent Google Drive metadata checks from locking up the worker pool. However, this brutally mutated the underlying Werkzeug/Flask default sockets globally. If fetching thousands of lines from Google *Sheets* (the payload logic) took longer than 10 seconds, Flask would just kill the request with a random `TimeoutError('timed out')`. 
+- **The Fix:** Removed the global mutation. Instantiated a targeted, isolated `httplib2.Http(timeout=10)` injected *specifically* into only the Google Drive API build. The rest of the app can now download massive files without randomly timing out.
+
+### 5. Developer Experience (DX) Enhancements
+- **Logging Line Origins:** Enriched the console logging format strings (`logging.basicConfig`) to output `[%(funcName)s]` and `%(filename)s:%(lineno)d` to easily trace exactly which exact file and function is executing on complex stack traces.
+- **Improved VS Code Local Debugging:**
+  - Integrated `debugpy` launch profiles in `.vscode/launch.json` for "Python Debugger: Flask" (Launching) and "Python Debugger: Attach" (Connecting).
+  - Implemented a standard `make web-attach` target inside the Makefile via `uv run python -m debugpy --listen ...` to allow the background web app to automatically halt and wait for external debuggers before bootstrapping caching layers.

pyproject.toml

@@ -8,8 +8,15 @@ dependencies = [
     "google-auth-httplib2>=0.2.0",
     "google-auth-oauthlib>=1.2.1",
     "qrcode[pil]>=8.0",
+    "gunicorn>=23.0",
 ]
 requires-python = ">=3.13"
 
+[dependency-groups]
+dev = [
+    "pytest>=8.0",
+    "pytest-cov>=6.0",
+]
+
 [tool.uv]
 package = false

scripts/attendance.py

@@ -5,8 +5,8 @@ import io
 import urllib.request
 from datetime import datetime
 
-SHEET_ID = "1E2e_gT_K5AwSRCDLDTa2UetZTkHmBOcz0kFbBUNUNBA"
+from config import ATTENDANCE_SHEET_ID as SHEET_ID, JUNIOR_SHEET_GID
-JUNIOR_SHEET_GID = "1213318614"
+
 EXPORT_URL = f"https://docs.google.com/spreadsheets/d/{SHEET_ID}/export?format=csv&gid=0"
 JUNIOR_EXPORT_URL = f"https://docs.google.com/spreadsheets/d/{SHEET_ID}/export?format=csv&gid={JUNIOR_SHEET_GID}"
 
@@ -17,7 +17,12 @@ JUNIOR_FEE_DEFAULT = 500  # CZK for 2+ practices
 JUNIOR_MONTHLY_RATE = {
     "2025-09": 250
 }
-MERGED_MONTHS = {
+ADULT_MERGED_MONTHS = {
+    #"2025-12": "2026-01",   # keys are merged into values
+    #"2025-09": "2025-10"
+}
+
+JUNIOR_MERGED_MONTHS = {
     "2025-12": "2026-01",   # keys are merged into values
     "2025-09": "2025-10"
 }
@@ -29,13 +34,8 @@ FIRST_DATE_COL = 3
 
 def fetch_csv(url: str = EXPORT_URL) -> list[list[str]]:
     """Fetch the attendance Google Sheet as parsed CSV rows."""
-    import ssl
-    ctx = ssl.create_default_context()
-    ctx.check_hostname = False
-    ctx.verify_mode = ssl.CERT_NONE
-    
     req = urllib.request.Request(url)
-    with urllib.request.urlopen(req, context=ctx) as resp:
+    with urllib.request.urlopen(req) as resp:
         text = resp.read().decode("utf-8")
     reader = csv.reader(io.StringIO(text))
     return list(reader)
@@ -65,13 +65,13 @@ def parse_dates(header_row: list[str]) -> list[tuple[int, datetime]]:
     return dates
 
 
-def group_by_month(dates: list[tuple[int, datetime]]) -> dict[str, list[int]]:
+def group_by_month(dates: list[tuple[int, datetime]], merged_months: dict[str, str]) -> dict[str, list[int]]:
     """Group column indices by YYYY-MM, handling merged months."""
     months: dict[str, list[int]] = {}
     for col, dt in dates:
         key = dt.strftime("%Y-%m")
         # Apply merged month mapping if configured
-        target_key = MERGED_MONTHS.get(key, key)
+        target_key = merged_months.get(key, key)
         months.setdefault(target_key, []).append(col)
     return months
 
@@ -172,7 +172,7 @@ def get_members_with_fees() -> tuple[list[tuple[str, str, dict[str, int]]], list
     if not dates:
         return [], []
 
-    months = group_by_month(dates)
+    months = group_by_month(dates, ADULT_MERGED_MONTHS)
     sorted_months = sorted(months.keys())
     members_raw = get_members(rows)
 
@@ -211,8 +211,8 @@ def get_junior_members_with_fees() -> tuple[list[tuple[str, str, dict[str, tuple
     main_dates = parse_dates(main_rows[0])
     junior_dates = parse_dates(junior_rows[0])
     
-    main_months = group_by_month(main_dates)
+    main_months = group_by_month(main_dates, JUNIOR_MERGED_MONTHS)
-    junior_months = group_by_month(junior_dates)
+    junior_months = group_by_month(junior_dates, JUNIOR_MERGED_MONTHS)
     
     # Collect all unique sorted months
     all_months = set(main_months.keys()).union(set(junior_months.keys()))

scripts/cache_utils.py

@@ -0,0 +1,157 @@
+import json
+import socket
+import logging
+from datetime import datetime
+from google.oauth2 import service_account
+from googleapiclient.discovery import build
+
+from config import (
+    CACHE_DIR, CREDENTIALS_PATH as CREDS_PATH, DRIVE_TIMEOUT,
+    CACHE_TTL_SECONDS, CACHE_API_CHECK_TTL_SECONDS, CACHE_SHEET_MAP,
+)
+
+logger = logging.getLogger(__name__)
+
+# Global state to track last Drive API check time per sheet
+_LAST_CHECKED = {}
+_DRIVE_SERVICE = None
+
+def _get_drive_service():
+    global _DRIVE_SERVICE
+    if _DRIVE_SERVICE is not None:
+        return _DRIVE_SERVICE
+
+    if not CREDS_PATH.exists():
+        logger.warning(f"Credentials not found at {CREDS_PATH}. Cannot check Google Drive API.")
+        return None
+        
+    try:
+        creds = service_account.Credentials.from_service_account_file(
+            str(CREDS_PATH), 
+            scopes=["https://www.googleapis.com/auth/drive.readonly"]
+        )
+        
+        # Apply timeout safely to the httplib2 connection without mutating global socket
+        import httplib2
+        import google_auth_httplib2
+        http = httplib2.Http(timeout=DRIVE_TIMEOUT)
+        http = google_auth_httplib2.AuthorizedHttp(creds, http=http)
+        
+        _DRIVE_SERVICE = build("drive", "v3", http=http, cache_discovery=False)
+        return _DRIVE_SERVICE
+    except Exception as e:
+        logger.error(f"Failed to build Drive API service: {e}")
+        return None
+
+import time
+
+def get_sheet_modified_time(cache_key: str) -> str | None:
+    """Gets the modifiedTime from Google Drive API for a given cache_key.
+    Returns the ISO timestamp string if successful.
+    If the Drive API fails (e.g., lack of permissions for public sheets),
+    it generates a virtual time bucket string to provide a 5-minute TTL cache.
+    """
+    sheet_id = CACHE_SHEET_MAP.get(cache_key, cache_key)
+    
+    cache_file = CACHE_DIR / f"{cache_key}_cache.json"
+    
+    # 1. Check if we should skip the Drive API check entirely (global memory TTL)
+    now = time.time()
+    last_check = _LAST_CHECKED.get(sheet_id, 0)
+    
+    if CACHE_API_CHECK_TTL_SECONDS > 0 and (now - last_check) < CACHE_API_CHECK_TTL_SECONDS:
+        # We checked recently. Return cached modifiedTime if cache file exists.
+        if cache_file.exists():
+            try:
+                with open(cache_file, "r", encoding="utf-8") as f:
+                    cache_data = json.load(f)
+                    cached_time = cache_data.get("modifiedTime")
+                    if cached_time:
+                        logger.info(f"Skipping Drive API check for {sheet_id} due to {CACHE_API_CHECK_TTL_SECONDS}s API check TTL")
+                        return cached_time
+            except Exception as e:
+                logger.warning(f"Error reading existing cache during API skip for {sheet_id}: {e}")
+                
+    # 2. Check if the cache file is simply too new (legacy check)
+    if CACHE_TTL_SECONDS > 0 and cache_file.exists():
+        try:
+            file_mtime = cache_file.stat().st_mtime
+            if time.time() - file_mtime < CACHE_TTL_SECONDS:
+                with open(cache_file, "r", encoding="utf-8") as f:
+                    cache_data = json.load(f)
+                    cached_time = cache_data.get("modifiedTime")
+                    if cached_time:
+                        logger.info(f"Skipping Drive API check for {sheet_id} due to {CACHE_TTL_SECONDS}s max CACHE_TTL")
+                        # We consider this a valid check, update the global state
+                        _LAST_CHECKED[sheet_id] = now
+                        return cached_time
+        except Exception as e:
+            logger.warning(f"Error checking cache TTL for {sheet_id}: {e}")
+
+    def _fallback_ttl():
+        bucket = int(time.time() // 300)
+        return f"ttl-5m-{bucket}"
+
+    logger.info(f"Checking Drive API for {sheet_id}")
+    drive_service = _get_drive_service()
+    if not drive_service:
+        return _fallback_ttl()
+        
+    try:
+        file_meta = drive_service.files().get(fileId=sheet_id, fields="modifiedTime", supportsAllDrives=True).execute()
+        # Successfully checked API, update the global state
+        _LAST_CHECKED[sheet_id] = time.time()
+        return file_meta.get("modifiedTime")
+    except Exception as e:
+        logger.warning(f"Could not get modifiedTime for sheet {sheet_id}: {e}. Falling back to 5-minute TTL.")
+        return _fallback_ttl()
+
+def read_cache(sheet_id: str, current_modified_time: str) -> list | dict | None:
+    """Reads the JSON cache for the given sheet_id.
+    Returns the cached data if it exists AND the cached modifiedTime matches
+    current_modified_time.
+    Otherwise, returns None.
+    """
+    if not current_modified_time:
+        return None
+        
+    cache_file = CACHE_DIR / f"{sheet_id}_cache.json"
+    if not cache_file.exists():
+        return None
+        
+    try:
+        with open(cache_file, "r", encoding="utf-8") as f:
+            cache_data = json.load(f)
+            
+        cached_time = cache_data.get("modifiedTime")
+        if cached_time == current_modified_time:
+            logger.info(f"Cache hit for {sheet_id} ({current_modified_time})")
+            return cache_data.get("data")
+        else:
+            logger.info(f"Cache miss for {sheet_id}. Cached: {cached_time}, Current: {current_modified_time}")
+            return None
+    except Exception as e:
+        logger.error(f"Failed to read cache {cache_file}: {e}")
+        return None
+
+def write_cache(sheet_id: str, modified_time: str, data: list | dict) -> None:
+    """Writes the data to a JSON cache file with the given modified_time."""
+    if not modified_time:
+        return
+        
+    try:
+        CACHE_DIR.mkdir(parents=True, exist_ok=True)
+        cache_file = CACHE_DIR / f"{sheet_id}_cache.json"
+        
+        cache_data = {
+            "modifiedTime": modified_time,
+            "data": data,
+            "cachedAt": datetime.now().isoformat()
+        }
+        
+        with open(cache_file, "w", encoding="utf-8") as f:
+            json.dump(cache_data, f, ensure_ascii=False)
+            
+        logger.info(f"Wrote cache for {sheet_id}")
+    except Exception as e:
+        logger.error(f"Failed to write cache {sheet_id}: {e}")

scripts/config.py

@@ -0,0 +1,39 @@
+"""Centralized configuration for FUJ management scripts.
+
+External service IDs, credentials, and tunable parameters.
+Domain-specific constants (fees, column indices) stay in their respective modules.
+"""
+
+import os
+from pathlib import Path
+
+# Paths
+PROJECT_ROOT = Path(__file__).parent.parent
+CREDENTIALS_PATH = Path(os.environ.get(
+    "CREDENTIALS_PATH",
+    str(PROJECT_ROOT / ".secret" / "fuj-management-bot-credentials.json"),
+))
+
+# Google Sheets IDs
+ATTENDANCE_SHEET_ID = "1E2e_gT_K5AwSRCDLDTa2UetZTkHmBOcz0kFbBUNUNBA"
+PAYMENTS_SHEET_ID = "1Om0YPoDVCH5cV8BrNz5LG5eR5MMU05ypQC7UMN1xn_Y"
+
+# Attendance sheet tab GIDs
+JUNIOR_SHEET_GID = "1213318614"
+
+# Bank
+BANK_ACCOUNT = os.environ.get("BANK_ACCOUNT", "CZ8520100000002800359168")
+
+# Cache settings
+CACHE_DIR = PROJECT_ROOT / "tmp"
+DRIVE_TIMEOUT = 10  # seconds
+CACHE_TTL_SECONDS = int(os.environ.get("CACHE_TTL_SECONDS", 300))  # 5 min default
+CACHE_API_CHECK_TTL_SECONDS = int(os.environ.get("CACHE_API_CHECK_TTL_SECONDS", 300))  # 5 min default
+
+# Maps cache keys to their source sheet IDs (used by cache_utils)
+CACHE_SHEET_MAP = {
+    "attendance_regular": ATTENDANCE_SHEET_ID,
+    "attendance_juniors": ATTENDANCE_SHEET_ID,
+    "exceptions_dict": PAYMENTS_SHEET_ID,
+    "payments_transactions": PAYMENTS_SHEET_ID,
+}

scripts/infer_payments.py

@@ -102,7 +102,7 @@ def infer_payments(spreadsheet_id: str, credentials_path: str, dry_run: bool = F
     member_names = [m[0] for m in members_data]
 
     # 3. Process rows
-    print("Inffering details for empty rows...")
+    print("Inferring details for empty rows...")
     updates = []
     
     for i, row in enumerate(rows[1:], start=2):

scripts/match_payments.py

@@ -3,12 +3,15 @@
 
 import argparse
 import json
+import logging
 import os
 import re
 import urllib.request
 from datetime import datetime, timedelta
 from html.parser import HTMLParser
 
+logger = logging.getLogger(__name__)
+
 from attendance import get_members_with_fees
 from czech_utils import normalize, parse_month_references
 from sync_fio_to_sheets import get_sheets_service, DEFAULT_SPREADSHEET_ID
@@ -212,6 +215,11 @@ def fetch_sheet_data(spreadsheet_id: str, credentials_path: str) -> list[dict]:
     idx_message = get_col_index("Message")
     idx_bank_id = get_col_index("Bank ID")
 
+    required = {"Date": idx_date, "Amount": idx_amount, "Person": idx_person, "Purpose": idx_purpose}
+    missing = [name for name, idx in required.items() if idx == -1]
+    if missing:
+        raise ValueError(f"Required columns missing from payments sheet: {', '.join(missing)}. Found headers: {header}")
+
     transactions = []
     for row in rows[1:]:
         def get_val(idx):
@@ -290,16 +298,18 @@ def reconcile(
 
     # Initialize ledger
     ledger: dict[str, dict[str, dict]] = {}
+    other_ledger: dict[str, list] = {}
     exceptions = exceptions or {}
     for name in member_names:
         ledger[name] = {}
+        other_ledger[name] = []
         for m in sorted_months:
             # Robust normalization for lookup
             norm_name = normalize(name)
             norm_period = normalize(m)
             fee_data = member_fees[name].get(m, (0, 0))
-            original_expected = fee_data[0] if isinstance(fee_data, tuple) else fee_data
+            original_expected = fee_data[0] if isinstance(fee_data, (tuple, list)) else fee_data
-            attendance_count = fee_data[1] if isinstance(fee_data, tuple) else 0
+            attendance_count = fee_data[1] if isinstance(fee_data, (tuple, list)) else 0
             
             ex_data = exceptions.get((norm_name, norm_period))
             if ex_data is not None:
@@ -328,12 +338,13 @@ def reconcile(
         
         # Strip markers like [?]
         person_str = re.sub(r"\[\?\]\s*", "", person_str)
+        is_other = purpose_str.lower().startswith("other:")
 
         if person_str and purpose_str:
             # We have pre-matched data (either from script or manual)
             # Support multiple people/months in the comma-separated string
             matched_members = [(p.strip(), "auto") for p in person_str.split(",") if p.strip()]
-            matched_months = [m.strip() for m in purpose_str.split(",") if m.strip()]
+            matched_months = [purpose_str] if is_other else [m.strip() for m in purpose_str.split(",") if m.strip()]
             
             # Use Inferred Amount if available, otherwise bank Amount
             amount = tx.get("inferred_amount")
@@ -359,16 +370,32 @@ def reconcile(
             continue
 
         # Allocate payment across matched members and months
+        if is_other:
+            num_allocations = len(matched_members)
+            per_allocation = amount / num_allocations if num_allocations > 0 else 0
+            for member_name, confidence in matched_members:
+                if member_name in other_ledger:
+                    other_ledger[member_name].append({
+                        "amount": per_allocation,
+                        "date": tx["date"],
+                        "sender": tx["sender"],
+                        "message": tx["message"],
+                        "purpose": purpose_str,
+                        "confidence": confidence,
+                    })
+            continue
+
         num_allocations = len(matched_members) * len(matched_months)
         per_allocation = amount / num_allocations if num_allocations > 0 else 0
 
         for member_name, confidence in matched_members:
-            # If we matched via sheet 'Person' column, name might be partial or have markers
-            # but usually it's the exact member name from get_members_with_fees.
-            # Let's ensure it exists in our ledger.
             if member_name not in ledger:
-                # Try matching by base name if it was Jan Novak (Kačerr) etc.
+                logger.warning(
-                pass
+                    "Payment matched to unknown member %r (tx: %s, %s) — adding to unmatched",
+                    member_name, tx.get("date", "?"), tx.get("message", "?"),
+                )
+                unmatched.append(tx)
+                continue
 
             for month_key in matched_months:
                 entry = {
@@ -378,7 +405,7 @@ def reconcile(
                     "message": tx["message"],
                     "confidence": confidence,
                 }
-                if month_key in ledger.get(member_name, {}):
+                if month_key in ledger[member_name]:
                     ledger[member_name][month_key]["paid"] += per_allocation
                     ledger[member_name][month_key]["transactions"].append(entry)
                 else:
@@ -399,6 +426,7 @@ def reconcile(
             name: {
                 "tier": member_tiers[name],
                 "months": ledger[name],
+                "other_transactions": other_ledger[name],
                 "total_balance": final_balances[name]
             }
             for name in member_names

scripts/sync_fio_to_sheets.py

@@ -14,13 +14,18 @@ from googleapiclient.discovery import build
 
 from fio_utils import fetch_transactions
 
-# Configuration
+from config import PAYMENTS_SHEET_ID as DEFAULT_SPREADSHEET_ID
-DEFAULT_SPREADSHEET_ID = "1Om0YPoDVCH5cV8BrNz5LG5eR5MMU05ypQC7UMN1xn_Y"
 SCOPES = ["https://www.googleapis.com/auth/spreadsheets"]
 TOKEN_FILE = "token.pickle"
 COLUMN_LABELS = ["Date", "Amount", "manual fix", "Person", "Purpose", "Inferred Amount", "Sender", "VS", "Message", "Bank ID", "Sync ID"]
+_SHEETS_SERVICE = None
+
 def get_sheets_service(credentials_path: str):
     """Authenticate and return the Google Sheets API service."""
+    global _SHEETS_SERVICE
+    if _SHEETS_SERVICE is not None:
+        return _SHEETS_SERVICE
+
     if not os.path.exists(credentials_path):
         raise FileNotFoundError(f"Credentials file not found: {credentials_path}")
 
@@ -50,7 +55,8 @@ def get_sheets_service(credentials_path: str):
             with open(TOKEN_FILE, "wb") as token:
                 pickle.dump(creds, token)
 
-    return build("sheets", "v4", credentials=creds)
+    _SHEETS_SERVICE = build("sheets", "v4", credentials=creds)
+    return _SHEETS_SERVICE
 
 
 def generate_sync_id(tx: dict) -> str:

templates/fees-juniors.html

@@ -155,10 +155,10 @@
 
 <body>
     <div class="nav">
-        <a href="/fees">[Attendance/Fees]</a>
+        <a href="/fees">[Adult - Attendance/Fees]</a>
-        <a href="/fees-juniors" class="active">[Junior Fees]</a>
+        <a href="/fees-juniors" class="active">[Junior Attendance/Fees]</a>
-        <a href="/reconcile">[Payment Reconciliation]</a>
+        <a href="/reconcile">[Adult Payment Reconciliation]</a>
-        <a href="/reconcile-juniors">[Junior Reconciliation]</a>
+        <a href="/reconcile-juniors">[Junior Payment Reconciliation]</a>
         <a href="/payments">[Payments Ledger]</a>
     </div>
 

templates/fees.html

@@ -170,10 +170,10 @@
 
 <body>
     <div class="nav">
-        <a href="/fees" class="active">[Attendance/Fees]</a>
+        <a href="/fees" class="active">[Adult - Attendance/Fees]</a>
-        <a href="/fees-juniors">[Junior Fees]</a>
+        <a href="/fees-juniors">[Junior Attendance/Fees]</a>
-        <a href="/reconcile">[Payment Reconciliation]</a>
+        <a href="/reconcile">[Adult Payment Reconciliation]</a>
-        <a href="/reconcile-juniors">[Junior Reconciliation]</a>
+        <a href="/reconcile-juniors">[Junior Payment Reconciliation]</a>
         <a href="/payments">[Payments Ledger]</a>
     </div>
 

templates/payments.html

@@ -159,10 +159,10 @@
 
 <body>
     <div class="nav">
-        <a href="/fees">[Attendance/Fees]</a>
+        <a href="/fees">[Adult - Attendance/Fees]</a>
-        <a href="/fees-juniors">[Junior Fees]</a>
+        <a href="/fees-juniors">[Junior Attendance/Fees]</a>
-        <a href="/reconcile">[Payment Reconciliation]</a>
+        <a href="/reconcile">[Adult Payment Reconciliation]</a>
-        <a href="/reconcile-juniors">[Junior Reconciliation]</a>
+        <a href="/reconcile-juniors">[Junior Payment Reconciliation]</a>
         <a href="/payments" class="active">[Payments Ledger]</a>
     </div>
 

templates/reconcile-juniors.html

@@ -423,10 +423,10 @@
 
 <body>
     <div class="nav">
-        <a href="/fees">[Attendance/Fees]</a>
+        <a href="/fees">[Adult - Attendance/Fees]</a>
-        <a href="/fees-juniors">[Junior Fees]</a>
+        <a href="/fees-juniors">[Junior Attendance/Fees]</a>
-        <a href="/reconcile">[Payment Reconciliation]</a>
+        <a href="/reconcile">[Adult Payment Reconciliation]</a>
-        <a href="/reconcile-juniors" class="active">[Junior Reconciliation]</a>
+        <a href="/reconcile-juniors" class="active">[Junior Payment Reconciliation]</a>
         <a href="/payments">[Payments Ledger]</a>
     </div>
 
@@ -471,8 +471,12 @@
                         {% endif %}
                     </td>
                     {% endfor %}
-                    <td class="{% if row.balance > 0 %}balance-pos{% elif row.balance < 0 %}balance-neg{% endif %}">
+                    <td class="{% if row.balance > 0 %}balance-pos{% elif row.balance < 0 %}balance-neg{% endif %}" style="position: relative;">
                         {{ "%+d"|format(row.balance) if row.balance != 0 else "0" }}
+                        {% if row.balance < 0 %}
+                        <button class="pay-btn"
+                            onclick="showPayQR('{{ row.name|e }}', {{ -row.balance }}, '{{ row.unpaid_periods|e }}')">Pay All</button>
+                        {% endif %}
                     </td>
                 </tr>
                 {% endfor %}
@@ -576,6 +580,13 @@
                 </div>
             </div>
 
+            <div class="modal-section" id="modalOtherSection" style="display: none;">
+                <div class="modal-section-title">Other Transactions</div>
+                <div id="modalOtherList" class="tx-list">
+                    <!-- Filled by JS -->
+                </div>
+            </div>
+
             <div class="modal-section">
                 <div class="modal-section-title">Payment History</div>
                 <div id="modalTxList" class="tx-list">
@@ -684,6 +695,30 @@
                 exSection.style.display = 'none';
             }
 
+            const otherList = document.getElementById('modalOtherList');
+            const otherSection = document.getElementById('modalOtherSection');
+            otherList.innerHTML = '';
+
+            if (data.other_transactions && data.other_transactions.length > 0) {
+                otherSection.style.display = 'block';
+                data.other_transactions.forEach(tx => {
+                    const displayPurpose = tx.purpose || 'Other';
+                    const item = document.createElement('div');
+                    item.className = 'tx-item';
+                    item.innerHTML = `
+                        <div class="tx-meta">${tx.date} | ${displayPurpose}</div>
+                        <div class="tx-main">
+                            <span class="tx-amount" style="color: #66ccff;">${tx.amount} CZK</span>
+                            <span class="tx-sender">${tx.sender}</span>
+                        </div>
+                        <div class="tx-msg">${tx.message || ''}</div>
+                    `;
+                    otherList.appendChild(item);
+                });
+            } else {
+                otherSection.style.display = 'none';
+            }
+
             const txList = document.getElementById('modalTxList');
             txList.innerHTML = '';
 

templates/reconcile.html

@@ -423,10 +423,10 @@
 
 <body>
     <div class="nav">
-        <a href="/fees">[Attendance/Fees]</a>
+        <a href="/fees">[Adult - Attendance/Fees]</a>
-        <a href="/fees-juniors">[Junior Fees]</a>
+        <a href="/fees-juniors">[Junior Attendance/Fees]</a>
-        <a href="/reconcile" class="active">[Payment Reconciliation]</a>
+        <a href="/reconcile" class="active">[Adult Payment Reconciliation]</a>
-        <a href="/reconcile-juniors">[Junior Reconciliation]</a>
+        <a href="/reconcile-juniors">[Junior Payment Reconciliation]</a>
         <a href="/payments">[Payments Ledger]</a>
     </div>
 
@@ -471,8 +471,12 @@
                         {% endif %}
                     </td>
                     {% endfor %}
-                    <td class="{% if row.balance > 0 %}balance-pos{% elif row.balance < 0 %}balance-neg{% endif %}">
+                    <td class="{% if row.balance > 0 %}balance-pos{% elif row.balance < 0 %}balance-neg{% endif %}" style="position: relative;">
                         {{ "%+d"|format(row.balance) if row.balance != 0 else "0" }}
+                        {% if row.balance < 0 %}
+                        <button class="pay-btn"
+                            onclick="showPayQR('{{ row.name|e }}', {{ -row.balance }}, '{{ row.unpaid_periods|e }}')">Pay All</button>
+                        {% endif %}
                     </td>
                 </tr>
                 {% endfor %}
@@ -576,6 +580,13 @@
                 </div>
             </div>
 
+            <div class="modal-section" id="modalOtherSection" style="display: none;">
+                <div class="modal-section-title">Other Transactions</div>
+                <div id="modalOtherList" class="tx-list">
+                    <!-- Filled by JS -->
+                </div>
+            </div>
+
             <div class="modal-section">
                 <div class="modal-section-title">Payment History</div>
                 <div id="modalTxList" class="tx-list">
@@ -684,6 +695,30 @@
                 exSection.style.display = 'none';
             }
 
+            const otherList = document.getElementById('modalOtherList');
+            const otherSection = document.getElementById('modalOtherSection');
+            otherList.innerHTML = '';
+
+            if (data.other_transactions && data.other_transactions.length > 0) {
+                otherSection.style.display = 'block';
+                data.other_transactions.forEach(tx => {
+                    const displayPurpose = tx.purpose || 'Other';
+                    const item = document.createElement('div');
+                    item.className = 'tx-item';
+                    item.innerHTML = `
+                        <div class="tx-meta">${tx.date} | ${displayPurpose}</div>
+                        <div class="tx-main">
+                            <span class="tx-amount" style="color: #66ccff;">${tx.amount} CZK</span>
+                            <span class="tx-sender">${tx.sender}</span>
+                        </div>
+                        <div class="tx-msg">${tx.message || ''}</div>
+                    `;
+                    otherList.appendChild(item);
+                });
+            } else {
+                otherSection.style.display = 'none';
+            }
+
             const txList = document.getElementById('modalTxList');
             txList.innerHTML = '';
 

tests/test_app.py

@@ -1,24 +1,29 @@
 import unittest
-from unittest.mock import patch, MagicMock
+from unittest.mock import patch
 from app import app
 
+
+def _bypass_cache(cache_key, sheet_id, fetch_func, *args, serialize=None, deserialize=None, **kwargs):
+    """Test helper: call fetch_func directly, bypassing the cache layer."""
+    return fetch_func(*args, **kwargs)
+
+
 class TestWebApp(unittest.TestCase):
     def setUp(self):
-        # Configure app for testing
         app.config['TESTING'] = True
         self.client = app.test_client()
 
-    @patch('app.get_members_with_fees')
+    def test_index_page(self):
-    def test_index_page(self, mock_get_members):
         """Test that / returns the refresh meta tag"""
         response = self.client.get('/')
         self.assertEqual(response.status_code, 200)
         self.assertIn(b'url=/fees', response.data)
 
+    @patch('app.get_cached_data', side_effect=_bypass_cache)
     @patch('app.get_members_with_fees')
-    def test_fees_route(self, mock_get_members):
+    @patch('app.fetch_exceptions', return_value={})
+    def test_fees_route(self, mock_exceptions, mock_get_members, mock_cache):
         """Test that /fees returns 200 and renders the dashboard"""
-        # Mock attendance data
         mock_get_members.return_value = (
             [('Test Member', 'A', {'2026-01': (750, 4)})],
             ['2026-01']
@@ -29,10 +34,11 @@ class TestWebApp(unittest.TestCase):
         self.assertIn(b'FUJ Fees Dashboard', response.data)
         self.assertIn(b'Test Member', response.data)
 
+    @patch('app.get_cached_data', side_effect=_bypass_cache)
     @patch('app.get_junior_members_with_fees')
-    def test_fees_juniors_route(self, mock_get_junior_members):
+    @patch('app.fetch_exceptions', return_value={})
+    def test_fees_juniors_route(self, mock_exceptions, mock_get_junior_members, mock_cache):
         """Test that /fees-juniors returns 200 and renders the junior dashboard"""
-        # Mock attendance data: one with string symbol '?', one with integer
         mock_get_junior_members.return_value = (
             [
                 ('Test Junior 1', 'J', {'2026-01': ('?', 1, 0, 1)}),
@@ -48,16 +54,16 @@ class TestWebApp(unittest.TestCase):
         self.assertIn(b'? / 1 (J)', response.data)
         self.assertIn(b'500 CZK / 4 (1A+3J)', response.data)
 
+    @patch('app.get_cached_data', side_effect=_bypass_cache)
     @patch('app.fetch_sheet_data')
+    @patch('app.fetch_exceptions', return_value={})
     @patch('app.get_members_with_fees')
-    def test_reconcile_route(self, mock_get_members, mock_fetch_sheet):
+    def test_reconcile_route(self, mock_get_members, mock_exceptions, mock_fetch_sheet, mock_cache):
         """Test that /reconcile returns 200 and shows matches"""
-        # Mock attendance data
         mock_get_members.return_value = (
             [('Test Member', 'A', {'2026-01': (750, 4)})],
             ['2026-01']
         )
-        # Mock sheet data - include all keys required by reconcile
         mock_fetch_sheet.return_value = [{
             'date': '2026-01-01',
             'amount': 750,
@@ -74,10 +80,10 @@ class TestWebApp(unittest.TestCase):
         self.assertIn(b'Test Member', response.data)
         self.assertIn(b'OK', response.data)
 
+    @patch('app.get_cached_data', side_effect=_bypass_cache)
     @patch('app.fetch_sheet_data')
-    def test_payments_route(self, mock_fetch_sheet):
+    def test_payments_route(self, mock_fetch_sheet, mock_cache):
         """Test that /payments returns 200 and groups transactions"""
-        # Mock sheet data
         mock_fetch_sheet.return_value = [{
             'date': '2026-01-01',
             'amount': 750,
@@ -92,10 +98,11 @@ class TestWebApp(unittest.TestCase):
         self.assertIn(b'Test Member', response.data)
         self.assertIn(b'Direct Member Payment', response.data)
 
+    @patch('app.get_cached_data', side_effect=_bypass_cache)
     @patch('app.fetch_sheet_data')
     @patch('app.fetch_exceptions')
     @patch('app.get_junior_members_with_fees')
-    def test_reconcile_juniors_route(self, mock_get_junior, mock_exceptions, mock_transactions):
+    def test_reconcile_juniors_route(self, mock_get_junior, mock_exceptions, mock_transactions, mock_cache):
         """Test that /reconcile-juniors correctly computes balances for juniors."""
         mock_get_junior.return_value = (
             [

uv.lock

@@ -127,6 +127,75 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d1/d6/3965ed04c63042e047cb6a3e6ed1a63a35087b6a609aa3a15ed8ac56c221/colorama-0.4.6-py2.py3-none-any.whl", hash = "sha256:4f1d9991f5acc0ca119f9d443620b77f9d6b33703e51011c16baf57afb285fc6", size = 25335, upload-time = "2022-10-25T02:36:20.889Z" },
 ]
 
+[[package]]
+name = "coverage"
+version = "7.13.4"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/24/56/95b7e30fa389756cb56630faa728da46a27b8c6eb46f9d557c68fff12b65/coverage-7.13.4.tar.gz", hash = "sha256:e5c8f6ed1e61a8b2dcdf31eb0b9bbf0130750ca79c1c49eb898e2ad86f5ccc91", size = 827239, upload-time = "2026-02-09T12:59:03.86Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/db/23/aad45061a31677d68e47499197a131eea55da4875d16c1f42021ab963503/coverage-7.13.4-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:b66a2da594b6068b48b2692f043f35d4d3693fb639d5ea8b39533c2ad9ac3ab9", size = 219474, upload-time = "2026-02-09T12:57:19.332Z" },
+    { url = "https://files.pythonhosted.org/packages/a5/70/9b8b67a0945f3dfec1fd896c5cefb7c19d5a3a6d74630b99a895170999ae/coverage-7.13.4-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:3599eb3992d814d23b35c536c28df1a882caa950f8f507cef23d1cbf334995ac", size = 219844, upload-time = "2026-02-09T12:57:20.66Z" },
+    { url = "https://files.pythonhosted.org/packages/97/fd/7e859f8fab324cef6c4ad7cff156ca7c489fef9179d5749b0c8d321281c2/coverage-7.13.4-cp313-cp313-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:93550784d9281e374fb5a12bf1324cc8a963fd63b2d2f223503ef0fd4aa339ea", size = 250832, upload-time = "2026-02-09T12:57:22.007Z" },
+    { url = "https://files.pythonhosted.org/packages/e4/dc/b2442d10020c2f52617828862d8b6ee337859cd8f3a1f13d607dddda9cf7/coverage-7.13.4-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:b720ce6a88a2755f7c697c23268ddc47a571b88052e6b155224347389fdf6a3b", size = 253434, upload-time = "2026-02-09T12:57:23.339Z" },
+    { url = "https://files.pythonhosted.org/packages/5a/88/6728a7ad17428b18d836540630487231f5470fb82454871149502f5e5aa2/coverage-7.13.4-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:7b322db1284a2ed3aa28ffd8ebe3db91c929b7a333c0820abec3d838ef5b3525", size = 254676, upload-time = "2026-02-09T12:57:24.774Z" },
+    { url = "https://files.pythonhosted.org/packages/7c/bc/21244b1b8cedf0dff0a2b53b208015fe798d5f2a8d5348dbfece04224fff/coverage-7.13.4-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:f4594c67d8a7c89cf922d9df0438c7c7bb022ad506eddb0fdb2863359ff78242", size = 256807, upload-time = "2026-02-09T12:57:26.125Z" },
+    { url = "https://files.pythonhosted.org/packages/97/a0/ddba7ed3251cff51006737a727d84e05b61517d1784a9988a846ba508877/coverage-7.13.4-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:53d133df809c743eb8bce33b24bcababb371f4441340578cd406e084d94a6148", size = 251058, upload-time = "2026-02-09T12:57:27.614Z" },
+    { url = "https://files.pythonhosted.org/packages/9b/55/e289addf7ff54d3a540526f33751951bf0878f3809b47f6dfb3def69c6f7/coverage-7.13.4-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:76451d1978b95ba6507a039090ba076105c87cc76fc3efd5d35d72093964d49a", size = 252805, upload-time = "2026-02-09T12:57:29.066Z" },
+    { url = "https://files.pythonhosted.org/packages/13/4e/cc276b1fa4a59be56d96f1dabddbdc30f4ba22e3b1cd42504c37b3313255/coverage-7.13.4-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:7f57b33491e281e962021de110b451ab8a24182589be17e12a22c79047935e23", size = 250766, upload-time = "2026-02-09T12:57:30.522Z" },
+    { url = "https://files.pythonhosted.org/packages/94/44/1093b8f93018f8b41a8cf29636c9292502f05e4a113d4d107d14a3acd044/coverage-7.13.4-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:1731dc33dc276dafc410a885cbf5992f1ff171393e48a21453b78727d090de80", size = 254923, upload-time = "2026-02-09T12:57:31.946Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/55/ea2796da2d42257f37dbea1aab239ba9263b31bd91d5527cdd6db5efe174/coverage-7.13.4-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:bd60d4fe2f6fa7dff9223ca1bbc9f05d2b6697bc5961072e5d3b952d46e1b1ea", size = 250591, upload-time = "2026-02-09T12:57:33.842Z" },
+    { url = "https://files.pythonhosted.org/packages/d4/fa/7c4bb72aacf8af5020675aa633e59c1fbe296d22aed191b6a5b711eb2bc7/coverage-7.13.4-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:9181a3ccead280b828fae232df12b16652702b49d41e99d657f46cc7b1f6ec7a", size = 252364, upload-time = "2026-02-09T12:57:35.743Z" },
+    { url = "https://files.pythonhosted.org/packages/5c/38/a8d2ec0146479c20bbaa7181b5b455a0c41101eed57f10dd19a78ab44c80/coverage-7.13.4-cp313-cp313-win32.whl", hash = "sha256:f53d492307962561ac7de4cd1de3e363589b000ab69617c6156a16ba7237998d", size = 222010, upload-time = "2026-02-09T12:57:37.25Z" },
+    { url = "https://files.pythonhosted.org/packages/e2/0c/dbfafbe90a185943dcfbc766fe0e1909f658811492d79b741523a414a6cc/coverage-7.13.4-cp313-cp313-win_amd64.whl", hash = "sha256:e6f70dec1cc557e52df5306d051ef56003f74d56e9c4dd7ddb07e07ef32a84dd", size = 222818, upload-time = "2026-02-09T12:57:38.734Z" },
+    { url = "https://files.pythonhosted.org/packages/04/d1/934918a138c932c90d78301f45f677fb05c39a3112b96fd2c8e60503cdc7/coverage-7.13.4-cp313-cp313-win_arm64.whl", hash = "sha256:fb07dc5da7e849e2ad31a5d74e9bece81f30ecf5a42909d0a695f8bd1874d6af", size = 221438, upload-time = "2026-02-09T12:57:40.223Z" },
+    { url = "https://files.pythonhosted.org/packages/52/57/ee93ced533bcb3e6df961c0c6e42da2fc6addae53fb95b94a89b1e33ebd7/coverage-7.13.4-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:40d74da8e6c4b9ac18b15331c4b5ebc35a17069410cad462ad4f40dcd2d50c0d", size = 220165, upload-time = "2026-02-09T12:57:41.639Z" },
+    { url = "https://files.pythonhosted.org/packages/c5/e0/969fc285a6fbdda49d91af278488d904dcd7651b2693872f0ff94e40e84a/coverage-7.13.4-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:4223b4230a376138939a9173f1bdd6521994f2aff8047fae100d6d94d50c5a12", size = 220516, upload-time = "2026-02-09T12:57:44.215Z" },
+    { url = "https://files.pythonhosted.org/packages/b1/b8/9531944e16267e2735a30a9641ff49671f07e8138ecf1ca13db9fd2560c7/coverage-7.13.4-cp313-cp313t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:1d4be36a5114c499f9f1f9195e95ebf979460dbe2d88e6816ea202010ba1c34b", size = 261804, upload-time = "2026-02-09T12:57:45.989Z" },
+    { url = "https://files.pythonhosted.org/packages/8a/f3/e63df6d500314a2a60390d1989240d5f27318a7a68fa30ad3806e2a9323e/coverage-7.13.4-cp313-cp313t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:200dea7d1e8095cc6e98cdabe3fd1d21ab17d3cee6dab00cadbb2fe35d9c15b9", size = 263885, upload-time = "2026-02-09T12:57:47.42Z" },
+    { url = "https://files.pythonhosted.org/packages/f3/67/7654810de580e14b37670b60a09c599fa348e48312db5b216d730857ffe6/coverage-7.13.4-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:b8eb931ee8e6d8243e253e5ed7336deea6904369d2fd8ae6e43f68abbf167092", size = 266308, upload-time = "2026-02-09T12:57:49.345Z" },
+    { url = "https://files.pythonhosted.org/packages/37/6f/39d41eca0eab3cc82115953ad41c4e77935286c930e8fad15eaed1389d83/coverage-7.13.4-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:75eab1ebe4f2f64d9509b984f9314d4aa788540368218b858dad56dc8f3e5eb9", size = 267452, upload-time = "2026-02-09T12:57:50.811Z" },
+    { url = "https://files.pythonhosted.org/packages/50/6d/39c0fbb8fc5cd4d2090811e553c2108cf5112e882f82505ee7495349a6bf/coverage-7.13.4-cp313-cp313t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:c35eb28c1d085eb7d8c9b3296567a1bebe03ce72962e932431b9a61f28facf26", size = 261057, upload-time = "2026-02-09T12:57:52.447Z" },
+    { url = "https://files.pythonhosted.org/packages/a4/a2/60010c669df5fa603bb5a97fb75407e191a846510da70ac657eb696b7fce/coverage-7.13.4-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:eb88b316ec33760714a4720feb2816a3a59180fd58c1985012054fa7aebee4c2", size = 263875, upload-time = "2026-02-09T12:57:53.938Z" },
+    { url = "https://files.pythonhosted.org/packages/3e/d9/63b22a6bdbd17f1f96e9ed58604c2a6b0e72a9133e37d663bef185877cf6/coverage-7.13.4-cp313-cp313t-musllinux_1_2_i686.whl", hash = "sha256:7d41eead3cc673cbd38a4417deb7fd0b4ca26954ff7dc6078e33f6ff97bed940", size = 261500, upload-time = "2026-02-09T12:57:56.012Z" },
+    { url = "https://files.pythonhosted.org/packages/70/bf/69f86ba1ad85bc3ad240e4c0e57a2e620fbc0e1645a47b5c62f0e941ad7f/coverage-7.13.4-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:fb26a934946a6afe0e326aebe0730cdff393a8bc0bbb65a2f41e30feddca399c", size = 265212, upload-time = "2026-02-09T12:57:57.5Z" },
+    { url = "https://files.pythonhosted.org/packages/ae/f2/5f65a278a8c2148731831574c73e42f57204243d33bedaaf18fa79c5958f/coverage-7.13.4-cp313-cp313t-musllinux_1_2_riscv64.whl", hash = "sha256:dae88bc0fc77edaa65c14be099bd57ee140cf507e6bfdeea7938457ab387efb0", size = 260398, upload-time = "2026-02-09T12:57:59.027Z" },
+    { url = "https://files.pythonhosted.org/packages/ef/80/6e8280a350ee9fea92f14b8357448a242dcaa243cb2c72ab0ca591f66c8c/coverage-7.13.4-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:845f352911777a8e722bfce168958214951e07e47e5d5d9744109fa5fe77f79b", size = 262584, upload-time = "2026-02-09T12:58:01.129Z" },
+    { url = "https://files.pythonhosted.org/packages/22/63/01ff182fc95f260b539590fb12c11ad3e21332c15f9799cb5e2386f71d9f/coverage-7.13.4-cp313-cp313t-win32.whl", hash = "sha256:2fa8d5f8de70688a28240de9e139fa16b153cc3cbb01c5f16d88d6505ebdadf9", size = 222688, upload-time = "2026-02-09T12:58:02.736Z" },
+    { url = "https://files.pythonhosted.org/packages/a9/43/89de4ef5d3cd53b886afa114065f7e9d3707bdb3e5efae13535b46ae483d/coverage-7.13.4-cp313-cp313t-win_amd64.whl", hash = "sha256:9351229c8c8407645840edcc277f4a2d44814d1bc34a2128c11c2a031d45a5dd", size = 223746, upload-time = "2026-02-09T12:58:05.362Z" },
+    { url = "https://files.pythonhosted.org/packages/35/39/7cf0aa9a10d470a5309b38b289b9bb07ddeac5d61af9b664fe9775a4cb3e/coverage-7.13.4-cp313-cp313t-win_arm64.whl", hash = "sha256:30b8d0512f2dc8c8747557e8fb459d6176a2c9e5731e2b74d311c03b78451997", size = 222003, upload-time = "2026-02-09T12:58:06.952Z" },
+    { url = "https://files.pythonhosted.org/packages/92/11/a9cf762bb83386467737d32187756a42094927150c3e107df4cb078e8590/coverage-7.13.4-cp314-cp314-macosx_10_15_x86_64.whl", hash = "sha256:300deaee342f90696ed186e3a00c71b5b3d27bffe9e827677954f4ee56969601", size = 219522, upload-time = "2026-02-09T12:58:08.623Z" },
+    { url = "https://files.pythonhosted.org/packages/d3/28/56e6d892b7b052236d67c95f1936b6a7cf7c3e2634bf27610b8cbd7f9c60/coverage-7.13.4-cp314-cp314-macosx_11_0_arm64.whl", hash = "sha256:29e3220258d682b6226a9b0925bc563ed9a1ebcff3cad30f043eceea7eaf2689", size = 219855, upload-time = "2026-02-09T12:58:10.176Z" },
+    { url = "https://files.pythonhosted.org/packages/e5/69/233459ee9eb0c0d10fcc2fe425a029b3fa5ce0f040c966ebce851d030c70/coverage-7.13.4-cp314-cp314-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:391ee8f19bef69210978363ca930f7328081c6a0152f1166c91f0b5fdd2a773c", size = 250887, upload-time = "2026-02-09T12:58:12.503Z" },
+    { url = "https://files.pythonhosted.org/packages/06/90/2cdab0974b9b5bbc1623f7876b73603aecac11b8d95b85b5b86b32de5eab/coverage-7.13.4-cp314-cp314-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:0dd7ab8278f0d58a0128ba2fca25824321f05d059c1441800e934ff2efa52129", size = 253396, upload-time = "2026-02-09T12:58:14.615Z" },
+    { url = "https://files.pythonhosted.org/packages/ac/15/ea4da0f85bf7d7b27635039e649e99deb8173fe551096ea15017f7053537/coverage-7.13.4-cp314-cp314-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:78cdf0d578b15148b009ccf18c686aa4f719d887e76e6b40c38ffb61d264a552", size = 254745, upload-time = "2026-02-09T12:58:16.162Z" },
+    { url = "https://files.pythonhosted.org/packages/99/11/bb356e86920c655ca4d61daee4e2bbc7258f0a37de0be32d233b561134ff/coverage-7.13.4-cp314-cp314-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:48685fee12c2eb3b27c62f2658e7ea21e9c3239cba5a8a242801a0a3f6a8c62a", size = 257055, upload-time = "2026-02-09T12:58:17.892Z" },
+    { url = "https://files.pythonhosted.org/packages/c9/0f/9ae1f8cb17029e09da06ca4e28c9e1d5c1c0a511c7074592e37e0836c915/coverage-7.13.4-cp314-cp314-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:4e83efc079eb39480e6346a15a1bcb3e9b04759c5202d157e1dd4303cd619356", size = 250911, upload-time = "2026-02-09T12:58:19.495Z" },
+    { url = "https://files.pythonhosted.org/packages/89/3a/adfb68558fa815cbc29747b553bc833d2150228f251b127f1ce97e48547c/coverage-7.13.4-cp314-cp314-musllinux_1_2_aarch64.whl", hash = "sha256:ecae9737b72408d6a950f7e525f30aca12d4bd8dd95e37342e5beb3a2a8c4f71", size = 252754, upload-time = "2026-02-09T12:58:21.064Z" },
+    { url = "https://files.pythonhosted.org/packages/32/b1/540d0c27c4e748bd3cd0bd001076ee416eda993c2bae47a73b7cc9357931/coverage-7.13.4-cp314-cp314-musllinux_1_2_i686.whl", hash = "sha256:ae4578f8528569d3cf303fef2ea569c7f4c4059a38c8667ccef15c6e1f118aa5", size = 250720, upload-time = "2026-02-09T12:58:22.622Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/95/383609462b3ffb1fe133014a7c84fc0dd01ed55ac6140fa1093b5af7ebb1/coverage-7.13.4-cp314-cp314-musllinux_1_2_ppc64le.whl", hash = "sha256:6fdef321fdfbb30a197efa02d48fcd9981f0d8ad2ae8903ac318adc653f5df98", size = 254994, upload-time = "2026-02-09T12:58:24.548Z" },
+    { url = "https://files.pythonhosted.org/packages/f7/ba/1761138e86c81680bfc3c49579d66312865457f9fe405b033184e5793cb3/coverage-7.13.4-cp314-cp314-musllinux_1_2_riscv64.whl", hash = "sha256:2b0f6ccf3dbe577170bebfce1318707d0e8c3650003cb4b3a9dd744575daa8b5", size = 250531, upload-time = "2026-02-09T12:58:26.271Z" },
+    { url = "https://files.pythonhosted.org/packages/f8/8e/05900df797a9c11837ab59c4d6fe94094e029582aab75c3309a93e6fb4e3/coverage-7.13.4-cp314-cp314-musllinux_1_2_x86_64.whl", hash = "sha256:75fcd519f2a5765db3f0e391eb3b7d150cce1a771bf4c9f861aeab86c767a3c0", size = 252189, upload-time = "2026-02-09T12:58:27.807Z" },
+    { url = "https://files.pythonhosted.org/packages/00/bd/29c9f2db9ea4ed2738b8a9508c35626eb205d51af4ab7bf56a21a2e49926/coverage-7.13.4-cp314-cp314-win32.whl", hash = "sha256:8e798c266c378da2bd819b0677df41ab46d78065fb2a399558f3f6cae78b2fbb", size = 222258, upload-time = "2026-02-09T12:58:29.441Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/4d/1f8e723f6829977410efeb88f73673d794075091c8c7c18848d273dc9d73/coverage-7.13.4-cp314-cp314-win_amd64.whl", hash = "sha256:245e37f664d89861cf2329c9afa2c1fe9e6d4e1a09d872c947e70718aeeac505", size = 223073, upload-time = "2026-02-09T12:58:31.026Z" },
+    { url = "https://files.pythonhosted.org/packages/51/5b/84100025be913b44e082ea32abcf1afbf4e872f5120b7a1cab1d331b1e13/coverage-7.13.4-cp314-cp314-win_arm64.whl", hash = "sha256:ad27098a189e5838900ce4c2a99f2fe42a0bf0c2093c17c69b45a71579e8d4a2", size = 221638, upload-time = "2026-02-09T12:58:32.599Z" },
+    { url = "https://files.pythonhosted.org/packages/a7/e4/c884a405d6ead1370433dad1e3720216b4f9fd8ef5b64bfd984a2a60a11a/coverage-7.13.4-cp314-cp314t-macosx_10_15_x86_64.whl", hash = "sha256:85480adfb35ffc32d40918aad81b89c69c9cc5661a9b8a81476d3e645321a056", size = 220246, upload-time = "2026-02-09T12:58:34.181Z" },
+    { url = "https://files.pythonhosted.org/packages/81/5c/4d7ed8b23b233b0fffbc9dfec53c232be2e695468523242ea9fd30f97ad2/coverage-7.13.4-cp314-cp314t-macosx_11_0_arm64.whl", hash = "sha256:79be69cf7f3bf9b0deeeb062eab7ac7f36cd4cc4c4dd694bd28921ba4d8596cc", size = 220514, upload-time = "2026-02-09T12:58:35.704Z" },
+    { url = "https://files.pythonhosted.org/packages/2f/6f/3284d4203fd2f28edd73034968398cd2d4cb04ab192abc8cff007ea35679/coverage-7.13.4-cp314-cp314t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:caa421e2684e382c5d8973ac55e4f36bed6821a9bad5c953494de960c74595c9", size = 261877, upload-time = "2026-02-09T12:58:37.864Z" },
+    { url = "https://files.pythonhosted.org/packages/09/aa/b672a647bbe1556a85337dc95bfd40d146e9965ead9cc2fe81bde1e5cbce/coverage-7.13.4-cp314-cp314t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:14375934243ee05f56c45393fe2ce81fe5cc503c07cee2bdf1725fb8bef3ffaf", size = 264004, upload-time = "2026-02-09T12:58:39.492Z" },
+    { url = "https://files.pythonhosted.org/packages/79/a1/aa384dbe9181f98bba87dd23dda436f0c6cf2e148aecbb4e50fc51c1a656/coverage-7.13.4-cp314-cp314t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:25a41c3104d08edb094d9db0d905ca54d0cd41c928bb6be3c4c799a54753af55", size = 266408, upload-time = "2026-02-09T12:58:41.852Z" },
+    { url = "https://files.pythonhosted.org/packages/53/5e/5150bf17b4019bc600799f376bb9606941e55bd5a775dc1e096b6ffea952/coverage-7.13.4-cp314-cp314t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:6f01afcff62bf9a08fb32b2c1d6e924236c0383c02c790732b6537269e466a72", size = 267544, upload-time = "2026-02-09T12:58:44.093Z" },
+    { url = "https://files.pythonhosted.org/packages/e0/ed/f1de5c675987a4a7a672250d2c5c9d73d289dbf13410f00ed7181d8017dd/coverage-7.13.4-cp314-cp314t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:eb9078108fbf0bcdde37c3f4779303673c2fa1fe8f7956e68d447d0dd426d38a", size = 260980, upload-time = "2026-02-09T12:58:45.721Z" },
+    { url = "https://files.pythonhosted.org/packages/b3/e3/fe758d01850aa172419a6743fe76ba8b92c29d181d4f676ffe2dae2ba631/coverage-7.13.4-cp314-cp314t-musllinux_1_2_aarch64.whl", hash = "sha256:0e086334e8537ddd17e5f16a344777c1ab8194986ec533711cbe6c41cde841b6", size = 263871, upload-time = "2026-02-09T12:58:47.334Z" },
+    { url = "https://files.pythonhosted.org/packages/b6/76/b829869d464115e22499541def9796b25312b8cf235d3bb00b39f1675395/coverage-7.13.4-cp314-cp314t-musllinux_1_2_i686.whl", hash = "sha256:725d985c5ab621268b2edb8e50dfe57633dc69bda071abc470fed55a14935fd3", size = 261472, upload-time = "2026-02-09T12:58:48.995Z" },
+    { url = "https://files.pythonhosted.org/packages/14/9e/caedb1679e73e2f6ad240173f55218488bfe043e38da577c4ec977489915/coverage-7.13.4-cp314-cp314t-musllinux_1_2_ppc64le.whl", hash = "sha256:3c06f0f1337c667b971ca2f975523347e63ec5e500b9aa5882d91931cd3ef750", size = 265210, upload-time = "2026-02-09T12:58:51.178Z" },
+    { url = "https://files.pythonhosted.org/packages/3a/10/0dd02cb009b16ede425b49ec344aba13a6ae1dc39600840ea6abcb085ac4/coverage-7.13.4-cp314-cp314t-musllinux_1_2_riscv64.whl", hash = "sha256:590c0ed4bf8e85f745e6b805b2e1c457b2e33d5255dd9729743165253bc9ad39", size = 260319, upload-time = "2026-02-09T12:58:53.081Z" },
+    { url = "https://files.pythonhosted.org/packages/92/8e/234d2c927af27c6d7a5ffad5bd2cf31634c46a477b4c7adfbfa66baf7ebb/coverage-7.13.4-cp314-cp314t-musllinux_1_2_x86_64.whl", hash = "sha256:eb30bf180de3f632cd043322dad5751390e5385108b2807368997d1a92a509d0", size = 262638, upload-time = "2026-02-09T12:58:55.258Z" },
+    { url = "https://files.pythonhosted.org/packages/2f/64/e5547c8ff6964e5965c35a480855911b61509cce544f4d442caa759a0702/coverage-7.13.4-cp314-cp314t-win32.whl", hash = "sha256:c4240e7eded42d131a2d2c4dec70374b781b043ddc79a9de4d55ca71f8e98aea", size = 223040, upload-time = "2026-02-09T12:58:56.936Z" },
+    { url = "https://files.pythonhosted.org/packages/c7/96/38086d58a181aac86d503dfa9c47eb20715a79c3e3acbdf786e92e5c09a8/coverage-7.13.4-cp314-cp314t-win_amd64.whl", hash = "sha256:4c7d3cc01e7350f2f0f6f7036caaf5673fb56b6998889ccfe9e1c1fe75a9c932", size = 224148, upload-time = "2026-02-09T12:58:58.645Z" },
+    { url = "https://files.pythonhosted.org/packages/ce/72/8d10abd3740a0beb98c305e0c3faf454366221c0f37a8bcf8f60020bb65a/coverage-7.13.4-cp314-cp314t-win_arm64.whl", hash = "sha256:23e3f687cf945070d1c90f85db66d11e3025665d8dafa831301a0e0038f3db9b", size = 222172, upload-time = "2026-02-09T12:59:00.396Z" },
+    { url = "https://files.pythonhosted.org/packages/0d/4a/331fe2caf6799d591109bb9c08083080f6de90a823695d412a935622abb2/coverage-7.13.4-py3-none-any.whl", hash = "sha256:1af1641e57cf7ba1bd67d677c9abdbcd6cc2ab7da3bca7fa1e2b7e50e65f2ad0", size = 211242, upload-time = "2026-02-09T12:59:02.032Z" },
+]
+
 [[package]]
 name = "cryptography"
 version = "46.0.5"
@@ -206,18 +275,32 @@ dependencies = [
     { name = "google-api-python-client" },
     { name = "google-auth-httplib2" },
     { name = "google-auth-oauthlib" },
+    { name = "gunicorn" },
     { name = "qrcode", extra = ["pil"] },
 ]
 
+[package.dev-dependencies]
+dev = [
+    { name = "pytest" },
+    { name = "pytest-cov" },
+]
+
 [package.metadata]
 requires-dist = [
     { name = "flask", specifier = ">=3.1.3" },
     { name = "google-api-python-client", specifier = ">=2.162.0" },
     { name = "google-auth-httplib2", specifier = ">=0.2.0" },
     { name = "google-auth-oauthlib", specifier = ">=1.2.1" },
+    { name = "gunicorn", specifier = ">=23.0" },
     { name = "qrcode", extras = ["pil"], specifier = ">=8.0" },
 ]
 
+[package.metadata.requires-dev]
+dev = [
+    { name = "pytest", specifier = ">=8.0" },
+    { name = "pytest-cov", specifier = ">=6.0" },
+]
+
 [[package]]
 name = "google-api-core"
 version = "2.30.0"
@@ -302,6 +385,18 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c4/ab/09169d5a4612a5f92490806649ac8d41e3ec9129c636754575b3553f4ea4/googleapis_common_protos-1.72.0-py3-none-any.whl", hash = "sha256:4299c5a82d5ae1a9702ada957347726b167f9f8d1fc352477702a1e851ff4038", size = 297515, upload-time = "2025-11-06T18:29:13.14Z" },
 ]
 
+[[package]]
+name = "gunicorn"
+version = "25.1.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "packaging" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/66/13/ef67f59f6a7896fdc2c1d62b5665c5219d6b0a9a1784938eb9a28e55e128/gunicorn-25.1.0.tar.gz", hash = "sha256:1426611d959fa77e7de89f8c0f32eed6aa03ee735f98c01efba3e281b1c47616", size = 594377, upload-time = "2026-02-13T11:09:58.989Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/da/73/4ad5b1f6a2e21cf1e85afdaad2b7b1a933985e2f5d679147a1953aaa192c/gunicorn-25.1.0-py3-none-any.whl", hash = "sha256:d0b1236ccf27f72cfe14bce7caadf467186f19e865094ca84221424e839b8b8b", size = 197067, upload-time = "2026-02-13T11:09:57.146Z" },
+]
+
 [[package]]
 name = "httplib2"
 version = "0.31.2"
@@ -323,6 +418,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/0e/61/66938bbb5fc52dbdf84594873d5b51fb1f7c7794e9c0f5bd885f30bc507b/idna-3.11-py3-none-any.whl", hash = "sha256:771a87f49d9defaf64091e6e6fe9c18d4833f140bd19464795bc32d966ca37ea", size = 71008, upload-time = "2025-10-12T14:55:18.883Z" },
 ]
 
+[[package]]
+name = "iniconfig"
+version = "2.3.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/72/34/14ca021ce8e5dfedc35312d08ba8bf51fdd999c576889fc2c24cb97f4f10/iniconfig-2.3.0.tar.gz", hash = "sha256:c76315c77db068650d49c5b56314774a7804df16fee4402c1f19d6d15d8c4730", size = 20503, upload-time = "2025-10-18T21:55:43.219Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/cb/b1/3846dd7f199d53cb17f49cba7e651e9ce294d8497c8c150530ed11865bb8/iniconfig-2.3.0-py3-none-any.whl", hash = "sha256:f631c04d2c48c52b84d0d0549c99ff3859c98df65b3101406327ecc7d53fbf12", size = 7484, upload-time = "2025-10-18T21:55:41.639Z" },
+]
+
 [[package]]
 name = "itsdangerous"
 version = "2.2.0"
@@ -405,6 +509,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/be/9c/92789c596b8df838baa98fa71844d84283302f7604ed565dafe5a6b5041a/oauthlib-3.3.1-py3-none-any.whl", hash = "sha256:88119c938d2b8fb88561af5f6ee0eec8cc8d552b7bb1f712743136eb7523b7a1", size = 160065, upload-time = "2025-06-19T22:48:06.508Z" },
 ]
 
+[[package]]
+name = "packaging"
+version = "26.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/65/ee/299d360cdc32edc7d2cf530f3accf79c4fca01e96ffc950d8a52213bd8e4/packaging-26.0.tar.gz", hash = "sha256:00243ae351a257117b6a241061796684b084ed1c516a08c48a3f7e147a9d80b4", size = 143416, upload-time = "2026-01-21T20:50:39.064Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/b7/b9/c538f279a4e237a006a2c98387d081e9eb060d203d8ed34467cc0f0b9b53/packaging-26.0-py3-none-any.whl", hash = "sha256:b36f1fef9334a5588b4166f8bcd26a14e521f2b55e6b9de3aaa80d3ff7a37529", size = 74366, upload-time = "2026-01-21T20:50:37.788Z" },
+]
+
 [[package]]
 name = "pillow"
 version = "12.1.1"
@@ -463,6 +576,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/ec/d2/de599c95ba0a973b94410477f8bf0b6f0b5e67360eb89bcb1ad365258beb/pillow-12.1.1-cp314-cp314t-win_arm64.whl", hash = "sha256:7b03048319bfc6170e93bd60728a1af51d3dd7704935feb228c4d4faab35d334", size = 2546446, upload-time = "2026-02-11T04:22:50.342Z" },
 ]
 
+[[package]]
+name = "pluggy"
+version = "1.6.0"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/f9/e2/3e91f31a7d2b083fe6ef3fa267035b518369d9511ffab804f839851d2779/pluggy-1.6.0.tar.gz", hash = "sha256:7dcc130b76258d33b90f61b658791dede3486c3e6bfb003ee5c9bfb396dd22f3", size = 69412, upload-time = "2025-05-15T12:30:07.975Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/54/20/4d324d65cc6d9205fabedc306948156824eb9f0ee1633355a8f7ec5c66bf/pluggy-1.6.0-py3-none-any.whl", hash = "sha256:e920276dd6813095e9377c0bc5566d94c932c33b27a3e3945d8389c374dd4746", size = 20538, upload-time = "2025-05-15T12:30:06.134Z" },
+]
+
 [[package]]
 name = "proto-plus"
 version = "1.27.1"
@@ -520,6 +642,15 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/0c/c3/44f3fbbfa403ea2a7c779186dc20772604442dde72947e7d01069cbe98e3/pycparser-3.0-py3-none-any.whl", hash = "sha256:b727414169a36b7d524c1c3e31839a521725078d7b2ff038656844266160a992", size = 48172, upload-time = "2026-01-21T14:26:50.693Z" },
 ]
 
+[[package]]
+name = "pygments"
+version = "2.19.2"
+source = { registry = "https://pypi.org/simple" }
+sdist = { url = "https://files.pythonhosted.org/packages/b0/77/a5b8c569bf593b0140bde72ea885a803b82086995367bf2037de0159d924/pygments-2.19.2.tar.gz", hash = "sha256:636cb2477cec7f8952536970bc533bc43743542f70392ae026374600add5b887", size = 4968631, upload-time = "2025-06-21T13:39:12.283Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/c7/21/705964c7812476f378728bdf590ca4b771ec72385c533964653c68e86bdc/pygments-2.19.2-py3-none-any.whl", hash = "sha256:86540386c03d588bb81d44bc3928634ff26449851e99741617ecb9037ee5ec0b", size = 1225217, upload-time = "2025-06-21T13:39:07.939Z" },
+]
+
 [[package]]
 name = "pyparsing"
 version = "3.3.2"
@@ -529,6 +660,36 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/10/bd/c038d7cc38edc1aa5bf91ab8068b63d4308c66c4c8bb3cbba7dfbc049f9c/pyparsing-3.3.2-py3-none-any.whl", hash = "sha256:850ba148bd908d7e2411587e247a1e4f0327839c40e2e5e6d05a007ecc69911d", size = 122781, upload-time = "2026-01-21T03:57:55.912Z" },
 ]
 
+[[package]]
+name = "pytest"
+version = "9.0.2"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "colorama", marker = "sys_platform == 'win32'" },
+    { name = "iniconfig" },
+    { name = "packaging" },
+    { name = "pluggy" },
+    { name = "pygments" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/d1/db/7ef3487e0fb0049ddb5ce41d3a49c235bf9ad299b6a25d5780a89f19230f/pytest-9.0.2.tar.gz", hash = "sha256:75186651a92bd89611d1d9fc20f0b4345fd827c41ccd5c299a868a05d70edf11", size = 1568901, upload-time = "2025-12-06T21:30:51.014Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/3b/ab/b3226f0bd7cdcf710fbede2b3548584366da3b19b5021e74f5bde2a8fa3f/pytest-9.0.2-py3-none-any.whl", hash = "sha256:711ffd45bf766d5264d487b917733b453d917afd2b0ad65223959f59089f875b", size = 374801, upload-time = "2025-12-06T21:30:49.154Z" },
+]
+
+[[package]]
+name = "pytest-cov"
+version = "7.0.0"
+source = { registry = "https://pypi.org/simple" }
+dependencies = [
+    { name = "coverage" },
+    { name = "pluggy" },
+    { name = "pytest" },
+]
+sdist = { url = "https://files.pythonhosted.org/packages/5e/f7/c933acc76f5208b3b00089573cf6a2bc26dc80a8aece8f52bb7d6b1855ca/pytest_cov-7.0.0.tar.gz", hash = "sha256:33c97eda2e049a0c5298e91f519302a1334c26ac65c1a483d6206fd458361af1", size = 54328, upload-time = "2025-09-09T10:57:02.113Z" }
+wheels = [
+    { url = "https://files.pythonhosted.org/packages/ee/49/1377b49de7d0c1ce41292161ea0f721913fa8722c19fb9c1e3aa0367eecb/pytest_cov-7.0.0-py3-none-any.whl", hash = "sha256:3b8e9558b16cc1479da72058bdecf8073661c7f57f7d3c5f22a1c23507f2d861", size = 22424, upload-time = "2025-09-09T10:57:00.695Z" },
+]
+
 [[package]]
 name = "qrcode"
 version = "8.2"