commit 153c83f7fa50a04d7827c2247202a830a1879d56
Author: Vlastislav Svatek <vlastislav.svatek@nethost.cz>
Date:   Sun Apr 26 02:23:11 2026 +0200

    first commit

diff --git a/.dockerignore b/.dockerignore
new file mode 100644
index 0000000..602b14e
--- /dev/null
+++ b/.dockerignore
@@ -0,0 +1,5 @@
+.env
+.git
+.gitignore
+README.md
+*.zip
diff --git a/.env.example b/.env.example
new file mode 100644
index 0000000..1fa7bad
--- /dev/null
+++ b/.env.example
@@ -0,0 +1,44 @@
+# env_file načítá hodnoty RAW — $ znaky v ADMIN_HASH NEESCAPUJ, piš normálně
+# Vygeneruj hash: docker compose exec app php -r "echo password_hash('heslo', PASSWORD_BCRYPT) . PHP_EOL;"
+
+APP_PORT=8080
+
+DB_NAME=streamers_db
+DB_USER=streamers_user
+DB_PASS=change_me_strong_db_password
+
+# Plaintext heslo — hash se vygeneruje automaticky při startu
+ADMIN_PASSWORD=tve_admin_heslo
+# NEBO vlož hash přímo ($ neescapuj):
+# ADMIN_HASH=$2y$10$xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
+
+SESSION_SECRET=change_me_to_something_very_random_here
+
+TWITCH_CLIENT_ID=
+TWITCH_CLIENT_SECRET=
+
+LIVE_CACHE_TTL=120
+ALLOWED_ORIGIN=*
+
+
+# Random session secret (min 32 chars)
+SESSION_SECRET=change_me_to_something_very_random_here
+
+# Twitch API — https://dev.twitch.tv/console/apps
+TWITCH_CLIENT_ID=
+TWITCH_CLIENT_SECRET=
+# OAuth redirect URI — must match exactly what's registered in Twitch dev console
+TWITCH_OAUTH_REDIRECT_URI=https://rating.naughtybulldogs.eu/api/oauth?provider=twitch
+
+# Kick OAuth — PKCE flow
+# Registrace: https://kick.com/settings/developer
+# Redirect URL: https://rating.naughtybulldogs.eu/api/oauth?provider=kick
+KICK_OAUTH_CLIENT_ID=
+KICK_OAUTH_CLIENT_SECRET=
+KICK_OAUTH_REDIRECT_URI=https://rating.naughtybulldogs.eu/api/oauth?provider=kick
+
+# Live status cache TTL in seconds
+LIVE_CACHE_TTL=120
+
+# Your public domain for CORS (use * for local dev)
+ALLOWED_ORIGIN=*
diff --git a/.gitignore b/.gitignore
new file mode 100644
index 0000000..5a75ef9
--- /dev/null
+++ b/.gitignore
@@ -0,0 +1,3 @@
+.env
+config.php
+*.log
diff --git a/.htaccess b/.htaccess
new file mode 100644
index 0000000..3c05c2f
--- /dev/null
+++ b/.htaccess
@@ -0,0 +1,32 @@
+Options -Indexes
+
+# Block direct access to PHP config and internal files
+<FilesMatch "^(config\.php|db\.php|schema\.sql)$">
+    Require all denied
+</FilesMatch>
+
+RewriteEngine On
+RewriteBase /
+
+# Skip rewrite if file physically exists
+RewriteCond %{REQUEST_FILENAME} !-f
+RewriteCond %{REQUEST_FILENAME} !-d
+
+# API routing
+RewriteRule ^api/auth/?$        api/auth.php  [QSA,L]
+RewriteRule ^api/streamers/?$   api/streamers.php [QSA,L]
+RewriteRule ^api/live/?$        api/live.php  [QSA,L]
+RewriteRule ^api/comments/?$    api/comments.php [QSA,L]
+RewriteRule ^api/oauth/?$              api/oauth.php [QSA,L]
+RewriteRule ^api/settings/?$           api/settings.php [QSA,L]
+RewriteRule ^api/moderators/?$         api/moderators.php [QSA,L]
+RewriteRule ^api/rater_groups/?$       api/rater_groups.php [QSA,L]
+RewriteRule ^api/community_ratings/?$  api/community_ratings.php [QSA,L]
+
+# Security headers
+<IfModule mod_headers.c>
+    Header always set X-Content-Type-Options "nosniff"
+    Header always set X-Frame-Options "ALLOW-FROM https://nb.garoshi.eu https://naughtybulldogs.eu"
+    Header always set Content-Security-Policy "frame-ancestors 'self' https://nb.garoshi.eu https://naughtybulldogs.eu"
+    Header always set Referrer-Policy "strict-origin-when-cross-origin"
+</IfModule>
diff --git a/Dockerfile b/Dockerfile
new file mode 100644
index 0000000..c82d1a7
--- /dev/null
+++ b/Dockerfile
@@ -0,0 +1,38 @@
+FROM php:8.3-apache
+
+# Install PostgreSQL PDO extension + curl
+RUN apt-get update && apt-get install -y libpq-dev \
+    && docker-php-ext-install pdo pdo_pgsql \
+    && apt-get clean && rm -rf /var/lib/apt/lists/*
+
+# Enable Apache mod_rewrite (needed for .htaccess routing)
+RUN a2enmod rewrite headers
+
+# Allow .htaccess overrides in webroot
+RUN sed -i 's/AllowOverride None/AllowOverride All/g' /etc/apache2/apache2.conf
+
+# Copy app files
+COPY . /var/www/html/
+
+# Move public/index.html to webroot root, keep api/ and config accessible
+# Directory layout inside container:
+#   /var/www/html/index.html      ← frontend
+#   /var/www/html/api/            ← PHP endpoints
+#   /var/www/html/config.php      ← credentials (injected via env)
+#   /var/www/html/schema.sql      ← not served (blocked by .htaccess)
+RUN cp /var/www/html/public/index.html /var/www/html/index.html \
+    && rm -rf /var/www/html/public
+
+# Config is generated at container start from env vars (see entrypoint.sh)
+# Remove the static config.php — it will be written by entrypoint
+RUN rm -f /var/www/html/config.php
+
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+# Writable temp dir for live status cache + twitch token cache
+RUN mkdir -p /tmp/snb_cache && chown www-data:www-data /tmp/snb_cache
+
+EXPOSE 80
+
+ENTRYPOINT ["/entrypoint.sh"]
diff --git a/README.md b/README.md
new file mode 100644
index 0000000..0ded2d0
--- /dev/null
+++ b/README.md
@@ -0,0 +1,144 @@
+# NaughtyBulldogs — Streamer Rating App
+
+## Rychlý start (Docker)
+
+```bash
+# 1. Zkopíruj a edituj .env
+cp .env.example .env
+
+# 2. Vygeneruj bcrypt hash admin hesla
+docker compose run --rm app php -r "echo password_hash('tve_heslo', PASSWORD_BCRYPT);"
+# Zkopíruj výstup do .env jako ADMIN_HASH=...
+
+# 3. Spusť
+docker compose up -d
+
+# App běží na http://localhost:8080
+```
+
+Při prvním startu entrypoint automaticky:
+- Počká na PostgreSQL (healthcheck)
+- Vytvoří tabulky a naseeduje všechny streamery ze schema.sql
+- Spustí Apache
+
+```bash
+# Logy
+docker compose logs -f app
+
+# Restart
+docker compose restart app
+
+# Stop + smazání dat
+docker compose down -v
+```
+
+---
+
+## Stack
+- **Frontend**: Vanilla JS (single HTML file, no build step)
+- **Backend**: PHP 8.1+
+- **Database**: PostgreSQL 14+
+
+## Struktura souborů
+
+```
+/
+├── public/
+│   └── index.html          ← celý frontend
+├── api/
+│   ├── db.php              ← PDO připojení + helpers (nepřístupné zvenčí)
+│   ├── auth.php            ← login / logout / session check
+│   ├── streamers.php       ← CRUD streamerů + hodnocení
+│   └── live.php            ← live refresh (Twitch + Kick API)
+├── config.php              ← credentials (NIKDY do gitu!)
+├── schema.sql              ← PostgreSQL schéma + seed data
+├── .htaccess               ← routing + security headers
+└── .gitignore
+```
+
+## Instalace
+
+### 1. PostgreSQL databáze
+
+```bash
+# Vytvoř databázi a uživatele
+psql -U postgres
+CREATE DATABASE streamers_db;
+CREATE USER streamers_user WITH ENCRYPTED PASSWORD 'silne_heslo';
+GRANT ALL PRIVILEGES ON DATABASE streamers_db TO streamers_user;
+\q
+
+# Aplikuj schema
+psql -U streamers_user -d streamers_db -f schema.sql
+```
+
+### 2. config.php
+
+```bash
+cp config.php config.php
+# Edituj hodnoty:
+# - DB_HOST, DB_NAME, DB_USER, DB_PASS
+# - ADMIN_HASH — vygeneruj: php -r "echo password_hash('tve_heslo', PASSWORD_BCRYPT);"
+# - SESSION_SECRET — náhodný string min 32 znaků
+# - TWITCH_CLIENT_ID + TWITCH_CLIENT_SECRET (z https://dev.twitch.tv/console/apps)
+# - ALLOWED_ORIGIN — tvá doména
+```
+
+### 3. Twitch API credentials
+
+1. Jdi na https://dev.twitch.tv/console/apps
+2. Vytvoř novou aplikaci
+3. OAuth Redirect URL: `https://tvadomena.cz`
+4. Zkopíruj **Client ID** a **Client Secret** do `config.php`
+
+### 4. Nahrání na server
+
+```bash
+# Nahraj všechny soubory kromě config.php (ten edituj přímo na serveru)
+rsync -av --exclude='config.php' ./ user@server:/var/www/streamers/
+
+# Na serveru edituj config.php
+ssh user@server
+nano /var/www/streamers/config.php
+```
+
+### 5. PHP session nastavení
+
+Ujisti se, že server má `session.cookie_httponly = On` a `session.cookie_secure = On` (pro HTTPS).
+
+## API endpoints
+
+| Method | URL | Auth | Popis |
+|--------|-----|------|-------|
+| GET | `/api/streamers` | — | Veřejný seznam (jen ohodnocení) |
+| GET | `/api/streamers?all=1` | Admin | Všichni streamers |
+| POST | `/api/streamers` | — | Navrhnout streamera (divák) |
+| POST | `/api/streamers?admin=1` | Admin | Přidat streamera |
+| PUT | `/api/streamers?id=N` | Admin | Uložit hodnocení |
+| DELETE | `/api/streamers?id=N` | Admin | Smazat streamera |
+| GET | `/api/auth?action=check` | — | Zkontrolovat session |
+| POST | `/api/auth?action=login` | — | Přihlásit admin |
+| POST | `/api/auth?action=logout` | Admin | Odhlásit |
+| GET | `/api/live` | Admin | Refresh live statusů |
+
+## Live refresh
+
+- Twitch: Helix API, batch po 100 streamerech — Přesný, spolehlivý
+- Kick: veřejný endpoint `kick.com/api/v2/channels/{name}` — funguje bez auth, ale může se změnit
+- Cache: výsledky jsou cachované 120s (nastavitelné v `config.php` jako `LIVE_CACHE_TTL`)
+- Refresh se spouští ručně tlačítkem v admin panelu (nebo cron job)
+
+### Volitelný cron pro automatický refresh
+
+```bash
+# Každé 3 minuty refreshuj live statusy (potřebuje admin session — doporučeno CLI script)
+*/3 * * * * curl -s -b "PHPSESSID=..." https://tvadomena.cz/api/live > /dev/null
+```
+
+## .gitignore
+
+```
+config.php
+/tmp/
+*.log
+```
diff --git a/api/auth.php b/api/auth.php
new file mode 100644
index 0000000..0ba63f6
--- /dev/null
+++ b/api/auth.php
@@ -0,0 +1,45 @@
+<?php
+// ============================================================
+//  api/auth.php  —  POST /api/auth/login  |  POST /api/auth/logout
+//                   GET  /api/auth/check
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+start_session();
+
+$method = $_SERVER['REQUEST_METHOD'];
+$action = $_GET['action'] ?? '';
+
+// GET /api/auth/check
+if ($method === 'GET' && $action === 'check') {
+    json_out(['admin' => !empty($_SESSION['is_admin'])]);
+}
+
+// POST /api/auth/login
+if ($method === 'POST' && $action === 'login') {
+    $body = body();
+    $pw   = $body['password'] ?? '';
+
+    if (empty($pw)) {
+        json_error('Password required');
+    }
+
+    if (!password_verify($pw, ADMIN_HASH)) {
+        sleep(1);
+        json_error('Invalid password', 401);
+    }
+
+    session_regenerate_id(true);
+    $_SESSION['is_admin'] = true;
+    json_out(['ok' => true]);
+}
+
+// POST /api/auth/logout — clears admin only, keeps OAuth user logged in
+if ($method === 'POST' && $action === 'logout') {
+    unset($_SESSION['is_admin']);
+    json_out(['ok' => true]);
+}
+
+json_error('Not found', 404);
diff --git a/api/auth.php:Zone.Identifier b/api/auth.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/auth.php:Zone.Identifier differ
diff --git a/api/comments.php b/api/comments.php
new file mode 100644
index 0000000..fbc7929
--- /dev/null
+++ b/api/comments.php
@@ -0,0 +1,122 @@
+<?php
+// ============================================================
+//  api/comments.php
+//
+//  GET    /api/comments?streamer_id=N  — načti komentáře (veřejné)
+//  POST   /api/comments                — přidej komentář
+//  DELETE /api/comments?id=N           — smaž komentář (admin)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+
+$method = $_SERVER['REQUEST_METHOD'];
+
+// ------------------------------------------------------------------
+// GET — komentáře pro daného streamera
+// ------------------------------------------------------------------
+if ($method === 'GET') {
+    $sid = (int)($_GET['streamer_id'] ?? 0);
+    if (!$sid) json_error('Missing streamer_id');
+
+    $rows = db()->prepare("
+        SELECT c.id, c.author, c.body, c.is_admin, c.created_at, c.user_id,
+               u.display_name AS user_display, u.avatar AS user_avatar, u.provider AS user_provider,
+               COALESCE(
+                   (SELECT array_agg(rgm.group_id ORDER BY rgm.group_id)
+                    FROM rater_group_members rgm WHERE rgm.user_id = c.user_id),
+                   ARRAY[]::int[]
+               ) AS team_ids
+        FROM comments c
+        LEFT JOIN users u ON u.id = c.user_id
+        WHERE c.streamer_id = :sid
+        ORDER BY c.created_at ASC
+    ");
+    $rows->execute([':sid' => $sid]);
+    $rs = $rows->fetchAll();
+    // Postgres returns array as PHP-native array via PDO; ensure shape
+    foreach ($rs as &$r) {
+        if (is_string($r['team_ids'])) {
+            // Fallback: parse "{1,2,3}" string
+            $r['team_ids'] = array_filter(array_map('intval', explode(',', trim($r['team_ids'], '{}'))), fn($x)=>$x>0);
+        }
+        $r['team_ids'] = array_values(array_map('intval', $r['team_ids'] ?? []));
+    }
+    unset($r);
+    json_out($rs);
+}
+
+// ------------------------------------------------------------------
+// POST — přidat komentář
+// ------------------------------------------------------------------
+if ($method === 'POST') {
+    start_session();
+
+    $body = body();
+    $sid  = (int)($body['streamer_id'] ?? 0);
+    $text = trim($body['body'] ?? '');
+
+    if (!$sid)               json_error('Missing streamer_id');
+    if (strlen($text) < 2)   json_error('Komentář je příliš krátký');
+    if (strlen($text) > 1000) json_error('Komentář je příliš dlouhý (max 1000 znaků)');
+
+    // Check auth settings
+    $settings_row = db()->query("SELECT key, value FROM settings")->fetchAll();
+    $settings = [];
+    foreach ($settings_row as $r) $settings[$r['key']] = $r['value'];
+
+    $auth_enabled = ($settings['auth_enabled'] ?? 'false') === 'true';
+    $oauth_user   = $_SESSION['oauth_user'] ?? null;
+    $is_admin     = !empty($_SESSION['is_admin']);
+
+    // If auth required and user not logged in (and not admin)
+    if ($auth_enabled && !$oauth_user && !$is_admin) {
+        json_error('Pro komentování je vyžadováno přihlášení', 401);
+    }
+
+    // Determine author name and user_id
+    if ($oauth_user) {
+        $author  = $oauth_user['display_name'];
+        $user_id = $oauth_user['id'];
+    } else {
+        $author  = mb_substr(trim($body['author'] ?? 'Anonym'), 0, 50) ?: 'Anonym';
+        $user_id = null;
+    }
+
+    $stmt = db()->prepare("
+        INSERT INTO comments (streamer_id, user_id, author, body, is_admin)
+        VALUES (:sid, :uid, :author, :body, :is_admin)
+        RETURNING id, author, body, is_admin, created_at
+    ");
+    $stmt->execute([
+        ':sid'      => $sid,
+        ':uid'      => $user_id,
+        ':author'   => $author,
+        ':body'     => $text,
+        ':is_admin' => $is_admin ? 'true' : 'false',
+    ]);
+    $comment = $stmt->fetch();
+
+    // Add user info to response
+    if ($oauth_user) {
+        $comment['user_display']   = $oauth_user['display_name'];
+        $comment['user_avatar']    = $oauth_user['avatar'];
+        $comment['user_provider']  = $oauth_user['provider'];
+    }
+
+    json_out($comment, 201);
+}
+
+// ------------------------------------------------------------------
+// DELETE — smazat komentář (admin only)
+// ------------------------------------------------------------------
+if ($method === 'DELETE') {
+    require_admin();
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+    db()->prepare("DELETE FROM comments WHERE id = :id")->execute([':id' => $id]);
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/comments.php:Zone.Identifier b/api/comments.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/comments.php:Zone.Identifier differ
diff --git a/api/community_ratings.php b/api/community_ratings.php
new file mode 100644
index 0000000..e4b34c7
--- /dev/null
+++ b/api/community_ratings.php
@@ -0,0 +1,228 @@
+<?php
+// ============================================================
+//  api/community_ratings.php
+//
+//  GET  /api/community_ratings?streamer_id=N  — get all group ratings for a streamer (public)
+//  GET  /api/community_ratings?my_rating=N    — get my group's rating for a streamer (rater)
+//  PUT  /api/community_ratings?streamer_id=N  — submit/update group rating (rater/admin)
+//  DELETE /api/community_ratings?id=N         — delete a rating (admin)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+start_session();
+
+$method = $_SERVER['REQUEST_METHOD'];
+
+// ── GET ────────────────────────────────────────────────────────
+if ($method === 'GET') {
+
+    // Batch: all ratings for a single team (member of the team or admin).
+    //   /api/community_ratings?team_ratings=1&group_id=N
+    if (isset($_GET['team_ratings'])) {
+        $gid  = (int)($_GET['group_id'] ?? 0);
+        if (!$gid) json_error('Missing group_id');
+
+        $is_admin = !empty($_SESSION['is_admin']);
+        $user     = $_SESSION['oauth_user'] ?? null;
+
+        // Members of this team or admin only
+        if (!$is_admin) {
+            if (!$user) json_error('Not logged in', 401);
+            $stmt = db()->prepare("SELECT 1 FROM rater_group_members WHERE group_id=:gid AND user_id=:uid");
+            $stmt->execute([':gid' => $gid, ':uid' => $user['id']]);
+            if (!$stmt->fetchColumn()) json_error('Not a member of this team', 403);
+        }
+
+        $stmt = db()->prepare("
+            SELECT streamer_id, statistiky, grafika, alerty, vychytavky,
+                   nahled, nastaveni, odlisnost, notes, updated_at
+            FROM community_ratings
+            WHERE group_id = :gid
+        ");
+        $stmt->execute([':gid' => $gid]);
+        // Return as map: { streamer_id: rating }
+        $out = [];
+        foreach ($stmt->fetchAll() as $r) {
+            $out[(int)$r['streamer_id']] = $r;
+        }
+        json_out($out);
+    }
+
+    // My group's rating for a specific streamer.
+    // Optional &group_id=N to disambiguate when user is in multiple teams.
+    if (isset($_GET['my_rating'])) {
+        $sid  = (int)($_GET['my_rating'] ?? 0);
+        $gid  = isset($_GET['group_id']) ? (int)$_GET['group_id'] : 0;
+        $user = $_SESSION['oauth_user'] ?? null;
+        if (!$user) json_out(null);
+
+        $sql = "
+            SELECT cr.*, g.name AS group_name
+            FROM community_ratings cr
+            JOIN rater_groups g ON g.id = cr.group_id
+            JOIN rater_group_members m ON m.group_id = g.id
+            WHERE m.user_id = :uid AND cr.streamer_id = :sid
+        ";
+        $params = [':uid' => $user['id'], ':sid' => $sid];
+        if ($gid) {
+            $sql .= " AND cr.group_id = :gid";
+            $params[':gid'] = $gid;
+        }
+        $sql .= " LIMIT 1";
+
+        $stmt = db()->prepare($sql);
+        $stmt->execute($params);
+        json_out($stmt->fetch() ?: null);
+    }
+
+    // All community ratings for a streamer — public, anonymous
+    $sid = (int)($_GET['streamer_id'] ?? 0);
+    if (!$sid) json_error('Missing streamer_id');
+
+    $stmt = db()->prepare("
+        SELECT cr.id, cr.group_id, g.name AS group_name,
+               cr.statistiky, cr.grafika, cr.alerty, cr.vychytavky,
+               cr.nahled, cr.nastaveni, cr.odlisnost, cr.notes, cr.updated_at
+        FROM community_ratings cr
+        JOIN rater_groups g ON g.id = cr.group_id
+        WHERE cr.streamer_id = :sid
+        ORDER BY cr.updated_at DESC
+    ");
+    $stmt->execute([':sid' => $sid]);
+    $ratings = $stmt->fetchAll();
+
+    // Calculate averages
+    $avg = null;
+    $keymap = ['s'=>'statistiky','g'=>'grafika','a'=>'alerty','v'=>'vychytavky','n'=>'nahled','ns'=>'nastaveni','o'=>'odlisnost'];
+    if ($ratings) {
+        $keys = ['statistiky','grafika','alerty','vychytavky','nahled','nastaveni','odlisnost'];
+        $avg  = [];
+        foreach ($keys as $k) {
+            $avg[$k] = round(array_sum(array_column($ratings, $k)) / count($ratings), 1);
+        }
+        // Also expose compact keys for frontend
+        foreach ($keymap as $short => $long) $avg[$short] = $avg[$long];
+        $avg['total'] = round(array_sum(array_intersect_key($avg, array_flip($keys))), 1);
+        $avg['count'] = count($ratings);
+    }
+    // Add compact keys to each rating row too
+    foreach ($ratings as &$r) {
+        foreach ($keymap as $short => $long) $r[$short] = (int)$r[$long];
+    }
+    unset($r);
+
+    json_out(['ratings' => $ratings, 'avg' => $avg]);
+}
+
+// ── PUT — submit or update group rating ───────────────────────
+if ($method === 'PUT') {
+    $sid  = (int)($_GET['streamer_id'] ?? 0);
+    if (!$sid) json_error('Missing streamer_id');
+
+    $is_admin = !empty($_SESSION['is_admin']);
+    $user     = $_SESSION['oauth_user'] ?? null;
+
+    if (!$is_admin && !$user) json_error('Not logged in', 401);
+
+    // Check streamer not locked
+    $stmt = db()->prepare("SELECT community_locked FROM streamers WHERE id=:id");
+    $stmt->execute([':id' => $sid]);
+    $row = $stmt->fetch();
+    if (!$row) json_error('Streamer not found', 404);
+    if ($row['community_locked'] && !$is_admin) json_error('Community ratings are locked for this streamer', 403);
+
+    $body = body();
+
+    // Determine group_id
+    if (isset($body['group_id'])) {
+        $group_id = (int)$body['group_id'];
+
+        // Members must be in this group; admin can use any group
+        if (!$is_admin) {
+            $stmt = db()->prepare("
+                SELECT 1 FROM rater_group_members
+                WHERE group_id = :gid AND user_id = :uid
+            ");
+            $stmt->execute([':gid' => $group_id, ':uid' => $user['id']]);
+            if (!$stmt->fetchColumn()) json_error('You are not a member of this team', 403);
+        }
+    } elseif ($user) {
+        // Default: pick the user's first group
+        $stmt = db()->prepare("
+            SELECT group_id FROM rater_group_members WHERE user_id=:uid LIMIT 1
+        ");
+        $stmt->execute([':uid' => $user['id']]);
+        $row = $stmt->fetch();
+        if (!$row) json_error('You are not assigned to any rater group', 403);
+        $group_id = (int)$row['group_id'];
+    } else {
+        json_error('Cannot determine group', 400);
+    }
+
+    // Block self-rating: a team representing a streamer cannot rate that streamer
+    $stmt = db()->prepare("SELECT streamer_id FROM rater_groups WHERE id = :gid");
+    $stmt->execute([':gid' => $group_id]);
+    $linked_sid = $stmt->fetchColumn();
+    if ($linked_sid && (int)$linked_sid === $sid) {
+        json_error('A team cannot rate its own streamer', 403);
+    }
+
+    $clamp = fn($v) => max(0, min(10, (int)$v));
+    $r = $body['r'] ?? [];
+
+    db()->prepare("
+        INSERT INTO community_ratings
+            (group_id, streamer_id, statistiky, grafika, alerty, vychytavky,
+             nahled, nastaveni, odlisnost, notes, updated_by, updated_at)
+        VALUES
+            (:gid, :sid, :s, :g, :a, :v, :n, :ns, :o, :notes, :uid, NOW())
+        ON CONFLICT (group_id, streamer_id) DO UPDATE SET
+            statistiky  = EXCLUDED.statistiky,
+            grafika     = EXCLUDED.grafika,
+            alerty      = EXCLUDED.alerty,
+            vychytavky  = EXCLUDED.vychytavky,
+            nahled      = EXCLUDED.nahled,
+            nastaveni   = EXCLUDED.nastaveni,
+            odlisnost   = EXCLUDED.odlisnost,
+            notes       = EXCLUDED.notes,
+            updated_by  = EXCLUDED.updated_by,
+            updated_at  = NOW()
+    ")->execute([
+        ':gid'   => $group_id,
+        ':sid'   => $sid,
+        ':s'     => $clamp($r['s']  ?? 0),
+        ':g'     => $clamp($r['g']  ?? 0),
+        ':a'     => $clamp($r['a']  ?? 0),
+        ':v'     => $clamp($r['v']  ?? 0),
+        ':n'     => $clamp($r['n']  ?? 0),
+        ':ns'    => $clamp($r['ns'] ?? 0),
+        ':o'     => $clamp($r['o']  ?? 0),
+        ':notes' => substr(trim($body['notes'] ?? ''), 0, 1000),
+        ':uid'   => $user ? $user['id'] : null,
+    ]);
+
+    json_out(['ok' => true]);
+}
+
+// ── DELETE — admin only ────────────────────────────────────────
+if ($method === 'DELETE') {
+    require_admin();
+
+    // Wipe all ratings for a single streamer (used by reset)
+    if (isset($_GET['wipe_streamer'])) {
+        $sid = (int)$_GET['wipe_streamer'];
+        if (!$sid) json_error('Missing streamer id');
+        $stmt = db()->prepare("DELETE FROM community_ratings WHERE streamer_id = :sid");
+        $stmt->execute([':sid' => $sid]);
+        json_out(['ok' => true, 'deleted' => $stmt->rowCount()]);
+    }
+
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+    db()->prepare("DELETE FROM community_ratings WHERE id=:id")->execute([':id' => $id]);
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/community_ratings.php:Zone.Identifier b/api/community_ratings.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/community_ratings.php:Zone.Identifier differ
diff --git a/api/db.php b/api/db.php
new file mode 100644
index 0000000..028f501
--- /dev/null
+++ b/api/db.php
@@ -0,0 +1,128 @@
+<?php
+// ============================================================
+//  api/db.php  —  shared PDO connection + helpers
+// ============================================================
+
+require_once __DIR__ . '/../config.php';
+
+// Ensure PHP errors never output HTML into JSON responses
+ini_set('display_errors', '0');
+ini_set('display_startup_errors', '0');
+error_reporting(E_ALL);
+
+// Convert PHP errors to exceptions so they get caught properly
+set_error_handler(function(int $errno, string $errstr, string $errfile, int $errline): bool {
+    throw new ErrorException($errstr, 0, $errno, $errfile, $errline);
+});
+
+// Catch fatal errors and return JSON
+register_shutdown_function(function(): void {
+    $err = error_get_last();
+    if ($err && in_array($err['type'], [E_ERROR, E_PARSE, E_CORE_ERROR, E_COMPILE_ERROR])) {
+        if (!headers_sent()) {
+            http_response_code(500);
+            header('Content-Type: application/json; charset=utf-8');
+        }
+        echo json_encode(['error' => 'Internal server error', 'detail' => $err['message']]);
+    }
+});
+
+// Start session once, safely
+// For OAuth flows (cross-site redirect), SameSite must be Lax (not Strict)
+function start_session(): void {
+    if (session_status() === PHP_SESSION_NONE) {
+        $is_https = (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
+                 || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https')
+                 || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443);
+
+        session_set_cookie_params([
+            'lifetime' => 86400,
+            'path'     => '/',
+            'secure'   => $is_https,
+            'httponly' => true,
+            'samesite' => 'Lax',  // Lax allows cookie on redirect from OAuth provider
+        ]);
+        session_start();
+    }
+}
+
+function db(): PDO {
+    static $pdo = null;
+    if ($pdo === null) {
+        $dsn = sprintf(
+            'pgsql:host=%s;port=%s;dbname=%s',
+            DB_HOST, DB_PORT, DB_NAME
+        );
+        $pdo = new PDO($dsn, DB_USER, DB_PASS, [
+            PDO::ATTR_ERRMODE            => PDO::ERRMODE_EXCEPTION,
+            PDO::ATTR_DEFAULT_FETCH_MODE => PDO::FETCH_ASSOC,
+            PDO::ATTR_EMULATE_PREPARES   => false,
+        ]);
+    }
+    return $pdo;
+}
+
+function json_out(mixed $data, int $status = 200): never {
+    http_response_code($status);
+    header('Content-Type: application/json; charset=utf-8');
+    echo json_encode($data, JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+    exit;
+}
+
+function json_error(string $msg, int $status = 400): never {
+    json_out(['error' => $msg], $status);
+}
+
+function cors(): void {
+    $origin = $_SERVER['HTTP_ORIGIN'] ?? '';
+
+    // credentials:include requires explicit origin, not wildcard
+    if ($origin !== '') {
+        header('Access-Control-Allow-Origin: ' . $origin);
+    } else {
+        header('Access-Control-Allow-Origin: *');
+    }
+    header('Access-Control-Allow-Methods: GET, POST, PUT, DELETE, OPTIONS');
+    header('Access-Control-Allow-Headers: Content-Type');
+    header('Access-Control-Allow-Credentials: true');
+    if ($_SERVER['REQUEST_METHOD'] === 'OPTIONS') {
+        http_response_code(204);
+        exit;
+    }
+}
+
+function require_admin(): void {
+    start_session();
+    if (empty($_SESSION['is_admin'])) {
+        json_error('Unauthorized', 401);
+    }
+}
+
+function is_moderator(): bool {
+    start_session();
+    if (!empty($_SESSION['is_admin'])) return true;
+    $user = $_SESSION['oauth_user'] ?? null;
+    if (!$user) return false;
+    $stmt = db()->prepare("
+        SELECT 1 FROM moderators m
+        JOIN users u ON u.id = m.user_id
+        WHERE m.user_id = :uid AND (u.banned IS NULL OR u.banned = false)
+    ");
+    $stmt->execute([':uid' => $user['id']]);
+    return (bool)$stmt->fetchColumn();
+}
+
+function require_mod(): void {
+    if (!is_moderator()) {
+        json_error('Unauthorized — moderator access required', 401);
+    }
+}
+
+function body(): array {
+    $raw = file_get_contents('php://input');
+    return json_decode($raw, true) ?? [];
+}
+
+function sanitize_name(string $name): string {
+    return strtolower(preg_replace('/[^a-zA-Z0-9_]/', '', trim($name)));
+}
diff --git a/api/db.php:Zone.Identifier b/api/db.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/db.php:Zone.Identifier differ
diff --git a/api/live.php b/api/live.php
new file mode 100644
index 0000000..b1bedbe
--- /dev/null
+++ b/api/live.php
@@ -0,0 +1,225 @@
+<?php
+// ============================================================
+//  api/live.php
+//
+//  GET /api/live          — public, returns current DB status
+//  GET /api/live?refresh=1 — admin only, fetches from Twitch/Kick API
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+
+if ($_SERVER['REQUEST_METHOD'] !== 'GET') {
+    json_error('Method not allowed', 405);
+}
+
+// Public request — just return current status from DB
+if (!isset($_GET['refresh'])) {
+    $rows = db()->query("
+        SELECT id, name, platform, kick_name, status, game, title
+        FROM streamers ORDER BY name
+    ")->fetchAll();
+    json_out($rows);
+}
+
+// Refresh request — admin only
+require_admin();
+
+$cache_file = '/tmp/snb_live_cache.json';
+$now        = time();
+
+// Return cached result if still fresh
+if (file_exists($cache_file)) {
+    $cache = json_decode(file_get_contents($cache_file), true);
+    if ($cache && ($now - $cache['ts']) < LIVE_CACHE_TTL) {
+        json_out(['cached' => true, 'age' => $now - $cache['ts'], 'results' => $cache['results']]);
+    }
+}
+
+// Fetch all streamers from DB
+$rows = db()->query("
+    SELECT id, name, platform, kick_name FROM streamers ORDER BY name
+")->fetchAll();
+
+$twitch_streamers = [];
+$kick_streamers   = [];
+
+foreach ($rows as $row) {
+    if ($row['platform'] === 'kick' && !empty($row['kick_name'])) {
+        $kick_streamers[] = $row;
+    } else {
+        $twitch_streamers[] = $row;
+    }
+}
+
+$results = [];
+
+// ------------------------------------------------------------------
+// Twitch — Helix API
+// ------------------------------------------------------------------
+if ($twitch_streamers) {
+    $token = get_twitch_token();
+
+    if ($token) {
+        foreach (array_chunk($twitch_streamers, 100) as $batch) {
+            // Build URL with multiple login= params
+            $params = array_map(
+                fn($s) => 'user_login=' . urlencode(strtolower($s['name'])),
+                $batch
+            );
+            $url = 'https://api.twitch.tv/helix/streams?' . implode('&', $params) . '&first=100';
+
+            $response = twitch_get($url, $token);
+
+            // Build lookup by login name
+            $live = [];
+            if ($response && isset($response['data'])) {
+                foreach ($response['data'] as $stream) {
+                    $live[strtolower($stream['user_login'])] = $stream;
+                }
+            }
+
+            foreach ($batch as $s) {
+                $login  = strtolower($s['name']);
+                $stream = $live[$login] ?? null;
+                $results[$s['id']] = [
+                    'id'     => $s['id'],
+                    'name'   => $s['name'],
+                    'status' => $stream ? 'live' : 'offline',
+                    'game'   => $stream['game_name'] ?? '',
+                    'title'  => $stream['title']     ?? '',
+                ];
+            }
+        }
+    } else {
+        foreach ($twitch_streamers as $s) {
+            $results[$s['id']] = [
+                'id' => $s['id'], 'name' => $s['name'],
+                'status' => 'unknown', 'game' => '', 'title' => '',
+            ];
+        }
+    }
+}
+
+// ------------------------------------------------------------------
+// Kick — public API
+// ------------------------------------------------------------------
+foreach ($kick_streamers as $s) {
+    $kick_name = $s['kick_name'] ?: $s['name'];
+    // Kick public channel API — no auth required
+    $url = 'https://kick.com/api/v2/channels/' . urlencode(strtolower($kick_name));
+
+    $ch = curl_init($url);
+    curl_setopt_array($ch, [
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_TIMEOUT        => 8,
+        CURLOPT_FOLLOWLOCATION => true,
+        CURLOPT_HTTPHEADER     => [
+            'Accept: application/json',
+            'Accept-Language: en-US,en;q=0.9',
+            'User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36',
+        ],
+    ]);
+    $body   = curl_exec($ch);
+    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+
+    $data    = ($status === 200 && $body) ? json_decode($body, true) : null;
+    // livestream key is present and non-null when live
+    $is_live = !empty($data['livestream']);
+
+    $results[$s['id']] = [
+        'id'     => $s['id'],
+        'name'   => $s['name'],
+        'status' => $is_live ? 'live' : 'offline',
+        'game'   => $data['livestream']['categories'][0]['name'] ?? '',
+        'title'  => $data['livestream']['session_title']         ?? '',
+    ];
+}
+
+// ------------------------------------------------------------------
+// Write results back to DB
+// ------------------------------------------------------------------
+if ($results) {
+    $db   = db();
+    $stmt = $db->prepare("
+        UPDATE streamers
+        SET status = :status, game = :game, title = :title
+        WHERE id = :id
+    ");
+    foreach ($results as $r) {
+        if ($r['status'] === 'unknown') continue;
+        $stmt->execute([
+            ':status' => $r['status'],
+            ':game'   => $r['game'],
+            ':title'  => $r['title'],
+            ':id'     => $r['id'],
+        ]);
+    }
+}
+
+// Cache
+file_put_contents($cache_file, json_encode([
+    'ts'      => $now,
+    'results' => array_values($results),
+]));
+
+json_out(['cached' => false, 'results' => array_values($results)]);
+
+// ------------------------------------------------------------------
+// Helpers
+// ------------------------------------------------------------------
+function get_twitch_token(): ?string {
+    $cache_file = '/tmp/snb_twitch_token.json';
+
+    if (file_exists($cache_file)) {
+        $cached = json_decode(file_get_contents($cache_file), true);
+        if ($cached && $cached['expires_at'] > time() + 3600) {
+            return $cached['access_token'];
+        }
+    }
+
+    $ch = curl_init('https://id.twitch.tv/oauth2/token');
+    curl_setopt_array($ch, [
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_POST           => true,
+        CURLOPT_POSTFIELDS     => http_build_query([
+            'client_id'     => TWITCH_CLIENT_ID,
+            'client_secret' => TWITCH_CLIENT_SECRET,
+            'grant_type'    => 'client_credentials',
+        ]),
+    ]);
+    $body   = curl_exec($ch);
+    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+
+    if ($status !== 200) return null;
+
+    $data = json_decode($body, true);
+    if (empty($data['access_token'])) return null;
+
+    file_put_contents($cache_file, json_encode([
+        'access_token' => $data['access_token'],
+        'expires_at'   => time() + ($data['expires_in'] ?? 3600),
+    ]));
+
+    return $data['access_token'];
+}
+
+function twitch_get(string $url, string $token): ?array {
+    $ch = curl_init($url);
+    curl_setopt_array($ch, [
+        CURLOPT_RETURNTRANSFER => true,
+        CURLOPT_TIMEOUT        => 10,
+        CURLOPT_HTTPHEADER     => [
+            'Client-ID: '            . TWITCH_CLIENT_ID,
+            'Authorization: Bearer ' . $token,
+        ],
+    ]);
+    $body   = curl_exec($ch);
+    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+    curl_close($ch);
+
+    return ($status === 200) ? json_decode($body, true) : null;
+}
diff --git a/api/live.php:Zone.Identifier b/api/live.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/live.php:Zone.Identifier differ
diff --git a/api/moderators.php b/api/moderators.php
new file mode 100644
index 0000000..5afadb7
--- /dev/null
+++ b/api/moderators.php
@@ -0,0 +1,106 @@
+<?php
+// ============================================================
+//  api/moderators.php
+//
+//  GET    /api/moderators           — list moderators (admin)
+//  GET    /api/moderators?users=1   — list all OAuth users (admin)
+//  POST   /api/moderators           — add mod by username (admin)
+//  DELETE /api/moderators?id=N      — revoke mod (admin)
+//  POST   /api/moderators?ban=1     — ban user (admin)
+//  DELETE /api/moderators?unban=N   — unban user (admin)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+require_admin();
+
+$method = $_SERVER['REQUEST_METHOD'];
+
+// ------------------------------------------------------------------
+// GET
+// ------------------------------------------------------------------
+if ($method === 'GET') {
+
+    if (isset($_GET['users'])) {
+        // All OAuth users with their role
+        $rows = db()->query("
+            SELECT u.id, u.provider, u.login, u.display_name, u.avatar,
+                   u.created_at, u.last_seen, u.banned,
+                   CASE WHEN m.id IS NOT NULL THEN true ELSE false END AS is_mod
+            FROM users u
+            LEFT JOIN moderators m ON m.user_id = u.id
+            ORDER BY u.last_seen DESC
+            LIMIT 200
+        ")->fetchAll();
+        json_out($rows);
+    }
+
+    // Moderators list
+    $rows = db()->query("
+        SELECT m.id AS mod_id, m.created_at, m.granted_by,
+               u.id, u.provider, u.login, u.display_name, u.avatar
+        FROM moderators m
+        JOIN users u ON u.id = m.user_id
+        ORDER BY m.created_at DESC
+    ")->fetchAll();
+    json_out($rows);
+}
+
+// ------------------------------------------------------------------
+// POST — add mod or ban
+// ------------------------------------------------------------------
+if ($method === 'POST') {
+
+    // Ban user
+    if (isset($_GET['ban'])) {
+        $body    = body();
+        $user_id = (int)($body['user_id'] ?? 0);
+        if (!$user_id) json_error('Missing user_id');
+        db()->prepare("UPDATE users SET banned=true WHERE id=:id")->execute([':id' => $user_id]);
+        // Also remove mod if banned
+        db()->prepare("DELETE FROM moderators WHERE user_id=:id")->execute([':id' => $user_id]);
+        json_out(['ok' => true]);
+    }
+
+    // Add moderator by username
+    $body     = body();
+    $login    = strtolower(trim($body['login']    ?? ''));
+    $provider = in_array($body['provider'] ?? '', ['twitch','kick']) ? $body['provider'] : 'twitch';
+
+    if (empty($login)) json_error('Missing login');
+
+    $stmt = db()->prepare("SELECT id, display_name FROM users WHERE LOWER(login)=:l AND provider=:p AND (banned IS NULL OR banned=false)");
+    $stmt->execute([':l' => $login, ':p' => $provider]);
+    $user = $stmt->fetch();
+
+    if (!$user) {
+        json_error("Uživatel '$login' na $provider se zatím nepřihlásil nebo je zabanován.", 404);
+    }
+
+    db()->prepare("INSERT INTO moderators (user_id, granted_by) VALUES (:uid,'admin') ON CONFLICT (user_id) DO NOTHING")
+        ->execute([':uid' => $user['id']]);
+    json_out(['ok' => true, 'display_name' => $user['display_name']]);
+}
+
+// ------------------------------------------------------------------
+// DELETE — revoke mod or unban
+// ------------------------------------------------------------------
+if ($method === 'DELETE') {
+
+    // Unban
+    if (isset($_GET['unban'])) {
+        $user_id = (int)($_GET['unban'] ?? 0);
+        if (!$user_id) json_error('Missing user_id');
+        db()->prepare("UPDATE users SET banned=false WHERE id=:id")->execute([':id' => $user_id]);
+        json_out(['ok' => true]);
+    }
+
+    // Remove mod
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+    db()->prepare("DELETE FROM moderators WHERE id=:id")->execute([':id' => $id]);
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/moderators.php:Zone.Identifier b/api/moderators.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/moderators.php:Zone.Identifier differ
diff --git a/api/oauth.php b/api/oauth.php
new file mode 100644
index 0000000..f6e6f56
--- /dev/null
+++ b/api/oauth.php
@@ -0,0 +1,276 @@
+<?php
+// ============================================================
+//  api/oauth.php — Twitch + Kick OAuth
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+start_session();
+
+$provider = $_GET['provider'] ?? '';
+$action   = $_GET['action']   ?? '';
+$code     = $_GET['code']     ?? '';
+$error    = $_GET['error']    ?? '';
+
+// ── Current user ─────────────────────────────────────────────
+if ($action === 'me') {
+    start_session();
+    $user = $_SESSION['oauth_user'] ?? null;
+    $is_mod = false;
+    $banned = false;
+
+    if ($user) {
+        $stmt = db()->prepare("SELECT banned FROM users WHERE id=:uid");
+        $stmt->execute([':uid' => $user['id']]);
+        $row = $stmt->fetch();
+        $banned = !empty($row['banned']);
+
+        if ($banned) {
+            // Force logout banned user
+            unset($_SESSION['oauth_user']);
+            $user = null;
+        } else {
+            $stmt = db()->prepare("SELECT 1 FROM moderators WHERE user_id=:uid");
+            $stmt->execute([':uid' => $user['id']]);
+            $is_mod = (bool)$stmt->fetchColumn();
+        }
+    }
+
+    json_out([
+        'user'     => $user,
+        'is_admin' => !empty($_SESSION['is_admin']),
+        'is_mod'   => $is_mod,
+        'banned'   => $banned,
+    ]);
+}
+
+// ── Debug ─────────────────────────────────────────────────────
+if ($action === 'debug') {
+    $states = db()->query("SELECT state, provider, created_at FROM oauth_state WHERE state != '__debug__' ORDER BY created_at DESC LIMIT 5")->fetchAll();
+    $debug_row = db()->prepare("SELECT verifier FROM oauth_state WHERE state='__debug__'")->execute() ? null : null;
+    $stmt = db()->prepare("SELECT verifier FROM oauth_state WHERE state='__debug__'");
+    $stmt->execute();
+    $debug_row = $stmt->fetch();
+    $kick_debug = $debug_row ? json_decode($debug_row['verifier'], true) : null;
+
+    json_out([
+        'session_id'        => session_id(),
+        'oauth_user'        => $_SESSION['oauth_user'] ?? null,
+        'kick_debug'        => $kick_debug,
+        'twitch_redirect'   => TWITCH_OAUTH_REDIRECT_URI,
+        'kick_redirect'     => defined('KICK_OAUTH_REDIRECT_URI') ? KICK_OAUTH_REDIRECT_URI : '',
+        'twitch_client_set' => !empty(TWITCH_OAUTH_CLIENT_ID),
+        'kick_client_set'   => !empty(KICK_OAUTH_CLIENT_ID),
+        'https_detected'    => is_https(),
+        'recent_db_states'  => $states,
+    ]);
+}
+
+// ── Logout ────────────────────────────────────────────────────
+if ($action === 'logout') {
+    unset($_SESSION['oauth_user']);
+    header('Location: /');
+    exit;
+}
+
+// ── Twitch OAuth ──────────────────────────────────────────────
+if ($provider === 'twitch') {
+
+    if (empty($code) && empty($error)) {
+        $state = bin2hex(random_bytes(16));
+        $_SESSION['oauth_state']    = $state;
+        $_SESSION['oauth_provider'] = 'twitch';
+
+        $params = http_build_query([
+            'client_id'     => TWITCH_OAUTH_CLIENT_ID,
+            'redirect_uri'  => TWITCH_OAUTH_REDIRECT_URI,
+            'response_type' => 'code',
+            'scope'         => 'user:read:email',
+            'state'         => $state,
+            'force_verify'  => 'false',
+        ]);
+        header('Location: https://id.twitch.tv/oauth2/authorize?' . $params);
+        exit;
+    }
+
+    if (!empty($error)) { header('Location: /?auth_error=' . urlencode($error)); exit; }
+
+    if (($_GET['state'] ?? '') !== ($_SESSION['oauth_state'] ?? '')) {
+        header('Location: /?auth_error=invalid_state'); exit;
+    }
+    unset($_SESSION['oauth_state'], $_SESSION['oauth_provider']);
+
+    $resp = do_post('https://id.twitch.tv/oauth2/token', [], http_build_query([
+        'client_id'     => TWITCH_OAUTH_CLIENT_ID,
+        'client_secret' => TWITCH_OAUTH_CLIENT_SECRET,
+        'code'          => $code,
+        'grant_type'    => 'authorization_code',
+        'redirect_uri'  => TWITCH_OAUTH_REDIRECT_URI,
+    ]));
+
+    if ($resp['status'] !== 200) { header('Location: /?auth_error=twitch_token_failed_' . $resp['status']); exit; }
+
+    $access_token = json_decode($resp['body'], true)['access_token'] ?? '';
+    if (empty($access_token)) { header('Location: /?auth_error=twitch_no_token'); exit; }
+
+    $resp = do_get('https://api.twitch.tv/helix/users', [
+        'Client-ID: '            . TWITCH_OAUTH_CLIENT_ID,
+        'Authorization: Bearer ' . $access_token,
+    ]);
+    if ($resp['status'] !== 200) { header('Location: /?auth_error=twitch_user_failed'); exit; }
+
+    $tu = json_decode($resp['body'], true)['data'][0] ?? null;
+    if (!$tu) { header('Location: /?auth_error=twitch_no_user'); exit; }
+
+    $_SESSION['oauth_user'] = upsert_user('twitch', $tu['id'], $tu['login'], $tu['display_name'], $tu['profile_image_url'] ?? '');
+    header('Location: /');
+    exit;
+}
+
+// ── Kick OAuth (PKCE, state stored in DB) ────────────────────
+if ($provider === 'kick') {
+
+    $kick_id     = defined('KICK_OAUTH_CLIENT_ID')     ? KICK_OAUTH_CLIENT_ID     : '';
+    $kick_secret = defined('KICK_OAUTH_CLIENT_SECRET') ? KICK_OAUTH_CLIENT_SECRET : '';
+    $kick_uri    = defined('KICK_OAUTH_REDIRECT_URI')  ? KICK_OAUTH_REDIRECT_URI  : '';
+
+    if (empty($kick_id)) { header('Location: /?auth_error=kick_not_configured'); exit; }
+
+    if (empty($code) && empty($error)) {
+        $verifier  = rtrim(strtr(base64_encode(random_bytes(48)), '+/', '-_'), '=');
+        $challenge = rtrim(strtr(base64_encode(hash('sha256', $verifier, true)), '+/', '-_'), '=');
+        $state     = bin2hex(random_bytes(16));
+
+        // Store verifier in DB — session is unreliable across OAuth redirect
+        db()->prepare("DELETE FROM oauth_state WHERE created_at < NOW() - INTERVAL '10 minutes'")->execute();
+        db()->prepare("INSERT INTO oauth_state (state, provider, verifier) VALUES (:s,'kick',:v) ON CONFLICT (state) DO UPDATE SET verifier=EXCLUDED.verifier")
+            ->execute([':s' => $state, ':v' => $verifier]);
+
+        $params = http_build_query([
+            'client_id'             => $kick_id,
+            'redirect_uri'          => $kick_uri,
+            'response_type'         => 'code',
+            'scope'                 => 'user:read channel:read',
+            'state'                 => $state,
+            'code_challenge'        => $challenge,
+            'code_challenge_method' => 'S256',
+        ]);
+        header('Location: https://id.kick.com/oauth/authorize?' . $params);
+        exit;
+    }
+
+    if (!empty($error)) { header('Location: /?auth_error=' . urlencode($error)); exit; }
+
+    // Retrieve verifier from DB using state
+    $stmt = db()->prepare("SELECT verifier FROM oauth_state WHERE state=:s AND provider='kick'");
+    $stmt->execute([':s' => $_GET['state'] ?? '']);
+    $row = $stmt->fetch();
+
+    if (!$row) { header('Location: /?auth_error=kick_invalid_state'); exit; }
+
+    $verifier = $row['verifier'];
+    db()->prepare("DELETE FROM oauth_state WHERE state=:s")->execute([':s' => $_GET['state']]);
+
+    $fields = [
+        'grant_type'    => 'authorization_code',
+        'client_id'     => $kick_id,
+        'redirect_uri'  => $kick_uri,
+        'code'          => $code,
+        'code_verifier' => $verifier,
+    ];
+    if (!empty($kick_secret)) $fields['client_secret'] = $kick_secret;
+
+    $resp_token = do_post('https://id.kick.com/oauth/token', [], http_build_query($fields));
+
+    if ($resp_token['status'] !== 200) {
+        $err = json_decode($resp_token['body'], true);
+        $msg = $err['error'] ?? $err['message'] ?? $err['error_description'] ?? '';
+        if (empty($msg)) {
+            $_SESSION['kick_debug'] = ['status' => $resp_token['status'], 'body' => substr($resp_token['body'], 0, 500), 'fields' => $fields];
+            header('Location: /?auth_error=kick_token_' . $resp_token['status'] . '_see_debug');
+        } else {
+            header('Location: /?auth_error=' . urlencode('kick_token_' . $resp_token['status'] . '_' . $msg));
+        }
+        exit;
+    }
+
+    $token_data   = json_decode($resp_token['body'], true);
+    $access_token = $token_data['access_token'] ?? '';
+    $resp_token_raw = $resp_token['body'];
+    if (empty($access_token)) { header('Location: /?auth_error=kick_no_token'); exit; }
+
+    $auth_header = ['Authorization: Bearer ' . $access_token, 'Accept: application/json'];
+
+    // Correct endpoint per Kick docs — GET /public/v1/users returns current user
+    $resp_user = do_get('https://api.kick.com/public/v1/users', $auth_header);
+
+    $debug = json_encode([
+        'introspect_scope' => json_decode($resp_token_raw, true)['scope'] ?? '',
+        'users_endpoint'   => ['s' => $resp_user['status'], 'b' => substr($resp_user['body'], 0, 500)],
+    ]);
+    db()->prepare("INSERT INTO oauth_state (state, provider, verifier) VALUES ('__debug__','kick_debug',:d) ON CONFLICT (state) DO UPDATE SET verifier=EXCLUDED.verifier, created_at=NOW()")
+        ->execute([':d' => $debug]);
+
+    if ($resp_user['status'] !== 200) {
+        header('Location: /?auth_error=kick_user_failed_' . $resp_user['status'] . '_see_debug');
+        exit;
+    }
+
+    $ku = json_decode($resp_user['body'], true) ?? [];
+    // Handle potential data wrapper
+    if (isset($ku['data'])) $ku = $ku['data'];
+    if (isset($ku[0]))      $ku = $ku[0];
+
+    $ku_id      = $ku['id']              ?? $ku['user_id']  ?? null;
+    $ku_login   = $ku['username']        ?? $ku['slug']     ?? $ku['name']  ?? '';
+    $ku_display = $ku['name']            ?? $ku['username'] ?? $ku_login;
+    $ku_avatar  = $ku['profile_picture'] ?? $ku['profile_pic'] ?? $ku['picture'] ?? '';
+
+    if (empty($ku_id)) { header('Location: /?auth_error=kick_no_user'); exit; }
+
+    $_SESSION['oauth_user'] = upsert_user('kick', (string)$ku_id, $ku_login, $ku_display, $ku_avatar);
+    header('Location: /');
+    exit;
+}
+
+json_error('Not found', 404);
+
+// ── Helpers ───────────────────────────────────────────────────
+function do_post(string $url, array $extra_headers, string $body): array {
+    $default_headers = empty($body) ? ['Accept: application/json'] : ['Content-Type: application/x-www-form-urlencoded', 'Accept: application/json'];
+    $headers = array_merge($default_headers, $extra_headers);
+    $ch = curl_init($url);
+    $opts = [CURLOPT_RETURNTRANSFER=>true, CURLOPT_POST=>true, CURLOPT_HTTPHEADER=>$headers, CURLOPT_TIMEOUT=>10];
+    if (!empty($body)) $opts[CURLOPT_POSTFIELDS] = $body;
+    curl_setopt_array($ch, $opts);
+    $resp = curl_exec($ch); $status = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch);
+    return ['status' => $status, 'body' => (string)$resp];
+}
+
+function do_get(string $url, array $extra_headers = []): array {
+    $headers = array_merge(['Accept: application/json'], $extra_headers);
+    $ch = curl_init($url);
+    curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER=>true, CURLOPT_HTTPHEADER=>$headers, CURLOPT_TIMEOUT=>10]);
+    $resp = curl_exec($ch); $status = curl_getinfo($ch, CURLINFO_HTTP_CODE); curl_close($ch);
+    return ['status' => $status, 'body' => (string)$resp];
+}
+
+function upsert_user(string $provider, string $pid, string $login, string $display, string $avatar): array {
+    $stmt = db()->prepare("
+        INSERT INTO users (provider, provider_id, login, display_name, avatar, last_seen)
+        VALUES (:p,:pid,:l,:d,:a,NOW())
+        ON CONFLICT (provider, provider_id) DO UPDATE SET
+            login=EXCLUDED.login, display_name=EXCLUDED.display_name,
+            avatar=EXCLUDED.avatar, last_seen=NOW()
+        RETURNING id, provider, login, display_name, avatar
+    ");
+    $stmt->execute([':p'=>$provider,':pid'=>$pid,':l'=>$login,':d'=>$display,':a'=>$avatar]);
+    return $stmt->fetch();
+}
+
+function is_https(): bool {
+    return (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off')
+        || (isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] === 'https')
+        || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == 443);
+}
diff --git a/api/oauth.php:Zone.Identifier b/api/oauth.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/oauth.php:Zone.Identifier differ
diff --git a/api/rater_groups.php b/api/rater_groups.php
new file mode 100644
index 0000000..e4c8db1
--- /dev/null
+++ b/api/rater_groups.php
@@ -0,0 +1,172 @@
+<?php
+// ============================================================
+//  api/rater_groups.php
+//
+//  GET    /api/rater_groups                  — list groups + members + linked streamer (admin)
+//  GET    /api/rater_groups?my=1             — my group(s) info (rater); returns array
+//  POST   /api/rater_groups                  — create group, optional streamer_id (admin)
+//  PUT    /api/rater_groups?id=N             — update group (rename, set/unset streamer_id) (admin)
+//  DELETE /api/rater_groups?id=N             — delete group (admin)
+//  POST   /api/rater_groups?members=1        — add member to group (admin)
+//  DELETE /api/rater_groups?member=N         — remove member (admin)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+start_session();
+
+$method = $_SERVER['REQUEST_METHOD'];
+
+// ── My groups — for logged-in raters (returns array of groups) ─
+if ($method === 'GET' && isset($_GET['my'])) {
+    $user = $_SESSION['oauth_user'] ?? null;
+    if (!$user) json_error('Not logged in', 401);
+
+    $stmt = db()->prepare("
+        SELECT g.id, g.name, g.streamer_id
+        FROM rater_groups g
+        JOIN rater_group_members m ON m.group_id = g.id
+        WHERE m.user_id = :uid
+        ORDER BY g.name
+    ");
+    $stmt->execute([':uid' => $user['id']]);
+    $groups = $stmt->fetchAll();
+    json_out($groups);
+}
+
+// All remaining endpoints require admin
+require_admin();
+
+// ── GET — list all groups with members + linked streamer ────
+if ($method === 'GET') {
+    $groups = db()->query("
+        SELECT g.id, g.name, g.streamer_id, g.created_at,
+               s.name AS streamer_name
+        FROM rater_groups g
+        LEFT JOIN streamers s ON s.id = g.streamer_id
+        ORDER BY g.name
+    ")->fetchAll();
+
+    foreach ($groups as &$g) {
+        $stmt = db()->prepare("
+            SELECT m.id AS member_id, m.role, u.id, u.provider, u.login, u.display_name, u.avatar
+            FROM rater_group_members m
+            JOIN users u ON u.id = m.user_id
+            WHERE m.group_id = :gid
+            ORDER BY (m.role = 'owner') DESC, m.added_at
+        ");
+        $stmt->execute([':gid' => $g['id']]);
+        $g['members'] = $stmt->fetchAll();
+
+        $stmt = db()->prepare("SELECT COUNT(*) FROM community_ratings WHERE group_id = :gid");
+        $stmt->execute([':gid' => $g['id']]);
+        $g['ratings_count'] = (int)$stmt->fetchColumn();
+    }
+
+    json_out($groups);
+}
+
+// ── POST — create group or add member ────────────────────────
+if ($method === 'POST') {
+
+    if (isset($_GET['members'])) {
+        $body     = body();
+        $group_id = (int)($body['group_id'] ?? 0);
+        $login    = strtolower(trim($body['login'] ?? ''));
+        $provider = in_array($body['provider'] ?? '', ['twitch','kick']) ? $body['provider'] : 'twitch';
+        $role     = in_array($body['role'] ?? '', ['owner','rater']) ? $body['role'] : 'rater';
+
+        if (!$group_id || empty($login)) json_error('Missing group_id or login');
+
+        $stmt = db()->prepare("SELECT id, display_name FROM users WHERE LOWER(login)=:l AND provider=:p AND (banned IS NULL OR banned=false)");
+        $stmt->execute([':l' => $login, ':p' => $provider]);
+        $user = $stmt->fetch();
+
+        if (!$user) json_error("User '$login' on $provider has not logged in yet or is banned.", 404);
+
+        // Only one owner per team — promote, if owner role requested
+        if ($role === 'owner') {
+            db()->prepare("UPDATE rater_group_members SET role='rater' WHERE group_id=:gid AND role='owner'")
+                ->execute([':gid' => $group_id]);
+        }
+
+        db()->prepare("
+            INSERT INTO rater_group_members (group_id, user_id, role)
+            VALUES (:gid, :uid, :role)
+            ON CONFLICT (group_id, user_id) DO UPDATE SET role = EXCLUDED.role
+        ")->execute([':gid' => $group_id, ':uid' => $user['id'], ':role' => $role]);
+
+        json_out(['ok' => true, 'display_name' => $user['display_name'], 'role' => $role]);
+    }
+
+    $body        = body();
+    $name        = trim($body['name'] ?? '');
+    $streamer_id = !empty($body['streamer_id']) ? (int)$body['streamer_id'] : null;
+    if (empty($name)) json_error('Missing name');
+
+    try {
+        $stmt = db()->prepare("
+            INSERT INTO rater_groups (name, streamer_id)
+            VALUES (:n, :sid)
+            RETURNING id, name, streamer_id, created_at
+        ");
+        $stmt->execute([':n' => $name, ':sid' => $streamer_id]);
+        json_out($stmt->fetch(), 201);
+    } catch (PDOException $e) {
+        $msg = $e->getMessage();
+        if (str_contains($msg, 'rater_groups_name')) json_error('Group name already exists', 409);
+        if (str_contains($msg, 'idx_rater_groups_streamer')) json_error('This streamer already has a team', 409);
+        json_error('DB error: ' . $msg, 500);
+    }
+}
+
+// ── PUT — update group (rename, link/unlink streamer) ────────
+if ($method === 'PUT') {
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+    $body = body();
+
+    $sets = [];
+    $params = [':id' => $id];
+    if (array_key_exists('name', $body)) {
+        $name = trim($body['name'] ?? '');
+        if (empty($name)) json_error('Name cannot be empty');
+        $sets[] = 'name = :name';
+        $params[':name'] = $name;
+    }
+    if (array_key_exists('streamer_id', $body)) {
+        $sets[] = 'streamer_id = :sid';
+        $params[':sid'] = !empty($body['streamer_id']) ? (int)$body['streamer_id'] : null;
+    }
+    if (empty($sets)) json_error('Nothing to update');
+
+    try {
+        $stmt = db()->prepare("UPDATE rater_groups SET " . implode(', ', $sets) . " WHERE id = :id");
+        $stmt->execute($params);
+        json_out(['ok' => true]);
+    } catch (PDOException $e) {
+        $msg = $e->getMessage();
+        if (str_contains($msg, 'rater_groups_name')) json_error('Group name already exists', 409);
+        if (str_contains($msg, 'idx_rater_groups_streamer')) json_error('This streamer already has a team', 409);
+        json_error('DB error', 500);
+    }
+}
+
+// ── DELETE — remove group or member ──────────────────────────
+if ($method === 'DELETE') {
+
+    if (isset($_GET['member'])) {
+        $id = (int)($_GET['member'] ?? 0);
+        if (!$id) json_error('Missing member id');
+        db()->prepare("DELETE FROM rater_group_members WHERE id=:id")->execute([':id' => $id]);
+        json_out(['ok' => true]);
+    }
+
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+    db()->prepare("DELETE FROM rater_groups WHERE id=:id")->execute([':id' => $id]);
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/rater_groups.php:Zone.Identifier b/api/rater_groups.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/rater_groups.php:Zone.Identifier differ
diff --git a/api/settings.php b/api/settings.php
new file mode 100644
index 0000000..fc1d7d7
--- /dev/null
+++ b/api/settings.php
@@ -0,0 +1,41 @@
+<?php
+// ============================================================
+//  api/settings.php
+//
+//  GET /api/settings      — get all settings (public)
+//  PUT /api/settings      — update settings (admin only)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+
+if ($_SERVER['REQUEST_METHOD'] === 'GET') {
+    $rows = db()->query("SELECT key, value FROM settings")->fetchAll();
+    $out  = [];
+    foreach ($rows as $r) {
+        $out[$r['key']] = $r['value'];
+    }
+    json_out($out);
+}
+
+if ($_SERVER['REQUEST_METHOD'] === 'PUT') {
+    require_admin();
+
+    $body    = body();
+    $allowed = ['auth_enabled', 'auth_twitch_enabled', 'auth_kick_enabled'];
+
+    $db   = db();
+    $stmt = $db->prepare("INSERT INTO settings (key, value) VALUES (:k, :v) ON CONFLICT (key) DO UPDATE SET value = EXCLUDED.value");
+
+    foreach ($allowed as $key) {
+        if (isset($body[$key])) {
+            $val = $body[$key] === true || $body[$key] === 'true' ? 'true' : 'false';
+            $stmt->execute([':k' => $key, ':v' => $val]);
+        }
+    }
+
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/settings.php:Zone.Identifier b/api/settings.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/settings.php:Zone.Identifier differ
diff --git a/api/streamers.php b/api/streamers.php
new file mode 100644
index 0000000..8ef1bed
--- /dev/null
+++ b/api/streamers.php
@@ -0,0 +1,269 @@
+<?php
+// ============================================================
+//  api/streamers.php
+//
+//  GET    /api/streamers          — public list (evaluated only)
+//  GET    /api/streamers?all=1    — full list (admin or mod)
+//  POST   /api/streamers          — suggest a streamer (public)
+//  POST   /api/streamers?admin=1  — add streamer (admin only)
+//  PUT    /api/streamers?id=N     — update streamer + rating (admin or mod)
+//  DELETE /api/streamers?id=N     — delete streamer (admin only)
+// ============================================================
+
+require_once __DIR__ . '/db.php';
+
+cors();
+
+$method = $_SERVER['REQUEST_METHOD'];
+
+// ------------------------------------------------------------------
+// GET — fetch streamers
+// ------------------------------------------------------------------
+if ($method === 'GET') {
+    start_session();
+    $is_admin = !empty($_SESSION['is_admin']);
+    $is_mod   = is_moderator();
+
+    // Detect if logged-in OAuth user is a member of any rater team
+    $is_team_member = false;
+    if (!$is_admin && !$is_mod && !empty($_SESSION['oauth_user']['id'])) {
+        $stmt = db()->prepare("SELECT 1 FROM rater_group_members WHERE user_id = :uid LIMIT 1");
+        $stmt->execute([':uid' => $_SESSION['oauth_user']['id']]);
+        $is_team_member = (bool)$stmt->fetchColumn();
+    }
+
+    // 'all=1' is admin/mod request for unfiltered list (with notes etc.)
+    $all = isset($_GET['all']) && ($is_admin || $is_mod);
+    // Team members must see all streamers (even unevaluated) so they can rate them
+    $see_unevaluated = $all || $is_team_member;
+
+    if ($all) {
+        $sql = "
+            SELECT s.*,
+                   r.statistiky, r.grafika, r.alerty, r.vychytavky,
+                   r.nahled, r.nastaveni, r.odlisnost, r.reward, r.notes,
+                   g.id AS team_id, g.name AS team_name
+            FROM streamers s
+            LEFT JOIN ratings r ON r.streamer_id = s.id
+            LEFT JOIN rater_groups g ON g.streamer_id = s.id
+            ORDER BY s.evaluated DESC, s.name ASC
+        ";
+    } elseif ($see_unevaluated) {
+        // Team member: all streamers, but no admin-only fields like notes
+        $sql = "
+            SELECT s.id, s.name, s.platform, s.kick_name, s.status,
+                   s.game, s.title, s.evaluated, s.community_locked,
+                   r.statistiky, r.grafika, r.alerty, r.vychytavky,
+                   r.nahled, r.nastaveni, r.odlisnost, r.reward,
+                   g.id AS team_id, g.name AS team_name
+            FROM streamers s
+            LEFT JOIN ratings r ON r.streamer_id = s.id
+            LEFT JOIN rater_groups g ON g.streamer_id = s.id
+            ORDER BY s.evaluated DESC, s.name ASC
+        ";
+    } else {
+        $sql = "
+            SELECT s.id, s.name, s.platform, s.kick_name, s.status,
+                   s.game, s.title, s.evaluated, s.community_locked,
+                   r.statistiky, r.grafika, r.alerty, r.vychytavky,
+                   r.nahled, r.nastaveni, r.odlisnost, r.reward,
+                   g.id AS team_id, g.name AS team_name
+            FROM streamers s
+            INNER JOIN ratings r ON r.streamer_id = s.id
+            LEFT JOIN rater_groups g ON g.streamer_id = s.id
+            WHERE s.evaluated = true
+            ORDER BY (r.statistiky + r.grafika + r.alerty + r.vychytavky +
+                      r.nahled + r.nastaveni + r.odlisnost) DESC
+        ";
+    }
+
+    $rows = db()->query($sql)->fetchAll();
+
+    // Reshape: nest ratings under 'r' key to match frontend format
+    $out = array_map(function($row) {
+        $s = [
+            'id'               => $row['id'],
+            'name'             => $row['name'],
+            'platform'         => $row['platform'],
+            'kick'             => $row['kick_name'] ?? '',
+            'status'           => $row['status'],
+            'game'             => $row['game'] ?? '',
+            'title'            => $row['title'] ?? '',
+            'evaluated'        => (bool)$row['evaluated'],
+            'community_locked' => (bool)($row['community_locked'] ?? false),
+            'added_by'         => $row['added_by'] ?? 'admin',
+            'r' => [
+                's'  => (int)($row['statistiky']  ?? 0),
+                'g'  => (int)($row['grafika']      ?? 0),
+                'a'  => (int)($row['alerty']       ?? 0),
+                'v'  => (int)($row['vychytavky']   ?? 0),
+                'n'  => (int)($row['nahled']       ?? 0),
+                'ns' => (int)($row['nastaveni']    ?? 0),
+                'o'  => (int)($row['odlisnost']    ?? 0),
+            ],
+            'reward' => (int)($row['reward'] ?? 0),
+            'team_id'   => isset($row['team_id']) ? (int)$row['team_id'] : null,
+            'team_name' => $row['team_name'] ?? null,
+        ];
+        if (isset($row['notes'])) {
+            $s['notes'] = $row['notes'];
+        }
+        return $s;
+    }, $rows);
+
+    json_out($out);
+}
+
+// ------------------------------------------------------------------
+// POST — add streamer (suggestion from public, or admin add)
+// ------------------------------------------------------------------
+if ($method === 'POST') {
+    $body      = body();
+    $is_admin_add = isset($_GET['admin']);
+
+    if ($is_admin_add) {
+        session_start();
+        if (empty($_SESSION['is_admin'])) json_error('Unauthorized', 401);
+    }
+
+    $name = sanitize_name($body['name'] ?? '');
+    if (strlen($name) < 2) json_error('Invalid streamer name');
+
+    $platform  = in_array($body['platform'] ?? '', ['twitch','kick']) ? $body['platform'] : 'twitch';
+    $kick_name = sanitize_name($body['kick_name'] ?? '');
+    $submitter = substr(trim($body['submitter'] ?? ''), 0, 60);
+    $added_by  = $is_admin_add ? 'admin' : 'viewer';
+
+    try {
+        $stmt = db()->prepare("
+            INSERT INTO streamers (name, platform, kick_name, added_by, submitter)
+            VALUES (:name, :platform, :kick_name, :added_by, :submitter)
+            RETURNING id
+        ");
+        $stmt->execute([
+            ':name'      => $name,
+            ':platform'  => $platform,
+            ':kick_name' => $kick_name,
+            ':added_by'  => $added_by,
+            ':submitter' => $submitter,
+        ]);
+        $row = $stmt->fetch();
+        json_out(['ok' => true, 'id' => $row['id']], 201);
+    } catch (PDOException $e) {
+        if (str_contains($e->getMessage(), 'unique')) {
+            json_error('Streamer already exists', 409);
+        }
+        json_error('DB error', 500);
+    }
+}
+
+// ------------------------------------------------------------------
+// PUT — update streamer + rating (admin or mod)
+// ------------------------------------------------------------------
+if ($method === 'PUT') {
+    require_mod();
+
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+
+    $is_admin = !empty($_SESSION['is_admin']);
+    $body     = body();
+
+    // Lock/unlock community ratings — admin only
+    if (isset($_GET['lock'])) {
+        if (!$is_admin) json_error('Admin only', 403);
+        $locked = !empty($body['community_locked']) ? 'true' : 'false';
+        db()->prepare("UPDATE streamers SET community_locked=:l WHERE id=:id")
+            ->execute([':l' => $locked, ':id' => $id]);
+        json_out(['ok' => true]);
+    }
+
+    // Clamp rating values 0-10
+    $clamp = fn($v) => max(0, min(10, (int)$v));
+    $r = $body['r'] ?? [];
+    $stats = $clamp($r['s']  ?? 0);
+    $graf  = $clamp($r['g']  ?? 0);
+    $alert = $clamp($r['a']  ?? 0);
+    $vych  = $clamp($r['v']  ?? 0);
+    $nahl  = $clamp($r['n']  ?? 0);
+    $nast  = $clamp($r['ns'] ?? 0);
+    $odl   = $clamp($r['o']  ?? 0);
+    $notes  = substr(trim($body['notes'] ?? ''), 0, 2000);
+    $evaluated = ($stats + $graf + $alert + $vych + $nahl + $nast + $odl) > 0;
+
+    // Reward — admin can override manually, mods get auto-calculated
+    $reward = $is_admin
+        ? max(0, min(130, (int)($body['reward'] ?? 0)))
+        : ($evaluated ? (int)round(30 + (($stats+$graf+$alert+$vych+$nahl+$nast+$odl) / 70) * 100) : 0);
+
+    $db = db();
+
+    // Moderators can only update ratings, not streamer metadata (status/game/title)
+    if ($is_admin) {
+        $kick   = sanitize_name($body['kick'] ?? '');
+        $status = in_array($body['status'] ?? '', ['live','offline']) ? $body['status'] : 'offline';
+        $game   = substr(trim($body['game']  ?? ''), 0, 100);
+        $title  = substr(trim($body['title'] ?? ''), 0, 200);
+
+        $db->prepare("
+            UPDATE streamers
+            SET kick_name=:kick, status=:status, game=:game, title=:title, evaluated=:evaluated
+            WHERE id=:id
+        ")->execute([
+            ':kick'=>$kick, ':status'=>$status, ':game'=>$game,
+            ':title'=>$title, ':evaluated'=>$evaluated?'true':'false', ':id'=>$id,
+        ]);
+    } else {
+        // Mod: only update evaluated flag
+        $db->prepare("UPDATE streamers SET evaluated=:evaluated WHERE id=:id")
+           ->execute([':evaluated'=>$evaluated?'true':'false', ':id'=>$id]);
+    }
+
+    // Upsert rating row
+    $db->prepare("
+        INSERT INTO ratings
+            (streamer_id, statistiky, grafika, alerty, vychytavky,
+             nahled, nastaveni, odlisnost, reward, notes)
+        VALUES
+            (:sid, :s, :g, :a, :v, :n, :ns, :o, :reward, :notes)
+        ON CONFLICT (streamer_id) DO UPDATE SET
+            statistiky = EXCLUDED.statistiky,
+            grafika    = EXCLUDED.grafika,
+            alerty     = EXCLUDED.alerty,
+            vychytavky = EXCLUDED.vychytavky,
+            nahled     = EXCLUDED.nahled,
+            nastaveni  = EXCLUDED.nastaveni,
+            odlisnost  = EXCLUDED.odlisnost,
+            reward     = EXCLUDED.reward,
+            notes      = EXCLUDED.notes,
+            updated_at = NOW()
+    ")->execute([
+        ':sid'    => $id,
+        ':s'      => $stats,
+        ':g'      => $graf,
+        ':a'      => $alert,
+        ':v'      => $vych,
+        ':n'      => $nahl,
+        ':ns'     => $nast,
+        ':o'      => $odl,
+        ':reward' => $reward,
+        ':notes'  => $notes,
+    ]);
+
+    json_out(['ok' => true]);
+}
+
+// ------------------------------------------------------------------
+// DELETE — remove streamer (admin only)
+// ------------------------------------------------------------------
+if ($method === 'DELETE') {
+    require_admin();
+
+    $id = (int)($_GET['id'] ?? 0);
+    if (!$id) json_error('Missing id');
+
+    db()->prepare("DELETE FROM streamers WHERE id = :id")->execute([':id' => $id]);
+    json_out(['ok' => true]);
+}
+
+json_error('Method not allowed', 405);
diff --git a/api/streamers.php:Zone.Identifier b/api/streamers.php:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/api/streamers.php:Zone.Identifier differ
diff --git a/docker-compose.yml b/docker-compose.yml
new file mode 100644
index 0000000..63caa88
--- /dev/null
+++ b/docker-compose.yml
@@ -0,0 +1,43 @@
+services:
+
+  app:
+    build: .
+    image: naughtybulldogs-rating:latest
+    restart: unless-stopped
+    ports:
+      - "${APP_PORT:-8080}:80"
+    env_file:
+      - .env
+    environment:
+      DB_HOST: postgres
+    depends_on:
+      postgres:
+        condition: service_healthy
+    volumes:
+      - cache:/tmp/snb_cache
+
+  postgres:
+    image: postgres:16-alpine
+    restart: unless-stopped
+    env_file:
+      - .env
+    environment:
+      POSTGRES_DB: ${DB_NAME:-streamers_db}
+      POSTGRES_USER: ${DB_USER:-streamers_user}
+      POSTGRES_PASSWORD: ${DB_PASS:-changeme}
+    volumes:
+      - pgdata:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${DB_USER:-streamers_user} -d ${DB_NAME:-streamers_db}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+
+# Poznámky k nasazení:
+# - Standalone:       APP_PORT=8080 v .env, přístup přes http://host:8080
+# - Synology Web Station reverse proxy: APP_PORT=8080, reverse proxy na localhost:8080
+# - Traefik / jiný proxy: stejně APP_PORT nastav, proxy směruj na daný port
+
+volumes:
+  pgdata:
+  cache:
diff --git a/entrypoint.sh b/entrypoint.sh
new file mode 100644
index 0000000..66f6b8a
--- /dev/null
+++ b/entrypoint.sh
@@ -0,0 +1,139 @@
+#!/bin/bash
+set -e
+
+# Generate config.php from env vars using PHP (avoids bash dollar-sign issues)
+php -r "
+    \$hash = getenv('ADMIN_HASH');
+    if (empty(\$hash)) {
+        \$pw = getenv('ADMIN_PASSWORD') ?: 'changeme';
+        \$hash = password_hash(\$pw, PASSWORD_BCRYPT);
+        echo '[entrypoint] Generated hash from ADMIN_PASSWORD' . PHP_EOL;
+    } else {
+        echo '[entrypoint] Using ADMIN_HASH from environment' . PHP_EOL;
+    }
+    \$config = '<?php' . PHP_EOL
+        . 'define(\'DB_HOST\',\'' . (getenv('DB_HOST') ?: 'postgres') . '\');' . PHP_EOL
+        . 'define(\'DB_PORT\',\'' . (getenv('DB_PORT') ?: '5432') . '\');' . PHP_EOL
+        . 'define(\'DB_NAME\',\'' . (getenv('DB_NAME') ?: 'streamers_db') . '\');' . PHP_EOL
+        . 'define(\'DB_USER\',\'' . (getenv('DB_USER') ?: 'streamers_user') . '\');' . PHP_EOL
+        . 'define(\'DB_PASS\',\'' . addslashes(getenv('DB_PASS') ?: 'changeme') . '\');' . PHP_EOL
+        . 'define(\'ADMIN_HASH\',\'' . addslashes(\$hash) . '\');' . PHP_EOL
+        . 'define(\'SESSION_SECRET\',\'' . addslashes(getenv('SESSION_SECRET') ?: 'change_me_32chars') . '\');' . PHP_EOL
+        . 'define(\'TWITCH_CLIENT_ID\',\'' . (getenv('TWITCH_CLIENT_ID') ?: '') . '\');' . PHP_EOL
+        . 'define(\'TWITCH_CLIENT_SECRET\',\'' . (getenv('TWITCH_CLIENT_SECRET') ?: '') . '\');' . PHP_EOL
+        . 'define(\'TWITCH_OAUTH_CLIENT_ID\',\'' . (getenv('TWITCH_OAUTH_CLIENT_ID') ?: getenv('TWITCH_CLIENT_ID') ?: '') . '\');' . PHP_EOL
+        . 'define(\'TWITCH_OAUTH_CLIENT_SECRET\',\'' . (getenv('TWITCH_OAUTH_CLIENT_SECRET') ?: getenv('TWITCH_CLIENT_SECRET') ?: '') . '\');' . PHP_EOL
+        . 'define(\'TWITCH_OAUTH_REDIRECT_URI\',\'' . (getenv('TWITCH_OAUTH_REDIRECT_URI') ?: 'https://rating.naughtybulldogs.eu/api/oauth?provider=twitch') . '\');' . PHP_EOL
+        . 'define(\'KICK_OAUTH_CLIENT_ID\',\'' . (getenv('KICK_OAUTH_CLIENT_ID') ?: '') . '\');' . PHP_EOL
+        . 'define(\'KICK_OAUTH_CLIENT_SECRET\',\'' . (getenv('KICK_OAUTH_CLIENT_SECRET') ?: '') . '\');' . PHP_EOL
+        . 'define(\'KICK_OAUTH_REDIRECT_URI\',\'' . (getenv('KICK_OAUTH_REDIRECT_URI') ?: 'https://rating.naughtybulldogs.eu/api/oauth?provider=kick') . '\');' . PHP_EOL
+        . 'define(\'KICK_API_BASE\',\'https://kick.com/api/v2/channels\');' . PHP_EOL
+        . 'define(\'LIVE_CACHE_TTL\',' . (int)(getenv('LIVE_CACHE_TTL') ?: 120) . ');' . PHP_EOL
+        . 'define(\'ALLOWED_ORIGIN\',\'' . (getenv('ALLOWED_ORIGIN') ?: '*') . '\');' . PHP_EOL;
+    file_put_contents('/var/www/html/config.php', \$config);
+    echo '[entrypoint] config.php written' . PHP_EOL;
+"
+
+echo "[entrypoint] Waiting for PostgreSQL at ${DB_HOST:-postgres}:${DB_PORT:-5432}..."
+for i in $(seq 1 30); do
+    if php -r "
+        try {
+            new PDO('pgsql:host=${DB_HOST:-postgres};port=${DB_PORT:-5432};dbname=${DB_NAME:-streamers_db}','${DB_USER:-streamers_user}','${DB_PASS:-changeme}');
+            exit(0);
+        } catch (Exception \$e) { exit(1); }
+    " 2>/dev/null; then
+        echo "[entrypoint] PostgreSQL ready."
+        break
+    fi
+    echo "[entrypoint] Waiting... ($i/30)"
+    sleep 1
+done
+
+# Write migration script to a temp file to avoid bash/PHP quoting conflicts
+cat > /tmp/migrate.php << 'PHPEOF'
+<?php
+$dsn = sprintf('pgsql:host=%s;port=%s;dbname=%s', getenv('DB_HOST') ?: 'postgres', getenv('DB_PORT') ?: '5432', getenv('DB_NAME') ?: 'streamers_db');
+$pdo = new PDO($dsn, getenv('DB_USER') ?: 'streamers_user', getenv('DB_PASS') ?: 'changeme');
+$pdo->setAttribute(PDO::ATTR_ERRMODE, PDO::ERRMODE_EXCEPTION);
+
+echo "[entrypoint] Applying schema...\n";
+$pdo->exec(file_get_contents('/var/www/html/schema.sql'));
+echo "[entrypoint] Schema OK.\n";
+
+// Settings defaults
+$pdo->exec("INSERT INTO settings (key, value) VALUES ('auth_enabled','true') ON CONFLICT (key) DO NOTHING");
+$pdo->exec("INSERT INTO settings (key, value) VALUES ('auth_twitch_enabled','true') ON CONFLICT (key) DO NOTHING");
+$pdo->exec("INSERT INTO settings (key, value) VALUES ('auth_kick_enabled','true') ON CONFLICT (key) DO NOTHING");
+echo "[entrypoint] Settings defaults OK.\n";
+
+// Migrations
+$pdo->exec("ALTER TABLE users ADD COLUMN IF NOT EXISTS banned BOOLEAN NOT NULL DEFAULT FALSE");
+echo "[entrypoint] users.banned OK.\n";
+
+$pdo->exec("CREATE TABLE IF NOT EXISTS moderators (
+    id SERIAL PRIMARY KEY,
+    user_id INT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    granted_by TEXT NOT NULL DEFAULT 'admin',
+    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (user_id)
+)");
+echo "[entrypoint] moderators OK.\n";
+
+$pdo->exec("CREATE TABLE IF NOT EXISTS oauth_state (
+    state TEXT PRIMARY KEY,
+    provider TEXT NOT NULL,
+    verifier TEXT,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+)");
+echo "[entrypoint] oauth_state OK.\n";
+
+$pdo->exec("ALTER TABLE comments ADD COLUMN IF NOT EXISTS user_id INT REFERENCES users(id) ON DELETE SET NULL");
+echo "[entrypoint] comments.user_id OK.\n";
+
+// Community ratings tables
+$pdo->exec("CREATE TABLE IF NOT EXISTS rater_groups (
+    id SERIAL PRIMARY KEY,
+    name TEXT NOT NULL UNIQUE,
+    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW()
+)");
+$pdo->exec("CREATE TABLE IF NOT EXISTS rater_group_members (
+    id SERIAL PRIMARY KEY,
+    group_id INT NOT NULL REFERENCES rater_groups(id) ON DELETE CASCADE,
+    user_id INT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    added_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (group_id, user_id)
+)");
+$pdo->exec("CREATE TABLE IF NOT EXISTS community_ratings (
+    id SERIAL PRIMARY KEY,
+    group_id INT NOT NULL REFERENCES rater_groups(id) ON DELETE CASCADE,
+    streamer_id INT NOT NULL REFERENCES streamers(id) ON DELETE CASCADE,
+    statistiky SMALLINT NOT NULL DEFAULT 0,
+    grafika SMALLINT NOT NULL DEFAULT 0,
+    alerty SMALLINT NOT NULL DEFAULT 0,
+    vychytavky SMALLINT NOT NULL DEFAULT 0,
+    nahled SMALLINT NOT NULL DEFAULT 0,
+    nastaveni SMALLINT NOT NULL DEFAULT 0,
+    odlisnost SMALLINT NOT NULL DEFAULT 0,
+    notes TEXT DEFAULT '',
+    updated_by INT REFERENCES users(id) ON DELETE SET NULL,
+    updated_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (group_id, streamer_id)
+)");
+$pdo->exec("ALTER TABLE streamers ADD COLUMN IF NOT EXISTS community_locked BOOLEAN NOT NULL DEFAULT FALSE");
+$pdo->exec("CREATE INDEX IF NOT EXISTS idx_community_ratings_streamer ON community_ratings(streamer_id)");
+$pdo->exec("CREATE INDEX IF NOT EXISTS idx_rater_group_members_user ON rater_group_members(user_id)");
+// Link a team to a specific streamer (optional — null = generic team)
+$pdo->exec("ALTER TABLE rater_groups ADD COLUMN IF NOT EXISTS streamer_id INT REFERENCES streamers(id) ON DELETE SET NULL");
+$pdo->exec("CREATE UNIQUE INDEX IF NOT EXISTS idx_rater_groups_streamer ON rater_groups(streamer_id) WHERE streamer_id IS NOT NULL");
+// Role within a rater team: 'owner' = the streamer themselves, 'rater' = team moderator/rater
+$pdo->exec("ALTER TABLE rater_group_members ADD COLUMN IF NOT EXISTS role TEXT NOT NULL DEFAULT 'rater'");
+echo "[entrypoint] community_ratings tables OK.\n";
+
+$fixed = $pdo->exec("UPDATE streamers SET kick_name = name WHERE platform = 'kick' AND (kick_name IS NULL OR kick_name = '')");
+if ($fixed > 0) echo "[entrypoint] Fixed kick_name for {$fixed} streamer(s).\n";
+PHPEOF
+
+php /tmp/migrate.php
+
+echo "[entrypoint] Starting Apache..."
+exec apache2-foreground
diff --git a/public/index.html b/public/index.html
new file mode 100644
index 0000000..bf50641
--- /dev/null
+++ b/public/index.html
@@ -0,0 +1,1538 @@
+<!DOCTYPE html>
+<html lang="cs">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>NaughtyBulldogs — Hodnocení streamerů</title>
+<style>
+*{box-sizing:border-box;margin:0;padding:0}
+:root{--bg:#f5f5f3;--card:#fff;--border:#e5e5e2;--text:#1a1a1a;--muted:#888;--purple:#7F77DD;--purple-d:#534AB7;--purple-l:#EEEDFE;--green:#1D9E75;--orange:#EF9F27;--red:#D85A30;--red-l:#FAECE7;--red-d:#993C1D}
+@media(prefers-color-scheme:dark){:root{--bg:#1a1a1a;--card:#242424;--border:#333;--text:#f0f0ee;--muted:#666;--purple-l:#2a2840}}
+body{font-family:-apple-system,BlinkMacSystemFont,'Segoe UI',sans-serif;font-size:16px;color:var(--text);background:var(--bg);min-height:100vh}
+input,select,textarea{font-family:inherit;font-size:15px;border:0.5px solid var(--border);border-radius:8px;padding:8px 12px;width:100%;background:var(--card);color:var(--text);outline:none}
+input:focus,select:focus,textarea:focus{border-color:#aaa}
+button{font-family:inherit;cursor:pointer}
+.btn{padding:9px 18px;border-radius:8px;border:0.5px solid var(--border);background:var(--card);color:var(--text);font-size:15px;transition:background .15s}
+.btn:hover{background:var(--bg)}
+.btn-primary{background:var(--purple);border-color:var(--purple-d);color:#fff}
+.btn-primary:hover{background:var(--purple-d)}
+.btn-sm{padding:7px 14px;font-size:14px}
+.btn-ghost{border:none;background:none;color:var(--muted);font-size:15px;padding:7px 13px;border-radius:8px}
+.btn-ghost:hover{background:var(--bg);color:var(--text)}
+.btn-danger{background:#fff0ee;border-color:#f09595;color:#a32d2d}
+.badge-live{display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border-radius:20px;font-size:13px;font-weight:500;background:var(--red-l);color:var(--red-d);border:0.5px solid var(--red)}
+.badge-off{display:inline-flex;align-items:center;gap:5px;padding:4px 10px;border-radius:20px;font-size:13px;font-weight:500;background:var(--bg);color:var(--muted);border:0.5px solid var(--border)}
+.dot{width:7px;height:7px;border-radius:50%;background:var(--red);animation:pulse 1.4s infinite;flex-shrink:0}
+@keyframes pulse{0%,100%{opacity:1}50%{opacity:.4}}
+nav{background:var(--card);border-bottom:0.5px solid var(--border);padding:0 1.5rem;display:flex;align-items:center;gap:10px;height:52px;position:sticky;top:0;z-index:100}
+.logo{font-size:16px;font-weight:600;flex:1}
+.ntab{padding:7px 15px;border-radius:8px;border:none;background:none;font-size:15px;color:var(--muted);cursor:pointer;transition:background .15s;font-family:inherit}
+.ntab.on{background:var(--bg);color:var(--text);font-weight:500}
+.ndiv{width:0.5px;height:22px;background:var(--border)}
+main{padding:1.5rem;max-width:1100px;margin:0 auto}
+.live-bar{background:var(--card);border:0.5px solid var(--border);border-radius:12px;padding:1rem 1.25rem;margin-bottom:1.25rem}
+.live-chips{display:flex;flex-wrap:wrap;gap:8px;margin-top:.75rem}
+.lchip{display:flex;align-items:center;gap:6px;padding:6px 14px;border-radius:20px;background:var(--red-l);border:0.5px solid var(--red);font-size:14px;text-decoration:none;color:var(--red-d)}
+.lchip:hover{opacity:.85}
+.suggest-bar{background:var(--bg);border:0.5px solid var(--border);border-radius:10px;padding:.75rem 1.25rem;display:flex;align-items:center;gap:10px;margin-bottom:1.25rem;flex-wrap:wrap}
+.suggest-bar p{font-size:14px;color:var(--muted);flex:1}
+.sbar{display:flex;gap:10px;margin-bottom:1.25rem}
+.sbar input{flex:1}
+.frow{display:flex;gap:8px;flex-wrap:wrap;margin-bottom:1.25rem;align-items:center}
+.fchip{padding:6px 14px;border-radius:20px;border:0.5px solid var(--border);background:var(--card);font-size:14px;cursor:pointer;color:var(--muted);transition:all .15s;font-family:inherit}
+.fchip.on{border-color:var(--purple);color:var(--purple-d);background:var(--purple-l)}
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(300px,1fr));gap:1rem}
+.card{border-radius:12px;border:0.5px solid var(--border);background:var(--card);overflow:hidden;transition:border-color .15s}
+.card:hover{border-color:#bbb}
+.card-pub{cursor:pointer}
+.ch{padding:1rem 1.25rem;display:flex;align-items:flex-start;gap:12px}
+.ava{width:46px;height:46px;border-radius:50%;background:var(--purple-l);display:flex;align-items:center;justify-content:center;font-size:15px;font-weight:500;color:var(--purple-d);flex-shrink:0;text-transform:uppercase}
+.cn{font-size:16px;font-weight:500}
+.cs{font-size:13px;color:var(--muted)}
+.cb{padding:0 1.25rem .75rem;border-top:0.5px solid var(--border)}
+.srow{display:flex;flex-wrap:wrap;gap:4px;padding:8px 0}
+.si{display:flex;flex-direction:column;align-items:center;gap:2px;flex:1;min-width:46px}
+.si .sl{font-size:11px;color:var(--muted);text-align:center;line-height:1.2}
+.sn{font-size:18px;font-weight:500}
+.cf{padding:8px 1.25rem;border-top:0.5px solid var(--border);display:flex;gap:8px;align-items:center}
+.ts{font-size:21px;font-weight:500}
+.lrow{display:flex;gap:6px;flex-wrap:wrap;margin-top:5px}
+.lb{padding:4px 10px;border-radius:6px;border:0.5px solid var(--border);font-size:12px;text-decoration:none;color:var(--muted);background:var(--bg)}
+.lb:hover{color:var(--text)}
+.tag{display:inline-block;padding:2px 8px;border-radius:6px;font-size:12px;font-weight:500;background:var(--purple-l);color:var(--purple-d)}
+.mbg{position:fixed;inset:0;background:rgba(0,0,0,.45);z-index:200;display:flex;align-items:flex-start;justify-content:center;padding:1rem;overflow-y:auto}
+.modal{background:var(--card);border-radius:16px;width:100%;max-width:680px;margin:auto;border:0.5px solid var(--border)}
+.modal-sm{max-width:400px}
+.mh{padding:1.25rem 1.5rem;border-bottom:0.5px solid var(--border);display:flex;align-items:center;gap:12px}
+.mb{padding:1.5rem;max-height:72vh;overflow-y:auto}
+.mf{padding:1rem 1.5rem;border-top:0.5px solid var(--border);display:flex;gap:8px;justify-content:flex-end}
+.fg{margin-bottom:1rem}
+.fl{font-size:14px;color:var(--muted);margin-bottom:5px;display:block}
+.fgr{display:grid;grid-template-columns:1fr 1fr;gap:12px}
+.st{font-size:12px;font-weight:500;color:var(--muted);text-transform:uppercase;letter-spacing:.5px;margin:1.25rem 0 .6rem;border-bottom:0.5px solid var(--border);padding-bottom:5px}
+.ri{display:flex;align-items:center;gap:12px}
+.ri input[type=range]{flex:1}
+.rv{min-width:24px;text-align:right;font-weight:500;font-size:16px}
+.bw{display:flex;align-items:center;gap:10px;margin-bottom:8px}
+.bl{font-size:13px;color:var(--muted);width:110px;flex-shrink:0}
+.bb{flex:1;height:6px;background:var(--bg);border-radius:3px;overflow:hidden}
+.bf{height:100%;border-radius:3px}
+.bv{font-size:13px;font-weight:500;min-width:32px;text-align:right}
+.tv{display:flex;border:0.5px solid var(--border);border-radius:8px;overflow:hidden}
+.tv button{border:none;padding:6px 14px;font-size:14px;cursor:pointer;background:none;color:var(--muted);font-family:inherit}
+.tv button.on{background:var(--bg);color:var(--text);font-weight:500}
+table{width:100%;border-collapse:collapse;font-size:14px}
+th{text-align:left;padding:8px 9px;font-size:12px;font-weight:500;color:var(--muted);border-bottom:0.5px solid var(--border)}
+td{padding:8px 9px;border-bottom:0.5px solid var(--border)}
+tr:last-child td{border-bottom:none}
+.adchip{display:inline-flex;align-items:center;padding:4px 11px;border-radius:20px;background:var(--purple-l);border:0.5px solid #AFA9EC;font-size:13px;color:var(--purple-d)}
+.empty{text-align:center;padding:3rem;color:var(--muted);font-size:16px}
+.cbadge{font-size:13px;color:var(--muted)}
+.spinner{display:inline-block;width:16px;height:16px;border:2px solid var(--border);border-top-color:var(--purple);border-radius:50%;animation:spin .7s linear infinite;vertical-align:middle;margin-right:6px}
+@keyframes spin{to{transform:rotate(360deg)}}
+.toast{position:fixed;bottom:1.5rem;right:1.5rem;background:var(--card);border:0.5px solid var(--border);border-radius:10px;padding:.75rem 1.25rem;font-size:14px;z-index:300;box-shadow:0 4px 16px rgba(0,0,0,.12);animation:fadeIn .2s ease}
+@keyframes fadeIn{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:none}}
+.comment{padding:.75rem 0;border-bottom:0.5px solid var(--border)}
+.comment:last-child{border-bottom:none}
+.comment-head{display:flex;align-items:center;gap:8px;margin-bottom:4px}
+.comment-author{font-size:14px;font-weight:500}
+.comment-time{font-size:12px;color:var(--muted)}
+.comment-admin-badge{font-size:11px;font-weight:500;padding:1px 6px;border-radius:4px;background:var(--purple-l);color:var(--purple-d)}
+.comment-body{font-size:15px;line-height:1.6;color:var(--text)}
+.comment-del{margin-left:auto;border:none;background:none;color:var(--muted);cursor:pointer;font-size:16px;padding:0 4px;line-height:1}
+.comment-del:hover{color:var(--red)}
+.comment-form{display:flex;flex-direction:column;gap:8px;margin-top:1rem}
+.comment-form input,.comment-form textarea{font-size:14px}
+
+</style>
+</head>
+<body>
+<div id="R"></div>
+<script>
+const CATS=[
+  {k:'s', l:'Statistiky'}, {k:'g', l:'Grafika'},   {k:'a', l:'Alerty'},
+  {k:'v', l:'Vychytávky'}, {k:'n', l:'Náhled'},    {k:'ns',l:'Nastavení'},
+  {k:'o', l:'Odlišnost'}
+];
+const MAX=70;
+
+// ── State ──────────────────────────────────────────────────────────
+let ST={
+  admin:false, isMod:false, banned:false, db:[], loading:true,
+  tab:'pub', search:'', fil:'all', av:'cards',
+  admSection:'streamers', // 'streamers' | 'users' | 'teams' | 'settings'
+  loginM:false, editM:false, editId:null,
+  detailId:null, sugM:false, newM:false,
+  comments:{}, communityRatings:{},
+  oauthUser:null, myGroups:[],
+  settings:{auth_enabled:'false', auth_twitch_enabled:'true'},
+  pendingUsers:[], currentMods:[], allUsers:[],
+  raterGroups:[],
+  teamM:false, teamId:null, // open team management modal for a group
+  rateM:false, rateStreamerId:null, myRating:null,
+  activeTeamId:null, // currently-selected team in rater view (admin: any; member: from myGroups)
+  teamRatings:{}, // map streamer_id -> rating, fetched per active team
+  detailCRTab:'overview', // 'overview' | group_id (number) — which community-rating tab is open in detail
+  detailCmtFilter:'all', // 'all' | group_id — filter comments by team
+};
+
+// ── API helpers ────────────────────────────────────────────────────
+async function api(method, path, body){
+  const opts={method, headers:{'Content-Type':'application/json'},credentials:'include'};
+  if(body) opts.body=JSON.stringify(body);
+  const r=await fetch(path,opts);
+  const j=await r.json();
+  if(!r.ok) throw new Error(j.error||'API error');
+  return j;
+}
+async function GET(p){return api('GET',p);}
+async function POST(p,b){return api('POST',p,b);}
+async function PUT(p,b){return api('PUT',p,b);}
+async function DEL(p){return api('DELETE',p);}
+
+// ── Boot ───────────────────────────────────────────────────────────
+async function boot(){
+  // Check for auth errors from OAuth redirect
+  const params=new URLSearchParams(location.search);
+  if(params.get('auth_error')){
+    toast('Přihlášení se nezdařilo: '+params.get('auth_error'),false);
+    history.replaceState({},'','/');
+  }
+
+  try{
+    const [sess, streamers, settings, me]=await Promise.all([
+      GET('/api/auth?action=check'),
+      GET('/api/streamers'),
+      GET('/api/settings'),
+      GET('/api/oauth?action=me'),
+    ]);
+    ST.admin    = sess.admin;
+    ST.db       = streamers;
+    ST.settings = settings;
+    ST.oauthUser= me.user;
+    ST.isMod    = sess.admin || me.is_mod;
+    ST.banned   = me.banned || false;
+    if(ST.isMod){
+      const all=await GET('/api/streamers?all=1');
+      ST.db=all;
+    }
+    // Load rater groups for OAuth users (also admins, so they could see their own team membership)
+    if(ST.oauthUser){
+      try{ ST.myGroups = await GET('/api/rater_groups?my=1') || []; }catch(e){ST.myGroups=[];}
+    }
+  }catch(e){console.error(e);}
+  ST.loading=false;
+  re();
+  setInterval(autoLiveRefresh, 3*60*1000);
+}
+
+async function autoLiveRefresh(){
+  try{
+    const rows=await GET('/api/live');
+    let changed=false;
+    rows.forEach(r=>{
+      const s=ST.db.find(x=>x.id===r.id);
+      if(s&&(s.status!==r.status||s.game!==r.game||s.title!==r.title)){
+        s.status=r.status;s.game=r.game;s.title=r.title;changed=true;
+      }
+    });
+    if(changed)re();
+  }catch(e){console.error('Live refresh failed:',e);}
+}
+
+async function loadComments(sid){
+  try{
+    const list=await GET('/api/comments?streamer_id='+sid);
+    ST.comments[sid]=list;
+    // Re-render just the comments section without full re-render
+    const el=document.getElementById('comments-list');
+    if(el)el.innerHTML=renderCommentsList(sid);
+    const btn=document.getElementById('comments-load');
+    if(btn)btn.style.display='none';
+  }catch(e){console.error('Failed to load comments:',e);}
+}
+
+function renderCommentsList(sid){
+  const all=ST.comments[sid]||[];
+  if(!all.length)return`<div style="font-size:14px;color:var(--muted);padding:.5rem 0">Zatím žádné komentáře</div>`;
+  // Build set of team ids present in comments (for filter chips)
+  const presentTeamIds=new Set();
+  all.forEach(c=>(c.team_ids||[]).forEach(t=>presentTeamIds.add(t)));
+  const teamLookup={};
+  (ST.raterGroups||[]).concat(ST.myGroups||[]).forEach(g=>{teamLookup[g.id]=g.name;});
+  // Also pull team names from the current streamer's community ratings (works for guests)
+  (ST.communityRatings[sid]?.ratings||[]).forEach(r=>{teamLookup[r.group_id]=r.group_name;});
+  // Filter
+  const f=ST.detailCmtFilter||'all';
+  const list = f==='all' ? all : all.filter(c=>(c.team_ids||[]).includes(+f));
+
+  // Filter chips (only if we have any team-affiliated comments)
+  let chips='';
+  if(presentTeamIds.size){
+    chips=`<div style="display:flex;gap:6px;flex-wrap:wrap;margin-bottom:.6rem;align-items:center">
+      <span style="font-size:11px;color:var(--muted);text-transform:uppercase;letter-spacing:.4px;margin-right:4px">Filtr:</span>
+      <button class="fchip ${f==='all'?'on':''}" data-cmtfilter="all" style="font-size:12px;padding:3px 10px">Všechny (${all.length})</button>
+      ${[...presentTeamIds].map(tid=>{
+        const cnt=all.filter(c=>(c.team_ids||[]).includes(tid)).length;
+        const nm=teamLookup[tid]||`Tým #${tid}`;
+        return `<button class="fchip ${f==tid?'on':''}" data-cmtfilter="${tid}" style="font-size:12px;padding:3px 10px">${escHtml(nm)} (${cnt})</button>`;
+      }).join('')}
+    </div>`;
+  }
+
+  const items = list.length===0
+    ? `<div style="font-size:14px;color:var(--muted);padding:.5rem 0">Žádné komentáře pro tento filtr</div>`
+    : list.map(c=>{
+        const tIds=c.team_ids||[];
+        const teamBadges = tIds.map(tid=>{
+          const nm=teamLookup[tid]||`Tým #${tid}`;
+          return `<span style="font-size:10px;padding:1px 6px;background:var(--purple-l);color:var(--purple-d);border-radius:8px">${escHtml(nm)}</span>`;
+        }).join('');
+        return `<div class="comment">
+          <div class="comment-head">
+            ${c.user_avatar?`<img src="${c.user_avatar}" style="width:22px;height:22px;border-radius:50%;object-fit:cover" />`:''}
+            <span class="comment-author">${escHtml(c.user_display||c.author)}</span>
+            ${c.user_provider?`<span style="font-size:11px;color:var(--muted);padding:1px 6px;background:var(--bg);border-radius:8px;border:0.5px solid var(--border)">${c.user_provider}</span>`:''}
+            ${c.is_admin?'<span class="comment-admin-badge">crew</span>':''}
+            ${teamBadges}
+            <span class="comment-time">${formatDate(c.created_at)}</span>
+            ${ST.admin?`<button class="comment-del" data-cid="${c.id}" data-sid="${sid}">×</button>`:''}
+          </div>
+          <div class="comment-body">${escHtml(c.body)}</div>
+        </div>`;
+      }).join('');
+
+  return chips + items;
+}
+
+function escHtml(s){return(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;');}
+function formatDate(iso){
+  const d=new Date(iso);
+  return d.toLocaleDateString('cs-CZ',{day:'numeric',month:'numeric',year:'numeric'})+' '+d.toLocaleTimeString('cs-CZ',{hour:'2-digit',minute:'2-digit'});
+}
+
+// ── Utility ────────────────────────────────────────────────────────
+function tot(r){return CATS.reduce((a,c)=>a+(+r[c.k]||0),0);}
+function gc(v,m){const p=v/m;return p>=.7?'#1D9E75':p>=.4?'#EF9F27':'#D85A30';}
+function av(n){return(n||'?').slice(0,2).toUpperCase();}
+function toast(msg,ok=true){
+  const t=document.createElement('div');
+  t.className='toast';t.style.borderColor=ok?'#1D9E75':'#D85A30';
+  t.textContent=msg;document.body.appendChild(t);
+  setTimeout(()=>t.remove(),3000);
+}
+
+// ── Render ─────────────────────────────────────────────────────────
+function re(){document.getElementById('R').innerHTML=html();bind();}
+
+function html(){
+  if(ST.loading) return `<nav><div class="logo">🐾 NaughtyBulldogs</div></nav><main><div class="empty"><span class="spinner"></span>Načítám…</div></main>`;
+
+  // Ban screen
+  if(ST.banned) return `
+    <nav><div class="logo">🐾 NaughtyBulldogs — Hodnocení streamerů</div></nav>
+    <main style="display:flex;align-items:center;justify-content:center;min-height:60vh">
+      <div style="text-align:center;max-width:480px;padding:2rem">
+        <div style="font-size:48px;margin-bottom:1rem">🚫</div>
+        <div style="font-size:20px;font-weight:500;margin-bottom:.75rem">Váš účet byl zabanován</div>
+        <div style="font-size:15px;color:var(--muted);line-height:1.7;margin-bottom:1.5rem">
+          Pro odbanování nás kontaktujte přes:<br>
+          <strong>Instagram</strong> · <strong>Discord</strong> · nebo jiným způsobem přes<br>
+          <strong>NaughtyBulldogs</strong>
+        </div>
+        <a href="/api/oauth?action=logout" class="btn" style="text-decoration:none">Odhlásit se</a>
+      </div>
+    </main>`;
+
+  const liveEv=ST.db.filter(x=>x.status==='live'&&x.evaluated);
+  const u=ST.oauthUser;
+  return `<nav>
+    <div class="logo">🐾 NaughtyBulldogs — Hodnocení streamerů</div>
+    <button class="ntab ${ST.tab==='pub'?'on':''}" data-tab="pub">Přehled</button>
+    ${(ST.admin||ST.myGroups?.length)?`<button class="ntab ${ST.tab==='rate'?'on':''}" data-tab="rate">Hodnotit</button>`:''}
+    ${ST.isMod&&!ST.admin?`<button class="ntab ${ST.tab==='mod'?'on':''}" data-tab="mod">Hodnocení</button>`:''}
+    ${ST.admin?`<button class="ntab ${ST.tab==='adm'?'on':''}" data-tab="adm">Správa</button>`:''}
+    <div class="ndiv"></div>
+    ${u?`
+      <div style="display:flex;align-items:center;gap:8px">
+        ${u.avatar?`<img src="${u.avatar}" style="width:28px;height:28px;border-radius:50%;object-fit:cover" />`:''}
+        <span style="font-size:14px;font-weight:500">${u.display_name}</span>
+        <span style="font-size:11px;color:var(--muted);padding:2px 7px;background:var(--bg);border-radius:10px;border:0.5px solid var(--border)">${u.provider}</span>
+        ${ST.isMod&&!ST.admin?`<span style="font-size:11px;padding:2px 8px;border-radius:10px;background:#EAF3DE;color:#3B6D11;border:0.5px solid #639922">mod</span>`:''}
+        <a class="btn-ghost btn-sm" href="/api/oauth?action=logout" style="text-decoration:none">Odhlásit</a>
+      </div>
+    `:`
+      ${ST.settings.auth_twitch_enabled==='true'?`<a class="btn btn-sm" href="/api/oauth?provider=twitch" style="text-decoration:none;display:inline-flex;align-items:center;gap:6px"><svg width="14" height="14" viewBox="0 0 24 24" fill="currentColor"><path d="M11.571 4.714h1.715v5.143H11.57zm4.715 0H18v5.143h-1.714zM6 0L1.714 4.286v15.428h5.143V24l4.286-4.286h3.428L22.286 12V0zm14.571 11.143l-3.428 3.428h-3.429l-3 3v-3H6.857V1.714h13.714z"/></svg> Twitch</a>`:``}
+      ${ST.settings.auth_kick_enabled==='true'?`<a class="btn btn-sm" href="/api/oauth?provider=kick" style="text-decoration:none;display:inline-flex;align-items:center;gap:6px;background:#53fc18;border-color:#3dd10f;color:#000"><span style="font-weight:700">K</span> Kick</a>`:``}
+    `}
+    ${ST.admin?`<span class="adchip">⚙ Admin</span><button class="btn-ghost btn-sm" id="lo">Odhlásit</button>`:`<button class="btn-ghost btn-sm" id="li">Admin</button>`}
+  </nav>
+  <main>
+    ${liveEv.length?`<div class="live-bar">
+      <div style="display:flex;align-items:center;gap:8px"><div class="dot"></div><span style="font-size:14px;font-weight:500">Právě live (${liveEv.length})</span></div>
+      <div class="live-chips">${liveEv.map(s=>`<a class="lchip" href="https://${s.platform==='kick'?'kick.com':'twitch.tv'}/${s.platform==='kick'?s.kick:s.name}" target="_blank"><div class="dot" style="width:6px;height:6px"></div><strong>${s.name}</strong>${s.game?`<span style="opacity:.6;font-size:11px">· ${s.game}</span>`:''}</a>`).join('')}</div>
+    </div>`:''}
+    ${ST.tab==='adm'&&ST.admin?admView():ST.tab==='mod'&&ST.isMod&&!ST.admin?modView():ST.tab==='rate'&&(ST.admin||ST.myGroups?.length)?raterView():pubView()}
+  </main>
+  ${ST.loginM?loginModal():''}
+  ${ST.editM?editModal():''}
+  ${ST.detailId?detailModal():''}
+  ${ST.sugM?sugModal():''}
+  ${ST.newM?newModal():''}
+  ${ST.teamM?teamModal():''}
+  ${ST.rateM?communityRateModal():''}`;
+}
+
+// ── Public view ────────────────────────────────────────────────────
+function pubList(){
+  let l=ST.db.filter(x=>x.evaluated);
+  if(ST.search){const q=ST.search.toLowerCase();l=l.filter(x=>x.name.toLowerCase().includes(q));}
+  if(ST.fil==='live')l=l.filter(x=>x.status==='live');
+  else if(ST.fil==='twitch')l=l.filter(x=>x.platform==='twitch');
+  else if(ST.fil==='kick')l=l.filter(x=>x.platform==='kick');
+  return l;
+}
+function pubView(){
+  const list=pubList(),tot_ev=ST.db.filter(x=>x.evaluated).length;
+  return `<div>
+    <div class="suggest-bar"><p>Znáte zajímavého českého streamera? Navrhněte ho k hodnocení.</p><button class="btn btn-sm" id="sugbtn">+ Navrhnout streamera</button></div>
+    <div class="sbar"><input id="si" placeholder="Hledat ohodnoceného streamera…" value="${ST.search}"></div>
+    <div class="frow">
+      <span style="font-size:12px;color:var(--muted)">Filtr:</span>
+      ${[['all','Všichni'],['live','🔴 Live'],['twitch','Twitch'],['kick','Kick']].map(([f,l])=>`<button class="fchip ${ST.fil===f?'on':''}" data-f="${f}">${l}</button>`).join('')}
+      <span class="cbadge">${list.length} z ${tot_ev}</span>
+    </div>
+    ${list.length?`<div class="grid">${list.map(pubCard).join('')}</div>`:`<div class="empty">${ST.search?'Žádný streamer nenalezen':'Zatím žádní ohodnocení streamers'}</div>`}
+  </div>`;
+}
+function pubCard(s){
+  const t=tot(s.r),c=gc(t,MAX);
+  const cr=ST.communityRatings[s.id];
+  const crAvg=cr?.avg;
+  return `<div class="card card-pub" data-det="${s.id}">
+    <div class="ch"><div class="ava">${av(s.name)}</div>
+      <div style="flex:1;min-width:0"><div class="cn">${s.name}</div><div class="cs">${s.platform==='kick'?'Kick':'Twitch'}${s.game?` · ${s.game}`:''}</div></div>
+      ${s.status==='live'?`<span class="badge-live"><div class="dot" style="width:6px;height:6px"></div>LIVE</span>`:`<span class="badge-off">Offline</span>`}
+    </div>
+    <div class="cb"><div class="srow">${CATS.map(c=>ms(c.l,s.r[c.k],10)).join('')}</div></div>
+    <div class="cf">
+      <div><div style="font-size:11px;color:var(--muted)">Celkem</div><div class="ts" style="color:${c}">${t}<span style="font-size:12px;opacity:.4">/${MAX}</span></div></div>
+      <div style="margin-left:auto;text-align:right"><div style="font-size:11px;color:var(--muted)">Odměna</div><div style="font-size:15px;font-weight:500">${s.reward?s.reward+' Kč':'—'}</div></div>
+    </div>
+    ${crAvg?`<div style="padding:6px 1.25rem;border-top:0.5px solid var(--border);background:var(--bg);display:flex;align-items:center;gap:8px">
+      <span style="font-size:11px;color:var(--muted)">Komunita (${crAvg.count}×)</span>
+      <span style="font-size:14px;font-weight:500;color:${gc(crAvg.total,MAX)}">${crAvg.total}/${MAX}</span>
+    </div>`:''}
+  </div>`;
+}
+function ms(lbl,v,m){return `<div class="si"><div class="sn" style="color:${gc(v,m)}">${v}</div><div class="sl">${lbl}</div></div>`;}
+
+// ── Admin view ─────────────────────────────────────────────────────
+function admList(){
+  let l=[...ST.db];
+  if(ST.search){const q=ST.search.toLowerCase();l=l.filter(x=>x.name.toLowerCase().includes(q));}
+  if(ST.fil==='live')l=l.filter(x=>x.status==='live');
+  else if(ST.fil==='ev')l=l.filter(x=>x.evaluated);
+  else if(ST.fil==='pend')l=l.filter(x=>!x.evaluated);
+  else if(ST.fil==='sug')l=l.filter(x=>x.added_by==='viewer');
+  return l;
+}
+function admView(){
+  const sec=ST.admSection||'streamers';
+  return `<div>
+    <div style="display:flex;border-bottom:0.5px solid var(--border);margin-bottom:1.25rem;gap:4px;flex-wrap:wrap">
+      <button class="ntab ${sec==='streamers'?'on':''}" data-asec="streamers" style="border-radius:0">Streameři</button>
+      <button class="ntab ${sec==='users'?'on':''}" data-asec="users" style="border-radius:0">Uživatelé${ST.allUsers?.length?` <span style="font-size:11px;color:var(--muted)">(${ST.allUsers.length})</span>`:''}</button>
+      <button class="ntab ${sec==='teams'?'on':''}" data-asec="teams" style="border-radius:0">Týmy${ST.raterGroups?.length?` <span style="font-size:11px;color:var(--muted)">(${ST.raterGroups.length})</span>`:''}</button>
+      <button class="ntab ${sec==='settings'?'on':''}" data-asec="settings" style="border-radius:0">Nastavení</button>
+    </div>
+    ${sec==='streamers'?admStreamers():sec==='users'?admUsers():sec==='teams'?admTeams():admSettings()}
+  </div>`;
+}
+
+function admStreamers(){
+  const list=admList(),pend=ST.db.filter(x=>!x.evaluated).length,sug=ST.db.filter(x=>x.added_by==='viewer').length;
+  return `<div>
+    <div style="display:flex;gap:10px;margin-bottom:1.25rem;align-items:center;flex-wrap:wrap">
+      <button class="btn btn-primary btn-sm" id="newbtn">+ Přidat streamera</button>
+      <button class="btn btn-sm" id="rfbtn">↻ Live refresh</button>
+      ${pend?`<span style="font-size:13px;color:var(--muted)">${pend} čeká</span>`:''}
+      ${sug?`<span style="font-size:13px;color:var(--purple-d)">${sug} návrhů</span>`:''}
+      <div style="margin-left:auto"><div class="tv"><button class="${ST.av==='cards'?'on':''}" data-av="cards">Karty</button><button class="${ST.av==='table'?'on':''}" data-av="table">Tabulka</button></div></div>
+    </div>
+    <div class="sbar"><input id="si" placeholder="Hledat streamera…" value="${ST.search}"></div>
+    <div class="frow">
+      ${[['all','Všichni'],['live','🔴 Live'],['ev','Ohodnocení'],['pend','Čekají'],['sug','Návrhy']].map(([f,l])=>`<button class="fchip ${ST.fil===f?'on':''}" data-f="${f}">${l}</button>`).join('')}
+      <span class="cbadge">${list.length}</span>
+    </div>
+    ${ST.av==='table'?admTable(list):admCards(list)}
+  </div>`;
+}
+
+function admUsers(){
+  const mods=ST.currentMods||[];
+  const users=ST.allUsers||[];
+  return `<div>
+    <div class="st">Přidat moderátora</div>
+    <div style="display:flex;gap:8px;align-items:flex-end;margin-bottom:.5rem;flex-wrap:wrap">
+      <div style="flex:1;min-width:200px"><div class="fl">Uživatelské jméno</div><input id="mod-login" placeholder="twitch_username"></div>
+      <div style="width:130px"><div class="fl">Platforma</div><select id="mod-provider"><option value="twitch">Twitch</option><option value="kick">Kick</option></select></div>
+      <button class="btn btn-primary btn-sm" id="mod-add">Přidat</button>
+    </div>
+    <div id="mod-err" style="color:var(--red);font-size:13px;display:none;margin-bottom:.5rem"></div>
+
+    <div class="st" style="margin-top:1.5rem">Aktuální moderátoři (${mods.length})</div>
+    ${mods.length===0?`<div style="font-size:14px;color:var(--muted);padding:.4rem 0">Žádní moderátoři</div>`:''}
+    ${mods.map(m=>`<div style="display:flex;align-items:center;gap:10px;padding:.6rem 0;border-bottom:0.5px solid var(--border)">
+      ${m.avatar?`<img src="${m.avatar}" style="width:32px;height:32px;border-radius:50%" />`:`<div class="ava" style="width:32px;height:32px;font-size:12px">${av(m.display_name)}</div>`}
+      <div style="flex:1"><div style="font-size:14px;font-weight:500">${m.display_name}</div><div style="font-size:12px;color:var(--muted)">${m.provider} · ${m.login}</div></div>
+      <button class="btn btn-sm btn-danger" data-delmod="${m.mod_id}">Odebrat</button>
+    </div>`).join('')}
+
+    <div class="st" style="margin-top:1.5rem">Všichni přihlášení uživatelé (${users.length})</div>
+    ${users.length===0?`<div style="font-size:14px;color:var(--muted);padding:.4rem 0">Žádní uživatelé</div>`:''}
+    ${users.map(u=>`<div style="display:flex;align-items:center;gap:10px;padding:.6rem 0;border-bottom:0.5px solid var(--border);${u.banned?'opacity:.5':''}">
+      ${u.avatar?`<img src="${u.avatar}" style="width:32px;height:32px;border-radius:50%" />`:`<div class="ava" style="width:32px;height:32px;font-size:12px">${av(u.display_name)}</div>`}
+      <div style="flex:1">
+        <div style="font-size:14px;font-weight:500">${u.display_name} ${u.is_mod?'<span style="font-size:11px;padding:1px 7px;background:#EAF3DE;color:#3B6D11;border-radius:8px">mod</span>':''} ${u.banned?'<span style="font-size:11px;padding:1px 7px;background:#FAECE7;color:#993C1D;border-radius:8px">ban</span>':''}</div>
+        <div style="font-size:12px;color:var(--muted)">${u.provider} · ${u.login} · naposledy ${formatDate(u.last_seen)}</div>
+      </div>
+      <div style="display:flex;gap:6px;flex-wrap:wrap">
+        ${u.is_mod
+          ?`<button class="btn btn-sm" data-revmod="${u.id}">Odebrat mod</button>`
+          :`<button class="btn btn-sm btn-primary" data-givemod="${u.id}" data-login="${u.login}" data-provider="${u.provider}" ${u.banned?'disabled':''}>+Mod</button>`}
+        ${u.banned
+          ?`<button class="btn btn-sm" data-unban="${u.id}">Odbanovat</button>`
+          :`<button class="btn btn-sm btn-danger" data-ban="${u.id}">Ban</button>`}
+      </div>
+    </div>`).join('')}
+  </div>`;
+}
+
+function admTeams(){
+  const groups=ST.raterGroups||[];
+  // Streamers already linked to a team — exclude from create dropdown
+  const linkedSids=new Set(groups.map(g=>g.streamer_id).filter(Boolean));
+  const availableStreamers=ST.db.filter(s=>!linkedSids.has(s.id));
+  return `<div>
+    <div style="font-size:13px;color:var(--muted);margin-bottom:1rem">Tým hodnotitelů reprezentuje konkrétního streamera — každý jeho člen může hodnotit ostatní streamery (ne sebe). Průměr týmu se zobrazí jako komunitní hodnocení.</div>
+    <div class="st">Vytvořit tým</div>
+    <div style="display:grid;gap:8px;grid-template-columns:1fr 1fr auto;margin-bottom:.5rem;align-items:end">
+      <div><div class="fl">Název týmu</div><input id="rg-name" placeholder="např. NaughtyBulldogs"></div>
+      <div><div class="fl">Streamer (volitelný)</div>
+        <select id="rg-streamer">
+          <option value="">— bez vazby na streamera —</option>
+          ${availableStreamers.map(s=>`<option value="${s.id}">${escHtml(s.name)} (${s.platform})</option>`).join('')}
+        </select>
+      </div>
+      <button class="btn btn-primary btn-sm" id="rg-create">Vytvořit</button>
+    </div>
+    <div id="rg-err" style="color:var(--red);font-size:13px;display:none;margin-bottom:.5rem"></div>
+
+    <div class="st" style="margin-top:1.5rem">Týmy (${groups.length})</div>
+    ${groups.length===0?`<div style="font-size:14px;color:var(--muted);padding:.4rem 0">Žádné týmy</div>`:''}
+    ${groups.map(g=>`<div style="border:0.5px solid var(--border);border-radius:10px;padding:.85rem 1rem;margin-bottom:.6rem;display:flex;align-items:center;gap:10px;flex-wrap:wrap">
+      <div style="flex:1;min-width:160px">
+        <div style="font-size:15px;font-weight:500">${escHtml(g.name)}${g.streamer_name?` <span style="font-size:12px;color:var(--purple-d);background:var(--purple-l);padding:1px 8px;border-radius:8px;font-weight:400">→ ${escHtml(g.streamer_name)}</span>`:''}</div>
+        <div style="font-size:12px;color:var(--muted)">${g.members.length} členů · ${g.ratings_count} hodnocení</div>
+      </div>
+      <button class="btn btn-sm" data-edteam="${g.id}" title="Upravit vazbu">🔗</button>
+      <button class="btn btn-sm" data-team="${g.id}">👥 Spravovat</button>
+      <button class="btn btn-sm btn-danger" data-delrg="${g.id}">×</button>
+    </div>`).join('')}
+  </div>`;
+}
+
+function admSettings(){
+  const s=ST.settings;
+  return `<div style="max-width:560px">
+    <div class="st">Komentáře — autorizace</div>
+    <div style="display:flex;align-items:center;justify-content:space-between;padding:.5rem 0;border-bottom:0.5px solid var(--border)">
+      <div>
+        <div style="font-size:15px;font-weight:500">Vyžadovat přihlášení pro komentáře</div>
+        <div style="font-size:13px;color:var(--muted)">Pokud vypnuto, stačí zadat přezdívku</div>
+      </div>
+      <input type="checkbox" id="set-auth" ${s.auth_enabled==='true'?'checked':''} style="width:18px;height:18px;cursor:pointer">
+    </div>
+    <div style="display:flex;align-items:center;justify-content:space-between;padding:.5rem 0;border-bottom:0.5px solid var(--border)">
+      <div>
+        <div style="font-size:15px;font-weight:500">Povolit přihlášení přes Twitch</div>
+        <div style="font-size:13px;color:var(--muted)">Zobrazí tlačítko "Přihlásit přes Twitch"</div>
+      </div>
+      <input type="checkbox" id="set-twitch" ${s.auth_twitch_enabled==='true'?'checked':''} style="width:18px;height:18px;cursor:pointer">
+    </div>
+    <div style="display:flex;align-items:center;justify-content:space-between;padding:.5rem 0">
+      <div>
+        <div style="font-size:15px;font-weight:500">Povolit přihlášení přes Kick</div>
+        <div style="font-size:13px;color:var(--muted)">Vyžaduje Kick OAuth app na kick.com/settings/developer</div>
+      </div>
+      <input type="checkbox" id="set-kick" ${s.auth_kick_enabled==='true'?'checked':''} style="width:18px;height:18px;cursor:pointer">
+    </div>
+    <div style="margin-top:1.25rem;display:flex;gap:8px">
+      <button class="btn btn-primary btn-sm" id="sett-save">Uložit nastavení</button>
+      <span id="sett-msg" style="font-size:13px;color:var(--muted);align-self:center"></span>
+    </div>
+  </div>`;
+}
+function admCards(list){
+  if(!list.length)return`<div class="empty">Žádný streamer</div>`;
+  return `<div class="grid">${list.map(admCard).join('')}</div>`;
+}
+function admCard(s){
+  const t=tot(s.r),c=gc(t,MAX);
+  return `<div class="card">
+    <div class="ch"><div class="ava">${av(s.name)}</div>
+      <div style="flex:1;min-width:0">
+        <div class="cn">${s.name} ${s.added_by==='viewer'?'<span class="tag">návrh</span>':''}</div>
+        <div class="cs">${s.platform==='kick'?'Kick':'Twitch'}${s.game?` · ${s.game}`:''}</div>
+        <div class="lrow">
+          ${s.platform==='kick'
+            ?`<a class="lb" href="https://kick.com/${s.kick||s.name}" target="_blank">Kick</a>
+               <a class="lb" href="https://streamscharts.com/channels/${s.kick||s.name}?platform=kick" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.kick||s.name}" target="_blank">StreamElements</a>`
+            :`<a class="lb" href="https://twitch.tv/${s.name}" target="_blank">Twitch</a>
+               
+               <a class="lb" href="https://streamscharts.com/channels/${s.name}" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.name}" target="_blank">StreamElements</a>
+               ${s.kick?`<a class="lb" href="https://kick.com/${s.kick}" target="_blank">Kick</a>`:''}`}
+        </div>
+      </div>
+      ${s.status==='live'?`<span class="badge-live"><div class="dot" style="width:6px;height:6px"></div>LIVE</span>`:`<span class="badge-off">Offline</span>`}
+    </div>
+    ${s.evaluated?`<div class="cb"><div class="srow">${CATS.map(c=>ms(c.l,s.r[c.k],10)).join('')}</div></div>
+    <div class="cf">
+      <div><div style="font-size:11px;color:var(--muted)">Skóre</div><div class="ts" style="color:${c}">${t}<span style="font-size:12px;opacity:.4">/${MAX}</span></div></div>
+      <div style="margin-left:auto;text-align:right"><div style="font-size:11px;color:var(--muted)">Odměna</div><div style="font-size:15px;font-weight:500">${s.reward?s.reward+' Kč':'—'}</div></div>
+      <div style="display:flex;gap:5px;margin-left:10px"><button class="btn btn-sm" data-ed="${s.id}">Upravit</button><button class="btn btn-sm" data-rst="${s.id}" title="Resetovat hodnocení" style="border-color:#f09595;color:#a32d2d">↺</button><button class="btn btn-sm" data-lock="${s.id}" data-locked="${s.community_locked}" title="${s.community_locked?'Odemknout':'Zamknout'} komunitní hodnocení" style="border-color:#aaa">${s.community_locked?'🔒':'🔓'}</button><button class="btn btn-sm btn-danger" data-dl="${s.id}">×</button></div>
+    </div>`:`<div class="cf" style="justify-content:space-between">
+      <span style="font-size:13px;color:var(--muted)">Čeká na hodnocení</span>
+      <div style="display:flex;gap:5px"><button class="btn btn-sm btn-primary" data-ed="${s.id}">+ Hodnotit</button><button class="btn btn-sm btn-danger" data-dl="${s.id}">×</button></div>
+    </div>`}
+  </div>`;
+}
+function admTable(list){
+  return `<div style="overflow-x:auto"><table>
+    <thead><tr><th>Streamer</th>${CATS.map(c=>`<th>${c.l.slice(0,5)}.</th>`).join('')}<th>Celkem</th><th>Odměna</th><th></th></tr></thead>
+    <tbody>${list.map(s=>{const t=tot(s.r);return`<tr>
+      <td><strong>${s.name}</strong>${s.added_by==='viewer'?' <span class="tag" style="font-size:10px">návrh</span>':''}<br><span style="font-size:11px;color:var(--muted)">${s.status==='live'?'🔴 live':'offline'}</span></td>
+      ${s.evaluated?CATS.map(c=>`<td style="color:${gc(s.r[c.k],10)};font-weight:500">${s.r[c.k]}</td>`).join(''):`<td colspan="${CATS.length}" style="color:var(--muted)">—</td>`}
+      <td style="font-weight:500;color:${gc(t,MAX)}">${s.evaluated?`${t}/${MAX}`:'—'}</td>
+      <td>${s.reward?s.reward+' Kč':'—'}</td>
+      <td><div style="display:flex;gap:4px"><button class="btn btn-sm" data-ed="${s.id}">Upravit</button><button class="btn btn-sm" data-rst="${s.id}" title="Reset" style="border-color:#f09595;color:#a32d2d">↺</button><button class="btn btn-sm btn-danger" data-dl="${s.id}">×</button></div></td>
+    </tr>`;}).join('')}</tbody>
+  </table></div>`;
+}
+
+// ── Modals ─────────────────────────────────────────────────────────
+function loginModal(){return `<div class="mbg" id="lmbg">
+  <div class="modal modal-sm">
+    <div class="mh"><div style="flex:1"><div style="font-size:16px;font-weight:500">Admin přihlášení</div><div style="font-size:13px;color:var(--muted)">Správa hodnocení a streamerů</div></div><button class="btn-ghost" id="lmx">✕</button></div>
+    <div class="mb"><div class="fg"><div class="fl">Heslo</div><input id="lpw" type="password" placeholder="Admin heslo"></div><div id="lerr" style="color:var(--red);font-size:13px;display:none;margin-top:-6px">Nesprávné heslo</div></div>
+    <div class="mf"><button class="btn" id="lmcancel">Zrušit</button><button class="btn btn-primary" id="lmok">Přihlásit</button></div>
+  </div></div>`;}
+
+function editModal(){
+  const s=ST.editId?ST.db.find(x=>x.id===ST.editId):null;
+  const r=s?{...s.r}:{s:0,g:0,a:0,v:0,n:0,ns:0,o:0};
+  return `<div class="mbg" id="embg">
+  <div class="modal">
+    <div class="mh"><div class="ava" style="width:38px;height:38px;font-size:13px">${av(s?s.name:'?')}</div>
+      <div style="flex:1"><div style="font-size:16px;font-weight:500">${s?s.name:'—'}</div><div style="font-size:13px;color:var(--muted)">Hodnocení (0–10 bodů per kategorie)</div></div>
+      <button class="btn-ghost" id="emx">✕</button></div>
+    <div class="mb"><form id="ef">
+      <div class="st">Platforma &amp; Status</div>
+      <div class="fgr">
+        ${s&&s.platform==='kick'
+          ? `<div class="fg"><div class="fl" style="color:var(--muted);font-size:12px">Kick streamer — jméno nelze změnit zde</div><input name="kick" value="${s?s.kick||s.name:''}" type="hidden"><div style="font-size:14px;padding:7px 0;color:var(--muted)">${s?s.kick||s.name:''}</div></div>`
+          : `<div class="fg"><div class="fl">Kick jméno (pokud má i Kick kanál)</div><input name="kick" value="${s?s.kick||'':''}" placeholder="kick_username"></div>`}
+        <div class="fg"><div class="fl">Status</div><select name="status"><option value="offline" ${!s||s.status==='offline'?'selected':''}>Offline</option><option value="live" ${s&&s.status==='live'?'selected':''}>LIVE</option></select></div>
+      </div>
+      <div class="fgr">
+        <div class="fg"><div class="fl">Hra</div><input name="game" value="${s?s.game||'':''}" placeholder="Just Chatting…"></div>
+        <div class="fg"><div class="fl">Titulek</div><input name="title" value="${s?s.title||'':''}" placeholder="Titulek streamu"></div>
+      </div>
+      <div class="st">Hodnocení</div>
+      ${CATS.map(c=>sl(c.k,`${c.l} (0–10)`,r[c.k]||0,10)).join('')}
+      <div class="st">Finanční odměna &amp; Poznámky</div>
+      <div class="fg">
+        <div class="fl">Odměna (automaticky dle skóre: 30–130 Kč)</div>
+        <div style="display:flex;align-items:center;gap:16px;padding:8px 0">
+          <div style="font-size:28px;font-weight:600;color:var(--purple)" id="auto-reward">${autoReward(r)} Kč</div>
+          <div style="font-size:13px;color:var(--muted)">= 30 + (skóre / 70) × 100, zaokrouhleno</div>
+        </div>
+        <input type="hidden" name="reward" id="rw" value="${autoReward(r)}">
+      </div>
+      <div class="fg"><div class="fl">Poznámky</div><textarea name="notes" rows="3" style="resize:vertical">${s?s.notes||'':''}</textarea></div>
+    </form></div>
+    <div class="mf"><button class="btn" id="emcancel">Zrušit</button><button class="btn btn-primary" id="emsave">Uložit</button></div>
+  </div></div>`;
+}
+function sl(nm,lbl,val,max){const c=gc(val,max);return `<div class="fg"><div class="fl">${lbl}</div><div class="ri"><input type="range" name="${nm}" min="0" max="${max}" step="1" value="${val}" id="r${nm}"><div class="rv" id="rv${nm}" style="color:${c}">${val}</div></div></div>`;}
+
+function detailModal(){
+  const s=ST.db.find(x=>x.id===ST.detailId);if(!s)return'';
+  const t=tot(s.r),c=gc(t,MAX);
+  const cr=ST.communityRatings[s.id];
+  const crAvg=cr?.avg;
+  const crRatings=cr?.ratings||[];
+  const authOn=ST.settings.auth_enabled==='true';
+  const u=ST.oauthUser;
+  return `<div class="mbg" id="dmbg">
+  <div class="modal">
+    <div class="mh">
+      <div class="ava" style="width:48px;height:48px;font-size:16px">${av(s.name)}</div>
+      <div style="flex:1">
+        <div style="font-size:17px;font-weight:500">${s.name}</div>
+        <div style="font-size:13px;color:var(--muted)">${s.platform==='kick'?'Kick':'Twitch'} · ${s.status==='live'?'<span style="color:var(--red)">🔴 LIVE</span>':'Offline'}</div>
+        <div class="lrow">
+          ${s.platform==='kick'
+            ?`<a class="lb" href="https://kick.com/${s.kick||s.name}" target="_blank">Kick</a>
+               <a class="lb" href="https://streamscharts.com/channels/${s.kick||s.name}?platform=kick" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.kick||s.name}" target="_blank">StreamElements</a>`
+            :`<a class="lb" href="https://twitch.tv/${s.name}" target="_blank">Twitch</a>
+               <a class="lb" href="https://streamscharts.com/channels/${s.name}" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.name}" target="_blank">StreamElements</a>
+               ${s.kick?`<a class="lb" href="https://kick.com/${s.kick}" target="_blank">Kick</a>`:''}`}
+        </div>
+      </div>
+      <button class="btn-ghost" id="dmx">✕</button>
+    </div>
+    <div class="mb">
+      <!-- Official rating -->
+      <div style="font-size:11px;font-weight:500;text-transform:uppercase;letter-spacing:.5px;color:var(--muted);margin-bottom:.5rem">Oficiální hodnocení</div>
+      <div style="display:flex;align-items:flex-end;gap:2rem;margin-bottom:1.5rem">
+        <div><div style="font-size:12px;color:var(--muted)">Celkové skóre</div><div style="font-size:40px;font-weight:600;color:${c};line-height:1">${t}<span style="font-size:17px;opacity:.4">/${MAX}</span></div></div>
+        ${s.reward?`<div><div style="font-size:12px;color:var(--muted)">Finanční odměna</div><div style="font-size:26px;font-weight:500">${s.reward} Kč</div></div>`:''}
+      </div>
+      ${CATS.map(cat=>{const v=s.r[cat.k]||0;return`<div class="bw"><div class="bl">${cat.l}</div><div class="bb"><div class="bf" style="width:${Math.round(v/10*100)}%;background:${gc(v,10)}"></div></div><div class="bv" style="color:${gc(v,10)}">${v}/10</div></div>`;}).join('')}
+      ${s.notes?`<div style="margin-top:1rem;padding-top:1rem;border-top:0.5px solid var(--border)"><div style="font-size:12px;color:var(--muted);margin-bottom:.5rem">Poznámky</div><div style="font-size:14px;line-height:1.6;color:var(--muted)">${s.notes}</div></div>`:''}
+
+      <!-- Community ratings -->
+      <div style="margin-top:1.5rem;padding-top:1rem;border-top:0.5px solid var(--border)">
+        <div style="display:flex;align-items:center;gap:10px;margin-bottom:.75rem">
+          <div style="font-size:11px;font-weight:500;text-transform:uppercase;letter-spacing:.5px;color:var(--muted)">Hodnocení komunit${crAvg?` (${crAvg.count})`:''}</div>
+          ${s.community_locked?`<span style="font-size:11px;padding:2px 8px;border-radius:8px;background:#FAECE7;color:#993C1D;border:0.5px solid var(--red)">🔒 Uzamčeno</span>`:''}
+        </div>
+        ${crAvg?(()=>{
+          // Validate active CR tab — fall back to overview if it points to a removed team
+          let curTab=ST.detailCRTab;
+          if(curTab!=='overview' && !crRatings.find(r=>r.group_id===curTab)) curTab='overview';
+          return `
+          <div style="display:flex;gap:4px;border-bottom:0.5px solid var(--border);margin-bottom:1rem;flex-wrap:wrap;overflow-x:auto">
+            <button class="ntab ${curTab==='overview'?'on':''}" data-crtab="overview" style="border-radius:0;padding:.5rem .75rem;font-size:13px">Průměr</button>
+            ${crRatings.map(r=>{const rt=CATS.reduce((a,c)=>a+(+r[c.k]||0),0);return `<button class="ntab ${curTab===r.group_id?'on':''}" data-crtab="${r.group_id}" style="border-radius:0;padding:.5rem .75rem;font-size:13px">${escHtml(r.group_name)} <span style="opacity:.6;margin-left:4px">${rt}/${MAX}</span></button>`;}).join('')}
+          </div>
+          ${curTab==='overview'?`
+            <div style="display:flex;align-items:center;gap:1.5rem;margin-bottom:1rem">
+              <div><div style="font-size:12px;color:var(--muted)">Průměr ze všech týmů</div><div style="font-size:28px;font-weight:600;color:${gc(crAvg.total,MAX)};line-height:1">${crAvg.total}<span style="font-size:14px;opacity:.4">/${MAX}</span></div></div>
+            </div>
+            ${CATS.map(cat=>{const v=crAvg[cat.k]||0;return`<div class="bw"><div class="bl">${cat.l}</div><div class="bb"><div class="bf" style="width:${Math.round(v/10*100)}%;background:${gc(v,10)};opacity:.7"></div></div><div class="bv" style="color:${gc(v,10)}">${v}/10</div></div>`;}).join('')}
+          `:(()=>{
+            const r=crRatings.find(x=>x.group_id===curTab);if(!r)return '';
+            const rt=CATS.reduce((a,c)=>a+(+r[c.k]||0),0);
+            return `
+              <div style="display:flex;align-items:center;gap:1.5rem;margin-bottom:1rem">
+                <div><div style="font-size:12px;color:var(--muted)">Hodnocení od týmu <strong>${escHtml(r.group_name)}</strong></div><div style="font-size:28px;font-weight:600;color:${gc(rt,MAX)};line-height:1">${rt}<span style="font-size:14px;opacity:.4">/${MAX}</span></div></div>
+                ${ST.admin?`<button class="btn btn-sm btn-danger" data-delcr="${r.id}" style="margin-left:auto">× Smazat</button>`:''}
+              </div>
+              ${CATS.map(cat=>{
+                const v=r[cat.k]||0;
+                const _key={s:'statistiky',g:'grafika',a:'alerty',v:'vychytavky',n:'nahled',ns:'nastaveni',o:'odlisnost'}[cat.k];
+                const v2=r[_key]??v;
+                return `<div class="bw"><div class="bl">${cat.l}</div><div class="bb"><div class="bf" style="width:${Math.round(v2/10*100)}%;background:${gc(v2,10)};opacity:.85"></div></div><div class="bv" style="color:${gc(v2,10)}">${v2}/10</div></div>`;
+              }).join('')}
+              ${r.notes?`<div style="margin-top:.85rem;padding:.7rem .9rem;background:var(--purple-l);border-left:3px solid var(--purple-d);border-radius:6px"><div style="font-size:11px;color:var(--purple-d);font-weight:500;text-transform:uppercase;letter-spacing:.4px;margin-bottom:.3rem">Poznámka týmu</div><div style="font-size:14px;line-height:1.5;white-space:pre-wrap">${escHtml(r.notes)}</div></div>`:''}
+            `;
+          })()}
+        `;})():`<div style="font-size:14px;color:var(--muted)">Zatím žádná komunitní hodnocení</div>`}
+      </div>
+
+      <!-- Comments -->
+      <div style="margin-top:1.5rem;padding-top:1rem;border-top:0.5px solid var(--border)">
+        <div style="font-size:13px;font-weight:500;margin-bottom:.75rem">Komentáře</div>
+        <div id="comments-list">
+          ${ST.comments[s.id]!=null?renderCommentsList(s.id):`<button class="btn btn-sm" id="comments-load" data-sid="${s.id}">Načíst komentáře</button>`}
+        </div>
+        <div class="comment-form" id="comment-form">
+          ${authOn&&!u&&!ST.admin?`<div style="font-size:14px;color:var(--muted);padding:.5rem 0">
+            Pro komentování je vyžadováno přihlášení.
+            ${ST.settings.auth_twitch_enabled==='true'?`<a class="btn btn-sm btn-primary" href="/api/oauth?provider=twitch" style="text-decoration:none;display:inline-flex;align-items:center;gap:6px;margin-left:8px"><svg width="13" height="13" viewBox="0 0 24 24" fill="currentColor"><path d="M11.571 4.714h1.715v5.143H11.57zm4.715 0H18v5.143h-1.714zM6 0L1.714 4.286v15.428h5.143V24l4.286-4.286h3.428L22.286 12V0zm14.571 11.143l-3.428 3.428h-3.429l-3 3v-3H6.857V1.714h13.714z"/></svg> Twitch</a>`:``}
+            ${ST.settings.auth_kick_enabled==='true'?`<a class="btn btn-sm" href="/api/oauth?provider=kick" style="text-decoration:none;display:inline-flex;align-items:center;gap:6px;margin-left:4px;background:#53fc18;border-color:#3dd10f;color:#000"><span style="font-weight:700">K</span> Kick</a>`:``}
+          </div>`:u?`<div style="display:flex;align-items:center;gap:8px;margin-bottom:6px">
+            ${u.avatar?`<img src="${u.avatar}" style="width:24px;height:24px;border-radius:50%" />`:''}
+            <span style="font-size:14px;font-weight:500">${u.display_name}</span>
+            <span style="font-size:11px;color:var(--muted)">${u.provider}</span>
+          </div>
+          <textarea id="c-body" rows="2" placeholder="Napište komentář…" style="resize:vertical"></textarea>
+          <div><button class="btn btn-sm btn-primary" id="c-submit" data-sid="${s.id}">Odeslat</button></div>
+          `:`<input id="c-author" placeholder="Vaše přezdívka (nepovinné)" style="max-width:220px">
+          <textarea id="c-body" rows="2" placeholder="Napište komentář…" style="resize:vertical"></textarea>
+          <div><button class="btn btn-sm btn-primary" id="c-submit" data-sid="${s.id}">Odeslat</button></div>`}
+        </div>
+      </div>
+    </div>
+  </div></div>`;
+}
+function modView(){
+  // Moderator view — same as admin cards but without add/delete/settings
+  const list=[...ST.db];
+  const filtered=list.filter(s=>{
+    if(ST.search){const q=ST.search.toLowerCase();if(!s.name.toLowerCase().includes(q))return false;}
+    if(ST.fil==='live')return s.status==='live';
+    if(ST.fil==='ev')return s.evaluated;
+    if(ST.fil==='pend')return !s.evaluated;
+    return true;
+  });
+  return `<div>
+    <div style="padding:.6rem 1rem;background:#EAF3DE;border:0.5px solid #639922;border-radius:10px;margin-bottom:1.25rem;font-size:14px;color:#3B6D11">
+      Přihlášen jako moderátor — můžeš hodnotit streamery a spravovat komentáře.
+    </div>
+    <div class="sbar"><input id="si" placeholder="Hledat streamera…" value="${ST.search}"></div>
+    <div class="frow">
+      ${[['all','Všichni'],['live','🔴 Live'],['ev','Ohodnocení'],['pend','Čekají']].map(([f,l])=>`<button class="fchip ${ST.fil===f?'on':''}" data-f="${f}">${l}</button>`).join('')}
+      <span class="cbadge">${filtered.length} streamerů</span>
+    </div>
+    <div class="grid">${filtered.map(s=>modCard(s)).join('')}</div>
+  </div>`;
+}
+
+function modCard(s){
+  const t=tot(s.r),c=gc(t,MAX);
+  return `<div class="card" style="cursor:default">
+    <div class="ch"><div class="ava">${av(s.name)}</div>
+      <div style="flex:1;min-width:0">
+        <div class="cn">${s.name}</div>
+        <div class="cs">${s.platform==='kick'?'Kick':'Twitch'}${s.game?` · ${s.game}`:''}</div>
+        <div class="lrow">
+          ${s.platform==='kick'
+            ?`<a class="lb" href="https://kick.com/${s.kick||s.name}" target="_blank">Kick</a>
+               <a class="lb" href="https://streamscharts.com/channels/${s.kick||s.name}?platform=kick" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.kick||s.name}" target="_blank">StreamElements</a>`
+            :`<a class="lb" href="https://twitch.tv/${s.name}" target="_blank">Twitch</a>
+               <a class="lb" href="https://streamscharts.com/channels/${s.name}" target="_blank">StreamsCharts</a>
+               <a class="lb" href="https://streamelements.com/${s.name}" target="_blank">StreamElements</a>
+               ${s.kick?`<a class="lb" href="https://kick.com/${s.kick}" target="_blank">Kick</a>`:''}`}
+        </div>
+      </div>
+      ${s.status==='live'?`<span class="badge-live"><div class="dot" style="width:6px;height:6px"></div>LIVE</span>`:`<span class="badge-off">Offline</span>`}
+    </div>
+    ${s.evaluated?`<div class="cb"><div class="srow">${CATS.map(c=>ms(c.l,s.r[c.k],10)).join('')}</div></div>
+    <div class="cf">
+      <div><div style="font-size:11px;color:var(--muted)">Skóre</div><div class="ts" style="color:${c}">${t}<span style="font-size:12px;opacity:.4">/${MAX}</span></div></div>
+      <div style="margin-left:auto;text-align:right"><div style="font-size:11px;color:var(--muted)">Odměna</div><div style="font-size:15px;font-weight:500">${s.reward?s.reward+' Kč':'—'}</div></div>
+      <div style="margin-left:10px"><button class="btn btn-sm" data-ed="${s.id}">Upravit</button></div>
+    </div>`:`<div class="cf" style="justify-content:space-between">
+      <span style="font-size:13px;color:var(--muted)">Čeká na hodnocení</span>
+      <button class="btn btn-sm btn-primary" data-ed="${s.id}">+ Hodnotit</button>
+    </div>`}
+  </div>`;
+}
+
+// ── Rater view (members + admin) ──────────────────────────────────
+function raterView(){
+  // Available teams to rate as
+  // - admin: all teams (ST.raterGroups)
+  // - member: only teams they belong to (ST.myGroups)
+  const teams = ST.admin ? (ST.raterGroups||[]) : (ST.myGroups||[]);
+
+  if(!teams.length){
+    return `<div class="empty">
+      ${ST.admin
+        ? 'Zatím nejsou žádné týmy. Vytvoř tým ve Správa → Týmy.'
+        : 'Nejste členem žádného týmu. Požádejte admina o přidání.'}
+    </div>`;
+  }
+
+  // Default-pick a team if none selected (or selected one no longer exists)
+  if(!ST.activeTeamId || !teams.find(t=>t.id===ST.activeTeamId)){
+    ST.activeTeamId = teams[0].id;
+  }
+  const team = teams.find(t=>t.id===ST.activeTeamId);
+  const linkedSid = team?.streamer_id || null;
+
+  // Show all streamers, exclude the team's own streamer
+  const list = ST.db.filter(s=>{
+    if(linkedSid && s.id===linkedSid) return false;
+    if(ST.search){const q=ST.search.toLowerCase();if(!s.name.toLowerCase().includes(q))return false;}
+    return true;
+  });
+
+  const teamPicker = teams.length>1
+    ? `<select id="team-picker" style="max-width:260px">
+        ${teams.map(t=>`<option value="${t.id}" ${t.id===ST.activeTeamId?'selected':''}>${escHtml(t.name)}${t.streamer_id?' · '+escHtml(t.streamer_name||'#'+t.streamer_id):''}</option>`).join('')}
+       </select>`
+    : `<strong>${escHtml(team.name)}</strong>${team.streamer_id?` · <span style="opacity:.7">${escHtml(team.streamer_name||'')}</span>`:''}`;
+
+  return `<div>
+    <div style="padding:.7rem 1rem;background:#EAF3DE;border:0.5px solid #639922;border-radius:10px;margin-bottom:1rem;font-size:14px;color:#3B6D11;display:flex;align-items:center;gap:10px;flex-wrap:wrap">
+      <span>${ST.admin?'Hodnotíš jako tým:':'Hodnotíš za tým:'}</span>
+      ${teamPicker}
+      ${linkedSid?`<span style="font-size:12px;opacity:.7">(svého streamera nelze hodnotit)</span>`:''}
+    </div>
+    <div class="sbar"><input id="si" placeholder="Hledat streamera…" value="${ST.search}"></div>
+    ${list.length===0?`<div class="empty">Žádný streamer k hodnocení.</div>`:`
+    <div class="grid">${list.map(s=>{
+      const myR=ST.teamRatings?.[s.id];
+      const myTotal=myR?CATS.reduce((a,c)=>{
+        const map={s:'statistiky',g:'grafika',a:'alerty',v:'vychytavky',n:'nahled',ns:'nastaveni',o:'odlisnost'};
+        return a+(+myR[map[c.k]]||0);
+      },0):null;
+      return `<div class="card" style="cursor:default">
+        <div class="ch"><div class="ava">${av(s.name)}</div>
+          <div style="flex:1;min-width:0"><div class="cn">${s.name}${!s.evaluated?' <span class="tag" style="font-size:10px">bez ofic. hodnocení</span>':''}</div><div class="cs">${s.platform==='kick'?'Kick':'Twitch'}${s.game?` · ${s.game}`:''}</div></div>
+          ${s.status==='live'?`<span class="badge-live"><div class="dot" style="width:6px;height:6px"></div>LIVE</span>`:`<span class="badge-off">Offline</span>`}
+        </div>
+        <div class="cf" style="justify-content:space-between">
+          <div>
+            ${myTotal!==null?`<div style="font-size:11px;color:var(--muted)">Hodnocení týmu</div><div style="font-size:18px;font-weight:500;color:${gc(myTotal,MAX)}">${myTotal}/${MAX}</div>`:`<span style="font-size:13px;color:var(--muted)">Zatím nehodnoceno</span>`}
+          </div>
+          <div style="display:flex;gap:6px;align-items:center">
+            ${s.community_locked&&!ST.admin?`<span style="font-size:12px;color:var(--red)">🔒 Uzamčeno</span>`:`<button class="btn btn-sm btn-primary" data-rate="${s.id}">${myTotal!==null?'Upravit':'+ Hodnotit'}</button>`}
+          </div>
+        </div>
+      </div>`;
+    }).join('')}
+    </div>`}
+  </div>`;
+}
+
+function communityRateModal(){
+  const sid=ST.rateStreamerId;
+  const s=ST.db.find(x=>x.id===sid);
+  if(!s)return'';
+  const teams = ST.admin ? (ST.raterGroups||[]) : (ST.myGroups||[]);
+  const team = teams.find(t=>t.id===ST.activeTeamId);
+  const myR=ST.myRating;
+  const r=myR?{s:myR.statistiky,g:myR.grafika,a:myR.alerty,v:myR.vychytavky,n:myR.nahled,ns:myR.nastaveni,o:myR.odlisnost}:{s:0,g:0,a:0,v:0,n:0,ns:0,o:0};
+  return `<div class="mbg" id="crate-bg">
+  <div class="modal">
+    <div class="mh">
+      <div class="ava" style="width:38px;height:38px;font-size:13px">${av(s.name)}</div>
+      <div style="flex:1"><div style="font-size:16px;font-weight:500">${s.name}</div><div style="font-size:13px;color:var(--muted)">Hodnocení za tým <strong>${escHtml(team?.name||'?')}</strong>${ST.admin?' <span style="opacity:.6">(admin)</span>':''}</div></div>
+      <button class="btn-ghost" id="crate-close">✕</button>
+    </div>
+    <div class="mb"><form id="crf">
+      <div class="st">Hodnocení (0–10 bodů)</div>
+      ${CATS.map(c=>sl(c.k,`${c.l} (0–10)`,r[c.k]||0,10)).join('')}
+      <div class="fg" style="margin-top:1rem"><div class="fl">Poznámky (nepovinné)</div>
+        <textarea name="notes" rows="2" style="resize:vertical">${myR?.notes||''}</textarea>
+      </div>
+    </form></div>
+    <div class="mf">
+      <button class="btn" id="crate-cancel">Zrušit</button>
+      <button class="btn btn-primary" id="crate-save">Uložit hodnocení</button>
+    </div>
+  </div></div>`;
+}
+
+function teamModal(){
+  const g=(ST.raterGroups||[]).find(x=>x.id===ST.teamId);
+  if(!g)return'';
+  return `<div class="mbg" id="team-bg">
+  <div class="modal" style="max-width:640px">
+    <div class="mh">
+      <div style="flex:1">
+        <div style="font-size:16px;font-weight:500">👥 ${escHtml(g.name)}${g.streamer_name?` <span style="font-size:12px;color:var(--purple-d);background:var(--purple-l);padding:1px 8px;border-radius:8px;font-weight:400">→ ${escHtml(g.streamer_name)}</span>`:''}</div>
+        <div style="font-size:13px;color:var(--muted)">${g.members.length} členů · ${g.ratings_count} hodnocení</div>
+      </div>
+      <button class="btn-ghost" id="team-close">✕</button>
+    </div>
+    <div class="mb">
+      <div class="st">Přidat / promote člena</div>
+      <div style="display:grid;gap:6px;grid-template-columns:1fr 100px 110px auto;margin-bottom:.4rem;align-items:center">
+        <input id="tm-login" placeholder="twitch_username">
+        <select id="tm-provider"><option value="twitch">Twitch</option><option value="kick">Kick</option></select>
+        <select id="tm-role"><option value="rater">Rater</option><option value="owner">Owner (streamer)</option></select>
+        <button class="btn btn-primary btn-sm" id="tm-add">+ Přidat</button>
+      </div>
+      <div style="font-size:11px;color:var(--muted);margin-bottom:.4rem">
+        <strong>Owner</strong> = sám streamer (zástupce týmu, jen jeden). <strong>Rater</strong> = člen týmu, který hodnotí ostatní streamery.
+      </div>
+      <div id="tm-err" style="color:var(--red);font-size:12px;display:none;margin-bottom:.4rem"></div>
+
+      <div class="st" style="margin-top:1.25rem">Členové (${g.members.length})</div>
+      ${g.members.length===0?`<div style="font-size:14px;color:var(--muted);padding:.4rem 0">Zatím nikdo</div>`:''}
+      ${g.members.map(m=>{
+        const isOwner=m.role==='owner';
+        return `<div style="display:flex;align-items:center;gap:10px;padding:.5rem 0;border-bottom:0.5px solid var(--border)">
+        ${m.avatar?`<img src="${m.avatar}" style="width:28px;height:28px;border-radius:50%" />`:`<div class="ava" style="width:28px;height:28px;font-size:11px">${av(m.display_name)}</div>`}
+        <div style="flex:1">
+          <div style="font-size:14px;font-weight:500">${m.display_name}
+            ${isOwner
+              ?'<span style="font-size:10px;padding:1px 7px;background:var(--purple-l);color:var(--purple-d);border-radius:8px;margin-left:6px">OWNER</span>'
+              :'<span style="font-size:10px;padding:1px 7px;background:#EAF3DE;color:#3B6D11;border-radius:8px;margin-left:6px">rater</span>'}
+          </div>
+          <div style="font-size:12px;color:var(--muted)">${m.provider} · ${m.login}</div>
+        </div>
+        <button class="btn btn-sm btn-danger" data-delmember="${m.member_id}" style="padding:4px 10px">×</button>
+      </div>`;
+      }).join('')}
+    </div>
+    <div class="mf">
+      <button class="btn" id="team-cancel">Zavřít</button>
+    </div>
+  </div></div>`;
+}
+
+function sugModal(){return `<div class="mbg" id="sgbg">
+  <div class="modal modal-sm">
+    <div class="mh"><div style="flex:1"><div style="font-size:16px;font-weight:500">Navrhnout streamera</div><div style="font-size:13px;color:var(--muted)">Váš návrh zobrazíme jako podklad</div></div><button class="btn-ghost" id="sgx">✕</button></div>
+    <div class="mb">
+      <div class="fg"><div class="fl">Twitch / Kick jméno *</div><input id="sgn" placeholder="username"></div>
+      <div class="fg"><div class="fl">Platforma</div><select id="sgp"><option value="twitch">Twitch</option><option value="kick">Kick</option></select></div>
+      <div class="fg"><div class="fl">Vaše přezdívka</div><input id="sgs" placeholder="nepovinné"></div>
+      <div id="sgerr" style="color:var(--red);font-size:13px;display:none">Vyplňte jméno streamera</div>
+    </div>
+    <div class="mf"><button class="btn" id="sgcancel">Zrušit</button><button class="btn btn-primary" id="sgok">Odeslat návrh</button></div>
+  </div></div>`;}
+function newModal(){return `<div class="mbg" id="nmbg">
+  <div class="modal modal-sm">
+    <div class="mh"><div style="flex:1"><div style="font-size:16px;font-weight:500">Přidat streamera</div></div><button class="btn-ghost" id="nmx">✕</button></div>
+    <div class="mb">
+      <div class="fg"><div class="fl">Platforma</div><select id="nmp" onchange="
+        const isTwitch=this.value==='twitch';
+        document.getElementById('nm-name-label').textContent=isTwitch?'Twitch jméno *':'Kick jméno *';
+        document.getElementById('nmn').placeholder=isTwitch?'twitch_username':'kick_username';
+        document.getElementById('nm-kick-row').style.display=isTwitch?'block':'none';
+      "><option value="twitch">Twitch</option><option value="kick">Kick</option></select></div>
+      <div class="fg"><div class="fl" id="nm-name-label">Twitch jméno *</div><input id="nmn" placeholder="twitch_username"></div>
+      <div class="fg" id="nm-kick-row"><div class="fl">Kick jméno (pokud se liší od Twitch)</div><input id="nmk" placeholder="nepovinné"></div>
+      <div id="nmerr" style="color:var(--red);font-size:13px;display:none">Jméno povinné nebo již existuje</div>
+    </div>
+    <div class="mf"><button class="btn" id="nmcancel">Zrušit</button><button class="btn btn-primary" id="nmok">Přidat</button></div>
+  </div></div>`;}
+
+// ── Event binding ──────────────────────────────────────────────────
+function on(id,fn){document.getElementById(id)?.addEventListener('click',fn);}
+function qa(sel,fn){document.querySelectorAll(sel).forEach(fn);}
+
+function bind(){
+  qa('[data-tab]',el=>el.addEventListener('click',async()=>{
+    const t=el.dataset.tab;
+    ST.tab=t;ST.fil='all';ST.search='';
+    if(t==='rate'){
+      try{
+        if(ST.admin && !ST.raterGroups?.length){
+          ST.raterGroups=await GET('/api/rater_groups');
+        }
+        // Decide active team
+        const teams = ST.admin ? (ST.raterGroups||[]) : (ST.myGroups||[]);
+        if(teams.length && (!ST.activeTeamId || !teams.find(t2=>t2.id===ST.activeTeamId))){
+          ST.activeTeamId = teams[0].id;
+        }
+        // Load this team's ratings map
+        if(ST.activeTeamId){
+          try{ST.teamRatings=await GET('/api/community_ratings?team_ratings=1&group_id='+ST.activeTeamId);}
+          catch(e){ST.teamRatings={};}
+        }
+      }catch(e){toast('Chyba načítání: '+e.message,false);}
+    }
+    re();
+  }));
+  // Team picker change (rater view) — switch active team, refetch its ratings
+  const tp=document.getElementById('team-picker');
+  if(tp)tp.addEventListener('change',async()=>{
+    ST.activeTeamId=+tp.value;
+    try{ST.teamRatings=await GET('/api/community_ratings?team_ratings=1&group_id='+ST.activeTeamId);}
+    catch(e){ST.teamRatings={};}
+    re();
+  });
+  qa('[data-f]',el=>el.addEventListener('click',()=>{ST.fil=el.dataset.f;re();}));
+  qa('[data-av]',el=>el.addEventListener('click',()=>{ST.av=el.dataset.av;re();}));
+  // Admin section navigation — lazy-load data on first visit
+  qa('[data-asec]',el=>el.addEventListener('click',async()=>{
+    const sec=el.dataset.asec;
+    ST.admSection=sec;
+    try{
+      if(sec==='users'){
+        const [mods,users]=await Promise.all([GET('/api/moderators'),GET('/api/moderators?users=1')]);
+        ST.currentMods=mods;ST.allUsers=users;
+      }else if(sec==='teams'){
+        ST.raterGroups=await GET('/api/rater_groups');
+      }
+    }catch(e){toast('Chyba načítání: '+e.message,false);}
+    re();
+  }));
+  const si=document.getElementById('si');
+  if(si)si.addEventListener('input',e=>{ST.search=e.target.value;re();});
+  on('li',()=>{ST.loginM=true;re();setTimeout(()=>document.getElementById('lpw')?.focus(),30);});
+  on('lo',async()=>{await POST('/api/auth?action=logout');ST.admin=false;ST.tab='pub';ST.db=await GET('/api/streamers');re();});
+  on('sugbtn',()=>{ST.sugM=true;re();});
+  on('newbtn',()=>{ST.newM=true;re();});
+  on('rfbtn',async()=>{
+    try{
+      const r=await GET('/api/live?refresh=1');
+      ST.db=await GET('/api/streamers?all=1');
+      toast(`Live refresh hotov — ${r.results?.filter(x=>x.status==='live').length||0} live`);
+      re();
+    }catch(e){toast('Chyba při live refresh: '+e.message,false);}
+  });
+  // Open team management modal for a single team
+  qa('[data-team]',el=>el.addEventListener('click',e=>{
+    e.stopPropagation();
+    ST.teamId=+el.dataset.team;ST.teamM=true;re();
+  }));
+  qa('[data-ed]',el=>el.addEventListener('click',e=>{e.stopPropagation();ST.editId=+el.dataset.ed;ST.editM=true;re();bsliders();}));
+  qa('[data-dl]',el=>el.addEventListener('click',async e=>{
+    e.stopPropagation();
+    if(!confirm('Smazat streamera?'))return;
+    try{await DEL('/api/streamers?id='+el.dataset.dl);ST.db=ST.db.filter(x=>x.id!=el.dataset.dl);toast('Smazáno');re();}
+    catch(e){toast('Chyba: '+e.message,false);}
+  }));
+  qa('[data-rst]',el=>el.addEventListener('click',async e=>{
+    e.stopPropagation();
+    const s=ST.db.find(x=>x.id===+el.dataset.rst);if(!s)return;
+    const wipeCommunity=confirm(
+      'Resetovat oficiální hodnocení streamera "'+s.name+'"?\n\n'+
+      'OK = také smaže VŠECHNA komunitní hodnocení tohoto streamera.\n'+
+      'Zrušit = jen oficiální skóre, komunitní zůstanou.'
+    );
+    if(!confirm('Pokračovat? Tato akce je nevratná.'))return;
+    try{
+      await PUT('/api/streamers?id='+s.id,{
+        kick:s.kick||'',status:s.status,game:s.game||'',title:s.title||'',
+        r:{s:0,g:0,a:0,v:0,n:0,ns:0,o:0},reward:0,notes:''
+      });
+      Object.assign(s,{r:{s:0,g:0,a:0,v:0,n:0,ns:0,o:0},reward:0,evaluated:false});
+      if(wipeCommunity){
+        await DEL('/api/community_ratings?wipe_streamer='+s.id);
+        // Refresh teams (counts changed) and ratings cache
+        if(ST.raterGroups?.length)ST.raterGroups=await GET('/api/rater_groups');
+        delete ST.communityRatings[s.id];
+      }
+      toast(wipeCommunity?'Resetováno (vč. komunitních hodnocení)':'Oficiální hodnocení resetováno');re();
+    }catch(e){toast('Chyba: '+e.message,false);}
+  }));
+  // Lock/unlock community ratings
+  qa('[data-lock]',el=>el.addEventListener('click',async e=>{
+    e.stopPropagation();
+    const sid=+el.dataset.lock;
+    const locked=el.dataset.locked==='true';
+    try{
+      await PUT('/api/streamers?id='+sid+'&lock=1',{community_locked:!locked});
+      const s=ST.db.find(x=>x.id===sid);
+      if(s)s.community_locked=!locked;
+      toast(locked?'Hodnocení odemčeno':'Hodnocení uzamčeno');re();
+    }catch(e){toast('Chyba: '+e.message,false);}
+  }));
+  // Open rate modal
+  qa('[data-rate]',el=>el.addEventListener('click',async e=>{
+    e.stopPropagation();
+    const sid=+el.dataset.rate;
+    ST.rateStreamerId=sid;
+    // Pre-fill from active team's ratings map (loaded on tab/team switch)
+    ST.myRating = ST.teamRatings?.[sid] || null;
+    ST.rateM=true;re();setTimeout(()=>bcrSliders(),30);
+  }));
+  // Delete community rating (admin)
+  qa('[data-delcr]',el=>el.addEventListener('click',async e=>{
+    e.stopPropagation();
+    if(!confirm('Smazat toto komunitní hodnocení?'))return;
+    try{
+      await DEL('/api/community_ratings?id='+el.dataset.delcr);
+      // Reload community ratings for current detail
+      if(ST.detailId)ST.communityRatings[ST.detailId]=await GET('/api/community_ratings?streamer_id='+ST.detailId);
+      toast('Hodnocení smazáno');re();
+    }catch(e){toast('Chyba: '+e.message,false);}
+  }));
+  // Detail community-rating tab switch (Průměr / per-team)
+  qa('[data-crtab]',el=>el.addEventListener('click',e=>{
+    e.stopPropagation();
+    const v=el.dataset.crtab;
+    ST.detailCRTab = (v==='overview')?'overview':+v;
+    re();
+  }));
+  // Detail comment filter (all / per-team)
+  qa('[data-cmtfilter]',el=>el.addEventListener('click',e=>{
+    e.stopPropagation();
+    ST.detailCmtFilter = el.dataset.cmtfilter;
+    re();
+  }));
+  qa('[data-det]',el=>el.addEventListener('click',async()=>{
+    const sid=+el.dataset.det;
+    ST.detailId=sid;
+    // Reset detail-modal local state when opening a new streamer
+    ST.detailCRTab='overview';
+    ST.detailCmtFilter='all';
+    // Make sure team list is loaded for admins (used for badges in renderCommentsList)
+    if(ST.admin && !ST.raterGroups?.length){
+      try{ST.raterGroups=await GET('/api/rater_groups');}catch(e){}
+    }
+    // Load community ratings for this streamer
+    try{ST.communityRatings[sid]=await GET('/api/community_ratings?streamer_id='+sid);}catch(e){}
+    re();
+  }));
+  bLogin();bEdit();bDetail();bSug();bNew();
+  bAdmUsers();bAdmTeams();bAdmSettings();bTeam();bCommunityRate();
+}
+
+function bLogin(){
+  if(!ST.loginM)return;
+  const cl=()=>{ST.loginM=false;re();};
+  on('lmx',cl);on('lmcancel',cl);
+  on('lmbg',e=>{if(e.target.id==='lmbg')cl();});
+  const doL=async()=>{
+    const pw=document.getElementById('lpw')?.value;
+    try{
+      await POST('/api/auth?action=login',{password:pw});
+      ST.admin=true;ST.loginM=false;
+      ST.db=await GET('/api/streamers?all=1');
+      re();
+    }catch(e){const err=document.getElementById('lerr');if(err)err.style.display='block';}
+  };
+  on('lmok',doL);
+  document.getElementById('lpw')?.addEventListener('keydown',e=>{if(e.key==='Enter')doL();});
+}
+function bEdit(){
+  if(!ST.editM)return;
+  const cl=()=>{ST.editM=false;ST.editId=null;re();};
+  on('emx',cl);on('emcancel',cl);
+  on('embg',e=>{if(e.target.id==='embg')cl();});
+  on('emsave',async()=>{
+    const f=document.getElementById('ef');if(!f)return;
+    const fd=new FormData(f);
+    const s=ST.db.find(x=>x.id===ST.editId);if(!s)return;
+    const body={
+      kick:fd.get('kick')||'', status:fd.get('status'),
+      game:fd.get('game')||'', title:fd.get('title')||'',
+      r:Object.fromEntries(CATS.map(c=>[c.k,+(fd.get(c.k)||0)])),
+      reward:Math.round(+(document.getElementById('rw')?.value||0)),
+      notes:fd.get('notes')||''
+    };
+    try{
+      await PUT('/api/streamers?id='+ST.editId,body);
+      // Update local state
+      Object.assign(s,{kick:body.kick,status:body.status,game:body.game,title:body.title,r:body.r,reward:body.reward,notes:body.notes,evaluated:Object.values(body.r).some(v=>v>0)});
+      toast('Uloženo');ST.editM=false;ST.editId=null;re();
+    }catch(e){toast('Chyba: '+e.message,false);}
+  });
+  bsliders();
+}
+// Auto reward: 30 Kč base + up to 100 Kč based on score (0-70), rounded to whole crowns
+function autoReward(r){
+  const score=CATS.reduce((a,c)=>a+(+r[c.k]||0),0);
+  return Math.round(30+(score/MAX)*100);
+}
+
+function bsliders(){
+  CATS.forEach(c=>{
+    const i=document.getElementById('r'+c.k),v=document.getElementById('rv'+c.k);
+    if(i&&v)i.addEventListener('input',()=>{
+      v.textContent=i.value;
+      v.style.color=gc(+i.value,10);
+      updateAutoReward();
+    });
+  });
+  updateAutoReward();
+}
+
+function updateAutoReward(){
+  const r={};
+  CATS.forEach(c=>{
+    const i=document.getElementById('r'+c.k);
+    r[c.k]=i?+i.value:0;
+  });
+  const reward=autoReward(r);
+  const el=document.getElementById('auto-reward');
+  const hw=document.getElementById('rw');
+  if(el)el.textContent=reward+' Kč';
+  if(hw)hw.value=reward;
+}
+function bDetail(){
+  if(!ST.detailId)return;
+  on('dmx',()=>{ST.detailId=null;re();});
+  on('dmbg',e=>{if(e.target.id==='dmbg'){ST.detailId=null;re();}});
+
+  // Load comments button
+  on('comments-load',()=>loadComments(ST.detailId));
+
+  // Auto-load if already cached
+  if(ST.comments[ST.detailId]==null){
+    loadComments(ST.detailId);
+  }
+
+  // Submit comment
+  on('c-submit',async()=>{
+    const sid=ST.detailId;
+    const body=document.getElementById('c-body')?.value.trim();
+    const author=document.getElementById('c-author')?.value.trim()||'Anonym';
+    if(!body||body.length<2){toast('Komentář je příliš krátký',false);return;}
+    try{
+      const c=await POST('/api/comments',{streamer_id:sid,author,body});
+      if(!ST.comments[sid])ST.comments[sid]=[];
+      ST.comments[sid].push(c);
+      const el=document.getElementById('comments-list');
+      if(el)el.innerHTML=renderCommentsList(sid);
+      const bodyEl  = document.getElementById('c-body');
+      const authorEl = document.getElementById('c-author');
+      if(bodyEl)  bodyEl.value='';
+      if(authorEl) authorEl.value='';
+      toast('Komentář přidán');
+    }catch(e){toast('Chyba: '+e.message,false);}
+  });
+
+  // Delete comment (admin)
+  document.querySelectorAll('[data-cid]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      const cid=+btn.dataset.cid;
+      const sid=+btn.dataset.sid;
+      if(!confirm('Smazat komentář?'))return;
+      try{
+        await DEL('/api/comments?id='+cid);
+        ST.comments[sid]=(ST.comments[sid]||[]).filter(c=>c.id!==cid);
+        const el=document.getElementById('comments-list');
+        if(el)el.innerHTML=renderCommentsList(sid);
+        toast('Smazáno');
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+}
+function bSug(){
+  if(!ST.sugM)return;
+  const cl=()=>{ST.sugM=false;re();};
+  on('sgx',cl);on('sgcancel',cl);
+  on('sgbg',e=>{if(e.target.id==='sgbg')cl();});
+  on('sgok',async()=>{
+    const name=document.getElementById('sgn').value.trim().toLowerCase();
+    const err=document.getElementById('sgerr');
+    if(!name){err.style.display='block';return;}
+    try{
+      await POST('/api/streamers',{name,platform:document.getElementById('sgp').value,submitter:document.getElementById('sgs').value.trim()});
+      ST.sugM=false;toast(`Díky! Návrh na "${name}" byl přidán.`);re();
+    }catch(e){err.textContent=e.message;err.style.display='block';}
+  });
+}
+function bNew(){
+  if(!ST.newM)return;
+  const cl=()=>{ST.newM=false;re();};
+  on('nmx',cl);on('nmcancel',cl);
+  on('nmbg',e=>{if(e.target.id==='nmbg')cl();});
+  on('nmok',async()=>{
+    const name=document.getElementById('nmn').value.trim().toLowerCase();
+    const platform=document.getElementById('nmp').value;
+    const err=document.getElementById('nmerr');
+    if(!name){err.style.display='block';return;}
+    // For kick: the main name field IS the kick name, twitch name field unused
+    // For twitch: name is twitch name, optional kick field is secondary
+    const kick_name = platform==='kick' ? name : (document.getElementById('nmk').value.trim().toLowerCase()||'');
+    const streamer_name = name;
+    try{
+      const res=await POST('/api/streamers?admin=1',{name:streamer_name,platform,kick_name});
+      ST.db.push({id:res.id,name:streamer_name,platform,kick:kick_name,status:'offline',game:'',title:'',added_by:'admin',evaluated:false,r:{s:0,g:0,a:0,v:0,n:0,ns:0,o:0},reward:0,notes:''});
+      ST.newM=false;toast('Streamer přidán');re();
+    }catch(e){err.textContent=e.message;err.style.display='block';}
+  });
+}
+
+// ── Admin: Users section (inline) ─────────────────────────────────
+async function reloadUsers(){
+  const [mods,users]=await Promise.all([GET('/api/moderators'),GET('/api/moderators?users=1')]);
+  ST.currentMods=mods;ST.allUsers=users;
+}
+
+function bAdmUsers(){
+  if(!ST.admin||ST.tab!=='adm'||ST.admSection!=='users')return;
+
+  // Add mod by username
+  on('mod-add',async()=>{
+    const login=document.getElementById('mod-login')?.value.trim().toLowerCase();
+    const provider=document.getElementById('mod-provider')?.value;
+    const err=document.getElementById('mod-err');
+    if(!login){err.textContent='Zadej uživatelské jméno';err.style.display='block';return;}
+    try{
+      const res=await POST('/api/moderators',{login,provider});
+      toast(`${res.display_name} přidán jako moderátor`);
+      await reloadUsers();re();
+    }catch(e){err.textContent=e.message;err.style.display='block';}
+  });
+
+  // Remove mod
+  document.querySelectorAll('[data-delmod]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      if(!confirm('Odebrat moderátora?'))return;
+      try{
+        await DEL('/api/moderators?id='+btn.dataset.delmod);
+        toast('Moderátor odebrán');
+        await reloadUsers();re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+
+  // Give mod from users list
+  document.querySelectorAll('[data-givemod]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      try{
+        const res=await POST('/api/moderators',{login:btn.dataset.login,provider:btn.dataset.provider});
+        toast(`${res.display_name} přidán jako moderátor`);
+        await reloadUsers();re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+
+  // Revoke mod from users list (by user_id → find mod_id)
+  document.querySelectorAll('[data-revmod]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      if(!confirm('Odebrat mod oprávnění?'))return;
+      try{
+        const mod=ST.currentMods.find(m=>m.id==btn.dataset.revmod);
+        if(mod) await DEL('/api/moderators?id='+mod.mod_id);
+        toast('Mod odebrán');
+        await reloadUsers();re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+
+  // Ban
+  document.querySelectorAll('[data-ban]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      if(!confirm('Zabanovat uživatele?'))return;
+      try{
+        await POST('/api/moderators?ban=1',{user_id:+btn.dataset.ban});
+        toast('Uživatel zabanován');
+        await reloadUsers();re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+
+  // Unban
+  document.querySelectorAll('[data-unban]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      try{
+        await DEL('/api/moderators?unban='+btn.dataset.unban);
+        toast('Uživatel odbanován');
+        await reloadUsers();re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+}
+
+// ── Admin: Teams section (inline list) ────────────────────────────
+function bAdmTeams(){
+  if(!ST.admin||ST.tab!=='adm'||ST.admSection!=='teams')return;
+
+  // Create team — reads name + optional streamer_id
+  on('rg-create',async()=>{
+    const name=document.getElementById('rg-name')?.value.trim();
+    const sidVal=document.getElementById('rg-streamer')?.value;
+    const streamer_id=sidVal?+sidVal:null;
+    const err=document.getElementById('rg-err');
+    if(!name){err.textContent='Zadej název týmu';err.style.display='block';return;}
+    try{
+      const payload={name};
+      if(streamer_id)payload.streamer_id=streamer_id;
+      await POST('/api/rater_groups',payload);
+      ST.raterGroups=await GET('/api/rater_groups');
+      // Refresh streamers so team_id gets reflected
+      try{ST.db=await GET('/api/streamers?all=1');}catch(e){}
+      if(err){err.style.display='none';err.textContent='';}
+      toast('Tým vytvořen');re();
+    }catch(e){if(err){err.textContent=e.message;err.style.display='block';}}
+  });
+
+  // Edit team binding — rename and/or change linked streamer via prompt
+  document.querySelectorAll('[data-edteam]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      const gid=+btn.dataset.edteam;
+      const g=ST.raterGroups.find(x=>x.id===gid);
+      if(!g)return;
+      const newName=prompt('Nový název týmu (prázdné = ponechat):', g.name);
+      if(newName===null)return;
+
+      // Build a list of streamers to choose from (current linked + unlinked ones)
+      const linkedSids=new Set(ST.raterGroups.map(x=>x.streamer_id).filter(Boolean));
+      const choices=ST.db.filter(s=>!linkedSids.has(s.id)||s.id===g.streamer_id);
+      const numbered=choices.map((s,i)=>`${i+1}) ${s.name}`).join('\n');
+      const cur=g.streamer_id?choices.findIndex(s=>s.id===g.streamer_id)+1:0;
+      const ans=prompt(
+        `Vazba na streamera — zadej číslo (0 = bez vazby, prázdné = ponechat):\n\n0) — bez vazby —\n${numbered}`,
+        String(cur)
+      );
+      if(ans===null)return;
+
+      const payload={};
+      if(newName.trim()&&newName.trim()!==g.name) payload.name=newName.trim();
+      if(ans.trim()!==''){
+        const idx=parseInt(ans,10);
+        if(idx===0) payload.streamer_id=null;
+        else if(idx>=1&&idx<=choices.length) payload.streamer_id=choices[idx-1].id;
+        else { toast('Neplatné číslo',false); return; }
+      }
+      if(!Object.keys(payload).length){ toast('Nic nezměněno'); return; }
+
+      try{
+        await PUT('/api/rater_groups?id='+gid,payload);
+        ST.raterGroups=await GET('/api/rater_groups');
+        try{ST.db=await GET('/api/streamers?all=1');}catch(e){}
+        toast('Tým upraven');re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+
+  // Delete team
+  document.querySelectorAll('[data-delrg]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      if(!confirm('Smazat tým a všechna jeho hodnocení?'))return;
+      try{
+        await DEL('/api/rater_groups?id='+btn.dataset.delrg);
+        ST.raterGroups=await GET('/api/rater_groups');
+        toast('Tým smazán');re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+}
+
+// ── Admin: Settings section (inline) ──────────────────────────────
+function bAdmSettings(){
+  if(!ST.admin||ST.tab!=='adm'||ST.admSection!=='settings')return;
+  on('sett-save',async()=>{
+    const msg=document.getElementById('sett-msg');
+    try{
+      await PUT('/api/settings',{
+        auth_enabled:        document.getElementById('set-auth').checked,
+        auth_twitch_enabled: document.getElementById('set-twitch').checked,
+        auth_kick_enabled:   document.getElementById('set-kick').checked,
+      });
+      ST.settings=await GET('/api/settings');
+      if(msg){msg.textContent='✓ Uloženo';msg.style.color='var(--green)';setTimeout(()=>{if(msg)msg.textContent='';},2500);}
+      toast('Nastavení uloženo');
+    }catch(e){toast('Chyba: '+e.message,false);}
+  });
+}
+
+// ── Team management modal (single team) ───────────────────────────
+function bTeam(){
+  if(!ST.teamM)return;
+  const cl=()=>{ST.teamM=false;ST.teamId=null;re();};
+  on('team-close',cl);on('team-cancel',cl);
+  on('team-bg',e=>{if(e.target.id==='team-bg')cl();});
+
+  // Add member to this team
+  on('tm-add',async()=>{
+    const login=document.getElementById('tm-login')?.value.trim().toLowerCase();
+    const provider=document.getElementById('tm-provider')?.value;
+    const role=document.getElementById('tm-role')?.value||'rater';
+    const err=document.getElementById('tm-err');
+    if(!login){err.textContent='Zadej jméno';err.style.display='block';return;}
+    try{
+      const res=await POST('/api/rater_groups?members=1',{group_id:ST.teamId,login,provider,role});
+      ST.raterGroups=await GET('/api/rater_groups');
+      toast(`${res.display_name} přidán jako ${res.role==='owner'?'owner':'rater'}`);
+      if(err)err.style.display='none';re();
+    }catch(e){err.textContent=e.message;err.style.display='block';}
+  });
+
+  // Remove member
+  document.querySelectorAll('[data-delmember]').forEach(btn=>{
+    btn.addEventListener('click',async()=>{
+      try{
+        await DEL('/api/rater_groups?member='+btn.dataset.delmember);
+        ST.raterGroups=await GET('/api/rater_groups');
+        toast('Člen odebrán');re();
+      }catch(e){toast('Chyba: '+e.message,false);}
+    });
+  });
+}
+
+function bCommunityRate(){
+  if(!ST.rateM)return;
+  const cl=()=>{ST.rateM=false;ST.rateStreamerId=null;ST.myRating=null;re();};
+  on('crate-close',cl);on('crate-cancel',cl);
+  on('crate-bg',e=>{if(e.target.id==='crate-bg')cl();});
+
+  on('crate-save',async()=>{
+    const form=document.getElementById('crf');if(!form)return;
+    const fd=new FormData(form);
+    const r={};
+    CATS.forEach(c=>{r[c.k]=+(fd.get(c.k)||0);});
+    try{
+      const payload={r,notes:fd.get('notes')||''};
+      if(ST.activeTeamId)payload.group_id=ST.activeTeamId;
+      await PUT('/api/community_ratings?streamer_id='+ST.rateStreamerId,payload);
+      // Reload community ratings (used elsewhere) and the team's ratings map
+      try{ST.communityRatings[ST.rateStreamerId]=await GET('/api/community_ratings?streamer_id='+ST.rateStreamerId);}catch(e){}
+      if(ST.activeTeamId){
+        try{ST.teamRatings=await GET('/api/community_ratings?team_ratings=1&group_id='+ST.activeTeamId);}catch(e){}
+      }
+      // Refresh admin team list so ratings_count badge stays in sync
+      if(ST.admin){
+        try{ST.raterGroups=await GET('/api/rater_groups');}catch(e){}
+      }
+      toast('Hodnocení uloženo');
+      ST.rateM=false;ST.rateStreamerId=null;ST.myRating=null;re();
+    }catch(e){toast('Chyba: '+e.message,false);}
+  });
+
+  bcrSliders();
+}
+
+function bcrSliders(){
+  CATS.forEach(c=>{
+    const i=document.getElementById('r'+c.k),v=document.getElementById('rv'+c.k);
+    if(i&&v)i.addEventListener('input',()=>{v.textContent=i.value;v.style.color=gc(+i.value,10);});
+  });
+}
+
+boot();
+</script>
+</body>
+</html>
diff --git a/public/index.html:Zone.Identifier b/public/index.html:Zone.Identifier
new file mode 100644
index 0000000..d6c1ec6
Binary files /dev/null and b/public/index.html:Zone.Identifier differ
diff --git a/schema.sql b/schema.sql
new file mode 100644
index 0000000..82406a3
--- /dev/null
+++ b/schema.sql
@@ -0,0 +1,206 @@
+-- NaughtyBulldogs Streamer Rating DB
+-- PostgreSQL schema
+
+CREATE TABLE IF NOT EXISTS streamers (
+    id          SERIAL PRIMARY KEY,
+    name        TEXT NOT NULL UNIQUE,
+    platform    TEXT NOT NULL DEFAULT 'twitch',
+    kick_name   TEXT DEFAULT '',
+    status      TEXT NOT NULL DEFAULT 'offline',
+    game        TEXT DEFAULT '',
+    title       TEXT DEFAULT '',
+    added_by    TEXT NOT NULL DEFAULT 'admin',  -- 'admin' or 'viewer'
+    submitter   TEXT DEFAULT '',               -- viewer's nickname if added_by='viewer'
+    evaluated   BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at  TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at  TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE TABLE IF NOT EXISTS ratings (
+    id          SERIAL PRIMARY KEY,
+    streamer_id INT NOT NULL REFERENCES streamers(id) ON DELETE CASCADE,
+    statistiky  SMALLINT NOT NULL DEFAULT 0 CHECK (statistiky BETWEEN 0 AND 10),
+    grafika     SMALLINT NOT NULL DEFAULT 0 CHECK (grafika BETWEEN 0 AND 10),
+    alerty      SMALLINT NOT NULL DEFAULT 0 CHECK (alerty BETWEEN 0 AND 10),
+    vychytavky  SMALLINT NOT NULL DEFAULT 0 CHECK (vychytavky BETWEEN 0 AND 10),
+    nahled      SMALLINT NOT NULL DEFAULT 0 CHECK (nahled BETWEEN 0 AND 10),
+    nastaveni   SMALLINT NOT NULL DEFAULT 0 CHECK (nastaveni BETWEEN 0 AND 10),
+    odlisnost   SMALLINT NOT NULL DEFAULT 0 CHECK (odlisnost BETWEEN 0 AND 10),
+    reward      SMALLINT NOT NULL DEFAULT 0 CHECK (reward BETWEEN 0 AND 130),
+    notes       TEXT DEFAULT '',
+    updated_at  TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (streamer_id)
+);
+
+CREATE TABLE IF NOT EXISTS users (
+    id            SERIAL PRIMARY KEY,
+    provider      TEXT NOT NULL,              -- 'twitch'
+    provider_id   TEXT NOT NULL,              -- Twitch user ID
+    login         TEXT NOT NULL,              -- username
+    display_name  TEXT NOT NULL,
+    avatar        TEXT DEFAULT '',
+    created_at    TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    last_seen     TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (provider, provider_id)
+);
+
+CREATE TABLE IF NOT EXISTS settings (
+    key   TEXT PRIMARY KEY,
+    value TEXT NOT NULL DEFAULT ''
+);
+
+-- Default settings
+INSERT INTO settings (key, value) VALUES
+    ('auth_enabled', 'true'),
+    ('auth_twitch_enabled', 'true'),
+    ('auth_kick_enabled', 'true')
+ON CONFLICT (key) DO NOTHING;
+
+CREATE TABLE IF NOT EXISTS comments (
+    id          SERIAL PRIMARY KEY,
+    streamer_id INT NOT NULL REFERENCES streamers(id) ON DELETE CASCADE,
+    user_id     INT REFERENCES users(id) ON DELETE SET NULL,
+    author      TEXT NOT NULL DEFAULT 'Anonym',
+    body        TEXT NOT NULL,
+    is_admin    BOOLEAN NOT NULL DEFAULT FALSE,
+    created_at  TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+
+CREATE INDEX IF NOT EXISTS idx_comments_streamer ON comments(streamer_id);
+
+CREATE TABLE IF NOT EXISTS moderators (
+    id         SERIAL PRIMARY KEY,
+    user_id    INT NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+    granted_by TEXT NOT NULL DEFAULT 'admin',
+    created_at TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    UNIQUE (user_id)
+);
+
+CREATE TABLE IF NOT EXISTS oauth_state (
+    state       TEXT PRIMARY KEY,
+    provider    TEXT NOT NULL,
+    verifier    TEXT,
+    created_at  TIMESTAMPTZ NOT NULL DEFAULT NOW()
+);
+-- Auto-cleanup states older than 10 minutes
+CREATE INDEX IF NOT EXISTS idx_oauth_state_created ON oauth_state(created_at);
+
+CREATE OR REPLACE FUNCTION update_updated_at()
+RETURNS TRIGGER AS $$
+BEGIN NEW.updated_at = NOW(); RETURN NEW; END;
+$$ LANGUAGE plpgsql;
+
+CREATE OR REPLACE TRIGGER trg_streamers_updated
+    BEFORE UPDATE ON streamers
+    FOR EACH ROW EXECUTE FUNCTION update_updated_at();
+
+CREATE OR REPLACE TRIGGER trg_ratings_updated
+    BEFORE UPDATE ON ratings
+    FOR EACH ROW EXECUTE FUNCTION update_updated_at();
+
+-- Seed data from CSV
+INSERT INTO streamers (name, platform, status, game, title, evaluated) VALUES
+('pigihonalejvarna', 'twitch', 'offline', '', '', false),
+('mrcarwen',         'twitch', 'offline', '', '', false),
+('bobsixkillercz',  'twitch', 'offline', '', '', false),
+('evrondisek',      'twitch', 'offline', '', '', false),
+('bigmajkycz',      'twitch', 'offline', '', '', false),
+('jsemsadlo',       'twitch', 'offline', '', '', false),
+('valkojr',         'twitch', 'offline', '', '', false),
+('gathersk',        'twitch', 'offline', '', '', false),
+('knefi_',          'twitch', 'offline', '', '', false),
+('housepartycz14',  'twitch', 'offline', '', '', false),
+('NaughtyBulldogsCZ','twitch','offline', '', '', false),
+('mistr13',         'twitch', 'offline', '', '', false),
+('annniecz',        'twitch', 'offline', '', '', false),
+('Haruhi4chan',      'twitch', 'offline', '', '', false),
+('bordaclands',     'twitch', 'offline', '', '', false),
+('theskotos',       'twitch', 'offline', '', '', false),
+('cicero_mt',       'twitch', 'offline', '', '', false),
+('tessa_terry',     'twitch', 'offline', '', '', false),
+('vtmod',           'twitch', 'offline', '', '', false),
+('unholy666cz',     'twitch', 'offline', '', '', false),
+('sh0rtyttv',       'twitch', 'offline', '', '', false),
+('2002rebelka',     'twitch', 'offline', '', '', false),
+('anetaamelie',     'twitch', 'offline', '', '', false),
+('pajaaa18',        'twitch', 'offline', '', '', false),
+('dedajede',        'twitch', 'offline', '', '', false),
+('cliffboothcz',    'twitch', 'offline', '', '', false),
+('aaleky',          'twitch', 'offline', '', '', false),
+('jarvisgamingtv',  'twitch', 'offline', '', '', false),
+('falazury',        'twitch', 'offline', '', '', false),
+('tenfila',         'twitch', 'offline', '', '', false),
+('mistrloutkar',    'twitch', 'offline', '', '', false),
+('czechpatres',     'twitch', 'offline', '', '', false),
+('barbee02',        'twitch', 'offline', '', '', false),
+('nej_gamer',       'twitch', 'offline', '', '', false),
+('d_o_n_alien',     'twitch', 'offline', '', '', false),
+('entery99',        'twitch', 'offline', '', '', false),
+('lukyss__',        'twitch', 'offline', '', '', false),
+('mumu011',         'twitch', 'offline', '', '', false),
+('jezisnazaretskyy','twitch', 'offline', '', '', false),
+('crackfang',       'twitch', 'offline', '', '', false),
+('julesteam',       'twitch', 'offline', '', '', false),
+('tommyproductions', 'twitch','offline', '', '', false),
+('vandalczz',       'twitch', 'offline', '', '', false),
+('jirilaska',       'twitch', 'offline', '', '', false),
+('xazzli',          'twitch', 'offline', '', '', false),
+('kubape_',         'twitch', 'offline', '', '', false),
+('fulopka',         'twitch', 'offline', '', '', false),
+('mentiiix',        'twitch', 'offline', '', '', false),
+('kristyyyyyyyyyyyy','twitch','offline', '', '', false),
+('honzajcz',        'twitch', 'offline', '', '', false),
+('vercrowcz',       'twitch', 'offline', '', '', false),
+('akcelcz',         'twitch', 'offline', '', '', false),
+('zeldok_',         'twitch', 'offline', '', '', false),
+('drok_alar',       'twitch', 'offline', '', '', false),
+('heimdallsvk',     'twitch', 'offline', '', '', false),
+('darkvalkyra',     'twitch', 'offline', '', '', false),
+('yakobcz',         'twitch', 'offline', '', '', false),
+('satankattv',      'twitch', 'offline', '', '', false),
+('paciinka',        'twitch', 'offline', '', '', false),
+('nanami_blue_',    'twitch', 'offline', '', '', false),
+('qwerydesign',     'twitch', 'offline', '', '', false),
+('xxmonsterkaxx',   'twitch', 'offline', '', '', false),
+('cleonatwitchi',   'twitch', 'offline', '', '', false),
+('yukiidemon35',    'twitch', 'offline', '', '', false),
+('denda_dennym',    'twitch', 'offline', '', '', false),
+('korpo86',         'twitch', 'offline', '', '', false),
+('m3rllin99',       'twitch', 'offline', '', '', false),
+('hexor_fps',       'twitch', 'offline', '', '', false),
+('polcarka1',       'twitch', 'offline', '', '', false),
+('relic3dx',        'twitch', 'offline', '', '', false),
+('poseidonpolabi',  'twitch', 'offline', '', '', false),
+('podogor',         'twitch', 'offline', '', '', false),
+('hermicze',        'twitch', 'offline', '', '', false),
+('aifumi',          'twitch', 'offline', '', '', false),
+('metl0sh',         'twitch', 'offline', '', '', false),
+('kiycu',           'twitch', 'offline', '', '', false),
+('johnydr4gon',     'twitch', 'offline', '', '', false),
+('darkmortyr',      'twitch', 'offline', '', '', false),
+('enbeast',         'twitch', 'offline', '', '', false),
+('shery_len',       'twitch', 'offline', '', '', false),
+('nejakyluke',      'twitch', 'offline', '', '', false),
+('ulnear',          'twitch', 'offline', '', '', false),
+('matyanes',        'twitch', 'offline', '', '', false),
+('realelita15',     'twitch', 'offline', '', '', false),
+('different_culture','twitch','offline', '', '', false),
+('kapitan_vojta',   'twitch', 'offline', '', '', false),
+('velkygouda',      'twitch', 'offline', '', '', false),
+('17stanley_',      'twitch', 'offline', '', '', false),
+('boudasek',        'twitch', 'offline', '', '', false),
+('pajik_002',       'twitch', 'offline', '', '', false),
+('gojirasaurr',     'twitch', 'offline', '', '', false),
+('dattmark',        'twitch', 'offline', '', '', false),
+('topkekstreaming',  'twitch','offline', '', '', false),
+('vikita0_0',       'twitch', 'offline', '', '', false),
+('tukan_cze',       'twitch', 'offline', '', '', false),
+('seniseeq_',       'twitch', 'offline', '', '', false),
+('mekaaja',         'twitch', 'offline', '', '', false),
+('therasiaquinn',   'twitch', 'offline', '', '', false),
+('moralnipodpora',  'twitch', 'offline', '', '', false),
+('yanekcze',        'twitch', 'offline', '', '', false),
+('ma_ty_x',         'twitch', 'offline', '', '', false),
+('foxprague',       'twitch', 'offline', '', '', false),
+('Aimonka',         'twitch', 'offline', '', '', false)
+ON CONFLICT (name) DO NOTHING;