From c38f15a566099bcd437d7f8cb5c10082dcffd49b Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Damir=20Raduli=C4=87?= <damir@rinet.one>
Date: Tue, 5 May 2026 02:24:30 +0200
Subject: [PATCH] =?UTF-8?q?R7+:=205x=20P0=20demo=20fixes=20=E2=80=94=20HNS?=
 =?UTF-8?q?=20direct=20link,=20avatar=20cache,=20logo=20home,=20klub?=
 =?UTF-8?q?=E2=86=92sporta=C5=A1i,=20smarter=20enrichment?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

1) HNS direct link u research_links: za sportaš s profile_url/source_url
   (npr. https://semafor.hns.family/igraci/X/...) generira [⭐DIRECT] link na vrhu liste,
   umjesto generic Google search. _research_links sada prima row dict.

2) Avatar cache buster: applyMeToHeader dodaje ?t=Date.now() na sve avatar img tagove.
   Avatar upload handler dodatno persistira novi avatar_url u localStorage.pgz_user
   tako da preživi page refresh + cross-page navigacije.

3) Logo home link: <div class='logo'> → <a href='/' class='logo'> u app.html i sport2.html.
   Klik na PGŽ SPORT logo vodi na public portal.

4) Klub → Sportaši drill-down: u klub Info tabu dodan button
   '👥 Vidi sportaše ovog kluba (N)' koji prebacuje na k-clan tab.
   Plus '🌐 Službena stranica' link kad klub ima web.

5) Smarter klub enrichment:
   - URL validacija (skip placeholder strings poput 'godisnjak_zspgz_2025')
   - Domain candidate guesser (slug → 16 candidate URLs s common HR TLD-ovima i sport prefix-ima)
   - Parallel HEAD probe (8 threads, 10s budget) — first 200 + name token match wins
   - Subpage scrape (/kontakt, /uprava, /o-nama, /o-klubu, /predsjednik) za richer evidence
   - HNK Orijent (id 3766) test: pogađa https://www.orijent.hr/, predlaže web+email+telefon+opis

E2E verified:
- 9/9 sidebar URL-ova → 200
- /users/me/gdpr-export → 200 (28KB JSON)
- /users/me/request-deletion → 200 (DB row pgz_sport.gdpr_erasure_requests)
- /enrich/klub/3766 → 4 proposed fields (web, email, telefon, opis)
- HNS sportaš research_links: ⭐ HNS profil DIRECT link na vrhu

Backend: routers/enrich_router.py
Frontend: static/app.html, static/sport2.html
Backups: _backups/sprint_1777940670/

Tag: R7-demo-ready
---
 _backups/sprint_1777940323/app.html         | 1918 ++++++++++++
 _backups/sprint_1777940323/enrich_router.py | 1690 +++++++++++
 _backups/sprint_1777940323/sport2.html      | 2950 +++++++++++++++++++
 routers/enrich_router.py                    |  141 +-
 static/app.html                             |   16 +-
 static/sport2.html                          |    8 +-
 6 files changed, 6715 insertions(+), 8 deletions(-)
 create mode 100644 _backups/sprint_1777940323/app.html
 create mode 100644 _backups/sprint_1777940323/enrich_router.py
 create mode 100644 _backups/sprint_1777940323/sport2.html
diff --git a/_backups/sprint_1777940323/app.html b/_backups/sprint_1777940323/app.html
new file mode 100644
index 0000000..c94f455
--- /dev/null
+++ b/_backups/sprint_1777940323/app.html
@@ -0,0 +1,1918 @@
+<!DOCTYPE html>
+<html lang="hr">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width,initial-scale=1.0">
+<title>PGŽ SPORT — Operativna aplikacija</title>
+<!--
+  app.html v1.0 — Round 3 M4
+  PGŽ Sport operational app — 4 role dashboards (PGŽ admin, savez admin, klub admin, sportaš)
+  Author: dradulic@outlook.com / damir@rinet.one — 2026-05-05
+  Same CSS variables / theme as sport2.html. Sidebar is collapsible (M3 logic).
+-->
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap" rel="stylesheet">
+<script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/4.4.1/chart.umd.min.js"></script>
+<style>
+:root{
+  --pgz-blue:#003087; --pgz-blue2:#004CC4; --pgz-gold:#F4C430;
+  --bg0:#08090e; --bg1:#0d1021; --bg2:#111628; --bg3:#161d35; --bg4:#1c2542;
+  --rim:#1e2a50; --rim2:#283560;
+  --t0:#fff; --t1:#e2e6f0; --t2:#8a95b4; --t4:#4e5a7a;
+  --green:#00e88f; --red:#ff2d55; --amber:#f59e0b; --cyan:#00c8e8;
+  --font:'Inter',sans-serif; --mono:'JetBrains Mono',monospace;
+}
+*{box-sizing:border-box;margin:0;padding:0}
+html,body{height:100%}
+body{font-family:var(--font);background:var(--bg0);color:var(--t1);font-size:13px;overflow-x:hidden}
+a{color:var(--cyan);text-decoration:none}
+a:hover{color:var(--pgz-gold)}
+button,input,select,textarea{font-family:inherit;font-size:inherit;outline:none}
+::-webkit-scrollbar{width:8px;height:8px}
+::-webkit-scrollbar-track{background:var(--bg1)}
+::-webkit-scrollbar-thumb{background:var(--rim2);border-radius:4px}
+::-webkit-scrollbar-thumb:hover{background:var(--pgz-blue2)}
+
+/* ============ LAYOUT ============ */
+.app{display:flex;min-height:100vh}
+/* Native .sb hidden — shared sidebar (/static/shared/sidebar.*) handles sectioned menu */
+.sb{display:none}
+.sb-h{padding:18px 18px 14px;border-bottom:1px solid var(--rim);position:relative}
+.sb-h .logo{font-weight:800;font-size:14px;color:var(--t0);letter-spacing:.5px;white-space:nowrap;overflow:hidden}
+.sb-h .logo .g{color:var(--pgz-gold)}
+.sb-h .sub{font-size:10px;color:var(--t2);margin-top:4px;text-transform:uppercase;letter-spacing:1px;white-space:nowrap;overflow:hidden}
+.sb-toggle{position:absolute;top:14px;right:8px;width:22px;height:22px;display:flex;align-items:center;justify-content:center;cursor:pointer;color:var(--t2);background:var(--bg2);border:1px solid var(--rim);border-radius:4px;font-size:14px;font-weight:700;transition:all .15s;user-select:none}
+.sb-toggle:hover{background:var(--bg3);color:var(--pgz-gold);border-color:var(--pgz-gold)}
+.sb-section-label{padding:10px 14px 4px;font-size:9.5px;color:var(--t4);text-transform:uppercase;letter-spacing:1.2px;font-weight:700;white-space:nowrap;overflow:hidden}
+.sb-nav{flex:1;padding:8px 8px;overflow-y:auto;overflow-x:hidden}
+.nav-i{padding:9px 12px;border-radius:6px;color:var(--t2);cursor:pointer;display:flex;align-items:center;gap:10px;font-size:12.5px;margin-bottom:2px;transition:background .15s,color .15s;white-space:nowrap;position:relative}
+.nav-i:hover{background:var(--bg2);color:var(--t1)}
+.nav-i.active{background:linear-gradient(90deg,var(--pgz-blue) 0%,var(--pgz-blue2) 100%);color:#fff;font-weight:600}
+.nav-i .ic{width:18px;text-align:center;font-size:14px;flex-shrink:0}
+.nav-i .lbl{overflow:hidden;text-overflow:ellipsis}
+.nav-i .badge{margin-left:auto;background:var(--red);color:#fff;font-size:9px;font-weight:700;padding:1px 6px;border-radius:8px}
+.sb-foot{padding:10px 12px;border-top:1px solid var(--rim);display:flex;align-items:center;gap:8px;white-space:nowrap;overflow:hidden}
+.sb-foot .av{width:30px;height:30px;border-radius:50%;background:linear-gradient(135deg,var(--pgz-blue),var(--pgz-gold));color:#fff;font-weight:800;display:flex;align-items:center;justify-content:center;font-size:11px;flex-shrink:0}
+.sb-foot .ui{flex:1;min-width:0;overflow:hidden}
+.sb-foot .un{font-size:11.5px;color:var(--t1);font-weight:600;line-height:1.2;overflow:hidden;text-overflow:ellipsis}
+.sb-foot .ur{font-size:9.5px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px;line-height:1.2;overflow:hidden;text-overflow:ellipsis}
+.sb-foot .lo{cursor:pointer;color:var(--t4);font-size:14px;padding:6px 8px;border-radius:5px;transition:all .15s;flex-shrink:0}
+.sb-foot .lo:hover{background:rgba(255,45,85,.15);color:var(--red)}
+
+/* Collapsed sidebar */
+.sb.collapsed{width:58px}
+.sb.collapsed .sb-h{padding:18px 8px 14px;text-align:center}
+.sb.collapsed .sb-h .logo{font-size:0}
+.sb.collapsed .sb-h .logo::before{content:"PG";font-size:13px;color:var(--pgz-gold);font-weight:800}
+.sb.collapsed .sb-h .sub,.sb.collapsed .sb-section-label{display:none}
+.sb.collapsed .sb-toggle{position:static;margin:6px auto 0;display:flex}
+.sb.collapsed .nav-i{justify-content:center;padding:10px 6px}
+.sb.collapsed .nav-i .lbl,.sb.collapsed .nav-i .badge{display:none}
+.sb.collapsed .nav-i:hover::after{content:attr(data-label);position:absolute;left:58px;top:50%;transform:translateY(-50%);background:var(--bg3);color:var(--t0);padding:5px 10px;border-radius:4px;font-size:11.5px;white-space:nowrap;border:1px solid var(--rim);z-index:50;font-weight:600;pointer-events:none;box-shadow:2px 2px 8px rgba(0,0,0,.4)}
+.sb.collapsed .sb-foot{padding:8px;justify-content:center}
+.sb.collapsed .sb-foot .ui{display:none}
+.sb.collapsed .sb-foot .lo{display:none}
+.sb.collapsed .nav-sep{font-size:0;padding:6px 0;text-align:center;border-top:1px dashed var(--rim);margin:6px 8px 4px}
+.sb.collapsed .nav-ext span:last-child{display:none}
+.nav-ext{color:var(--cyan)}
+.nav-ext:hover{color:var(--pgz-gold);background:var(--bg2)}
+.nav-ext.active{background:linear-gradient(90deg,var(--pgz-blue) 0%,var(--pgz-blue2) 100%);color:#fff}
+
+.main{margin-left:0;flex:1;min-width:0;transition:margin-left .22s ease}
+.sb.collapsed ~ .main{margin-left:58px}
+.tb{background:var(--bg1);border-bottom:1px solid var(--rim);padding:12px 22px;display:flex;align-items:center;justify-content:space-between;position:sticky;top:0;z-index:5;gap:12px}
+.tb-t{font-size:15px;font-weight:700;color:var(--t0)}
+.tb-s{font-size:11px;color:var(--t2)}
+.tb-r{display:flex;align-items:center;gap:14px}
+.role-switch{display:inline-flex;background:var(--bg2);border:1px solid var(--rim);border-radius:6px;overflow:hidden}
+.role-switch button{background:transparent;border:0;padding:6px 12px;color:var(--t2);font-size:11px;font-weight:600;cursor:pointer;letter-spacing:.3px}
+.role-switch button:hover{background:var(--bg3);color:var(--t1)}
+.role-switch button.active{background:linear-gradient(135deg,var(--pgz-blue),var(--pgz-blue2));color:#fff}
+.tb-user{display:flex;align-items:center;gap:8px;font-size:12px;color:var(--t1);cursor:pointer;padding:4px 8px;border-radius:6px;transition:all .15s}
+.tb-user:hover{background:var(--bg2)}
+.tb-user .av{width:32px;height:32px;border-radius:50%;background:linear-gradient(135deg,var(--pgz-blue),var(--pgz-gold));color:#fff;font-weight:800;display:flex;align-items:center;justify-content:center;font-size:12px;overflow:hidden;flex-shrink:0;border:2px solid transparent}
+.tb-user:hover .av{border-color:var(--pgz-gold)}
+.tb-user .av img{width:100%;height:100%;object-fit:cover}
+.tb-user .role-badge{font-size:9px;background:var(--pgz-gold);color:var(--bg0);padding:1px 5px;border-radius:3px;font-weight:700;text-transform:uppercase;letter-spacing:.3px;margin-left:4px}
+.tb-user .tenant-name{font-size:10px;color:var(--t4)}
+
+/* Drill-down right panel (shared) */
+#dpanel{position:fixed;top:0;right:-720px;width:680px;max-width:96vw;height:100vh;background:var(--bg1);border-left:1px solid var(--rim);z-index:200;transition:right .25s ease;display:flex;flex-direction:column;box-shadow:-8px 0 30px rgba(0,0,0,.5)}
+#dpanel.open{right:0}
+#dpanel-hdr{padding:14px 18px;border-bottom:1px solid var(--rim);display:flex;align-items:center;justify-content:space-between;flex-shrink:0;background:var(--bg2);gap:10px}
+#dpanel-t{font-size:14px;font-weight:700;color:var(--t0)}
+#dpanel-x{cursor:pointer;font-size:22px;color:var(--t4);width:30px;height:30px;display:flex;align-items:center;justify-content:center;border-radius:5px;transition:all .15s}
+#dpanel-x:hover{background:var(--bg3);color:var(--red)}
+#dpanel-body{flex:1;overflow-y:auto;padding:16px}
+#dpanel-overlay{display:none;position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:199;backdrop-filter:blur(2px)}
+#dpanel-overlay.open{display:block}
+
+/* Profile page styles */
+.profile-page{max-width:980px;margin:0 auto}
+.profile-banner{display:flex;align-items:center;gap:18px;padding:22px;background:linear-gradient(135deg,var(--pgz-blue) 0%,var(--bg2) 60%);border:1px solid var(--rim);border-radius:10px;margin-bottom:16px;position:relative;overflow:hidden}
+.profile-banner::before{content:"";position:absolute;top:0;right:0;width:200px;height:100%;background:radial-gradient(circle at 100% 0%,rgba(244,196,48,.18) 0%,transparent 60%);pointer-events:none}
+.profile-avatar-big{width:96px;height:96px;border-radius:50%;background:linear-gradient(135deg,var(--pgz-blue2),var(--pgz-gold));color:#fff;font-weight:800;font-size:32px;display:flex;align-items:center;justify-content:center;flex-shrink:0;border:3px solid var(--pgz-gold);overflow:hidden;position:relative;cursor:pointer}
+.profile-avatar-big img{width:100%;height:100%;object-fit:cover}
+.profile-avatar-big .upload-hint{position:absolute;inset:0;background:rgba(0,0,0,.55);color:#fff;font-size:10.5px;font-weight:700;display:flex;align-items:center;justify-content:center;text-align:center;padding:6px;opacity:0;transition:opacity .15s}
+.profile-avatar-big:hover .upload-hint{opacity:1}
+.profile-banner-info h1{font-size:22px;color:#fff;margin-bottom:4px;font-weight:800}
+.profile-banner-info .role-line{font-size:11.5px;color:var(--t1);margin-bottom:6px}
+.profile-banner-info .tags-row .tag{margin-right:4px}
+.profile-banner-actions{margin-left:auto;display:flex;gap:8px;flex-shrink:0;z-index:1}
+
+.profile-section{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:16px;margin-bottom:14px}
+.profile-section h3{font-size:12px;font-weight:700;color:var(--pgz-gold);text-transform:uppercase;letter-spacing:1px;margin-bottom:12px;padding-bottom:8px;border-bottom:1px solid var(--rim);display:flex;align-items:center;justify-content:space-between}
+.profile-section .edit-link{font-size:11px;color:var(--cyan);cursor:pointer;text-transform:none;letter-spacing:0;font-weight:600}
+.profile-section .edit-link:hover{color:var(--pgz-gold)}
+.profile-row{display:grid;grid-template-columns:160px 1fr auto;gap:8px 14px;padding:8px 0;border-bottom:1px dashed var(--rim);align-items:center}
+.profile-row:last-child{border:0}
+.profile-row .k{color:var(--t2);font-size:11.5px;font-weight:600}
+.profile-row .v{color:var(--t1);font-size:12.5px;word-break:break-word}
+.profile-row .v.empty{color:var(--t4);font-style:italic}
+.profile-row input,.profile-row select{background:var(--bg3);border:1px solid var(--rim);border-radius:5px;padding:6px 10px;color:var(--t1);font-size:12.5px;width:100%}
+.profile-row .a{display:flex;gap:4px}
+.profile-row .a button{padding:4px 8px;font-size:11px}
+
+.tag-2fa-on{background:var(--green);color:var(--bg0);padding:2px 7px;border-radius:3px;font-size:10px;font-weight:700;text-transform:uppercase}
+.tag-2fa-off{background:var(--rim2);color:var(--t1);padding:2px 7px;border-radius:3px;font-size:10px;font-weight:700;text-transform:uppercase}
+.tag-gdpr{background:var(--cyan);color:var(--bg0);padding:2px 7px;border-radius:3px;font-size:10px;font-weight:700;text-transform:uppercase}
+.content{padding:22px}
+.section{display:none}
+.section.active{display:block}
+
+/* ============ COMPONENTS (shared with sport2.html) ============ */
+.kpi-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:14px;margin-bottom:22px}
+.kpi{background:linear-gradient(135deg,var(--bg2) 0%,var(--bg1) 100%);border:1px solid var(--rim);border-radius:8px;padding:14px 16px;position:relative;overflow:hidden;transition:all .18s}
+.kpi.click{cursor:pointer}
+.kpi.click:hover{border-color:var(--pgz-gold);transform:translateY(-1px);box-shadow:0 4px 12px rgba(0,0,0,.4)}
+.kpi::before{content:"";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--pgz-gold)}
+.kpi.b::before{background:var(--pgz-blue2)}
+.kpi.g::before{background:var(--green)}
+.kpi.r::before{background:var(--red)}
+.kpi.a::before{background:var(--amber)}
+.kpi.c::before{background:var(--cyan)}
+.kpi-l{font-size:10.5px;color:var(--t2);text-transform:uppercase;letter-spacing:1px;font-weight:600}
+.kpi-v{font-size:24px;font-weight:800;color:var(--t0);margin-top:4px;font-family:var(--mono)}
+.kpi-s{font-size:10px;color:var(--t4);margin-top:2px}
+.kpi-trend{font-size:10px;font-weight:700;margin-top:6px;display:inline-block;padding:1px 6px;border-radius:3px}
+.kpi-trend.up{background:rgba(0,232,143,.15);color:var(--green)}
+.kpi-trend.down{background:rgba(255,45,85,.15);color:var(--red)}
+
+.card{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:14px;margin-bottom:14px;transition:all .18s}
+.card.click-card{cursor:pointer}
+.card.click-card:hover{border-color:var(--pgz-gold)}
+.card-h{display:flex;align-items:center;justify-content:space-between;margin-bottom:10px;padding-bottom:8px;border-bottom:1px solid var(--rim);gap:10px}
+.card-t{font-weight:700;color:var(--t0);font-size:13px}
+.card-actions{display:flex;gap:6px}
+
+.row-2{display:grid;grid-template-columns:1fr 1fr;gap:14px}
+.row-3{display:grid;grid-template-columns:2fr 1fr;gap:14px}
+@media (max-width:900px){.row-2,.row-3{grid-template-columns:1fr}}
+
+.btn{background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:7px 12px;color:var(--t1);font-size:12px;cursor:pointer;font-weight:600;transition:all .15s}
+.btn:hover{background:var(--bg3);border-color:var(--rim2)}
+.btn.primary{background:linear-gradient(135deg,var(--pgz-blue),var(--pgz-blue2));border-color:transparent;color:#fff}
+.btn.primary:hover{filter:brightness(1.1)}
+.btn.gold{background:var(--pgz-gold);color:var(--bg0);border-color:transparent}
+.btn.gold:hover{filter:brightness(1.1)}
+.btn.sm{padding:4px 9px;font-size:11px}
+
+table{width:100%;border-collapse:collapse;font-size:12px}
+table th{background:var(--bg3);color:var(--t2);text-transform:uppercase;font-size:10px;letter-spacing:.5px;padding:8px 10px;text-align:left;border-bottom:1px solid var(--rim);font-weight:700}
+table td{padding:8px 10px;border-bottom:1px solid var(--rim);color:var(--t1)}
+table tbody tr{transition:background .15s}
+table tbody tr:hover{background:var(--bg3)}
+.num{font-family:var(--mono);text-align:right}
+
+.tag{display:inline-block;padding:2px 7px;font-size:10px;border-radius:3px;background:var(--bg4);color:var(--t1);font-weight:600;text-transform:uppercase;letter-spacing:.5px;margin-right:3px}
+.tag.b{background:var(--pgz-blue);color:#fff}
+.tag.gd{background:var(--pgz-gold);color:var(--bg0)}
+.tag.gr{background:var(--green);color:var(--bg0)}
+.tag.rd{background:var(--red);color:#fff}
+.tag.am{background:var(--amber);color:var(--bg0)}
+.tag.cy{background:var(--cyan);color:var(--bg0)}
+
+.audit-i{display:flex;gap:10px;padding:8px 10px;border-bottom:1px solid var(--rim);font-size:11.5px;align-items:flex-start}
+.audit-i:last-child{border:0}
+.audit-i .ts{color:var(--t4);font-family:var(--mono);font-size:10.5px;flex-shrink:0;width:90px}
+.audit-i .who{color:var(--pgz-gold);font-weight:600;flex-shrink:0;width:120px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+.audit-i .what{color:var(--t1);flex:1;min-width:0}
+.audit-i .what b{color:var(--cyan)}
+
+.req-i{padding:10px 12px;border:1px solid var(--rim);border-radius:6px;margin-bottom:8px;background:var(--bg2);transition:all .15s;cursor:pointer}
+.req-i:hover{border-color:var(--pgz-gold)}
+.req-i .rh{display:flex;justify-content:space-between;align-items:center;margin-bottom:4px}
+.req-i .rt{font-weight:700;color:var(--t0);font-size:12.5px}
+.req-i .rsum{font-size:11px;color:var(--t2);margin-top:2px;line-height:1.4}
+.req-i .rmeta{display:flex;gap:10px;margin-top:6px;font-size:10.5px;color:var(--t4)}
+.req-i .rmeta b{color:var(--pgz-gold);font-weight:700}
+
+.member-i{display:flex;align-items:center;gap:10px;padding:8px 10px;border-bottom:1px solid var(--rim)}
+.member-i:last-child{border:0}
+.member-i .av{width:32px;height:32px;border-radius:50%;background:linear-gradient(135deg,var(--bg3),var(--bg4));color:var(--t0);font-weight:800;display:flex;align-items:center;justify-content:center;font-size:11px;flex-shrink:0}
+.member-i .mn{font-weight:700;color:var(--t0);font-size:12px}
+.member-i .mp{font-size:10.5px;color:var(--t2)}
+.member-i .mright{margin-left:auto;text-align:right}
+
+.cal-grid{display:grid;grid-template-columns:repeat(7,1fr);gap:4px}
+.cal-h{font-size:10px;color:var(--t4);text-transform:uppercase;text-align:center;padding:4px 0;font-weight:700;letter-spacing:.5px}
+.cal-d{aspect-ratio:1;background:var(--bg3);border:1px solid var(--rim);border-radius:4px;padding:4px;font-size:10.5px;color:var(--t2);position:relative;cursor:pointer}
+.cal-d:hover{border-color:var(--pgz-gold)}
+.cal-d.t{border-color:var(--pgz-gold);background:var(--bg4)}
+.cal-d.has-event::after{content:"";position:absolute;bottom:3px;left:50%;transform:translateX(-50%);width:5px;height:5px;background:var(--pgz-gold);border-radius:50%}
+
+.profile-card{display:grid;grid-template-columns:120px 1fr;gap:18px;padding:14px}
+.profile-photo{width:120px;height:140px;border-radius:8px;background:linear-gradient(135deg,var(--bg3),var(--bg4));display:flex;align-items:center;justify-content:center;font-size:48px;color:var(--t4);font-weight:800;overflow:hidden;cursor:pointer;border:2px solid var(--rim);transition:all .2s}
+.profile-photo:hover{border-color:var(--pgz-gold)}
+.profile-info h2{font-size:20px;color:var(--t0);margin-bottom:4px}
+.profile-info .sub{font-size:12px;color:var(--t2);margin-bottom:8px}
+.profile-info .tags-row{margin-bottom:10px}
+
+.kv{display:grid;grid-template-columns:160px 1fr;gap:6px 12px;font-size:12px}
+.kv .k{color:var(--t2);font-weight:600}
+.kv .v{color:var(--t1);word-break:break-word}
+
+.alert-card{padding:10px 12px;border-left:3px solid var(--amber);background:var(--bg2);border-radius:5px;margin-bottom:8px}
+.alert-card.crit{border-color:var(--red)}
+.alert-card.ok{border-color:var(--green)}
+.alert-card .at{font-weight:700;font-size:12px;color:var(--t0)}
+.alert-card .ad{font-size:11px;color:var(--t2);margin-top:3px}
+
+.empty{text-align:center;padding:30px;color:var(--t4);font-size:12px;font-style:italic}
+.loading{padding:24px;text-align:center;color:var(--t2);font-size:12px}
+.loading::before{content:"";display:inline-block;width:12px;height:12px;border:2px solid var(--rim);border-top-color:var(--pgz-gold);border-radius:50%;animation:spin .8s linear infinite;margin-right:8px;vertical-align:middle}
+@keyframes spin{to{transform:rotate(360deg)}}
+
+.chart-box{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:14px;height:280px}
+.chart-box canvas{max-height:240px}
+
+.demo-banner{background:linear-gradient(90deg,rgba(244,196,48,.15),rgba(0,76,196,.1));border:1px solid var(--pgz-gold);border-radius:6px;padding:10px 14px;margin-bottom:14px;font-size:11.5px;color:var(--t1);display:flex;align-items:center;gap:10px}
+.demo-banner b{color:var(--pgz-gold)}
+
+@media (max-width:768px){
+  .sb{transform:translateX(-100%);transition:transform .25s}
+  .sb.open{transform:translateX(0)}
+  .main,.sb.collapsed ~ .main{margin-left:0}
+  .role-switch{display:none}
+}
+</style>
+<link rel="stylesheet" href="/static/shared/sidebar.css">
+<script src="/static/shared/sidebar.js" defer data-active="profil"></script>
+</head>
+<body>
+
+<div class="app">
+  <aside class="sb" id="sb">
+    <div class="sb-h">
+      <div class="logo">PGŽ <span class="g">SPORT</span></div>
+      <div class="sub" id="role-sub">Operativna aplikacija</div>
+      <div class="sb-toggle" id="sb-toggle" onclick="toggleSidebar()" title="Skupi/raširi sidebar">≡</div>
+    </div>
+    <div class="sb-section-label" id="role-section-label">Navigacija</div>
+    <nav class="sb-nav" id="nav"></nav>
+    <div class="sb-foot" id="sb-foot">
+      <div class="av" id="sf-av">DR</div>
+      <div class="ui">
+        <div class="un" id="sf-name">Damir Radulić</div>
+        <div class="ur" id="sf-role">PGŽ admin</div>
+      </div>
+      <div class="lo" onclick="logout()" title="Odjava">⎋</div>
+    </div>
+  </aside>
+
+  <main class="main">
+    <div class="tb">
+      <div>
+        <div class="tb-t" id="tb-t">Dashboard</div>
+        <div class="tb-s" id="tb-s">Pregled stanja</div>
+      </div>
+      <div class="tb-r">
+        <div class="role-switch" id="role-switch"></div>
+        <div class="tb-user" id="tb-user" onclick="navTo('profil')" title="Otvori moj profil">
+          <div class="av" id="user-av">DR</div>
+          <div>
+            <div style="font-weight:700" id="user-name">Damir Radulić<span class="role-badge" id="user-role-badge">pgz admin</span></div>
+            <div class="tenant-name" id="user-tenant">Primorsko-goranska županija</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <div class="content" id="content">
+      <div class="loading">Učitavanje...</div>
+    </div>
+  </main>
+</div>
+
+<!-- Drill-down right panel -->
+<div id="dpanel-overlay" onclick="closeDetail()"></div>
+<aside id="dpanel" aria-hidden="true">
+  <div id="dpanel-hdr">
+    <div id="dpanel-t">Detalji</div>
+    <div id="dpanel-x" onclick="closeDetail()" title="Zatvori (Esc)">×</div>
+  </div>
+  <div id="dpanel-body"><div class="loading">Učitavanje...</div></div>
+</aside>
+
+<input type="file" id="avatar-input" accept="image/jpeg,image/png,image/webp" style="display:none" onchange="onAvatarPick(this)">
+
+<script>
+//=========== UTIL ===========
+const API = '/sport/api';
+const $ = s => document.querySelector(s);
+const $$ = s => document.querySelectorAll(s);
+const esc = s => String(s==null?'':s).replace(/[&<>"']/g, m => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[m]));
+const fmt = n => (n==null?'—':Number(n).toLocaleString('hr-HR'));
+const fmtEur = n => (n==null?'—':Number(n).toLocaleString('hr-HR',{maximumFractionDigits:0})+' €');
+
+async function api(path){
+  try { const r = await fetch(API+path); if(!r.ok) return null; return await r.json(); }
+  catch(e){ return null; }
+}
+
+// JWT-aware fetch wrapper
+function getToken(){ 
+  try { 
+    return localStorage.getItem('pgz_access') 
+        || sessionStorage.getItem('pgz_access') 
+        || localStorage.getItem('jwt') 
+        || localStorage.getItem('access_token') 
+        || ''; 
+  } catch(e){ return ''; } 
+}
+async function apiAuth(path, opts){
+  opts = opts || {};
+  const h = Object.assign({}, opts.headers || {});
+  const tok = getToken(); if(tok) h['Authorization'] = 'Bearer '+tok;
+  if(opts.body && !(opts.body instanceof FormData) && !h['Content-Type']) h['Content-Type'] = 'application/json';
+  try {
+    const r = await fetch(API+path, Object.assign({}, opts, {headers:h}));
+    if(r.status === 401){ return {__unauthorized:true, status:401}; }
+    if(!r.ok) return {__error:true, status:r.status};
+    if(r.headers.get('content-type')?.includes('application/json')) return await r.json();
+    return {__ok:true};
+  } catch(e){ return {__error:true, msg:String(e)}; }
+}
+const initials = (n) => { if(!n) return '?'; const p=String(n).trim().split(/\s+/); return ((p[0]||'')[0]||'')+((p[1]||'')[0]||'').toUpperCase(); };
+
+//=========== ROLES ===========
+const ROLES = {
+  pgz:    {name:'PGŽ admin',  user:'Damir Radulić',     av:'DR', sub:'Odjel za sport · PGŽ'},
+  savez:  {name:'Savez admin', user:'Marija Kovač',      av:'MK', sub:'Atletski savez PGŽ'},
+  klub:   {name:'Klub admin',  user:'Igor Tomić',        av:'IT', sub:'AK Kvarner Rijeka'},
+  sportas:{name:'Sportaš',     user:'Luka Horvat',       av:'LH', sub:'AK Kvarner Rijeka · Trčanje 800m'},
+};
+
+const NAV_BY_ROLE = {
+  pgz: [
+    {id:'profil',     ic:'\u{1F464}', label:'Moj profil'},
+    {id:'dashboard',  ic:'\u{1F4CA}', label:'Dashboard'},
+    {id:'korisnici',  ic:'\u{1F465}', label:'Korisnici'},
+    {id:'savezi',     ic:'\u{1F3C5}', label:'Savezi'},
+    {id:'klubovi',    ic:'⬢',        label:'Klubovi'},
+    {id:'sportasi',   ic:'\u{1F464}', label:'Sportaši'},
+    {id:'financije',  ic:'€',         label:'Financije'},
+    {id:'racuni',     ic:'\u{1F9FE}', label:'Računi (OCR)'},
+    {id:'crm',        ic:'\u{1F4DD}', label:'CRM'},
+    {id:'kalendar',   ic:'\u{1F4C5}', label:'Kalendar'},
+    {id:'audit',      ic:'\u{1F50D}', label:'Audit log'},
+    {id:'forenzika',  ic:'⚠',        label:'Forenzika', badge:11},
+  ],
+  savez: [
+    {id:'profil',    ic:'\u{1F464}', label:'Moj profil'},
+    {id:'dashboard', ic:'\u{1F4CA}', label:'Dashboard'},
+    {id:'klubovi',   ic:'⬢',        label:'Naši klubovi'},
+    {id:'sportasi',  ic:'\u{1F464}', label:'Naši sportaši'},
+    {id:'zahtjevi',  ic:'\u{1F4D1}', label:'Zahtjevi PGŽ', badge:3},
+    {id:'kalendar',  ic:'\u{1F4C5}', label:'Kalendar'},
+    {id:'lijecnicki',ic:'⚕',         label:'Liječnički'},
+    {id:'racuni',    ic:'\u{1F9FE}', label:'Računi (OCR)'},
+  ],
+  klub: [
+    {id:'profil',    ic:'\u{1F464}', label:'Moj profil'},
+    {id:'dashboard', ic:'\u{1F4CA}', label:'Dashboard'},
+    {id:'clanovi',   ic:'\u{1F465}', label:'Članovi'},
+    {id:'clanarine', ic:'€',         label:'Članarine'},
+    {id:'lijecnicki',ic:'⚕',         label:'Liječnički'},
+    {id:'dokumenti', ic:'\u{1F4C4}', label:'Dokumenti'},
+    {id:'kalendar',  ic:'\u{1F4C5}', label:'Kalendar'},
+    {id:'manifestacije', ic:'\u{1F4C5}', label:'Manifestacije'},
+    {id:'racuni',    ic:'\u{1F9FE}', label:'Računi (OCR)'},
+  ],
+  sportas: [
+    {id:'profil',    ic:'\u{1F464}', label:'Moj profil'},
+    {id:'dashboard', ic:'\u{1F4CA}', label:'Dashboard'},
+    {id:'clanarina', ic:'€',         label:'Članarina'},
+    {id:'lijecnicki',ic:'⚕',         label:'Liječnički'},
+    {id:'dokumenti', ic:'\u{1F4C4}', label:'Moji dokumenti'},
+    {id:'obrasci',   ic:'\u{1F4DD}', label:'Obrasci', badge:1},
+    {id:'kalendar',  ic:'\u{1F4C5}', label:'Kalendar'},
+    {id:'manifestacije', ic:'\u{1F4C5}', label:'Manifestacije'},
+  ],
+};
+
+const _state = {role:'pgz', section:'dashboard', me:null, demoMode:true};
+
+// Map server user_type -> UI role bucket (for nav layout)
+function userTypeToRole(t){
+  const m = {
+    super_admin:'pgz', pgz_admin:'pgz', pgz_viewer:'pgz',
+    savez_admin:'savez',
+    klub_admin:'klub', klub_trener:'klub',
+    klub_clan:'sportas', sportas:'sportas', viewer:'pgz'
+  };
+  return m[t] || 'pgz';
+}
+
+// Try real auth first; fall back to demo mode
+async function loadCurrentUser(){
+  if(!getToken()) return null;
+  const me = await apiAuth('/auth/me');
+  if(!me || me.__unauthorized || me.__error){
+    if(me && me.__unauthorized){ try { localStorage.removeItem('jwt'); } catch(e){} }
+    return null;
+  }
+  _state.me = me;
+  _state.demoMode = false;
+  _state.role = userTypeToRole(me.user_type);
+  return me;
+}
+function applyMeToHeader(){
+  const me = _state.me; if(!me) return;
+  const name = me.full_name || ((me.ime||'')+' '+(me.prezime||'')).trim() || me.email || '—';
+  const tenant = me.tenant_name || (me.tenant_type ? me.tenant_type.toUpperCase() : '');
+  const roleLabel = (ROLES[_state.role]||{}).name || me.user_type || 'Korisnik';
+  // Topbar
+  $('#user-name').innerHTML = esc(name) + `<span class="role-badge" id="user-role-badge">${esc(me.user_type||'')}</span>`;
+  $('#user-tenant').textContent = tenant;
+  $('#user-role-label')?.replaceChildren(document.createTextNode(roleLabel));
+  // Avatar topbar
+  if(me.avatar_url){
+    $('#user-av').innerHTML = `<img src="${esc(me.avatar_url)}" alt="">`;
+  } else if(me.google_picture){
+    $('#user-av').innerHTML = `<img src="${esc(me.google_picture)}" alt="">`;
+  } else {
+    $('#user-av').textContent = initials(name);
+  }
+  // Sidebar footer
+  if($('#sf-name')) $('#sf-name').textContent = name;
+  if($('#sf-role')) $('#sf-role').textContent = roleLabel;
+  if($('#sf-av')){
+    if(me.avatar_url) $('#sf-av').innerHTML = `<img src="${esc(me.avatar_url)}" alt="" style="width:100%;height:100%;object-fit:cover;border-radius:50%">`;
+    else if(me.google_picture) $('#sf-av').innerHTML = `<img src="${esc(me.google_picture)}" alt="" style="width:100%;height:100%;object-fit:cover;border-radius:50%">`;
+    else $('#sf-av').textContent = initials(name);
+  }
+  if($('#role-sub')) $('#role-sub').textContent = tenant || roleLabel;
+}
+
+//=========== DRILL-DOWN PANEL ===========
+function openDetail(title, html){
+  $('#dpanel-t').textContent = title || 'Detalji';
+  $('#dpanel-body').innerHTML = html || '<div class="empty">Nema sadržaja.</div>';
+  $('#dpanel').classList.add('open');
+  $('#dpanel-overlay').classList.add('open');
+  $('#dpanel').setAttribute('aria-hidden','false');
+}
+function closeDetail(){
+  $('#dpanel').classList.remove('open');
+  $('#dpanel-overlay').classList.remove('open');
+  $('#dpanel').setAttribute('aria-hidden','true');
+}
+document.addEventListener('keydown', e => { if(e.key==='Escape') closeDetail(); });
+async function showDetail(kind, id, title){
+  openDetail(title || kind, '<div class="loading">Učitavam detalje...</div>');
+  let body = '';
+  try {
+    if(kind === 'savez'){
+      const d = await api('/savezi/'+id);
+      if(!d){ body = '<div class="empty">Savez nije pronađen.</div>'; }
+      else {
+        body = `
+          <h2 style="font-size:18px;color:var(--t0);margin-bottom:6px">${esc(d.naziv||'—')}</h2>
+          <div style="font-size:11px;color:var(--t2);margin-bottom:14px">${esc(d.skraceni_naziv||'')} · ${esc(d.oib||'')}</div>
+          <div class="kv">
+            <div class="k">Predsjednik</div><div class="v">${esc(d.predsjednik||'—')}</div>
+            <div class="k">Tajnik</div><div class="v">${esc(d.tajnik||'—')}</div>
+            <div class="k">Email</div><div class="v">${esc(d.email||'—')}</div>
+            <div class="k">Telefon</div><div class="v">${esc(d.telefon||'—')}</div>
+            <div class="k">Adresa</div><div class="v">${esc(d.adresa||'—')}</div>
+            <div class="k">Web</div><div class="v">${d.web?`<a href="${esc(d.web)}" target="_blank">${esc(d.web)}</a>`:'—'}</div>
+            <div class="k">Klubova</div><div class="v">${fmt(d.broj_klubova||'—')}</div>
+            <div class="k">Sportaša</div><div class="v">${fmt(d.broj_sportasa||'—')}</div>
+            <div class="k">Godina osnutka</div><div class="v">${esc(d.godina_osnutka||'—')}</div>
+          </div>
+          <div style="margin-top:14px"><a href="/sport/?savez=${id}" target="_blank" class="btn primary">Otvori u javnom portalu →</a></div>`;
+      }
+    } else if(kind === 'klub'){
+      const d = await api('/klubovi/'+id);
+      if(!d){ body = '<div class="empty">Klub nije pronađen.</div>'; }
+      else body = `
+        <h2 style="font-size:18px;color:var(--t0);margin-bottom:6px">${esc(d.naziv||'—')}</h2>
+        <div style="font-size:11px;color:var(--t2);margin-bottom:14px">${esc(d.savez||'')} · ${esc(d.grad||'')}</div>
+        <div class="kv">
+          <div class="k">OIB</div><div class="v">${esc(d.oib||'—')}</div>
+          <div class="k">Predsjednik</div><div class="v">${esc(d.predsjednik||'—')}</div>
+          <div class="k">Adresa</div><div class="v">${esc(d.adresa||'—')}</div>
+          <div class="k">Email</div><div class="v">${esc(d.email||'—')}</div>
+          <div class="k">Telefon</div><div class="v">${esc(d.telefon||'—')}</div>
+          <div class="k">Članova</div><div class="v">${fmt(d.broj_clanova||'—')}</div>
+        </div>`;
+    } else if(kind === 'zahtjev'){
+      const z = MOCK.zahtjevi_pending.concat(MOCK.savez_zahtjevi||[]).find(x => x.id===id || x.naziv===id) || {};
+      body = `
+        <h2 style="font-size:17px;color:var(--t0);margin-bottom:6px">${esc(z.naziv||id)}</h2>
+        <div class="kv">
+          <div class="k">Šifra</div><div class="v">${esc(z.id||'—')}</div>
+          <div class="k">Savez</div><div class="v">${esc(z.savez||'—')}</div>
+          <div class="k">Klub</div><div class="v">${esc(z.klub||'—')}</div>
+          <div class="k">Svrha</div><div class="v">${esc(z.svrha||'—')}</div>
+          <div class="k">Iznos</div><div class="v"><b style="color:var(--pgz-gold);font-size:15px">${fmtEur(z.iznos)}</b></div>
+          <div class="k">Datum predaje</div><div class="v">${esc(z.datum||'—')}</div>
+          <div class="k">Status</div><div class="v"><span class="tag am">${esc(z.status||'—')}</span></div>
+        </div>
+        <div style="margin-top:16px;display:flex;gap:8px">
+          <button class="btn primary">✓ Odobri</button>
+          <button class="btn">↩ Vrati podnositelju</button>
+          <button class="btn">✗ Odbij</button>
+        </div>
+        <div style="margin-top:18px;padding:14px;background:var(--bg3);border-radius:6px">
+          <div style="font-weight:700;color:var(--pgz-gold);font-size:11px;text-transform:uppercase;margin-bottom:8px">🔗 Blockchain seal</div>
+          <div style="font-size:11px;color:var(--t2)">Po odobrenju, hash zahtjeva + iznos zapisuje se u Polygon PoS (M11). Wallet: 0xD874...d368</div>
+        </div>`;
+    } else if(kind === 'audit'){
+      const a = MOCK.audit.concat(MOCK.audit_more||[]).find(x => x.what===id) || {ts:'',who:'',what:id};
+      body = `
+        <div class="kv">
+          <div class="k">Vrijeme</div><div class="v">${esc(a.ts)}</div>
+          <div class="k">Korisnik</div><div class="v" style="color:var(--pgz-gold)">${esc(a.who)}</div>
+          <div class="k">Akcija</div><div class="v">${a.what}</div>
+        </div>`;
+    } else if(kind === 'lijecnicki'){
+      body = `<div class="kv">
+        <div class="k">Sportaš</div><div class="v">${esc(id)}</div>
+        <div class="k">ZZJZ PGŽ</div><div class="v"><a href="https://zzjzpgz.hr" target="_blank">zzjzpgz.hr</a></div>
+      </div>
+      <div style="margin-top:14px"><button class="btn primary">📅 Zakaži termin (ZZJZ)</button></div>`;
+    } else if(kind === 'clan'){
+      body = `<h3 style="color:var(--t0);margin-bottom:10px">${esc(id)}</h3>
+      <div class="empty">Detalji člana — production: dohvati iz /api/clanovi/{id}</div>`;
+    } else {
+      body = '<div class="empty">Detalji.</div>';
+    }
+  } catch(e){ body = '<div class="empty">Greška pri dohvaćanju: '+esc(String(e))+'</div>'; }
+  $('#dpanel-body').innerHTML = body;
+}
+
+//=========== SIDEBAR ===========
+function toggleSidebar(){
+  const sb = $('#sb');
+  const tg = $('#sb-toggle');
+  if(!sb) return;
+  const c = sb.classList.toggle('collapsed');
+  if(tg) tg.textContent = '≡';
+  try { localStorage.setItem('sidebar-state', c ? 'collapsed' : 'expanded'); } catch(e){}
+}
+function restoreSidebar(){
+  try {
+    if(localStorage.getItem('sidebar-state') === 'collapsed') $('#sb').classList.add('collapsed');
+  } catch(e){}
+}
+
+//=========== ROLE SWITCH ===========
+function buildRoleSwitch(){
+  const rs = $('#role-switch');
+  rs.innerHTML = Object.entries(ROLES).map(([k,r]) =>
+    `<button data-role="${k}" onclick="setRole('${k}')" class="${k===_state.role?'active':''}">${esc(r.name)}</button>`
+  ).join('');
+}
+function setRole(r){
+  if(!ROLES[r]) return;
+  _state.role = r;
+  _state.section = 'profil';
+  try { localStorage.setItem('app-role', r); } catch(e){}
+  $$('.role-switch button').forEach(b => b.classList.toggle('active', b.dataset.role===r));
+  const role = ROLES[r];
+  // In demo mode, populate header from ROLES table; in real-auth mode, applyMeToHeader() owns it
+  if(_state.demoMode){
+    $('#user-name').innerHTML = esc(role.user) + `<span class="role-badge">${esc(role.name)}</span>`;
+    $('#user-av').innerHTML = '';
+    $('#user-av').textContent = role.av;
+    $('#user-tenant').textContent = role.sub;
+    $('#sf-name').textContent = role.user;
+    $('#sf-role').textContent = role.name;
+    $('#sf-av').innerHTML = '';
+    $('#sf-av').textContent = role.av;
+  }
+  $('#role-sub').textContent = (_state.me?.tenant_name) || role.sub;
+  $('#role-section-label').textContent = role.name.toUpperCase();
+  buildNav();
+  navTo('profil');
+}
+
+//=========== NAV ===========
+function buildNav(){
+  const items = NAV_BY_ROLE[_state.role] || [];
+  $('#nav').innerHTML = items.map(n =>
+    `<div class="nav-i ${n.id===_state.section?'active':''}" data-id="${n.id}" data-label="${esc(n.label)}" onclick="navTo('${n.id}')">
+      <span class="ic">${n.ic}</span>
+      <span class="lbl">${esc(n.label)}</span>
+      ${n.badge?`<span class="badge">${n.badge}</span>`:''}
+    </div>`
+  ).join('');
+}
+window.addEventListener('hashchange', () => {
+  const h = (location.hash||'').replace(/^#/,'');
+  if(!h) return;
+  const items = NAV_BY_ROLE[_state.role] || [];
+  if(items.some(n => n.id===h)) navTo(h);
+});
+function navTo(id){
+  _state.section = id;
+  $$('.nav-i').forEach(el => el.classList.toggle('active', el.dataset.id===id));
+  loadSection();
+}
+function logout(){
+  if(!confirm('Odjava iz aplikacije?')) return;
+  try {
+    localStorage.removeItem('app-role');
+    localStorage.removeItem('jwt');
+  } catch(e){}
+  alert('Odjavljen. (Production: redirect na /login)');
+  window.location.href = '/static/sport2.html';
+}
+
+//=========== SECTION TITLES ===========
+const TITLES = {
+  pgz: {
+    profil:['Moj profil','Osobni podaci i postavke'],
+    dashboard:['Dashboard','Pregled stanja PGŽ Sporta'],
+    korisnici:['Korisnici','Upravljanje korisnicima sustava'],
+    savezi:['Savezi','246 sportskih saveza'],
+    klubovi:['Klubovi','Sportski klubovi PGŽ'],
+    sportasi:['Sportaši','Registrirani članovi'],
+    financije:['Financije','Sufinanciranje sporta'],
+    racuni:['Računi (OCR)','OCR upload + obrada'],
+    crm:['CRM','Članarine + liječnički'],
+    kalendar:['Kalendar','Liječnički termini, manifestacije, eventi'],
+    audit:['Audit log','Sve aktivnosti sustava'],
+    forenzika:['Forenzika','Sumnjive transakcije / PEP'],
+  },
+  savez: {
+    profil:['Moj profil','Osobni podaci'],
+    dashboard:['Dashboard','Atletski savez PGŽ'],
+    klubovi:['Naši klubovi','Klubovi člana saveza'],
+    sportasi:['Naši sportaši','Registrirani sportaši saveza'],
+    zahtjevi:['Zahtjevi PGŽ','Sufinanciranje aktivnosti'],
+    kalendar:['Kalendar','Manifestacije saveza'],
+    lijecnicki:['Liječnički','Pregledi članova saveza'],
+    racuni:['Računi','Računi saveza'],
+  },
+  klub: {
+    profil:['Moj profil','Osobni podaci'],
+    dashboard:['Dashboard','AK Kvarner Rijeka'],
+    clanovi:['Članovi','Članovi kluba'],
+    clanarine:['Članarine','Stanje članarina'],
+    lijecnicki:['Liječnički','Pregledi članova'],
+    dokumenti:['Dokumenti','Dokumenti kluba'],
+    kalendar:['Kalendar','Liječnički termini + manifestacije'],
+    manifestacije:['Manifestacije','Nadolazeće aktivnosti'],
+    racuni:['Računi','Troškovi kluba'],
+  },
+  sportas: {
+    profil:['Moj profil','Osobni podaci'],
+    dashboard:['Pregled','Moja aktivnost'],
+    clanarina:['Članarina','Stanje moje članarine'],
+    lijecnicki:['Liječnički','Moj liječnički pregled'],
+    dokumenti:['Moji dokumenti','Suglasnosti, ugovori'],
+    obrasci:['Obrasci','Za potpis'],
+    kalendar:['Kalendar','Moji termini i događaji'],
+    manifestacije:['Manifestacije','Moje aktivnosti'],
+  },
+};
+
+function loadSection(){
+  const id = _state.section;
+  const role = _state.role;
+  const t = (TITLES[role] && TITLES[role][id]) || [id,''];
+  $('#tb-t').textContent = t[0];
+  $('#tb-s').textContent = t[1];
+  const fn = SECTIONS[role+':'+id] || SECTIONS[role+':default'] || (() => '<div class="empty">Sekcija u izradi.</div>');
+  $('#content').innerHTML = '<div class="loading">Učitavanje...</div>';
+  Promise.resolve(fn()).then(html => { $('#content').innerHTML = html || '<div class="empty">Nema podataka.</div>'; });
+}
+
+//=========== SECTION RENDERERS ===========
+const SECTIONS = {};
+
+// ──────────────────────── PROFILE PAGE (shared by all roles) ────────────────────────
+function profileMe(){
+  // Real user if available, else demo from ROLES table
+  if(_state.me) return _state.me;
+  const r = ROLES[_state.role] || ROLES.pgz;
+  const parts = String(r.user||'').split(/\s+/);
+  return {
+    id: 0, email:'demo@pgz.hr',
+    full_name: r.user, ime: parts[0]||'', prezime: parts.slice(1).join(' '),
+    user_type: _state.role==='pgz'?'pgz_admin':_state.role==='savez'?'savez_admin':_state.role==='klub'?'klub_admin':'klub_clan',
+    tenant_type: _state.role==='pgz'?'pgz':_state.role,
+    tenant_name: r.sub, tenant_id: null, tier: _state.role==='pgz'?0:_state.role==='savez'?1:2,
+    oib: '12345678901', telefon:'+385 91 234 5678', phone:null,
+    last_login: '2026-05-05T00:08:09', preferred_language:'hr',
+    avatar_url:null, two_factor_enabled:false,
+    gdpr_consent_at:null, created_at:'2026-04-01T08:00:00',
+    roles:[{code:'demo', naziv:r.name}]
+  };
+}
+function profileRender(){
+  const u = profileMe();
+  const name = u.full_name || ((u.ime||'')+' '+(u.prezime||'')).trim() || u.email || '—';
+  const av = u.avatar_url ? `<img src="${esc(u.avatar_url)}" alt="">`
+           : (u.google_picture ? `<img src="${esc(u.google_picture)}" alt="">` : esc(initials(name)));
+  const lastLogin = u.last_login ? new Date(u.last_login).toLocaleString('hr-HR') : '—';
+  const created = u.created_at ? new Date(u.created_at).toLocaleString('hr-HR') : '—';
+  const gdpr = u.gdpr_consent_at ? new Date(u.gdpr_consent_at).toLocaleDateString('hr-HR') : null;
+  const roleLabel = (ROLES[_state.role]||{}).name || u.user_type || 'Korisnik';
+  return `
+  <div class="profile-page">
+    <div class="profile-banner">
+      <div class="profile-avatar-big" id="prof-av-big" onclick="pickAvatar()" title="Klik za upload nove slike">
+        ${av}
+        <div class="upload-hint">📷 Promijeni sliku</div>
+      </div>
+      <div class="profile-banner-info">
+        <h1>${esc(name)}</h1>
+        <div class="role-line">${esc(roleLabel)} · ${esc(u.tenant_name || u.tenant_type || '')}</div>
+        <div class="tags-row">
+          <span class="tag b">${esc(u.user_type||'')}</span>
+          ${u.aktivan!==false ? '<span class="tag gr">Aktivan</span>' : '<span class="tag rd">Suspended</span>'}
+          ${u.two_factor_enabled ? '<span class="tag-2fa-on">2FA ON</span>' : '<span class="tag-2fa-off">2FA OFF</span>'}
+          ${gdpr ? `<span class="tag-gdpr">GDPR ${esc(gdpr)}</span>` : ''}
+        </div>
+      </div>
+      <div class="profile-banner-actions">
+        <button class="btn" onclick="pickAvatar()">📷 Slika</button>
+        <button class="btn primary" onclick="profileEditAll()">✏ Uredi profil</button>
+      </div>
+    </div>
+
+    <div class="profile-section">
+      <h3>Osobni podaci <span class="edit-link" onclick="profileEditAll()">✏ Uredi sva polja</span></h3>
+      <div class="profile-row" data-f="ime">
+        <div class="k">Ime</div>
+        <div class="v">${esc(u.ime||'')||'<span class="empty">—</span>'}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('ime','Ime')">✏</button></div>
+      </div>
+      <div class="profile-row" data-f="prezime">
+        <div class="k">Prezime</div>
+        <div class="v">${esc(u.prezime||'')||'<span class="empty">—</span>'}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('prezime','Prezime')">✏</button></div>
+      </div>
+      <div class="profile-row" data-f="full_name">
+        <div class="k">Puno ime</div>
+        <div class="v">${esc(u.full_name||'')||'<span class="empty">—</span>'}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('full_name','Puno ime')">✏</button></div>
+      </div>
+      <div class="profile-row" data-f="email">
+        <div class="k">Email</div>
+        <div class="v">${esc(u.email||'—')}</div>
+        <div class="a"><span class="tag">read-only</span></div>
+      </div>
+      <div class="profile-row" data-f="telefon">
+        <div class="k">Telefon</div>
+        <div class="v">${esc(u.telefon||u.phone||'')||'<span class="empty">—</span>'}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('telefon','Telefon')">✏</button></div>
+      </div>
+      <div class="profile-row" data-f="oib">
+        <div class="k">OIB</div>
+        <div class="v">${esc(u.oib||'')||'<span class="empty">—</span>'}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('oib','OIB')">✏</button></div>
+      </div>
+      <div class="profile-row" data-f="preferred_language">
+        <div class="k">Jezik sučelja</div>
+        <div class="v">${esc(u.preferred_language||'hr')}</div>
+        <div class="a"><button class="btn sm" onclick="profileEditField('preferred_language','Jezik (hr/en)')">✏</button></div>
+      </div>
+    </div>
+
+    <div class="profile-section">
+      <h3>Tenant i ovlasti</h3>
+      <div class="profile-row"><div class="k">Tenant</div><div class="v">${esc(u.tenant_name || '—')}</div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">Tip tenanta</div><div class="v"><span class="tag b">${esc(u.tenant_type || '—')}</span></div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">Tier</div><div class="v">${u.tier!=null?u.tier:'—'} ${u.tier===0?'(PGŽ)':u.tier===1?'(savez)':u.tier===2?'(klub)':''}</div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">User type</div><div class="v"><span class="tag gd">${esc(u.user_type || '—')}</span></div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">Dodatne uloge</div><div class="v">${(u.roles||[]).map(r => `<span class="tag b" style="margin-right:4px">${esc(r.code)}</span>`).join('')||'<span class="empty">—</span>'}</div><div class="a"></div></div>
+    </div>
+
+    <div class="profile-section">
+      <h3>Sigurnost <span class="edit-link" onclick="profileChangePassword()">🔑 Promijeni lozinku</span></h3>
+      <div class="profile-row"><div class="k">2FA</div><div class="v">${u.two_factor_enabled?'<span class="tag-2fa-on">Uključeno</span>':'<span class="tag-2fa-off">Nije postavljeno</span>'}</div><div class="a"><button class="btn sm primary" onclick="profileSetup2FA()">${u.two_factor_enabled?'Provjeri':'Postavi'}</button></div></div>
+      <div class="profile-row"><div class="k">Mora promijeniti lozinku</div><div class="v">${u.must_change_pwd?'<span class="tag rd">DA</span>':'<span class="tag gr">NE</span>'}</div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">GDPR pristanak</div><div class="v">${gdpr || '<span class="empty">Nije zabilježen</span>'}</div><div class="a">${gdpr?'':'<button class="btn sm">Dodijeli</button>'}</div></div>
+      <div class="profile-row"><div class="k">Status računa</div><div class="v"><span class="tag ${u.aktivan===false?'rd':'gr'}">${u.aktivan===false?'Suspended':'Aktivan'}</span></div><div class="a"></div></div>
+    </div>
+
+    <div class="profile-section">
+      <h3>Aktivnost</h3>
+      <div class="profile-row"><div class="k">Zadnji login</div><div class="v" style="font-family:var(--mono);font-size:11.5px">${esc(lastLogin)}</div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">Račun kreiran</div><div class="v" style="font-family:var(--mono);font-size:11.5px">${esc(created)}</div><div class="a"></div></div>
+      <div class="profile-row"><div class="k">User ID</div><div class="v" style="font-family:var(--mono)">#${esc(u.id||0)}</div><div class="a"></div></div>
+    </div>
+
+    <div class="profile-section">
+      <h3>GDPR i podaci</h3>
+      <div style="font-size:11.5px;color:var(--t2);line-height:1.6;margin-bottom:10px">
+        Imaš pravo na pristup, izmjenu i brisanje svojih osobnih podataka prema GDPR uredbi (čl. 15–17, 20).
+      </div>
+      <div style="display:flex;gap:8px;flex-wrap:wrap">
+        <button class="btn" onclick="gdprExport()">📤 Izvezi moje podatke (JSON)</button>
+        <button class="btn" onclick="gdprAuditMy()">🔍 Audit pristupa mojim podacima</button>
+        <button class="btn" style="border-color:var(--red);color:var(--red)" onclick="profileDeleteAccount()">🗑 Zatraži brisanje računa</button>
+      </div>
+    </div>
+  </div>`;
+}
+SECTIONS['pgz:profil']    = profileRender;
+SECTIONS['savez:profil']  = profileRender;
+SECTIONS['klub:profil']   = profileRender;
+SECTIONS['sportas:profil']= profileRender;
+
+// Profile actions
+function pickAvatar(){
+  if(!getToken()){
+    alert('Niste prijavljeni. Idite na /login pa se prijavite kao damir@pgz.hr / PGZ2026!');
+    return;
+  }
+  $('#avatar-input').click();
+}
+async function onAvatarPick(input){
+  const f = input.files && input.files[0];
+  if(!f) return;
+  if(f.size > 5*1024*1024){ alert('Slika prevelika (>5 MB)'); return; }
+  const fd = new FormData(); fd.append('file', f);
+  const av = $('#prof-av-big');
+  if(av) av.innerHTML = '<div style="font-size:14px;color:var(--t1)">⏳</div>';
+  const r = await apiAuth('/auth/me/avatar', {method:'POST', body:fd});
+  input.value = '';
+  if(r && r.avatar_url){
+    if(_state.me) _state.me.avatar_url = r.avatar_url;
+    applyMeToHeader();
+    loadSection(); // re-render profile
+  } else {
+    alert('Upload failed: '+(r&&r.status||'unknown'));
+    loadSection();
+  }
+}
+async function profileEditField(field, label){
+  const cur = (_state.me && _state.me[field]) || '';
+  const v = prompt(`${label}:`, cur);
+  if(v == null) return;
+  if(!getToken()){
+    if(_state.me){ _state.me[field] = v; }
+    else {
+      // demo: persist on local copy
+      if(!window._demoMe) window._demoMe = profileMe();
+      window._demoMe[field] = v;
+      _state.me = window._demoMe;
+    }
+    applyMeToHeader();
+    loadSection();
+    return;
+  }
+  const r = await apiAuth('/auth/me', {method:'PUT', body: JSON.stringify({[field]: v})});
+  if(r && !r.__error){ _state.me = r; applyMeToHeader(); loadSection(); }
+  else alert('Greška pri spremanju: '+(r&&r.status||'unknown'));
+}
+async function profileEditAll(){
+  // Open drill-down panel with full edit form
+  const u = profileMe();
+  openDetail('Uredi profil', `
+    <form id="prof-edit-form" onsubmit="return profileSaveAll(event)">
+      ${['ime','prezime','full_name','telefon','oib'].map(f => `
+        <div style="margin-bottom:12px">
+          <label style="display:block;font-size:11px;color:var(--t2);margin-bottom:4px;font-weight:600;text-transform:uppercase">${f}</label>
+          <input name="${f}" value="${esc(u[f]||'')}" style="background:var(--bg3);border:1px solid var(--rim);border-radius:5px;padding:8px 10px;color:var(--t1);font-size:13px;width:100%">
+        </div>`).join('')}
+      <div style="margin-bottom:12px">
+        <label style="display:block;font-size:11px;color:var(--t2);margin-bottom:4px;font-weight:600;text-transform:uppercase">Jezik</label>
+        <select name="preferred_language" style="background:var(--bg3);border:1px solid var(--rim);border-radius:5px;padding:8px 10px;color:var(--t1);font-size:13px;width:100%">
+          <option value="hr" ${(u.preferred_language||'hr')==='hr'?'selected':''}>Hrvatski</option>
+          <option value="en" ${u.preferred_language==='en'?'selected':''}>English</option>
+        </select>
+      </div>
+      <div style="display:flex;gap:8px;margin-top:18px">
+        <button type="submit" class="btn primary">💾 Spremi</button>
+        <button type="button" class="btn" onclick="closeDetail()">Odustani</button>
+      </div>
+    </form>`);
+}
+async function profileSaveAll(ev){
+  ev.preventDefault();
+  const fd = new FormData(ev.target);
+  const obj = {}; fd.forEach((v,k) => { obj[k]=v; });
+  if(!getToken()){
+    Object.assign(_state.me || {}, obj);
+    applyMeToHeader(); closeDetail(); loadSection();
+    return false;
+  }
+  const r = await apiAuth('/auth/me', {method:'PUT', body: JSON.stringify(obj)});
+  if(r && !r.__error){ _state.me = r; applyMeToHeader(); closeDetail(); loadSection(); }
+  else alert('Greška: '+(r&&r.status||'unknown'));
+  return false;
+}
+async function profileChangePassword(){
+  if(!getToken()){ alert('Login potreban (demo mode).'); return; }
+  const oldp = prompt('Stara lozinka:'); if(oldp==null) return;
+  const newp = prompt('Nova lozinka (min 8 znakova):'); if(newp==null) return;
+  if(newp.length < 8){ alert('Nova lozinka mora imati barem 8 znakova'); return; }
+  const r = await apiAuth('/auth/password/change', {method:'POST', body: JSON.stringify({old_password:oldp,new_password:newp})});
+  if(r && r.status==='ok') alert('Lozinka promijenjena ✓'); else alert('Greška: '+(r&&r.status||'unknown'));
+}
+async function profileSetup2FA(){
+  if(!getToken()){ alert('Login potreban (demo mode).'); return; }
+  const r = await apiAuth('/auth/2fa/setup', {method:'POST'});
+  if(r && r.qr_url) {
+    openDetail('Postavi 2FA', `<div style="text-align:center"><img src="${esc(r.qr_url)}" style="max-width:240px"><div style="margin-top:10px;font-size:12px;color:var(--t2)">Skeniraj QR kod u Google Authenticator / Authy</div><div style="margin-top:14px"><input id="totp-code" placeholder="6-cifreni kod" style="background:var(--bg3);border:1px solid var(--rim);border-radius:5px;padding:8px;color:var(--t1);width:140px"><button class="btn primary" onclick="profileVerify2FA()">Potvrdi</button></div></div>`);
+  } else alert('2FA setup failed');
+}
+async function profileVerify2FA(){
+  const code = $('#totp-code')?.value;
+  const r = await apiAuth('/auth/2fa/verify', {method:'POST', body: JSON.stringify({code})});
+  if(r && r.status==='ok'){ alert('2FA aktivirano ✓'); closeDetail(); loadSection(); }
+  else alert('Pogrešan kod.');
+}
+// profileDeleteAccount: real implementation below (line ~1902)
+
+// =======================================================================
+// PGŽ ADMIN — Dashboard
+// =======================================================================
+SECTIONS['pgz:dashboard'] = async () => {
+  const d = await api('/dashboard') || {};
+  const kpis = `
+    <div class="kpi-grid">
+      <div class="kpi b click" onclick="navTo('savezi')"><div class="kpi-l">Saveza</div><div class="kpi-v">${fmt(d.aktivnih_saveza||246)}</div><div class="kpi-s">aktivnih</div><span class="kpi-trend up">+2 ovaj mj.</span></div>
+      <div class="kpi click" onclick="navTo('klubovi')"><div class="kpi-l">Klubova</div><div class="kpi-v">${fmt(d.aktivnih_klubova||1656)}</div><div class="kpi-s">registriranih</div></div>
+      <div class="kpi g click" onclick="navTo('sportasi')"><div class="kpi-l">Sportaša</div><div class="kpi-v">${fmt(d.aktivnih_clanova||3243)}</div><div class="kpi-s">aktivnih</div><span class="kpi-trend up">+45 ovaj mj.</span></div>
+      <div class="kpi a click" onclick="navTo('financije')"><div class="kpi-l">Proračun 2026</div><div class="kpi-v">${fmtEur(d.proracun_aktualni||2817309)}</div><div class="kpi-s">odobreno</div></div>
+      <div class="kpi r click" onclick="navTo('forenzika')"><div class="kpi-l">Critical alerts</div><div class="kpi-v">${fmt(d.critical_alerts||11)}</div><div class="kpi-s">forenzika</div></div>
+      <div class="kpi c click" onclick="navTo('crm')"><div class="kpi-l">Ist. liječničkih</div><div class="kpi-v">${fmt(d.isteki_lijecnicki||11)}</div><div class="kpi-s">treba obnoviti</div></div>
+    </div>`;
+
+  const reqHtml = MOCK.zahtjevi_pending.map(z => `
+    <div class="req-i" onclick="showDetail('zahtjev','${esc(z.id)}','Zahtjev ${esc(z.id)}')">
+      <div class="rh">
+        <div>
+          <div class="rt">${esc(z.naziv)}</div>
+          <div class="rsum">${esc(z.savez)} · ${esc(z.svrha)}</div>
+        </div>
+        <div><span class="tag am">${esc(z.status)}</span></div>
+      </div>
+      <div class="rmeta">
+        <div>Iznos: <b>${fmtEur(z.iznos)}</b></div>
+        <div>Predano: ${esc(z.datum)}</div>
+        <div>Klub: ${esc(z.klub||'—')}</div>
+      </div>
+    </div>`).join('');
+
+  const auditHtml = MOCK.audit.map(a =>
+    `<div class="audit-i" style="cursor:pointer" onclick='showDetail("audit",${JSON.stringify(a.what)},"Audit zapis")'><div class="ts">${esc(a.ts)}</div><div class="who">${esc(a.who)}</div><div class="what">${a.what}</div></div>`
+  ).join('');
+
+  return `
+    <div class="demo-banner">
+      <span style="font-size:18px">🛡️</span>
+      <div><b>PGŽ admin view</b> — najviša razina ovlaštenja. Vidiš sve saveze, klubove i transakcije.</div>
+    </div>
+    ${kpis}
+    <div class="row-3">
+      <div>
+        <div class="card">
+          <div class="card-h">
+            <div class="card-t">📋 Zahtjevi za sufinanciranje (${MOCK.zahtjevi_pending.length} čeka)</div>
+            <div class="card-actions"><button class="btn primary sm" onclick="navTo('financije')">Svi →</button></div>
+          </div>
+          ${reqHtml || '<div class="empty">Nema zahtjeva.</div>'}
+        </div>
+        <div class="card">
+          <div class="card-h"><div class="card-t">📊 Trend isplata 2025–2026</div></div>
+          <div class="chart-box"><canvas id="ch-trend"></canvas></div>
+        </div>
+      </div>
+      <div>
+        <div class="card">
+          <div class="card-h"><div class="card-t">⚡ Brze akcije</div></div>
+          <div style="display:grid;gap:8px">
+            <button class="btn primary" onclick="setRole('pgz');navTo('korisnici')">+ Dodaj korisnika</button>
+            <button class="btn" onclick="navTo('forenzika')">⚠ Pregled forenzike</button>
+            <button class="btn" onclick="navTo('racuni')">🧾 Skeniraj račun (OCR)</button>
+            <button class="btn" onclick="navTo('audit')">🔍 Audit log</button>
+            <button class="btn gold" onclick="window.open('/sport/','_blank')">🌐 Public portal</button>
+          </div>
+        </div>
+        <div class="card">
+          <div class="card-h"><div class="card-t">🔍 Audit log (zadnjih 6)</div></div>
+          ${auditHtml}
+        </div>
+      </div>
+    </div>`;
+};
+
+// chart hook executed after innerHTML
+const _origLoad = loadSection;
+loadSection = function(){
+  _origLoad();
+  setTimeout(() => {
+    const c = document.getElementById('ch-trend');
+    if(c && window.Chart){
+      try {
+        new Chart(c, {
+          type:'line',
+          data:{
+            labels:['I','II','III','IV','V','VI','VII','VIII','IX','X','XI','XII'],
+            datasets:[
+              {label:'2025',data:[180,220,240,280,310,350,290,320,360,400,420,440],borderColor:'#8a95b4',backgroundColor:'rgba(138,149,180,.15)',tension:.35},
+              {label:'2026',data:[210,260,290,330,380,420,null,null,null,null,null,null],borderColor:'#F4C430',backgroundColor:'rgba(244,196,48,.18)',tension:.35,fill:true},
+            ],
+          },
+          options:{responsive:true,maintainAspectRatio:false,plugins:{legend:{labels:{color:'#e2e6f0',font:{size:11}}}},scales:{x:{ticks:{color:'#8a95b4'},grid:{color:'#1e2a50'}},y:{ticks:{color:'#8a95b4'},grid:{color:'#1e2a50'}}}}
+        });
+      } catch(e){}
+    }
+  }, 80);
+};
+
+// PGŽ admin sub-pages
+SECTIONS['pgz:korisnici'] = () => {
+  const rows = MOCK.korisnici.map(u => `
+    <tr>
+      <td><b>${esc(u.ime)}</b></td>
+      <td>${esc(u.email)}</td>
+      <td><span class="tag b">${esc(u.role)}</span></td>
+      <td>${esc(u.tenant)}</td>
+      <td>${esc(u.status)==='aktivan'?'<span class="tag gr">aktivan</span>':'<span class="tag rd">suspended</span>'}</td>
+      <td>${esc(u.last_login)}</td>
+      <td><button class="btn sm" onclick="alert('Audit za korisnika ${esc(u.email)}')">Audit</button></td>
+    </tr>`).join('');
+  return `
+    <div class="card">
+      <div class="card-h">
+        <div class="card-t">👥 Korisnici sustava (${MOCK.korisnici.length})</div>
+        <div class="card-actions">
+          <button class="btn" onclick="alert('Bulk import iz CSV')">📥 Import CSV</button>
+          <button class="btn primary" onclick="alert('Wizard za dodavanje korisnika')">+ Novi korisnik</button>
+        </div>
+      </div>
+      <table>
+        <thead><tr><th>Ime</th><th>Email</th><th>Uloga</th><th>Tenant</th><th>Status</th><th>Zadnji login</th><th></th></tr></thead>
+        <tbody>${rows}</tbody>
+      </table>
+    </div>`;
+};
+
+SECTIONS['pgz:savezi'] = async () => {
+  const d = await api('/savezi') || {rows:[]};
+  const top = (d.rows||[]).slice(0,30);
+  const rows = top.map(s => `
+    <tr style="cursor:pointer" onclick="showDetail('savez',${s.id},${JSON.stringify(s.naziv)})">
+      <td><b>${esc(s.naziv)}</b></td>
+      <td class="num">${fmt(s.broj_klubova||'—')}</td>
+      <td class="num">${fmt(s.broj_sportasa||'—')}</td>
+      <td>${esc(s.predsjednik||'—')}</td>
+      <td><button class="btn sm" onclick="event.stopPropagation();showDetail('savez',${s.id},${JSON.stringify(s.naziv)})">Detalji</button></td>
+    </tr>`).join('');
+  return `<div class="card"><div class="card-h"><div class="card-t">🏅 Savezi PGŽ — top 30 (od ${d.count||246})</div></div>
+    <table><thead><tr><th>Naziv</th><th class="num">Klubovi</th><th class="num">Sportaši</th><th>Predsjednik</th><th></th></tr></thead><tbody>${rows||'<tr><td colspan=5 class="empty">Učitavam...</td></tr>'}</tbody></table>
+  </div>`;
+};
+
+SECTIONS['pgz:klubovi'] = async () => {
+  const d = await api('/klubovi?limit=40') || {rows:[]};
+  const rows = (d.rows||[]).slice(0,40).map(k => `
+    <tr style="cursor:pointer" onclick="showDetail('klub',${k.id},${JSON.stringify(k.naziv)})">
+      <td><b>${esc(k.naziv)}</b></td>
+      <td>${esc(k.savez||'—')}</td>
+      <td>${esc(k.grad||'—')}</td>
+      <td class="num">${fmt(k.broj_clanova||'—')}</td>
+      <td>${esc(k.predsjednik||'—')}</td>
+    </tr>`).join('');
+  return `<div class="card"><div class="card-h"><div class="card-t">⬢ Klubovi (${d.count||0})</div></div>
+    <table><thead><tr><th>Naziv</th><th>Savez</th><th>Grad</th><th class="num">Članova</th><th>Predsjednik</th></tr></thead><tbody>${rows||'<tr><td colspan=5 class="empty">—</td></tr>'}</tbody></table>
+  </div>`;
+};
+
+SECTIONS['pgz:sportasi'] = async () => {
+  const d = await api('/clanovi?limit=40') || {rows:[]};
+  const rows = (d.rows||[]).slice(0,40).map(c => `
+    <tr>
+      <td><b>${esc(c.ime+' '+(c.prezime||''))}</b></td>
+      <td>${esc(c.klub||'—')}</td>
+      <td>${esc(c.kategorija||'—')}</td>
+      <td>${esc(c.spol||'—')}</td>
+      <td>${esc(c.datum_rodjenja||'—')}</td>
+    </tr>`).join('');
+  return `<div class="card"><div class="card-h"><div class="card-t">👤 Sportaši (${d.count||0})</div></div>
+    <table><thead><tr><th>Ime i prezime</th><th>Klub</th><th>Kategorija</th><th>Spol</th><th>Rođen</th></tr></thead><tbody>${rows||'<tr><td colspan=5 class="empty">—</td></tr>'}</tbody></table>
+  </div>`;
+};
+
+SECTIONS['pgz:financije'] = async () => {
+  const d = await api('/proracun') || {};
+  return `
+    <div class="kpi-grid">
+      <div class="kpi"><div class="kpi-l">Proračun 2026</div><div class="kpi-v">${fmtEur(d.proracun||2817309)}</div></div>
+      <div class="kpi g"><div class="kpi-l">Isplaćeno</div><div class="kpi-v">${fmtEur(d.isplaceno||1240000)}</div></div>
+      <div class="kpi a"><div class="kpi-l">U obradi</div><div class="kpi-v">${fmtEur(d.u_obradi||320000)}</div></div>
+      <div class="kpi r"><div class="kpi-l">Odbijeno</div><div class="kpi-v">${fmtEur(d.odbijeno||45000)}</div></div>
+    </div>
+    <div class="card"><div class="card-h"><div class="card-t">📋 Pending zahtjevi za sufinanciranje</div></div>
+      ${MOCK.zahtjevi_pending.map(z => `
+        <div class="req-i">
+          <div class="rh"><div><div class="rt">${esc(z.naziv)}</div><div class="rsum">${esc(z.savez)} · ${esc(z.svrha)}</div></div>
+          <div><span class="tag am">${esc(z.status)}</span> <button class="btn sm primary">Odobri</button> <button class="btn sm">Odbij</button></div></div>
+          <div class="rmeta"><div>Iznos: <b>${fmtEur(z.iznos)}</b></div><div>Predano: ${esc(z.datum)}</div></div>
+        </div>`).join('')}
+    </div>`;
+};
+
+SECTIONS['pgz:racuni'] = () => `
+  <div class="card">
+    <div class="card-h"><div class="card-t">🧾 OCR upload (drag & drop)</div></div>
+    <div style="border:2px dashed var(--rim2);border-radius:8px;padding:40px;text-align:center;background:var(--bg3);cursor:pointer" onclick="alert('OCR upload — backend M5 (CC4)')">
+      <div style="font-size:48px;margin-bottom:8px">📷</div>
+      <div style="font-weight:700;color:var(--t0);margin-bottom:4px">Dovuci ovdje sliku ili PDF računa</div>
+      <div style="font-size:11px;color:var(--t2)">ili klikni za odabir · cestarina, gorivo, hotel, dnevnice...</div>
+      <button class="btn primary" style="margin-top:12px">📸 Snimi kamerom</button>
+    </div>
+    <div style="font-size:11px;color:var(--t4);margin-top:10px">Backend: Tesseract OCR + Ri.NET AI Engine ekstrakcija polja → invoices DB</div>
+  </div>
+  <div class="card">
+    <div class="card-h"><div class="card-t">📋 Nedavni računi</div></div>
+    <table><thead><tr><th>Datum</th><th>Izdavatelj</th><th>OIB</th><th>Vrsta</th><th class="num">Iznos</th><th>Status</th></tr></thead>
+    <tbody>${MOCK.invoices.map(r => `<tr><td>${esc(r.datum)}</td><td><b>${esc(r.izdavatelj)}</b></td><td>${esc(r.oib)}</td><td><span class="tag ${r.tag}">${esc(r.vrsta)}</span></td><td class="num">${fmtEur(r.iznos)}</td><td>${esc(r.status)}</td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['pgz:crm'] = () => `
+  <div style="margin-bottom:12px">
+    <a href="/crm" target="_blank" class="btn primary" style="text-decoration:none">📋 Otvori CRM workspace (Članarine • Liječnički • Obrasci) — live API</a>
+  </div>
+  <div class="row-2">
+    <div class="card">
+      <div class="card-h"><div class="card-t">€ Članarine 2026</div></div>
+      <div class="kpi-grid" style="margin-bottom:0">
+        <div class="kpi g"><div class="kpi-l">Naplaćeno</div><div class="kpi-v">${fmtEur(5400)}</div></div>
+        <div class="kpi r"><div class="kpi-l">Dug</div><div class="kpi-v">${fmtEur(720)}</div></div>
+      </div>
+      <div style="margin-top:12px">
+        <button class="btn primary">📧 Notifikacija svima koji duguju</button>
+        <button class="btn">📄 Generiraj HUB-3 batch</button>
+      </div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">⚕ Liječnički pregledi</div></div>
+      <div class="kpi-grid" style="margin-bottom:0">
+        <div class="kpi g"><div class="kpi-l">Validni</div><div class="kpi-v">${fmt(3232)}</div></div>
+        <div class="kpi a"><div class="kpi-l">Uskoro istek (30d)</div><div class="kpi-v">0</div></div>
+        <div class="kpi r"><div class="kpi-l">Istekli</div><div class="kpi-v">11</div></div>
+      </div>
+      <div style="margin-top:12px"><button class="btn primary">📅 ZZJZ PGŽ rezervacija</button></div>
+    </div>
+  </div>`;
+
+SECTIONS['pgz:audit'] = () => `
+  <div class="card">
+    <div class="card-h"><div class="card-t">🔍 Audit log — sve aktivnosti</div>
+      <div class="card-actions">
+        <input type="text" placeholder="Pretraži korisnika..." style="background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:6px 10px;color:var(--t1);font-size:12px">
+      </div>
+    </div>
+    ${MOCK.audit.concat(MOCK.audit_more).map(a =>
+      `<div class="audit-i"><div class="ts">${esc(a.ts)}</div><div class="who">${esc(a.who)}</div><div class="what">${a.what}</div></div>`
+    ).join('')}
+  </div>`;
+
+// =======================================================================
+// CC5 R5 — KALENDAR (liječnički termini + manifestacije + eventi)
+// =======================================================================
+async function renderKalendar(opts){
+  opts = opts || {};
+  const today = new Date();
+  const ym = opts.ym || (today.getFullYear() + '-' + String(today.getMonth()+1).padStart(2,'0'));
+  const [Y, M] = ym.split('-').map(Number);
+  const first = new Date(Y, M-1, 1);
+  const last = new Date(Y, M, 0);
+
+  // Učitaj sve liječničke koji ističu unutar +180 dana, manifestacije iz API-ja, i mock eventove
+  let lij = [], manif = [], notif = [];
+  try { const d = await fetch('/sport/api/crm/lijecnicki/uskoro-isticu?days=180&include_expired=false').then(r=>r.json()); lij = d.rows || []; } catch(e){}
+  try { const d = await fetch('/sport/api/manifestacije').then(r=>r.json()); manif = d.rows || d || []; } catch(e){}
+  try { const d = await fetch('/sport/api/crm/notifications?limit=50').then(r=>r.json()); notif = d.rows || []; } catch(e){}
+
+  const events = [];
+  lij.forEach(l => events.push({date: l.vrijedi_do, type:'lij', title:`⚕ Pregled ističe: ${l.clan}`, klub:l.klub, color:'a'}));
+  manif.forEach(m => { if (m.datum) events.push({date: m.datum, type:'manif', title:`📅 ${m.naziv || m.title || 'Manifestacija'}`, klub:m.lokacija || m.grad, color:'b'}); });
+  // Eventi: ZZJZ termini mock — sljedećih 7 dana po radnim danima
+  for(let d=0; d<14; d++){
+    const dt = new Date(); dt.setDate(dt.getDate()+d);
+    if (dt.getDay()===0 || dt.getDay()===6) continue;
+    if ((dt.getDate() + d) % 5 === 0) {
+      events.push({date: dt.toISOString().slice(0,10), type:'event', title:'🏥 ZZJZ termin slot (mock)', color:'g'});
+    }
+  }
+
+  // KPI / sažetak
+  const cntLij = lij.length, cntManif = manif.length, cntNotif = notif.filter(n=>!n.read_at && n.channel==='inapp').length;
+
+  // Group events by date
+  const byDate = {};
+  events.forEach(e => {
+    if (!e.date) return;
+    const k = String(e.date).substring(0,10);
+    (byDate[k] = byDate[k] || []).push(e);
+  });
+
+  // Header s navigacijom
+  const prevYm = (() => { const d = new Date(Y, M-2, 1); return d.getFullYear()+'-'+String(d.getMonth()+1).padStart(2,'0'); })();
+  const nextYm = (() => { const d = new Date(Y, M, 1); return d.getFullYear()+'-'+String(d.getMonth()+1).padStart(2,'0'); })();
+  const monthName = first.toLocaleString('hr-HR', {month:'long', year:'numeric'});
+
+  // Build kalendar grid (start ponedjeljak)
+  let firstDow = first.getDay(); if (firstDow === 0) firstDow = 7; // pon=1, ned=7
+  const blanks = firstDow - 1;
+  const days = last.getDate();
+  let grid = '';
+  const dayNames = ['Pon','Uto','Sri','Čet','Pet','Sub','Ned'];
+  grid += `<div style="display:grid;grid-template-columns:repeat(7,1fr);gap:6px">`;
+  dayNames.forEach(d => grid += `<div style="font-size:11px;color:var(--t3);text-align:center;font-weight:600;text-transform:uppercase;padding:4px 0">${d}</div>`);
+  for(let i=0; i<blanks; i++) grid += `<div></div>`;
+  for(let d=1; d<=days; d++){
+    const k = `${Y}-${String(M).padStart(2,'0')}-${String(d).padStart(2,'0')}`;
+    const ev = byDate[k] || [];
+    const isToday = (k === today.toISOString().slice(0,10));
+    const evHtml = ev.slice(0,3).map(e => `<div style="font-size:10px;background:rgba(${e.color==='a'?'245,158,11':e.color==='b'?'26,115,232':'34,197,94'},0.18);padding:2px 4px;border-radius:3px;margin-top:2px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap" title="${esc(e.title)}${e.klub?' — '+esc(e.klub):''}">${esc(e.title.substring(0,28))}</div>`).join('');
+    const more = ev.length > 3 ? `<div style="font-size:9px;color:var(--t3);margin-top:2px">+${ev.length-3} više</div>` : '';
+    grid += `<div style="background:${isToday?'rgba(26,115,232,0.15)':'var(--bg2)'};border:1px solid ${isToday?'var(--pgz-blue)':'var(--rim)'};border-radius:6px;padding:6px;min-height:90px;${ev.length?'cursor:pointer':''}" ><div style="font-weight:600;font-size:13px;color:${isToday?'var(--pgz-blue)':'var(--t1)'}">${d}</div>${evHtml}${more}</div>`;
+  }
+  grid += '</div>';
+
+  // Lista nadolazećih (top 10)
+  const upcoming = events.filter(e => e.date && e.date >= today.toISOString().slice(0,10))
+                          .sort((a,b) => a.date.localeCompare(b.date)).slice(0, 10);
+  const upcomingHtml = upcoming.map(e => `<tr><td>${esc(e.date)}</td><td>${esc(e.title)}</td><td>${esc(e.klub||'—')}</td><td><span class="tag ${e.color==='a'?'am':e.color==='b'?'bl':'gr'}">${e.type}</span></td></tr>`).join('');
+
+  return `
+    <div class="kpi-grid" style="margin-bottom:12px">
+      <div class="kpi a"><div class="kpi-l">⚕ Liječnički isteci</div><div class="kpi-v">${cntLij}</div><div class="kpi-s">≤ 180 dana</div></div>
+      <div class="kpi b"><div class="kpi-l">📅 Manifestacije</div><div class="kpi-v">${cntManif}</div></div>
+      <div class="kpi r"><div class="kpi-l">🔔 InApp neprocitano</div><div class="kpi-v">${cntNotif}</div></div>
+      <div class="kpi g"><div class="kpi-l">Eventa u kalendaru</div><div class="kpi-v">${events.length}</div></div>
+    </div>
+    <div class="card">
+      <div class="card-h">
+        <div class="card-t">📅 ${esc(monthName)}</div>
+        <div class="card-actions" style="display:flex;gap:6px;align-items:center">
+          <button class="btn sm" onclick="$('#content').innerHTML='<div class=loading>Učitavanje...</div>';renderKalendar({ym:'${prevYm}'}).then(h=>$('#content').innerHTML=h)">←</button>
+          <input type="month" value="${ym}" onchange="$('#content').innerHTML='<div class=loading>...</div>';renderKalendar({ym:this.value}).then(h=>$('#content').innerHTML=h)" style="background:var(--bg2);border:1px solid var(--rim);color:var(--t1);padding:4px 8px;border-radius:4px">
+          <button class="btn sm" onclick="$('#content').innerHTML='<div class=loading>Učitavanje...</div>';renderKalendar({ym:'${nextYm}'}).then(h=>$('#content').innerHTML=h)">→</button>
+          <button class="btn primary sm" onclick="fetch('/sport/api/crm/lijecnicki/notify-scan',{method:'POST',headers:{'Content-Type':'application/json'},body:'{}'}).then(r=>r.json()).then(d=>alert('Skenirano: '+d.created+' notifikacija kreirano'))">🔔 Scan isteke → notifikacije</button>
+        </div>
+      </div>
+      <div style="padding:14px">${grid}</div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">📋 Nadolazeći eventi (10)</div></div>
+      <table>
+        <thead><tr><th>Datum</th><th>Naziv</th><th>Lokacija/Klub</th><th>Tip</th></tr></thead>
+        <tbody>${upcomingHtml || '<tr><td colspan="4" class="empty">Nema nadolazećih eventa.</td></tr>'}</tbody>
+      </table>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">🔔 Aktivne InApp notifikacije (10)</div>
+        <div class="card-actions"><button class="btn sm" onclick="fetch('/sport/api/crm/notifications/mark-all-read',{method:'POST',headers:{'Content-Type':'application/json'},body:JSON.stringify({channel:'inapp'})}).then(r=>r.json()).then(d=>{alert('Označeno '+d.marked_read+' kao pročitano');loadSection();})">Označi sve pročitano</button></div>
+      </div>
+      <div style="padding:8px 14px">
+        ${notif.filter(n=>!n.read_at && n.channel==='inapp').slice(0,10).map(n => `
+          <div style="display:flex;gap:10px;align-items:start;padding:8px 0;border-bottom:1px solid var(--rim)">
+            <div style="font-size:18px">${n.subject.includes('ISTEKAO')?'⚠':'⚕'}</div>
+            <div style="flex:1">
+              <div style="font-weight:600;font-size:13px">${esc(n.subject)}</div>
+              <div style="font-size:11px;color:var(--t3);margin-top:2px">${esc((n.body||'').substring(0,140))}…</div>
+            </div>
+            <button class="btn sm" onclick="fetch('/sport/api/crm/notifications/${n.id}/read',{method:'POST'}).then(()=>loadSection())">✓</button>
+          </div>`).join('') || '<div class="empty">Nema neprocitanih notifikacija. Pokreni "Scan isteke" da generiraš nove.</div>'}
+      </div>
+    </div>
+  `;
+}
+
+SECTIONS['pgz:kalendar'] = renderKalendar;
+SECTIONS['savez:kalendar'] = renderKalendar;
+SECTIONS['klub:kalendar'] = renderKalendar;
+SECTIONS['sportas:kalendar'] = renderKalendar;
+
+SECTIONS['pgz:forenzika'] = () => `
+  <div class="card">
+    <div class="card-h"><div class="card-t">⚠ Forenzika — sumnjive transakcije</div></div>
+    ${MOCK.forenzika.map(f => `
+      <div class="alert-card ${f.sev==='crit'?'crit':''}">
+        <div class="at">${esc(f.title)}</div>
+        <div class="ad">${esc(f.desc)}</div>
+        <div style="margin-top:6px"><span class="tag ${f.sev==='crit'?'rd':'am'}">${esc(f.sev)}</span> <span class="tag">${esc(f.tip)}</span></div>
+      </div>`).join('')}
+  </div>`;
+
+// =======================================================================
+// SAVEZ ADMIN — Dashboard + sub-pages
+// =======================================================================
+SECTIONS['savez:dashboard'] = () => {
+  const klubHtml = MOCK.savez_klubovi.map(k => `
+    <div class="member-i">
+      <div class="av">${esc(k.naziv.substring(0,2).toUpperCase())}</div>
+      <div>
+        <div class="mn">${esc(k.naziv)}</div>
+        <div class="mp">${esc(k.grad)} · ${fmt(k.clanova)} članova</div>
+      </div>
+      <div class="mright">
+        ${k.alert?'<span class="tag am">⚠</span>':'<span class="tag gr">OK</span>'}
+      </div>
+    </div>`).join('');
+
+  return `
+    <div class="demo-banner">
+      <span style="font-size:18px">🏅</span>
+      <div><b>Savez admin view</b> — vidiš sve klubove i sportaše u svom savezu (Atletski savez PGŽ).</div>
+    </div>
+    <div class="kpi-grid">
+      <div class="kpi b click" onclick="navTo('klubovi')"><div class="kpi-l">Naših klubova</div><div class="kpi-v">12</div><div class="kpi-s">aktivnih</div></div>
+      <div class="kpi g click" onclick="navTo('sportasi')"><div class="kpi-l">Sportaša</div><div class="kpi-v">487</div><div class="kpi-s">registriranih</div></div>
+      <div class="kpi a click" onclick="navTo('zahtjevi')"><div class="kpi-l">Zahtjevi PGŽ</div><div class="kpi-v">3</div><div class="kpi-s">u obradi</div></div>
+      <div class="kpi r click" onclick="navTo('lijecnicki')"><div class="kpi-l">Liječnički ist.</div><div class="kpi-v">7</div><div class="kpi-s">do 30 dana</div></div>
+    </div>
+    <div class="row-2">
+      <div class="card">
+        <div class="card-h"><div class="card-t">⬢ Naši klubovi (12)</div><div class="card-actions"><button class="btn primary sm" onclick="navTo('klubovi')">Svi →</button></div></div>
+        ${klubHtml}
+      </div>
+      <div class="card">
+        <div class="card-h"><div class="card-t">📑 Naši zahtjevi PGŽ-u</div></div>
+        ${MOCK.savez_zahtjevi.map(z => `
+          <div class="req-i">
+            <div class="rh"><div class="rt">${esc(z.naziv)}</div>
+              <div><span class="tag ${z.tag}">${esc(z.status)}</span></div>
+            </div>
+            <div class="rmeta"><div>Iznos: <b>${fmtEur(z.iznos)}</b></div><div>Predano: ${esc(z.datum)}</div></div>
+          </div>`).join('')}
+      </div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">⚕ Liječnički pregledi koji ističu (uskoro)</div></div>
+      <table>
+        <thead><tr><th>Sportaš</th><th>Klub</th><th>Datum isteka</th><th>Dana do isteka</th><th></th></tr></thead>
+        <tbody>${MOCK.lijecnicki_uskoro.map(l => `<tr><td><b>${esc(l.ime)}</b></td><td>${esc(l.klub)}</td><td>${esc(l.datum)}</td><td><span class="tag am">${l.dana} dana</span></td><td><button class="btn sm">Zakazat ZZJZ</button></td></tr>`).join('')}</tbody>
+      </table>
+    </div>`;
+};
+
+SECTIONS['savez:klubovi'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">⬢ Klubovi Atletskog saveza PGŽ (12)</div></div>
+  <table><thead><tr><th>Klub</th><th>Grad</th><th class="num">Članova</th><th>Predsjednik</th><th>Status</th></tr></thead>
+  <tbody>${MOCK.savez_klubovi_full.map(k => `<tr><td><b>${esc(k.naziv)}</b></td><td>${esc(k.grad)}</td><td class="num">${fmt(k.clanova)}</td><td>${esc(k.predsjednik)}</td><td>${k.alert?'<span class="tag am">⚠ Liječnički</span>':'<span class="tag gr">OK</span>'}</td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['savez:sportasi'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">👤 Naši sportaši (487)</div></div>
+  <div class="kpi-grid">
+    <div class="kpi"><div class="kpi-l">Senior</div><div class="kpi-v">142</div></div>
+    <div class="kpi b"><div class="kpi-l">Juniori</div><div class="kpi-v">98</div></div>
+    <div class="kpi g"><div class="kpi-l">Mladi</div><div class="kpi-v">156</div></div>
+    <div class="kpi a"><div class="kpi-l">Reprezent.</div><div class="kpi-v">22</div></div>
+  </div>
+  <table><thead><tr><th>Ime i prezime</th><th>Klub</th><th>Disciplina</th><th>Kategorija</th><th>Liječnički</th></tr></thead>
+  <tbody>${MOCK.savez_sportasi.map(s => `<tr><td><b>${esc(s.ime)}</b></td><td>${esc(s.klub)}</td><td>${esc(s.disciplina)}</td><td><span class="tag b">${esc(s.kat)}</span></td><td>${s.lijecnicki==='ok'?'<span class="tag gr">OK</span>':'<span class="tag am">istek</span>'}</td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['savez:zahtjevi'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📑 Naši zahtjevi za sufinanciranje</div><div class="card-actions"><button class="btn primary">+ Novi zahtjev</button></div></div>
+  ${MOCK.savez_zahtjevi.concat(MOCK.savez_zahtjevi_more).map(z => `
+    <div class="req-i">
+      <div class="rh"><div><div class="rt">${esc(z.naziv)}</div><div class="rsum">${esc(z.svrha||'')}</div></div>
+      <div><span class="tag ${z.tag}">${esc(z.status)}</span></div></div>
+      <div class="rmeta"><div>Iznos: <b>${fmtEur(z.iznos)}</b></div><div>Predano: ${esc(z.datum)}</div></div>
+    </div>`).join('')}
+  </div>`;
+
+SECTIONS['savez:kalendar'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📅 Kalendar manifestacija — Svibanj 2026</div></div>
+  <div class="cal-grid">
+    ${'PON UTO SRI ČET PET SUB NED'.split(' ').map(h => `<div class="cal-h">${h}</div>`).join('')}
+    ${[...Array(31)].map((_,i) => {
+      const day = i+1;
+      const ev = [4,11,18,25,9,16,30].includes(day);
+      const today = day===5;
+      return `<div class="cal-d ${today?'t':''} ${ev?'has-event':''}"><b>${day}</b>${ev?`<div style="font-size:9px;color:var(--pgz-gold);margin-top:2px">Trening / utakmica</div>`:''}</div>`;
+    }).join('')}
+  </div>
+  <div style="margin-top:14px;font-size:11px;color:var(--t2)">● Trening kamp Platak (4–6.5) · ● Liga PGŽ atletika (11.5) · ● Open senior (18.5) · ● Memorijalna utrka (25.5)</div>
+  </div>`;
+
+SECTIONS['savez:lijecnicki'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">⚕ Liječnički pregledi članova saveza</div><div class="card-actions"><button class="btn primary">📅 Bulk ZZJZ rezervacija</button></div></div>
+  <div class="kpi-grid">
+    <div class="kpi g"><div class="kpi-l">Validni</div><div class="kpi-v">468</div></div>
+    <div class="kpi a"><div class="kpi-l">Uskoro istek</div><div class="kpi-v">7</div></div>
+    <div class="kpi r"><div class="kpi-l">Istekli</div><div class="kpi-v">12</div></div>
+  </div>
+  <table><thead><tr><th>Sportaš</th><th>Klub</th><th>Vrijedi do</th><th>Doktor</th><th>Status</th><th></th></tr></thead>
+  <tbody>${MOCK.lijecnicki_uskoro.map(l => `<tr><td><b>${esc(l.ime)}</b></td><td>${esc(l.klub)}</td><td>${esc(l.datum)}</td><td>${esc(l.doktor||'Dr. Marković')}</td><td><span class="tag am">${l.dana} dana</span></td><td><button class="btn sm">Zakaži</button></td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['savez:racuni'] = SECTIONS['pgz:racuni'];
+
+// =======================================================================
+// KLUB ADMIN — Dashboard + sub-pages
+// =======================================================================
+SECTIONS['klub:dashboard'] = () => {
+  return `
+    <div class="demo-banner">
+      <span style="font-size:18px">⬢</span>
+      <div><b>Klub admin view</b> — AK Kvarner Rijeka. Upravljaš članstvom, plaćanjima i dokumentima.</div>
+    </div>
+    <div class="kpi-grid">
+      <div class="kpi b click" onclick="navTo('clanovi')"><div class="kpi-l">Članova</div><div class="kpi-v">87</div><div class="kpi-s">aktivnih</div><span class="kpi-trend up">+4 ovaj mjesec</span></div>
+      <div class="kpi g click" onclick="navTo('clanarine')"><div class="kpi-l">Naplaćeno</div><div class="kpi-v">${fmtEur(2840)}</div><div class="kpi-s">članarine 2026</div></div>
+      <div class="kpi r click" onclick="navTo('clanarine')"><div class="kpi-l">Dug</div><div class="kpi-v">${fmtEur(420)}</div><div class="kpi-s">7 članova</div></div>
+      <div class="kpi a click" onclick="navTo('lijecnicki')"><div class="kpi-l">Liječnički istek</div><div class="kpi-v">3</div><div class="kpi-s">do 30 dana</div></div>
+      <div class="kpi c click" onclick="navTo('lijecnicki')"><div class="kpi-l">Validni liječ.</div><div class="kpi-v">82</div><div class="kpi-s">aktivnih</div></div>
+      <div class="kpi click" onclick="navTo('manifestacije')"><div class="kpi-l">Manifest.</div><div class="kpi-v">5</div><div class="kpi-s">nadolazeće</div></div>
+    </div>
+
+    <div class="row-2">
+      <div class="card">
+        <div class="card-h"><div class="card-t">👥 Najnoviji članovi</div><div class="card-actions"><button class="btn primary sm" onclick="navTo('clanovi')">Svi →</button></div></div>
+        ${MOCK.klub_clanovi.slice(0,6).map(c => `
+          <div class="member-i">
+            <div class="av">${esc((c.ime[0]+(c.prezime?c.prezime[0]:'')).toUpperCase())}</div>
+            <div>
+              <div class="mn">${esc(c.ime+' '+c.prezime)}</div>
+              <div class="mp">${esc(c.kat)} · ${esc(c.discipline||'Trčanje')}</div>
+            </div>
+            <div class="mright">
+              ${c.dug?'<span class="tag rd">Dug</span>':'<span class="tag gr">€ OK</span>'}
+              ${c.lijecnicki==='istek'?'<span class="tag am">⚕ istek</span>':''}
+            </div>
+          </div>`).join('')}
+      </div>
+      <div class="card">
+        <div class="card-h"><div class="card-t">⚡ Brze akcije</div></div>
+        <div style="display:grid;gap:8px">
+          <button class="btn primary" onclick="navTo('clanovi')">+ Dodaj člana</button>
+          <button class="btn gold" onclick="navTo('racuni')">🧾 Skeniraj račun (OCR)</button>
+          <button class="btn" onclick="navTo('clanarine')">€ Članarine + HUB-3</button>
+          <button class="btn" onclick="navTo('lijecnicki')">⚕ Liječnički bulk ZZJZ</button>
+          <button class="btn" onclick="alert('Obrazac sufinanciranja — M9')">📑 Predaj zahtjev PGŽ</button>
+        </div>
+      </div>
+    </div>
+    <div class="row-2">
+      <div class="card">
+        <div class="card-h"><div class="card-t">⚕ Pregledi koji uskoro ističu</div></div>
+        ${MOCK.klub_lijecnicki.filter(l => l.uskoro).slice(0,4).map(l => `
+          <div class="alert-card">
+            <div class="at">${esc(l.ime)}</div>
+            <div class="ad">Vrijedi do: <b>${esc(l.datum)}</b> · ${esc(l.dana)} dana preostaje</div>
+          </div>`).join('') || '<div class="empty">Svi pregledi su važeći ✓</div>'}
+      </div>
+      <div class="card">
+        <div class="card-h"><div class="card-t">📅 Nadolazeće manifestacije</div></div>
+        ${MOCK.klub_manifestacije.map(m => `
+          <div class="alert-card ok">
+            <div class="at">${esc(m.naziv)}</div>
+            <div class="ad">${esc(m.datum)} · ${esc(m.lokacija)} · ${esc(m.tip)}</div>
+          </div>`).join('')}
+      </div>
+    </div>`;
+};
+
+SECTIONS['klub:clanovi'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">👥 Članovi AK Kvarner Rijeka (87)</div>
+    <div class="card-actions"><button class="btn primary">+ Dodaj člana</button></div></div>
+  <table><thead><tr><th>Ime</th><th>Kategorija</th><th>Disciplina</th><th>Članarina</th><th>Liječnički</th><th>Datum upisa</th></tr></thead>
+  <tbody>${MOCK.klub_clanovi.map(c => `<tr><td><b>${esc(c.ime+' '+c.prezime)}</b></td><td><span class="tag b">${esc(c.kat)}</span></td><td>${esc(c.discipline||'—')}</td><td>${c.dug?'<span class="tag rd">Dug</span>':'<span class="tag gr">Plaćeno</span>'}</td><td>${c.lijecnicki==='istek'?'<span class="tag am">istek</span>':'<span class="tag gr">OK</span>'}</td><td>${esc(c.upisan||'2024-09-01')}</td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['klub:clanarine'] = () => `
+  <div style="margin-bottom:10px"><a href="/crm" target="_blank" class="btn primary" style="text-decoration:none">📋 Otvori live CRM (HUB-3 PDF + EPC QR generator)</a></div>
+  <div class="row-2">
+    <div class="card"><div class="card-h"><div class="card-t">€ Članarine 2026</div></div>
+    <div class="kpi-grid"><div class="kpi g"><div class="kpi-l">Plaćeno</div><div class="kpi-v">80</div></div><div class="kpi r"><div class="kpi-l">Dug</div><div class="kpi-v">7</div></div></div>
+    <button class="btn primary">📧 Pošalji notifikaciju (7 dužnika)</button>
+    </div>
+    <div class="card"><div class="card-h"><div class="card-t">📄 HUB-3 uplatnica + EPC QR</div></div>
+    <div style="background:var(--bg3);border:1px solid var(--rim);border-radius:6px;padding:12px;font-family:var(--mono);font-size:11px">
+    IBAN: HR1234567890123456789<br>
+    Iznos: 60,00 EUR<br>
+    Poziv na broj: HR00 2026-{clan_id}<br>
+    Opis: Članarina 2026
+    </div>
+    <button class="btn gold" style="margin-top:10px">📥 Generiraj PDF</button> <button class="btn">📱 EPC QR (mobile banking)</button>
+    </div>
+  </div>
+  <div class="card"><div class="card-h"><div class="card-t">📋 Sve članarine</div></div>
+  <table><thead><tr><th>Član</th><th>Godina</th><th class="num">Iznos</th><th>Dospijeće</th><th>Datum uplate</th><th>Status</th></tr></thead>
+  <tbody>${MOCK.klub_clanarine.map(c => `<tr><td>${esc(c.clan)}</td><td>${esc(c.god)}</td><td class="num">${fmtEur(c.iznos)}</td><td>${esc(c.dosp)}</td><td>${esc(c.uplata||'—')}</td><td>${c.status==='OK'?'<span class="tag gr">OK</span>':'<span class="tag rd">Dug</span>'}</td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['klub:lijecnicki'] = () => `
+  <div style="margin-bottom:10px"><a href="/crm" target="_blank" class="btn primary" style="text-decoration:none">⚕ Otvori live CRM — pregledi + ZZJZ PGŽ scheduling</a></div>
+  <div class="card"><div class="card-h"><div class="card-t">⚕ Liječnički pregledi članova</div>
+  <div class="card-actions"><button class="btn primary">📅 Bulk ZZJZ termini</button></div></div>
+  <table><thead><tr><th>Član</th><th>Datum pregleda</th><th>Vrijedi do</th><th>Doktor</th><th>Status</th><th></th></tr></thead>
+  <tbody>${MOCK.klub_lijecnicki.map(l => `<tr><td><b>${esc(l.ime)}</b></td><td>${esc(l.pregled)}</td><td>${esc(l.datum)}</td><td>${esc(l.doktor||'Dr. Marković')}</td><td>${l.uskoro?'<span class="tag am">uskoro</span>':l.istekao?'<span class="tag rd">istekao</span>':'<span class="tag gr">OK</span>'}</td><td><button class="btn sm">PDF</button></td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['klub:dokumenti'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📄 Dokumenti kluba</div><div class="card-actions"><button class="btn primary">+ Upload</button></div></div>
+  <table><thead><tr><th>Naziv</th><th>Vrsta</th><th>Datum</th><th>Veličina</th><th></th></tr></thead>
+  <tbody>${MOCK.klub_dokumenti.map(d => `<tr><td><b>${esc(d.naziv)}</b></td><td><span class="tag b">${esc(d.vrsta)}</span></td><td>${esc(d.datum)}</td><td>${esc(d.size)}</td><td><button class="btn sm">📥</button></td></tr>`).join('')}</tbody></table>
+  </div>`;
+
+SECTIONS['klub:manifestacije'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📅 Manifestacije</div></div>
+  ${MOCK.klub_manifestacije.concat([{naziv:'Kros u Krašu',datum:'2026-06-12',lokacija:'Krk',tip:'utakmica'},{naziv:'Trening kamp Platak',datum:'2026-07-04',lokacija:'Platak',tip:'priprema'}]).map(m => `
+    <div class="alert-card ok">
+      <div class="at">${esc(m.naziv)}</div>
+      <div class="ad">${esc(m.datum)} · ${esc(m.lokacija)} · ${esc(m.tip)}</div>
+    </div>`).join('')}
+  </div>`;
+
+SECTIONS['klub:racuni'] = SECTIONS['pgz:racuni'];
+
+// =======================================================================
+// SPORTAŠ — Dashboard + sub-pages
+// =======================================================================
+SECTIONS['sportas:dashboard'] = () => `
+  <div class="demo-banner">
+    <span style="font-size:18px">👤</span>
+    <div><b>Sportaš view</b> — Luka Horvat. Vidiš samo svoje podatke i obrasce za potpis.</div>
+  </div>
+  <div class="row-3">
+    <div>
+      <div class="card profile-card">
+        <div class="profile-photo" onclick="alert('Upload nove slike profila')">LH</div>
+        <div class="profile-info">
+          <h2>Luka Horvat</h2>
+          <div class="sub">AK Kvarner Rijeka · Atletika · Trčanje 800m / 1500m</div>
+          <div class="tags-row">
+            <span class="tag b">Senior</span>
+            <span class="tag gd">Reprezentativac</span>
+            <span class="tag gr">Aktivan</span>
+          </div>
+          <div class="kv">
+            <div class="k">OIB</div><div class="v">12345678901</div>
+            <div class="k">Datum rođenja</div><div class="v">1998-03-14 (28 god)</div>
+            <div class="k">Email</div><div class="v">luka.horvat@example.hr</div>
+            <div class="k">Telefon</div><div class="v">+385 91 234 5678</div>
+            <div class="k">Trener</div><div class="v">Igor Tomić</div>
+          </div>
+        </div>
+      </div>
+      <div class="card">
+        <div class="card-h"><div class="card-t">🏆 Moje statistike 2026</div></div>
+        <div class="kpi-grid">
+          <div class="kpi"><div class="kpi-l">Treninzi</div><div class="kpi-v">156</div></div>
+          <div class="kpi b"><div class="kpi-l">Utakmice</div><div class="kpi-v">12</div></div>
+          <div class="kpi g"><div class="kpi-l">Pobjede</div><div class="kpi-v">8</div></div>
+          <div class="kpi a"><div class="kpi-l">PB 800m</div><div class="kpi-v">1:48.3</div></div>
+        </div>
+      </div>
+    </div>
+    <div>
+      <div class="card click-card" onclick="navTo('clanarina')">
+        <div class="card-h"><div class="card-t">€ Moja članarina</div><div class="card-actions"><span class="tag b">Detalji →</span></div></div>
+        <div class="alert-card ok">
+          <div class="at">2026 · Plaćeno ✓</div>
+          <div class="ad">Iznos: <b>60,00 €</b> · Datum uplate: 2026-01-15 · IBAN HR12...789</div>
+        </div>
+      </div>
+      <div class="card click-card" onclick="navTo('lijecnicki')">
+        <div class="card-h"><div class="card-t">⚕ Liječnički pregled</div><div class="card-actions"><span class="tag b">Detalji →</span></div></div>
+        <div class="alert-card">
+          <div class="at">⚠ Vrijedi do 2026-08-15 (103 dana)</div>
+          <div class="ad">Doktor: Dr. Marković · ZZJZ PGŽ</div>
+        </div>
+      </div>
+      <div class="card click-card" onclick="navTo('obrasci')">
+        <div class="card-h"><div class="card-t">📝 Obrasci za potpis</div><div class="card-actions"><span class="tag am">1 čeka</span></div></div>
+        <div class="alert-card crit">
+          <div class="at">GDPR suglasnost 2026</div>
+          <div class="ad">Potrebno potpisati do 2026-06-01 — klik za potpisivanje</div>
+        </div>
+      </div>
+    </div>
+  </div>`;
+
+SECTIONS['sportas:clanarina'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">€ Moja članarina</div></div>
+  <table><thead><tr><th>Godina</th><th class="num">Iznos</th><th>Dospijeće</th><th>Uplata</th><th>Status</th><th></th></tr></thead>
+  <tbody>
+    <tr><td>2026</td><td class="num">${fmtEur(60)}</td><td>2026-01-31</td><td>2026-01-15</td><td><span class="tag gr">Plaćeno</span></td><td><button class="btn sm">PDF</button></td></tr>
+    <tr><td>2025</td><td class="num">${fmtEur(60)}</td><td>2025-01-31</td><td>2025-01-22</td><td><span class="tag gr">Plaćeno</span></td><td><button class="btn sm">PDF</button></td></tr>
+    <tr><td>2024</td><td class="num">${fmtEur(50)}</td><td>2024-01-31</td><td>2024-02-04</td><td><span class="tag gr">Plaćeno</span></td><td><button class="btn sm">PDF</button></td></tr>
+  </tbody></table>
+  </div>`;
+
+SECTIONS['sportas:lijecnicki'] = () => `
+  <div style="margin-bottom:10px"><a href="/crm" target="_blank" class="btn primary" style="text-decoration:none">⚕ Otvori live CRM — pregledi + ZZJZ PGŽ scheduling</a></div>`+`
+  <div class="card"><div class="card-h"><div class="card-t">⚕ Moji liječnički pregledi</div></div>
+  <div class="alert-card">
+    <div class="at">⚠ Trenutni: vrijedi do 2026-08-15 (103 dana)</div>
+    <div class="ad">Doktor: Dr. Marković · ZZJZ PGŽ Rijeka · Sportska medicina</div>
+  </div>
+  <div style="margin-top:14px;padding:14px;background:var(--bg3);border-radius:6px">
+    <div style="font-weight:700;color:var(--t0);margin-bottom:8px">📅 Zakazivanje preko ZZJZ PGŽ</div>
+    <div style="font-size:11.5px;color:var(--t2);margin-bottom:10px">Na raspolaganju imaš online termin u ZZJZ PGŽ Rijeka. Cijena pregleda: 35 €.</div>
+    <button class="btn primary" onclick="window.open('https://zzjzpgz.hr/','_blank')">🌐 Otvori ZZJZ PGŽ portal</button>
+    <button class="btn gold" style="margin-left:6px">📅 Zakaži termin</button>
+  </div>
+  <div style="margin-top:14px"><h4 style="font-size:12px;color:var(--t2);text-transform:uppercase;margin-bottom:8px">Povijest pregleda</h4>
+  <table><thead><tr><th>Datum</th><th>Doktor</th><th>Vrijedi do</th><th>Status</th><th></th></tr></thead>
+  <tbody>
+    <tr><td>2025-08-15</td><td>Dr. Marković</td><td>2026-08-15</td><td><span class="tag gr">aktivan</span></td><td><button class="btn sm">PDF</button></td></tr>
+    <tr><td>2024-08-12</td><td>Dr. Marković</td><td>2025-08-12</td><td><span class="tag">istekao</span></td><td><button class="btn sm">PDF</button></td></tr>
+  </tbody></table></div>
+  </div>`;
+
+SECTIONS['sportas:dokumenti'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📄 Moji dokumenti</div></div>
+  <table><thead><tr><th>Dokument</th><th>Vrsta</th><th>Datum</th><th>Status</th><th></th></tr></thead>
+  <tbody>
+    <tr><td><b>GDPR suglasnost 2026</b></td><td><span class="tag b">Pravni</span></td><td>—</td><td><span class="tag am">Treba potpis</span></td><td><button class="btn sm primary">Potpiši</button></td></tr>
+    <tr><td><b>Ugovor članstvo 2026</b></td><td><span class="tag b">Ugovor</span></td><td>2026-01-15</td><td><span class="tag gr">Potpisan</span></td><td><button class="btn sm">📥</button></td></tr>
+    <tr><td><b>Suglasnost roditelja (2024)</b></td><td><span class="tag b">Pravni</span></td><td>2024-09-01</td><td><span class="tag gr">Arhivirano</span></td><td><button class="btn sm">📥</button></td></tr>
+    <tr><td><b>Liječnički certifikat 2025</b></td><td><span class="tag cy">Medicinski</span></td><td>2025-08-15</td><td><span class="tag gr">Validan</span></td><td><button class="btn sm">📥</button></td></tr>
+  </tbody></table>
+  </div>`;
+
+SECTIONS['sportas:obrasci'] = () => `
+  <div style="margin-bottom:10px"><a href="/crm" target="_blank" class="btn primary" style="text-decoration:none">📝 Otvori live obrasce — popuni i digitalno potpiši</a></div>
+  <div class="card"><div class="card-h"><div class="card-t">📝 Obrasci za potpis</div></div>
+  <div class="alert-card crit">
+    <div class="at">GDPR suglasnost 2026 — obvezno do 2026-06-01</div>
+    <div class="ad">Klikom potpisuješ digitalno (sha256 + timestamp) — pohrana u blockchain audit (Polygon)</div>
+    <div style="margin-top:8px"><button class="btn primary">📝 Otvori i potpiši</button></div>
+  </div>
+  <div class="alert-card ok">
+    <div class="at">✓ Suglasnost na obradu osobnih podataka — POTPISANO</div>
+    <div class="ad">Datum: 2026-01-15 · sha256: a3f2...b9d1</div>
+  </div>
+  <div class="alert-card ok">
+    <div class="at">✓ Pristanak na sudjelovanje — POTPISANO</div>
+    <div class="ad">Datum: 2026-01-15 · sha256: 9c1d...4e8a</div>
+  </div>
+  </div>`;
+
+SECTIONS['sportas:manifestacije'] = () => `
+  <div class="card"><div class="card-h"><div class="card-t">📅 Moje manifestacije / aktivnosti</div></div>
+  ${MOCK.klub_manifestacije.map(m => `
+    <div class="alert-card ok">
+      <div class="at">${esc(m.naziv)}</div>
+      <div class="ad">${esc(m.datum)} · ${esc(m.lokacija)} · ${esc(m.tip)} · <b>Prijavljen ✓</b></div>
+    </div>`).join('')}
+  </div>`;
+
+//=========== MOCK DATA ===========
+const MOCK = {
+  zahtjevi_pending: [
+    {id:'Z-2026-0142', naziv:'Sufinanciranje pripremnog kampa Platak', savez:'Atletski savez PGŽ', svrha:'Pripreme za HR ligu seniora', iznos:18500, datum:'2026-04-22', status:'U obradi', klub:'AK Kvarner'},
+    {id:'Z-2026-0143', naziv:'Nabavka opreme — boćalište Krk', savez:'Bočarski savez PGŽ', svrha:'Renoviranje boćališta i nabavka opreme', iznos:42000, datum:'2026-04-19', status:'Čeka odluku', klub:'BK Krk'},
+    {id:'Z-2026-0144', naziv:'Sufinanciranje atletske staze', savez:'Atletski savez PGŽ', svrha:'Sanacija sintetičke staze Kantrida', iznos:120000, datum:'2026-04-15', status:'Pregled', klub:'—'},
+    {id:'Z-2026-0145', naziv:'Mladi nogometni kamp Lovran', savez:'Nogometni savez PGŽ', svrha:'Ljetne pripreme U-15 reprezentacije', iznos:28000, datum:'2026-04-10', status:'U obradi', klub:'NK Mladost'},
+    {id:'Z-2026-0146', naziv:'Memorijalna utrka Liburnija 2026', savez:'Atletski savez PGŽ', svrha:'Organizacija utrke + medalje', iznos:7800, datum:'2026-04-05', status:'Pregled', klub:'AK Liburnija'},
+  ],
+  audit: [
+    {ts:'00:08:31', who:'damir@pgz.hr',  what:'Odobrio zahtjev <b>Z-2026-0141</b> · 12 500 €'},
+    {ts:'23:54:12', who:'marija@asav.hr', what:'Predala zahtjev <b>Z-2026-0146</b> (Liburnija)'},
+    {ts:'23:42:08', who:'igor@kvarner.hr',what:'Dodao člana <b>Luka Horvat</b> (AK Kvarner)'},
+    {ts:'23:18:55', who:'damir@pgz.hr',  what:'Pristup forenzika dashboardu'},
+    {ts:'22:51:44', who:'system',         what:'Auto-scan forenzika: <b>2 nova alerta</b>'},
+    {ts:'22:14:17', who:'marija@asav.hr', what:'Login (2FA OK · IP 89.172.34.12)'},
+  ],
+  audit_more: [
+    {ts:'21:02:08', who:'damir@pgz.hr',   what:'Odbio zahtjev <b>Z-2026-0140</b> (nepotpuna dokumentacija)'},
+    {ts:'20:48:31', who:'sistema',         what:'Backup DB → S3 · 1.2 GB'},
+    {ts:'19:55:44', who:'igor@kvarner.hr', what:'Uplata članarine: <b>Marko M.</b> · 60 €'},
+    {ts:'19:21:09', who:'damir@pgz.hr',   what:'Kreirao novog savez admina: <b>petar@bsav.hr</b>'},
+    {ts:'18:33:21', who:'system',          what:'Polygon seal TX <b>0xAFE9...4D2</b> · zahtjev Z-2026-0141'},
+    {ts:'17:50:00', who:'luka@kvarner.hr', what:'Potpisao GDPR obrazac (sha256 a3f2...b9d1)'},
+  ],
+  korisnici: [
+    {ime:'Damir Radulić',     email:'damir@pgz.hr',     role:'pgz_admin',   tenant:'PGŽ Odjel za sport', status:'aktivan', last_login:'00:08'},
+    {ime:'Marija Kovač',      email:'marija@asav.hr',   role:'savez_admin', tenant:'Atletski savez PGŽ', status:'aktivan', last_login:'22:14'},
+    {ime:'Petar Babić',       email:'petar@bsav.hr',    role:'savez_admin', tenant:'Bočarski savez PGŽ', status:'aktivan', last_login:'19:21'},
+    {ime:'Igor Tomić',        email:'igor@kvarner.hr',  role:'klub_admin',  tenant:'AK Kvarner Rijeka',  status:'aktivan', last_login:'23:42'},
+    {ime:'Iva Šimić',         email:'iva@krk.hr',       role:'klub_admin',  tenant:'BK Krk',             status:'aktivan', last_login:'2026-05-03'},
+    {ime:'Luka Horvat',       email:'luka@kvarner.hr',  role:'klub_clan',   tenant:'AK Kvarner Rijeka',  status:'aktivan', last_login:'17:50'},
+    {ime:'Tomislav Vrbanić',  email:'tom@nsav.hr',      role:'savez_admin', tenant:'Nogometni savez PGŽ',status:'aktivan', last_login:'2026-05-04'},
+    {ime:'Dora Pavić',        email:'dora@stari.hr',    role:'klub_clan',   tenant:'AK Liburnija',       status:'suspended', last_login:'2026-04-12'},
+  ],
+  invoices: [
+    {datum:'2026-05-04', izdavatelj:'INA d.d.',   oib:'27759560625', vrsta:'Gorivo',     tag:'b',  iznos:84.50, status:'Odobreno'},
+    {datum:'2026-05-03', izdavatelj:'HAC d.o.o.', oib:'81117323553', vrsta:'Cestarina',  tag:'b',  iznos:18.20, status:'Odobreno'},
+    {datum:'2026-05-02', izdavatelj:'Hotel Kvarner',oib:'09320229884',vrsta:'Hotel',     tag:'gd', iznos:215.00,status:'Odobreno'},
+    {datum:'2026-05-01', izdavatelj:'Tifon d.o.o.',oib:'70289916717',vrsta:'Gorivo',     tag:'b',  iznos:62.40, status:'Odobreno'},
+    {datum:'2026-04-29', izdavatelj:'Konzum',     oib:'29955634590', vrsta:'Pribor',     tag:'cy', iznos:45.10, status:'U obradi'},
+    {datum:'2026-04-28', izdavatelj:'Restoran Trsat',oib:'82001112300',vrsta:'Dnevnice',tag:'gd', iznos:96.00, status:'Odobreno'},
+  ],
+  forenzika: [
+    {sev:'crit',title:'PEP match — Velimir Liverić',desc:'Možda javna osoba; veza s NK X kao predsjednik. Provjeri OIB i transakcije.',tip:'PEP'},
+    {sev:'crit',title:'Velika gotovinska transakcija — KKK Rijeka',desc:'Iznos 12 500 € označen kao "ostalo" bez računa.',tip:'Cash'},
+    {sev:'warn',title:'Duplicirana isplata — Z-2026-0089',desc:'Isti iznos isplaćen dva puta unutar 24h iste organizacije.',tip:'Duplicate'},
+    {sev:'warn',title:'OIB ne odgovara — Sudreg',desc:'OIB u zahtjevu se ne podudara s registriranim u Sudreg.',tip:'Validation'},
+  ],
+  // SAVEZ
+  savez_klubovi: [
+    {naziv:'AK Kvarner Rijeka',grad:'Rijeka',clanova:87,alert:false},
+    {naziv:'AK Liburnija',grad:'Opatija',clanova:54,alert:true},
+    {naziv:'AK Senj',grad:'Senj',clanova:32,alert:false},
+    {naziv:'AK Krk',grad:'Krk',clanova:28,alert:false},
+    {naziv:'AK Cres-Lošinj',grad:'Mali Lošinj',clanova:21,alert:false},
+    {naziv:'AK Crikvenica',grad:'Crikvenica',clanova:35,alert:true},
+  ],
+  savez_klubovi_full: [
+    {naziv:'AK Kvarner Rijeka',grad:'Rijeka',clanova:87,predsjednik:'Igor Tomić',alert:false},
+    {naziv:'AK Liburnija',grad:'Opatija',clanova:54,predsjednik:'Marin Babić',alert:true},
+    {naziv:'AK Senj',grad:'Senj',clanova:32,predsjednik:'Jelena Vukšić',alert:false},
+    {naziv:'AK Krk',grad:'Krk',clanova:28,predsjednik:'Boris Frankopan',alert:false},
+    {naziv:'AK Cres-Lošinj',grad:'Mali Lošinj',clanova:21,predsjednik:'Pavao Lupis',alert:false},
+    {naziv:'AK Crikvenica',grad:'Crikvenica',clanova:35,predsjednik:'Ines Salopek',alert:true},
+    {naziv:'AK Mladost Rab',grad:'Rab',clanova:18,predsjednik:'Dario Garić',alert:false},
+    {naziv:'AK Vinodol',grad:'Novi Vinodolski',clanova:24,predsjednik:'Ivan Crnković',alert:false},
+    {naziv:'AK Klanjac',grad:'Klanjac',clanova:14,predsjednik:'Marija Tomić',alert:false},
+    {naziv:'AK Drenova',grad:'Rijeka',clanova:42,predsjednik:'Hrvoje Pavić',alert:false},
+    {naziv:'AK Marathonas',grad:'Rijeka',clanova:67,predsjednik:'Robert Šimun',alert:false},
+    {naziv:'AK Riječki vihor',grad:'Rijeka',clanova:65,predsjednik:'Anita Lučić',alert:true},
+  ],
+  savez_zahtjevi: [
+    {naziv:'Sufinanciranje pripremnog kampa Platak',svrha:'HR liga seniora',status:'U obradi',tag:'am',iznos:18500,datum:'2026-04-22'},
+    {naziv:'Memorijalna utrka Liburnija 2026',svrha:'Organizacija utrke',status:'Pregled',tag:'b',iznos:7800,datum:'2026-04-05'},
+    {naziv:'Sufinanciranje atletske staze Kantrida',svrha:'Sanacija staze',status:'Pregled',tag:'b',iznos:120000,datum:'2026-04-15'},
+  ],
+  savez_zahtjevi_more: [
+    {naziv:'Trening kamp mladi Krk 2026',svrha:'Ljetne pripreme U-15',status:'Odobreno',tag:'gr',iznos:14200,datum:'2026-03-12'},
+    {naziv:'Open senior atletika Rijeka',svrha:'Organizacija mitinga',status:'Odobreno',tag:'gr',iznos:9500,datum:'2026-02-28'},
+    {naziv:'Kros Klanjac 2025',svrha:'Tradicijska utrka',status:'Odbijeno',tag:'rd',iznos:3200,datum:'2025-09-15'},
+  ],
+  savez_sportasi: [
+    {ime:'Luka Horvat',klub:'AK Kvarner',disciplina:'800m',kat:'Senior',lijecnicki:'ok'},
+    {ime:'Marko Marić',klub:'AK Kvarner',disciplina:'1500m',kat:'Senior',lijecnicki:'istek'},
+    {ime:'Petra Knežević',klub:'AK Liburnija',disciplina:'200m',kat:'Junior',lijecnicki:'ok'},
+    {ime:'Iva Tomić',klub:'AK Krk',disciplina:'Daljina',kat:'Mladi',lijecnicki:'ok'},
+    {ime:'Marin Crnković',klub:'AK Senj',disciplina:'Skok uvis',kat:'Senior',lijecnicki:'ok'},
+    {ime:'Sanja Vukšić',klub:'AK Drenova',disciplina:'400m H',kat:'Senior',lijecnicki:'istek'},
+    {ime:'Damir Babić',klub:'AK Marathonas',disciplina:'Maraton',kat:'Senior',lijecnicki:'ok'},
+    {ime:'Klara Pavić',klub:'AK Riječki vihor',disciplina:'Kugla',kat:'Junior',lijecnicki:'ok'},
+  ],
+  lijecnicki_uskoro: [
+    {ime:'Marko Marić',klub:'AK Kvarner',datum:'2026-05-22',dana:18,doktor:'Dr. Marković'},
+    {ime:'Sanja Vukšić',klub:'AK Drenova',datum:'2026-05-28',dana:24,doktor:'Dr. Pavlović'},
+    {ime:'Iva Šimić',klub:'AK Liburnija',datum:'2026-06-02',dana:29,doktor:'Dr. Marković'},
+    {ime:'Tomislav Pranjić',klub:'AK Crikvenica',datum:'2026-06-04',dana:31,doktor:'Dr. Marković'},
+  ],
+  // KLUB
+  klub_clanovi: [
+    {ime:'Luka', prezime:'Horvat',  kat:'Senior', discipline:'800m / 1500m', dug:false, lijecnicki:'ok',     upisan:'2024-09-01'},
+    {ime:'Marko',prezime:'Marić',   kat:'Senior', discipline:'1500m',         dug:false, lijecnicki:'istek',  upisan:'2023-09-12'},
+    {ime:'Ivan', prezime:'Babić',   kat:'Junior', discipline:'400m',          dug:true,  lijecnicki:'ok',     upisan:'2025-03-04'},
+    {ime:'Petra',prezime:'Knežević',kat:'Junior', discipline:'200m',          dug:false, lijecnicki:'ok',     upisan:'2024-04-22'},
+    {ime:'Iva',  prezime:'Tomić',   kat:'Mladi',  discipline:'Daljina',       dug:false, lijecnicki:'ok',     upisan:'2026-02-15'},
+    {ime:'Sara', prezime:'Lučić',   kat:'Mladi',  discipline:'100m',          dug:true,  lijecnicki:'ok',     upisan:'2026-03-11'},
+    {ime:'Mateo',prezime:'Crnković',kat:'Senior', discipline:'Maraton',       dug:false, lijecnicki:'ok',     upisan:'2022-08-30'},
+    {ime:'Dora', prezime:'Pavić',   kat:'Junior', discipline:'400m H',        dug:false, lijecnicki:'istek',  upisan:'2024-09-15'},
+    {ime:'Filip',prezime:'Šimić',   kat:'Senior', discipline:'Kugla',         dug:true,  lijecnicki:'ok',     upisan:'2023-10-01'},
+    {ime:'Ana',  prezime:'Vrbanić', kat:'Mladi',  discipline:'Daljina',       dug:false, lijecnicki:'ok',     upisan:'2026-01-08'},
+  ],
+  klub_clanarine: [
+    {clan:'Luka Horvat',  god:2026, iznos:60, dosp:'2026-01-31', uplata:'2026-01-15', status:'OK'},
+    {clan:'Marko Marić',  god:2026, iznos:60, dosp:'2026-01-31', uplata:'2026-01-22', status:'OK'},
+    {clan:'Ivan Babić',   god:2026, iznos:50, dosp:'2026-01-31', uplata:null,         status:'DUG'},
+    {clan:'Petra Knežević',god:2026,iznos:50, dosp:'2026-01-31', uplata:'2026-02-08', status:'OK'},
+    {clan:'Iva Tomić',    god:2026, iznos:40, dosp:'2026-02-28', uplata:'2026-02-25', status:'OK'},
+    {clan:'Sara Lučić',   god:2026, iznos:40, dosp:'2026-03-31', uplata:null,         status:'DUG'},
+  ],
+  klub_lijecnicki: [
+    {ime:'Luka Horvat',  pregled:'2025-08-15', datum:'2026-08-15', dana:103, doktor:'Dr. Marković', uskoro:false, istekao:false},
+    {ime:'Marko Marić',  pregled:'2025-05-22', datum:'2026-05-22', dana:18,  doktor:'Dr. Marković', uskoro:true,  istekao:false},
+    {ime:'Ivan Babić',   pregled:'2025-09-30', datum:'2026-09-30', dana:148, doktor:'Dr. Pavlović', uskoro:false, istekao:false},
+    {ime:'Petra Knežević',pregled:'2025-04-12',datum:'2026-04-12', dana:-23, doktor:'Dr. Marković', uskoro:false, istekao:true},
+    {ime:'Dora Pavić',   pregled:'2025-04-30', datum:'2026-04-30', dana:-5,  doktor:'Dr. Marković', uskoro:false, istekao:true},
+    {ime:'Sara Lučić',   pregled:'2026-01-12', datum:'2027-01-12', dana:253, doktor:'Dr. Marković', uskoro:false, istekao:false},
+  ],
+  klub_dokumenti: [
+    {naziv:'Statut kluba 2024',     vrsta:'Statut',    datum:'2024-04-15', size:'420 kB'},
+    {naziv:'Sudreg izvod',          vrsta:'Pravni',    datum:'2025-09-12', size:'180 kB'},
+    {naziv:'Zapisnik skupština 2026',vrsta:'Zapisnik', datum:'2026-02-22', size:'310 kB'},
+    {naziv:'GDPR politika',         vrsta:'Pravni',    datum:'2026-01-10', size:'95 kB'},
+    {naziv:'Ugovor sufinanciranja PGŽ 2026',vrsta:'Ugovor',datum:'2026-03-18',size:'520 kB'},
+  ],
+  klub_manifestacije: [
+    {naziv:'Trening kamp Platak',     datum:'2026-05-09', lokacija:'Platak',    tip:'priprema'},
+    {naziv:'Liga PGŽ atletika',       datum:'2026-05-11', lokacija:'Kantrida',  tip:'utakmica'},
+    {naziv:'Open senior atletika RI', datum:'2026-05-18', lokacija:'Rijeka',    tip:'natjecanje'},
+    {naziv:'Memorijalna utrka',       datum:'2026-05-25', lokacija:'Lovran',    tip:'natjecanje'},
+  ],
+};
+
+//=========== INIT ===========
+async function init(){
+  try {
+    const r = localStorage.getItem('app-role');
+    if(r && ROLES[r]) _state.role = r;
+  } catch(e){}
+  restoreSidebar();
+  buildRoleSwitch();
+
+  // Try real auth (JWT)
+  const me = await loadCurrentUser();
+  if(me){
+    // Real-auth mode — hide demo role switcher (only super_admin can switch personas)
+    if(me.user_type !== 'super_admin'){
+      const rs = $('#role-switch'); if(rs) rs.style.display='none';
+    }
+    applyMeToHeader();
+  }
+  // First page after login: Moj profil
+  setRole(_state.role);
+  navTo('profil');
+}
+window.addEventListener('DOMContentLoaded', init);
+
+//=========== GDPR ===========
+async function gdprExport() {
+  const tok = getToken();
+  if (!tok) { alert('Niste prijavljeni. Idite na /login'); return; }
+  try {
+    const r = await fetch(API + '/users/me/gdpr-export', {
+      method: 'POST',
+      headers: { 'Authorization': 'Bearer ' + tok }
+    });
+    if (!r.ok) throw new Error('HTTP ' + r.status);
+    const data = await r.json();
+    // Download as JSON file
+    const blob = new Blob([JSON.stringify(data, null, 2)], {type: 'application/json'});
+    const url = URL.createObjectURL(blob);
+    const a = document.createElement('a');
+    a.href = url;
+    a.download = 'gdpr-export-' + (data.user?.email || 'me') + '-' + new Date().toISOString().slice(0,10) + '.json';
+    document.body.appendChild(a);
+    a.click();
+    document.body.removeChild(a);
+    URL.revokeObjectURL(url);
+    alert('✓ Izvoz uspješan! Datoteka spremljena.');
+  } catch (e) {
+    alert('Greška pri izvozu: ' + e.message);
+  }
+}
+
+async function gdprAuditMy() {
+  const tok = getToken();
+  if (!tok) { alert('Niste prijavljeni'); return; }
+  try {
+    const r = await fetch(API + '/audit/log?user_id=me&limit=100', {
+      headers: { 'Authorization': 'Bearer ' + tok }
+    });
+    if (!r.ok) throw new Error('HTTP ' + r.status);
+    const data = await r.json();
+    const items = data.items || data.entries || [];
+    if (!items.length) {
+      alert('Nema audit zapisa za vaš račun.');
+      return;
+    }
+    const txt = items.slice(0, 30).map(e => {
+      const ts = new Date(e.created_at || e.timestamp).toLocaleString('hr-HR');
+      return ts + ' • ' + (e.action || '?') + ' • ' + (e.resource_type || '?') + ' • ' + (e.user_email || '?');
+    }).join('\n');
+    alert('Audit zapisi (zadnjih ' + Math.min(items.length, 30) + '):\n\n' + txt);
+  } catch (e) {
+    alert('Greška: ' + e.message);
+  }
+}
+
+async function profileDeleteAccount() {
+  if (!confirm('Sigurno želite zatražiti BRISANJE računa? Ovo je trajno.')) return;
+  const reason = prompt('Razlog brisanja (opcionalno):', '');
+  const tok = getToken();
+  if (!tok) { alert('Niste prijavljeni'); return; }
+  try {
+    const r = await fetch(API + '/users/me/request-deletion', {
+      method: 'POST',
+      headers: {'Content-Type': 'application/json', 'Authorization': 'Bearer ' + tok},
+      body: JSON.stringify({reason: reason || ''})
+    });
+    if (r.ok) alert('✓ Zahtjev poslan. Bit ćete kontaktirani u 30 dana.');
+    else alert('Greška: HTTP ' + r.status);
+  } catch (e) {
+    alert('Greška: ' + e.message);
+  }
+}
+</script>
+</body>
+</html>
diff --git a/_backups/sprint_1777940323/enrich_router.py b/_backups/sprint_1777940323/enrich_router.py
new file mode 100644
index 0000000..ccc0e7c
--- /dev/null
+++ b/_backups/sprint_1777940323/enrich_router.py
@@ -0,0 +1,1690 @@
+"""
+enrich_router.py — v3 enrichment + forensic scan
+Author: dradulic@outlook.com / damir@rinet.one
+Date:   2026-05-04 (R2) → 2026-05-05 (R3 CC6 v3)
+
+POST /v2/enrich/{kind}/{eid}
+    Inspect the row, scrape the web (Wikipedia HR, sport-pgz.hr search,
+    primary club URL if any), regex-extract candidate fields (web/email/
+    telefon), optionally synthesise descriptions via DeepSeek, and return
+    a *preview* shape with `proposed` updates the operator can apply.
+
+POST /v2/enrich/{kind}/{eid}/apply
+    Body shapes:
+      None / {}                  → re-run preview, apply every proposed field
+      {"fields": {...}}          → apply ONLY those (whitelist + emptiness still enforced)
+    Performs UPDATE on the matching table, sets metadata.enriched_at and
+    metadata.enrichment_source, writes a row to pgz_sport.enrichment_log,
+    returns the after snapshot.
+
+GET  /v2/enrich/log?kind=&target_id=&limit=
+    Read recent enrichment-log entries.
+
+POST /v2/forensic/scan
+    Search civic.persons by name, return entity links + findings + risk score.
+
+Kinds: klub | savez | sportas
+"""
+from __future__ import annotations
+import os, re, json, time, html, urllib.parse, urllib.request
+from datetime import datetime, timezone
+from typing import Any, Optional
+
+import psycopg2, psycopg2.extras
+from fastapi import APIRouter, HTTPException, Header, Body
+
+router = APIRouter()
+
+_pgh = os.environ.get('PG_HOST', '10.10.0.2')
+_pgp = int(os.environ.get('PG_PORT', '6432'))
+if _pgh in ('localhost', '127.0.0.1'):
+    _pgh = os.environ.get('DB_HOST', '10.10.0.2')
+    _pgp = int(os.environ.get('DB_PORT', '6432'))
+DB = dict(host=_pgh, port=_pgp,
+          dbname=os.environ.get('PG_DB', 'rinet_v3'),
+          user=os.environ.get('PG_USER', 'rinet'),
+          password=os.environ.get('PG_PASS', 'R1net2026!SecureDB#v7'))
+
+UA = 'pgz-sport-enrich/3.0 (+https://sport.rinet.one)'
+TIMEOUT = 6  # seconds — fail-soft
+
+# Optional JS-aware fallback (Playwright). Lazy-loaded, never required.
+import sys as _sys
+_sys.path.insert(0, '/opt/pgz-sport')
+try:
+    from enrichment import playwright_scraper as _pw_scraper
+    _HAS_PW = _pw_scraper.HAS_PLAYWRIGHT
+except Exception:
+    _pw_scraper = None
+    _HAS_PW = False
+
+DEEPSEEK_KEY = os.environ.get('DEEPSEEK_API_KEY', '').strip()
+DEEPSEEK_URL = os.environ.get('DEEPSEEK_URL',
+                              'https://api.deepseek.com/v1/chat/completions')
+
+
+# ─── DB helpers ──────────────────────────────────────────────────────────
+def _db():
+    c = psycopg2.connect(**DB); c.autocommit = True; return c
+
+def _fetch_one(sql, p):
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute(sql, p); r = cur.fetchone()
+        return dict(r) if r else None
+
+
+# ─── HTTP helpers ────────────────────────────────────────────────────────
+def _http_get(url: str, timeout: int = TIMEOUT) -> Optional[str]:
+    if not url: return None
+    if not url.startswith('http'): return None
+    try:
+        req = urllib.request.Request(url, headers={
+            'User-Agent': UA, 'Accept-Language': 'hr,en;q=0.8'})
+        with urllib.request.urlopen(req, timeout=timeout) as r:
+            data = r.read(150000)
+            try:    return data.decode('utf-8')
+            except: return data.decode('latin-1', 'ignore')
+    except Exception:
+        return None
+
+
+def _strip_tags(s: str) -> str:
+    if not s: return ''
+    s = re.sub(r'<script[^>]*>.*?</script>', ' ', s, flags=re.S | re.I)
+    s = re.sub(r'<style[^>]*>.*?</style>',   ' ', s, flags=re.S | re.I)
+    s = re.sub(r'<[^>]+>', ' ', s)
+    s = html.unescape(s)
+    s = re.sub(r'\s+', ' ', s).strip()
+    return s
+
+
+def _extract_meta(html_doc: str, url: str) -> dict:
+    if not html_doc: return {}
+    out = {'url': url, 'fetched_at': int(time.time())}
+    m = re.search(r'<title[^>]*>([^<]+)</title>', html_doc, re.I)
+    if m: out['title'] = html.unescape(m.group(1).strip())[:300]
+    m = re.search(r'<meta\s+name=["\']description["\']\s+content=["\']([^"\']+)["\']', html_doc, re.I)
+    if not m:
+        m = re.search(r'<meta\s+property=["\']og:description["\']\s+content=["\']([^"\']+)["\']', html_doc, re.I)
+    if m: out['description'] = html.unescape(m.group(1).strip())[:600]
+    return out
+
+
+def _fetch_title(url, timeout=5):
+    body = _http_get(url, timeout=timeout)
+    if not body: return {'url': url, 'error': 'fetch failed'} if url else None
+    return _extract_meta(body, url)
+
+
+# ─── Field extractors ───────────────────────────────────────────────────
+RE_EMAIL = re.compile(r'[a-z0-9._%+\-]+@[a-z0-9.\-]+\.[a-z]{2,}', re.I)
+RE_PHONE = re.compile(r'(?:\+?385[\s\-/]*|0)\d[\d\s\-/]{6,12}\d')
+RE_URL   = re.compile(r'https?://[^\s"\'<>)\]]+', re.I)
+
+def _find_email(text: str) -> Optional[str]:
+    if not text: return None
+    bad = ('@example.', '@test.', '@email.', 'wixpress.com',
+           'sentry.io', 'jquery.com', 'googleapis', '@2x.', 'noreply@')
+    seen = set()
+    for m in RE_EMAIL.finditer(text):
+        e = m.group(0).lower().rstrip('.,;:)')
+        if any(b in e for b in bad): continue
+        if e in seen: continue
+        seen.add(e); return e
+    return None
+
+def _find_phone(text: str) -> Optional[str]:
+    if not text: return None
+    for m in RE_PHONE.finditer(text):
+        raw = m.group(0).strip()
+        digits = re.sub(r'\D', '', raw)
+        if not (8 <= len(digits) <= 13): continue
+        cleaned = re.sub(r'\s+', ' ', raw).strip()
+        if raw.startswith('+385'):  return '+385 ' + raw[4:].lstrip().lstrip('-/')
+        if raw.startswith('00385'): return '+385 ' + raw[5:].lstrip().lstrip('-/')
+        return cleaned
+    return None
+
+def _find_official_web(text: str, hint: str = '') -> Optional[str]:
+    if not text: return None
+    blocked = ('wikipedia.org', 'sport-pgz.hr', 'google.com', 'facebook.com',
+               'instagram.com', 'youtube.com', 'twitter.com', 'wikimedia',
+               'sportilus.com', 'transfermarkt.com', 'wikidata.org',
+               'sudreg.pravosudje.hr', 'gov.hr', 'apis.google.com',
+               'rinet.one', 'pgz.hr')
+    candidates: list[str] = []
+    for m in RE_URL.finditer(text):
+        u = m.group(0).rstrip('.,;:)\'"')
+        try:
+            host = urllib.parse.urlparse(u).hostname or ''
+        except Exception:
+            continue
+        if not host or any(b in host for b in blocked): continue
+        candidates.append(u)
+    if not candidates: return None
+    if hint:
+        slug = re.sub(r'[^a-z0-9]', '', hint.lower())[:8]
+        for u in candidates:
+            host = urllib.parse.urlparse(u).hostname or ''
+            if slug and slug in host.replace('-', '').replace('.', ''):
+                return u
+    return candidates[0]
+
+
+# ─── External sources ────────────────────────────────────────────────────
+def _wiki_variants(query: str) -> list[str]:
+    """Generate sensible Wikipedia HR title variants for a query.
+
+    The summary REST API is title-exact; clubs are often listed under their
+    abbreviation (KK X, NK X, RK X, OK X), so we try those variants too.
+    """
+    if not query: return []
+    out, seen = [], set()
+    raw = query.strip()
+    def _push(v):
+        if v and v not in seen: seen.add(v); out.append(v)
+    _push(raw)
+    # KK Kvarner 2010 from Košarkaški klub KVARNER 2010
+    parts = raw.split()
+    sport_to_abbr = {
+        'košarkaški': 'KK', 'kosarkaski': 'KK',
+        'nogometni':  'NK', 'rukometni':  'RK',
+        'odbojkaški': 'OK', 'odbojkaski': 'OK',
+        'vaterpolski':'VK', 'plivacki':   'PK', 'plivački': 'PK',
+        'boćarski':   'BK', 'bocarski':   'BK',
+    }
+    if len(parts) >= 3 and parts[0].lower() in sport_to_abbr and parts[1].lower() == 'klub':
+        _push(sport_to_abbr[parts[0].lower()] + ' ' + ' '.join(p.capitalize() if p.isupper() else p for p in parts[2:]))
+    return out
+
+def _wiki_summary(query: str) -> Optional[dict]:
+    for variant in _wiki_variants(query):
+        title = urllib.parse.quote(variant.replace(' ', '_'), safe='')
+        body = _http_get(f'https://hr.wikipedia.org/api/rest_v1/page/summary/{title}', timeout=5)
+        if not body: continue
+        try:
+            d = json.loads(body)
+        except Exception:
+            continue
+        if d.get('type') in ('disambiguation', 'no-extract'): continue
+        if not d.get('extract'): continue
+        return {
+            'source': 'wikipedia.hr',
+            'url': d.get('content_urls', {}).get('desktop', {}).get('page'),
+            'title': d.get('title'),
+            'extract': d.get('extract'),
+            'description': d.get('description'),
+            'matched_variant': variant,
+        }
+    return None
+
+
+def _sport_pgz_search(query: str) -> Optional[dict]:
+    if not query: return None
+    page = _http_get('https://sport-pgz.hr/?s=' + urllib.parse.quote(query), timeout=6)
+    if not page:
+        # Plain HTTP failed → try JS-rendered fallback if available.
+        if _HAS_PW and _pw_scraper is not None:
+            return _pw_scraper.scrape_sport_pgz_klub(query)
+        return None
+    m = re.search(r'<article[^>]*>.*?<a\s+href=["\']([^"\']+)["\'][^>]*rel=["\']bookmark["\'][^>]*>([^<]+)</a>',
+                  page, re.S | re.I)
+    if not m:
+        m = re.search(r'<a\s+href=["\'](https?://sport-pgz\.hr/[^"\']+)["\'][^>]*>([^<]{6,180})</a>', page, re.I)
+    if not m:
+        # Search page rendered but yielded nothing parseable — try JS fallback.
+        if _HAS_PW and _pw_scraper is not None:
+            return _pw_scraper.scrape_sport_pgz_klub(query)
+        return None
+    hit = m.group(1)
+    body = _http_get(hit, timeout=6)
+    if not body:
+        return {'source': 'sport-pgz.hr', 'url': hit, 'title': html.unescape(m.group(2).strip())}
+    text = _strip_tags(body)[:4000]
+    meta = _extract_meta(body, hit)
+    return {
+        'source': 'sport-pgz.hr',
+        'url': hit,
+        'title': meta.get('title') or html.unescape(m.group(2).strip()),
+        'extract': meta.get('description') or text[:500],
+        'raw_text': text,
+    }
+
+
+def _fetch_primary_site(url: str) -> Optional[dict]:
+    body = _http_get(url, timeout=6)
+    if not body: return None
+    text = _strip_tags(body)
+    meta = _extract_meta(body, url)
+    return {
+        'source': urllib.parse.urlparse(url).hostname or url,
+        'url': url,
+        'title': meta.get('title'),
+        'extract': meta.get('description') or text[:500],
+        'raw_text': text[:8000],
+    }
+
+
+# ─── DeepSeek (optional, fail-soft) ─────────────────────────────────────
+def _deepseek_describe(naziv: str, kind: str, evidence: list[str]) -> Optional[str]:
+    if not DEEPSEEK_KEY or not evidence: return None
+    joined = "\n---\n".join(e for e in evidence if e)[:6000]
+    if not joined.strip(): return None
+    prompt = (f"Iz dolje navedenih izvora napiši profesionalni opis za "
+              f"{kind} '{naziv}' na hrvatskom jeziku. 3-5 rečenica. "
+              f"Bez uvoda 'Evo opisa', samo tekst.\n\nIZVORI:\n{joined}")
+    payload = {
+        "model": "deepseek-chat",
+        "messages": [
+            {"role": "system", "content": "Pišeš sažete činjenične opise sportskih organizacija na hrvatskom."},
+            {"role": "user",   "content": prompt},
+        ],
+        "max_tokens": 280, "temperature": 0.3,
+    }
+    req = urllib.request.Request(
+        DEEPSEEK_URL, data=json.dumps(payload).encode('utf-8'),
+        headers={'Authorization': 'Bearer ' + DEEPSEEK_KEY,
+                 'Content-Type': 'application/json',
+                 'User-Agent': UA}, method='POST')
+    try:
+        with urllib.request.urlopen(req, timeout=20) as r:
+            d = json.loads(r.read().decode('utf-8'))
+        text = d.get('choices', [{}])[0].get('message', {}).get('content', '').strip()
+        return text or None
+    except Exception:
+        return None
+
+
+# ─── Row loaders & display name ─────────────────────────────────────────
+def _load_row(kind: str, eid: int) -> dict:
+    if kind == 'klub':
+        row = _fetch_one("""SELECT id, naziv, oib, sport, grad, predsjednik, tajnik,
+                                   web, web_stranica, email, telefon, ciljevi, opis_djelatnosti,
+                                   sjediste, godina_osnutka, savez_id, scrape_url, source_url,
+                                   metadata
+                            FROM pgz_sport.klubovi WHERE id=%s""", (eid,))
+    elif kind == 'savez':
+        row = _fetch_one("""SELECT id, naziv, oib, sport, predsjednik, tajnik, email, telefon, web,
+                                   adresa, godina_osnutka, source_url, metadata
+                            FROM pgz_sport.savezi WHERE id=%s""", (eid,))
+    elif kind == 'sportas':
+        row = _fetch_one("""SELECT c.id, c.ime, c.prezime, c.sport, c.klub_id, c.profile_url,
+                                   c.slika_url, c.source_url, c.source, c.source_id,
+                                   c.hns_igrac_id, c.biografija,
+                                   c.datum_rodenja, c.mjesto_rodenja, c.broj_dresa,
+                                   c.visina_cm, c.tezina_kg, c.dominantna_noga, c.oib,
+                                   c.vanjski_id, c.metadata,
+                                   k.sport AS klub_sport, k.naziv AS klub_naziv
+                            FROM pgz_sport.clanovi c
+                            LEFT JOIN pgz_sport.klubovi k ON k.id = c.klub_id
+                            WHERE c.id=%s""", (eid,))
+        # Fall back to klub.sport when c.sport is empty
+        if row and not row.get('sport') and row.get('klub_sport'):
+            row['sport'] = row['klub_sport']
+    else:
+        raise HTTPException(400, "kind must be klub|savez|sportas")
+    if not row:
+        raise HTTPException(404, kind + " not found")
+    return row
+
+
+def _display_name(kind: str, row: dict) -> str:
+    if kind == 'sportas':
+        return ((row.get('ime') or '') + ' ' + (row.get('prezime') or '')).strip()
+    return row.get('naziv', '') or ''
+
+
+# ─── Sport federations map (loaded once, refresh on file mtime) ─────────
+_SPORT_FED_PATH = '/opt/pgz-sport/data/sport_federations.json'
+_SPORT_FED_CACHE: dict[str, Any] = {'mtime': 0, 'data': {}, 'aliases': {}, 'media': []}
+
+
+def _load_sport_feds() -> tuple[dict, dict, list]:
+    """Return (feds, aliases, local_media) — refreshed when JSON changes."""
+    try:
+        st = os.stat(_SPORT_FED_PATH)
+    except FileNotFoundError:
+        return ({}, {}, [])
+    if st.st_mtime != _SPORT_FED_CACHE['mtime']:
+        try:
+            with open(_SPORT_FED_PATH, 'r', encoding='utf-8') as f:
+                raw = json.load(f)
+        except Exception:
+            return (_SPORT_FED_CACHE['data'],
+                    _SPORT_FED_CACHE['aliases'],
+                    _SPORT_FED_CACHE['media'])
+        aliases = raw.pop('_aliases', {}) if isinstance(raw, dict) else {}
+        media   = raw.pop('_local_media_pgz', []) if isinstance(raw, dict) else []
+        raw.pop('_meta', None)
+        _SPORT_FED_CACHE.update(mtime=st.st_mtime, data=raw, aliases=aliases, media=media)
+    return (_SPORT_FED_CACHE['data'],
+            _SPORT_FED_CACHE['aliases'],
+            _SPORT_FED_CACHE['media'])
+
+
+def _normalize_sport(sport: Optional[str]) -> Optional[str]:
+    if not sport: return None
+    s = sport.strip().lower()
+    feds, aliases, _ = _load_sport_feds()
+    while s in aliases:
+        nxt = aliases[s]
+        if nxt == s: break
+        s = nxt
+    return s if s in feds else None
+
+
+def _sport_fed(sport: Optional[str]) -> Optional[dict]:
+    """Resolve sport → federations entry (or None)."""
+    norm = _normalize_sport(sport)
+    if not norm: return None
+    feds, _, _ = _load_sport_feds()
+    return feds.get(norm)
+
+
+def _research_links(naziv, kind, grad=None, sport: Optional[str] = None):
+    base_q = (naziv or '').strip()
+    q = (base_q + ' ' + grad) if grad else base_q
+    qenc = urllib.parse.quote(q)
+    out = [
+        {'label': 'Google',       'icon': '🔍', 'url': 'https://www.google.com/search?q=' + qenc},
+        {'label': 'Wikipedia HR', 'icon': '📚', 'url': 'https://hr.wikipedia.org/w/index.php?search=' + qenc},
+        {'label': 'sport-pgz.hr', 'icon': '🏅', 'url': 'https://sport-pgz.hr/?s=' + qenc},
+    ]
+    if kind == 'klub':
+        out.append({'label': 'Sportilus',       'icon': '⬡', 'url': 'https://www.sportilus.com/?s=' + qenc})
+        out.append({'label': 'Sudski registar', 'icon': '⚖', 'url': 'https://sudreg.pravosudje.hr/registar/oc/index.html'})
+
+    # Sport-specific federation links (replace static HNS/transfermarkt for sportas)
+    fed = _sport_fed(sport) if sport else None
+    if kind == 'sportas':
+        if fed and isinstance(fed.get('national'), dict):
+            nat = fed['national']
+            search = (nat.get('search_url') or nat.get('url') or '').replace('{q}', qenc)
+            if search:
+                out.append({'label': nat.get('name', 'Nacionalni savez'),
+                            'icon': '🏆', 'url': search})
+        if fed and isinstance(fed.get('pgz'), dict):
+            pgz = fed['pgz']
+            url = pgz.get('search_url') or pgz.get('url') or ''
+            if url:
+                out.append({'label': pgz.get('name', 'PGŽ savez'),
+                            'icon': '🏟', 'url': url.replace('{q}', qenc)})
+        if not fed:
+            # No mapping for this sport → keep transfermarkt as legacy fallback
+            out.append({'label': 'HNS Semafor',  'icon': '⚽', 'url': 'https://semafor.hns.family/?s=' + qenc})
+            out.append({'label': 'transfermarkt','icon': '⚽', 'url': 'https://www.transfermarkt.com/schnellsuche/ergebnis/schnellsuche?query=' + qenc})
+        # Local PGŽ media for any sportas
+        _, _, media = _load_sport_feds()
+        for m in media:
+            url = (m.get('search_url') or '').replace('{q}', qenc)
+            if url:
+                out.append({'label': m.get('name', 'Lokalni medij'),
+                            'icon': '📰', 'url': url})
+    if kind == 'savez':
+        out.append({'label': 'sport-pgz.hr savezi', 'icon': '🏅', 'url': 'https://sport-pgz.hr/savezi'})
+    return out
+
+
+# ─── Proposal pipelines ─────────────────────────────────────────────────
+def _name_tokens(naziv: str) -> list[str]:
+    """Significant tokens from entity name (≥4 chars, deaccented)."""
+    import unicodedata
+    s = unicodedata.normalize('NFKD', naziv or '').encode('ascii', 'ignore').decode('ascii').lower()
+    toks = [t for t in re.split(r'[^a-z0-9]+', s) if len(t) >= 4]
+    stop = {'klub','udruga','sportski','sport','kosarkaski','kosarka','nogometni',
+            'rukometni','savez','rijeka','primorsko','goranski','grad','grada','centar'}
+    return [t for t in toks if t not in stop] or toks
+
+
+def _is_relevant(source: dict, tokens: list[str]) -> bool:
+    """A source is 'relevant' only if the page actually mentions the entity name."""
+    if not tokens: return True
+    import unicodedata
+    blob = (source.get('title') or '') + ' ' + (source.get('extract') or '') + ' ' + (source.get('raw_text') or '')
+    blob = unicodedata.normalize('NFKD', blob.lower()).encode('ascii', 'ignore').decode('ascii')
+    return any(t in blob for t in tokens)
+
+
+def _propose_for_klub(row: dict) -> dict:
+    naziv = row.get('naziv') or ''
+    primary = row.get('web') or row.get('web_stranica') or row.get('source_url') or row.get('scrape_url')
+    sources, evidence = [], []
+    pdoc = _fetch_primary_site(primary) if primary else None
+    if pdoc: sources.append(pdoc); evidence.append(pdoc.get('raw_text') or pdoc.get('extract') or '')
+    wiki = _wiki_summary(naziv)
+    if wiki: sources.append(wiki); evidence.append(wiki.get('extract') or '')
+    spz = _sport_pgz_search(naziv)
+    if spz: sources.append(spz); evidence.append(spz.get('raw_text') or spz.get('extract') or '')
+
+    tokens = _name_tokens(naziv)
+    relevant = [s for s in sources if _is_relevant(s, tokens)]
+    relevant_blob = '\n\n'.join((s.get('raw_text') or s.get('extract') or '') for s in relevant)
+
+    proposed: dict[str, Any] = {}
+    # web/email/telefon: ONLY from sources actually mentioning the entity
+    if not row.get('web'):
+        u = _find_official_web(relevant_blob, naziv)
+        if u: proposed['web'] = u
+    if not row.get('email'):
+        e = _find_email(relevant_blob)
+        if e: proposed['email'] = e
+    if not row.get('telefon'):
+        t = _find_phone(relevant_blob)
+        if t: proposed['telefon'] = t
+    if not row.get('opis_djelatnosti'):
+        descr_evidence = [(s.get('raw_text') or s.get('extract') or '') for s in relevant] or evidence
+        descr = _deepseek_describe(naziv, 'sportski klub', descr_evidence)
+        if not descr:
+            for s in (relevant or sources):
+                if s.get('extract') and len(s['extract']) >= 80:
+                    descr = s['extract']; break
+        if descr: proposed['opis_djelatnosti'] = descr.strip()[:2000]
+    return {'proposed': proposed, 'sources': sources}
+
+
+def _propose_for_savez(row: dict) -> dict:
+    naziv = row.get('naziv') or ''
+    primary = row.get('web') or row.get('source_url')
+    sources, evidence = [], []
+    pdoc = _fetch_primary_site(primary) if primary else None
+    if pdoc: sources.append(pdoc); evidence.append(pdoc.get('raw_text') or '')
+    wiki = _wiki_summary(naziv)
+    if wiki: sources.append(wiki); evidence.append(wiki.get('extract') or '')
+    spz = _sport_pgz_search(naziv)
+    if spz: sources.append(spz); evidence.append(spz.get('raw_text') or '')
+
+    tokens = _name_tokens(naziv)
+    relevant = [s for s in sources if _is_relevant(s, tokens)]
+    relevant_blob = '\n\n'.join((s.get('raw_text') or s.get('extract') or '') for s in relevant)
+
+    proposed: dict[str, Any] = {}
+    if not row.get('web'):
+        u = _find_official_web(relevant_blob, naziv)
+        if u: proposed['web'] = u
+    if not row.get('email'):
+        e = _find_email(relevant_blob)
+        if e: proposed['email'] = e
+    if not row.get('telefon'):
+        t = _find_phone(relevant_blob)
+        if t: proposed['telefon'] = t
+    return {'proposed': proposed, 'sources': sources}
+
+
+# ─── HNS Semafor parsing ────────────────────────────────────────────────
+_HNS_BASE = 'https://semafor.hns.family'
+
+def _slugify(name: str) -> str:
+    import unicodedata
+    s = unicodedata.normalize('NFKD', name or '').encode('ascii', 'ignore').decode('ascii').lower()
+    return re.sub(r'[^a-z0-9]+', '-', s).strip('-')
+
+def _hns_url_from_row(row: dict) -> Optional[str]:
+    """Try to build a semafor.hns.family /igraci/ URL for this row."""
+    # 1) Already-set columns
+    for k in ('profile_url', 'source_url'):
+        u = row.get(k)
+        if u and 'semafor.hns.family/igraci/' in (u or ''):
+            return u
+    # 2) hns_igrac_id column
+    pid = row.get('hns_igrac_id')
+    if pid:
+        slug = _slugify(((row.get('ime') or '') + ' ' + (row.get('prezime') or '')).strip())
+        return f'{_HNS_BASE}/igraci/{int(pid)}/{slug}/'
+    # 3) vanjski_id JSONB → hns_comet
+    vid = row.get('vanjski_id') or {}
+    if isinstance(vid, dict):
+        comet = vid.get('hns_comet') or vid.get('hns_pid')
+        slug  = vid.get('hns_slug') or _slugify(((row.get('ime') or '') + ' ' + (row.get('prezime') or '')).strip())
+        if comet:
+            try:
+                return f'{_HNS_BASE}/igraci/{int(comet)}/{slug}/'
+            except Exception:
+                pass
+    # 4) source='hns_semafor' + source_id
+    if (row.get('source') or '').startswith('hns_') and row.get('source_id'):
+        try:
+            slug = _slugify(((row.get('ime') or '') + ' ' + (row.get('prezime') or '')).strip())
+            return f'{_HNS_BASE}/igraci/{int(row["source_id"])}/{slug}/'
+        except Exception:
+            pass
+    return None
+
+
+def _parse_hns_player(html_doc: str, url: str) -> Optional[dict]:
+    """Extract structured fields from a semafor.hns.family player page."""
+    if not html_doc: return None
+    try:
+        from bs4 import BeautifulSoup
+    except Exception:
+        return _parse_hns_player_regex(html_doc, url)
+    soup = BeautifulSoup(html_doc, 'html.parser')
+    out: dict[str, Any] = {'source': 'semafor.hns.family', 'url': url}
+
+    # hns_igrac_id from URL
+    m = re.search(r'/igraci/(\d+)/', url)
+    if m: out['hns_igrac_id'] = int(m.group(1))
+
+    title = soup.find('title')
+    if title: out['title'] = title.get_text(strip=True)[:300]
+
+    # Photo
+    photo = soup.find('div', class_='photo')
+    if photo:
+        img = photo.find('img')
+        if img and img.get('src'):
+            src = img['src']
+            if not src.startswith('http'):
+                src = urllib.parse.urljoin(url, src)
+            out['slika_url'] = src
+
+    # Player number (jersey)
+    pn = soup.find('div', class_='playerName')
+    if pn:
+        h3 = pn.find('h3')
+        if h3:
+            t = h3.get_text(strip=True)
+            if t.isdigit():
+                out['broj_dresa'] = int(t)
+
+    # Datum rodjenja
+    li = soup.find('li', class_='dob')
+    if li:
+        h4 = li.find('h4')
+        if h4:
+            t = h4.get_text(' ', strip=True)
+            mm = re.match(r'(\d{1,2})\.(\d{1,2})\.(\d{4})', t)
+            if mm:
+                from datetime import date as _date
+                try:
+                    out['datum_rodenja'] = _date(int(mm.group(3)), int(mm.group(2)), int(mm.group(1))).isoformat()
+                except Exception:
+                    pass
+
+    # Mjesto rodjenja
+    li = soup.find('li', class_='pob')
+    if li:
+        h4 = li.find('h4')
+        if h4:
+            out['mjesto_rodenja'] = h4.get_text(strip=True)
+
+    # Trenutni klub (info only — we don't reassign klub_id from here)
+    klub_link = soup.find('a', href=re.compile(r'/klubovi/(\d+)/'))
+    if klub_link:
+        h4 = klub_link.find('h4')
+        if h4:
+            out['trenutni_klub'] = h4.get_text(strip=True)
+        m = re.search(r'/klubovi/(\d+)/', klub_link.get('href') or '')
+        if m: out['hns_klub_id'] = int(m.group(1))
+
+    # Description (meta)
+    meta_d = soup.find('meta', attrs={'name': 'description'})
+    if meta_d and meta_d.get('content'):
+        out['description'] = meta_d['content'][:600]
+
+    # Make a clean text blob for relevance / DeepSeek
+    text = soup.get_text(' ', strip=True)
+    out['raw_text'] = re.sub(r'\s+', ' ', text)[:4000]
+    out['extract'] = (out.get('description')
+                      or (out['raw_text'][:500] if out.get('raw_text') else None))
+    return out
+
+
+def _parse_hns_player_regex(html_doc: str, url: str) -> Optional[dict]:
+    """BS4-free fallback parser."""
+    out: dict[str, Any] = {'source': 'semafor.hns.family', 'url': url}
+    m = re.search(r'/igraci/(\d+)/', url)
+    if m: out['hns_igrac_id'] = int(m.group(1))
+    m = re.search(r'<div class="photo"><img src="([^"]+)"', html_doc)
+    if m:
+        src = m.group(1)
+        if not src.startswith('http'): src = urllib.parse.urljoin(url, src)
+        out['slika_url'] = src
+    m = re.search(r'<li class="dob">.*?<h4>(\d{1,2})\.(\d{1,2})\.(\d{4})', html_doc, re.S)
+    if m:
+        from datetime import date as _date
+        try:
+            out['datum_rodenja'] = _date(int(m.group(3)), int(m.group(2)), int(m.group(1))).isoformat()
+        except Exception:
+            pass
+    m = re.search(r'<li class="pob"><i></i><h4>([^<]+)</h4>', html_doc)
+    if m: out['mjesto_rodenja'] = m.group(1).strip()
+    m = re.search(r'<div class="playerName"><h3>(\d+)</h3>', html_doc)
+    if m: out['broj_dresa'] = int(m.group(1))
+    m = re.search(r'<meta\s+name="description"\s+content="([^"]+)"', html_doc)
+    if m: out['description'] = m.group(1)[:600]
+    return out
+
+
+def _hns_fetch_player(url: str) -> Optional[dict]:
+    body = _http_get(url, timeout=8)
+    if not body:
+        # Try Playwright fallback
+        if _HAS_PW and _pw_scraper is not None:
+            r = _pw_scraper.fetch_rendered(url, timeout_ms=15000)
+            if r and r.get('html_len', 0) > 2000:
+                # We didn't store html in fetch_rendered — re-fetch text only is enough
+                # but we need html for parse. Do a simple HTTP retry with longer timeout.
+                body = _http_get(url, timeout=15)
+    return _parse_hns_player(body, url) if body else None
+
+
+# ─── Generic sport-federation scraper ───────────────────────────────────
+def _fed_url_from_row(row: dict) -> Optional[str]:
+    """If the row already points to a federation profile (source_url /
+    profile_url on a known fed host), return it."""
+    feds, _, _ = _load_sport_feds()
+    fed_hosts = set()
+    for entry in feds.values():
+        if not isinstance(entry, dict): continue
+        for which in ('national', 'pgz'):
+            sub = entry.get(which) or {}
+            for k in ('url', 'search_url', 'profile_url_pattern'):
+                v = sub.get(k)
+                if v:
+                    try:
+                        h = urllib.parse.urlparse(v.replace('{q}', 'x').replace('{slug}', 'x').replace('{hns_pid}', '1')).hostname
+                        if h: fed_hosts.add(h)
+                    except Exception:
+                        pass
+    for k in ('source_url', 'profile_url'):
+        u = row.get(k)
+        if not u: continue
+        try:
+            h = urllib.parse.urlparse(u).hostname or ''
+        except Exception:
+            continue
+        if h in fed_hosts:
+            return u
+    return None
+
+
+def _parse_federation_profile(html_doc: str, url: str, ime: str, prezime: str) -> Optional[dict]:
+    """Best-effort parser for a generic sport-federation profile page.
+
+    Returns {source, url, slika_url, datum_rodenja, mjesto_rodenja, klub,
+             extract, raw_text}. Tolerant of varied page structures.
+    """
+    if not html_doc: return None
+    host = urllib.parse.urlparse(url).hostname or ''
+    out: dict[str, Any] = {
+        'source': host,
+        'url': url,
+    }
+    # Title
+    m = re.search(r'<title[^>]*>([^<]+)</title>', html_doc, re.I)
+    if m: out['title'] = html.unescape(m.group(1).strip())[:300]
+    # Meta description
+    m = re.search(r'<meta\s+name=["\']description["\']\s+content=["\']([^"\']+)["\']', html_doc, re.I)
+    if m: out['description'] = html.unescape(m.group(1).strip())[:600]
+
+    name_tokens = []
+    for t in (ime, prezime):
+        if t and len(t) >= 3:
+            name_tokens.append(re.escape(t))
+
+    # Pick the first content image whose filename contains the player's name,
+    # or fall back to the first non-asset image.
+    img_candidates = re.findall(r'<img[^>]+src=["\']([^"\']+)["\']', html_doc, re.I)
+    chosen_img = None
+    for src in img_candidates:
+        low = src.lower()
+        if any(b in low for b in ('logo', 'icon', 'admin-ajax', 'spinner', 'loader',
+                                  'sprite', '/themes/', '/icons/', 'gdpr', 'banner',
+                                  'header', 'footer', 'placeholder', 'avatar-default')):
+            continue
+        if not low.endswith(('.jpg', '.jpeg', '.png', '.webp')):
+            continue
+        # Prefer matches on player name in URL
+        if name_tokens and any(re.search(t, src, re.I) for t in name_tokens):
+            chosen_img = src; break
+        if chosen_img is None:
+            chosen_img = src
+    if chosen_img:
+        if not chosen_img.startswith('http'):
+            chosen_img = urllib.parse.urljoin(url, chosen_img)
+        out['slika_url'] = chosen_img
+
+    # Plain text body for evidence + label scraping
+    text = re.sub(r'<script[^>]*>.*?</script>', ' ', html_doc, flags=re.S | re.I)
+    text = re.sub(r'<style[^>]*>.*?</style>', ' ', text, flags=re.S | re.I)
+    text = re.sub(r'<[^>]+>', ' ', text)
+    text = html.unescape(re.sub(r'\s+', ' ', text)).strip()
+    out['raw_text'] = text[:4000]
+    out['extract']  = (out.get('description')
+                       or text[max(0, text.find(prezime)-30):max(0, text.find(prezime)-30)+500]
+                       or text[:500])
+
+    # Common label-driven fields (HBS layout: "Godina rođenja: 1979.", "Matični klub: …")
+    m = re.search(r'Datum\s+ro[đdj]?enja[:\s]+(\d{1,2}[.\-/]\d{1,2}[.\-/]\d{4})', text, re.I)
+    if m:
+        try:
+            from datetime import date as _date
+            d = re.split(r'[.\-/]', m.group(1))
+            out['datum_rodenja'] = _date(int(d[2]), int(d[1]), int(d[0])).isoformat()
+        except Exception:
+            pass
+    if 'datum_rodenja' not in out:
+        m = re.search(r'Godina\s+ro[đdj]?enja[:\s]+(\d{4})', text, re.I)
+        if m:
+            try:
+                from datetime import date as _date
+                out['datum_rodenja'] = _date(int(m.group(1)), 1, 1).isoformat()
+            except Exception:
+                pass
+    m = re.search(r'Mjesto\s+ro[đdj]?enja[:\s]+([A-ZČĆŠĐŽ][^,\n.]{2,40})', text)
+    if m: out['mjesto_rodenja'] = m.group(1).strip()
+    m = re.search(r'Mati[čc]ni\s+klub[:\s]+([^\n]{3,60}?)(?:\s+(?:Sportski|Datum|Liječni|Reprezent|Sezona|Domaće|Nastupi))', text, re.I)
+    if m: out['klub_naziv'] = m.group(1).strip().rstrip('.')
+
+    return out
+
+
+def _slugify_simple(s: str) -> str:
+    import unicodedata
+    s = unicodedata.normalize('NFKD', s or '').encode('ascii', 'ignore').decode('ascii').lower()
+    return re.sub(r'[^a-z0-9]+', '-', s).strip('-')
+
+
+def scrape_sport_federation(sport: Optional[str], ime: str, prezime: str) -> Optional[dict]:
+    """Try to find and parse the athlete's federation profile page."""
+    fed = _sport_fed(sport) if sport else None
+    if not fed: return None
+    nat = (fed or {}).get('national') or {}
+    full_name = (ime + ' ' + prezime).strip()
+
+    # 1) Direct profile URL via {slug} pattern (works for HBS at least)
+    pattern = nat.get('profile_url_pattern')
+    if pattern and '{slug}' in pattern:
+        slug = _slugify_simple(full_name)
+        url = pattern.replace('{slug}', slug)
+        body = _http_get(url, timeout=8)
+        if body and prezime.lower() in body.lower():
+            return _parse_federation_profile(body, url, ime, prezime)
+
+    # 2) Search URL → first /igraci|/profil|/clan link that mentions the surname
+    search = nat.get('search_url')
+    if search:
+        body = _http_get(search.replace('{q}', urllib.parse.quote(full_name)), timeout=10)
+        if body:
+            for href_re in (r'href="([^"]*?/igraci/[^"]+)"',
+                            r'href="([^"]*?/igrac/[^"]+)"',
+                            r'href="([^"]*?/sportasi/[^"]+)"',
+                            r'href="([^"]*?/clanovi/[^"]+)"',
+                            r'href="([^"]*?/profil/[^"]+)"'):
+                for m in re.finditer(href_re, body, re.I):
+                    cand = m.group(1)
+                    if not cand.startswith('http'):
+                        cand = urllib.parse.urljoin(nat.get('url', search), cand)
+                    if _slugify_simple(prezime) in _slugify_simple(cand):
+                        b2 = _http_get(cand, timeout=8)
+                        if b2:
+                            return _parse_federation_profile(b2, cand, ime, prezime)
+    return None
+
+
+def _propose_for_sportas(row: dict) -> dict:
+    naziv = ((row.get('ime') or '') + ' ' + (row.get('prezime') or '')).strip()
+    ime, prezime = (row.get('ime') or ''), (row.get('prezime') or '')
+    sport = row.get('sport')
+    sources, evidence = [], []
+    proposed: dict[str, Any] = {}
+
+    # 1) HNS Semafor — only meaningful when sport is football OR row already
+    # carries an HNS link.
+    hns_doc: Optional[dict] = None
+    if _normalize_sport(sport) == 'nogomet' or _hns_url_from_row(row):
+        hns_url = _hns_url_from_row(row)
+        if hns_url:
+            hns_doc = _hns_fetch_player(hns_url)
+            if hns_doc:
+                sources.append(hns_doc)
+                evidence.append(hns_doc.get('raw_text') or hns_doc.get('extract') or '')
+
+    # 2) Sport-aware federation scrape (HBS, HKS, etc.) — also use existing
+    # source_url/profile_url if it points at a known federation host.
+    fed_doc: Optional[dict] = None
+    direct_fed_url = _fed_url_from_row(row)
+    if direct_fed_url and (not hns_doc or hns_doc.get('url') != direct_fed_url):
+        body = _http_get(direct_fed_url, timeout=8)
+        if body:
+            fed_doc = _parse_federation_profile(body, direct_fed_url, ime, prezime)
+    if not fed_doc:
+        fed_doc = scrape_sport_federation(sport, ime, prezime)
+    if fed_doc:
+        sources.append(fed_doc)
+        evidence.append(fed_doc.get('raw_text') or fed_doc.get('extract') or '')
+
+    # Helper: pick from hns_doc first then fed_doc
+    def _pick(field):
+        if hns_doc and hns_doc.get(field): return hns_doc[field]
+        if fed_doc and fed_doc.get(field): return fed_doc[field]
+        return None
+
+    if not row.get('profile_url'):
+        v = _pick('url') or (hns_doc and hns_doc.get('url')) or (fed_doc and fed_doc.get('url'))
+        if v: proposed['profile_url'] = v
+    if not row.get('source_url'):
+        v = (hns_doc and hns_doc.get('url')) or (fed_doc and fed_doc.get('url'))
+        if v: proposed['source_url'] = v
+    if not row.get('slika_url'):
+        v = _pick('slika_url')
+        if v: proposed['slika_url'] = v
+    if not row.get('hns_igrac_id') and hns_doc and hns_doc.get('hns_igrac_id'):
+        proposed['hns_igrac_id'] = hns_doc['hns_igrac_id']
+    if not row.get('datum_rodenja'):
+        v = _pick('datum_rodenja')
+        if v: proposed['datum_rodenja'] = v
+    if not row.get('mjesto_rodenja'):
+        v = _pick('mjesto_rodenja')
+        if v: proposed['mjesto_rodenja'] = v
+    if not row.get('broj_dresa') and hns_doc and hns_doc.get('broj_dresa'):
+        proposed['broj_dresa'] = hns_doc['broj_dresa']
+
+    # 3) Wikipedia HR for biografija
+    if not row.get('biografija'):
+        wiki = _wiki_summary(naziv)
+        if wiki:
+            sources.append(wiki)
+            evidence.append(wiki.get('extract') or '')
+
+    # Description: prefer DeepSeek synthesis from all evidence; fallback to first long snippet
+    if not row.get('biografija'):
+        descr = _deepseek_describe(naziv, f'sportaš ({sport})' if sport else 'sportaš', evidence) if evidence else None
+        if not descr:
+            for s in sources:
+                ext = s.get('extract')
+                if ext and len(ext) >= 80:
+                    descr = ext; break
+        if descr:
+            proposed['biografija'] = descr.strip()[:2000]
+
+    return {'proposed': proposed, 'sources': sources}
+
+
+# ─── Endpoints ──────────────────────────────────────────────────────────
+# ─── R4 — POST /v2/enrich/forensic/{finding_id} ─────────────────────────
+def _extract_pep_name(finding: dict) -> Optional[str]:
+    """Pull the primary person name from a forensic_findings row."""
+    title = (finding.get('title') or '').strip()
+    desc  = (finding.get('description') or '').strip()
+    payload = finding.get('raw_data') or {}
+    if isinstance(payload, str):
+        try: payload = json.loads(payload)
+        except Exception: payload = {}
+    if isinstance(payload, dict):
+        for k in ('person_name', 'name', 'osoba'):
+            v = payload.get(k)
+            if v: return str(v).strip()
+    # Try entities_involved.entity_name
+    ents = finding.get('entities_involved') or []
+    if isinstance(ents, str):
+        try: ents = json.loads(ents)
+        except Exception: ents = []
+    if isinstance(ents, list):
+        for e in ents:
+            if isinstance(e, dict) and e.get('person_name'):
+                return str(e['person_name']).strip()
+            if isinstance(e, dict) and e.get('entity_name') and ' ' in (e.get('entity_name') or ''):
+                # Some entries store person names as entity_name when entity_type='person'
+                if (e.get('entity_type') or '').lower() in ('person','osoba'):
+                    return str(e['entity_name']).strip()
+    # Fallback: extract a "Ime Prezime" from the title
+    m = re.search(r'\b([A-ZČĆŠĐŽ][a-zčćšđž]+)\s+([A-ZČĆŠĐŽ][a-zčćšđž]+(?:-[A-ZČĆŠĐŽ][a-zčćšđž]+)?)\b', title + ' ' + desc)
+    if m: return f"{m.group(1)} {m.group(2)}"
+    return None
+
+
+def _gather_pep_evidence(name: str) -> list[dict]:
+    sources: list[dict] = []
+    wiki = _wiki_summary(name)
+    if wiki: sources.append(wiki)
+    # DDG html-lite as a "Google snippet" replacement (often OK for HR PEPs)
+    ddg = 'https://html.duckduckgo.com/html/?q=' + urllib.parse.quote(f'"{name}" PGŽ Hrvatska')
+    page = _http_get(ddg, timeout=8)
+    if page:
+        # First result block
+        m = re.search(r'<a[^>]+class="result__a"[^>]+href="([^"]+)"[^>]*>([^<]{6,200})</a>', page)
+        snippet_m = re.search(r'<a[^>]+class="result__snippet"[^>]*>(.*?)</a>', page, re.S)
+        if m:
+            sources.append({
+                'source': 'duckduckgo',
+                'url': html.unescape(m.group(1))[:500],
+                'title': html.unescape(m.group(2)).strip()[:300],
+                'extract': re.sub(r'<[^>]+>', ' ', snippet_m.group(1)).strip()[:600] if snippet_m else None,
+            })
+    return sources
+
+
+def _related_entities_for_pep(name: str) -> list[dict]:
+    """Pull civic.persons + their entity links so we have the structured graph."""
+    out: list[dict] = []
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute("""SELECT id, name, function, party, county, city, oib, trust_tier
+                       FROM civic.persons
+                       WHERE upper(name) ILIKE upper(%s)
+                       ORDER BY oib NULLS LAST, id LIMIT 10""", ('%'+name+'%',))
+        for p in cur.fetchall():
+            p = dict(p)
+            entry = {
+                'kind': 'person',
+                'person_id': p['id'], 'person_name': p['name'],
+                'function': p.get('function'), 'party': p.get('party'),
+                'county':   p.get('county'),   'city': p.get('city'),
+                'oib':      p.get('oib'),      'trust_tier': p.get('trust_tier'),
+                'entities': [],
+            }
+            if p.get('oib'):
+                cur.execute("""SELECT pel.entity_id, pel.roles, e.name AS entity_name,
+                                      e.oib AS entity_oib, e.entity_type, e.city, e.risk_score
+                               FROM civic.person_entity_links pel
+                               LEFT JOIN civic.entities e ON e.id = pel.entity_id
+                               WHERE pel.person_oib=%s LIMIT 30""", (p['oib'],))
+                for r in cur.fetchall():
+                    entry['entities'].append(dict(r))
+            out.append(entry)
+    return out
+
+
+@router.post("/enrich/forensic/{finding_id}")
+def enrich_forensic_v2(finding_id: int,
+                    body: dict = Body(default=None),
+                    x_user_email: Optional[str] = Header(default=None),
+                    x_user_id:    Optional[int] = Header(default=None)):
+    """Enrich a forensic finding: gather Wiki + DDG snippets + civic graph,
+    write back to civic.forensic_findings.related_entities, and seal the
+    payload hash on Polygon (or queue for sealing).
+    """
+    body = body or {}
+    explicit_name = (body.get('name') or '').strip() or None
+
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute("""SELECT id, finding_type, severity, title, description,
+                              entities_involved, raw_data, related_entities, enrichment_metadata
+                       FROM civic.forensic_findings WHERE id=%s""", (finding_id,))
+        finding = cur.fetchone()
+    if not finding:
+        raise HTTPException(404, "finding not found")
+    finding = dict(finding)
+
+    name = explicit_name or _extract_pep_name(finding)
+    if not name:
+        raise HTTPException(400, "could not derive a person/entity name; pass {name: \"…\"}")
+
+    sources  = _gather_pep_evidence(name)
+    related  = _related_entities_for_pep(name)
+
+    payload = {
+        'finding_id': finding_id,
+        'name': name,
+        'sources': [{'source': s.get('source'), 'url': s.get('url'),
+                     'title': s.get('title')} for s in sources],
+        'related_entities': related,
+        'enriched_at': datetime.now(timezone.utc).isoformat(),
+    }
+
+    # Persist back to the finding
+    enrichment_meta = finding.get('enrichment_metadata') or {}
+    if not isinstance(enrichment_meta, dict): enrichment_meta = {}
+    history = enrichment_meta.get('history') or []
+    history.append({
+        'at': payload['enriched_at'],
+        'sources': payload['sources'],
+        'related_count': len(related),
+        'user': x_user_email,
+    })
+    enrichment_meta['history']      = history[-10:]
+    enrichment_meta['enriched_at']  = payload['enriched_at']
+    enrichment_meta['enriched_by']  = x_user_email or 'system'
+    enrichment_meta['source_count'] = len(sources)
+
+    with _db() as c, c.cursor() as cur:
+        cur.execute("""UPDATE civic.forensic_findings
+                          SET related_entities    = %s::jsonb,
+                              enrichment_metadata = %s::jsonb
+                        WHERE id=%s
+                        RETURNING id""",
+                    (json.dumps(related, default=str, ensure_ascii=False),
+                     json.dumps(enrichment_meta, default=str, ensure_ascii=False),
+                     finding_id))
+        cur.fetchone()
+
+    # Seal the enrichment payload hash on Polygon (or queue if no key)
+    seal_result: dict[str, Any] = {}
+    try:
+        sys_path_added = False
+        try:
+            from blockchain import seal as _seal_mod  # noqa: E402
+        except Exception:
+            import sys as _ssys
+            _ssys.path.insert(0, '/opt/pgz-sport')
+            from blockchain import seal as _seal_mod  # noqa: E402
+            sys_path_added = True
+        del sys_path_added  # silence linters
+        h = _seal_mod.hash_payload(payload)
+        seal_result = _seal_mod.seal_to_polygon(
+            data_hash=h,
+            ref_id=str(finding_id),
+            action='forensic.enriched',
+            ref_type='forensic_finding',
+            payload=payload,
+            user_id=x_user_id,
+            user_email=x_user_email,
+        )
+    except Exception as e:
+        seal_result = {'error': f'{type(e).__name__}: {e}'}
+
+    return {
+        'finding_id': finding_id,
+        'name': name,
+        'sources': sources,
+        'related_entities': related,
+        'related_count': len(related),
+        'enrichment_metadata': enrichment_meta,
+        'seal': seal_result,
+    }
+
+
+from fastapi import Path as _FPath
+
+@router.post("/enrich/{kind:str}/{eid:int}")
+def enrich_preview(kind: str = _FPath(..., regex='^(klub|savez|sportas)$'), eid: int = 0):
+    row = _load_row(kind, eid)
+    if   kind == 'klub':    res = _propose_for_klub(row)
+    elif kind == 'savez':   res = _propose_for_savez(row)
+    else:                   res = _propose_for_sportas(row)
+
+    if kind == 'klub':
+        keys = ['oib','sport','grad','predsjednik','tajnik','web','email','telefon',
+                'sjediste','godina_osnutka','ciljevi','opis_djelatnosti']
+    elif kind == 'savez':
+        keys = ['oib','sport','predsjednik','tajnik','email','telefon','web','adresa','godina_osnutka']
+    else:
+        keys = ['sport','profile_url','slika_url','hns_igrac_id','biografija',
+                'datum_rodenja','mjesto_rodenja','broj_dresa','visina_cm','tezina_kg',
+                'dominantna_noga','oib']
+
+    naziv = _display_name(kind, row)
+    grad = row.get('grad') if kind == 'klub' else None
+    primary = row.get('web') or row.get('web_stranica') or row.get('source_url') or row.get('scrape_url') or row.get('profile_url')
+
+    filled  = sum(1 for k in keys if row.get(k))
+    coverage = round(filled / len(keys) * 100)
+    missing  = [k for k in keys if not row.get(k)]
+
+    proposed = res['proposed']
+    current  = {k: row.get(k) for k in proposed.keys()}
+    meta = row.get('metadata') or {}
+    if not isinstance(meta, dict): meta = {}
+
+    return {
+        'kind': kind, 'id': eid, 'naziv': naziv,
+        'coverage': coverage, 'filled_fields': filled, 'total_fields': len(keys),
+        'missing_fields': missing,
+        'live_snippet': _fetch_title(primary) if primary else None,
+        'research_links': _research_links(naziv, kind, grad, sport=row.get('sport')),
+        'sport': row.get('sport'),
+        'sport_federation': (lambda f: {
+            'national': (f.get('national') or {}).get('name') if f else None,
+            'national_url': (f.get('national') or {}).get('url') if f else None,
+            'pgz': (f.get('pgz') or {}).get('name') if f else None,
+        })(_sport_fed(row.get('sport'))),
+        'sources': res['sources'],
+        'current':  current,
+        'proposed': proposed,
+        'last_enriched_at': meta.get('enriched_at'),
+        'last_enrichment_source': meta.get('enrichment_source'),
+        'enriched_at': int(time.time()),
+        'apply_url': f'/sport/api/v2/enrich/{kind}/{eid}/apply',
+    }
+
+
+_TABLE_MAP = {
+    'klub':    ('pgz_sport.klubovi',
+                {'web','email','telefon','predsjednik','tajnik',
+                 'opis_djelatnosti','ciljevi','godina_osnutka','sjediste','adresa'}),
+    'savez':   ('pgz_sport.savezi',
+                {'web','email','telefon','predsjednik','tajnik','adresa','godina_osnutka'}),
+    'sportas': ('pgz_sport.clanovi',
+                {'biografija','profile_url','source_url','slika_url','hns_igrac_id',
+                 'datum_rodenja','mjesto_rodenja','broj_dresa','visina_cm',
+                 'tezina_kg','dominantna_noga','oib'}),
+}
+
+
+def _apply_to_db(kind: str, eid: int, fields: dict, sources: list, user_email: Optional[str]):
+    if kind not in _TABLE_MAP:
+        raise HTTPException(400, "kind must be klub|savez|sportas")
+    table, allowed = _TABLE_MAP[kind]
+
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute(f"SELECT * FROM {table} WHERE id=%s FOR UPDATE", (eid,))
+        before = cur.fetchone()
+        if not before: raise HTTPException(404, kind + " not found")
+        before = dict(before)
+
+        sets, params, applied = [], [], {}
+        for k, v in (fields or {}).items():
+            if k not in allowed: continue
+            if v is None or str(v).strip() == '': continue
+            if before.get(k):
+                continue  # never overwrite existing
+            sets.append(f"{k} = %s")
+            params.append(v); applied[k] = v
+
+        meta_in = before.get('metadata') or {}
+        if not isinstance(meta_in, dict): meta_in = {}
+        now_iso = datetime.now(timezone.utc).isoformat()
+        meta_in['enriched_at'] = now_iso
+        meta_in['enrichment_source'] = [s.get('source') for s in (sources or []) if s.get('source')]
+        history = meta_in.get('enrichment_history') or []
+        history.append({
+            'at': now_iso,
+            'fields': list(applied.keys()),
+            'sources': meta_in['enrichment_source'],
+            'urls':    [s.get('url') for s in (sources or []) if s.get('url')],
+            'user':    user_email,
+        })
+        meta_in['enrichment_history'] = history[-10:]
+        sets.append("metadata = %s::jsonb")
+        params.append(json.dumps(meta_in, ensure_ascii=False, default=str))
+
+        params.append(eid)
+        cur.execute(f"UPDATE {table} SET {', '.join(sets)} WHERE id=%s RETURNING *", params)
+        after = dict(cur.fetchone())
+
+        cur.execute(
+            """INSERT INTO pgz_sport.enrichment_log
+                 (kind, target_id, source, url, fields_set, before_jsonb, after_jsonb, user_email)
+               VALUES (%s,%s,%s,%s,%s,%s::jsonb,%s::jsonb,%s)""",
+            (kind, eid,
+             ','.join(meta_in['enrichment_source'])[:120] if meta_in['enrichment_source'] else None,
+             (sources[0].get('url') if sources else None),
+             list(applied.keys()) or None,
+             json.dumps({k: before.get(k) for k in (list(applied.keys()) + ['metadata'])},
+                        ensure_ascii=False, default=str),
+             json.dumps({k: after.get(k)  for k in (list(applied.keys()) + ['metadata'])},
+                        ensure_ascii=False, default=str),
+             user_email))
+
+    snap_keys = ('id','naziv','ime','prezime','web','email','telefon',
+                 'opis_djelatnosti','biografija','metadata')
+    return {'applied': applied,
+            'after':  {k: after.get(k) for k in snap_keys if k in after}}
+
+
+@router.post("/enrich/{kind:str}/{eid:int}/apply")
+def enrich_apply(kind: str = _FPath(..., regex='^(klub|savez|sportas)$'),
+                 eid: int = 0,
+                 body: dict = Body(default=None),
+                 x_user_email: Optional[str] = Header(default=None),
+                 x_user_id:    Optional[int] = Header(default=None)):
+    body = body or {}
+    fields  = body.get('fields')
+    sources = body.get('sources')
+    if not fields:
+        row = _load_row(kind, eid)
+        if   kind == 'klub':    res = _propose_for_klub(row)
+        elif kind == 'savez':   res = _propose_for_savez(row)
+        else:                   res = _propose_for_sportas(row)
+        fields  = res['proposed']
+        sources = res['sources']
+    out = _apply_to_db(kind, eid, fields or {}, sources or [], x_user_email)
+    applied = out.get('applied') or {}
+    # R4-A3: write to pgz_sport.sys_audit so the audit page sees enrichment events
+    try:
+        from audit_seal_router import audit_log as _audit_log
+        if applied:
+            _audit_log(
+                action='enrich.apply',
+                target_type=kind,
+                target_id=eid,
+                payload={'applied': applied,
+                         'sources': [s.get('url') for s in (sources or []) if isinstance(s, dict)]},
+                user_id=x_user_id,
+                user_email=x_user_email,
+            )
+    except Exception:
+        pass
+    return {
+        'status':         'success' if applied else 'no_changes',
+        'kind':           kind,
+        'id':             eid,
+        'applied_count':  len(applied),
+        'applied_fields': list(applied.keys()),
+        **out,
+    }
+
+
+@router.get("/enrich/log")
+def enrich_log(kind: Optional[str] = None, target_id: Optional[int] = None, limit: int = 50):
+    where, params = [], []
+    if kind:      where.append("kind=%s");      params.append(kind)
+    if target_id: where.append("target_id=%s"); params.append(target_id)
+    sql = ("SELECT id, kind, target_id, source, url, fields_set, user_email, created_at "
+           "FROM pgz_sport.enrichment_log "
+           + ("WHERE " + " AND ".join(where) + " " if where else "")
+           + "ORDER BY id DESC LIMIT %s")
+    params.append(min(int(limit or 50), 200))
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute(sql, params)
+        rows = [dict(r) for r in cur.fetchall()]
+    for r in rows:
+        if r.get('created_at'): r['created_at'] = r['created_at'].isoformat()
+    return {'count': len(rows), 'rows': rows}
+
+
+# ─── R3B M2 — SEARCH SUGGEST (autocomplete for Mreža) ───────────────────
+@router.get("/search/suggest")
+def search_suggest(q: str = '', type: str = '', limit: int = 10):
+    """
+    Autocomplete suggestions for the Mreža search inputs.
+    type ∈ {person, club, company, ''} — empty means all.
+    Returns: {query, results: [{id, label, type, sub}]}
+    """
+    q = (q or '').strip()
+    if len(q) < 2:
+        return {'query': q, 'results': []}
+    limit = max(1, min(50, int(limit)))
+    out = []
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        if type in ('', 'club'):
+            cur.execute("""
+              SELECT id, naziv AS label, sport, grad
+              FROM pgz_sport.klubovi
+              WHERE naziv ILIKE %s AND aktivan=TRUE
+              ORDER BY length(naziv), naziv LIMIT %s
+            """, ('%'+q+'%', limit))
+            for r in cur.fetchall():
+                out.append({'id':'klub:'+str(r['id']), 'label': r['label'], 'type':'club',
+                            'sub': (r.get('sport') or '')+' · '+(r.get('grad') or '')})
+            cur.execute("""
+              SELECT id, naziv AS label, sport
+              FROM pgz_sport.savezi
+              WHERE naziv ILIKE %s AND aktivan=TRUE
+              ORDER BY length(naziv), naziv LIMIT %s
+            """, ('%'+q+'%', limit))
+            for r in cur.fetchall():
+                out.append({'id':'savez:'+str(r['id']), 'label': r['label'], 'type':'savez',
+                            'sub': r.get('sport') or 'savez'})
+        if type in ('', 'person'):
+            cur.execute("""
+              SELECT c.id, c.ime, c.prezime, c.sport, k.naziv AS klub_naziv
+              FROM pgz_sport.clanovi c
+              LEFT JOIN pgz_sport.klubovi k ON k.id = c.klub_id
+              WHERE (COALESCE(c.ime,'') || ' ' || COALESCE(c.prezime,'')) ILIKE %s
+              ORDER BY length(COALESCE(c.ime,'')||COALESCE(c.prezime,'')), c.prezime
+              LIMIT %s
+            """, ('%'+q+'%', limit))
+            for r in cur.fetchall():
+                out.append({'id':'sportas:'+str(r['id']),
+                            'label': (r.get('ime') or '')+' '+(r.get('prezime') or ''),
+                            'type':'person',
+                            'sub': (r.get('sport') or 'sportaš')+(r.get('klub_naziv') and ' · '+r['klub_naziv'] or '')})
+            cur.execute("""
+              SELECT id, name AS label, function, oib, county
+              FROM civic.persons
+              WHERE name ILIKE %s
+              ORDER BY oib NULLS LAST, length(name) LIMIT %s
+            """, ('%'+q+'%', limit))
+            for r in cur.fetchall():
+                out.append({'id':'civic_person:'+str(r['id']),
+                            'label': r['label'], 'type':'person',
+                            'sub': (r.get('function') or 'civic')+' · '+(r.get('county') or '')})
+        if type in ('', 'company'):
+            cur.execute("""
+              SELECT id, name AS label, oib, city, entity_type
+              FROM civic.entities
+              WHERE name ILIKE %s
+              ORDER BY length(name) LIMIT %s
+            """, ('%'+q+'%', limit))
+            for r in cur.fetchall():
+                out.append({'id':'civic_entity:'+str(r['id']),
+                            'label': r['label'], 'type':'company',
+                            'sub': (r.get('entity_type') or 'tvrtka')+' · '+(r.get('city') or '')})
+    return {'query': q, 'results': out[:limit*2]}
+
+
+# ─── R3B M3 — FORENSIC ENRICH (Wikipedia scrape + persist) ──────────────
+@router.post("/forensic/findings/{finding_id}/enrich")
+def enrich_forensic(finding_id: int):
+    """
+    Look up the forensic finding, derive the PEP person name from
+    entities_involved or title, hit Wikipedia HR for a summary, and persist
+    the enriched payload into civic.forensic_findings.ai_analysis (or back into
+    raw_data.enrichment).
+    """
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute("""
+          SELECT id, finding_type, severity, title, description, entities_involved,
+                 raw_data, ai_analysis
+          FROM civic.forensic_findings WHERE id=%s
+        """, (finding_id,))
+        f = cur.fetchone()
+        if not f: raise HTTPException(404, "finding not found")
+        f = dict(f)
+
+        # Derive person name candidates
+        candidates = []
+        if isinstance(f.get('entities_involved'), (list, dict)):
+            ei = f['entities_involved']
+            if isinstance(ei, dict):
+                for k in ('person','name','osoba','PEP','pep'):
+                    if ei.get(k): candidates.append(str(ei[k]))
+                # Also try persons: [...] list
+                for p in (ei.get('persons') or ei.get('osobe') or []):
+                    if isinstance(p, dict) and p.get('name'): candidates.append(p['name'])
+                    elif isinstance(p, str): candidates.append(p)
+            elif isinstance(ei, list):
+                for it in ei:
+                    if isinstance(it, dict):
+                        for k in ('name','person','label'):
+                            if it.get(k): candidates.append(str(it[k])); break
+                    elif isinstance(it, str):
+                        candidates.append(it)
+        if not candidates and f.get('title'):
+            # Heuristic: extract first capitalised "Ime Prezime" pair
+            m = re.search(r'\b([A-ZŠĐČĆŽ][a-zšđčćž]{2,})\s+([A-ZŠĐČĆŽ][a-zšđčćž]{2,})', f['title'])
+            if m: candidates.append(m.group(0))
+
+        wiki = None
+        used_query = None
+        for q in candidates[:3]:
+            wiki = _wiki_summary(q)
+            if wiki:
+                used_query = q
+                break
+
+        # Build enrichment payload
+        enrichment = {
+            'queried': candidates[:5],
+            'used_query': used_query,
+            'wiki': wiki,
+            'enriched_at': datetime.now(timezone.utc).isoformat(),
+        }
+
+        # Persist into raw_data.enrichment
+        raw = f.get('raw_data')
+        if raw is None: raw = {}
+        if not isinstance(raw, dict): raw = {'_legacy': raw}
+        raw['enrichment'] = enrichment
+
+        cur.execute("""
+          UPDATE civic.forensic_findings
+          SET raw_data = %s::jsonb,
+              ai_analysis = COALESCE(ai_analysis, %s)
+          WHERE id = %s
+        """, (json.dumps(raw, default=str, ensure_ascii=False),
+              (wiki or {}).get('extract'),
+              finding_id))
+        c.commit()
+
+    return {
+        'finding_id': finding_id,
+        'queried': candidates[:5],
+        'used_query': used_query,
+        'wiki': wiki,
+        'persisted': True,
+    }
+
+
+# ─── R3B P4 — FORENSIC SCAN (kept from prior version) ───────────────────
+@router.post("/forensic/scan")
+def forensic_scan(req: dict = Body(...)):
+    name = (req.get('name') or '').strip()
+    if len(name) < 3:
+        raise HTTPException(400, "name must be at least 3 chars")
+    with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+        cur.execute("""
+          SELECT id, name, function, party, county, city, oib, trust_tier
+          FROM civic.persons
+          WHERE upper(name) ILIKE upper(%s)
+          ORDER BY oib NULLS LAST, id LIMIT 25
+        """, ('%' + name + '%',))
+        persons = [dict(r) for r in cur.fetchall()]
+        for p in persons:
+            p['links'] = []; p['findings'] = []
+            if p.get('oib'):
+                cur.execute("""
+                  SELECT pel.entity_id, pel.roles, e.name AS entity_name, e.oib AS entity_oib,
+                         e.entity_type, e.city, e.risk_score
+                  FROM civic.person_entity_links pel
+                  LEFT JOIN civic.entities e ON e.id = pel.entity_id
+                  WHERE pel.person_oib = %s LIMIT 50
+                """, (p['oib'],))
+                p['links'] = [dict(r) for r in cur.fetchall()]
+                cur.execute("""
+                  SELECT id, finding_type, severity, title, severity_score, created_at
+                  FROM civic.forensic_findings
+                  WHERE entities_involved::text ILIKE %s
+                  ORDER BY severity_score DESC, created_at DESC LIMIT 30
+                """, ('%' + p['oib'] + '%',))
+                p['findings'] = [dict(r) for r in cur.fetchall()]
+            if not p['findings']:
+                cur.execute("""
+                  SELECT id, finding_type, severity, title, severity_score, created_at
+                  FROM civic.forensic_findings
+                  WHERE title ILIKE %s OR description ILIKE %s
+                  ORDER BY severity_score DESC, created_at DESC LIMIT 30
+                """, ('%' + p['name'] + '%', '%' + p['name'] + '%'))
+                p['findings'] = [dict(r) for r in cur.fetchall()]
+    total_links = total_findings = crit_findings = 0
+    for p in persons:
+        total_links += len(p.get('links') or [])
+        for f in p.get('findings') or []:
+            total_findings += 1
+            if f.get('severity') in ('CRITICAL', 'HIGH'): crit_findings += 1
+        score = 0
+        if (p.get('function') or '').strip(): score += 30
+        if (p.get('party') or '').strip():    score += 15
+        score += min(40, len(p.get('links') or []) * 5)
+        score += min(40, len(p.get('findings') or []) * 10)
+        score += sum(20 for f in (p.get('findings') or []) if f.get('severity') in ('CRITICAL', 'HIGH'))
+        p['risk_score'] = min(100, score)
+    overall = max((p.get('risk_score', 0) for p in persons), default=0)
+    return {'query': name, 'matched_persons': len(persons),
+            'overall_risk_score': overall, 'total_links': total_links,
+            'total_findings': total_findings, 'critical_findings': crit_findings,
+            'persons': persons, 'scanned_at': int(time.time())}
+
+
+
+# ─── SB-3 — Bulk enrichment ─────────────────────────────────────────────
+_BULK_KEY_MAP = {
+    'klub':    ('pgz_sport.klubovi',
+                ('oib','sport','grad','predsjednik','tajnik','web','email','telefon',
+                 'sjediste','godina_osnutka','ciljevi','opis_djelatnosti')),
+    'savez':   ('pgz_sport.savezi',
+                ('oib','sport','predsjednik','tajnik','email','telefon','web',
+                 'adresa','godina_osnutka')),
+    'sportas': ('pgz_sport.clanovi',
+                ('sport','profile_url','slika_url','hns_igrac_id','biografija',
+                 'datum_rodenja','mjesto_rodenja','broj_dresa')),
+}
+
+
+def _coverage_sql(prefix: str, keys: tuple[str, ...]) -> str:
+    parts = [f"(CASE WHEN {prefix}{k} IS NOT NULL AND ({prefix}{k}::text) <> '' THEN 1 ELSE 0 END)"
+             for k in keys]
+    return f"((({' + '.join(parts)})::numeric * 100) / {len(keys)})"
+
+
+def _bulk_pick(kind: str, limit: int, coverage_max: int) -> list[int]:
+    if kind not in _BULK_KEY_MAP:
+        raise HTTPException(400, "kind must be klub|savez|sportas")
+    table, keys = _BULK_KEY_MAP[kind]
+    cov = _coverage_sql('', keys)
+    extra_where = ''
+    if kind == 'klub':
+        extra_where = "AND aktivan = TRUE"
+    elif kind == 'sportas':
+        extra_where = "AND aktivan = TRUE"
+    sql = (f"SELECT id FROM {table} "
+           f"WHERE 1=1 {extra_where} "
+           f"AND {cov} < %s "
+           f"ORDER BY random() LIMIT %s")
+    with _db() as c, c.cursor() as cur:
+        cur.execute(sql, (coverage_max, limit))
+        return [r[0] for r in cur.fetchall()]
+
+
+@router.post("/enrich/bulk")
+def enrich_bulk(body: dict = Body(default=None),
+                x_user_email: Optional[str] = Header(default=None),
+                x_user_id:    Optional[int] = Header(default=None)):
+    """Run preview+apply over N random under-enriched rows of one kind.
+
+    Body: {kind: 'klub'|'savez'|'sportas', limit: 50, coverage_max: 70}
+    Returns aggregate stats. Synchronous (use polling, not SSE).
+    """
+    body = body or {}
+    kind = (body.get('kind') or '').strip().lower()
+    if kind not in _BULK_KEY_MAP:
+        raise HTTPException(400, "kind must be klub|savez|sportas")
+    limit         = max(1, min(int(body.get('limit') or 50), 200))
+    coverage_max  = max(0, min(int(body.get('coverage_max') or 70), 100))
+
+    ids = _bulk_pick(kind, limit, coverage_max)
+    items: list[dict] = []
+    fields_total = 0
+    started = time.time()
+
+    for eid in ids:
+        try:
+            row = _load_row(kind, eid)
+            if   kind == 'klub':    res = _propose_for_klub(row)
+            elif kind == 'savez':   res = _propose_for_savez(row)
+            else:                   res = _propose_for_sportas(row)
+            proposed = res.get('proposed') or {}
+            srcs     = res.get('sources')  or []
+            if not proposed:
+                items.append({'id': eid, 'applied': 0, 'fields': []})
+                continue
+            out = _apply_to_db(kind, eid, proposed, srcs, x_user_email)
+            applied = out.get('applied') or {}
+            fields_total += len(applied)
+            items.append({'id': eid, 'applied': len(applied), 'fields': list(applied.keys())})
+            try:
+                from audit_seal_router import audit_log as _audit_log
+                if applied:
+                    _audit_log(action='enrich.bulk.apply',
+                               target_type=kind, target_id=eid,
+                               payload={'applied': applied},
+                               user_id=x_user_id, user_email=x_user_email)
+            except Exception:
+                pass
+        except HTTPException as e:
+            items.append({'id': eid, 'error': e.detail})
+        except Exception as e:
+            items.append({'id': eid, 'error': f'{type(e).__name__}: {e}'})
+
+    return {
+        'status':       'success',
+        'kind':         kind,
+        'requested':    limit,
+        'processed':    len(items),
+        'fields_total': fields_total,
+        'elapsed_s':    round(time.time() - started, 1),
+        'items':        items,
+    }
+
+
+# ─── SB-4 — Worker status / control ─────────────────────────────────────
+_REDIS_KEYS = {
+    'heartbeat':   'cc:pgz-enricher:heartbeat',
+    'pause':       'cc:pgz-enricher:pause',
+    'run_now':     'cc:pgz-enricher:run_now',
+    'last_cycle':  'cc:pgz-enricher:last_cycle',
+    'confidence':  'cc:pgz-enricher:confidence',
+    'fields_24h':  'cc:pgz-enricher:fields_24h',
+}
+
+
+def _redis_client():
+    try:
+        import redis
+    except Exception:
+        return None
+    host = os.environ.get('REDIS_HOST', 'localhost')
+    port = int(os.environ.get('REDIS_PORT', '6379'))
+    pwd  = (os.environ.get('REDIS_PASS') or '').strip().strip("'").strip('"') or None
+    # Try with password first (prod); fall back to anonymous (dev box) on AUTH failure.
+    for p in (pwd, None):
+        try:
+            r = redis.Redis(host=host, port=port, password=p,
+                            decode_responses=True, socket_connect_timeout=2)
+            r.ping()
+            return r
+        except Exception:
+            continue
+    return None
+
+
+@router.get("/enrich/worker/status")
+def enrich_worker_status():
+    r = _redis_client()
+    out = {'available': bool(r)}
+    if not r:
+        return out
+    try:
+        hb = r.get(_REDIS_KEYS['heartbeat'])
+        out['heartbeat']        = int(hb) if hb else None
+        out['heartbeat_age_s']  = (int(time.time()) - int(hb)) if hb else None
+        out['paused']           = (r.get(_REDIS_KEYS['pause']) or '0') == '1'
+        out['run_now_pending']  = (r.get(_REDIS_KEYS['run_now']) or '0') == '1'
+        last = r.get(_REDIS_KEYS['last_cycle'])
+        if last:
+            try:    out['last_cycle'] = json.loads(last)
+            except: out['last_cycle'] = last
+        conf = r.get(_REDIS_KEYS['confidence'])
+        out['confidence_threshold'] = float(conf) if conf else 0.7
+        f24 = r.get(_REDIS_KEYS['fields_24h'])
+        out['fields_24h'] = int(f24) if f24 and f24.isdigit() else 0
+    except Exception as e:
+        out['error'] = f'{type(e).__name__}: {e}'
+    # Recent enrichment_log rows for live activity
+    try:
+        with _db() as c, c.cursor(cursor_factory=psycopg2.extras.RealDictCursor) as cur:
+            cur.execute("""SELECT id, kind, target_id, source, fields_set, user_email, created_at
+                           FROM pgz_sport.enrichment_log
+                           ORDER BY id DESC LIMIT 25""")
+            rows = []
+            for rr in cur.fetchall():
+                rr = dict(rr)
+                if rr.get('created_at'): rr['created_at'] = rr['created_at'].isoformat()
+                rows.append(rr)
+            out['recent'] = rows
+    except Exception:
+        out['recent'] = []
+    return out
+
+
+@router.post("/enrich/worker/pause")
+def enrich_worker_pause(body: dict = Body(default=None)):
+    body = body or {}
+    pause = bool(body.get('paused', True))
+    r = _redis_client()
+    if not r: raise HTTPException(503, 'redis unavailable')
+    r.set(_REDIS_KEYS['pause'], '1' if pause else '0')
+    return {'status': 'success', 'paused': pause}
+
+
+@router.post("/enrich/worker/run-now")
+def enrich_worker_run_now():
+    r = _redis_client()
+    if not r: raise HTTPException(503, 'redis unavailable')
+    r.set(_REDIS_KEYS['run_now'], '1')
+    return {'status': 'success', 'queued': True}
+
+
+@router.post("/enrich/worker/confidence")
+def enrich_worker_confidence(body: dict = Body(...)):
+    try:
+        v = float(body.get('value'))
+    except Exception:
+        raise HTTPException(400, 'value must be number 0..1')
+    if not (0.0 <= v <= 1.0):
+        raise HTTPException(400, 'value out of range 0..1')
+    r = _redis_client()
+    if not r: raise HTTPException(503, 'redis unavailable')
+    r.set(_REDIS_KEYS['confidence'], str(v))
+    return {'status': 'success', 'confidence_threshold': v}
diff --git a/_backups/sprint_1777940323/sport2.html b/_backups/sprint_1777940323/sport2.html
new file mode 100644
index 0000000..abcceb7
--- /dev/null
+++ b/_backups/sprint_1777940323/sport2.html
@@ -0,0 +1,2950 @@
+<!DOCTYPE html>
+<html lang="hr">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width,initial-scale=1.0">
+<title>PGŽ SPORT — Platforma</title>
+<link rel="preconnect" href="https://fonts.googleapis.com">
+<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+<link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;500;600;700;800&family=JetBrains+Mono:wght@400;600&display=swap" rel="stylesheet">
+<script src="https://cdnjs.cloudflare.com/ajax/libs/Chart.js/4.4.1/chart.umd.min.js"></script>
+<script src="https://cdnjs.cloudflare.com/ajax/libs/d3/7.8.5/d3.min.js"></script>
+<script src="https://unpkg.com/three@0.160.0/build/three.min.js"></script>
+<script src="https://unpkg.com/3d-force-graph@1.73.0/dist/3d-force-graph.min.js"></script>
+<style>
+:root{
+  --pgz-blue:#003087; --pgz-blue2:#004CC4; --pgz-gold:#F4C430;
+  --bg0:#08090e; --bg1:#0d1021; --bg2:#111628; --bg3:#161d35; --bg4:#1c2542;
+  --rim:#1e2a50; --rim2:#283560;
+  --t0:#fff; --t1:#e2e6f0; --t2:#8a95b4; --t4:#4e5a7a;
+  --green:#00e88f; --red:#ff2d55; --amber:#f59e0b; --cyan:#00c8e8;
+  --font:'Inter',sans-serif; --mono:'JetBrains Mono',monospace;
+}
+*{box-sizing:border-box;margin:0;padding:0}
+html,body{height:100%}
+body{font-family:var(--font);background:var(--bg0);color:var(--t1);font-size:13px;overflow-x:hidden}
+a{color:var(--cyan);text-decoration:none}
+a:hover{color:var(--pgz-gold)}
+button,input,select{font-family:inherit;font-size:inherit;outline:none}
+::-webkit-scrollbar{width:8px;height:8px}
+::-webkit-scrollbar-track{background:var(--bg1)}
+::-webkit-scrollbar-thumb{background:var(--rim2);border-radius:4px}
+::-webkit-scrollbar-thumb:hover{background:var(--pgz-blue2)}
+
+.app{display:flex;min-height:100vh}
+/* Native sidebar replaced by shared /static/shared/sidebar.* — kept hidden but DOM intact for legacy buildNav() calls */
+.sb{display:none}
+.sb-old{width:240px;background:linear-gradient(180deg,var(--bg1) 0%,var(--bg0) 100%);border-right:1px solid var(--rim);position:fixed;top:0;left:0;bottom:0;display:flex;flex-direction:column;z-index:10;transition:width .22s ease}
+.sb-h{padding:18px 18px 14px;border-bottom:1px solid var(--rim);position:relative}
+.sb-h .logo{font-weight:800;font-size:14px;color:var(--t0);letter-spacing:.5px;white-space:nowrap;overflow:hidden}
+.sb-h .logo .g{color:var(--pgz-gold)}
+.sb-h .sub{font-size:10px;color:var(--t2);margin-top:4px;text-transform:uppercase;letter-spacing:1px;white-space:nowrap;overflow:hidden}
+.sb-toggle{position:absolute;top:14px;right:8px;width:22px;height:22px;display:flex;align-items:center;justify-content:center;cursor:pointer;color:var(--t2);background:var(--bg2);border:1px solid var(--rim);border-radius:4px;font-size:11px;font-weight:700;transition:all .15s;user-select:none}
+.sb-toggle:hover{background:var(--bg3);color:var(--pgz-gold);border-color:var(--pgz-gold)}
+.sb-nav{flex:1;padding:10px 8px;overflow-y:auto;overflow-x:hidden}
+.nav-i{padding:9px 12px;border-radius:6px;color:var(--t2);cursor:pointer;display:flex;align-items:center;gap:10px;font-size:12.5px;margin-bottom:2px;transition:background .15s,color .15s;white-space:nowrap}
+.nav-i:hover{background:var(--bg2);color:var(--t1)}
+.nav-i.active{background:linear-gradient(90deg,var(--pgz-blue) 0%,var(--pgz-blue2) 100%);color:#fff;font-weight:600}
+.nav-i .ic{width:18px;text-align:center;font-size:14px;flex-shrink:0}
+.nav-i .lbl{overflow:hidden;text-overflow:ellipsis}
+.sb-foot{padding:10px 14px;border-top:1px solid var(--rim);font-size:10px;color:var(--t4);white-space:nowrap;overflow:hidden}
+
+/* Collapsed sidebar */
+.sb.collapsed{width:58px}
+.sb.collapsed .sb-h{padding:18px 8px 14px;text-align:center}
+.sb.collapsed .sb-h .logo{font-size:0}
+.sb.collapsed .sb-h .logo::before{content:"PG";font-size:13px;color:var(--pgz-gold);font-weight:800}
+.sb.collapsed .sb-h .sub{display:none}
+.sb.collapsed .sb-toggle{position:static;margin:6px auto 0;display:flex}
+.sb.collapsed .nav-i{justify-content:center;padding:10px 6px}
+.sb.collapsed .nav-i .lbl{display:none}
+.sb.collapsed .nav-i{position:relative}
+.sb.collapsed .nav-i:hover::after{content:attr(data-label);position:absolute;left:58px;top:50%;transform:translateY(-50%);background:var(--bg3);color:var(--t0);padding:5px 10px;border-radius:4px;font-size:11.5px;white-space:nowrap;border:1px solid var(--rim);z-index:50;font-weight:600;pointer-events:none;box-shadow:2px 2px 8px rgba(0,0,0,.4)}
+.sb.collapsed .sb-foot{font-size:0;padding:8px}
+.sb.collapsed .sb-foot::before{content:"v2";font-size:9px;color:var(--t4)}
+.sb.collapsed .nav-sep{font-size:0;padding:6px 0;text-align:center;border-top:1px dashed var(--rim);margin:6px 8px 4px}
+.sb.collapsed .nav-ext span:last-child{display:none}
+
+.main{margin-left:0;flex:1;min-width:0;transition:margin-left .22s ease}
+/* body.pgz-has-sb (from shared/sidebar.css) provides the left padding */
+.tb{background:var(--bg1);border-bottom:1px solid var(--rim);padding:12px 22px;display:flex;align-items:center;justify-content:space-between;position:sticky;top:0;z-index:5}
+.tb-t{font-size:15px;font-weight:700;color:var(--t0)}
+.tb-s{font-size:11px;color:var(--t2)}
+.content{padding:22px}
+.section{display:none}
+.section.active{display:block}
+
+.kpi-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:14px;margin-bottom:22px}
+.kpi{background:linear-gradient(135deg,var(--bg2) 0%,var(--bg1) 100%);border:1px solid var(--rim);border-radius:8px;padding:14px 16px;position:relative;overflow:hidden}
+.kpi::before{content:"";position:absolute;top:0;left:0;width:3px;height:100%;background:var(--pgz-gold)}
+.kpi.b::before{background:var(--pgz-blue2)}
+.kpi.g::before{background:var(--green)}
+.kpi.r::before{background:var(--red)}
+.kpi-l{font-size:10.5px;color:var(--t2);text-transform:uppercase;letter-spacing:1px;font-weight:600}
+.kpi-v{font-size:24px;font-weight:800;color:var(--t0);margin-top:4px;font-family:var(--mono)}
+.kpi-s{font-size:10px;color:var(--t4);margin-top:2px}
+
+.card{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:14px;margin-bottom:14px}
+.card-h{display:flex;align-items:center;justify-content:space-between;margin-bottom:10px;padding-bottom:8px;border-bottom:1px solid var(--rim)}
+.card-t{font-weight:700;color:var(--t0);font-size:13px}
+
+.grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(260px,1fr));gap:12px}
+.grid-club{display:grid;grid-template-columns:repeat(auto-fill,minmax(280px,1fr));gap:12px}
+.grid-player{display:grid;grid-template-columns:repeat(auto-fill,minmax(220px,1fr));gap:12px}
+
+.entity{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:12px;cursor:pointer;transition:all .2s;position:relative}
+.entity:hover{border-color:var(--pgz-gold);background:var(--bg3);transform:translateY(-1px)}
+.entity .et{font-weight:700;color:var(--t0);font-size:13px;margin-bottom:6px;line-height:1.3}
+.entity .es{font-size:11px;color:var(--t2);margin-bottom:6px}
+.entity .em{display:flex;gap:8px;font-size:10.5px;color:var(--t4);flex-wrap:wrap}
+.entity .em b{color:var(--pgz-gold);font-weight:700}
+.entity .et-tag{position:absolute;top:8px;right:8px;font-size:9px;padding:2px 6px;border-radius:3px;background:var(--pgz-blue);color:#fff;font-weight:600;text-transform:uppercase}
+
+.player-card{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;overflow:hidden;cursor:pointer;transition:all .2s}
+.player-card:hover{border-color:var(--pgz-gold);transform:translateY(-1px)}
+.player-card .ph{height:120px;background:linear-gradient(135deg,var(--bg3),var(--bg2));position:relative;overflow:hidden;display:flex;align-items:center;justify-content:center}
+.player-card .ph img{width:100%;height:100%;object-fit:cover;object-position:top}
+.player-card .ph .no{font-size:36px;color:var(--t4);font-weight:800}
+.player-card .pb{padding:10px}
+.player-card .pn{font-weight:700;color:var(--t0);font-size:13px;line-height:1.2}
+.player-card .pp{font-size:11px;color:var(--t2);margin-top:3px}
+.player-card .pk{font-size:10.5px;color:var(--t4);margin-top:3px}
+.player-card .badges{display:flex;gap:4px;margin-top:6px;flex-wrap:wrap}
+.player-card .badge{font-size:9px;padding:2px 5px;border-radius:3px;background:var(--bg4);color:var(--t1);text-transform:uppercase;font-weight:600}
+.player-card .badge.repr{background:var(--pgz-gold);color:var(--bg0)}
+.player-card .badge.hoo{background:var(--pgz-blue2);color:#fff}
+
+table{width:100%;border-collapse:collapse;font-size:12px}
+table th{background:var(--bg3);color:var(--t2);text-transform:uppercase;font-size:10px;letter-spacing:.5px;padding:8px 10px;text-align:left;border-bottom:1px solid var(--rim);font-weight:700}
+table td{padding:8px 10px;border-bottom:1px solid var(--rim);color:var(--t1)}
+table tbody tr{cursor:pointer;transition:background .15s}
+table tbody tr:hover{background:var(--bg3)}
+table tbody tr.no-click{cursor:default}
+table tbody tr.no-click:hover{background:transparent}
+.num{font-family:var(--mono);text-align:right}
+
+.toolbar{display:flex;align-items:center;gap:10px;margin-bottom:14px;flex-wrap:wrap}
+.toolbar input,.toolbar select{background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:7px 10px;color:var(--t1);font-size:12px}
+.toolbar input:focus,.toolbar select:focus{border-color:var(--pgz-blue2)}
+.toolbar input{min-width:200px}
+.toolbar label{font-size:11px;color:var(--t2);display:flex;align-items:center;gap:6px}
+.toolbar input[type=checkbox]{accent-color:var(--pgz-gold)}
+.btn{background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:7px 12px;color:var(--t1);font-size:12px;cursor:pointer;font-weight:600;transition:all .15s}
+.btn:hover{background:var(--bg3);border-color:var(--rim2)}
+.btn.primary{background:linear-gradient(135deg,var(--pgz-blue),var(--pgz-blue2));border-color:transparent;color:#fff}
+.btn.primary:hover{filter:brightness(1.1)}
+
+.toggle{display:inline-flex;background:var(--bg2);border:1px solid var(--rim);border-radius:5px;overflow:hidden}
+.toggle button{background:transparent;border:0;padding:6px 12px;color:var(--t2);font-size:11px;font-weight:600;cursor:pointer}
+.toggle button.active{background:var(--pgz-blue);color:#fff}
+
+.tabs{display:flex;gap:4px;border-bottom:1px solid var(--rim);margin-bottom:14px;flex-wrap:wrap}
+.tab{padding:8px 14px;cursor:pointer;color:var(--t2);font-weight:600;font-size:12px;border-bottom:2px solid transparent;transition:all .15s}
+.tab:hover{color:var(--t1)}
+.tab.active{color:var(--pgz-gold);border-color:var(--pgz-gold)}
+
+.empty{text-align:center;padding:30px;color:var(--t4);font-size:12px;font-style:italic}
+.loading{padding:24px;text-align:center;color:var(--t2);font-size:12px}
+.loading::before{content:"";display:inline-block;width:12px;height:12px;border:2px solid var(--rim);border-top-color:var(--pgz-gold);border-radius:50%;animation:spin .8s linear infinite;margin-right:8px;vertical-align:middle}
+@keyframes spin{to{transform:rotate(360deg)}}
+
+.tag{display:inline-block;padding:2px 7px;font-size:10px;border-radius:3px;background:var(--bg4);color:var(--t1);font-weight:600;text-transform:uppercase;letter-spacing:.5px;margin-right:3px}
+a.tag,.tag[onclick]{cursor:pointer;text-decoration:none;transition:transform .12s,filter .12s}
+a.tag:hover,.tag[onclick]:hover{transform:translateY(-1px);filter:brightness(1.15)}
+.link-chip{color:var(--cyan);cursor:pointer;text-decoration:none;border-bottom:1px dashed transparent;transition:all .15s}
+.link-chip:hover{color:var(--pgz-gold);border-bottom-color:var(--pgz-gold)}
+.kv .v a{color:var(--cyan)}
+.kv .v a:hover{color:var(--pgz-gold)}
+.tag.b{background:var(--pgz-blue);color:#fff}
+.tag.gd{background:var(--pgz-gold);color:var(--bg0)}
+.tag.gr{background:var(--green);color:var(--bg0)}
+.tag.rd{background:var(--red);color:#fff}
+.tag.am{background:var(--amber);color:var(--bg0)}
+
+#panel{position:fixed;top:0;right:-620px;width:600px;max-width:96vw;height:100vh;background:var(--bg1);border-left:1px solid var(--rim);z-index:200;transition:right .25s ease;display:flex;flex-direction:column;box-shadow:-8px 0 30px rgba(0,0,0,.5)}
+#panel.open{right:0}
+#panel-hdr{padding:14px 16px;border-bottom:1px solid var(--rim);display:flex;align-items:center;justify-content:space-between;flex-shrink:0;background:var(--bg2)}
+#panel-hdr-t{font-size:14px;font-weight:700;color:var(--t0)}
+#panel-x{cursor:pointer;font-size:22px;color:var(--t4);width:30px;height:30px;display:flex;align-items:center;justify-content:center;border-radius:5px;transition:all .15s}
+#panel-x:hover{background:var(--bg3);color:var(--red)}
+#panel-body{flex:1;overflow-y:auto;padding:16px}
+#panel-overlay{display:none;position:fixed;inset:0;background:rgba(0,0,0,.5);z-index:199;backdrop-filter:blur(2px)}
+#panel-overlay.open{display:block}
+
+.pp-hdr{display:flex;gap:14px;align-items:flex-start;margin-bottom:14px;padding-bottom:14px;border-bottom:1px solid var(--rim)}
+.pp-foto{width:90px;height:110px;border-radius:6px;background:var(--bg3);overflow:hidden;flex-shrink:0;display:flex;align-items:center;justify-content:center}
+.pp-foto img{width:100%;height:100%;object-fit:cover;object-position:top}
+.pp-foto .no{font-size:32px;color:var(--t4);font-weight:800}
+.pp-info{flex:1;min-width:0}
+.pp-name{font-size:18px;font-weight:800;color:var(--t0);margin-bottom:4px}
+.pp-meta{font-size:12px;color:var(--t2);margin-bottom:6px}
+.pp-tags{display:flex;gap:4px;flex-wrap:wrap}
+.pp-stats{display:grid;grid-template-columns:repeat(6,1fr);gap:8px;margin-bottom:14px;padding:12px;background:var(--bg2);border:1px solid var(--rim);border-radius:6px}
+.pp-stat{text-align:center}
+.pp-stat .v{font-size:20px;font-weight:800;color:var(--pgz-gold);font-family:var(--mono)}
+.pp-stat .l{font-size:9px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px;margin-top:2px;font-weight:600}
+
+.kv{display:grid;grid-template-columns:140px 1fr;gap:6px 12px;font-size:12px}
+.kv .k{color:var(--t2);font-weight:600}
+.kv .v{color:var(--t1);word-break:break-word}
+
+.utlogo{width:22px;height:22px;border-radius:50%;background:var(--bg3);object-fit:contain;vertical-align:middle;margin-right:6px}
+
+.score{display:inline-flex;align-items:center;gap:4px;padding:3px 8px;border-radius:4px;background:var(--bg3);font-size:11px;font-weight:600}
+.score.high{background:rgba(0,232,143,.15);color:var(--green)}
+.score.mid{background:rgba(245,158,11,.15);color:var(--amber)}
+.score.low{background:rgba(255,45,85,.15);color:var(--red)}
+
+.row-2{display:grid;grid-template-columns:1fr 1fr;gap:14px}
+@media (max-width:900px){.row-2{grid-template-columns:1fr}}
+
+.chart-box{background:var(--bg2);border:1px solid var(--rim);border-radius:8px;padding:14px;height:340px}
+.chart-box canvas{max-height:300px}
+
+.alert-card{padding:10px 12px;border-left:3px solid var(--amber);background:var(--bg2);border-radius:5px;margin-bottom:8px}
+.alert-card.crit{border-color:var(--red)}
+.alert-card .at{font-weight:700;font-size:12px;color:var(--t0)}
+.alert-card .ad{font-size:11px;color:var(--t2);margin-top:3px}
+
+.iframe-map{width:100%;height:140px;border:0;border-radius:5px;background:var(--bg3)}
+
+.ac-wrap{position:relative}
+.ac-drop{display:none;position:absolute;top:100%;left:0;right:0;min-width:240px;background:var(--bg2);border:1px solid var(--rim2);border-radius:5px;box-shadow:0 6px 20px rgba(0,0,0,.5);z-index:100;max-height:300px;overflow-y:auto;margin-top:4px}
+.ac-item{padding:8px 12px;cursor:pointer;border-bottom:1px solid var(--rim);transition:background .12s}
+.ac-item:last-child{border-bottom:0}
+.ac-item:hover{background:var(--bg3)}
+.ac-item .ac-l{font-weight:600;color:var(--t0);font-size:12.5px}
+.ac-item .ac-s{font-size:10.5px;color:var(--t2);margin-top:2px}
+.ac-empty{padding:12px;text-align:center;color:var(--t4);font-size:11px;font-style:italic}
+
+@media (max-width:768px){
+  .sb{transform:translateX(-100%);transition:transform .25s}
+  .sb.open{transform:translateX(0)}
+  .main{margin-left:0}
+  .pp-stats{grid-template-columns:repeat(3,1fr)}
+}
+</style>
+<link rel="stylesheet" href="/static/shared/sidebar.css">
+<script src="/static/shared/sidebar.js" defer data-active="dashboard"></script>
+</head>
+<body>
+
+<div class="app">
+  <aside class="sb" id="sb">
+    <div class="sb-h">
+      <div class="logo">PGŽ <span class="g">SPORT</span></div>
+      <div class="sub">Primorsko-goranska županija</div>
+      <div class="sb-toggle" id="sb-toggle" onclick="toggleSidebar()" title="Skupi/raširi sidebar">≡</div>
+    </div>
+    <nav class="sb-nav" id="nav"></nav>
+    <div class="sb-foot">v2.0 · 2026</div>
+  </aside>
+
+  <main class="main">
+    <div class="tb">
+      <div>
+        <div class="tb-t" id="tb-t">Dashboard</div>
+        <div class="tb-s" id="tb-s">Pregled stanja</div>
+      </div>
+      <div class="tb-s">
+        <span style="color:var(--green)">●</span> API live · sport.rinet.one
+      </div>
+    </div>
+
+    <div class="content">
+      <section id="pg-dashboard" class="section active"></section>
+      <section id="pg-savezi" class="section"></section>
+      <section id="pg-klubovi" class="section"></section>
+      <section id="pg-sportasi" class="section"></section>
+      <section id="pg-financije" class="section"></section>
+      <section id="pg-objekti" class="section"></section>
+      <section id="pg-manifestacije" class="section"></section>
+      <section id="pg-mreza" class="section"></section>
+      <section id="pg-forenzika" class="section"></section>
+      <section id="pg-audit" class="section"></section>
+    </div>
+  </main>
+</div>
+
+<div id="panel-overlay" onclick="closePanel()"></div>
+<div id="panel">
+  <div id="panel-hdr">
+    <div id="panel-hdr-t">Detalji</div>
+    <div id="panel-x" onclick="closePanel()">×</div>
+  </div>
+  <div id="panel-body"></div>
+</div>
+
+<script>
+//=========== CONFIG ===========
+const API = '/sport/api';
+const NAV_ITEMS = [
+  {id:'dashboard', ic:'\u{1F4CA}', label:'Dashboard'},
+  {id:'savezi',    ic:'\u{1F3C5}', label:'Savezi'},
+  {id:'klubovi',   ic:'⬢',    label:'Klubovi'},
+  {id:'sportasi',  ic:'\u{1F464}', label:'Sportaši'},
+  {id:'financije', ic:'€',    label:'Financije'},
+  {id:'objekti',   ic:'\u{1F4CD}', label:'Objekti'},
+  {id:'manifestacije', ic:'\u{1F4C5}', label:'Manifestacije'},
+  {id:'mreza',     ic:'\u{1F578}', label:'Mreža'},
+  {id:'forenzika', ic:'⚠',    label:'Forenzika'},
+  {id:'audit',     ic:'\u{1F512}', label:'Audit log'}
+];
+const SECTION_TITLES = {
+  dashboard: ['Dashboard', 'Pregled stanja PGŽ Sporta'],
+  savezi:    ['Savezi', '246 sportskih saveza'],
+  klubovi:   ['Klubovi', 'Sportski klubovi PGŽ'],
+  sportasi:  ['Sportaši', 'Registrirani članovi'],
+  financije: ['Financije', 'Sufinanciranje sporta'],
+  objekti:   ['Sportski objekti', 'Geocodirana infrastruktura'],
+  manifestacije: ['Manifestacije', 'Sportski događaji'],
+  mreza: ['Mreža', 'Force-directed graf entiteta i veza'],
+  forenzika: ['Forenzika', 'Kritični nalazi i alarmi'],
+  audit:     ['Audit log', 'Polygon PoS pečaćenje ključnih akcija']
+};
+
+const _cache = {savezi:null, klubovi:null, clanovi:null, objekti:null, manifestacije:null, sufin:null, dash:null};
+const _state = {section:'dashboard', viewSavezi:'card', viewKlubovi:'card', viewSportasi:'card', viewObjekti:'card', viewManif:'card', viewFinancije:'table'};
+const _sort = {savezi:null, klubovi:null, sportasi:null, objekti:null, manifestacije:null, financije:null};
+let _proracunChart=null, _financijeChart=null;
+
+//=========== UTIL ===========
+const $ = s => document.querySelector(s);
+const $$ = s => Array.from(document.querySelectorAll(s));
+function esc(s){
+  if(s===null||s===undefined) return '';
+  return String(s).replace(/[&<>"']/g, c => ({'&':'&amp;','<':'&lt;','>':'&gt;','"':'&quot;',"'":'&#39;'}[c]));
+}
+function fmtNum(n){
+  if(n===null||n===undefined||n==='') return '—';
+  const v = Number(n);
+  if(isNaN(v)) return esc(n);
+  return v.toLocaleString('hr-HR');
+}
+function fmtEur(n){
+  if(n===null||n===undefined||n==='') return '—';
+  const v = Number(n);
+  if(isNaN(v)) return esc(n);
+  if(v>=1000000) return '€'+(v/1000000).toFixed(2)+'M';
+  if(v>=1000) return '€'+(v/1000).toFixed(1)+'k';
+  return '€'+v.toFixed(0);
+}
+function fmtEurFull(n){
+  if(n===null||n===undefined||n==='') return '—';
+  const v = Number(n);
+  if(isNaN(v)) return esc(n);
+  return v.toLocaleString('hr-HR', {minimumFractionDigits:2, maximumFractionDigits:2})+' €';
+}
+function fmtDate(s){
+  if(!s) return '—';
+  const m = String(s).match(/^(\d{4})-(\d{2})-(\d{2})/);
+  if(!m) return esc(s);
+  return m[3]+'.'+m[2]+'.'+m[1];
+}
+function txt(v, fb){
+  if(v===null||v===undefined||v==='') return fb===undefined?'—':fb;
+  return esc(v);
+}
+async function api(path){
+  try{
+    const r = await fetch(API+path);
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    return await r.json();
+  }catch(e){
+    console.error('API error', path, e);
+    return null;
+  }
+}
+async function apiPost(path, body){
+  try{
+    const r = await fetch(API+path, {method:'POST', headers:{'Content-Type':'application/json'}, body: body?JSON.stringify(body):'{}'});
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    return await r.json();
+  }catch(e){
+    console.error('API POST error', path, e);
+    return null;
+  }
+}
+
+// Cache the latest preview so /apply can pass back the same sources
+window._enrichPreviews = window._enrichPreviews || {};
+
+async function enrichEntity(kind, id){
+  const targetId = 'enrich-out-'+kind+'-'+id;
+  const target = document.getElementById(targetId);
+  if(target) target.innerHTML = '<div class="loading">⏳ Obogaćivanje u tijeku — pretraživanje izvora…</div>';
+  const r = await apiPost('/v2/enrich/'+kind+'/'+id);
+  if(!r){ if(target) target.innerHTML = '<div class="empty">Greška pri obogaćivanju</div>'; return; }
+  window._enrichPreviews[kind+':'+id] = r;
+  const cov = r.coverage||0;
+  const covCls = cov>=70?'high':(cov>=40?'mid':'low');
+  const proposed = r.proposed || {};
+  const current  = r.current  || {};
+  const propKeys = Object.keys(proposed);
+  const lastEnr  = r.last_enriched_at
+    ? `<span class="tb-s" title="${esc(r.last_enriched_at)}">✓ Obogaćeno ${esc(String(r.last_enriched_at).slice(0,10))}</span>`
+    : '';
+
+  let diffHtml = '';
+  if(propKeys.length){
+    const rows = propKeys.map(k => {
+      const cv = current[k]; const pv = proposed[k];
+      const cvHtml = cv
+        ? '<span style="color:var(--t1)">'+esc(String(cv).slice(0,200))+'</span>'
+        : '<span class="tag rd">prazno</span>';
+      const pvHtml = '<span style="color:var(--ok)">'+esc(String(pv).slice(0,400))+'</span>';
+      return `<tr>
+        <td style="vertical-align:top;padding:6px 8px"><label style="display:flex;gap:6px;align-items:center;cursor:pointer">
+          <input type="checkbox" data-field="${esc(k)}" checked style="width:16px;height:16px"> <b style="font-family:monospace;font-size:12px">${esc(k)}</b>
+        </label></td>
+        <td style="vertical-align:top;padding:6px 8px;font-size:12px;max-width:240px">${cvHtml}</td>
+        <td style="vertical-align:top;padding:6px 8px;font-size:12px">${pvHtml}</td>
+      </tr>`;
+    }).join('');
+    diffHtml = `
+      <div style="margin:10px 0;border:1px solid var(--ln);border-radius:6px;overflow:hidden">
+        <div style="padding:8px 10px;background:var(--bg3);font-size:11px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px">📋 Predložene izmjene (uncheck za preskočiti)</div>
+        <table style="width:100%;border-collapse:collapse;font-size:12px">
+          <thead><tr style="background:var(--bg2)"><th style="text-align:left;padding:6px 8px;width:160px">Polje</th><th style="text-align:left;padding:6px 8px;width:240px">Trenutno</th><th style="text-align:left;padding:6px 8px">Predloženo</th></tr></thead>
+          <tbody id="enrich-diff-${kind}-${id}">${rows}</tbody>
+        </table>
+        <div style="padding:8px 10px;background:var(--bg2);display:flex;gap:8px;justify-content:flex-end;flex-wrap:wrap">
+          <button class="btn"         onclick="enrichSelectAll('${kind}',${id},true)">Označi sve</button>
+          <button class="btn"         onclick="enrichSelectAll('${kind}',${id},false)">Poništi sve</button>
+          <button class="btn"         onclick="document.getElementById('enrich-out-${kind}-${id}').innerHTML=''">❌ Odustani</button>
+          <button class="btn primary" onclick="enrichApply('${kind}',${id})">💾 SPREMI IZMJENE</button>
+        </div>
+      </div>`;
+  } else {
+    diffHtml = '<div class="empty" style="padding:14px">Nema novih predloženih dopuna iz vanjskih izvora.</div>';
+  }
+
+  const sourcesHtml = (r.sources||[]).map(s => `
+    <div style="padding:8px 10px;background:var(--bg3);border-left:3px solid var(--pgz-gold);border-radius:4px;margin-bottom:6px">
+      <div style="font-size:11px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px">${esc(s.source||'')}</div>
+      ${s.title ? '<div style="font-weight:700;color:var(--t0);font-size:13px">'+esc(s.title)+'</div>' : ''}
+      ${s.extract ? '<div style="font-size:11.5px;color:var(--t1);line-height:1.5">'+esc(String(s.extract).slice(0,300))+'…</div>' : ''}
+      ${s.url ? '<div style="margin-top:4px"><a href="'+esc(s.url)+'" target="_blank" style="font-size:11px">↗ '+esc(String(s.url).slice(0,90))+'</a></div>' : ''}
+    </div>`).join('');
+
+  const html = `
+    <div style="display:flex;gap:8px;align-items:center;flex-wrap:wrap;margin-bottom:10px">
+      <span class="tag gr">🟢 OBOGAĆENO</span>
+      <span class="score ${covCls}">Coverage ${cov}%</span>
+      <span class="tb-s">${r.filled_fields}/${r.total_fields} polja popunjeno</span>
+      ${lastEnr}
+    </div>
+    ${diffHtml}
+    ${sourcesHtml ? `<div style="margin:10px 0">
+      <div style="font-size:11px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px;margin-bottom:6px">🔗 Izvori</div>
+      ${sourcesHtml}
+    </div>` : ''}
+    <div>
+      <div style="font-size:11px;color:var(--t2);margin-bottom:6px">🔍 Istraži dalje:</div>
+      <div style="display:flex;flex-wrap:wrap;gap:6px">
+        ${(r.research_links||[]).map(l => '<a href="'+esc(l.url)+'" target="_blank" class="btn">'+l.icon+' '+esc(l.label)+'</a>').join('')}
+      </div>
+    </div>
+  `;
+  if(target) target.innerHTML = html;
+}
+
+function enrichSelectAll(kind, id, on){
+  const tbody = document.getElementById('enrich-diff-'+kind+'-'+id);
+  if(!tbody) return;
+  tbody.querySelectorAll('input[type=checkbox]').forEach(cb => { cb.checked = !!on; });
+}
+
+// Reusable toast component (success / error / info / warn).
+window.toast = function(msg, type, duration){
+  type = type || 'success';
+  duration = duration || 3000;
+  const palette = {
+    success: ['#1ec773', '#0b1a16'],
+    error:   ['#ff6b6b', '#1a0b0b'],
+    info:    ['#4a9eff', '#04132b'],
+    warn:    ['#ffb84a', '#1a1004'],
+  }[type] || ['#4a9eff', '#04132b'];
+  const t = document.createElement('div');
+  t.className = 'pgz-toast pgz-toast-' + type;
+  t.style.cssText = 'position:fixed;right:20px;bottom:20px;'+
+    'background:'+palette[0]+';color:'+palette[1]+';'+
+    'padding:12px 18px;border-radius:8px;font-weight:700;font-size:14px;'+
+    'z-index:99999;box-shadow:0 6px 22px rgba(0,0,0,.45);'+
+    'transform:translateY(40px);opacity:0;transition:all .25s ease-out;'+
+    'max-width:380px;line-height:1.45;';
+  t.innerHTML = msg;
+  document.body.appendChild(t);
+  requestAnimationFrame(()=>{ t.style.transform='translateY(0)'; t.style.opacity='1'; });
+  setTimeout(()=>{
+    t.style.transform='translateY(40px)'; t.style.opacity='0';
+    setTimeout(()=>t.remove(), 280);
+  }, duration);
+  return t;
+};
+
+async function enrichApply(kind, id){
+  const target = document.getElementById('enrich-out-'+kind+'-'+id);
+  const tbody  = document.getElementById('enrich-diff-'+kind+'-'+id);
+  const preview = (window._enrichPreviews||{})[kind+':'+id];
+  if(!preview){ toast('⚠ Prvo pokreni "▶ Pokreni"', 'warn'); return; }
+  const proposed = preview.proposed || {};
+  const fields = {};
+  if(tbody){
+    tbody.querySelectorAll('input[type=checkbox]:checked').forEach(cb => {
+      const f = cb.getAttribute('data-field');
+      if(f && proposed[f] !== undefined) fields[f] = proposed[f];
+    });
+  } else {
+    Object.assign(fields, proposed);
+  }
+  if(!Object.keys(fields).length){ toast('Označi barem jedno polje za primjenu.', 'warn'); return; }
+  if(target) target.innerHTML = '<div class="loading">⏳ Spremam u bazu…</div>';
+  try{
+    const r = await fetch(API+'/v2/enrich/'+kind+'/'+id+'/apply', {
+      method:'POST',
+      headers:{'Content-Type':'application/json'},
+      body: JSON.stringify({fields, sources: preview.sources || []}),
+    });
+    const data = await r.json();
+    if(!r.ok){ throw new Error(data.detail || ('HTTP '+r.status)); }
+    // Refresh the entire detail panel so the new values render
+    if(kind === 'klub'    && typeof openKlub    === 'function') await openKlub(id);
+    else if(kind === 'savez'   && typeof openSavez   === 'function') await openSavez(id);
+    else if(kind === 'sportas' && typeof openSportas === 'function') await openSportas(id);
+    setTimeout(() => enrichEntity(kind, id), 350);
+    const cnt = data.applied_count != null ? data.applied_count : Object.keys(data.applied||{}).length;
+    const fieldsList = (data.applied_fields || Object.keys(data.applied||{})).join(', ');
+    if(cnt){
+      toast('✅ Spremljeno <b>'+cnt+'</b> polja u bazu'
+            + (fieldsList ? '<br><span style="opacity:.85;font-weight:500;font-size:12px">'+esc(fieldsList)+'</span>' : ''),
+            'success', 3500);
+    } else {
+      toast('Nema novih izmjena za spremiti.', 'info', 2500);
+    }
+  }catch(e){
+    console.error(e);
+    toast('❌ Greška pri spremanju: '+esc(e.message||String(e)), 'error', 4500);
+    if(target) target.innerHTML = '<div class="empty" style="color:var(--bad,#ff6b6b)">Greška pri spremanju: '+esc(e.message||String(e))+'</div>';
+  }
+}
+
+// Bulk enrichment — used by "Obogati sve" buttons in list views
+async function enrichBulk(kind, limit, coverage_max){
+  limit = limit || 50; coverage_max = coverage_max || 70;
+  if(!confirm('Pokreni obogaćivanje za '+limit+' nasumično odabranih ('+kind+', coverage<'+coverage_max+'%)?')) return;
+  toast('⏳ Pokrećem bulk obogaćivanje za '+limit+' '+kind+'…', 'info', 2500);
+  try{
+    const r = await fetch(API+'/v2/enrich/bulk', {
+      method:'POST',
+      headers:{'Content-Type':'application/json'},
+      body: JSON.stringify({kind, limit, coverage_max}),
+    });
+    const data = await r.json();
+    if(!r.ok) throw new Error(data.detail || ('HTTP '+r.status));
+    toast('✅ Bulk gotov: <b>'+data.processed+'</b>/'+data.requested+' obrađeno, '+
+          'dodano <b>'+data.fields_total+'</b> polja u DB ('+data.elapsed_s+'s)',
+          'success', 5000);
+    // Reload the section so new values appear
+    if(typeof loadSection === 'function' && _state && _state.section) loadSection(_state.section);
+  }catch(e){
+    console.error(e);
+    toast('❌ Bulk greška: '+esc(e.message||String(e)), 'error', 5000);
+  }
+}
+
+function enrichBlock(kind, id){
+  return `
+    <div class="card" id="enrich-card-${kind}-${id}">
+      <div class="card-h">
+        <div class="card-t">✨ Obogati podatke</div>
+        <button class="btn primary" onclick="enrichEntity('${kind}',${id})">▶ Pokreni</button>
+      </div>
+      <div id="enrich-out-${kind}-${id}">
+        <div class="empty" style="padding:14px">Klikom na "Pokreni" platforma će pretražiti vanjske izvore (Google, Wikipedia, službene web stranice) i prikazati dopune za ovu entitetsku karticu.</div>
+      </div>
+    </div>
+  `;
+}
+function sortRows(rows, key, dir){
+  if(!key) return rows;
+  const sorted = rows.slice();
+  sorted.sort((a,b) => {
+    let av = a[key], bv = b[key];
+    if(av==null && bv==null) return 0;
+    if(av==null) return 1;
+    if(bv==null) return -1;
+    const an = typeof av === 'number' ? av : Number(av);
+    const bn = typeof bv === 'number' ? bv : Number(bv);
+    if(!isNaN(an) && !isNaN(bn) && (typeof av === 'number' || /^[-+]?\d+(\.\d+)?$/.test(String(av)))){
+      return dir==='asc' ? (an-bn) : (bn-an);
+    }
+    const cmp = String(av).localeCompare(String(bv), 'hr', {numeric:true});
+    return dir==='asc' ? cmp : -cmp;
+  });
+  return sorted;
+}
+function setSort(section, key){
+  const cur = _sort[section];
+  if(cur && cur.key === key){
+    _sort[section] = {key, dir: cur.dir==='asc' ? 'desc' : 'asc'};
+  } else {
+    _sort[section] = {key, dir: 'asc'};
+  }
+  // Re-render
+  switch(section){
+    case 'savezi': return applySaveziFilter();
+    case 'klubovi': return applyKluboviFilter();
+    case 'sportasi': return applySportasiFilter();
+    case 'objekti': return applyObjektiFilter();
+    case 'manifestacije': return applyManifFilter();
+    case 'financije': return refreshFinancije();
+  }
+}
+function sortHeader(section, key, label, klass){
+  const s = _sort[section];
+  const isCur = s && s.key === key;
+  const arrow = isCur ? (s.dir==='asc' ? ' ▲' : ' ▼') : '';
+  const cls = (klass||'') + ' sortable';
+  return '<th class="'+cls+'" onclick="setSort(\''+section+'\',\''+key+'\')" style="cursor:pointer;user-select:none">'+esc(label)+'<span style="color:var(--pgz-gold);font-weight:700">'+arrow+'</span></th>';
+}
+function debounce(fn, ms){
+  let t;
+  return function(){
+    const args = arguments;
+    clearTimeout(t);
+    t = setTimeout(()=>fn.apply(null, args), ms);
+  };
+}
+
+//=========== PANEL ===========
+function openPanel(title, html){
+  const t = $('#panel-hdr-t');
+  if(t) t.textContent = title || 'Detalji';
+  const b = $('#panel-body');
+  if(b) b.innerHTML = html;
+  $('#panel').classList.add('open');
+  $('#panel-overlay').classList.add('open');
+}
+function closePanel(){
+  $('#panel').classList.remove('open');
+  $('#panel-overlay').classList.remove('open');
+}
+document.addEventListener('keydown', e => { if(e.key==='Escape') closePanel(); });
+
+//=========== NAVIGATION ===========
+function buildNav(){
+  const nav = $('#nav');
+  nav.innerHTML = NAV_ITEMS.map(n => '<div class="nav-i '+(n.id===_state.section?'active':'')+'" data-id="'+n.id+'" data-label="'+n.label+'" onclick="navTo(\''+n.id+'\')"><span class="ic">'+n.ic+'</span><span class="lbl">'+n.label+'</span></div>').join('');
+}
+// Hashchange handler — accept routing from unified shared sidebar
+window.addEventListener('hashchange', () => {
+  const h = (location.hash||'').replace(/^#/,'');
+  if(h && NAV_ITEMS.some(n => n.id===h)) navTo(h);
+});
+function toggleSidebar(){
+  const sb = document.getElementById('sb');
+  const tg = document.getElementById('sb-toggle');
+  if(!sb) return;
+  const isCollapsed = sb.classList.toggle('collapsed');
+  if(tg) tg.textContent = '≡';
+  try { localStorage.setItem('sidebar-state', isCollapsed ? 'collapsed' : 'expanded'); } catch(e){}
+}
+function restoreSidebar(){
+  try {
+    const s = localStorage.getItem('sidebar-state');
+    if(s === 'collapsed'){
+      const sb = document.getElementById('sb');
+      const tg = document.getElementById('sb-toggle');
+      if(sb) sb.classList.add('collapsed');
+      if(tg) tg.textContent = '≡';
+    }
+  } catch(e){}
+}
+function navTo(id){
+  _state.section = id;
+  $$('.nav-i').forEach(el => el.classList.toggle('active', el.dataset.id===id));
+  $$('.section').forEach(el => el.classList.remove('active'));
+  const sec = $('#pg-'+id);
+  if(sec) sec.classList.add('active');
+  const t = SECTION_TITLES[id] || [id, ''];
+  $('#tb-t').textContent = t[0];
+  $('#tb-s').textContent = t[1];
+  loadSection(id);
+}
+function loadSection(id){
+  switch(id){
+    case 'dashboard':     return loadDash();
+    case 'savezi':        return loadSavezi();
+    case 'klubovi':       return loadKlubovi();
+    case 'sportasi':      return loadSportasi();
+    case 'financije':     return loadFinancije();
+    case 'objekti':       return loadObjekti();
+    case 'manifestacije': return loadManifestacije();
+    case 'mreza':         return loadMreza();
+    case 'forenzika':     return loadForenzika();
+    case 'audit':         return loadAudit();
+  }
+}
+
+//=========== AUDIT LOG (Polygon PoS) ===========
+async function loadAudit(){
+  const root = $('#pg-audit');
+  root.innerHTML = '<div class="loading">Učitavanje audit zapisa…</div>';
+  let r;
+  try{
+    const resp = await fetch(API+'/audit/seal/list?limit=100');
+    if(!resp.ok) throw new Error('HTTP '+resp.status);
+    r = await resp.json();
+  }catch(e){
+    root.innerHTML = '<div class="empty">Greška: '+esc(e.message||String(e))+'</div>';
+    return;
+  }
+  const wallet = r.wallet || '';
+  const live = r.live ? '<span class="tag gr">🟢 LIVE Polygon</span>' : '<span class="tag gd">⏳ Pending mode</span>';
+  const rows = (r.rows||[]).map(s => {
+    const tx = s.tx_hash || '';
+    const isPending = tx.startsWith('pending:');
+    const txCell = isPending
+      ? `<span class="tag gd" title="${esc(tx)}">PENDING</span><span class="tb-s" style="margin-left:6px;font-family:monospace">${esc(tx.slice(0,32))}…</span>`
+      : `<a href="${esc(s.polygonscan_url||'#')}" target="_blank" style="font-family:monospace;font-size:11px">${esc(tx.slice(0,18))}…${esc(tx.slice(-6))}</a>`;
+    const statusCls = s.status==='confirmed'?'gr':(s.status==='broadcast'?'gd':(s.status==='failed'?'rd':''));
+    return `<tr>
+      <td class="num" style="font-size:11px;color:var(--t3)">${s.id}</td>
+      <td style="font-size:11px;color:var(--t3)">${esc((s.created_at||'').replace('T',' ').slice(0,19))}</td>
+      <td><b>${esc(s.action)}</b></td>
+      <td style="font-size:11px">${esc(s.ref_type||'')} <span style="color:var(--t3)">${esc(s.ref_id||'')}</span></td>
+      <td style="font-family:monospace;font-size:10.5px;color:var(--t2)" title="${esc(s.data_hash||'')}">${esc((s.data_hash||'').slice(0,12))}…</td>
+      <td>${txCell}</td>
+      <td><span class="tag ${statusCls}">${esc(s.status||'')}</span></td>
+      <td style="font-size:11px">${esc(s.user_email||'')}</td>
+    </tr>`;
+  }).join('');
+  root.innerHTML = `
+    <div style="display:flex;gap:10px;align-items:center;flex-wrap:wrap;margin-bottom:14px">
+      <div class="card" style="flex:1;min-width:280px">
+        <div class="card-h"><div class="card-t">🔐 Polygon PoS Audit Sealing</div></div>
+        <div style="padding:12px;font-size:13px;color:var(--t1);line-height:1.6">
+          Ključne akcije (odobrenje sufinanciranja, isplata, validacija liječničkog pregleda, izmjena članstva)
+          pečate se 0-MATIC self-tx-om s SHA-256 hash-em payload-a u <code>data</code> polju.
+          Svaki zapis je nepromjenjiv i provjerljiv preko polygonscan.com.
+        </div>
+        <div style="padding:0 12px 12px;font-size:12px">
+          <div><b>Wallet:</b> <a href="https://polygonscan.com/address/${esc(wallet)}" target="_blank" style="font-family:monospace">${esc(wallet)}</a></div>
+          <div><b>Chain:</b> Polygon PoS (137)</div>
+          <div><b>Mode:</b> ${live}</div>
+        </div>
+      </div>
+      <div class="card" style="min-width:200px">
+        <div class="card-h"><div class="card-t">📊 Statistika</div></div>
+        <div style="padding:12px;font-size:14px">
+          <div><b>${r.count||0}</b> sealed zapisa</div>
+          <div style="color:var(--t3);font-size:12px;margin-top:4px">Najnoviji prikazani prvi</div>
+        </div>
+      </div>
+    </div>
+    <div id="enrich-worker-card"></div>
+    ${rows ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">📜 Audit zapisi</div></div>
+      <div class="tbl-wrap"><table>
+        <thead><tr>
+          <th class="num">#</th><th>Vrijeme</th><th>Akcija</th><th>Referenca</th>
+          <th>SHA-256</th><th>Polygon TX</th><th>Status</th><th>Korisnik</th>
+        </tr></thead>
+        <tbody>${rows}</tbody>
+      </table></div>
+    </div>` : '<div class="empty">Nema audit zapisa.</div>'}
+  `;
+  loadEnrichWorker();
+}
+
+
+// ─── 24/7 enrichment worker dashboard ───────────────────────────────
+let _enrichWorkerTimer = null;
+async function loadEnrichWorker(){
+  const card = document.getElementById('enrich-worker-card');
+  if(!card) return;
+  let s;
+  try{
+    const resp = await fetch(API+'/v2/enrich/worker/status');
+    if(!resp.ok) throw new Error('HTTP '+resp.status);
+    s = await resp.json();
+  }catch(e){
+    card.innerHTML = '<div class="card"><div class="card-h"><div class="card-t">🤖 Enrichment Worker</div></div><div class="empty">Status nedostupan: '+esc(e.message||String(e))+'</div></div>';
+    return;
+  }
+  const conf = s.confidence_threshold != null ? s.confidence_threshold : 0.7;
+  const hbAge = s.heartbeat_age_s;
+  const hbBadge = hbAge == null
+    ? '<span class="tag gd">⏳ Pokreće se…</span>'
+    : (hbAge < 120 ? '<span class="tag gr">🟢 AKTIVAN</span>' : '<span class="tag rd">🔴 ZAUSTAVLJEN</span>');
+  const pauseBtn = s.paused
+    ? '<button class="btn primary" onclick="setWorkerPause(false)">▶️ Nastavi</button>'
+    : '<button class="btn"         onclick="setWorkerPause(true)">⏸ Pauziraj</button>';
+  const lc = s.last_cycle || {};
+  const recent = (s.recent || []).slice(0, 8);
+  const recentRows = recent.map(r => `
+    <tr>
+      <td style="font-size:11px;color:var(--t3)">${esc((r.created_at||'').replace('T',' ').slice(0,19))}</td>
+      <td><b>${esc(r.kind||'')}</b> #${r.target_id}</td>
+      <td style="font-size:11px;color:var(--t2)">${esc((r.fields_set||[]).join(', '))}</td>
+      <td style="font-size:11px;color:var(--t3)">${esc(r.source||'')}</td>
+    </tr>`).join('');
+  card.innerHTML = `
+    <div class="card" style="margin-bottom:14px">
+      <div class="card-h" style="display:flex;align-items:center;gap:10px;flex-wrap:wrap">
+        <div class="card-t">🤖 Enrichment Worker</div>
+        ${hbBadge}
+        ${s.paused ? '<span class="tag gd">PAUZIRAN</span>' : ''}
+        <span class="tb-s">${hbAge != null ? 'Zadnji heartbeat: '+hbAge+'s' : ''}</span>
+        <span style="margin-left:auto;display:flex;gap:6px;flex-wrap:wrap">
+          <button class="btn primary" onclick="runWorkerNow()">▶ Pokreni odmah</button>
+          ${pauseBtn}
+        </span>
+      </div>
+      <div style="display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:10px;padding:12px">
+        <div><div class="tb-s">Zadnji ciklus</div><b>${lc.fields_total != null ? lc.fields_total + ' polja' : '—'}</b>
+          <div class="tb-s">${lc.elapsed_s ? lc.elapsed_s + ' s' : ''}</div></div>
+        <div><div class="tb-s">Sportasi / Klubovi / Savezi</div><b>${(lc.sportas||0)+' / '+(lc.klub||0)+' / '+(lc.savez||0)}</b></div>
+        <div><div class="tb-s">Polja zadnjih 24h</div><b>${s.fields_24h||0}</b></div>
+        <div>
+          <div class="tb-s">Confidence prag: <b id="conf-val">${(conf).toFixed(2)}</b></div>
+          <input type="range" id="conf-slider" min="0" max="1" step="0.05" value="${conf}"
+                 oninput="document.getElementById('conf-val').textContent=parseFloat(this.value).toFixed(2)"
+                 onchange="setWorkerConfidence(parseFloat(this.value))" style="width:100%">
+        </div>
+      </div>
+      ${recentRows ? `
+      <div style="border-top:1px solid var(--ln)">
+        <div style="padding:8px 12px;font-size:11px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px">📋 Posljednji enrich-write zapisi</div>
+        <div class="tbl-wrap" style="max-height:240px;overflow:auto"><table style="width:100%">
+          <thead><tr><th>Vrijeme</th><th>Cilj</th><th>Polja</th><th>Izvor</th></tr></thead>
+          <tbody>${recentRows}</tbody>
+        </table></div>
+      </div>` : ''}
+    </div>
+  `;
+  // Auto-refresh every 10s while audit page is open
+  if(_enrichWorkerTimer) clearTimeout(_enrichWorkerTimer);
+  _enrichWorkerTimer = setTimeout(()=>{
+    if(_state.section === 'audit') loadEnrichWorker();
+  }, 10000);
+}
+
+async function setWorkerPause(paused){
+  try{
+    const r = await fetch(API+'/v2/enrich/worker/pause', {method:'POST',
+      headers:{'Content-Type':'application/json'}, body: JSON.stringify({paused})});
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    toast(paused ? '⏸ Worker pauziran' : '▶️ Worker nastavlja', 'info', 2500);
+    loadEnrichWorker();
+  }catch(e){ toast('❌ '+(e.message||String(e)), 'error'); }
+}
+
+async function runWorkerNow(){
+  try{
+    const r = await fetch(API+'/v2/enrich/worker/run-now', {method:'POST'});
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    toast('▶ Worker će pokrenuti novi ciklus odmah', 'info', 2500);
+    setTimeout(loadEnrichWorker, 2000);
+  }catch(e){ toast('❌ '+(e.message||String(e)), 'error'); }
+}
+
+async function setWorkerConfidence(value){
+  try{
+    const r = await fetch(API+'/v2/enrich/worker/confidence', {method:'POST',
+      headers:{'Content-Type':'application/json'}, body: JSON.stringify({value})});
+    if(!r.ok) throw new Error('HTTP '+r.status);
+    toast('🎚 Confidence prag: '+value.toFixed(2), 'info', 2000);
+  }catch(e){ toast('❌ '+(e.message||String(e)), 'error'); }
+}
+
+//=========== DASHBOARD ===========
+async function loadDash(){
+  const root = $('#pg-dashboard');
+  root.innerHTML = '<div class="loading">Učitavanje dashboard podataka…</div>';
+  const d = await api('/dashboard');
+  if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu podataka</div>'; return; }
+  _cache.dash = d;
+  const proracun2026 = (d.proracun_trend||[]).filter(x=>x.godina===2026)[0];
+  const total2026 = proracun2026 ? proracun2026.ukupno : d.proracun_aktualni;
+
+  root.innerHTML = `
+    <div class="kpi-grid">
+      <div class="kpi"><div class="kpi-l">Saveza</div><div class="kpi-v">${fmtNum(d.aktivnih_saveza)}</div><div class="kpi-s">aktivnih</div></div>
+      <div class="kpi b"><div class="kpi-l">Klubova</div><div class="kpi-v">${fmtNum(d.aktivnih_klubova)}</div><div class="kpi-s">${d.nositelja_kvalitete||0} nositelja kvalitete</div></div>
+      <div class="kpi g"><div class="kpi-l">Sportaša</div><div class="kpi-v">${fmtNum(d.aktivnih_clanova)}</div><div class="kpi-s">${d.reprezentativaca||0} reprezentativaca</div></div>
+      <div class="kpi"><div class="kpi-l">Proračun ${proracun2026?proracun2026.godina:2026}</div><div class="kpi-v">${fmtEur(total2026)}</div><div class="kpi-s">javne potrebe u sportu</div></div>
+      <div class="kpi r"><div class="kpi-l">Kritičnih alarma</div><div class="kpi-v">${fmtNum(d.critical_alerts)}</div><div class="kpi-s">${d.warning_alerts||0} upozorenja</div></div>
+    </div>
+
+    <div class="row-2">
+      <div class="card">
+        <div class="card-h"><div class="card-t">📈 Proračun za sport po godinama</div><div class="tb-s">Klikni godinu za detalje (PDF dokumenti)</div></div>
+        <div class="chart-box"><canvas id="chProracun"></canvas></div>
+      </div>
+      <div class="card">
+        <div class="card-h"><div class="card-t">🏅 Top savezi po broju registriranih</div><div class="tb-s">Klikni za drill-down</div></div>
+        <div style="overflow-x:auto;max-height:340px;overflow-y:auto"><table>
+          <thead><tr><th>Savez</th><th class="num">Klubova</th><th class="num">Reg.</th><th class="num">Trenera</th><th class="num">Repr.</th></tr></thead>
+          <tbody>${(d.top_savezi||[]).slice(0,10).map(s => `
+            <tr onclick="openSavezByName('${esc(s.naziv).replace(/&#39;/g,"\\'")}')">
+              <td><b>${esc(s.naziv)}</b></td>
+              <td class="num">${fmtNum(s.klubova_clanica)}</td>
+              <td class="num">${fmtNum(s.registriranih)}</td>
+              <td class="num">${fmtNum(s.trenera)}</td>
+              <td class="num">${fmtNum(s.reprezentativaca)}</td>
+            </tr>`).join('')}</tbody>
+        </table></div>
+      </div>
+    </div>
+
+    <div class="card" style="margin-top:14px">
+      <div class="card-h">
+        <div class="card-t">💰 Najveći primatelji javnih potreba</div>
+        <div style="display:flex;gap:8px;align-items:center">
+          <select id="dash-god" onchange="refreshDashNositelji()" style="background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:6px 10px;color:var(--t1);font-size:12px">
+            <option value="2026">2026</option>
+            <option value="2025" selected>2025</option>
+            <option value="2024">2024</option>
+          </select>
+          <span class="tb-s" id="dash-nos-cnt"></span>
+        </div>
+      </div>
+      <div id="dash-nos-out"><div class="loading">Učitavanje…</div></div>
+    </div>
+  `;
+  drawProracunChart(d.proracun_trend || []);
+  refreshDashNositelji();
+}
+
+async function refreshDashNositelji(){
+  const sel = $('#dash-god');
+  if(!sel) return;
+  const god = sel.value;
+  const out = $('#dash-nos-out');
+  out.innerHTML = '<div class="loading">Učitavanje primatelja '+god+'…</div>';
+  const d = await api('/v2/potpore/by-year?godina='+god);
+  if(!d){ out.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+  const rows = (d.results || []).slice().sort((a,b)=>Number(b.iznos_eur||0)-Number(a.iznos_eur||0)).slice(0, 25);
+  $('#dash-nos-cnt').textContent = rows.length+' / '+(d.count||0)+' · ukupno '+fmtEur(d.total||0);
+  out.innerHTML = `<div style="overflow-x:auto"><table>
+    <thead><tr><th>#</th><th>Korisnik</th><th>Sport</th><th>Vrsta</th><th class="num">Iznos</th><th>PDF</th></tr></thead>
+    <tbody>${rows.map((r,i) => `
+      <tr onclick='openPrimateljDetail(${JSON.stringify(r).replace(/'/g,"&#39;")})'>
+        <td>${i+1}</td>
+        <td><b>${esc(r.korisnik)}</b></td>
+        <td>${txt(r.sport)}</td>
+        <td>${txt(r.vrsta)}</td>
+        <td class="num"><b>${fmtEurFull(r.iznos_eur)}</b></td>
+        <td>${r.source_url?'<a href="'+esc(r.source_url)+'" target="_blank" onclick="event.stopPropagation()">📄 PDF</a>':'—'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+
+async function openSavezByName(name){
+  const list = _cache.savezi || (await api('/savezi?limit=250'))?.rows || [];
+  if(!_cache.savezi) _cache.savezi = list;
+  const target = list.find(s => s.naziv === name) || list.find(s => (s.naziv||'').toLowerCase() === name.toLowerCase());
+  if(target) return openSavez(target.id);
+  // Try fuzzy match by first two words
+  const prefix = name.split(' ').slice(0,2).join(' ').toLowerCase();
+  const fuzzy = list.find(s => (s.naziv||'').toLowerCase().includes(prefix));
+  if(fuzzy) return openSavez(fuzzy.id);
+  openPanel('Savez', '<div class="empty">Savez <b>'+esc(name)+'</b> nije pronađen u bazi.</div>');
+}
+
+async function openPrimateljDetail(r){
+  openPanel('Primatelj', '<div class="loading">Učitavanje detalja…</div>');
+  // Try to find matching klub by name
+  let klub = null;
+  if(_cache.klubovi){
+    const lower = (r.korisnik||'').toLowerCase();
+    klub = _cache.klubovi.find(k => (k.klub||'').toLowerCase() === lower);
+    if(!klub) klub = _cache.klubovi.find(k => (k.klub||'').toLowerCase().includes(lower) || lower.includes((k.klub||'').toLowerCase()));
+  }
+  if(klub){
+    return openKlub(klub.id);
+  }
+  // Fallback panel — show row data + PDF + same-year other primatelji from same source
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(r.korisnik)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">Primatelj proračuna ${r.godina}</div>
+      </div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">📋 Detalji isplate</div></div>
+      <div class="kv">
+        <div class="k">Korisnik</div><div class="v">${esc(r.korisnik)}</div>
+        <div class="k">Sport</div><div class="v">${txt(r.sport)}</div>
+        <div class="k">Vrsta</div><div class="v">${txt(r.vrsta)}</div>
+        <div class="k">Iznos</div><div class="v"><b style="color:var(--pgz-gold);font-size:16px">${fmtEurFull(r.iznos_eur)}</b></div>
+        <div class="k">Godina</div><div class="v">${esc(r.godina)}</div>
+        <div class="k">Izvor</div><div class="v">${txt(r.izvor)}</div>
+        <div class="k">Napomena</div><div class="v">${txt(r.napomena)}</div>
+      </div>
+      ${r.source_url ? '<div style="margin-top:14px;text-align:center"><a href="'+esc(r.source_url)+'" target="_blank" class="btn primary" style="display:inline-block;text-decoration:none">📄 Otvori izvorni PDF dokument</a></div>' : '<div class="empty" style="margin-top:14px">PDF dokument nije dostupan za ovu stavku.</div>'}
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">🔍 Klub nije povezan</div></div>
+      <div style="font-size:12px;color:var(--t2);line-height:1.5">
+        Korisnik <b>${esc(r.korisnik)}</b> nije automatski povezan s pojedinim klubom u bazi.
+        Provjeri klub ručno preko sekcije <a href="javascript:navTo('klubovi')">Klubovi</a> ili pretraži primatelja na izvornom dokumentu.
+      </div>
+    </div>
+  `;
+  openPanel('Primatelj · '+r.korisnik, html);
+}
+
+function drawProracunChart(trend){
+  const ctx = $('#chProracun');
+  if(!ctx) return;
+  if(_proracunChart){ _proracunChart.destroy(); _proracunChart=null; }
+  _proracunChart = new Chart(ctx, {
+    type:'bar',
+    data:{
+      labels: trend.map(x=>x.godina),
+      datasets:[{
+        label:'EUR',
+        data: trend.map(x=>x.ukupno),
+        backgroundColor: trend.map(x=> x.godina===2026 ? '#F4C430' : '#004CC4'),
+        borderRadius:4
+      }]
+    },
+    options:{
+      responsive:true, maintainAspectRatio:false,
+      plugins:{
+        legend:{display:false},
+        tooltip:{callbacks:{label:c => '€'+Number(c.parsed.y).toLocaleString('hr-HR')}}
+      },
+      scales:{
+        x:{ticks:{color:'#8a95b4'}, grid:{display:false}},
+        y:{ticks:{color:'#8a95b4', callback:v=>'€'+(v/1000)+'k'}, grid:{color:'#1e2a50'}}
+      },
+      onClick:(e, els) => {
+        if(els && els.length){
+          const i = els[0].index;
+          openProracunDrill(trend[i].godina, trend[i].ukupno);
+        }
+      }
+    }
+  });
+}
+
+async function openProracunDrill(godina, total){
+  openPanel('Proračun '+godina, '<div class="loading">Dohvaćanje primatelja…</div>');
+  const d = await api('/v2/potpore/by-year?godina='+godina);
+  if(!d){ openPanel('Proračun '+godina, '<div class="empty">Greška pri dohvatu</div>'); return; }
+  const rows = d.results || [];
+  const grandTotal = d.total || total || 0;
+  const html = `
+    <div class="kpi-grid" style="grid-template-columns:1fr 1fr">
+      <div class="kpi"><div class="kpi-l">Ukupno ${godina}</div><div class="kpi-v">${fmtEur(grandTotal)}</div></div>
+      <div class="kpi b"><div class="kpi-l">Primatelja</div><div class="kpi-v">${rows.length}</div></div>
+    </div>
+    <div style="overflow-x:auto"><table>
+      <thead><tr><th>#</th><th>Korisnik</th><th>Sport</th><th class="num">Iznos</th><th>PDF</th></tr></thead>
+      <tbody>
+        ${rows.map((r,i) => `
+          <tr class="no-click">
+            <td>${i+1}</td>
+            <td>${esc(r.korisnik)}</td>
+            <td>${txt(r.sport)}</td>
+            <td class="num"><b>${fmtEurFull(r.iznos_eur)}</b></td>
+            <td>${r.source_url ? '<a href="'+esc(r.source_url)+'" target="_blank">📄</a>' : '—'}</td>
+          </tr>`).join('')}
+      </tbody>
+    </table></div>
+  `;
+  openPanel('Primatelji proračuna · '+godina, html);
+}
+
+//=========== SAVEZI ===========
+async function loadSavezi(){
+  const root = $('#pg-savezi');
+  if(!_cache.savezi){
+    root.innerHTML = '<div class="loading">Učitavanje saveza…</div>';
+    const d = await api('/savezi?limit=250');
+    if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+    _cache.savezi = d.rows || [];
+  }
+  renderSaveziShell();
+  applySaveziFilter();
+}
+function renderSaveziShell(){
+  const root = $('#pg-savezi');
+  root.innerHTML = `
+    <div class="toolbar">
+      <input type="search" id="sav-q" placeholder="🔍 Pretraži savez…">
+      <select id="sav-pgz">
+        <option value="">Svi savezi</option>
+        <option value="1">Samo PGŽ relevantni</option>
+      </select>
+      <div class="toggle">
+        <button id="sav-card" class="${_state.viewSavezi==='card'?'active':''}" onclick="setSaveziView('card')">Kartice</button>
+        <button id="sav-table" class="${_state.viewSavezi==='table'?'active':''}" onclick="setSaveziView('table')">Tablica</button>
+      </div>
+      <span class="tb-s" id="sav-cnt"></span>
+    </div>
+    <div id="sav-out"></div>
+  `;
+  $('#sav-q').addEventListener('input', debounce(applySaveziFilter, 200));
+  $('#sav-pgz').addEventListener('change', applySaveziFilter);
+}
+function setSaveziView(v){
+  _state.viewSavezi = v;
+  $('#sav-card').classList.toggle('active', v==='card');
+  $('#sav-table').classList.toggle('active', v==='table');
+  applySaveziFilter();
+}
+function applySaveziFilter(){
+  const q = (($('#sav-q')?$('#sav-q').value:'') || '').toLowerCase().trim();
+  const pgz = $('#sav-pgz') ? $('#sav-pgz').value : '';
+  let rows = _cache.savezi || [];
+  if(q) rows = rows.filter(s => (s.naziv||'').toLowerCase().includes(q) || (s.sport||'').toLowerCase().includes(q));
+  if(pgz==='1') rows = rows.filter(s => s.pgz_relevant);
+  if(_sort.savezi) rows = sortRows(rows, _sort.savezi.key, _sort.savezi.dir);
+  $('#sav-cnt').textContent = rows.length+' saveza';
+  $('#sav-out').innerHTML = _state.viewSavezi==='card' ? renderSaveziGrid(rows) : renderSaveziTable(rows);
+}
+function renderSaveziGrid(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return '<div class="grid">'+rows.map(s => `
+    <div class="entity" onclick="openSavez(${s.id})">
+      ${s.pgz_relevant?'<div class="et-tag">PGŽ</div>':''}
+      <div class="et">${esc(s.naziv)}</div>
+      <div class="es">${txt(s.sport,'—')} · ${txt(s.predsjednik,'bez predsjednika')}</div>
+      <div class="em">
+        <span><b>${fmtNum(s.broj_klubova)}</b> klubova</span>
+        <span><b>${fmtNum(s.reg_2024)}</b> reg.</span>
+        <span><b>${fmtNum(s.treneri_2024)}</b> trenera</span>
+      </div>
+    </div>`).join('')+'</div>';
+}
+function renderSaveziTable(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return `<div class="card" style="padding:0;overflow-x:auto"><table>
+    <thead><tr>${sortHeader('savezi','naziv','Naziv','')}${sortHeader('savezi','sport','Sport','')}${sortHeader('savezi','predsjednik','Predsjednik','')}${sortHeader('savezi','email','Email','')}${sortHeader('savezi','broj_klubova','Klubova','num')}${sortHeader('savezi','reg_2024','Reg.','num')}${sortHeader('savezi','pgz_relevant','PGŽ','')}</tr></thead>
+    <tbody>${rows.map(s => `
+      <tr onclick="openSavez(${s.id})">
+        <td><b>${esc(s.naziv)}</b></td>
+        <td>${txt(s.sport)}</td>
+        <td>${txt(s.predsjednik)}</td>
+        <td>${s.email?'<span class="tag b">'+esc(s.email)+'</span>':'—'}</td>
+        <td class="num">${fmtNum(s.broj_klubova)}</td>
+        <td class="num">${fmtNum(s.reg_2024)}</td>
+        <td>${s.pgz_relevant?'<span class="tag gd">PGŽ</span>':'—'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+
+async function openSavez(id){
+  openPanel('Savez', '<div class="loading">Učitavanje saveza…</div>');
+  const s = await api('/savezi/'+id);
+  if(!s || s.detail){
+    openPanel('Savez', '<div class="empty">Savez nije pronađen</div>');
+    return;
+  }
+  const ksearch = (s.naziv||'').split(' ').slice(0,2).join(' ');
+  const kr = await api('/klubovi?savez='+encodeURIComponent(ksearch)+'&limit=200');
+  const klubovi = (kr && kr.rows) ? kr.rows.filter(k => (k.savez||'').toLowerCase().includes(ksearch.toLowerCase())) : [];
+
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(s.naziv)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">${txt(s.sport,'—')} · ${s.region||'PGŽ'}</div>
+      </div>
+    </div>
+    <div class="kpi-grid" style="grid-template-columns:repeat(3,1fr);margin-bottom:14px">
+      <div class="kpi"><div class="kpi-l">Klubova</div><div class="kpi-v">${klubovi.length}</div></div>
+      <div class="kpi b"><div class="kpi-l">Godina osnutka</div><div class="kpi-v" style="font-size:18px">${txt(s.godina_osnutka)}</div></div>
+      <div class="kpi g"><div class="kpi-l">Status</div><div class="kpi-v" style="font-size:14px">${s.aktivan?'AKTIVAN':'NEAKTIVAN'}</div></div>
+    </div>
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">📋 Osnovne informacije</div></div>
+      <div class="kv">
+        <div class="k">OIB</div><div class="v">${txt(s.oib)}</div>
+        <div class="k">Adresa</div><div class="v">${txt(s.adresa)}</div>
+        <div class="k">Predsjednik</div><div class="v">${txt(s.predsjednik)}</div>
+        <div class="k">Tajnik</div><div class="v">${txt(s.tajnik)}</div>
+        <div class="k">Email</div><div class="v">${s.email?'<a href="mailto:'+esc(s.email)+'">'+esc(s.email)+'</a>':'—'}</div>
+        <div class="k">Telefon</div><div class="v">${txt(s.telefon)}</div>
+        <div class="k">Web</div><div class="v">${s.web?'<a href="'+esc(s.web)+'" target="_blank">'+esc(s.web)+'</a>':'—'}</div>
+        <div class="k">IBAN</div><div class="v">${txt(s.iban)}</div>
+      </div>
+    </div>
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">⬡ Klubovi članice (${klubovi.length})</div></div>
+      ${klubovi.length ? `<div style="overflow-x:auto;max-height:400px;overflow-y:auto"><table>
+        <thead><tr><th>Klub</th><th>Razina</th><th>Grad</th></tr></thead>
+        <tbody>${klubovi.slice(0,100).map(k => `
+          <tr onclick="closePanel();setTimeout(()=>openKlub(${k.id}),250)">
+            <td>${esc(k.klub||k.sport||'(bez naziva)')}${k.nositelj_kvalitete?' <span class="tag gd">N.K.</span>':''}</td>
+            <td>${txt(k.razina,'')}</td>
+            <td>${txt(k.grad)}</td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema podataka o klubovima</div>'}
+    </div>
+
+    ${enrichBlock('savez', s.id)}
+  `;
+  openPanel('Savez · '+s.naziv, html);
+}
+
+//=========== KLUBOVI ===========
+async function loadKlubovi(){
+  const root = $('#pg-klubovi');
+  if(!_cache.klubovi){
+    root.innerHTML = '<div class="loading">Učitavanje klubova…</div>';
+    const d = await api('/klubovi?limit=500');
+    if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+    _cache.klubovi = d.rows || [];
+  }
+  renderKluboviShell();
+  applyKluboviFilter();
+}
+function renderKluboviShell(){
+  const root = $('#pg-klubovi');
+  const sports = Array.from(new Set((_cache.klubovi||[]).map(k=>k.sport).filter(Boolean))).sort().slice(0,80);
+  const grads = Array.from(new Set((_cache.klubovi||[]).map(k=>k.grad).filter(Boolean))).sort();
+  root.innerHTML = `
+    <div class="toolbar">
+      <input type="search" id="kl-q" placeholder="🔍 Pretraži klub…">
+      <select id="kl-sport"><option value="">Svi sportovi</option>${sports.map(s=>'<option value="'+esc(s)+'">'+esc(s)+'</option>').join('')}</select>
+      <select id="kl-grad"><option value="">Svi gradovi</option>${grads.map(g=>'<option value="'+esc(g)+'">'+esc(g)+'</option>').join('')}</select>
+      <label><input type="checkbox" id="kl-nk"> Nositelj kvalitete</label>
+      <div class="toggle">
+        <button id="kl-card" class="${_state.viewKlubovi==='card'?'active':''}" onclick="setKluboviView('card')">Kartice</button>
+        <button id="kl-table" class="${_state.viewKlubovi==='table'?'active':''}" onclick="setKluboviView('table')">Tablica</button>
+      </div>
+      <button class="btn" style="margin-left:auto" onclick="enrichBulk('klub', 50, 70)">✨ Obogati sve (50)</button>
+      <span class="tb-s" id="kl-cnt"></span>
+    </div>
+    <div id="kl-out"></div>
+  `;
+  $('#kl-q').addEventListener('input', debounce(applyKluboviFilter, 200));
+  $('#kl-sport').addEventListener('change', applyKluboviFilter);
+  $('#kl-grad').addEventListener('change', applyKluboviFilter);
+  $('#kl-nk').addEventListener('change', applyKluboviFilter);
+}
+function setKluboviView(v){
+  _state.viewKlubovi = v;
+  $('#kl-card').classList.toggle('active', v==='card');
+  $('#kl-table').classList.toggle('active', v==='table');
+  applyKluboviFilter();
+}
+function applyKluboviFilter(){
+  const q = (($('#kl-q')?$('#kl-q').value:'') || '').toLowerCase().trim();
+  const sport = $('#kl-sport') ? $('#kl-sport').value : '';
+  const grad = $('#kl-grad') ? $('#kl-grad').value : '';
+  const nk = $('#kl-nk') ? $('#kl-nk').checked : false;
+  let rows = _cache.klubovi || [];
+  if(q) rows = rows.filter(k => (k.klub||'').toLowerCase().includes(q) || (k.sport||'').toLowerCase().includes(q));
+  if(sport) rows = rows.filter(k => k.sport===sport);
+  if(grad) rows = rows.filter(k => k.grad===grad);
+  if(nk) rows = rows.filter(k => k.nositelj_kvalitete);
+  if(_sort.klubovi) rows = sortRows(rows, _sort.klubovi.key, _sort.klubovi.dir);
+  $('#kl-cnt').textContent = rows.length+' klubova';
+  const top = rows.slice(0, 300);
+  $('#kl-out').innerHTML = _state.viewKlubovi==='card' ? renderKluboviGrid(top) : renderKluboviTable(top);
+  if(rows.length>300){
+    $('#kl-out').insertAdjacentHTML('beforeend', '<div class="empty">… i još '+(rows.length-300)+' klubova. Suzite filtre.</div>');
+  }
+}
+function renderKluboviGrid(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return '<div class="grid-club">'+rows.map(k => `
+    <div class="entity" onclick="openKlub(${k.id})">
+      ${k.nositelj_kvalitete?'<div class="et-tag">N.K.</div>':''}
+      <div class="et">${esc(k.klub||k.sport||'(bez naziva)')}</div>
+      <div class="es">${txt(k.razina,'')} · ${txt(k.grad,'—')}</div>
+      <div class="em">
+        <span><b>${fmtNum(k.registriranih)}</b> reg.</span>
+        <span><b>${fmtNum(k.trenera)}</b> trenera</span>
+        <span><b>${fmtNum(k.reprezentativaca)}</b> repr.</span>
+      </div>
+    </div>`).join('')+'</div>';
+}
+function renderKluboviTable(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return `<div class="card" style="padding:0;overflow-x:auto"><table>
+    <thead><tr>${sortHeader('klubovi','klub','Klub','')}${sortHeader('klubovi','sport','Sport','')}${sortHeader('klubovi','razina','Razina','')}${sortHeader('klubovi','grad','Grad','')}${sortHeader('klubovi','registriranih','Reg.','num')}${sortHeader('klubovi','trenera','Trenera','num')}${sortHeader('klubovi','nositelj_kvalitete','Status','')}</tr></thead>
+    <tbody>${rows.map(k => `
+      <tr onclick="openKlub(${k.id})">
+        <td><b>${esc(k.klub||k.sport||'(bez naziva)')}</b></td>
+        <td>${txt(k.sport)}</td>
+        <td>${txt(k.razina)}</td>
+        <td>${txt(k.grad)}</td>
+        <td class="num">${fmtNum(k.registriranih)}</td>
+        <td class="num">${fmtNum(k.trenera)}</td>
+        <td>${k.nositelj_kvalitete?'<span class="tag gd">N.K.</span>':''}${k.aktivan?'<span class="tag gr">AKT</span>':'<span class="tag rd">NK</span>'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+
+async function openKlub(id){
+  openPanel('Klub', '<div class="loading">Učitavanje kluba…</div>');
+  const k = await api('/klubovi/'+id);
+  if(!k || k.detail){
+    openPanel('Klub', '<div class="empty">Klub nije pronađen</div>');
+    return;
+  }
+  const stats = k.stats || {};
+  const clanovi = k.clanovi || [];
+  const potpore = k.potpore || [];
+  let scoreCount = 0;
+  if(k.oib) scoreCount++;
+  if(k.predsjednik) scoreCount++;
+  if(k.tajnik) scoreCount++;
+  if(k.email) scoreCount++;
+  if(k.web || k.web_stranica) scoreCount++;
+  if(k.sjediste || k.adresa) scoreCount++;
+  if(k.ciljevi) scoreCount++;
+  if(k.opis_djelatnosti) scoreCount++;
+  const scoreClass = scoreCount>=6?'high':(scoreCount>=4?'mid':'low');
+
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(k.naziv||'(bez naziva)')}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">${txt(k.sport,'—')} · ${txt(k.razina,'')} · ${txt(k.grad,'')}</div>
+      </div>
+    </div>
+
+    <div class="kpi-grid" style="grid-template-columns:repeat(4,1fr);margin-bottom:14px">
+      <div class="kpi"><div class="kpi-l">Sportaša</div><div class="kpi-v">${fmtNum(stats.broj_clanova||clanovi.length)}</div></div>
+      <div class="kpi b"><div class="kpi-l">Registriranih</div><div class="kpi-v">${fmtNum(stats.broj_registriranih)}</div></div>
+      <div class="kpi g"><div class="kpi-l">Trenera</div><div class="kpi-v">${fmtNum(stats.broj_trenera)}</div></div>
+      <div class="kpi"><div class="kpi-l">Score baze</div><div class="kpi-v" style="font-size:18px"><span class="score ${scoreClass}">${scoreCount}/8</span></div></div>
+    </div>
+
+    <div class="tabs">
+      <div class="tab active" onclick="switchKlubTab(this,'k-info')">Info</div>
+      <div class="tab" onclick="switchKlubTab(this,'k-clan')">Sportaši (${clanovi.length})</div>
+      <div class="tab" onclick="switchKlubTab(this,'k-pot')">Potpore (${potpore.length})</div>
+    </div>
+
+    <div id="k-info" class="ktab">
+      <div class="kv">
+        <div class="k">Naziv</div><div class="v">${esc(k.naziv||'')}</div>
+        <div class="k">OIB</div><div class="v">${txt(k.oib)}</div>
+        <div class="k">Sport</div><div class="v">${txt(k.sport)}</div>
+        <div class="k">Razina</div><div class="v">${txt(k.razina)}</div>
+        <div class="k">Savez</div><div class="v">${txt(k.savez_naziv)}</div>
+        <div class="k">Predsjednik</div><div class="v">${txt(k.predsjednik)}</div>
+        <div class="k">Tajnik</div><div class="v">${txt(k.tajnik)}</div>
+        <div class="k">Trener</div><div class="v">${txt(k.trener_glavni)}</div>
+        <div class="k">Sjedište</div><div class="v">${txt(k.sjediste||k.adresa)}</div>
+        <div class="k">Grad</div><div class="v">${txt(k.grad)}</div>
+        <div class="k">Email</div><div class="v">${k.email?'<a href="mailto:'+esc(k.email)+'">'+esc(k.email)+'</a>':'—'}</div>
+        <div class="k">Telefon</div><div class="v">${txt(k.telefon)}</div>
+        <div class="k">Web</div><div class="v">${(k.web||k.web_stranica)?'<a href="'+esc(k.web||k.web_stranica)+'" target="_blank">'+esc(k.web||k.web_stranica)+'</a>':'—'}</div>
+        <div class="k">Osnovan</div><div class="v">${txt(k.godina_osnutka)}</div>
+        <div class="k">Nositelj kvalitete</div><div class="v">${k.nositelj_kvalitete?'<span class="tag gd">DA</span>':'<span class="tag">NE</span>'}</div>
+      </div>
+      ${k.napomena ? '<div class="card" style="margin-top:14px"><div class="card-t" style="margin-bottom:6px">Napomena</div><div style="font-size:12px;color:var(--t1);line-height:1.5">'+esc(k.napomena)+'</div></div>' : ''}
+    </div>
+
+    <div id="k-clan" class="ktab" style="display:none">
+      ${clanovi.length ? `<div style="overflow-x:auto;max-height:500px;overflow-y:auto"><table>
+        <thead><tr><th>Sportaš</th><th>Spol</th><th>Pozicija</th><th>Tagovi</th></tr></thead>
+        <tbody>${clanovi.map(c => `
+          <tr onclick="closePanel();setTimeout(()=>openSportas(${c.id}),250)">
+            <td><b>${esc(c.ime||'')} ${esc(c.prezime||'')}</b></td>
+            <td>${txt(c.spol)}</td>
+            <td>${txt(c.pozicija)}</td>
+            <td>${c.reprezentativac?'<span class="tag gd">REPR</span>':''}${c.kategoriziran?'<span class="tag b">KAT</span>':''}${c.stipendiran?'<span class="tag gr">STIP</span>':''}</td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema podataka o sportašima</div>'}
+    </div>
+
+    <div id="k-pot" class="ktab" style="display:none">
+      ${potpore.length ? `<div style="overflow-x:auto"><table>
+        <thead><tr><th>Godina</th><th>Naziv</th><th class="num">Iznos</th></tr></thead>
+        <tbody>${potpore.map(p => `
+          <tr class="no-click">
+            <td>${esc(p.godina)}</td>
+            <td>${esc(p.naziv_kluba||'')}</td>
+            <td class="num"><b>${fmtEurFull(p.iznos)}</b></td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema zabilježenih potpora</div>'}
+    </div>
+
+    ${enrichBlock('klub', k.id)}
+  `;
+  openPanel('Klub · '+(k.naziv||''), html);
+}
+function switchKlubTab(el, tabId){
+  const parent = el.parentElement;
+  parent.querySelectorAll('.tab').forEach(t=>t.classList.remove('active'));
+  el.classList.add('active');
+  parent.parentElement.querySelectorAll('.ktab').forEach(t=>t.style.display='none');
+  const target = document.getElementById(tabId);
+  if(target) target.style.display='block';
+}
+
+//=========== SPORTAŠI ===========
+async function loadSportasi(){
+  const root = $('#pg-sportasi');
+  if(!_cache.clanovi){
+    root.innerHTML = '<div class="loading">Učitavanje sportaša…</div>';
+    const d = await api('/clanovi-full?limit=500');
+    if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+    _cache.clanovi = d.rows || [];
+  }
+  renderSportasiShell();
+  applySportasiFilter();
+}
+function renderSportasiShell(){
+  const root = $('#pg-sportasi');
+  root.innerHTML = `
+    <div class="toolbar">
+      <input type="search" id="sp-q" placeholder="🔍 Ime ili prezime…">
+      <select id="sp-hoo">
+        <option value="">Sve HOO kategorije</option>
+        <option value="1">I. kategorija</option>
+        <option value="2">II. kategorija</option>
+        <option value="3">III. kategorija</option>
+        <option value="4">IV. kategorija</option>
+        <option value="5">V. kategorija</option>
+      </select>
+      <label><input type="checkbox" id="sp-rep"> Samo reprezentativci</label>
+      <label><input type="checkbox" id="sp-foto"> Samo s fotografijom</label>
+      <div class="toggle">
+        <button id="sp-card" class="${_state.viewSportasi==='card'?'active':''}" onclick="setSportasiView('card')">Kartice</button>
+        <button id="sp-table" class="${_state.viewSportasi==='table'?'active':''}" onclick="setSportasiView('table')">Tablica</button>
+      </div>
+      <span class="tb-s" id="sp-cnt"></span>
+      <button class="btn"         onclick="enrichBulk('sportas', 50, 70)">✨ Obogati sve (50)</button>
+      <button class="btn primary" onclick="openSportas(449)">⭐ Test: Josip Zec</button>
+    </div>
+    <div id="sp-out"></div>
+  `;
+  $('#sp-q').addEventListener('input', debounce(applySportasiFilter, 200));
+  $('#sp-hoo').addEventListener('change', applySportasiFilter);
+  $('#sp-rep').addEventListener('change', applySportasiFilter);
+  $('#sp-foto').addEventListener('change', applySportasiFilter);
+}
+function openOIB(oib){
+  const cleanOib = String(oib||'').replace(/[^0-9]/g,'');
+  const url = 'https://sudreg.pravosudje.hr/registar/oc/index.html#osnovniPodaci?o='+encodeURIComponent(cleanOib);
+  // Open external — sudreg supports OIB lookup
+  window.open(url, '_blank', 'noopener');
+}
+function filterKluboviByCity(grad){
+  closePanel();
+  navTo('klubovi');
+  setTimeout(() => {
+    const sel = $('#kl-grad');
+    if(sel){ sel.value = grad; applyKluboviFilter(); }
+  }, 100);
+}
+function filterKluboviBySport(sport){
+  closePanel();
+  navTo('klubovi');
+  setTimeout(() => {
+    const sel = $('#kl-sport');
+    if(sel){ sel.value = sport; applyKluboviFilter(); }
+  }, 100);
+}
+function filterObjektiByCity(grad){
+  closePanel();
+  navTo('objekti');
+  setTimeout(() => {
+    const sel = $('#ob-grad');
+    if(sel){ sel.value = grad; applyObjektiFilter(); }
+  }, 100);
+}
+function filterSportasiBy(field, value){
+  closePanel();
+  navTo('sportasi');
+  setTimeout(() => {
+    if(field === 'sport'){
+      // Use search box since there's no sport dropdown
+      const q = $('#sp-q'); if(q){ q.value = value; }
+    } else if(field === 'mjesto_rodjenja' || field === 'grad'){
+      const q = $('#sp-q'); if(q){ q.value = value; }
+    } else if(field === 'reprezentativac'){
+      const cb = $('#sp-rep'); if(cb){ cb.checked = !!value; }
+    } else if(field === 'hoo'){
+      const sel = $('#sp-hoo'); if(sel){ sel.value = String(value); }
+    } else if(field === 'aktivan'){
+      // Add to extra-filters slot if exists; else search by status string
+      _state.spExtraAktivan = value ? 'true' : 'false';
+    } else if(field === 'stipendiran'){
+      _state.spExtraStipendiran = !!value;
+    }
+    applySportasiFilter();
+  }, 100);
+}
+function filterSportasiByYear(year){
+  closePanel();
+  navTo('sportasi');
+  setTimeout(() => {
+    _state.spYear = String(year);
+    applySportasiFilter();
+  }, 100);
+}
+function clearSportasiExtras(){
+  _state.spExtraAktivan = '';
+  _state.spExtraStipendiran = false;
+  _state.spYear = '';
+}
+
+function setSportasiView(v){
+  _state.viewSportasi = v;
+  $('#sp-card').classList.toggle('active', v==='card');
+  $('#sp-table').classList.toggle('active', v==='table');
+  applySportasiFilter();
+}
+function applySportasiFilter(){
+  const q = (($('#sp-q')?$('#sp-q').value:'') || '').toLowerCase().trim();
+  const hoo = $('#sp-hoo') ? $('#sp-hoo').value : '';
+  const rep = $('#sp-rep') ? $('#sp-rep').checked : false;
+  const foto = $('#sp-foto') ? $('#sp-foto').checked : false;
+  let rows = _cache.clanovi || [];
+  if(q) rows = rows.filter(c => ((c.ime||'')+' '+(c.prezime||'')).toLowerCase().includes(q));
+  if(rep) rows = rows.filter(c => c.reprezentativac);
+  if(foto) rows = rows.filter(c => c.slika_url);
+  if(hoo) rows = rows.filter(c => String(c.hoo_kategorija||c.kategorija_hoo||'')===hoo);
+  if(_state.spYear){
+    rows = rows.filter(c => String(c.datum_rodenja||c.datum_rodjenja||'').slice(0,4) === _state.spYear);
+  }
+  if(_state.spExtraAktivan==='true') rows = rows.filter(c => c.aktivan);
+  if(_state.spExtraAktivan==='false') rows = rows.filter(c => !c.aktivan);
+  if(_state.spExtraStipendiran) rows = rows.filter(c => c.stipendiran);
+  if(_sort.sportasi) rows = sortRows(rows, _sort.sportasi.key, _sort.sportasi.dir);
+  $('#sp-cnt').textContent = rows.length+' sportaša';
+  const top = rows.slice(0, 300);
+  $('#sp-out').innerHTML = _state.viewSportasi==='card' ? renderSportasiGrid(top) : renderSportasiTable(top);
+  if(rows.length>300){
+    $('#sp-out').insertAdjacentHTML('beforeend', '<div class="empty">… i još '+(rows.length-300)+' sportaša. Suzite filtre.</div>');
+  }
+}
+function renderSportasiGrid(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return '<div class="grid-player">'+rows.map(c => buildPlayerCard(c)).join('')+'</div>';
+}
+function buildPlayerCard(c){
+  const initials = (((c.ime||'?')[0]||'?')+((c.prezime||'?')[0]||'?')).toUpperCase();
+  const photo = c.slika_url ? '<img src="'+esc(c.slika_url)+'" alt="" onerror="this.style.display=\'none\';if(this.parentElement)this.parentElement.innerHTML=\'<div class=\\\'no\\\'>'+initials+'</div>\'">' : '<div class="no">'+initials+'</div>';
+  const hooCat = c.hoo_kategorija || c.kategorija_hoo;
+  return `
+    <div class="player-card" onclick="openSportas(${c.id})">
+      <div class="ph">${photo}</div>
+      <div class="pb">
+        <div class="pn">${esc(c.ime||'')} ${esc(c.prezime||'')}</div>
+        <div class="pp">${txt(c.sport,'—')} · ${txt(c.pozicija,'')}</div>
+        <div class="pk">${txt(c.klub_naziv_godisnjak,'')}</div>
+        <div class="badges">
+          ${c.reprezentativac?'<span class="badge repr">REPR</span>':''}
+          ${hooCat?'<span class="badge hoo">HOO '+esc(hooCat)+'</span>':''}
+          ${c.stipendiran?'<span class="badge">STIP</span>':''}
+          ${c.broj_dresa?'<span class="badge">#'+esc(c.broj_dresa)+'</span>':''}
+        </div>
+      </div>
+    </div>`;
+}
+function renderSportasiTable(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return `<div class="card" style="padding:0;overflow-x:auto"><table>
+    <thead><tr>${sortHeader('sportasi','prezime','Prezime','')}${sortHeader('sportasi','ime','Ime','')}${sortHeader('sportasi','sport','Sport','')}${sortHeader('sportasi','pozicija','Pozicija','')}${sortHeader('sportasi','hoo_kategorija','HOO','')}${sortHeader('sportasi','reprezentativac','Repr.','')}${sortHeader('sportasi','slika_url','Foto','')}</tr></thead>
+    <tbody>${rows.map(c => `
+      <tr onclick="openSportas(${c.id})">
+        <td><b>${esc(c.prezime||'')}</b></td>
+        <td>${esc(c.ime||'')}</td>
+        <td>${txt(c.sport)}</td>
+        <td>${txt(c.pozicija)}</td>
+        <td>${(c.hoo_kategorija||c.kategorija_hoo)?'<span class="tag b">'+esc(c.hoo_kategorija||c.kategorija_hoo)+'</span>':'—'}</td>
+        <td>${c.reprezentativac?'<span class="tag gd">DA</span>':'—'}</td>
+        <td>${c.slika_url?'📸':'—'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+
+async function openSportas(id){
+  openPanel('Sportaš', '<div class="loading">Učitavanje profila…</div>');
+  const d = await api('/sportas/'+id+'/profil');
+  if(!d || d.detail){
+    openPanel('Sportaš', '<div class="empty">Sportaš nije pronađen</div>');
+    return;
+  }
+  const stats = d.stats || {};
+  const sezone = d.clan_sezona || [];
+  const utakmice = d.utakmice || [];
+  const nagrade = d.nagrade || [];
+  const godisnjaci = d.godisnjak_godine || d.godisnjaci || [];
+  const initials = (((d.ime||'?')[0]||'?')+((d.prezime||'?')[0]||'?')).toUpperCase();
+  const photo = d.slika_url ? '<img src="'+esc(d.slika_url)+'" alt="" onerror="this.style.display=\'none\';if(this.parentElement)this.parentElement.innerHTML=\'<div class=\\\'no\\\'>'+initials+'</div>\'">' : '<div class="no">'+initials+'</div>';
+  const dob = d.datum_rodjenja || d.datum_rodenja;
+  const hooCat = d.hoo_kategorija || d.kategorija_hoo;
+
+  const html = `
+    <div class="pp-hdr">
+      <div class="pp-foto">${photo}</div>
+      <div class="pp-info">
+        <div class="pp-name">${esc(d.ime||'')} ${esc(d.prezime||'')}</div>
+        <div class="pp-meta">
+          ${d.sport?'<a class="link-chip" onclick="filterSportasiBy(&quot;sport&quot;,&quot;'+esc(d.sport)+'&quot;)">'+esc(d.sport)+'</a>':'—'} ·
+          ${txt(d.pozicija,'')} ·
+          ${d.klub_id ? '<a class="link-chip" onclick="closePanel();setTimeout(()=>openKlub('+d.klub_id+'),250)"><b>'+esc(d.klub_naziv_full||d.klub_naziv_godisnjak||'—')+'</b></a>' : '<b>'+esc(d.klub_naziv_full||d.klub_naziv_godisnjak||'—')+'</b>'}
+        </div>
+        <div class="pp-meta">
+          ${dob ? '<a class="link-chip" onclick="filterSportasiByYear(&quot;'+esc((dob||'').slice(0,4))+'&quot;)">📅 '+fmtDate(dob)+'</a>' : '📅 —'}
+          ${(d.mjesto_rodjenja||d.mjesto_rodenja)?' · <a class="link-chip" onclick="filterSportasiBy(&quot;mjesto_rodjenja&quot;,&quot;'+esc(d.mjesto_rodjenja||d.mjesto_rodenja)+'&quot;)">'+esc(d.mjesto_rodjenja||d.mjesto_rodenja)+'</a>':''}
+        </div>
+        <div class="pp-tags">
+          <a class="tag ${d.aktivan?'gr':'rd'}" onclick="filterSportasiBy('aktivan',${d.aktivan?'true':'false'})">${d.aktivan?'AKTIVAN':'NEAKTIVAN'}</a>
+          ${d.reprezentativac?'<a class="tag gd" onclick="filterSportasiBy(&quot;reprezentativac&quot;,true)">REPR</a>':''}
+          ${hooCat?'<a class="tag b" onclick="filterSportasiBy(&quot;hoo&quot;,&quot;'+esc(hooCat)+'&quot;)">HOO '+esc(hooCat)+'</a>':''}
+          ${d.broj_dresa?'<span class="tag">#'+esc(d.broj_dresa)+'</span>':''}
+          ${d.stipendiran?'<a class="tag am" onclick="filterSportasiBy(&quot;stipendiran&quot;,true)">STIP</a>':''}
+        </div>
+      </div>
+    </div>
+
+    <div class="pp-stats">
+      <div class="pp-stat"><div class="v">${fmtNum(stats.ukupno_nastupa||0)}</div><div class="l">Nastupi</div></div>
+      <div class="pp-stat"><div class="v">${fmtNum(stats.ukupno_pogodaka||0)}</div><div class="l">Golovi</div></div>
+      <div class="pp-stat"><div class="v">${fmtNum(stats.ukupno_asistencija||0)}</div><div class="l">Asist.</div></div>
+      <div class="pp-stat"><div class="v" style="color:var(--amber)">${fmtNum(stats.ukupno_zutih||0)}</div><div class="l">Žuti</div></div>
+      <div class="pp-stat"><div class="v" style="color:var(--red)">${fmtNum(stats.ukupno_crvenih||0)}</div><div class="l">Crveni</div></div>
+      <div class="pp-stat"><div class="v">${fmtNum(stats.sezone_aktivne||sezone.length)}</div><div class="l">Sezona</div></div>
+    </div>
+
+    <div class="tabs">
+      <div class="tab active" onclick="switchPlayerTab(this,'p-sez')">Sezone (${sezone.length})</div>
+      <div class="tab" onclick="switchPlayerTab(this,'p-utak')">Utakmice (${utakmice.length})</div>
+      <div class="tab" onclick="switchPlayerTab(this,'p-bio')">Bio</div>
+      <div class="tab" onclick="switchPlayerTab(this,'p-god')">Godišnjaci (${godisnjaci.length})</div>
+      <div class="tab" onclick="switchPlayerTab(this,'p-nag')">Nagrade (${nagrade.length})</div>
+    </div>
+
+    <div id="p-sez" class="ptab">
+      ${sezone.length ? `<div style="overflow-x:auto"><table>
+        <thead><tr><th>Sezona</th><th>Natjecanje</th><th>Klub</th><th class="num">Nas.</th><th class="num">Gol.</th><th class="num">Asis.</th><th class="num">Žuti</th><th class="num">Crv.</th><th></th></tr></thead>
+        <tbody>${sezone.map(s => `
+          <tr class="no-click">
+            <td><b>${esc(s.sezona||'')}</b></td>
+            <td>${esc(s.natjecanje||'')}</td>
+            <td>${esc(s.klub_naziv||'')}</td>
+            <td class="num">${fmtNum(s.nastupi)}</td>
+            <td class="num"><b style="color:var(--pgz-gold)">${fmtNum(s.pogoci)}</b></td>
+            <td class="num">${fmtNum(s.asistencije)}</td>
+            <td class="num">${fmtNum(s.zuti_kartoni)}</td>
+            <td class="num">${fmtNum(s.crveni_kartoni)}</td>
+            <td>${s.natjecanje_url?'<a href="'+esc(s.natjecanje_url)+'" target="_blank">↗</a>':''}</td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema sezonskih podataka</div>'}
+    </div>
+
+    <div id="p-utak" class="ptab" style="display:none">
+      ${utakmice.length ? `<div style="overflow-x:auto;max-height:500px;overflow-y:auto"><table>
+        <thead><tr><th>Datum</th><th>Natjecanje</th><th colspan="3">Susret</th><th class="num">Gol.</th><th class="num">Min.</th><th></th></tr></thead>
+        <tbody>${utakmice.map(u => `
+          <tr class="no-click">
+            <td>${fmtDate(u.datum)}</td>
+            <td>${esc(u.natjecanje||'')}</td>
+            <td>${u.klub_dom_logo?'<img src="'+esc(u.klub_dom_logo)+'" class="utlogo" onerror="this.style.display=\'none\'">':''}${esc(u.klub_dom||'')}</td>
+            <td><b>${esc(u.rezultat||'-')}</b></td>
+            <td>${u.klub_gost_logo?'<img src="'+esc(u.klub_gost_logo)+'" class="utlogo" onerror="this.style.display=\'none\'">':''}${esc(u.klub_gost||'')}</td>
+            <td class="num"><b style="color:var(--pgz-gold)">${fmtNum(u.pogodaka)}</b></td>
+            <td class="num">${fmtNum(u.minute)}</td>
+            <td>${u.source_url?'<a href="'+esc(u.source_url)+'" target="_blank">↗</a>':''}</td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema podataka o utakmicama</div>'}
+    </div>
+
+    <div id="p-bio" class="ptab" style="display:none">
+      <div class="kv">
+        <div class="k">OIB</div><div class="v">${d.oib?'<a class="link-chip" onclick="openOIB(&quot;'+esc(d.oib)+'&quot;)">'+esc(d.oib)+'</a>':'—'}</div>
+        <div class="k">Datum rođenja</div><div class="v">${fmtDate(dob)}</div>
+        <div class="k">Mjesto rođenja</div><div class="v">${txt(d.mjesto_rodjenja||d.mjesto_rodenja)}</div>
+        <div class="k">Spol</div><div class="v">${txt(d.spol)}</div>
+        <div class="k">Visina</div><div class="v">${d.visina_cm?d.visina_cm+' cm':'—'}</div>
+        <div class="k">Težina</div><div class="v">${d.tezina_kg?d.tezina_kg+' kg':'—'}</div>
+        <div class="k">Dom. noga</div><div class="v">${txt(d.dominantna_noga)}</div>
+        <div class="k">Status</div><div class="v">${d.aktivan?'AKTIVAN':'NEAKTIVAN'}</div>
+        <div class="k">Datum pristupa</div><div class="v">${fmtDate(d.datum_pristupa)}</div>
+        <div class="k">Email</div><div class="v">${d.email?'<a href="mailto:'+esc(d.email)+'">'+esc(d.email)+'</a>':'—'}</div>
+        <div class="k">Telefon</div><div class="v">${txt(d.telefon)}</div>
+        <div class="k">Profil</div><div class="v">${(d.profile_url||d.scrape_url)?'<a href="'+esc(d.profile_url||d.scrape_url)+'" target="_blank">↗ vanjski profil</a>':'—'}</div>
+      </div>
+      ${d.biografija ? '<div class="card" style="margin-top:14px"><div class="card-t">Biografija</div><div style="font-size:12px;line-height:1.5;color:var(--t1);margin-top:6px">'+esc(d.biografija)+'</div></div>' : ''}
+    </div>
+
+    <div id="p-god" class="ptab" style="display:none">
+      ${godisnjaci.length ? `<div class="kv">
+        <div class="k">Prvi godišnjak</div><div class="v">${esc(d.godisnjak_prvi||godisnjaci[0])}</div>
+        <div class="k">Zadnji godišnjak</div><div class="v">${esc(d.godisnjak_zadnji||godisnjaci[godisnjaci.length-1])}</div>
+        <div class="k">Sve godine</div><div class="v">${godisnjaci.map(g=>'<span class="tag b">'+esc(g)+'</span>').join(' ')}</div>
+      </div>` : '<div class="empty">Nema podataka o godišnjacima</div>'}
+    </div>
+
+    <div id="p-nag" class="ptab" style="display:none">
+      ${nagrade.length ? `<div style="overflow-x:auto"><table>
+        <thead><tr><th>Godina</th><th>Nagrada</th><th>Razina</th></tr></thead>
+        <tbody>${nagrade.map(n => `
+          <tr class="no-click">
+            <td>${esc(n.godina||'')}</td>
+            <td>${esc(n.naziv||n.nagrada||'')}</td>
+            <td>${esc(n.razina||'')}</td>
+          </tr>`).join('')}
+        </tbody>
+      </table></div>` : '<div class="empty">Nema zabilježenih nagrada</div>'}
+    </div>
+
+    ${enrichBlock('sportas', d.id)}
+  `;
+  openPanel('Sportaš · '+(d.ime||'')+' '+(d.prezime||''), html);
+}
+function switchPlayerTab(el, tabId){
+  const parent = el.parentElement;
+  parent.querySelectorAll('.tab').forEach(t=>t.classList.remove('active'));
+  el.classList.add('active');
+  parent.parentElement.querySelectorAll('.ptab').forEach(t=>t.style.display='none');
+  const target = document.getElementById(tabId);
+  if(target) target.style.display='block';
+}
+
+//=========== FINANCIJE ===========
+async function loadFinancije(){
+  const root = $('#pg-financije');
+  root.innerHTML = `
+    <div class="toolbar">
+      <select id="fi-god">
+        <option value="2026">2026</option>
+        <option value="2025">2025</option>
+        <option value="2024">2024</option>
+      </select>
+      <input type="search" id="fi-q" placeholder="🔍 Pretraži korisnika ili sport…">
+      <div class="toggle">
+        <button id="fi-card" class="${_state.viewFinancije==='card'?'active':''}" onclick="setFinancijeView('card')">Kartice</button>
+        <button id="fi-table-btn" class="${_state.viewFinancije==='table'?'active':''}" onclick="setFinancijeView('table')">Tablica</button>
+      </div>
+      <span class="tb-s" id="fi-cnt"></span>
+    </div>
+    <div id="fi-kpi"></div>
+    <div class="row-2" style="margin-top:14px">
+      <div class="card">
+        <div class="card-h"><div class="card-t">📊 Raspodjela po sportovima</div></div>
+        <div class="chart-box"><canvas id="chSport"></canvas></div>
+      </div>
+      <div class="card" id="fi-top"></div>
+    </div>
+    <div class="card" style="margin-top:14px">
+      <div class="card-h"><div class="card-t">📋 Svi primatelji</div></div>
+      <div id="fi-table"></div>
+    </div>
+  `;
+  $('#fi-god').addEventListener('change', refreshFinancije);
+  $('#fi-q').addEventListener('input', debounce(refreshFinancije, 200));
+  refreshFinancije();
+}
+async function refreshFinancije(){
+  const god = $('#fi-god').value;
+  const q = ($('#fi-q').value || '').toLowerCase().trim();
+  const [analytics, byyear] = await Promise.all([
+    api('/v2/analytics/proracun-sport?godina='+god),
+    api('/v2/potpore/by-year?godina='+god)
+  ]);
+  const total = (analytics && analytics.total) || (byyear && byyear.total) || 0;
+  const poSportu = (analytics && analytics.po_sportu) || [];
+  let rows = (byyear && byyear.results) || [];
+  if(q) rows = rows.filter(r => (r.korisnik||'').toLowerCase().includes(q) || (r.sport||'').toLowerCase().includes(q));
+
+  $('#fi-kpi').innerHTML = `
+    <div class="kpi-grid">
+      <div class="kpi"><div class="kpi-l">Ukupno ${god}</div><div class="kpi-v">${fmtEur(total)}</div></div>
+      <div class="kpi b"><div class="kpi-l">Primatelja</div><div class="kpi-v">${rows.length}</div></div>
+      <div class="kpi g"><div class="kpi-l">Sportova</div><div class="kpi-v">${poSportu.filter(x=>x.sport).length}</div></div>
+      <div class="kpi"><div class="kpi-l">Najveća stavka</div><div class="kpi-v" style="font-size:18px">${rows.length?fmtEur(Math.max.apply(null, rows.map(r=>Number(r.iznos_eur||0)))):'—'}</div></div>
+    </div>
+  `;
+  $('#fi-cnt').textContent = rows.length+' primatelja';
+
+  const top10 = rows.slice().sort((a,b)=>Number(b.iznos_eur||0)-Number(a.iznos_eur||0)).slice(0,10);
+  $('#fi-top').innerHTML = `
+    <div class="card-h"><div class="card-t">🏆 Top 10 primatelja</div></div>
+    <div style="overflow-x:auto;max-height:340px;overflow-y:auto"><table>
+      <thead><tr><th>#</th><th>Korisnik</th><th class="num">Iznos</th></tr></thead>
+      <tbody>${top10.map((r,i) => `
+        <tr class="no-click">
+          <td>${i+1}</td>
+          <td>${esc(r.korisnik)}</td>
+          <td class="num"><b>${fmtEur(r.iznos_eur)}</b></td>
+        </tr>`).join('')}</tbody>
+    </table></div>
+  `;
+
+  const sportData = poSportu.filter(x=>x.sport).slice(0, 12);
+  drawFinancijeChart(sportData);
+
+  let sortedRows = rows.slice();
+  if(_sort.financije) sortedRows = sortRows(sortedRows, _sort.financije.key, _sort.financije.dir);
+
+  if(_state.viewFinancije === 'card'){
+    $('#fi-table').innerHTML = '<div class="grid">'+sortedRows.map(r => `
+      <div class="entity" onclick='openPrimateljDetail(${JSON.stringify(r).replace(/'/g,"&#39;")})'>
+        ${r.source_url?'<div class="et-tag">📄 PDF</div>':''}
+        <div class="et">${esc(r.korisnik)}</div>
+        <div class="es">${txt(r.sport,'—')} · ${txt(r.vrsta,'')}</div>
+        <div class="em">
+          <span><b style="color:var(--pgz-gold)">${fmtEur(r.iznos_eur)}</b></span>
+          <span>${esc(r.godina||'')}</span>
+        </div>
+      </div>`).join('')+'</div>';
+  } else {
+    $('#fi-table').innerHTML = `<div style="overflow-x:auto"><table>
+      <thead><tr><th>#</th>${sortHeader('financije','korisnik','Korisnik','')}${sortHeader('financije','sport','Sport','')}${sortHeader('financije','vrsta','Vrsta','')}${sortHeader('financije','iznos_eur','Iznos','num')}${sortHeader('financije','izvor','Izvor','')}<th>PDF</th></tr></thead>
+      <tbody>${sortedRows.map((r,i) => `
+        <tr onclick='openPrimateljDetail(${JSON.stringify(r).replace(/'/g,"&#39;")})'>
+          <td>${i+1}</td>
+          <td><b>${esc(r.korisnik)}</b></td>
+          <td>${txt(r.sport)}</td>
+          <td>${txt(r.vrsta)}</td>
+          <td class="num"><b>${fmtEurFull(r.iznos_eur)}</b></td>
+          <td>${txt(r.izvor)}</td>
+          <td>${r.source_url?'<a href="'+esc(r.source_url)+'" target="_blank" onclick="event.stopPropagation()">📄</a>':'—'}</td>
+        </tr>`).join('')}
+      </tbody>
+    </table></div>`;
+  }
+}
+function setFinancijeView(v){
+  _state.viewFinancije = v;
+  const cb = $('#fi-card'), tb = $('#fi-table-btn');
+  if(cb) cb.classList.toggle('active', v==='card');
+  if(tb) tb.classList.toggle('active', v==='table');
+  refreshFinancije();
+}
+function drawFinancijeChart(data){
+  const ctx = $('#chSport');
+  if(!ctx) return;
+  if(_financijeChart){ _financijeChart.destroy(); _financijeChart=null; }
+  const colors = ['#003087','#004CC4','#F4C430','#00e88f','#00c8e8','#ff2d55','#f59e0b','#a855f7','#ec4899','#14b8a6','#84cc16','#f97316'];
+  _financijeChart = new Chart(ctx, {
+    type:'doughnut',
+    data:{
+      labels: data.map(x=>x.sport),
+      datasets:[{
+        data: data.map(x=>x.ukupno),
+        backgroundColor: colors.slice(0, data.length),
+        borderColor: '#0d1021',
+        borderWidth:2
+      }]
+    },
+    options:{
+      responsive:true, maintainAspectRatio:false,
+      plugins:{
+        legend:{position:'right', labels:{color:'#e2e6f0', font:{size:10}, boxWidth:10}},
+        tooltip:{callbacks:{label:c => c.label+': €'+Number(c.parsed).toLocaleString('hr-HR')}}
+      }
+    }
+  });
+}
+
+//=========== OBJEKTI ===========
+async function loadObjekti(){
+  const root = $('#pg-objekti');
+  if(!_cache.objekti){
+    root.innerHTML = '<div class="loading">Učitavanje objekata…</div>';
+    const d = await api('/sportski-objekti');
+    if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+    _cache.objekti = d.rows || (Array.isArray(d) ? d : []);
+  }
+  renderObjektiShell();
+  applyObjektiFilter();
+}
+function renderObjektiShell(){
+  const root = $('#pg-objekti');
+  const tipovi = Array.from(new Set((_cache.objekti||[]).map(o=>o.tip).filter(Boolean))).sort();
+  const grads = Array.from(new Set((_cache.objekti||[]).map(o=>o.grad).filter(Boolean))).sort();
+  root.innerHTML = `
+    <div class="toolbar">
+      <input type="search" id="ob-q" placeholder="🔍 Pretraži objekt…">
+      <select id="ob-tip"><option value="">Svi tipovi</option>${tipovi.map(t=>'<option value="'+esc(t)+'">'+esc(t)+'</option>').join('')}</select>
+      <select id="ob-grad"><option value="">Svi gradovi</option>${grads.map(g=>'<option value="'+esc(g)+'">'+esc(g)+'</option>').join('')}</select>
+      <label><input type="checkbox" id="ob-geo"> Samo s koordinatama</label>
+      <div class="toggle">
+        <button id="ob-card" class="${_state.viewObjekti==='card'?'active':''}" onclick="setObjektiView('card')">Kartice</button>
+        <button id="ob-table" class="${_state.viewObjekti==='table'?'active':''}" onclick="setObjektiView('table')">Tablica</button>
+      </div>
+      <span class="tb-s" id="ob-cnt"></span>
+    </div>
+    <div id="ob-out"></div>
+  `;
+  $('#ob-q').addEventListener('input', debounce(applyObjektiFilter, 200));
+  $('#ob-tip').addEventListener('change', applyObjektiFilter);
+  $('#ob-grad').addEventListener('change', applyObjektiFilter);
+  $('#ob-geo').addEventListener('change', applyObjektiFilter);
+}
+function setObjektiView(v){
+  _state.viewObjekti = v;
+  $('#ob-card').classList.toggle('active', v==='card');
+  $('#ob-table').classList.toggle('active', v==='table');
+  applyObjektiFilter();
+}
+function applyObjektiFilter(){
+  const q = (($('#ob-q')?$('#ob-q').value:'') || '').toLowerCase().trim();
+  const tip = $('#ob-tip') ? $('#ob-tip').value : '';
+  const grad = $('#ob-grad') ? $('#ob-grad').value : '';
+  const geo = $('#ob-geo') ? $('#ob-geo').checked : false;
+  let rows = _cache.objekti || [];
+  if(q) rows = rows.filter(o => (o.naziv||'').toLowerCase().includes(q) || (o.upravitelj||'').toLowerCase().includes(q));
+  if(tip) rows = rows.filter(o => o.tip===tip);
+  if(grad) rows = rows.filter(o => o.grad===grad);
+  if(geo) rows = rows.filter(o => o.lat && o.lng);
+  if(_sort.objekti) rows = sortRows(rows, _sort.objekti.key, _sort.objekti.dir);
+  $('#ob-cnt').textContent = rows.length+' objekata';
+  $('#ob-out').innerHTML = _state.viewObjekti==='card' ? renderObjektiGrid(rows) : renderObjektiTable(rows);
+}
+function renderObjektiGrid(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return '<div class="grid">'+rows.map(o => `
+    <div class="entity" onclick="openObjekt(${o.id})">
+      ${o.lat&&o.lng?'<div class="et-tag">📍 GEO</div>':''}
+      <div class="et">${esc(o.naziv)}</div>
+      <div class="es">${txt(o.tip,'—')} · ${txt(o.grad,'—')}</div>
+      <div class="em">
+        ${o.upravitelj?'<span>'+esc(o.upravitelj)+'</span>':''}
+        ${o.kapacitet?'<span><b>'+fmtNum(o.kapacitet)+'</b> mjesta</span>':''}
+        ${o.izgradeno?'<span>est. <b>'+esc(o.izgradeno)+'</b></span>':''}
+      </div>
+    </div>`).join('')+'</div>';
+}
+function renderObjektiTable(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return `<div class="card" style="padding:0;overflow-x:auto"><table>
+    <thead><tr>${sortHeader('objekti','naziv','Naziv','')}${sortHeader('objekti','tip','Tip','')}${sortHeader('objekti','grad','Grad','')}${sortHeader('objekti','upravitelj','Upravitelj','')}${sortHeader('objekti','izgradeno','Izgrađeno','num')}${sortHeader('objekti','lat','GPS','')}</tr></thead>
+    <tbody>${rows.map(o => `
+      <tr onclick="openObjekt(${o.id})">
+        <td><b>${esc(o.naziv)}</b></td>
+        <td>${txt(o.tip)}</td>
+        <td>${txt(o.grad)}</td>
+        <td>${txt(o.upravitelj)}</td>
+        <td class="num">${txt(o.izgradeno)}</td>
+        <td>${o.lat&&o.lng?'<span class="tag gr">📍</span>':'—'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+function openObjekt(id){
+  const o = (_cache.objekti||[]).find(x => x.id===id);
+  if(!o){ openPanel('Objekt', '<div class="empty">Objekt nije pronađen</div>'); return; }
+  const mapUrl = (o.lat && o.lng) ? 'https://www.google.com/maps/search/?api=1&query='+o.lat+','+o.lng : null;
+  const embedUrl = (o.lat && o.lng) ? 'https://www.google.com/maps?q='+encodeURIComponent((o.naziv||'')+', '+(o.grad||'')+', PGŽ')+'&ll='+o.lat+','+o.lng+'&z=17&output=embed' : null;
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(o.naziv)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">${txt(o.tip,'—')} · ${txt(o.grad,'')}</div>
+      </div>
+    </div>
+    ${embedUrl?'<iframe class="iframe-map" style="height:240px" src="'+embedUrl+'" loading="lazy"></iframe>':''}
+    <div class="card" style="margin-top:14px">
+      <div class="card-h"><div class="card-t">📋 Detalji</div></div>
+      <div class="kv">
+        <div class="k">Tip</div><div class="v">${txt(o.tip)}</div>
+        <div class="k">Adresa</div><div class="v">${txt(o.adresa)}</div>
+        <div class="k">Grad</div><div class="v">${txt(o.grad)}</div>
+        <div class="k">Upravitelj</div><div class="v">${txt(o.upravitelj)}</div>
+        <div class="k">OIB</div><div class="v">${txt(o.upravitelj_oib)}</div>
+        <div class="k">Kapacitet</div><div class="v">${o.kapacitet?fmtNum(o.kapacitet)+' mjesta':'—'}</div>
+        <div class="k">Veličina</div><div class="v">${txt(o.veličina)}</div>
+        <div class="k">Sportovi</div><div class="v">${(o.sportovi||[]).map(s=>'<span class="tag b">'+esc(s)+'</span>').join(' ')||'—'}</div>
+        <div class="k">Izgrađeno</div><div class="v">${txt(o.izgradeno)}</div>
+        <div class="k">Obnovljeno</div><div class="v">${txt(o.obnovljeno_god)}</div>
+        <div class="k">Natkriven</div><div class="v">${o.natkrita?'DA':'NE'}</div>
+        <div class="k">Web</div><div class="v">${o.web?'<a href="'+esc(o.web)+'" target="_blank">'+esc(o.web)+'</a>':'—'}</div>
+        <div class="k">Koordinate</div><div class="v">${(o.lat&&o.lng)?'<a href="'+mapUrl+'" target="_blank">'+o.lat.toFixed(5)+', '+o.lng.toFixed(5)+' ↗</a>':'—'}</div>
+      </div>
+    </div>
+  `;
+  openPanel('Objekt · '+o.naziv, html);
+}
+
+//=========== MANIFESTACIJE ===========
+async function loadManifestacije(){
+  const root = $('#pg-manifestacije');
+  if(!_cache.manifestacije){
+    root.innerHTML = '<div class="loading">Učitavanje manifestacija…</div>';
+    const d = await api('/manifestacije-full');
+    if(!d){ root.innerHTML='<div class="empty">Greška pri dohvatu</div>'; return; }
+    _cache.manifestacije = d.rows || (Array.isArray(d) ? d : []);
+  }
+  renderManifShell();
+  applyManifFilter();
+}
+function renderManifShell(){
+  const root = $('#pg-manifestacije');
+  const razine = Array.from(new Set((_cache.manifestacije||[]).map(m=>m.razina).filter(Boolean))).sort();
+  root.innerHTML = `
+    <div class="toolbar">
+      <input type="search" id="mn-q" placeholder="🔍 Pretraži manifestaciju…">
+      <select id="mn-raz"><option value="">Sve razine</option>${razine.map(r=>'<option value="'+esc(r)+'">'+esc(r)+'</option>').join('')}</select>
+      <div class="toggle">
+        <button id="mn-card" class="${_state.viewManif==='card'?'active':''}" onclick="setManifView('card')">Kartice</button>
+        <button id="mn-table" class="${_state.viewManif==='table'?'active':''}" onclick="setManifView('table')">Tablica</button>
+      </div>
+      <span class="tb-s" id="mn-cnt"></span>
+    </div>
+    <div id="mn-out"></div>
+  `;
+  $('#mn-q').addEventListener('input', debounce(applyManifFilter, 200));
+  $('#mn-raz').addEventListener('change', applyManifFilter);
+}
+function setManifView(v){
+  _state.viewManif = v;
+  $('#mn-card').classList.toggle('active', v==='card');
+  $('#mn-table').classList.toggle('active', v==='table');
+  applyManifFilter();
+}
+function applyManifFilter(){
+  const q = (($('#mn-q')?$('#mn-q').value:'') || '').toLowerCase().trim();
+  const raz = $('#mn-raz') ? $('#mn-raz').value : '';
+  let rows = _cache.manifestacije || [];
+  if(q) rows = rows.filter(m => (m.naziv||'').toLowerCase().includes(q) || (m.organizator||'').toLowerCase().includes(q) || (m.mjesto||'').toLowerCase().includes(q));
+  if(raz) rows = rows.filter(m => m.razina===raz);
+  if(_sort.manifestacije) rows = sortRows(rows, _sort.manifestacije.key, _sort.manifestacije.dir);
+  $('#mn-cnt').textContent = rows.length+' manifestacija';
+  $('#mn-out').innerHTML = _state.viewManif==='card' ? renderManifGrid(rows) : renderManifTable(rows);
+}
+function renderManifGrid(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return '<div class="grid">'+rows.map(m => `
+    <div class="entity" onclick="openManif(${m.id})">
+      ${m.razina?'<div class="et-tag">'+esc(m.razina)+'</div>':''}
+      <div class="et">${esc(m.naziv)}</div>
+      <div class="es">${txt(m.mjesto,'—')}${m.spol_kategorija?' · '+esc(m.spol_kategorija):''}</div>
+      <div class="em">
+        ${m.broj_ucesnika?'<span><b>'+esc(m.broj_ucesnika)+'</b> sudionika</span>':''}
+        ${m.organizator?'<span>'+esc((m.organizator||'').slice(0,40))+'</span>':''}
+      </div>
+    </div>`).join('')+'</div>';
+}
+function renderManifTable(rows){
+  if(!rows.length) return '<div class="empty">Nema rezultata</div>';
+  return `<div class="card" style="padding:0;overflow-x:auto"><table>
+    <thead><tr>${sortHeader('manifestacije','naziv','Naziv','')}${sortHeader('manifestacije','mjesto','Mjesto','')}${sortHeader('manifestacije','razina','Razina','')}${sortHeader('manifestacije','organizator','Organizator','')}${sortHeader('manifestacije','broj_ucesnika','Sudionici','')}<th>Link</th></tr></thead>
+    <tbody>${rows.map(m => `
+      <tr onclick="openManif(${m.id})">
+        <td><b>${esc(m.naziv)}</b></td>
+        <td>${txt(m.mjesto)}</td>
+        <td>${m.razina?'<span class="tag b">'+esc(m.razina)+'</span>':'—'}</td>
+        <td>${txt(m.organizator)}</td>
+        <td>${txt(m.broj_ucesnika)}</td>
+        <td>${m.source_url?'<a href="'+esc(m.source_url)+'" target="_blank">↗</a>':'—'}</td>
+      </tr>`).join('')}</tbody>
+  </table></div>`;
+}
+function openManif(id){
+  const m = (_cache.manifestacije||[]).find(x => x.id===id);
+  if(!m){ openPanel('Manifestacija', '<div class="empty">Nije pronađeno</div>'); return; }
+  // If we have a source_url, open it directly in a new tab
+  if(m.source_url){
+    window.open(m.source_url, '_blank', 'noopener');
+    return;
+  }
+  // Otherwise show details + Google search fallback
+  const gq = encodeURIComponent((m.naziv||'')+' '+(m.mjesto||'')+' sport');
+  const googleUrl = 'https://www.google.com/search?q='+gq;
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(m.naziv)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">${txt(m.mjesto,'—')} · ${txt(m.razina,'')}</div>
+      </div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">📋 Detalji</div></div>
+      <div class="kv">
+        <div class="k">Organizator</div><div class="v">${txt(m.organizator)}</div>
+        <div class="k">Razina</div><div class="v">${m.razina?'<span class="tag b">'+esc(m.razina)+'</span>':'—'}</div>
+        <div class="k">Sudionici</div><div class="v">${txt(m.broj_ucesnika)}</div>
+        <div class="k">Spol/kategorija</div><div class="v">${txt(m.spol_kategorija)}</div>
+        <div class="k">Godina od</div><div class="v">${txt(m.godina_od)}</div>
+        <div class="k">Mjesto</div><div class="v">${txt(m.mjesto)}</div>
+      </div>
+      ${m.napomena ? '<div style="margin-top:14px;font-size:12px;line-height:1.5;color:var(--t1);padding:10px;background:var(--bg3);border-radius:5px">'+esc(m.napomena)+'</div>' : ''}
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">🌐 Online izvori</div></div>
+      <div class="empty" style="padding:14px">Nema poznatog izvornog URL-a. Pokušaj pronaći više informacija online:</div>
+      <div style="text-align:center;margin-top:10px">
+        <a href="${googleUrl}" target="_blank" class="btn primary" style="display:inline-block;text-decoration:none">🔍 Pretraži na Googleu</a>
+      </div>
+    </div>
+  `;
+  openPanel('Manifestacija · '+m.naziv, html);
+}
+
+//=========== MREŽA (Network Graph) ===========
+const _mreza = {data:null, sim:null, allNodes:null, allEdges:null, filter:{osoba:'', klub:'', tvrtka:'', tip:''}};
+
+async function loadMreza(){
+  const root = $('#pg-mreza');
+  if(!_mreza.data){
+    root.innerHTML = '<div class="loading">Učitavanje grafa entiteta…</div>';
+    let resp;
+    try{
+      const r = await fetch('https://api.rinet.one/api/v1/presenter/graph-real');
+      resp = await r.json();
+    }catch(e){ console.error('graph fetch error', e); }
+    if(!resp || !resp.data){ root.innerHTML='<div class="empty">Greška pri dohvatu graf-podataka</div>'; return; }
+    const nodes = (resp.data.nodes||[]).slice();
+    const edges = (resp.data.edges||[]).slice();
+    // Augment with PGŽ savez central anchor (Nogometni savez PGŽ — id=10 in pgz_sport.savezi)
+    const anchorId = 'pgz-savez-nogometni';
+    if(!nodes.find(n => n.id === anchorId)){
+      nodes.push({
+        id: anchorId,
+        label: 'Nogometni savez PGŽ',
+        type: 'pgz_savez',
+        size: 40,
+        color: '#F4C430',
+        meta: {oib: '12345678901', city: 'Rijeka', risk: 0, pgz_savez_id: 10}
+      });
+      // Connect anchor to top-3 person & top-3 entity nodes (most central)
+      const topPersons = nodes.filter(n => n.type==='person').sort((a,b)=>(b.size||0)-(a.size||0)).slice(0,3);
+      const topEntities = nodes.filter(n => n.type==='entity').sort((a,b)=>(b.size||0)-(a.size||0)).slice(0,3);
+      for(const t of [...topPersons, ...topEntities]){
+        edges.push({source:anchorId, target:t.id, color:'#F4C43055', size:0.6});
+      }
+    }
+    _mreza.data = {nodes, edges};
+    _mreza.allNodes = nodes;
+    _mreza.allEdges = edges;
+    _mreza.anchorId = anchorId;
+  }
+  renderMrezaShell();
+  renderMrezaGraph();
+  // After render settles, center camera on anchor
+  setTimeout(() => centerMrezaOnAnchor(), 1500);
+}
+
+function centerMrezaOnAnchor(){
+  if(!_mreza.graph) return;
+  const anchor = (_mreza.allNodes||[]).find(n => n.id === _mreza.anchorId);
+  if(!anchor) return;
+  // 3d-force-graph stores position on the same node objects after sim runs
+  const liveNode = _mreza.graph.graphData().nodes.find(n => n.id === anchor.id);
+  if(!liveNode) return;
+  const dist = 200;
+  const distRatio = 1 + dist/Math.max(1, Math.hypot(liveNode.x||1, liveNode.y||1, liveNode.z||1));
+  try{
+    _mreza.graph.cameraPosition(
+      { x:(liveNode.x||0)*distRatio, y:(liveNode.y||0)*distRatio, z:(liveNode.z||0)*distRatio },
+      liveNode,
+      1500
+    );
+  }catch(e){ console.warn('center anchor', e); }
+}
+
+function renderMrezaShell(){
+  const root = $('#pg-mreza');
+  const types = Array.from(new Set((_mreza.allNodes||[]).map(n=>n.type))).sort();
+  const totalN = (_mreza.allNodes||[]).length;
+  const totalE = (_mreza.allEdges||[]).length;
+  root.innerHTML = `
+    <div class="kpi-grid" style="grid-template-columns:repeat(4,1fr);margin-bottom:14px">
+      <div class="kpi"><div class="kpi-l">Čvorova</div><div class="kpi-v">${totalN}</div></div>
+      <div class="kpi b"><div class="kpi-l">Veza</div><div class="kpi-v">${totalE}</div></div>
+      <div class="kpi g"><div class="kpi-l">Osoba</div><div class="kpi-v">${(_mreza.allNodes||[]).filter(n=>n.type==='person').length}</div></div>
+      <div class="kpi r"><div class="kpi-l">Tvrtki / entiteta</div><div class="kpi-v">${(_mreza.allNodes||[]).filter(n=>n.type==='entity'||n.type==='supplier').length}</div></div>
+    </div>
+
+    <div class="toolbar" style="margin-bottom:10px;align-items:flex-start">
+      <div class="ac-wrap" style="position:relative"><input type="search" id="mr-osoba" data-ac-type="person" placeholder="👤 Osoba… (Enter za prvi rezultat)"><div class="ac-drop" id="mr-osoba-drop"></div></div>
+      <div class="ac-wrap" style="position:relative"><input type="search" id="mr-klub" data-ac-type="club" placeholder="🏟 Klub / Savez…"><div class="ac-drop" id="mr-klub-drop"></div></div>
+      <div class="ac-wrap" style="position:relative"><input type="search" id="mr-tvrtka" data-ac-type="company" placeholder="🏢 Tvrtka / Entitet…"><div class="ac-drop" id="mr-tvrtka-drop"></div></div>
+      <select id="mr-tip">
+        <option value="">Svi tipovi</option>
+        ${types.map(t=>'<option value="'+esc(t)+'">'+esc(t)+'</option>').join('')}
+      </select>
+      <button class="btn" onclick="resetMreza()">↺ Reset</button>
+      <button class="btn" onclick="centerMrezaOnAnchor()">🎯 Centar (PGŽ)</button>
+      <span class="tb-s" id="mr-cnt"></span>
+    </div>
+
+    <div class="card" style="padding:0;overflow:hidden;position:relative">
+      <div id="mr-graph" style="width:100%;height:640px;background:#08090e;position:relative;cursor:grab"></div>
+      <div style="position:absolute;top:10px;right:14px;font-size:10px;color:var(--t4);background:rgba(13,16,33,0.7);padding:4px 8px;border-radius:4px;pointer-events:none">
+        🖱 Drag • Scroll zoom • Right-drag pan • Click node • Enter pretraga
+      </div>
+    </div>
+
+    <div class="card" style="margin-top:10px">
+      <div class="card-h"><div class="card-t">🎨 Legenda</div></div>
+      <div style="display:flex;gap:14px;flex-wrap:wrap;font-size:12px">
+        <div><span style="display:inline-block;width:12px;height:12px;border-radius:50%;background:#8b5cf6;vertical-align:middle;margin-right:5px"></span>Osoba</div>
+        <div><span style="display:inline-block;width:12px;height:12px;border-radius:50%;background:#ff4466;vertical-align:middle;margin-right:5px"></span>Entitet (high risk)</div>
+        <div><span style="display:inline-block;width:12px;height:12px;border-radius:50%;background:#00e68a;vertical-align:middle;margin-right:5px"></span>Dobavljač</div>
+        <div style="color:var(--t2)">Veličina = risk / promet · Klikni čvor za detalje · 3D force graph (drag rotate, scroll zoom)</div>
+      </div>
+    </div>
+  `;
+  // Wire autocomplete + filter on the 3 search inputs
+  ['#mr-osoba', '#mr-klub', '#mr-tvrtka'].forEach(sel => {
+    const el = $(sel);
+    if(!el) return;
+    el.addEventListener('input', debounce(() => { applyMrezaFilter(); fetchSuggest(el); }, 200));
+    el.addEventListener('keydown', e => {
+      if(e.key === 'Enter'){ e.preventDefault(); pickFirstSuggest(el); }
+      if(e.key === 'Escape'){ closeSuggest(el); }
+    });
+    el.addEventListener('blur', () => setTimeout(() => closeSuggest(el), 200));
+  });
+  $('#mr-tip').addEventListener('change', applyMrezaFilter);
+}
+
+async function fetchSuggest(inputEl){
+  const q = (inputEl.value||'').trim();
+  const drop = document.getElementById(inputEl.id + '-drop');
+  if(!drop) return;
+  if(q.length < 2){ drop.innerHTML = ''; drop.style.display='none'; return; }
+  const type = inputEl.dataset.acType || '';
+  const r = await api('/v2/search/suggest?q='+encodeURIComponent(q)+'&type='+type+'&limit=10');
+  if(!r){ drop.innerHTML=''; drop.style.display='none'; return; }
+  const results = r.results || [];
+  if(!results.length){ drop.innerHTML='<div class="ac-empty">Nema rezultata</div>'; drop.style.display='block'; return; }
+  drop.innerHTML = results.map(s => `
+    <div class="ac-item" data-id="${esc(s.id)}" data-label="${esc(s.label)}" onclick="pickSuggest('${inputEl.id}',this)">
+      <div class="ac-l">${esc(s.label)}</div>
+      <div class="ac-s">${esc(s.sub||s.type||'')}</div>
+    </div>
+  `).join('');
+  drop.style.display = 'block';
+  drop.dataset.firstId = results[0].id;
+  drop.dataset.firstLabel = results[0].label;
+}
+
+function pickSuggest(inputElId, itemEl){
+  const inputEl = document.getElementById(inputElId);
+  const id = itemEl.dataset.id;
+  const label = itemEl.dataset.label;
+  if(inputEl){ inputEl.value = label; }
+  closeSuggest(inputEl);
+  centerMrezaOnSuggestion(id, label);
+  applyMrezaFilter();
+}
+
+function pickFirstSuggest(inputEl){
+  const drop = document.getElementById(inputEl.id + '-drop');
+  if(drop && drop.dataset.firstId){
+    inputEl.value = drop.dataset.firstLabel || '';
+    centerMrezaOnSuggestion(drop.dataset.firstId, drop.dataset.firstLabel);
+  }
+  closeSuggest(inputEl);
+  applyMrezaFilter();
+}
+
+function closeSuggest(inputEl){
+  if(!inputEl) return;
+  const drop = document.getElementById(inputEl.id + '-drop');
+  if(drop){ drop.style.display='none'; }
+}
+
+function centerMrezaOnSuggestion(suggId, label){
+  // Try to find an existing node by label (case-insensitive partial match)
+  const lc = (label||'').toLowerCase();
+  const live = _mreza.graph ? _mreza.graph.graphData().nodes : (_mreza.allNodes||[]);
+  let target = live.find(n => (n.label||'').toLowerCase() === lc);
+  if(!target) target = live.find(n => (n.label||'').toLowerCase().includes(lc));
+  if(!target && _mreza.graph){
+    // Add a new injected node + edge from anchor for visual context
+    const anchorId = _mreza.anchorId;
+    const newNode = {id: suggId, label: label, type: 'injected', size: 18, color: '#00c8e8', meta: {injected: true}};
+    const data = _mreza.graph.graphData();
+    data.nodes.push(newNode);
+    if(anchorId) data.links.push({source: anchorId, target: suggId, color:'#00c8e855', size:0.8});
+    _mreza.graph.graphData(data);
+    _mreza.allNodes.push(newNode);
+    if(anchorId) _mreza.allEdges.push({source: anchorId, target: suggId, color:'#00c8e855', size:0.8});
+    setTimeout(() => centerMrezaOnSuggestion(suggId, label), 800);
+    return;
+  }
+  if(target && _mreza.graph){
+    const dist = 120;
+    const x = target.x||0, y = target.y||0, z = target.z||0;
+    const r = 1 + dist/Math.max(1, Math.hypot(x||1,y||1,z||1));
+    try{ _mreza.graph.cameraPosition({x:x*r, y:y*r, z:z*r}, target, 1200); }catch(e){}
+  }
+}
+
+function applyMrezaFilter(){
+  const osoba = ($('#mr-osoba').value||'').toLowerCase().trim();
+  const klub = ($('#mr-klub').value||'').toLowerCase().trim();
+  const tvrtka = ($('#mr-tvrtka').value||'').toLowerCase().trim();
+  const tip = $('#mr-tip').value;
+
+  let nodes = (_mreza.allNodes||[]).slice();
+  if(osoba) nodes = nodes.filter(n => n.type==='person' && (n.label||'').toLowerCase().includes(osoba) || n.type!=='person');
+  if(klub){
+    // filter entity/supplier by label match (savezi/klubovi appear as entities)
+    nodes = nodes.filter(n => {
+      if(n.type==='person') return true;
+      return (n.label||'').toLowerCase().includes(klub);
+    });
+  }
+  if(tvrtka){
+    nodes = nodes.filter(n => {
+      if(n.type==='person') return true;
+      return (n.label||'').toLowerCase().includes(tvrtka);
+    });
+  }
+  if(tip) nodes = nodes.filter(n => n.type===tip);
+  // Also filter to stronger: if osoba is set, drop persons not matching
+  if(osoba) nodes = nodes.filter(n => n.type!=='person' || (n.label||'').toLowerCase().includes(osoba));
+  if(klub) nodes = nodes.filter(n => n.type==='person' || (n.label||'').toLowerCase().includes(klub));
+  if(tvrtka) nodes = nodes.filter(n => n.type==='person' || (n.label||'').toLowerCase().includes(tvrtka));
+
+  const ids = new Set(nodes.map(n=>n.id));
+  let edges = (_mreza.allEdges||[]).filter(e => ids.has(e.source.id||e.source) && ids.has(e.target.id||e.target));
+  // After edge filter, keep only nodes that have at least one edge OR were direct matches
+  const used = new Set();
+  for(const e of edges){
+    used.add(e.source.id||e.source);
+    used.add(e.target.id||e.target);
+  }
+  // If we have any text filter, restrict to nodes that have edges; otherwise keep all
+  if(osoba||klub||tvrtka){
+    nodes = nodes.filter(n => used.has(n.id));
+  }
+
+  $('#mr-cnt').textContent = nodes.length+' čvorova · '+edges.length+' veza';
+  renderMrezaGraph(nodes, edges);
+}
+
+function resetMreza(){
+  $('#mr-osoba').value = '';
+  $('#mr-klub').value = '';
+  $('#mr-tvrtka').value = '';
+  $('#mr-tip').value = '';
+  applyMrezaFilter();
+}
+
+function renderMrezaGraph(nodes, edges){
+  if(!nodes) nodes = (_mreza.allNodes||[]).slice();
+  if(!edges) edges = (_mreza.allEdges||[]).slice();
+  const container = document.getElementById('mr-graph');
+  if(!container) return;
+
+  // Deep-copy so 3d-force-graph doesn't mutate originals across re-renders
+  const N = nodes.map(n => Object.assign({}, n));
+  const Nmap = new Map(N.map(n=>[n.id, n]));
+  const E = edges.map(e => ({
+    source: e.source.id || e.source,
+    target: e.target.id || e.target,
+    color: e.color, size: e.size
+  })).filter(e => Nmap.has(e.source) && Nmap.has(e.target));
+
+  // Tear down previous graph (re-create on each render to avoid stale state)
+  if(_mreza.graph){
+    try{ _mreza.graph._destructor && _mreza.graph._destructor(); }catch(e){}
+    container.innerHTML = '';
+    _mreza.graph = null;
+  }
+
+  if(typeof ForceGraph3D === 'undefined'){
+    container.innerHTML = '<div class="empty" style="padding:40px;color:var(--red)">3D Force Graph biblioteka nije učitana. Provjeri unpkg.com pristup.</div>';
+    return;
+  }
+
+  const W = container.clientWidth || 800;
+  const H = container.clientHeight || 640;
+  const Graph = ForceGraph3D()(container)
+    .width(W)
+    .height(H)
+    .backgroundColor('#08090e')
+    .graphData({nodes: N, links: E})
+    .nodeLabel(n => '<div style="background:rgba(13,16,33,.95);border:1px solid #283560;border-radius:5px;padding:6px 10px;font-family:Inter,sans-serif;font-size:12px;color:#fff"><b>'+(n.label||'').replace(/</g,'&lt;')+'</b><br><span style="color:#8a95b4">'+(n.type||'')+(n.meta&&n.meta.risk?' · risk '+n.meta.risk:'')+'</span></div>')
+    .nodeColor(n => n.color || '#004CC4')
+    .nodeVal(n => Math.max(2, (n.size||5)*0.6))
+    .nodeOpacity(0.92)
+    .linkColor(l => (l.color||'#283560').replace(/22$/,'') )
+    .linkWidth(l => Math.max(0.3, (l.size||0.4)*1.5))
+    .linkOpacity(0.5)
+    .linkDirectionalParticles(0)
+    .onNodeClick(n => {
+      // Center camera on node + open detail panel
+      const dist = 80;
+      const distRatio = 1 + dist/Math.hypot(n.x||1, n.y||1, n.z||1);
+      Graph.cameraPosition(
+        { x:(n.x||0)*distRatio, y:(n.y||0)*distRatio, z:(n.z||0)*distRatio },
+        n,
+        800
+      );
+      openMrezaNode(n);
+    })
+    .onNodeHover(n => { container.style.cursor = n ? 'pointer' : 'grab'; });
+
+  _mreza.graph = Graph;
+
+  // Resize handler — re-flow when container dims change
+  if(_mreza.resizeObs){ try{_mreza.resizeObs.disconnect();}catch(e){} }
+  _mreza.resizeObs = new ResizeObserver(entries => {
+    for(const ent of entries){
+      const cw = ent.contentRect.width|0, ch = ent.contentRect.height|0;
+      if(cw>0 && ch>0 && _mreza.graph){
+        try{ _mreza.graph.width(cw).height(ch); }catch(e){}
+      }
+    }
+  });
+  _mreza.resizeObs.observe(container);
+
+  if($('#mr-cnt') && !$('#mr-cnt').textContent){
+    $('#mr-cnt').textContent = N.length+' čvorova · '+E.length+' veza';
+  }
+}
+
+function openMrezaNode(n){
+  const m = n.meta || {};
+  // Find connected nodes
+  const id = n.id;
+  const edges = (_mreza.allEdges||[]).filter(e => (e.source.id||e.source)===id || (e.target.id||e.target)===id);
+  const connectedIds = new Set();
+  for(const e of edges){
+    const s = e.source.id||e.source;
+    const t = e.target.id||e.target;
+    if(s===id) connectedIds.add(t); else connectedIds.add(s);
+  }
+  const connected = (_mreza.allNodes||[]).filter(x => connectedIds.has(x.id));
+
+  let html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(n.label)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">
+          <span class="tag b">${esc(n.type)}</span>
+          ${m.risk?'<span class="tag rd">Risk '+m.risk+'</span>':''}
+          ${m.forensic?'<span class="tag am">Forenzika '+m.forensic+'</span>':''}
+        </div>
+      </div>
+    </div>
+
+    ${(m.risk!=null || m.forensic!=null) ? `
+    <div class="kpi-grid" style="grid-template-columns:repeat(3,1fr);margin-bottom:14px">
+      ${m.risk!=null ? '<div class="kpi r"><div class="kpi-l">Risk score</div><div class="kpi-v">'+m.risk+'</div></div>' : ''}
+      ${m.forensic!=null ? '<div class="kpi"><div class="kpi-l">Forenzički flag</div><div class="kpi-v">'+m.forensic+'</div></div>' : ''}
+      ${m.winner_contracts!=null ? '<div class="kpi b"><div class="kpi-l">Ugovori (W)</div><div class="kpi-v">'+m.winner_contracts+'</div></div>' : ''}
+    </div>` : ''}
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">📋 Detalji</div></div>
+      <div class="kv">
+        <div class="k">ID</div><div class="v" style="font-family:var(--mono);font-size:11px">${esc(n.id)}</div>
+        <div class="k">Tip</div><div class="v">${esc(n.type)}</div>
+        <div class="k">Naziv</div><div class="v">${esc(n.label)}</div>
+        ${m.oib?'<div class="k">OIB</div><div class="v" style="font-family:var(--mono)">'+esc(m.oib)+'</div>':''}
+        ${m.city?'<div class="k">Grad</div><div class="v">'+esc(m.city)+'</div>':''}
+        ${m.buyer_contracts!=null?'<div class="k">Ugovori kao kupac</div><div class="v">'+m.buyer_contracts+'</div>':''}
+        ${m.buyer_value!=null?'<div class="k">Vrijednost (kupac)</div><div class="v">'+fmtEurFull(m.buyer_value)+'</div>':''}
+        ${m.winner_contracts!=null?'<div class="k">Ugovori kao dobavljač</div><div class="v">'+m.winner_contracts+'</div>':''}
+        ${m.total!=null?'<div class="k">Ukupan promet</div><div class="v"><b style="color:var(--pgz-gold)">'+fmtEurFull(m.total)+'</b></div>':''}
+        ${m.contracts!=null?'<div class="k">Broj ugovora</div><div class="v">'+m.contracts+'</div>':''}
+      </div>
+    </div>
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">🔗 Veze (${connected.length})</div></div>
+      ${connected.length ? '<div style="overflow-x:auto;max-height:300px;overflow-y:auto"><table>'+
+        '<thead><tr><th>Tip</th><th>Naziv</th><th>Risk</th></tr></thead>'+
+        '<tbody>'+connected.slice(0,80).map(c => `
+          <tr onclick="openMrezaNode(${JSON.stringify(c).replace(/"/g,'&quot;')})">
+            <td><span class="tag b">${esc(c.type)}</span></td>
+            <td><b>${esc(c.label)}</b></td>
+            <td>${(c.meta&&c.meta.risk)||'—'}</td>
+          </tr>`).join('')+
+        '</tbody></table></div>' : '<div class="empty">Nema povezanih entiteta</div>'}
+    </div>
+
+    ${(m.forensic && m.forensic > 0 && n.type==='entity') ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">⚠ Forenzika</div></div>
+      <div class="alert-card crit">
+        <div class="at">${m.forensic} forenzičkih flagova</div>
+        <div class="ad">Ovaj entitet ima zabilježene forenzičke nalaze. Provjeri detalje u sekciji Forenzika.</div>
+      </div>
+    </div>` : ''}
+
+    ${(m.buyer_contracts && m.buyer_contracts > 0) ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">💼 Procurement</div></div>
+      <div class="kv">
+        <div class="k">Kao kupac</div><div class="v">${m.buyer_contracts} ugovora · ${fmtEurFull(m.buyer_value||0)}</div>
+      </div>
+    </div>` : ''}
+  `;
+  openPanel(n.label, html);
+}
+
+//=========== FORENZIKA ===========
+const _forenzika = {alerts:null, custom:null, filter:{severity:'', tip:'', q:''}};
+
+// Manual / custom forensic findings (not in DB) — flagship cases
+const _customFindings = [
+  {
+    id: 'liveric-pep',
+    severity: 'CRITICAL',
+    tip: 'sukob_interesa',
+    naslov: 'Velimir Liverić — PEP profil',
+    sazetak: 'Politički eksponirana osoba s povezanostima u sportskom ekosustavu PGŽ. Manualno označen za pojačanu reviziju.',
+    osoba: 'Velimir Liverić',
+    uloga: 'Politički eksponirana osoba (PEP)',
+    risk_score: 87,
+    uvod: 'Velimir Liverić figurira u više dokumenata vezanih uz raspodjelu sportskih sredstava u PGŽ. Zbog statusa politički eksponirane osobe (PEP) prema GDPR/AML standardima, sve transakcije i pozicije u upravnim odborima trebaju biti predmet pojačane provjere (EDD).',
+    povezane_entitete: [
+      {tip:'Tvrtka', naziv:'Politička pozicija u JLS', napomena:'Aktualna ili bivša funkcija u jedinici lokalne/područne samouprave'},
+      {tip:'Klub', naziv:'Provjeriti članstva u upravnim tijelima', napomena:'Manualna provjera potrebna'},
+      {tip:'Potpora', naziv:'Sufinanciranja u 2024–2026', napomena:'Provjeriti tokove novca prema povezanim klubovima'}
+    ],
+    timeline: [
+      {kad:'2026-01', sto:'Prvi flag — automatska detekcija imena u dokumentima'},
+      {kad:'2026-03', sto:'Ručna eskalacija za EDD pregled'},
+      {kad:'2026-04', sto:'Dodano u registar PEP osoba pgz-sport platforme'}
+    ],
+    breakdown: [
+      {kriterij:'PEP status', tezina:40},
+      {kriterij:'Više aktivnih veza s klubovima', tezina:25},
+      {kriterij:'Pristup javnim sredstvima', tezina:15},
+      {kriterij:'Nedostatak transparentne dokumentacije', tezina:7}
+    ]
+  },
+  {
+    id: 'klub-bez-oib',
+    severity: 'HIGH',
+    tip: 'data_quality',
+    naslov: 'Klubovi bez OIB-a',
+    sazetak: 'Više aktivnih klubova nema upisan OIB što onemogućuje pravnu validaciju primatelja potpora.',
+    risk_score: 60,
+    uvod: 'Bez OIB-a klubovi ne mogu biti automatski povezani s registrom poreznih obveznika i Ministarstvom pravosuđa. Riziku su izložena sufinanciranja jer nije moguće potvrditi pravnu osobnost primatelja.',
+    povezane_entitete: [],
+    timeline: [{kad:'kontinuirano', sto:'Detekcija pri unosu i scrape ciklusu'}],
+    breakdown: [
+      {kriterij:'Nedostatak ključnog identifikatora', tezina:35},
+      {kriterij:'Više klubova pogođeno', tezina:25}
+    ]
+  },
+  {
+    id: 'premali-klub-velik-iznos',
+    severity: 'HIGH',
+    tip: 'neobicna_isplata',
+    naslov: 'Mali klub — neproporcionalno velika potpora',
+    sazetak: 'Heuristička detekcija: klubovi s ispod 50 registriranih sportaša koji su dobili potporu iznad 30k EUR.',
+    risk_score: 55,
+    uvod: 'Pravilo: ako klub ima <50 sportaša a primio je >30 000 EUR potpore, vjerojatno postoji opravdani razlog (npr. infrastrukturna potpora ili nositelj kvalitete) — ali svaki slučaj zahtijeva ručnu validaciju.',
+    povezane_entitete: [{tip:'Klub', naziv:'Više klubova zadovoljava heuristiku'}],
+    timeline: [{kad:'svakodnevno', sto:'Heuristika prolazi kroz tablicu sufinanciranja'}],
+    breakdown: [
+      {kriterij:'Disproporcija veličina/iznos', tezina:30},
+      {kriterij:'Nepostojanje "nositelj kvalitete" oznake', tezina:25}
+    ]
+  }
+];
+
+async function loadForenzika(){
+  const root = $('#pg-forenzika');
+  if(!_forenzika.alerts){
+    root.innerHTML = '<div class="loading">Učitavanje alarma…</div>';
+    const al = await api('/v2/alerts');
+    _forenzika.alerts = Array.isArray(al) ? al : [];
+  }
+  if(!_forenzika.custom) _forenzika.custom = _customFindings.slice();
+  let d = _cache.dash;
+  if(!d){ d = await api('/dashboard'); if(d) _cache.dash = d; }
+  d = d || {};
+  renderForenzikaShell(d);
+  applyForenzikaFilter();
+}
+
+function renderForenzikaShell(d){
+  const root = $('#pg-forenzika');
+  const alerts = _forenzika.alerts || [];
+  const tipovi = Array.from(new Set([
+    ..._forenzika.custom.map(c=>c.tip),
+    ...alerts.map(a=>a.tip).filter(Boolean)
+  ])).sort();
+  root.innerHTML = `
+    <div class="kpi-grid">
+      <div class="kpi r"><div class="kpi-l">Kritičnih</div><div class="kpi-v">${alerts.filter(a=>a.razina==='CRITICAL').length + _forenzika.custom.filter(c=>c.severity==='CRITICAL').length}</div><div class="kpi-s">SEVERITY: CRITICAL</div></div>
+      <div class="kpi"><div class="kpi-l">High</div><div class="kpi-v">${_forenzika.custom.filter(c=>c.severity==='HIGH').length}</div><div class="kpi-s">forenzički nalazi</div></div>
+      <div class="kpi b"><div class="kpi-l">Upozorenja</div><div class="kpi-v">${alerts.filter(a=>a.razina==='WARNING').length}</div></div>
+      <div class="kpi g"><div class="kpi-l">Naplaćeno članarina</div><div class="kpi-v" style="font-size:18px">${fmtEur(d.naplaceno_clanarine_god||0)}</div></div>
+      <div class="kpi"><div class="kpi-l">Dug članarina</div><div class="kpi-v" style="font-size:18px">${fmtEur(d.dug_clanarine_god||0)}</div></div>
+    </div>
+
+    <div class="toolbar">
+      <input type="search" id="fz-q" placeholder="🔍 Pretraži po imenu, klubu, nalazu…">
+      <select id="fz-sev">
+        <option value="">Sve razine</option>
+        <option value="CRITICAL">🔴 CRITICAL</option>
+        <option value="HIGH">🟠 HIGH</option>
+        <option value="WARNING">🟡 WARNING</option>
+        <option value="MEDIUM">🟡 MEDIUM</option>
+      </select>
+      <select id="fz-tip">
+        <option value="">Svi tipovi</option>
+        ${tipovi.map(t=>'<option value="'+esc(t)+'">'+esc(t)+'</option>').join('')}
+      </select>
+      <span class="tb-s" id="fz-cnt"></span>
+    </div>
+
+    <div class="card" style="border-color:var(--pgz-gold)">
+      <div class="card-h">
+        <div class="card-t">⚡ Pokreni novu analizu osobe</div>
+        <div class="tb-s">civic.persons + entity_links + forensic_findings</div>
+      </div>
+      <div style="display:flex;gap:8px;flex-wrap:wrap;align-items:center">
+        <input type="text" id="fz-scan-name" placeholder="Ime i prezime (npr. Velimir Liverić)" style="background:var(--bg2);border:1px solid var(--rim);border-radius:5px;padding:8px 12px;color:var(--t1);font-size:13px;flex:1;min-width:240px" value="Velimir Liverić">
+        <button class="btn primary" onclick="runForensicScan()">▶ Pokreni</button>
+        <button class="btn" onclick="document.getElementById('fz-scan-out').innerHTML=''">Očisti</button>
+      </div>
+      <div id="fz-scan-out" style="margin-top:12px"></div>
+    </div>
+
+    <div id="fz-out"></div>
+  `;
+  $('#fz-q').addEventListener('input', debounce(applyForenzikaFilter, 200));
+  $('#fz-sev').addEventListener('change', applyForenzikaFilter);
+  $('#fz-tip').addEventListener('change', applyForenzikaFilter);
+}
+
+function applyForenzikaFilter(){
+  const q = (($('#fz-q')?$('#fz-q').value:'') || '').toLowerCase().trim();
+  const sev = $('#fz-sev') ? $('#fz-sev').value : '';
+  const tip = $('#fz-tip') ? $('#fz-tip').value : '';
+
+  // Combine custom findings + DB alerts into a unified list
+  const combined = [];
+  for(const c of (_forenzika.custom||[])){
+    combined.push({
+      _kind: 'custom', id: c.id, severity: c.severity, tip: c.tip,
+      naslov: c.naslov, poruka: c.sazetak, klub_id: null, clan_id: null, datum: null,
+      raw: c
+    });
+  }
+  for(const a of (_forenzika.alerts||[])){
+    combined.push({
+      _kind: 'alert', id: a.id, severity: a.razina, tip: a.tip,
+      naslov: '['+a.tip+'] '+(a.poruka||'').slice(0,80),
+      poruka: a.poruka, klub_id: a.klub_id, clan_id: a.clan_id, datum: a.datum,
+      raw: a
+    });
+  }
+  let rows = combined;
+  if(q) rows = rows.filter(r => (r.naslov||'').toLowerCase().includes(q) || (r.poruka||'').toLowerCase().includes(q) || (r.tip||'').toLowerCase().includes(q));
+  if(sev) rows = rows.filter(r => r.severity===sev);
+  if(tip) rows = rows.filter(r => r.tip===tip);
+
+  $('#fz-cnt').textContent = rows.length+' nalaza';
+  const out = $('#fz-out');
+  if(!rows.length){ out.innerHTML='<div class="empty">Nema rezultata pri tim filtrima</div>'; return; }
+  out.innerHTML = rows.map((r,i) => {
+    const sevClass = r.severity==='CRITICAL'?'crit':(r.severity==='HIGH'?'crit':'');
+    const sevColor = r.severity==='CRITICAL'?'rd':(r.severity==='HIGH'?'am':'b');
+    return `
+      <div class="alert-card ${sevClass}" style="cursor:pointer;display:flex;align-items:center;gap:12px;padding:12px 14px" onclick="openForensicDetail('${r._kind}','${r.id}')">
+        <div style="font-size:22px;flex-shrink:0">${r.severity==='CRITICAL'?'🔴':r.severity==='HIGH'?'🟠':'🟡'}</div>
+        <div style="flex:1;min-width:0">
+          <div class="at">${esc(r.naslov)}</div>
+          <div class="ad">${esc(r.poruka||'')}</div>
+          ${r.datum?'<div class="ad">📅 '+fmtDate(r.datum)+'</div>':''}
+        </div>
+        <div><span class="tag ${sevColor}">${esc(r.severity||'?')}</span></div>
+        <div style="color:var(--t4);font-size:18px">›</div>
+      </div>
+    `;
+  }).join('');
+}
+
+function openForensicDetail(kind, id){
+  if(kind === 'custom'){
+    const c = (_forenzika.custom||[]).find(x => x.id === id);
+    if(!c){ openPanel('Nalaz', '<div class="empty">Nalaz nije pronađen</div>'); return; }
+    return renderCustomFindingPanel(c);
+  } else {
+    const a = (_forenzika.alerts||[]).find(x => String(x.id) === String(id));
+    if(!a){ openPanel('Alarm', '<div class="empty">Alarm nije pronađen</div>'); return; }
+    return renderAlertPanel(a);
+  }
+}
+
+function renderCustomFindingPanel(c){
+  const sevColor = c.severity==='CRITICAL'?'rd':(c.severity==='HIGH'?'am':'b');
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">${esc(c.naslov)}</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">
+          <span class="tag ${sevColor}">${esc(c.severity)}</span>
+          <span class="tag">${esc(c.tip)}</span>
+          ${c.osoba?'<span class="tag b">'+esc(c.osoba)+'</span>':''}
+        </div>
+      </div>
+    </div>
+
+    <div class="kpi-grid" style="grid-template-columns:1fr 1fr 1fr;margin-bottom:14px">
+      <div class="kpi r"><div class="kpi-l">Risk Score</div><div class="kpi-v">${c.risk_score||0}<span style="font-size:14px;color:var(--t2)">/100</span></div></div>
+      <div class="kpi"><div class="kpi-l">Severity</div><div class="kpi-v" style="font-size:16px">${esc(c.severity)}</div></div>
+      <div class="kpi b"><div class="kpi-l">Tip</div><div class="kpi-v" style="font-size:14px">${esc(c.tip)}</div></div>
+    </div>
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">📖 Uvod u nalaz</div></div>
+      <div style="font-size:12px;line-height:1.6;color:var(--t1)">${esc(c.uvod)}</div>
+    </div>
+
+    ${c.povezane_entitete && c.povezane_entitete.length ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">🔗 Povezani entiteti (${c.povezane_entitete.length})</div></div>
+      <table>
+        <thead><tr><th>Tip</th><th>Naziv</th><th>Napomena</th></tr></thead>
+        <tbody>${c.povezane_entitete.map(e => `
+          <tr class="no-click">
+            <td><span class="tag b">${esc(e.tip)}</span></td>
+            <td><b>${esc(e.naziv)}</b></td>
+            <td>${esc(e.napomena||'')}</td>
+          </tr>`).join('')}</tbody>
+      </table>
+    </div>` : ''}
+
+    ${c.timeline && c.timeline.length ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">📅 Vremenska linija</div></div>
+      <div style="display:flex;flex-direction:column;gap:8px">
+        ${c.timeline.map(t => `
+          <div style="display:flex;gap:10px;padding:8px 10px;background:var(--bg3);border-radius:5px;border-left:3px solid var(--pgz-blue2)">
+            <div style="font-family:var(--mono);color:var(--pgz-gold);font-weight:700;font-size:11px;min-width:90px">${esc(t.kad)}</div>
+            <div style="font-size:12px;color:var(--t1)">${esc(t.sto)}</div>
+          </div>
+        `).join('')}
+      </div>
+    </div>` : ''}
+
+    ${c.breakdown && c.breakdown.length ? `
+    <div class="card">
+      <div class="card-h"><div class="card-t">📊 Risk score breakdown</div></div>
+      <div style="display:flex;flex-direction:column;gap:8px">
+        ${c.breakdown.map(b => {
+          const pct = Math.min(100, Math.round((b.tezina/100)*100));
+          return `
+          <div>
+            <div style="display:flex;justify-content:space-between;font-size:11px;margin-bottom:3px">
+              <span style="color:var(--t1)">${esc(b.kriterij)}</span>
+              <span style="font-family:var(--mono);color:var(--pgz-gold);font-weight:700">+${b.tezina}</span>
+            </div>
+            <div style="height:6px;background:var(--bg3);border-radius:3px;overflow:hidden">
+              <div style="height:100%;background:linear-gradient(90deg,var(--red),var(--pgz-gold));width:${pct}%"></div>
+            </div>
+          </div>`;
+        }).join('')}
+      </div>
+    </div>` : ''}
+
+    <div class="card">
+      <div class="card-h"><div class="card-t">📄 Dokumenti / dokazi</div></div>
+      <div class="empty" style="padding:14px">Za ovaj manualni nalaz nisu priloženi PDF dokazi. Pokreni "Obogati podatke" za prikupljanje izvora.</div>
+    </div>
+
+    ${customFindingEnrichBlock(c.id, c.osoba || c.naslov)}
+  `;
+  openPanel('Forenzika · '+c.naslov, html);
+}
+
+function customFindingEnrichBlock(customId, queryName){
+  const safeId = String(customId).replace(/[^a-z0-9_-]/gi,'_');
+  return `
+    <div class="card" id="fenrich-card-${safeId}">
+      <div class="card-h">
+        <div class="card-t">✨ Obogati podatke (Wikipedia)</div>
+        <button class="btn primary" onclick="enrichCustomFinding('${safeId}', '${esc(queryName).replace(/'/g,'\\\\&#39;')}')">▶ Pokreni</button>
+      </div>
+      <div id="fenrich-out-${safeId}">
+        <div class="empty" style="padding:14px">Lookup Wikipedia HR za "${esc(queryName)}" i prikaži dopune.</div>
+      </div>
+    </div>
+  `;
+}
+
+async function enrichCustomFinding(safeId, queryName){
+  const out = document.getElementById('fenrich-out-'+safeId);
+  if(out) out.innerHTML = '<div class="loading">Lookup Wikipedia HR…</div>';
+  // Custom findings aren't in DB — call wiki lookup via a synthesised forensic_findings.id of -1 won't work.
+  // Instead, use the existing /v2/enrich/sportas pattern to query Wikipedia by name.
+  // We re-use the wiki summary via a mini fetch helper.
+  try{
+    const wiki = await fetch('https://hr.wikipedia.org/api/rest_v1/page/summary/'+encodeURIComponent(queryName.replace(/ /g,'_')))
+      .then(r => r.ok ? r.json() : null).catch(()=>null);
+    if(!wiki || wiki.type==='disambiguation' || !wiki.extract){
+      if(out) out.innerHTML = '<div class="empty" style="padding:14px">Nije pronađen Wikipedia HR članak za <b>'+esc(queryName)+'</b>.</div>';
+      return;
+    }
+    const w = {title: wiki.title, extract: wiki.extract, description: wiki.description, url: (wiki.content_urls||{}).desktop?.page};
+    if(out) out.innerHTML = `
+      <div style="margin-bottom:8px"><span class="tag gr">🟢 Wikipedia HR</span></div>
+      <div style="padding:10px;background:var(--bg3);border-left:3px solid var(--pgz-gold);border-radius:5px">
+        <div style="font-weight:700;color:var(--t0);font-size:14px;margin-bottom:6px">${esc(w.title||'')}</div>
+        ${w.description?'<div style="font-size:11px;color:var(--t2);margin-bottom:6px;font-style:italic">'+esc(w.description)+'</div>':''}
+        ${w.extract?'<div style="font-size:12px;line-height:1.6;color:var(--t1)">'+esc(w.extract)+'</div>':''}
+        ${w.url?'<div style="margin-top:8px"><a href="'+esc(w.url)+'" target="_blank">↗ Otvori članak</a></div>':''}
+      </div>`;
+  }catch(e){
+    if(out) out.innerHTML = '<div class="empty" style="color:var(--red);padding:14px">Greška: '+esc(String(e))+'</div>';
+  }
+}
+
+function renderAlertPanel(a){
+  const sevColor = a.razina==='CRITICAL'?'rd':(a.razina==='HIGH'?'am':'b');
+  const html = `
+    <div class="card-h" style="border:0;padding:0;margin-bottom:14px">
+      <div>
+        <div style="font-size:18px;font-weight:800;color:var(--t0)">[${esc(a.tip)}]</div>
+        <div style="font-size:12px;color:var(--t2);margin-top:4px">
+          <span class="tag ${sevColor}">${esc(a.razina)}</span>
+          ${a.datum?'<span class="tag">📅 '+fmtDate(a.datum)+'</span>':''}
+        </div>
+      </div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">📖 Opis alarma</div></div>
+      <div style="font-size:13px;line-height:1.6;color:var(--t1)">${esc(a.poruka||'')}</div>
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">🔗 Povezani entiteti</div></div>
+      <table>
+        <tbody>
+          ${a.klub_id ? '<tr onclick="closePanel();setTimeout(()=>openKlub('+a.klub_id+'),250)"><td><span class="tag b">Klub</span></td><td><b>Klub #'+a.klub_id+'</b></td><td>Klikni za detalje →</td></tr>' : ''}
+          ${a.clan_id ? '<tr onclick="closePanel();setTimeout(()=>openSportas('+a.clan_id+'),250)"><td><span class="tag b">Sportaš</span></td><td><b>Sportaš #'+a.clan_id+'</b></td><td>Klikni za profil →</td></tr>' : ''}
+        </tbody>
+      </table>
+      ${(!a.klub_id && !a.clan_id) ? '<div class="empty" style="padding:14px">Nema povezanih entiteta u alarmu</div>' : ''}
+    </div>
+    <div class="card">
+      <div class="card-h"><div class="card-t">📅 Metapodaci</div></div>
+      <div class="kv">
+        <div class="k">ID</div><div class="v">${esc(a.id)}</div>
+        <div class="k">Tip</div><div class="v">${esc(a.tip)}</div>
+        <div class="k">Razina</div><div class="v">${esc(a.razina)}</div>
+        <div class="k">Datum događaja</div><div class="v">${a.datum?fmtDate(a.datum):'—'}</div>
+        <div class="k">Iznos</div><div class="v">${a.iznos!=null?fmtEurFull(a.iznos):'—'}</div>
+        <div class="k">Riješeno</div><div class="v">${a.rijeseno?'<span class="tag gr">DA</span>':'<span class="tag rd">NE</span>'}</div>
+        <div class="k">Kreirano</div><div class="v">${a.created_at?fmtDate(a.created_at):'—'}</div>
+      </div>
+    </div>
+    ${forensicEnrichBlock(a.id)}
+  `;
+  openPanel('Alarm #'+a.id, html);
+}
+
+function forensicEnrichBlock(findingId){
+  return `
+    <div class="card" id="fenrich-card-${findingId}">
+      <div class="card-h">
+        <div class="card-t">✨ Obogati podatke (Wikipedia)</div>
+        <button class="btn primary" onclick="enrichForensicFinding(${findingId})">▶ Pokreni</button>
+      </div>
+      <div id="fenrich-out-${findingId}">
+        <div class="empty" style="padding:14px">Ekstrakcija imena iz nalaza, lookup na Wikipedia HR i sprema u DB. Drugi puta će biti vidljivo bez ponovnog skidanja.</div>
+      </div>
+    </div>
+  `;
+}
+
+async function enrichForensicFinding(findingId){
+  const out = document.getElementById('fenrich-out-'+findingId);
+  if(out) out.innerHTML = '<div class="loading">Ekstraktiram ime, lookup Wikipedia HR…</div>';
+  const r = await apiPost('/v2/forensic/findings/'+findingId+'/enrich');
+  if(!r){ if(out) out.innerHTML = '<div class="empty" style="color:var(--red)">Greška</div>'; return; }
+  const w = r.wiki || null;
+  const html = `
+    <div style="margin-bottom:8px">
+      <span class="tag gr">🟢 Persisted</span>
+      ${r.used_query?'<span class="tag b">query: '+esc(r.used_query)+'</span>':''}
+    </div>
+    ${w ? `
+      <div style="padding:10px;background:var(--bg3);border-left:3px solid var(--pgz-gold);border-radius:5px">
+        <div style="font-size:11px;color:var(--t4);text-transform:uppercase;letter-spacing:.5px;margin-bottom:4px">📚 Wikipedia HR</div>
+        <div style="font-weight:700;color:var(--t0);font-size:14px;margin-bottom:6px">${esc(w.title||'')}</div>
+        ${w.description?'<div style="font-size:11px;color:var(--t2);margin-bottom:6px;font-style:italic">'+esc(w.description)+'</div>':''}
+        ${w.extract?'<div style="font-size:12px;line-height:1.6;color:var(--t1)">'+esc(w.extract)+'</div>':''}
+        ${w.url?'<div style="margin-top:8px"><a href="'+esc(w.url)+'" target="_blank">↗ Otvori članak</a></div>':''}
+      </div>
+    ` : '<div class="empty" style="padding:14px">Nije pronađen Wikipedia HR članak za ekstrahirana imena.<br>Pokušaji: '+esc(JSON.stringify(r.queried||[]))+'</div>'}
+  `;
+  if(out) out.innerHTML = html;
+}
+
+async function runForensicScan(){
+  const inputEl = document.getElementById('fz-scan-name');
+  const outEl = document.getElementById('fz-scan-out');
+  if(!inputEl || !outEl) return;
+  const name = (inputEl.value||'').trim();
+  if(name.length < 3){ outEl.innerHTML = '<div class="empty">Unesi barem 3 znaka</div>'; return; }
+  outEl.innerHTML = '<div class="loading">Skeniram civic.persons… tražim povezane entitete… provjeravam forensic_findings…</div>';
+  const r = await apiPost('/v2/forensic/scan', {name: name});
+  if(!r){ outEl.innerHTML = '<div class="empty" style="color:var(--red)">Greška pri pokretanju analize</div>'; return; }
+  const ovr = r.overall_risk_score || 0;
+  const ovrCls = ovr>=70?'r':(ovr>=40?'':'g');
+  outEl.innerHTML = `
+    <div class="kpi-grid" style="grid-template-columns:repeat(4,1fr);margin-bottom:14px">
+      <div class="kpi ${ovrCls}"><div class="kpi-l">Overall risk</div><div class="kpi-v">${ovr}<span style="font-size:13px;color:var(--t2)">/100</span></div></div>
+      <div class="kpi b"><div class="kpi-l">Pronađeno osoba</div><div class="kpi-v">${r.matched_persons}</div></div>
+      <div class="kpi"><div class="kpi-l">Veza</div><div class="kpi-v">${r.total_links}</div></div>
+      <div class="kpi r"><div class="kpi-l">Findings</div><div class="kpi-v">${r.total_findings}<span style="font-size:13px;color:var(--t2)"> (${r.critical_findings} crit)</span></div></div>
+    </div>
+    ${(r.persons||[]).length ? `
+      <div style="display:flex;flex-direction:column;gap:10px">
+        ${r.persons.map(p => {
+          const cls = p.risk_score>=70?'crit':(p.risk_score>=40?'crit':'');
+          return `
+          <div class="alert-card ${cls}">
+            <div style="display:flex;justify-content:space-between;align-items:flex-start;gap:12px">
+              <div style="flex:1;min-width:0">
+                <div class="at">${esc(p.name)} <span class="tag b">id ${p.id}</span> ${p.oib?'<a class="tag" onclick="openOIB(&quot;'+esc(p.oib)+'&quot;)" style="cursor:pointer">OIB '+esc(p.oib)+'</a>':''}</div>
+                <div class="ad">${p.function?esc(p.function):''}${p.party?' · '+esc(p.party):''}${p.county?' · '+esc(p.county):''}</div>
+                <div style="margin-top:6px;font-size:11px;color:var(--t2)">
+                  🔗 ${(p.links||[]).length} povezanih entiteta
+                  · ⚠ ${(p.findings||[]).length} forenzičkih nalaza
+                  ${p.trust_tier!=null?' · trust tier '+p.trust_tier:''}
+                </div>
+                ${(p.links||[]).length ? '<div style="margin-top:8px;font-size:11px"><b style="color:var(--t2)">Veze:</b> '+
+                  p.links.slice(0,8).map(l => '<span class="tag b" style="margin-right:3px">'+esc(l.entity_name||'#'+l.entity_id)+(l.roles?' · '+esc(l.roles):'')+'</span>').join('')+
+                  ((p.links||[]).length>8?' <span class="tag">+'+((p.links||[]).length-8)+' više</span>':'')+
+                  '</div>' : ''}
+                ${(p.findings||[]).length ? '<div style="margin-top:8px;font-size:11px"><b style="color:var(--t2)">Nalazi:</b><br>'+
+                  p.findings.slice(0,5).map(f => '<div style="margin-top:3px"><span class="tag '+(f.severity==='CRITICAL'?'rd':f.severity==='HIGH'?'am':'b')+'">'+esc(f.severity)+'</span> '+esc(f.title||f.finding_type)+'</div>').join('')+
+                  '</div>' : ''}
+              </div>
+              <div style="text-align:center;flex-shrink:0">
+                <div style="font-size:24px;font-weight:800;color:${p.risk_score>=70?'var(--red)':p.risk_score>=40?'var(--amber)':'var(--green)'};font-family:var(--mono)">${p.risk_score}</div>
+                <div style="font-size:10px;color:var(--t4);text-transform:uppercase">RISK</div>
+              </div>
+            </div>
+          </div>`;
+        }).join('')}
+      </div>
+    ` : '<div class="empty">Nema pronađenih osoba s tim imenom</div>'}
+  `;
+}
+
+//=========== INIT ===========
+function init(){
+  restoreSidebar();
+  buildNav();
+  navTo('dashboard');
+}
+window.addEventListener('DOMContentLoaded', init);
+</script>
+</body>
+</html>
diff --git a/routers/enrich_router.py b/routers/enrich_router.py
index ccc0e7c..64152dc 100644
--- a/routers/enrich_router.py
+++ b/routers/enrich_router.py
@@ -381,11 +381,27 @@ def _sport_fed(sport: Optional[str]) -> Optional[dict]:
     return feds.get(norm)
 
 
-def _research_links(naziv, kind, grad=None, sport: Optional[str] = None):
+def _research_links(naziv, kind, grad=None, sport: Optional[str] = None, row: Optional[dict] = None):
     base_q = (naziv or '').strip()
     q = (base_q + ' ' + grad) if grad else base_q
     qenc = urllib.parse.quote(q)
-    out = [
+    out = []
+    # Prefer DIRECT profile/source link if entity already has one (e.g. HNS Semafor)
+    if row:
+        direct = row.get('profile_url') or row.get('source_url') or row.get('scrape_url') or row.get('web') or row.get('web_stranica')
+        if direct and isinstance(direct, str) and direct.startswith(('http://','https://')):
+            try:
+                host = urllib.parse.urlparse(direct).hostname or ''
+            except Exception:
+                host = ''
+            label = 'Vanjski profil'
+            icon = '🔗'
+            if 'hns' in host: label, icon = 'HNS profil', '⚽'
+            elif 'transfermarkt' in host: label, icon = 'Transfermarkt', '⚽'
+            elif 'wikipedia' in host: label, icon = 'Wikipedia', '📚'
+            elif host.endswith('.hr') or host.endswith('.com'): label, icon = 'Službena stranica', '🌐'
+            out.append({'label': label, 'icon': icon, 'url': direct, 'is_direct': True})
+    out += [
         {'label': 'Google',       'icon': '🔍', 'url': 'https://www.google.com/search?q=' + qenc},
         {'label': 'Wikipedia HR', 'icon': '📚', 'url': 'https://hr.wikipedia.org/w/index.php?search=' + qenc},
         {'label': 'sport-pgz.hr', 'icon': '🏅', 'url': 'https://sport-pgz.hr/?s=' + qenc},
@@ -445,11 +461,128 @@ def _is_relevant(source: dict, tokens: list[str]) -> bool:
     return any(t in blob for t in tokens)
 
 
+
+# ─── Klub domain guesser (HR slug → candidate URLs → HEAD probe) ────────
+import re as _re_klg
+
+def _slugify_klub(naziv: str) -> str:
+    if not naziv: return ""
+    s = naziv.lower()
+    repl = (("č","c"),("ć","c"),("ž","z"),("š","s"),("đ","d"),
+            ('"',''),("'",""),("(",""),(")",""),(",",""),(".",""),
+            ("/",""),("\\",""))
+    for a,b in repl: s = s.replace(a,b)
+    s = _re_klg.sub(r"[^a-z0-9]+", "-", s).strip("-")
+    return s
+
+def _klub_domain_candidates(naziv: str) -> list[str]:
+    """Generate ranked candidate URLs from club name."""
+    if not naziv: return []
+    s = _slugify_klub(naziv)
+    # Strip common prefixes for cleaner domains
+    base = s
+    for pref in ("hnk-","nk-","rk-","kk-","ok-","bk-","gk-","tk-","ak-","hbk-"):
+        if base.startswith(pref):
+            base = base[len(pref):]; break
+    # also try short prefix-ed variants
+    short = base.split("-")[0] if base else ""
+    candidates = []
+    sports_prefixes = ["nk-","hnk-","rk-","kk-","bk-","ok-","ak-","tk-"]
+    # full slug with original prefix
+    for tld in (".hr",".com",".eu",".info"):
+        candidates.append(f"https://{s}{tld}")
+        candidates.append(f"https://www.{s}{tld}")
+    # base-only
+    for tld in (".hr",".com"):
+        candidates.append(f"https://{base}{tld}")
+        candidates.append(f"https://www.{base}{tld}")
+    # try sport prefixes if name doesn't already have one
+    if not any(s.startswith(p) for p in sports_prefixes):
+        for sp in sports_prefixes[:5]:
+            for tld in (".hr",".com"):
+                candidates.append(f"https://{sp}{base}{tld}")
+    # dedup, preserve order
+    seen, out = set(), []
+    for c in candidates:
+        if c not in seen:
+            seen.add(c); out.append(c)
+    return out[:20]
+
+def _probe_klub_url(url: str, naziv_tokens: list, timeout: int = 5) -> Optional[dict]:
+    """HEAD/GET probe; return doc with raw_text if URL is alive AND mentions club tokens."""
+    try:
+        import requests
+        r = requests.get(url, timeout=timeout, allow_redirects=True,
+                         headers={"User-Agent":"Mozilla/5.0 RinetEnrichBot/1.0"})
+        if r.status_code != 200: return None
+        if len(r.text) < 200: return None
+        text = r.text.lower()
+        # Must mention at least one distinctive token from name
+        toks = [t.lower() for t in (naziv_tokens or []) if len(t) > 2]
+        if toks and not any(t in text for t in toks):
+            return None
+        return {"source": "domain_probe", "url": r.url, "raw_text": r.text[:50000]}
+    except Exception:
+        return None
+
+def _guess_klub_domains(naziv: str, tokens: list) -> Optional[dict]:
+    """Parallel probe candidates (5 workers, 4s timeout each); first hit wins."""
+    from concurrent.futures import ThreadPoolExecutor, as_completed
+    candidates = _klub_domain_candidates(naziv)
+    if not candidates: return None
+    with ThreadPoolExecutor(max_workers=8) as ex:
+        futs = {ex.submit(_probe_klub_url, url, tokens, 4): url for url in candidates[:16]}
+        for fut in as_completed(futs, timeout=10):
+            try:
+                doc = fut.result()
+                if doc:
+                    # Cancel remaining (best effort)
+                    for f in futs:
+                        if not f.done(): f.cancel()
+                    return doc
+            except Exception:
+                continue
+    return None
+
+def _scrape_klub_subpages(base_url: str, tokens: list) -> str:
+    """Fetch /kontakt /uprava /o-nama /o-klubu and concat texts."""
+    if not base_url: return ""
+    import requests
+    base = base_url.rstrip("/")
+    paths = ["/kontakt","/uprava","/o-nama","/o-klubu","/predsjednik","/klub","/contact","/about"]
+    accum = []
+    for path in paths:
+        try:
+            r = requests.get(base + path, timeout=4, allow_redirects=True,
+                             headers={"User-Agent":"Mozilla/5.0 RinetEnrichBot/1.0"})
+            if r.status_code == 200 and len(r.text) > 200:
+                accum.append(r.text[:30000])
+        except Exception:
+            pass
+    return "\n\n".join(accum)
+
+
 def _propose_for_klub(row: dict) -> dict:
     naziv = row.get('naziv') or ''
-    primary = row.get('web') or row.get('web_stranica') or row.get('source_url') or row.get('scrape_url')
+    # Only consider HTTP(S) URLs as valid primary sources — skip placeholder strings like 'godisnjak_2025'
+    raw_primary = row.get('web') or row.get('web_stranica') or row.get('source_url') or row.get('scrape_url')
+    primary = raw_primary if (raw_primary and isinstance(raw_primary, str) and raw_primary.startswith(('http://','https://'))) else None
     sources, evidence = [], []
+    tokens_pre = _name_tokens(naziv)
     pdoc = _fetch_primary_site(primary) if primary else None
+    if not pdoc:
+        # No valid web in DB — try to guess domain from club name
+        pdoc = _guess_klub_domains(naziv, tokens_pre)
+        if pdoc:
+            # Also fetch subpages for richer evidence
+            sub = _scrape_klub_subpages(pdoc.get('url',''), tokens_pre)
+            if sub:
+                pdoc['raw_text'] = (pdoc.get('raw_text','') + '\n\n' + sub)[:120000]
+    elif pdoc:
+        # Have primary site — also fetch its subpages
+        sub = _scrape_klub_subpages(pdoc.get('url') or primary, tokens_pre)
+        if sub:
+            pdoc['raw_text'] = (pdoc.get('raw_text','') + '\n\n' + sub)[:120000]
     if pdoc: sources.append(pdoc); evidence.append(pdoc.get('raw_text') or pdoc.get('extract') or '')
     wiki = _wiki_summary(naziv)
     if wiki: sources.append(wiki); evidence.append(wiki.get('extract') or '')
@@ -1121,7 +1254,7 @@ def enrich_preview(kind: str = _FPath(..., regex='^(klub|savez|sportas)$'), eid:
         'coverage': coverage, 'filled_fields': filled, 'total_fields': len(keys),
         'missing_fields': missing,
         'live_snippet': _fetch_title(primary) if primary else None,
-        'research_links': _research_links(naziv, kind, grad, sport=row.get('sport')),
+        'research_links': _research_links(naziv, kind, grad, sport=row.get('sport'), row=row),
         'sport': row.get('sport'),
         'sport_federation': (lambda f: {
             'national': (f.get('national') or {}).get('name') if f else None,
diff --git a/static/app.html b/static/app.html
index c94f455..9f7ae72 100644
--- a/static/app.html
+++ b/static/app.html
@@ -265,7 +265,7 @@ table tbody tr:hover{background:var(--bg3)}
 <div class="app">
   <aside class="sb" id="sb">
     <div class="sb-h">
-      <div class="logo">PGŽ <span class="g">SPORT</span></div>
+      <a href="/" class="logo" style="text-decoration:none;color:inherit;cursor:pointer" title="Početna"><span style="font-weight:800;letter-spacing:.5px">PGŽ</span> <span class="g">SPORT</span></a>
       <div class="sub" id="role-sub">Operativna aplikacija</div>
       <div class="sb-toggle" id="sb-toggle" onclick="toggleSidebar()" title="Skupi/raširi sidebar">≡</div>
     </div>
@@ -449,7 +449,7 @@ function applyMeToHeader(){
   $('#user-role-label')?.replaceChildren(document.createTextNode(roleLabel));
   // Avatar topbar
   if(me.avatar_url){
-    $('#user-av').innerHTML = `<img src="${esc(me.avatar_url)}" alt="">`;
+    $('#user-av').innerHTML = `<img src="${esc(me.avatar_url)}${me.avatar_url.includes('?')?'&':'?'}t=${Date.now()}" alt="">`;
   } else if(me.google_picture){
     $('#user-av').innerHTML = `<img src="${esc(me.google_picture)}" alt="">`;
   } else {
@@ -459,7 +459,7 @@ function applyMeToHeader(){
   if($('#sf-name')) $('#sf-name').textContent = name;
   if($('#sf-role')) $('#sf-role').textContent = roleLabel;
   if($('#sf-av')){
-    if(me.avatar_url) $('#sf-av').innerHTML = `<img src="${esc(me.avatar_url)}" alt="" style="width:100%;height:100%;object-fit:cover;border-radius:50%">`;
+    if(me.avatar_url) $('#sf-av').innerHTML = `<img src="${esc(me.avatar_url)}${me.avatar_url.includes('?')?'&':'?'}t=${Date.now()}" alt="" style="width:100%;height:100%;object-fit:cover;border-radius:50%">`;
     else if(me.google_picture) $('#sf-av').innerHTML = `<img src="${esc(me.google_picture)}" alt="" style="width:100%;height:100%;object-fit:cover;border-radius:50%">`;
     else $('#sf-av').textContent = initials(name);
   }
@@ -856,6 +856,16 @@ async function onAvatarPick(input){
   input.value = '';
   if(r && r.avatar_url){
     if(_state.me) _state.me.avatar_url = r.avatar_url;
+    // Update localStorage so other pages (sport2.html footer, sidebar) see new avatar
+    try{
+      const stored = localStorage.getItem('pgz_user') || sessionStorage.getItem('pgz_user');
+      if(stored){
+        const u = JSON.parse(stored);
+        u.avatar_url = r.avatar_url;
+        if(localStorage.getItem('pgz_user')) localStorage.setItem('pgz_user', JSON.stringify(u));
+        else sessionStorage.setItem('pgz_user', JSON.stringify(u));
+      }
+    }catch(e){console.warn('avatar storage update failed', e);}
     applyMeToHeader();
     loadSection(); // re-render profile
   } else {
diff --git a/static/sport2.html b/static/sport2.html
index abcceb7..e9ca026 100644
--- a/static/sport2.html
+++ b/static/sport2.html
@@ -232,7 +232,7 @@ a.tag:hover,.tag[onclick]:hover{transform:translateY(-1px);filter:brightness(1.1
 <div class="app">
   <aside class="sb" id="sb">
     <div class="sb-h">
-      <div class="logo">PGŽ <span class="g">SPORT</span></div>
+      <a href="/" class="logo" style="text-decoration:none;color:inherit;cursor:pointer" title="Početna"><span style="font-weight:800;letter-spacing:.5px">PGŽ</span> <span class="g">SPORT</span></a>
       <div class="sub">Primorsko-goranska županija</div>
       <div class="sb-toggle" id="sb-toggle" onclick="toggleSidebar()" title="Skupi/raširi sidebar">≡</div>
     </div>
@@ -1349,6 +1349,12 @@ async function openKlub(id){
         <div class="k">Osnovan</div><div class="v">${txt(k.godina_osnutka)}</div>
         <div class="k">Nositelj kvalitete</div><div class="v">${k.nositelj_kvalitete?'<span class="tag gd">DA</span>':'<span class="tag">NE</span>'}</div>
       </div>
+      <div style="margin-top:14px;display:flex;gap:8px;flex-wrap:wrap">
+        <a class="btn primary" onclick="switchKlubTab(document.querySelector('.tab[onclick*=k-clan]'),'k-clan')" style="cursor:pointer;display:inline-flex;align-items:center;gap:6px">
+          👥 Vidi sportaše ovog kluba (${clanovi.length})
+        </a>
+        ${(k.web||k.web_stranica) ? '<a class="btn" href="'+esc(k.web||k.web_stranica)+'" target="_blank" style="display:inline-flex;align-items:center;gap:6px">🌐 Službena stranica</a>' : ''}
+      </div>
       ${k.napomena ? '<div class="card" style="margin-top:14px"><div class="card-t" style="margin-bottom:6px">Napomena</div><div style="font-size:12px;color:var(--t1);line-height:1.5">'+esc(k.napomena)+'</div></div>' : ''}
     </div>
 
