            <h2 style="margin-top:0;">Přání a Vzkazy do studia</h2>
            <div class="glass" style="padding: 20px; flex: 1; overflow-y: auto;">
                <table><thead><tr><th>Čas</th><th>Od koho</th><th>Písnička / Vzkaz</th><th>Akce</th></tr></thead><tbody id="tbody-studio"></tbody></table>
            </div>
            <script>
                async function loadStudioReqs() {
                    const res = await fetch('/admin/api/requests'); const json = await res.json();
                    const reqs = json.data || []; reqs.sort((a,b) => new Date(b.created_at) - new Date(a.created_at));
                    document.getElementById('tbody-studio').innerHTML = reqs.map(r => `<tr><td style="font-weight:bold; color:var(--accent);">${r.created_at.split(' ')[1].substring(0,5)}</td><td>${r.name}</td><td><strong>${r.song}</strong><br><span style="font-size:0.9em; color:#ccc;">${r.message || ''}</span></td><td><button class="action-btn btn-delete" onclick="delReq('${r.id}')">Smazat</button> <button class="action-btn" style="background:#f2c94c; color:#000;" onclick="banIp('${r.ip || ''}')">BAN IP</button></td></tr>`).join('');
                }
                async function delReq(id) { await fetch('/admin/api/requests', { method: 'DELETE', headers: {'Content-Type':'application/json'}, body: JSON.stringify({id}) }); loadStudioReqs(); }
                async function banIp(ip) { if(!ip) return alert('Neznámá IP.'); customConfirm('Trvale zablokovat tuto IP adresu pro zasílání přání?', async () => { await fetch('/admin/api/ban-ip', { method: 'POST', headers: {'Content-Type':'application/json'}, body: JSON.stringify({ip}) }); loadStudioReqs(); }); }
                loadStudioReqs(); setInterval(loadStudioReqs, 10000);
            </script>