Merge remote-tracking branch 'origin/master'

Added dismissed card styling and reorganized error/empty state rendering in moderation. Added fixed width for catalog action buttons.

app/assets/css/style.css

@@ -376,3 +376,11 @@ html body .navbar .navbar-collapsable .navbar-nav li.nav-item a.nav-link[data-fo
         max-width: 14rem;
     }
 }
+
+.alert-danger {
+    background-position-y: center;
+}
+
+.card::after {
+    margin-top: 0!important;
+}

app/components/ConfirmModal.vue

@@ -0,0 +1,60 @@
+<script setup lang="ts">
+const props = withDefaults(defineProps<{
+  open: boolean
+  title: string
+  message: string
+  confirmLabel?: string
+  cancelLabel?: string
+  confirmClass?: string
+  pending?: boolean
+}>(), {
+  confirmLabel: 'Conferma',
+  cancelLabel: 'Annulla',
+  confirmClass: 'btn-danger',
+  pending: false,
+})
+
+const emit = defineEmits<{
+  cancel: []
+  confirm: []
+}>()
+
+const handleBackdropClick = (event: MouseEvent) => {
+  if (event.target === event.currentTarget && !props.pending) {
+    emit('cancel')
+  }
+}
+</script>
+
+<template>
+  <div v-if="open">
+    <div class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
+    <div
+      class="modal fade show d-block"
+      tabindex="-1"
+      style="z-index: 1050;"
+      @click="handleBackdropClick"
+    >
+      <div class="modal-dialog modal-dialog-centered">
+        <div class="modal-content shadow">
+          <div class="modal-header">
+            <h5 class="modal-title">{{ title }}</h5>
+            <button type="button" class="btn-close" :disabled="pending" @click="emit('cancel')"></button>
+          </div>
+          <div class="modal-body">
+            <p class="mb-0">{{ message }}</p>
+          </div>
+          <div class="modal-footer">
+            <button type="button" class="btn btn-outline-secondary" :disabled="pending" @click="emit('cancel')">
+              {{ cancelLabel }}
+            </button>
+            <button type="button" class="btn" :class="confirmClass" :disabled="pending" @click="emit('confirm')">
+              <span v-if="pending" class="spinner-border spinner-border-sm me-2"></span>
+              {{ confirmLabel }}
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>

app/components/Header.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, computed, watch } from 'vue'
+import { ref, computed, watch, onUnmounted } from 'vue'
 import { useRoute } from 'vue-router'
 import BIIcon from "~/components/BIIcon.vue";
 
@@ -10,6 +10,22 @@ watch(() => route.path, () => {
   isMobileMenuOpen.value = false
 })
 
+watch(isMobileMenuOpen, (isOpen) => {
+  if (typeof document !== 'undefined') {
+    if (isOpen) {
+      document.body.style.overflow = 'hidden'
+    } else {
+      document.body.style.overflow = ''
+    }
+  }
+})
+
+onUnmounted(() => {
+  if (typeof document !== 'undefined') {
+    document.body.style.overflow = ''
+  }
+})
+
 const navLinks = [
   { name: 'Home', path: '/' },
   { name: 'Fai una segnalazione', path: '/reports/new' },
@@ -18,7 +34,7 @@ const navLinks = [
 ]
 
 const { isAuthenticated, user, logout } = useAuth()
-const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ? 'Pannello' : 'Dashboard')
+const panelLabel = computed(() => isAdmin(user.value?.role) ? 'Pannello' : 'Dashboard')
 </script>
 
 <template>
@@ -28,8 +44,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
         <div class="row">
           <div class="col-12">
             <div class="it-header-slim-wrapper-content">
-              <a class="d-none d-lg-block navbar-brand"
+              <a class="d-none d-lg-block navbar-brand" href="https://www.cittametropolitana.ba.it/">
-                 href="https://www.cittametropolitana.ba.it/">
                 Città metropolitana di Bari
               </a>
               <div class="nav-mobile">
@@ -48,7 +63,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                   <NuxtLink class="btn btn-primary btn-icon btn-full" to="/dashboard"
                             data-element="personal-area-dashboard" data-focus-mouse="false">
                     <span class="rounded-icon" aria-hidden="true">
-                      <BIIcon name="it-list" color="black" />
+                      <BIIcon name="it-list" color="black"/>
                     </span>
                     <span class="d-none d-lg-block">{{ panelLabel }}</span>
                   </NuxtLink>
@@ -56,7 +71,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                   <NuxtLink class="btn btn-primary btn-icon btn-full" to="/profile"
                             data-element="personal-area-dashboard" data-focus-mouse="false">
                     <span class="rounded-icon" aria-hidden="true">
-                      <BIIcon name="it-user" color="black" />
+                      <BIIcon name="it-user" color="black"/>
                     </span>
                     <span class="d-none d-lg-block">{{ user?.first_name }}</span>
                   </NuxtLink>
@@ -64,7 +79,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                   <button class="btn btn-primary btn-icon btn-full border-0" @click="logout"
                           data-element="personal-area-logout" data-focus-mouse="false">
                     <span class="rounded-icon" aria-hidden="true">
-                      <BIIcon name="it-logout" color="black" />
+                      <BIIcon name="it-logout" color="black"/>
                     </span>
                     <span class="d-none d-lg-block">Esci</span>
                   </button>
@@ -73,12 +88,11 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                 <NuxtLink v-else class="btn btn-primary btn-icon btn-full" to="/auth/login"
                           data-element="personal-area-login" data-focus-mouse="false">
                   <span class="rounded-icon" aria-hidden="true">
-                    <BIIcon name="it-user" color="black" />
+                    <BIIcon name="it-user" color="black"/>
                   </span>
                   <span class="d-none d-lg-block">Login</span>
                 </NuxtLink>
               </div>
-
             </div>
           </div>
         </div>
@@ -93,7 +107,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
               <div class="it-header-center-content-wrapper">
                 <div class="it-brand-wrapper">
                   <NuxtLink to="/">
-                  <img src="/icon.svg" alt="Logo Visione" style="width: 48px; height: 48px; margin-right: 16px;" />
+                    <img src="/icon.svg" alt="Logo Visione" class="logo"/>
                     <div class="it-brand-text">
                       <div class="it-brand-title">Visione</div>
                       <div class="it-brand-tagline d-none d-md-block">Un occhio per la sicurezza del cittadino.</div>
@@ -111,6 +125,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
           <div class="row">
             <div class="col-12">
               <nav class="navbar navbar-expand-lg has-megamenu" aria-label="Navigazione principale">
+
                 <button
                     class="custom-navbar-toggler"
                     type="button"
@@ -124,19 +139,16 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                     class="overlay"
                     :class="{ 'show': isMobileMenuOpen }"
                     @click="isMobileMenuOpen = false"
-                    style="display: block;"
-                    v-show="isMobileMenuOpen"
                 ></div>
 
                 <div
                     class="navbar-collapsable"
                     :class="{ 'expanded': isMobileMenuOpen }"
-                    style="display: block;"
                 >
                   <div class="close-div">
                     <button class="btn close-menu" type="button" @click="isMobileMenuOpen = false">
                       <span class="visually-hidden">Nascondi la navigazione</span>
-                      <BIIcon name="it-close-big"/>
+                      <BIIcon name="it-close-big" color="black"/>
                     </button>
                   </div>
 
@@ -184,14 +196,102 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
   background-color: rgb(0, 76.5, 153);
 }
 
-.overlay {
+@media (max-width: 991.98px) {
-  transition: opacity 0.3s ease;
+  .overlay {
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100vw;
+    height: 100vh;
+    background-color: rgba(0, 0, 0, 0.6) !important;
+    z-index: 1040;
     opacity: 0;
-  pointer-events: none;
+    visibility: hidden;
+    transition: opacity 0.3s ease, visibility 0.3s ease;
+  }
+
+  .overlay.show {
+    opacity: 1;
+    visibility: visible;
+  }
+
+  .navbar-collapsable {
+    position: fixed !important;
+    top: 0;
+    left: 0;
+    width: 320px;
+    max-width: 85vw;
+    height: 100vh;
+    background-color: #ffffff !important;
+    z-index: 1050 !important;
+    transform: translateX(-100%);
+    transition: transform 0.3s ease-in-out;
+    display: flex;
+    flex-direction: column;
+    box-shadow: 4px 0 15px rgba(0, 0, 0, 0.2);
+    overflow-y: auto;
+  }
+
+  .navbar-collapsable.expanded {
+    transform: translateX(0);
+  }
+
+  .close-div {
+    display: flex;
+    justify-content: flex-end;
+    padding: 1rem 1.5rem;
+  }
+
+  .close-menu {
+    background: transparent;
+    border: none;
+    padding: 0;
+  }
+
+  .close-menu :deep(svg) {
+    width: 32px;
+    height: 32px;
+  }
+
+  .menu-wrapper {
+    padding: 1rem 0;
+  }
+
+  .navbar-nav {
+    display: flex;
+    flex-direction: column;
+    padding: 0;
+    margin: 0;
+    list-style: none;
+  }
+
+  .nav-item {
+    width: 100%;
+  }
+
+  .nav-link {
+    display: block;
+    padding: 1rem 1.5rem;
+    color: #1a1a1a !important;
+    font-size: 1.1rem;
+    font-weight: 600;
+    text-decoration: none;
+    border-bottom: 1px solid #f0f0f0;
+  }
+
+  .nav-link.active {
+    color: #004c99 !important;
+    background-color: #f8f9fa;
+  }
 }
 
-.overlay.show {
+.btn-full {
-  opacity: 1;
+  padding: 14px;
-  pointer-events: auto;
+}
+
+.logo {
+  width: 48px;
+  height: 48px;
+  margin-inline: 16px;
 }
 </style>

app/components/MessageComposer.vue

@@ -44,6 +44,7 @@ const removeFile = (idx: number) => {
 <template>
   <div class="message-composer mt-3">
     <form @submit.prevent="handleSubmit">
+
       <div v-if="files.length > 0" class="message-files mb-3">
         <div v-for="(file, idx) in files" :key="idx" class="message-file-chip">
           <BIIcon name="it-clip" size="xs" />
@@ -52,7 +53,7 @@ const removeFile = (idx: number) => {
         </div>
       </div>
 
-      <div class="composer-shell">
+      <div class="d-flex align-items-stretch gap-2">
         <input
             ref="fileInputRef"
             type="file"
@@ -64,7 +65,7 @@ const removeFile = (idx: number) => {
 
         <button
             type="button"
-          class="btn btn-outline-primary btn-icon composer-attach"
+            class="btn btn-outline-primary btn-square flex-shrink-0"
             title="Allega file"
             @click="fileInputRef?.click()"
             :disabled="isSubmitting || files.length >= 5"
@@ -74,21 +75,20 @@ const removeFile = (idx: number) => {
 
         <textarea
             v-model="message"
-          class="form-control composer-textarea"
+            class="form-control chat-textarea m-0"
             placeholder="Scrivi aggiornamento o domanda"
-          rows="2"
             :disabled="isSubmitting"
             @keydown="handleKeydown"
-        />
+        ></textarea>
 
         <button
             type="submit"
-          class="btn btn-primary composer-submit"
+            class="btn btn-primary btn-square flex-shrink-0"
             :disabled="isSubmitting || (message.trim() === '' && files.length === 0)"
+            title="Invia"
         >
-          <span v-if="isSubmitting" class="spinner-border spinner-border-sm me-2" role="status" aria-hidden="true"></span>
+          <span v-if="isSubmitting" class="spinner-border spinner-border-sm" role="status" aria-hidden="true"></span>
-          <BIIcon v-else name="it-arrow-right" size="sm" color="white" class="me-1" />
+          <BIIcon v-else name="it-arrow-right" size="sm" color="white" />
-          Invia
         </button>
       </div>
 
@@ -126,54 +126,32 @@ const removeFile = (idx: number) => {
   max-width: 14rem;
 }
 
-.composer-shell {
-  align-items: flex-end;
-  background: #fff;
-  border: 1px solid #c5d0db;
-  border-radius: 4px;
-  display: grid;
-  gap: 0.75rem;
-  grid-template-columns: auto minmax(0, 1fr) auto;
-  padding: 0.75rem;
-}
-
-.composer-shell:focus-within {
-  border-color: #06c;
-  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.12);
-}
-
-.composer-attach {
-  flex-shrink: 0;
-}
-
-.composer-textarea {
-  border: 0;
-  box-shadow: none;
-  min-height: 4rem;
-  padding: 0;
-  resize: vertical;
-}
-
-.composer-submit {
-  min-width: 7rem;
-}
-
 .btn-close-sm {
   font-size: 0.55rem;
 }
 
-@media (max-width: 767.98px) {
+.chat-textarea {
-  .composer-shell {
+  resize: none !important;
-    grid-template-columns: auto 1fr;
+  height: 48px;
-  }
+  min-height: 48px;
+  overflow-y: auto;
+  padding-top: 12px;
+  padding-bottom: 12px;
+  border-radius: 6px;
+}
 
-  .composer-textarea {
+.chat-textarea:focus {
-    grid-column: 1 / -1;
+  border-color: #06c;
-  }
+  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.12);
+}
 
-  .composer-submit {
+.btn-square {
-    grid-column: 2;
+  width: 48px;
-    justify-self: end;
+  height: 48px;
-  }
+  padding: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 6px;
 }
 </style>

app/components/Pagination.vue

@@ -57,7 +57,6 @@ const pageNumbers = computed(() => {
 <template>
   <nav v-if="totalPages > 1" class="d-flex justify-content-center mt-5 mb-5">
     <ul class="pagination mb-0">
-      <!-- Pagina Precedente -->
       <li class="page-item" :class="{ disabled: currentPage === 1 }">
         <button
           class="page-link"
@@ -69,7 +68,6 @@ const pageNumbers = computed(() => {
         </button>
       </li>
 
-      <!-- Numeri Pagine -->
       <li v-for="page in pageNumbers" :key="`page-${page}`" class="page-item" :class="{ active: page === currentPage }">
         <template v-if="page === '...'">
           <span class="page-link">...</span>
@@ -86,7 +84,6 @@ const pageNumbers = computed(() => {
         </template>
       </li>
 
-      <!-- Pagina Successiva -->
       <li class="page-item" :class="{ disabled: currentPage === totalPages }">
         <button
           class="page-link"
@@ -100,7 +97,6 @@ const pageNumbers = computed(() => {
     </ul>
   </nav>
 
-  <!-- Info Pagina -->
   <div v-if="totalPages > 1" class="text-center text-muted small mt-3">
     Pagina {{ currentPage }} di {{ totalPages }} ({{ totalItems }} elementi totali)
   </div>

app/components/ReportForm.vue

@@ -45,7 +45,6 @@ const isResolvingAddress = ref(false)
 const addressSearchError = ref('')
 const showAddressSuggestions = ref(false)
 
-// Map variables
 const mapContainer = ref<HTMLElement | null>(null)
 let leaflet: typeof import('leaflet') | null = null
 let map: LeafletMap | null = null
@@ -62,7 +61,6 @@ const loadLeaflet = async () => {
 
   const leafletModule = await import('leaflet')
 
-  // Fix per le icone di Leaflet in Nuxt/Vite
   const defaultIcon = leafletModule.icon({
     iconUrl: 'https://unpkg.com/[email protected]/dist/images/marker-icon.png',
     iconRetinaUrl: 'https://unpkg.com/[email protected]/dist/images/marker-icon-2x.png',
@@ -276,7 +274,6 @@ const initMap = async () => {
     void updateLocation(e.latlng.lat, e.latlng.lng)
   })
 
-  // Se c'è già una posizione, imposta il marker
   if (form.value.latitude && form.value.longitude) {
     void updateLocation(form.value.latitude, form.value.longitude, { zoomTo: true })
   }
@@ -435,7 +432,6 @@ watch(() => form.value.address, (newAddress) => {
   }, 350)
 })
 
-// Sincronizza input manuali con la mappa
 watch([() => form.value.latitude, () => form.value.longitude], ([newLat, newLng]) => {
   if (newLat && newLng && map && leaflet) {
     if (!marker || marker.getLatLng().lat !== newLat || marker.getLatLng().lng !== newLng) {
@@ -663,7 +659,7 @@ watch([() => form.value.latitude, () => form.value.longitude], ([newLat, newLng]
 .map-container {
   height: 300px;
   width: 100%;
-  z-index: 1; /* Fix for Bootstrap elements overlapping map */
+  z-index: 1;
 }
 
 .address-suggestions {

app/components/ReportTable.vue

@@ -9,6 +9,7 @@ interface Props {
   actionVariant?: ActionVariant
   actionLabel?: string
   showAssignee?: boolean
+  processingIds?: number[]
 }
 
 const props = withDefaults(defineProps<Props>(), {
@@ -16,6 +17,7 @@ const props = withDefaults(defineProps<Props>(), {
   actionVariant: 'open',
   actionLabel: 'Open report',
   showAssignee: false,
+  processingIds: () => [],
 })
 
 const emit = defineEmits<{
@@ -53,7 +55,7 @@ const reportHref = (report: Report) => `${props.detailBasePath}/${report.id}`
         <td class="report-table-id">#{{ report.id }}</td>
         <td class="text-nowrap">{{ report.category_name || '-' }}</td>
         <td>
-            <span class="report-address" :title="report.address">
+          <span class="report-address d-inline-block text-truncate align-middle" style="max-width: 10ch;" :title="report.address">
               {{ report.address || '-' }}
             </span>
         </td>
@@ -69,14 +71,16 @@ const reportHref = (report: Report) => `${props.detailBasePath}/${report.id}`
               v-if="actionVariant === 'manage'"
               type="button"
               class="btn btn-primary btn-xs"
+              :disabled="processingIds.includes(report.id)"
               @click="emit('take', report.id)"
           >
+            <span v-if="processingIds.includes(report.id)" class="spinner-border spinner-border-sm me-1" role="status" aria-hidden="true"></span>
             Prendi in carico
           </button>
           <NuxtLink
               v-else
               :to="reportHref(report)"
-              class="btn btn-outline-primary btn-xs btn-icon"
+              class="btn btn-outline-primary btn-xs btn-icon d-inline-flex align-items-center justify-content-center"
               :aria-label="actionLabel"
               :title="actionLabel"
           >

app/components/dashboard/AdminDashboard.vue

@@ -11,7 +11,6 @@ const { data: statsRes, pending } = useAsyncData('admin-stats', () => getOvervie
       <p>Accesso di livello 1. Da qui puoi gestire le configurazioni di sistema, le categorie e moderare le segnalazioni.</p>
     </div>
 
-    <!-- Statistiche Globali (Mock o Reali) -->
     <div class="row mb-5" v-if="!pending && statsRes?.ok">
       <div class="col-6 col-md-3 mb-3">
         <div class="card-wrapper card-space">

app/components/dashboard/OperatorDashboard.vue

@@ -4,11 +4,18 @@ const { getOpenReports, getAssignedReports, takeReport } = useOperator()
 const { data: openReportsRes, refresh: refreshOpen } = useAsyncData('open-reports', () => getOpenReports({ per_page: 5 }))
 const { data: assignedReportsRes, refresh: refreshAssigned } = useAsyncData('assigned-reports', () => getAssignedReports({ per_page: 5 }))
 
+const processingIds = ref<number[]>([])
+
 const handleTakeReport = async (id: number) => {
+  processingIds.value.push(id)
+  try {
     const res = await takeReport(id)
     if (res.ok) {
       await Promise.all([refreshOpen(), refreshAssigned()])
     }
+  } finally {
+    processingIds.value = processingIds.value.filter(pid => pid !== id)
+  }
 }
 </script>
 

app/composables/useAdmin.ts

@@ -3,6 +3,7 @@ import type {
   ModerationListResponse,
   OkResponse,
   OverviewStatsResponse, TeamListResponse, UpdateModerationRequest,
+  UpdateAreaRequest, UpdateCategoryRequest, UpdateTeamRequest,
   UpdateUserBanRequest, UpdateUserRolesRequest,
   UserListResponse
 } from "~/types/api";
@@ -26,18 +27,36 @@ export const useAdmin = () => {
   const createArea = (body: CreateAreaRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/areas', { method: 'POST', body })
 
+  const updateArea = (id: number, body: UpdateAreaRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/areas/${id}`, { method: 'PATCH', body })
+
+  const deleteArea = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/areas/${id}`, { method: 'DELETE' })
+
   const getCategories = () =>
       useApiFetch<CategoryListResponse>('/api/v1/admin/categories', { method: 'GET' })
 
   const createCategory = (body: CreateCategoryRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/categories', { method: 'POST', body })
 
+  const updateCategory = (id: number, body: UpdateCategoryRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/categories/${id}`, { method: 'PATCH', body })
+
+  const deleteCategory = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/categories/${id}`, { method: 'DELETE' })
+
   const getTeams = () =>
       useApiFetch<TeamListResponse>('/api/v1/admin/teams', { method: 'GET' })
 
   const createTeam = (body: CreateTeamRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/teams', { method: 'POST', body })
 
+  const updateTeam = (id: number, body: UpdateTeamRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/teams/${id}`, { method: 'PATCH', body })
+
+  const deleteTeam = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/teams/${id}`, { method: 'DELETE' })
+  
   const getModerationFlags = (query?: { status?: string; page?: number; per_page?: number }) =>
       useApiFetch<ModerationListResponse>('/api/v1/admin/moderation', { method: 'GET', query })
 
@@ -51,10 +70,16 @@ export const useAdmin = () => {
     updateUserRoles,
     getAreas,
     createArea,
+    updateArea,
+    deleteArea,
     getCategories,
     createCategory,
+    updateCategory,
+    deleteCategory,
     getTeams,
     createTeam,
+    updateTeam,
+    deleteTeam,
     getModerationFlags,
     updateModerationFlag,
   }

app/composables/useAuth.ts

@@ -1,8 +1,9 @@
 import type {
-  ChangePasswordRequest,
+  CieSessionResponse,
+  CieStartResponse,
   CurrentUserResponse, EmailRequest, NotificationListResponse,
   OkResponse,
-  OtpRequestResponse, PasswordLoginRequest, RegisterCitizenRequest,
+  OtpRequestResponse, RegisterCitizenRequest,
   RegisterCitizenResponse, RewardsResponse,
   TokenResponse, VerifyOtpRequest, UpdateProfileRequest
 } from "~/types/api";
@@ -44,9 +45,7 @@ export const useAuth = () => {
         user.value = res.user
         const path = currentPath ?? useNuxtApp().$router.currentRoute.value.path
 
-        if (res.user.must_change_password && path !== '/auth/change-password') {
+        if (redirectOnSuccess && path.startsWith('/auth')) {
-          await nuxtApp.runWithContext(() => navigateTo('/auth/change-password'))
-        } else if (redirectOnSuccess && path.startsWith('/auth')) {
           await nuxtApp.runWithContext(() => navigateTo('/dashboard'))
         }
       }
@@ -85,11 +84,14 @@ export const useAuth = () => {
   const verifyOtp = (body: VerifyOtpRequest) =>
       useApiFetch<TokenResponse>('/api/v1/auth/otp/verify', { method: 'POST', body })
 
-  const loginWithPassword = (body: PasswordLoginRequest) =>
+  const startCieLogin = (frontendRedirectUri: string) =>
-      useApiFetch<TokenResponse>('/api/v1/auth/login/password', { method: 'POST', body })
+      useApiFetch<CieStartResponse>('/api/v1/auth/cie/start', {
+        method: 'POST',
+        body: { frontend_redirect_uri: frontendRedirectUri }
+      })
 
-  const changePassword = (body: ChangePasswordRequest) =>
+  const fetchCieSession = (id: string) =>
-      useApiFetch<OkResponse>('/api/v1/auth/change-password', { method: 'POST', body })
+      useApiFetch<CieSessionResponse>(`/api/v1/auth/cie/session/${id}`, { method: 'GET' })
 
   const updateProfile = (body: UpdateProfileRequest) =>
       useApiFetch<CurrentUserResponse>('/api/v1/me', { method: 'PATCH', body })
@@ -119,8 +121,8 @@ export const useAuth = () => {
     register,
     requestOtp,
     verifyOtp,
-    loginWithPassword,
+    startCieLogin,
-    changePassword,
+    fetchCieSession,
     updateProfile,
     fetchCurrentUser,
     fetchRewards,

app/composables/useOperator.ts

@@ -1,4 +1,5 @@
 import type {
+  AssignmentLinkResponse,
   AssignTeamRequest,
   InterventionSummaryResponse,
   OkResponse,
@@ -32,6 +33,12 @@ export const useOperator = () => {
   const getInterventionSummary = (id: number) =>
       useApiFetch<InterventionSummaryResponse>(`/api/v1/reports/${id}/intervention-summary`, { method: 'GET' })
 
+  const createInterventionLink = (id: number) =>
+      useApiFetch<AssignmentLinkResponse>(`/api/v1/reports/${id}/intervention-link`, { method: 'POST' })
+
+  const revokeInterventionLink = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/reports/${id}/intervention-link`, { method: 'DELETE' })
+
   return {
     getOpenReports,
     getAssignedReports,
@@ -41,5 +48,7 @@ export const useOperator = () => {
     updateReportStatus,
     assignTeam,
     getInterventionSummary,
+    createInterventionLink,
+    revokeInterventionLink,
   }
 }

app/layouts/default.vue

@@ -11,6 +11,7 @@ import Footer from "~/components/Footer.vue";
       <slot />
     </main>
 
+    <div class="italian-flag"></div>
     <Footer />
   </div>
 </template>
@@ -22,6 +23,19 @@ import Footer from "~/components/Footer.vue";
   min-height: 100vh;
 }
 
+div.italian-flag {
+  height: 8px;
+  width: 100%;
+  background: linear-gradient(to right, #009246 0%, #009246 33.33%, #F1F2F1 33.33%, #F1F2F1 66.66%, #CE2B37 66.66%, #CE2B37 100%);
+}
+
+div.italian-flag {
+  height: 8px;
+  width: 100%;
+  box-shadow: rgb(0 0 0 / 0.7) 0 0 30px;
+  background: linear-gradient(to right, #009246 0%, #009246 33.33%, #F1F2F1 33.33%, #F1F2F1 66.66%, #CE2B37 66.66%, #CE2B37 100%);
+}
+
 .app-main {
   flex-grow: 1;
 }

app/middleware/auth.ts

@@ -1,7 +1,6 @@
 export default defineNuxtRouteMiddleware(async (to) => {
   const auth = useAuth()
 
-  // Se c'è un token ma l'utente non è ancora caricato e non stiamo già sincronizzando, sincronizza
   if ((auth.token.value || auth.tokenState.value) && !auth.user.value && !auth.isSyncingUser.value) {
     try {
       await auth.syncUser({ currentPath: to.path })
@@ -11,28 +10,17 @@ export default defineNuxtRouteMiddleware(async (to) => {
     }
   }
 
-  // Se non autenticato, redirige al login
   if (!auth.isAuthenticated.value) {
     return navigateTo('/auth/login')
   }
 
-  // Verifica ruoli se richiesto
   const requiredRole = to.meta.auth?.role
 
   if (requiredRole && auth.user.value) {
-    const userRole = auth.user.value.role.toUpperCase()
+    const userRole = auth.user.value.role
 
-    const roleLevels: Record<string, number> = {
+    if (!hasMinimumRole(userRole, requiredRole)) {
-      'CITIZEN': 1,
+      console.warn(`[Auth] User role ${userRole} insufficient for required ${requiredRole}`)
-      'OPERATOR': 2,
-      'ADMIN': 3
-    }
-
-    const userLevel = roleLevels[userRole] || 0
-    const requiredLevel = roleLevels[requiredRole] || 0
-
-    if (userLevel < requiredLevel) {
-      console.warn(`[Auth] User role ${userRole} (level ${userLevel}) insufficient for required ${requiredRole} (level ${requiredLevel})`)
       return navigateTo('/')
     }
   }

app/pages/admin/areas.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, reactive, nextTick, onBeforeUnmount } from 'vue'
+import { computed, nextTick, onBeforeUnmount, reactive, ref, watch } from 'vue'
 import { BARI_BOUNDS, BARI_CENTER, isWithinBariBounds } from '~/utils/bari'
 
 definePageMeta({
@@ -9,23 +9,126 @@ definePageMeta({
 
 useHead({ title: 'Aree - Admin' })
 
-const { getAreas, createArea } = useAdmin()
+const { getAreas, createArea, updateArea, deleteArea } = useAdmin()
 const { data: areasRes, pending, refresh } = useAsyncData('admin-areas', () => getAreas())
 
 const isCreating = ref(false)
+const editingAreaId = ref<number | null>(null)
 const formData = reactive({
   name: '',
   description: '',
   geojson: ''
 })
 const jsonError = ref('')
+const actionError = ref('')
+const deletingAreaId = ref<number | null>(null)
+const areaPendingDelete = ref<any | null>(null)
 
-// Map variables
 let map: any = null
+let mainMap: any = null
 let polygon: any = null
 const mapPoints = ref<[number, number][]>([])
 
+const modalTitle = computed(() => editingAreaId.value ? 'Modifica Area' : 'Nuova Area')
+const submitLabel = computed(() => editingAreaId.value ? 'Salva Modifiche' : 'Crea Area')
+const isEditing = computed(() => editingAreaId.value !== null)
+const areas = computed(() => areasRes.value?.areas || [])
+const areaDeleteMessage = computed(() =>
+    areaPendingDelete.value ? `Vuoi eliminare area "${areaPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+
+const initMainMap = async () => {
+  const mapElement = document.getElementById('mainMap')
+  if (!mapElement) return
+
+  const L = (await import('leaflet')).default
+
+  if (mainMap) {
+    mainMap.remove()
+    mainMap = null
+  }
+
+  const bariBounds = L.latLngBounds(
+      [BARI_BOUNDS.south, BARI_BOUNDS.west],
+      [BARI_BOUNDS.north, BARI_BOUNDS.east]
+  )
+
+  mainMap = L.map('mainMap', {
+    maxBounds: bariBounds,
+    maxBoundsViscosity: 1,
+    minZoom: 11
+  }).setView(BARI_CENTER, 12)
+
+  L.tileLayer('https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png', {
+    maxZoom: 19,
+    attribution: '© OpenStreetMap'
+  }).addTo(mainMap)
+
+  const featureGroup = L.featureGroup().addTo(mainMap)
+  let hasLayers = false
+
+  areas.value.forEach((area: any) => {
+    if (area.boundary_geojson) {
+      try {
+        const layer = L.geoJSON(JSON.parse(area.boundary_geojson), {
+          style: {
+            color: '#0d6efd',
+            weight: 2,
+            fillOpacity: 0.2
+          }
+        }).bindPopup(`<strong>${area.name}</strong><br/>${area.description || ''}`)
+
+        layer.addTo(featureGroup)
+        hasLayers = true
+      } catch (e) {
+        console.error('Invalid geojson for area', area.id, e)
+      }
+    }
+  })
+
+  if (hasLayers) {
+    mainMap.fitBounds(featureGroup.getBounds())
+  } else {
+    mainMap.fitBounds(bariBounds)
+  }
+}
+
+watch([areas, pending], () => {
+  if (!pending.value) {
+    if (areas.value.length > 0) {
+      nextTick(() => {
+        initMainMap()
+      })
+    } else if (mainMap) {
+      mainMap.remove()
+      mainMap = null
+    }
+  }
+}, { immediate: true })
+
+const renderExistingAreasInModal = (L: any, currentMap: any) => {
+  areas.value.forEach((area: any) => {
+    if (area.id === editingAreaId.value) return
+
+    if (area.boundary_geojson) {
+      try {
+        L.geoJSON(JSON.parse(area.boundary_geojson), {
+          style: {
+            color: '#6c757d',
+            weight: 2,
+            dashArray: '5, 5',
+            fillOpacity: 0.1
+          },
+          interactive: false
+        }).addTo(currentMap)
+      } catch(e) {}
+    }
+  })
+}
+
 const openCreateModal = () => {
+  actionError.value = ''
+  editingAreaId.value = null
   formData.name = ''
   formData.description = ''
   formData.geojson = ''
@@ -34,7 +137,6 @@ const openCreateModal = () => {
   isCreating.value = true
 
   nextTick(async () => {
-    // Import leaflet solo client-side
     const L = (await import('leaflet')).default
 
     if (map) {
@@ -60,6 +162,87 @@ const openCreateModal = () => {
     polygon = L.polygon([], { color: 'red' }).addTo(map)
     map.fitBounds(bariBounds)
 
+    renderExistingAreasInModal(L, map)
+
+    map.on('click', (e: any) => {
+      if (!isWithinBariBounds(e.latlng.lat, e.latlng.lng)) {
+        jsonError.value = 'Puoi disegnare aree solo entro confini del Comune di Bari.'
+        return
+      }
+
+      jsonError.value = ''
+      mapPoints.value.push([e.latlng.lat, e.latlng.lng])
+      polygon.setLatLngs(mapPoints.value)
+      updateGeojson()
+    })
+  })
+}
+
+const loadPolygonFromGeoJson = (boundaryGeojson: any) => {
+  const coordinates = boundaryGeojson?.coordinates?.[0]
+  if (!Array.isArray(coordinates)) {
+    mapPoints.value = []
+    return
+  }
+
+  const normalized = coordinates
+      .slice(0, -1)
+      .map(([longitude, latitude]: [number, number]) => [latitude, longitude] as [number, number])
+
+  mapPoints.value = normalized
+  if (polygon) {
+    polygon.setLatLngs(mapPoints.value)
+  }
+}
+
+const openEditModal = (area: any) => {
+  actionError.value = ''
+  editingAreaId.value = area.id
+  formData.name = area.name || ''
+  formData.description = area.description || ''
+  formData.geojson = area.boundary_geojson || ''
+  jsonError.value = ''
+  mapPoints.value = []
+  isCreating.value = true
+
+  nextTick(async () => {
+    const L = (await import('leaflet')).default
+
+    if (map) {
+      map.remove()
+      map = null
+    }
+
+    const bariBounds = L.latLngBounds(
+        [BARI_BOUNDS.south, BARI_BOUNDS.west],
+        [BARI_BOUNDS.north, BARI_BOUNDS.east]
+    )
+
+    map = L.map('areaMap', {
+      maxBounds: bariBounds,
+      maxBoundsViscosity: 1,
+      minZoom: 12
+    }).setView(BARI_CENTER, 12)
+    L.tileLayer('https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png', {
+      maxZoom: 19,
+      attribution: '© OpenStreetMap'
+    }).addTo(map)
+    console.log(JSON.parse(area.boundary_geojson))
+    L.geoJSON(JSON.parse(area.boundary_geojson), {
+      style: {
+        color: '#0d6efd',
+        weight: 2,
+        fillOpacity: 0.2
+      }
+    }).addTo(map)
+
+    polygon = L.polygon([], { color: 'red' }).addTo(map)
+    map.fitBounds(bariBounds)
+
+    renderExistingAreasInModal(L, map)
+
+    loadPolygonFromGeoJson(area.boundary_geojson)
+
     map.on('click', (e: any) => {
       if (!isWithinBariBounds(e.latlng.lat, e.latlng.lng)) {
         jsonError.value = 'Puoi disegnare aree solo entro confini del Comune di Bari.'
@@ -89,7 +272,7 @@ const updateGeojson = () => {
   }
   const coords = mapPoints.value.map(p => [p[1], p[0]] as [number, number]) // Lng, Lat
   if (coords[0]) {
-    coords.push([...coords[0]]) // Chiudi poligono
+    coords.push([...coords[0]])
   }
 
   formData.geojson = JSON.stringify({
@@ -100,6 +283,7 @@ const updateGeojson = () => {
 
 const closeCreateModal = () => {
   isCreating.value = false
+  editingAreaId.value = null
   if (map) {
     map.remove()
     map = null
@@ -108,6 +292,7 @@ const closeCreateModal = () => {
 
 onBeforeUnmount(() => {
   if (map) map.remove()
+  if (mainMap) mainMap.remove()
 })
 
 const handleCreate = async () => {
@@ -131,19 +316,58 @@ const handleCreate = async () => {
   }
 
   try {
-    const res = await createArea({
+    const payload = {
       name: formData.name,
       description: formData.description || undefined,
       boundary_geojson: parsedGeojson
-    })
+    }
+
+    const res = editingAreaId.value
+        ? await updateArea(editingAreaId.value, payload)
+        : await createArea(payload)
 
     if (res.ok) {
       await refresh()
       closeCreateModal()
+      actionError.value = ''
     }
   } catch (err) {
-    console.error('Failed to create area', err)
+    console.error('Failed to save area', err)
-    alert('Errore durante la creazione dell\'area.')
+    actionError.value = 'Errore durante il salvataggio dell\'area.'
+  }
+}
+
+const askDeleteArea = (area: any) => {
+  areaPendingDelete.value = area
+}
+
+const closeDeleteAreaModal = () => {
+  if (deletingAreaId.value) return
+  areaPendingDelete.value = null
+}
+
+const handleDeleteArea = async () => {
+  if (!areaPendingDelete.value) return
+
+  const area = areaPendingDelete.value
+
+  deletingAreaId.value = area.id
+  actionError.value = ''
+
+  try {
+    const res = await deleteArea(area.id)
+    if (res.ok) {
+      if (editingAreaId.value === area.id) {
+        closeCreateModal()
+      }
+      await refresh()
+      areaPendingDelete.value = null
+    }
+  } catch (err: any) {
+    console.error('Failed to delete area', err)
+    actionError.value = err?.data?.message || 'Errore durante eliminazione area.'
+  } finally {
+    deletingAreaId.value = null
   }
 }
 </script>
@@ -165,10 +389,19 @@ const handleCreate = async () => {
       <div class="spinner-border text-primary" role="status"></div>
     </div>
 
-    <div v-else-if="!areasRes?.areas || areasRes.areas.length === 0" class="alert alert-info">
+    <div v-else-if="areas.length === 0" class="alert alert-info">
       Nessuna area configurata.
     </div>
 
+    <template v-else>
+      <div class="card mb-4 shadow-sm border-0">
+        <div id="mainMap" class="rounded" style="height: 400px; width: 100%; z-index: 1;"></div>
+      </div>
+
+      <div v-if="actionError" class="alert alert-danger">
+        {{ actionError }}
+      </div>
+
       <div v-else class="table-responsive">
         <table class="table table-hover align-middle bg-white shadow-sm rounded">
           <thead class="table-light">
@@ -176,35 +409,44 @@ const handleCreate = async () => {
             <th>ID</th>
             <th>Nome</th>
             <th>Descrizione</th>
-            <th>Stato</th>
             <th>GeoJSON</th>
+            <th class="text-end">Azioni</th>
           </tr>
           </thead>
           <tbody>
-          <tr v-for="area in areasRes.areas" :key="area.id">
+          <tr v-for="area in areas" :key="area.id">
             <td>{{ area.id }}</td>
             <td><strong>{{ area.name }}</strong></td>
             <td>{{ area.description || '-' }}</td>
-            <td>
-              <span v-if="area.active" class="badge bg-success">Attiva</span>
-              <span v-else class="badge bg-secondary">Inattiva</span>
-            </td>
             <td>
               <span v-if="area.boundary_geojson" class="badge border border-primary text-primary">Configurato</span>
               <span v-else class="badge border border-danger text-danger">Mancante</span>
             </td>
+            <td class="text-end">
+              <button class="btn btn-sm btn-outline-primary me-2" @click="openEditModal(area)">
+                Modifica
+              </button>
+              <button
+                  class="btn btn-sm btn-outline-danger ms-2"
+                  :disabled="deletingAreaId === area.id"
+                  @click="askDeleteArea(area)"
+              >
+                <span v-if="deletingAreaId === area.id" class="spinner-border spinner-border-sm me-1"></span>
+                Elimina
+              </button>
+            </td>
           </tr>
           </tbody>
         </table>
       </div>
+    </template>
 
-    <!-- Modale Creazione -->
     <div v-if="isCreating" class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
     <div v-if="isCreating" class="modal fade show d-block" tabindex="-1" style="z-index: 1050;">
       <div class="modal-dialog modal-xl modal-dialog-centered modal-dialog-scrollable">
         <div class="modal-content">
           <div class="modal-header">
-            <h5 class="modal-title">Nuova Area</h5>
+            <h5 class="modal-title">{{ modalTitle }}</h5>
             <button type="button" class="btn-close" @click="closeCreateModal"></button>
           </div>
           <div class="modal-body">
@@ -251,17 +493,28 @@ const handleCreate = async () => {
           <div class="modal-footer d-flex justify-content-end gap-2">
             <button type="button" class="btn btn-outline-secondary" @click="closeCreateModal">Annulla</button>
             <button type="button" class="btn btn-primary" :disabled="!formData.name || !formData.geojson" @click="handleCreate">
-              Crea Area
+              {{ submitLabel }}
             </button>
           </div>
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+        :open="areaPendingDelete !== null"
+        title="Elimina area"
+        :message="areaDeleteMessage"
+        confirm-label="Elimina area"
+        confirm-class="btn-danger"
+        :pending="deletingAreaId !== null"
+        @cancel="closeDeleteAreaModal"
+        @confirm="handleDeleteArea"
+    />
   </div>
 </template>
 
 <style scoped>
-#areaMap {
+#areaMap, #mainMap {
   background: #e9ecef;
 }
 

app/pages/admin/catalog.vue

@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import type { Category, Team } from '~/types/api'
+
 definePageMeta({
   middleware: 'auth',
   auth: { role: 'ADMIN' }
@@ -6,7 +8,7 @@ definePageMeta({
 
 useHead({ title: 'Categorie e Team - Admin' })
 
-const { createCategory, getTeams, createTeam, getAreas } = useAdmin()
+const { createCategory, updateCategory, deleteCategory, getTeams, createTeam, updateTeam, deleteTeam, getAreas } = useAdmin()
 const { getCategories } = useReports()
 
 const { data: categoriesRes, refresh: refreshCategories } = await useAsyncData('report-categories-admin-view', () => getCategories())
@@ -18,6 +20,8 @@ const categoryForm = reactive({
   description: '',
 })
 
+const editingCategoryId = ref<number | null>(null)
+
 const teamForm = reactive({
   name: '',
   description: '',
@@ -25,26 +29,70 @@ const teamForm = reactive({
   area_id: null as number | null,
 })
 
+const editingTeamId = ref<number | null>(null)
+
 const isSavingCategory = ref(false)
 const isSavingTeam = ref(false)
 const categoryError = ref('')
 const teamError = ref('')
+const deletingCategoryId = ref<number | null>(null)
+const deletingTeamId = ref<number | null>(null)
+const categoryPendingDelete = ref<Category | null>(null)
+const teamPendingDelete = ref<Team | null>(null)
 
 const categories = computed(() => categoriesRes.value?.categories || [])
 const teams = computed(() => teamsRes.value?.teams || [])
 const areas = computed(() => areasRes.value?.areas || [])
+const categoryDeleteMessage = computed(() =>
+  categoryPendingDelete.value ? `Vuoi eliminare categoria "${categoryPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+const teamDeleteMessage = computed(() =>
+  teamPendingDelete.value ? `Vuoi eliminare team "${teamPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+
+const resetCategoryForm = () => {
+  editingCategoryId.value = null
+  categoryForm.name = ''
+  categoryForm.description = ''
+}
+
+const resetTeamForm = () => {
+  editingTeamId.value = null
+  teamForm.name = ''
+  teamForm.description = ''
+  teamForm.team_category_id = null
+  teamForm.area_id = null
+}
+
+const editCategory = (category: Category) => {
+  editingCategoryId.value = category.id
+  categoryForm.name = category.name
+  categoryForm.description = category.description || ''
+}
+
+const editTeam = (team: Team) => {
+  editingTeamId.value = team.id
+  teamForm.name = team.name
+  teamForm.description = team.description || ''
+  teamForm.team_category_id = team.team_category_id
+  teamForm.area_id = team.area_id ?? null
+}
 
 const submitCategory = async () => {
   categoryError.value = ''
   isSavingCategory.value = true
 
   try {
-    await createCategory({
+    const payload = {
       name: categoryForm.name.trim(),
       description: categoryForm.description.trim() || undefined,
-    })
+    }
-    categoryForm.name = ''
+    if (editingCategoryId.value) {
-    categoryForm.description = ''
+      await updateCategory(editingCategoryId.value, payload)
+    } else {
+      await createCategory(payload)
+    }
+    resetCategoryForm()
     await refreshCategories()
   } catch (error: any) {
     categoryError.value = error?.data?.message || 'Creazione categoria non riuscita.'
@@ -60,16 +108,18 @@ const submitTeam = async () => {
   isSavingTeam.value = true
 
   try {
-    await createTeam({
+    const payload = {
       name: teamForm.name.trim(),
       description: teamForm.description.trim() || undefined,
       team_category_id: teamForm.team_category_id,
       area_id: teamForm.area_id || undefined,
-    })
+    }
-    teamForm.name = ''
+    if (editingTeamId.value) {
-    teamForm.description = ''
+      await updateTeam(editingTeamId.value, payload)
-    teamForm.team_category_id = null
+    } else {
-    teamForm.area_id = null
+      await createTeam(payload)
+    }
+    resetTeamForm()
     await refreshTeams()
   } catch (error: any) {
     teamError.value = error?.data?.message || 'Creazione team non riuscita.'
@@ -77,6 +127,86 @@ const submitTeam = async () => {
     isSavingTeam.value = false
   }
 }
+
+const toggleCategoryActive = async (category: Category) => {
+  try {
+    await updateCategory(category.id, { active: category.active === false })
+    await refreshCategories()
+  } catch (error: any) {
+    categoryError.value = error?.data?.message || 'Aggiornamento categoria non riuscito.'
+  }
+}
+
+const askDeleteCategory = (category: Category) => {
+  categoryPendingDelete.value = category
+}
+
+const closeDeleteCategoryModal = () => {
+  if (deletingCategoryId.value) return
+  categoryPendingDelete.value = null
+}
+
+const handleDeleteCategory = async () => {
+  if (!categoryPendingDelete.value) return
+
+  const category = categoryPendingDelete.value
+
+  deletingCategoryId.value = category.id
+  categoryError.value = ''
+
+  try {
+    await deleteCategory(category.id)
+    if (editingCategoryId.value === category.id) {
+      resetCategoryForm()
+    }
+    await refreshCategories()
+    categoryPendingDelete.value = null
+  } catch (error: any) {
+    categoryError.value = error?.data?.message || 'Eliminazione categoria non riuscita.'
+  } finally {
+    deletingCategoryId.value = null
+  }
+}
+
+const toggleTeamActive = async (team: Team) => {
+  try {
+    await updateTeam(team.id, { active: team.active === false })
+    await refreshTeams()
+  } catch (error: any) {
+    teamError.value = error?.data?.message || 'Aggiornamento team non riuscito.'
+  }
+}
+
+const askDeleteTeam = (team: Team) => {
+  teamPendingDelete.value = team
+}
+
+const closeDeleteTeamModal = () => {
+  if (deletingTeamId.value) return
+  teamPendingDelete.value = null
+}
+
+const handleDeleteTeam = async () => {
+  if (!teamPendingDelete.value) return
+
+  const team = teamPendingDelete.value
+
+  deletingTeamId.value = team.id
+  teamError.value = ''
+
+  try {
+    await deleteTeam(team.id)
+    if (editingTeamId.value === team.id) {
+      resetTeamForm()
+    }
+    await refreshTeams()
+    teamPendingDelete.value = null
+  } catch (error: any) {
+    teamError.value = error?.data?.message || 'Eliminazione team non riuscita.'
+  } finally {
+    deletingTeamId.value = null
+  }
+}
 </script>
 
 <template>
@@ -113,7 +243,15 @@ const submitTeam = async () => {
               </div>
               <button type="submit" class="btn btn-primary" :disabled="isSavingCategory || !categoryForm.name.trim()">
                 <span v-if="isSavingCategory" class="spinner-border spinner-border-sm me-2"></span>
-                Crea categoria
+                {{ editingCategoryId ? 'Salva categoria' : 'Crea categoria' }}
+              </button>
+              <button
+                v-if="editingCategoryId"
+                type="button"
+                class="btn btn-outline-secondary ms-2"
+                @click="resetCategoryForm"
+              >
+                Annulla
               </button>
             </form>
 
@@ -124,6 +262,7 @@ const submitTeam = async () => {
                     <th>ID</th>
                     <th>Nome</th>
                     <th>Stato</th>
+                    <th class="text-end">Azioni</th>
                   </tr>
                 </thead>
                 <tbody>
@@ -138,9 +277,29 @@ const submitTeam = async () => {
                         {{ category.active === false ? 'Inattiva' : 'Attiva' }}
                       </span>
                     </td>
+                    <td class="text-end">
+                      <button class="btn btn-sm btn-outline-primary me-2" @click="editCategory(category)">
+                        Modifica
+                      </button>
+                      <button
+                        class="btn btn-sm"
+                        :class="category.active === false ? 'btn-outline-success' : 'btn-outline-secondary'"
+                        @click="toggleCategoryActive(category)"
+                      >
+                        {{ category.active === false ? 'Attiva' : 'Disattiva' }}
+                      </button>
+                      <button
+                        class="btn btn-sm btn-outline-danger ms-2"
+                        :disabled="deletingCategoryId === category.id"
+                        @click="askDeleteCategory(category)"
+                      >
+                        <span v-if="deletingCategoryId === category.id" class="spinner-border spinner-border-sm me-1"></span>
+                        Elimina
+                      </button>
+                    </td>
                   </tr>
                   <tr v-if="categories.length === 0">
-                    <td colspan="3" class="text-muted">Nessuna categoria configurata.</td>
+                    <td colspan="4" class="text-muted">Nessuna categoria configurata.</td>
                   </tr>
                 </tbody>
               </table>
@@ -191,7 +350,15 @@ const submitTeam = async () => {
               <div class="col-12">
                 <button type="submit" class="btn btn-primary" :disabled="isSavingTeam || !teamForm.name.trim() || !teamForm.team_category_id">
                   <span v-if="isSavingTeam" class="spinner-border spinner-border-sm me-2"></span>
-                  Crea team
+                  {{ editingTeamId ? 'Salva team' : 'Crea team' }}
+                </button>
+                <button
+                  v-if="editingTeamId"
+                  type="button"
+                  class="btn btn-outline-secondary ms-2"
+                  @click="resetTeamForm"
+                >
+                  Annulla
                 </button>
               </div>
             </form>
@@ -205,6 +372,7 @@ const submitTeam = async () => {
                     <th>Categoria</th>
                     <th>Area</th>
                     <th>Stato</th>
+                    <th class="text-end">Azioni</th>
                   </tr>
                 </thead>
                 <tbody>
@@ -221,9 +389,29 @@ const submitTeam = async () => {
                         {{ team.active === false ? 'Inattivo' : 'Attivo' }}
                       </span>
                     </td>
+                    <td class="text-end">
+                      <button class="btn btn-sm btn-outline-primary me-2" @click="editTeam(team)">
+                        Modifica
+                      </button>
+                      <button
+                        class="btn btn-sm"
+                        :class="team.active === false ? 'btn-outline-success' : 'btn-outline-secondary'"
+                        @click="toggleTeamActive(team)"
+                      >
+                        {{ team.active === false ? 'Attiva' : 'Disattiva' }}
+                      </button>
+                      <button
+                        class="btn btn-sm btn-outline-danger ms-2"
+                        :disabled="deletingTeamId === team.id"
+                        @click="askDeleteTeam(team)"
+                      >
+                        <span v-if="deletingTeamId === team.id" class="spinner-border spinner-border-sm me-1"></span>
+                        Elimina
+                      </button>
+                    </td>
                   </tr>
                   <tr v-if="teams.length === 0">
-                    <td colspan="5" class="text-muted">Nessun team configurato.</td>
+                    <td colspan="6" class="text-muted">Nessun team configurato.</td>
                   </tr>
                 </tbody>
               </table>
@@ -232,5 +420,34 @@ const submitTeam = async () => {
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+      :open="categoryPendingDelete !== null"
+      title="Elimina categoria"
+      :message="categoryDeleteMessage"
+      confirm-label="Elimina categoria"
+      confirm-class="btn-danger"
+      :pending="deletingCategoryId !== null"
+      @cancel="closeDeleteCategoryModal"
+      @confirm="handleDeleteCategory"
+    />
+
+    <ConfirmModal
+      :open="teamPendingDelete !== null"
+      title="Elimina team"
+      :message="teamDeleteMessage"
+      confirm-label="Elimina team"
+      confirm-class="btn-danger"
+      :pending="deletingTeamId !== null"
+      @cancel="closeDeleteTeamModal"
+      @confirm="handleDeleteTeam"
+    />
   </div>
 </template>
+
+<style>
+.text-end .btn {
+  margin: 0 !important;
+  width: 120px;
+}
+</style>

app/pages/admin/moderation.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, watch } from 'vue'
+import { reactive, ref } from 'vue'
 
 definePageMeta({
   middleware: 'auth',
@@ -13,6 +13,19 @@ const { getModerationFlags, updateModerationFlag } = useAdmin()
 const page = ref(1)
 const perPage = ref(10)
 const statusFilter = ref('')
+const actionError = ref('')
+const resolveModal = reactive({
+  open: false,
+  flagId: null as number | null,
+  rejectReport: false,
+  note: '',
+  pending: false,
+})
+const dismissModal = reactive({
+  open: false,
+  flagId: null as number | null,
+  pending: false,
+})
 
 const { data: flagsRes, pending, refresh } = useAsyncData(
     'admin-moderation-flags',
@@ -20,36 +33,70 @@ const { data: flagsRes, pending, refresh } = useAsyncData(
     { watch: [page, statusFilter] }
 )
 
-const handleResolve = async (id: number, rejectReport: boolean) => {
+const openResolveModal = (id: number, rejectReport: boolean) => {
-  const note = prompt('Inserisci una nota di risoluzione (opzionale):')
+  resolveModal.open = true
-  if (note === null) return // cancelled
+  resolveModal.flagId = id
+  resolveModal.rejectReport = rejectReport
+  resolveModal.note = ''
+}
+
+const closeResolveModal = () => {
+  if (resolveModal.pending) return
+  resolveModal.open = false
+  resolveModal.flagId = null
+  resolveModal.note = ''
+}
+
+const handleResolve = async () => {
+  if (!resolveModal.flagId) return
+
+  resolveModal.pending = true
+  actionError.value = ''
 
   try {
-    const res = await updateModerationFlag(id, { 
+    await updateModerationFlag(resolveModal.flagId, {
       status: 'RESOLVED',
-      reject_report: rejectReport,
+      reject_report: resolveModal.rejectReport,
-      resolution_note: note
+      resolution_note: resolveModal.note || undefined
     })
-    if (res.ok) {
+
     await refresh()
-    }
+    closeResolveModal()
   } catch (err) {
     console.error('Failed to resolve flag', err)
-    alert('Errore durante la risoluzione della segnalazione.')
+    actionError.value = 'Errore durante la risoluzione della segnalazione.'
+  } finally {
+    resolveModal.pending = false
   }
 }
 
-const handleDismiss = async (id: number) => {
+const openDismissModal = (id: number) => {
-  if (!confirm('Sei sicuro di voler ignorare (dismiss) questo flag?')) return
+  dismissModal.open = true
+  dismissModal.flagId = id
+}
+
+const closeDismissModal = () => {
+  if (dismissModal.pending) return
+  dismissModal.open = false
+  dismissModal.flagId = null
+}
+
+const handleDismiss = async () => {
+  if (!dismissModal.flagId) return
+
+  dismissModal.pending = true
+  actionError.value = ''
 
   try {
-    const res = await updateModerationFlag(id, { status: 'DISMISSED' })
+    await updateModerationFlag(dismissModal.flagId, { status: 'DISMISSED' })
-    if (res.ok) {
+
     await refresh()
-    }
+    closeDismissModal()
   } catch (err) {
     console.error('Failed to dismiss flag', err)
-    alert('Errore durante l\'aggiornamento.')
+    actionError.value = 'Errore durante l\'aggiornamento.'
+  } finally {
+    dismissModal.pending = false
   }
 }
 
@@ -80,17 +127,26 @@ const formatDate = (dateStr: string) => {
       </div>
     </div>
 
+    <div v-if="actionError" class="alert alert-danger mb-4">
+      {{ actionError }}
+    </div>
+
     <div v-if="pending" class="text-center py-5">
       <div class="spinner-border text-danger" role="status"></div>
     </div>
 
-    <div v-else-if="!flagsRes?.flags || flagsRes.flags.length === 0" class="alert alert-success">
+    <div v-else-if="!flagsRes || !flagsRes.flags || flagsRes.flags.length === 0" class="alert alert-success">
       Nessun elemento da moderare al momento.
     </div>
 
     <div v-else>
-      <div class="card mb-3 shadow-sm border-0" v-for="flag in flagsRes.flags" :key="flag.id">
+      <div
-        <div class="card-header bg-light d-flex justify-content-between align-items-center">
+          class="card mb-3 border-0"
+          :class="flag.status === 'DISMISSED' ? 'dismissed-card shadow-none' : 'shadow-sm'"
+          v-for="flag in flagsRes.flags"
+          :key="flag.id"
+      >
+        <div class="card-header d-flex justify-content-between align-items-center" :class="flag.status === 'DISMISSED' ? 'bg-transparent' : 'bg-light'">
           <div>
             <strong>Flag #{{ flag.id }}</strong> -
             <span class="badge" :class="{
@@ -109,7 +165,7 @@ const formatDate = (dateStr: string) => {
                 {{ flag.details || 'Nessun dettaglio aggiuntivo fornito.' }}
               </p>
 
-              <div class="mt-3">
+              <div class="mt-info">
                 <span class="badge bg-info me-2">{{ flag.content_type }}</span>
                 <span v-if="flag.report_id">
                   Rif: 
@@ -122,7 +178,7 @@ const formatDate = (dateStr: string) => {
                 </span>
               </div>
 
-              <div class="mt-3 small">
+              <div class="mt-info small text-muted">
                 Segnalato da: {{ flag.created_by_email }} (ID: {{ flag.created_by_user_id }})
               </div>
 
@@ -134,13 +190,13 @@ const formatDate = (dateStr: string) => {
 
             <div class="col-md-4 text-end" v-if="flag.status === 'OPEN'">
               <div class="d-flex flex-column gap-2 mt-3 mt-md-0">
-                <button class="btn btn-outline-danger btn-sm" @click="handleResolve(flag.id, true)">
+                <button class="btn btn-outline-danger btn-sm" @click="openResolveModal(flag.id, true)">
                   <BIIcon name="it-ban" size="xs" /> Risolvi & Rigetta Segn.
                 </button>
-                <button class="btn btn-outline-warning btn-sm" @click="handleResolve(flag.id, false)">
+                <button class="btn btn-outline-warning btn-sm" @click="openResolveModal(flag.id, false)">
                   <BIIcon name="it-check" size="xs" /> Risolvi (Solo Avviso)
                 </button>
-                <button class="btn btn-outline-secondary btn-sm" @click="handleDismiss(flag.id)">
+                <button class="btn btn-outline-secondary btn-sm" @click="openDismissModal(flag.id)">
                   <BIIcon name="it-close" size="xs" /> Ignora Flag
                 </button>
               </div>
@@ -157,5 +213,71 @@ const formatDate = (dateStr: string) => {
           @page-change="page = $event"
       />
     </div>
+
+    <div v-if="resolveModal.open" class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
+    <div v-if="resolveModal.open" class="modal fade show d-block" tabindex="-1" style="z-index: 1050;">
+      <div class="modal-dialog modal-dialog-centered">
+        <div class="modal-content">
+          <div class="modal-header">
+            <h5 class="modal-title">{{ resolveModal.rejectReport ? 'Risolvi e rigetta segnalazione' : 'Risolvi flag' }}</h5>
+            <button type="button" class="btn-close" :disabled="resolveModal.pending" @click="closeResolveModal"></button>
+          </div>
+          <div class="modal-body">
+            <label class="form-label">Nota di risoluzione</label>
+            <textarea v-model="resolveModal.note" class="form-control" rows="4" placeholder="Nota opzionale"></textarea>
+          </div>
+          <div class="modal-footer">
+            <button type="button" class="btn btn-outline-secondary" :disabled="resolveModal.pending" @click="closeResolveModal">Annulla</button>
+            <button type="button" class="btn btn-primary" :disabled="resolveModal.pending" @click="handleResolve">
+              <span v-if="resolveModal.pending" class="spinner-border spinner-border-sm me-2"></span>
+              Conferma
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <ConfirmModal
+        :open="dismissModal.open"
+        title="Ignora flag"
+        message="Vuoi ignorare questo flag? Azione registrata in moderazione."
+        confirm-label="Ignora flag"
+        confirm-class="btn-outline-secondary"
+        :pending="dismissModal.pending"
+        @cancel="closeDismissModal"
+        @confirm="handleDismiss"
+    />
   </div>
 </template>
+
+<style scoped>
+.dismissed-card {
+  background-color: #f8f9fa;
+  opacity: 0.7;
+  border: 1px solid #e9ecef !important;
+}
+
+.dismissed-card .card-header {
+  padding-top: 0.35rem;
+  padding-bottom: 0.35rem;
+  border-bottom: 1px solid rgba(0,0,0,0.05);
+}
+
+.dismissed-card .card-body {
+  padding-top: 0.6rem;
+  padding-bottom: 0.6rem;
+}
+
+.dismissed-card h5.card-title {
+  font-size: 1rem;
+  margin-bottom: 0.2rem;
+}
+
+.mt-info {
+  margin-top: 1rem;
+}
+
+.dismissed-card .mt-info {
+  margin-top: 0.4rem;
+}
+</style>

app/pages/admin/users.vue

@@ -13,7 +13,18 @@ const { getUsers, updateUserBan, updateUserRoles } = useAdmin()
 const { data: usersRes, pending, refresh } = useAsyncData('admin-users', () => getUsers())
 
 const search = ref('')
-const parseRoles = (roles?: string) => roles ? roles.split(',').map((r) => r.trim().toUpperCase()).filter(Boolean) : []
+const banError = ref('')
+const roleError = ref('')
+const pendingBanUser = ref<any | null>(null)
+const isUpdatingBan = ref(false)
+const parseRoles = (roles?: string) => roles ? roles.split(',').map(normalizeRole).filter(Boolean) : []
+const banConfirmMessage = computed(() =>
+  pendingBanUser.value
+    ? `Vuoi ${pendingBanUser.value.banned ? 'sbloccare' : 'bannare'} utente ${pendingBanUser.value.first_name} ${pendingBanUser.value.last_name}?`
+    : ''
+)
+const banConfirmLabel = computed(() => pendingBanUser.value?.banned ? 'Sblocca utente' : 'Banna utente')
+const banConfirmClass = computed(() => pendingBanUser.value?.banned ? 'btn-success' : 'btn-danger')
 
 const filteredUsers = computed(() => {
   if (!usersRes.value?.users) return []
@@ -27,21 +38,36 @@ const filteredUsers = computed(() => {
   )
 })
 
-const handleToggleBan = async (id: number, currentBanStatus: boolean) => {
+const askToggleBan = (user: any) => {
-  if (!confirm(`Sei sicuro di voler ${currentBanStatus ? 'sbloccare' : 'bannare'} questo utente?`)) return
+  pendingBanUser.value = user
+}
+
+const closeBanModal = () => {
+  if (isUpdatingBan.value) return
+  pendingBanUser.value = null
+}
+
+const handleToggleBan = async () => {
+  if (!pendingBanUser.value) return
+
+  const user = pendingBanUser.value
+  isUpdatingBan.value = true
+  banError.value = ''
 
   try {
-    const res = await updateUserBan(id, { banned: !currentBanStatus })
+    const res = await updateUserBan(user.id, { banned: !user.banned })
     if (res.ok) {
       await refresh()
+      pendingBanUser.value = null
     }
   } catch (err) {
     console.error('Failed to update user ban status', err)
-    alert('Errore durante l\'aggiornamento dello stato di ban.')
+    banError.value = 'Errore durante l\'aggiornamento dello stato di ban.'
+  } finally {
+    isUpdatingBan.value = false
   }
 }
 
-// Modal per i ruoli
 const editingUserId = ref<number | null>(null)
 const selectedRoles = ref<string[]>([])
 const availableRoles = ['CITIZEN', 'OPERATOR', 'ADMIN']
@@ -59,6 +85,7 @@ const closeRoleModal = () => {
 const saveRoles = async () => {
   if (!editingUserId.value) return
 
+  roleError.value = ''
   try {
     const res = await updateUserRoles(editingUserId.value, { roles: selectedRoles.value })
     if (res.ok) {
@@ -67,7 +94,7 @@ const saveRoles = async () => {
     }
   } catch (err) {
     console.error('Failed to update roles', err)
-    alert('Errore durante l\'aggiornamento dei ruoli.')
+    roleError.value = 'Errore durante l\'aggiornamento dei ruoli.'
   }
 }
 </script>
@@ -95,6 +122,14 @@ const saveRoles = async () => {
       Nessun utente trovato.
     </div>
 
+    <div v-if="banError" class="alert alert-danger">
+      {{ banError }}
+    </div>
+
+    <div v-if="roleError" class="alert alert-danger">
+      {{ roleError }}
+    </div>
+
     <div v-else class="table-responsive">
       <table class="table table-hover align-middle">
         <thead>
@@ -138,7 +173,7 @@ const saveRoles = async () => {
               <button 
                 class="btn btn-sm"
                 :class="user.banned ? 'btn-outline-success' : 'btn-outline-danger'"
-                @click="handleToggleBan(user.id, !!user.banned)"
+                @click="askToggleBan(user)"
               >
                 {{ user.banned ? 'Sblocca' : 'Banna' }}
               </button>
@@ -177,5 +212,16 @@ const saveRoles = async () => {
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+      :open="pendingBanUser !== null"
+      title="Conferma stato utente"
+      :message="banConfirmMessage"
+      :confirm-label="banConfirmLabel"
+      :confirm-class="banConfirmClass"
+      :pending="isUpdatingBan"
+      @cancel="closeBanModal"
+      @confirm="handleToggleBan"
+    />
   </div>
 </template>

app/pages/auth/change-password.vue

@@ -1,217 +0,0 @@
-<script setup lang="ts">
-definePageMeta({
-  middleware: 'auth'
-})
-
-useHead({ title: 'Cambio Password - Visione' })
-
-const { changePassword, user, syncUser } = useAuth()
-const router = useRouter()
-
-const formData = reactive({
-  current_password: '',
-  new_password: '',
-  confirm_password: ''
-})
-
-const isLoading = ref(false)
-const errorMessage = ref('')
-
-const showCurrent = ref(false)
-const showNew = ref(false)
-const showConfirm = ref(false)
-
-const canSubmit = computed(() => {
-  return (
-      formData.current_password.length > 0 &&
-      formData.new_password.length >= 8 &&
-      formData.new_password === formData.confirm_password
-  )
-})
-
-const handleSubmit = async () => {
-  if (!canSubmit.value) return
-
-  isLoading.value = true
-  errorMessage.value = ''
-
-  try {
-    const res = await changePassword({
-      current_password: formData.current_password,
-      new_password: formData.new_password
-    })
-
-    if (res.ok) {
-      await syncUser()
-      await router.push('/profile')
-    }
-  } catch (error: any) {
-    errorMessage.value = error.data?.message || 'Errore. Verifica la password attuale.'
-  } finally {
-    isLoading.value = false
-  }
-}
-</script>
-
-<template>
-  <div class="py-5">
-    <div class="container">
-      <div class="row justify-content-center">
-        <div class="col-12 col-lg-8 col-xl-6">
-          <div v-if="user?.must_change_password" class="callout callout-highlight callout-warning mb-4">
-            <div class="callout-title d-flex align-items-center">
-              <BIIcon name="it-warning-circle" size="sm" color="warning" class="me-2" />
-              Azione richiesta
-            </div>
-            <p class="mb-0">Per motivi di sicurezza, imposta una nuova password per il tuo account.</p>
-          </div>
-
-          <div class="card card-bg border-0 shadow-sm">
-            <div class="card-body p-4 p-lg-5">
-              <h1 class="h3 mb-3">Cambia password</h1>
-              <p class="text-muted mb-4">
-                Aggiorna credenziali prima di continuare. Password nuova deve essere diversa da quella attuale.
-              </p>
-
-              <form @submit.prevent="handleSubmit" class="d-grid gap-4">
-                <div class="password-field">
-                  <label for="current_password" class="form-label">Password attuale</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="current_password"
-                      v-model="formData.current_password"
-                      :type="showCurrent ? 'text' : 'password'"
-                      class="form-control"
-                      autocomplete="current-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showCurrent ? 'Nascondi password attuale' : 'Mostra password attuale'"
-                      @click="showCurrent = !showCurrent"
-                    >
-                      <BIIcon :name="showCurrent ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                </div>
-
-                <div class="password-field">
-                  <label for="new_password" class="form-label">Nuova password</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="new_password"
-                      v-model="formData.new_password"
-                      :type="showNew ? 'text' : 'password'"
-                      class="form-control"
-                      autocomplete="new-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showNew ? 'Nascondi nuova password' : 'Mostra nuova password'"
-                      @click="showNew = !showNew"
-                    >
-                      <BIIcon :name="showNew ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                  <div class="form-text">Minimo 8 caratteri.</div>
-                </div>
-
-                <div class="password-field">
-                  <label for="confirm_password" class="form-label">Conferma nuova password</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="confirm_password"
-                      v-model="formData.confirm_password"
-                      :type="showConfirm ? 'text' : 'password'"
-                      :class="{ 'is-invalid': formData.confirm_password && formData.confirm_password !== formData.new_password }"
-                      class="form-control"
-                      autocomplete="new-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showConfirm ? 'Nascondi conferma password' : 'Mostra conferma password'"
-                      @click="showConfirm = !showConfirm"
-                    >
-                      <BIIcon :name="showConfirm ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                </div>
-
-                <div v-if="errorMessage" class="alert alert-danger mb-0" role="alert">
-                  {{ errorMessage }}
-                </div>
-
-                <button
-                  type="submit"
-                  class="btn btn-primary w-100 py-2"
-                  :disabled="!canSubmit || isLoading"
-                >
-                  <span v-if="isLoading" class="spinner-border spinner-border-sm me-2"></span>
-                  {{ isLoading ? 'Aggiornamento in corso' : 'Aggiorna password' }}
-                </button>
-              </form>
-            </div>
-          </div>
-        </div>
-      </div>
-    </div>
-  </div>
-</template>
-
-<style scoped>
-.password-field {
-  display: grid;
-  gap: 0.5rem;
-}
-
-.password-field-control {
-  align-items: center;
-  background: #fff;
-  border: 1px solid #c5d0db;
-  border-radius: 8px;
-  display: grid;
-  gap: 0.5rem;
-  grid-template-columns: auto minmax(0, 1fr) auto;
-  padding-left: 0.875rem;
-}
-
-.password-field-control:focus-within {
-  border-color: #06c;
-  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.16);
-}
-
-.password-field-icon {
-  color: #5c6f82;
-}
-
-.password-field-control .form-control {
-  background: transparent;
-  border: 0;
-  border-radius: 0;
-  box-shadow: none;
-  min-width: 0;
-  padding-left: 0;
-  padding-right: 0;
-}
-
-.btn-password-toggle {
-  align-items: center;
-  color: #06c;
-  display: inline-flex;
-  height: 100%;
-  justify-content: center;
-  min-height: 3rem;
-  padding: 0 0.875rem;
-}
-
-.btn-password-toggle:hover,
-.btn-password-toggle:focus {
-  background: rgba(0, 102, 204, 0.08);
-  color: #06c;
-}
-</style>

app/pages/auth/cie/callback.vue

@@ -0,0 +1,119 @@
+<script setup lang="ts">
+import { onBeforeUnmount, onMounted, ref } from 'vue'
+
+definePageMeta({
+  middleware: 'guest'
+})
+
+useHead({ title: 'Accesso CIE - Visione' })
+
+const route = useRoute()
+const router = useRouter()
+const { fetchCieSession, handleLoginSuccess } = useAuth()
+
+const state = computed(() => {
+  const value = route.query.state
+  return typeof value === 'string' ? value : ''
+})
+
+const isLoading = ref(true)
+const errorMessage = ref('')
+const statusMessage = ref('Verifica dell’autenticazione CIE in corso...')
+
+let pollTimer: ReturnType<typeof setTimeout> | null = null
+let attempts = 0
+const maxAttempts = 30
+
+const stopPolling = () => {
+  if (pollTimer) {
+    clearTimeout(pollTimer)
+    pollTimer = null
+  }
+}
+
+const scheduleNextPoll = () => {
+  pollTimer = setTimeout(checkSession, 2000)
+}
+
+const checkSession = async () => {
+  if (!state.value) {
+    isLoading.value = false
+    errorMessage.value = 'Sessione CIE non valida: parametro state mancante.'
+    return
+  }
+
+  attempts += 1
+
+  try {
+    const res = await fetchCieSession(state.value)
+
+    if (res.status === 'authenticated' && res.auth?.token) {
+      stopPolling()
+      await handleLoginSuccess(res.auth.token)
+      return
+    }
+
+    if (['failed', 'expired', 'cancelled', 'error'].includes(res.status)) {
+      stopPolling()
+      isLoading.value = false
+      errorMessage.value = 'Autenticazione CIE non completata. Riprova dal login.'
+      return
+    }
+
+    if (attempts >= maxAttempts) {
+      stopPolling()
+      isLoading.value = false
+      errorMessage.value = 'Tempo di attesa scaduto durante la verifica CIE. Riprova.'
+      return
+    }
+
+    statusMessage.value = 'Autenticazione completata sul provider. Attendo conferma finale da Visione...'
+    scheduleNextPoll()
+  } catch (err: any) {
+    stopPolling()
+    isLoading.value = false
+    errorMessage.value = err.data?.message || 'Errore durante la verifica della sessione CIE.'
+  }
+}
+
+onMounted(() => {
+  checkSession()
+})
+
+onBeforeUnmount(() => {
+  stopPolling()
+})
+</script>
+
+<template>
+  <div class="d-flex align-items-center bg-light py-5">
+    <div class="container">
+      <div class="row justify-content-center">
+        <div class="col-12 col-md-8 col-lg-6">
+          <div class="card card-bg shadow-sm">
+            <div class="card-body p-4 p-md-5 text-center">
+              <BIIcon name="it-card" size="xl" color="primary" class="mb-3" />
+              <h1 class="h3 font-weight-bold mb-3">Accesso con CIE</h1>
+
+              <div v-if="isLoading" class="py-3">
+                <div class="spinner-border text-primary mb-3" role="status">
+                  <span class="visually-hidden">Caricamento...</span>
+                </div>
+                <p class="text-muted mb-0">{{ statusMessage }}</p>
+              </div>
+
+              <div v-else-if="errorMessage" class="py-2">
+                <div class="alert alert-danger text-start mb-4" role="alert">
+                  {{ errorMessage }}
+                </div>
+                <button class="btn btn-primary" @click="router.push('/auth/login')">
+                  Torna al login
+                </button>
+              </div>
+            </div>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>

app/pages/auth/login.vue

@@ -7,20 +7,18 @@ definePageMeta({
 
 useHead({ title: 'Accedi - Visione' })
 
-const { requestOtp, verifyOtp, loginWithPassword, handleLoginSuccess } = useAuth()
+const runtimeConfig = useRuntimeConfig()
-const router = useRouter()
+const { requestOtp, verifyOtp, handleLoginSuccess, startCieLogin } = useAuth()
 
-// UI State
-const loginMethod = ref<'otp' | 'password'>('otp')
 const otpStep = ref<1 | 2>(1)
 const isLoading = ref(false)
+const isCieLoading = ref(false)
 const errorMessage = ref('')
 
-
 const email = ref('')
-const password = ref('')
 const otpCode = ref('')
-const showPassword = ref(false)
+
+const cieCallbackUrl = `${runtimeConfig.public.url}/auth/cie/callback`
 
 const handleRequestOtp = async () => {
   isLoading.value = true
@@ -48,16 +46,18 @@ const handleVerifyOtp = async () => {
   }
 }
 
-const handlePasswordLogin = async () => {
+const handleCieLogin = async () => {
-  isLoading.value = true
+  isCieLoading.value = true
   errorMessage.value = ''
   try {
-    const res = await loginWithPassword({ email: email.value, password: password.value })
+    const res = await startCieLogin(cieCallbackUrl)
-    await handleLoginSuccess(res.token)
+    await navigateTo(res.authorization_url, {
+      external: true,
+      replace: true,
+    })
   } catch (err: any) {
-    errorMessage.value = 'Credenziali non valide.'
+    errorMessage.value = err.data?.message || 'Avvio autenticazione CIE non riuscito. Riprova.'
-  } finally {
+    isCieLoading.value = false
-    isLoading.value = false
   }
 }
 </script>
@@ -79,9 +79,14 @@ const handlePasswordLogin = async () => {
             <div class="card-body p-4 p-md-5">
 
               
-              <button class="btn btn-primary w-100 mb-4 d-flex align-items-center justify-content-center gap-2" disabled title="Integrazione CIE prevista per la fase successiva">
+              <button
+                class="btn btn-primary w-100 mb-4 d-flex align-items-center justify-content-center gap-2"
+                :disabled="isCieLoading || isLoading"
+                @click="handleCieLogin"
+              >
+                <span v-if="isCieLoading" class="spinner-border spinner-border-sm" role="status" aria-hidden="true"></span>
                 <BIIcon name="it-card" size="sm" color="white" />
-                Entra con CIE (Presto disponibile)
+                Entra con CIE
               </button>
 
               <div class="d-flex align-items-center my-4">
@@ -94,8 +99,6 @@ const handlePasswordLogin = async () => {
                 {{ errorMessage }}
               </div>
 
-              
-              <div v-if="loginMethod === 'otp'">
               <form v-if="otpStep === 1" @submit.prevent="handleRequestOtp">
                 <div class="form-group mb-4">
                   <input type="email" class="form-control" id="email" v-model="email" required>
@@ -123,44 +126,6 @@ const handlePasswordLogin = async () => {
                   <a href="#" class="small text-decoration-none" @click.prevent="otpStep = 1">Modifica indirizzo email</a>
                 </div>
               </form>
-              </div>
-
-              
-              <form v-else @submit.prevent="handlePasswordLogin">
-                <div class="form-group mb-4">
-                  <input type="email" class="form-control" id="emailPwd" v-model="email" required>
-                  <label for="emailPwd" :class="{ 'active': email.length > 0 }">Indirizzo Email</label>
-                </div>
-
-               
-                <div class="form-group mb-4 position-relative">
-                  <input :type="showPassword ? 'text' : 'password'" class="form-control pe-5" id="password" v-model="password" required>
-                  <label for="password" :class="{ 'active': password.length > 0 }">Password</label>
-
-                  <button
-                      type="button"
-                      class="btn bg-transparent border-0 shadow-none position-absolute p-2"
-                      style="right: 0; top: 2px; z-index: 10;"
-                      @click="showPassword = !showPassword"
-                      :aria-pressed="showPassword"
-                      aria-label="Mostra/Nascondi password"
-                  >
-                    <BIIcon :name="showPassword ? 'it-password-visible' : 'it-password-invisible'" color="primary" size="sm" />
-                  </button>
-                </div>
-
-                <button type="submit" class="btn btn-primary w-100 mb-3" :disabled="isLoading">
-                  <span v-if="isLoading" class="spinner-border spinner-border-sm me-2" role="status"></span>
-                  Accedi
-                </button>
-              </form>
-
-              
-              <div class="text-center mt-4">
-                <a href="#" class="small text-decoration-none" @click.prevent="loginMethod = loginMethod === 'otp' ? 'password' : 'otp'; errorMessage = ''">
-                  {{ loginMethod === 'otp' ? 'Vuoi usare la password? Clicca qui' : 'Usa il login sicuro senza password (OTP)' }}
-                </a>
-              </div>
 
             </div>
           </div>

app/pages/auth/register.vue

@@ -14,14 +14,12 @@ const router = useRouter()
 const isLoading = ref(false)
 const errorMessage = ref('')
 const successMessage = ref(false)
-const showPassword = ref(false)
 
 const form = ref({
   first_name: '',
   last_name: '',
   fiscal_code: '',
   email: '',
-  password: '',
   phone: '',
   privacy: false
 })
@@ -56,7 +54,6 @@ const handleRegister = async () => {
       last_name: form.value.last_name,
       fiscal_code: fiscalCode,
       email: form.value.email,
-      password: form.value.password,
       phone: form.value.phone || undefined
     })
 
@@ -89,7 +86,7 @@ const handleRegister = async () => {
             <div class="card-body p-4 p-md-5">
 
               <div v-if="successMessage" class="alert alert-success" role="alert">
-                Registrazione completata con successo! Reindirizzamento al login...
+                Registrazione completata con successo! Reindirizzamento all'accesso con OTP...
               </div>
 
               <div v-if="errorMessage" class="alert alert-danger mb-4" role="alert">
@@ -100,7 +97,6 @@ const handleRegister = async () => {
 
                 <h2 class="h5 text-primary font-weight-bold mb-4 border-bottom pb-2">Dati Anagrafici</h2>
 
-                <!-- FIX LAYOUT: form-group separato da col -->
                 <div class="row mb-4">
                   <div class="col-12 col-md-6 mb-4 mb-md-0">
                     <div class="form-group">
@@ -122,33 +118,15 @@ const handleRegister = async () => {
                   <small class="form-text text-muted">Sarà utilizzato come identificativo univoco nel sistema PA.</small>
                 </div>
 
-                <h2 class="h5 text-primary font-weight-bold mt-5 mb-4 border-bottom pb-2">Credenziali e Contatti</h2>
+                <h2 class="h5 text-primary font-weight-bold mt-5 mb-4 border-bottom pb-2">Contatti</h2>
 
                 <div class="row mb-4">
-                  <div class="col-12 col-md-6 mb-4 mb-md-0">
+                  <div class="col-12">
-                    <div class="form-group">
+                    <div class="form-group position-relative">
                       <input type="email" class="form-control" id="regEmail" v-model="form.email" required>
                       <label for="regEmail" :class="{ 'active': form.email.length > 0 }">Indirizzo Email</label>
                     </div>
                   </div>
-                  <div class="col-12 col-md-6">
-                    <!-- INPUT PASSWORD FIXATO -->
-                    <div class="form-group position-relative">
-                      <input :type="showPassword ? 'text' : 'password'" class="form-control pe-5" id="regPwd" v-model="form.password" required minlength="10">
-                      <label for="regPwd" :class="{ 'active': form.password.length > 0 }">Password (min. 10 crt)</label>
-
-                      <button
-                          type="button"
-                          class="btn bg-transparent border-0 shadow-none position-absolute p-2"
-                          style="right: 0; top: 2px; z-index: 10;"
-                          @click="showPassword = !showPassword"
-                          :aria-pressed="showPassword"
-                          aria-label="Mostra/Nascondi password"
-                      >
-                        <BIIcon :name="showPassword ? 'it-password-visible' : 'it-password-invisible'" color="primary" size="sm" />
-                      </button>
-                    </div>
-                  </div>
                 </div>
 
                 <div class="form-group mb-5">
@@ -157,7 +135,6 @@ const handleRegister = async () => {
                   <small class="form-text text-muted">Faciliterà il contatto da parte degli operatori comunali in caso di intervento.</small>
                 </div>
 
-                <!-- Privacy Checkbox -->
                 <div class="form-check mb-4">
                   <input class="form-check-input" type="checkbox" id="privacyCheck" v-model="form.privacy" required>
                   <label class="form-check-label small" for="privacyCheck">
@@ -169,6 +146,9 @@ const handleRegister = async () => {
                   <span v-if="isLoading" class="spinner-border spinner-border-sm me-2" role="status"></span>
                   Registra Profilo
                 </button>
+                <p class="small text-muted mt-3 mb-0">
+                  Dopo la registrazione potrai accedere usando OTP via email o CIE, quando disponibile.
+                </p>
               </form>
 
             </div>
@@ -185,8 +165,4 @@ const handleRegister = async () => {
 </template>
 
 <style scoped>
-/* Previene che il testo finisca sotto l'icona */
-.pe-5 {
-  padding-right: 3rem !important;
-}
 </style>

app/pages/dashboard/index.vue

@@ -10,24 +10,21 @@ import OperatorDashboard from '~/components/dashboard/OperatorDashboard.vue'
 import AdminDashboard from '~/components/dashboard/AdminDashboard.vue'
 
 const currentDashboard = computed(() => {
-  const role = user.value?.role?.toUpperCase()
+  if (isCitizen(user.value?.role)) return CitizenDashboard
-  if (role === 'CITIZEN') return CitizenDashboard
+  if (isOperator(user.value?.role)) return OperatorDashboard
-  if (role === 'OPERATOR') return OperatorDashboard
+  if (isAdmin(user.value?.role)) return AdminDashboard
-  if (role === 'ADMIN') return AdminDashboard
   return null
 })
 
 const heroTitle = computed(() => {
-  const role = user.value?.role?.toUpperCase()
+  if (isAdmin(user.value?.role)) return 'Pannello Admin'
-  if (role === 'ADMIN') return 'Pannello Admin'
+  if (isOperator(user.value?.role)) return 'Gestione Operativa'
-  if (role === 'OPERATOR') return 'Gestione Operativa'
   return 'Dashboard'
 })
 
 const heroSubtitle = computed(() => {
-  const role = user.value?.role?.toUpperCase()
+  if (isAdmin(user.value?.role)) return 'Accesso amministrativo per configurazioni, utenti e moderazione'
-  if (role === 'ADMIN') return 'Accesso amministrativo per configurazioni, utenti e moderazione'
+  if (isOperator(user.value?.role)) return 'Prendi in carico e gestisci le segnalazioni in corso'
-  if (role === 'OPERATOR') return 'Prendi in carico e gestisci le segnalazioni in corso'
   return 'Riepilogo rapido delle tue segnalazioni e dei punti cittadino'
 })
 </script>

app/pages/info.vue

@@ -1,5 +1,4 @@
 <script setup lang="ts">
-// La pagina è statica, usiamo solo i componenti UI
 useHead({
   title: 'Informazioni sul Progetto - Visione',
 })
@@ -7,7 +6,6 @@ useHead({
 
 <template>
   <div>
-    <!-- HERO SECTION (Senza pt-5/mt-5 come richiesto) -->
     <div class="it-hero-wrapper it-primary">
       <div class="container">
         <div class="row">
@@ -24,72 +22,79 @@ useHead({
       </div>
     </div>
 
-    <!-- OBIETTIVO DEL PROGETTO -->
     <div class="container my-5 py-3">
       <div class="row">
         <div class="col-12 col-lg-8 offset-lg-2">
           <h2 class="mb-4 font-weight-bold">Migliorare la qualità della vita in città</h2>
           <p class="lead text-muted">
-            Visione nasce dall'esigenza di fornire alle amministrazioni comunali uno strumento moderno per mappare, gestire e risolvere disservizi presenti sul territorio (buche stradali, illuminazione guasta, rifiuti abbandonati).
+            Visione nasce dall'esigenza di fornire alle amministrazioni comunali uno strumento moderno per mappare,
+            gestire e risolvere disservizi presenti sul territorio (buche stradali, illuminazione guasta, rifiuti
+            abbandonati).
           </p>
           <p>
-            Il sistema non si limita a raccogliere dati, ma automatizza l'assegnazione alle squadre operative competenti tramite logiche geospaziali, traccia l'intero ciclo di vita della segnalazione e restituisce trasparenza ai cittadini tramite un portale Open Data dedicato.
+            Il sistema non si limita a raccogliere dati, ma automatizza l'assegnazione alle squadre operative competenti
+            tramite logiche geospaziali, traccia l'intero ciclo di vita della segnalazione e restituisce trasparenza ai
+            cittadini tramite un portale Open Data dedicato.
           </p>
         </div>
       </div>
     </div>
 
-    <!-- RUOLI E FUNZIONALITÀ (Card Grid) -->
     <div class="bg-light py-5">
       <div class="container">
         <h2 class="text-center mb-5 font-weight-bold">Come funziona il sistema</h2>
         <div class="row">
 
-          <!-- Cittadino -->
           <div class="col-12 col-md-4 mb-4">
             <div class="card-wrapper card-space h-100">
               <div class="card card-bg h-100">
                 <div class="card-body">
-                  <BIIcon name="it-user" size="xl" color="primary" class="mb-3" />
+                  <BIIcon class="mb-3" color="primary" name="it-user" size="xl"/>
                   <h3 class="card-title h5 font-weight-bold">Cittadini</h3>
                   <p class="card-text text-muted">
-                    Tramite autenticazione sicura (OTP via email o CIE), i cittadini possono inviare segnalazioni geolocalizzate complete di foto.
+                    Tramite autenticazione sicura (OTP via email o CIE), i cittadini possono inviare segnalazioni
+                    geolocalizzate complete di foto.
                     <br><br>
-                    Per incentivare la partecipazione, è integrato un sistema di <strong>gamification</strong>: ogni segnalazione valida e risolta fa guadagnare Punti Cittadino, premiando la cittadinanza attiva. Possono inoltre chattare con gli operatori e lasciare un feedback finale.
+                    Per incentivare la partecipazione, è integrato un sistema di <strong>gamification</strong>: ogni
+                    segnalazione valida e risolta fa guadagnare Punti Cittadino, premiando la cittadinanza attiva.
+                    Possono inoltre chattare con gli operatori e lasciare un feedback finale.
                   </p>
                 </div>
               </div>
             </div>
           </div>
 
-          <!-- Operatore -->
           <div class="col-12 col-md-4 mb-4">
             <div class="card-wrapper card-space h-100">
               <div class="card card-bg h-100">
                 <div class="card-body">
-                  <BIIcon name="it-tool" size="xl" color="primary" class="mb-3" />
+                  <BIIcon class="mb-3" color="primary" name="it-tool" size="xl"/>
                   <h3 class="card-title h5 font-weight-bold">Operatori e Squadre</h3>
                   <p class="card-text text-muted">
-                    Il personale comunale visualizza una dashboard con le segnalazioni in ingresso. Possono prenderle in carico, comunicare con l'utente e assegnarle alle squadre di intervento sul territorio.
+                    Il personale comunale visualizza una dashboard con le segnalazioni in ingresso. Possono prenderle in
+                    carico, comunicare con l'utente e assegnarle alle squadre di intervento sul territorio.
                     <br><br>
-                    Il sistema gestisce l'intero flusso di stato: da <em>Aperta</em> a <em>In Revisione</em>, fino a <em>In Lavorazione</em> e <em>Risolta</em>.
+                    Il sistema gestisce l'intero flusso di stato: da <em>Aperta</em> a <em>In Revisione</em>, fino a
+                    <em>In Lavorazione</em> e <em>Risolta</em>.
                   </p>
                 </div>
               </div>
             </div>
           </div>
 
-          <!-- Amministratore -->
           <div class="col-12 col-md-4 mb-4">
             <div class="card-wrapper card-space h-100">
               <div class="card card-bg h-100">
                 <div class="card-body">
-                  <BIIcon name="it-settings" size="xl" color="primary" class="mb-3" />
+                  <BIIcon class="mb-3" color="primary" name="it-settings" size="xl"/>
                   <h3 class="card-title h5 font-weight-bold">Amministrazione</h3>
                   <p class="card-text text-muted">
-                    Gli amministratori hanno il controllo completo della piattaforma. Possono definire le aree urbane tramite poligoni GeoJSON, gestire i permessi degli utenti, supervisionare i feedback e moderare eventuali abusi.
+                    Gli amministratori hanno il controllo completo della piattaforma. Possono definire le aree urbane
+                    tramite poligoni GeoJSON, gestire i permessi degli utenti, supervisionare i feedback e moderare
+                    eventuali abusi.
                     <br><br>
-                    Hanno inoltre accesso a statistiche avanzate per individuare le criticità sul territorio e monitorare i tempi medi di risoluzione.
+                    Hanno inoltre accesso a statistiche avanzate per individuare le criticità sul territorio e
+                    monitorare i tempi medi di risoluzione.
                   </p>
                 </div>
               </div>
@@ -100,44 +105,46 @@ useHead({
       </div>
     </div>
 
-    <!-- STACK TECNOLOGICO E FILOSOFIA -->
     <div class="container my-5 py-4">
       <div class="row align-items-center">
         <div class="col-12 col-lg-6 mb-4 mb-lg-0">
           <h2 class="font-weight-bold mb-4">Tecnologia e Indipendenza</h2>
           <ul class="it-list">
             <li>
-              <BIIcon name="it-code-circle" color="primary" class="me-2" />
+              <BIIcon class="me-2" color="primary" name="it-code-circle"/>
-              <strong>Architettura:</strong> Frontend reattivo e multipiattaforma sviluppato in <em>Vue.js/Nuxt 3</em>. Backend ad altissime prestazioni scritto in <em>C++</em> utilizzando il framework <em>Drogon</em>.
+              <strong>Architettura:</strong> Frontend reattivo e multipiattaforma sviluppato in <em>Vue.js/Nuxt 3</em>.
+              Backend ad altissime prestazioni scritto in <em>C++</em> utilizzando il framework <em>Drogon</em>.
             </li>
             <li class="mt-3">
-              <BIIcon name="it-lock" color="primary" class="me-2" />
+              <BIIcon class="me-2" color="primary" name="it-lock"/>
-              <strong>Sicurezza:</strong> Login Passwordless (OTP nativo) e sistema di autorizzazione Role-Based basato su token JWT.
+              <strong>Sicurezza:</strong> Accesso con OTP e sistema di autorizzazione Role-Based basato su token JWT.
             </li>
             <li class="mt-3">
-              <BIIcon name="it-piu" color="primary" class="me-2" />
+              <BIIcon class="me-2" color="primary" name="it-piu"/>
-              <strong>Open Data:</strong> Piena aderenza alle linee guida AGID sulla trasparenza, con esportazione di dati anonimizzati accessibili al pubblico.
+              <strong>Open Data:</strong> Piena aderenza alle linee guida AGID sulla trasparenza, con esportazione di
+              dati anonimizzati accessibili al pubblico.
             </li>
           </ul>
         </div>
         <div class="col-12 col-lg-5 offset-lg-1">
-          <!-- Callout Ribellione Gitea -->
           <div class="callout callout-highlight callout-warning">
             <div class="callout-title">
-              <BIIcon name="it-warning-circle" />
+              <BIIcon name="it-warning-circle"/>
               Un approccio etico al codice sorgente
             </div>
             <p>
-              In risposta alle policy sempre più aggressive delle grandi piattaforme commerciali riguardo l'addestramento non consensuale di modelli di Intelligenza Artificiale sui repository privati, lo sviluppo di questo progetto è ospitato su un'istanza <strong>self-hosted di Gitea</strong>.
+              In risposta alle policy sempre più aggressive delle grandi piattaforme commerciali riguardo
+              l'addestramento non consensuale di modelli di Intelligenza Artificiale sui repository privati, lo sviluppo
+              di questo progetto è ospitato su un'istanza <strong>self-hosted di Gitea</strong>.
               <br><br>
-              Una scelta di principio per garantire il controllo totale, la privacy e la vera sovranità sui dati e sul codice.
+              Una scelta di principio per garantire il controllo totale, la privacy e la vera sovranità sui dati e sul
+              codice.
             </p>
           </div>
         </div>
       </div>
     </div>
 
-    <!-- CREDITI ACCADEMICI (Footer Style Callout) -->
     <div class="container mb-5 pb-5">
       <div class="card-wrapper card-space">
         <div class="card card-bg border-start border-primary border-5">
@@ -146,7 +153,8 @@ useHead({
               <div class="col-12 col-md-8">
                 <h4 class="h5 font-weight-bold text-primary mb-2">Crediti Accademici</h4>
                 <p class="mb-1">
-                  Questo progetto è stato realizzato nell'ambito del corso di <strong>Laboratorio di Programmazione</strong> (tenuto dal Prof. Vessio).
+                  Questo progetto è stato realizzato nell'ambito del corso di <strong>Laboratorio di
+                  Programmazione</strong> (tenuto dal Prof. Vessio).
                 </p>
                 <p class="text-muted small mb-0">
                   Università degli Studi di Bari "Aldo Moro" - Dipartimento di Informatica.
@@ -170,7 +178,6 @@ useHead({
 </template>
 
 <style scoped>
-/* Leggere correzioni stilistiche per le liste */
 .it-list {
   list-style-type: none;
   padding-left: 0;

app/pages/note-legali.vue

@@ -6,7 +6,6 @@ useHead({
 
 <template>
   <div>
-    <!-- HERO SECTION -->
     <div class="it-hero-wrapper it-primary">
       <div class="container">
         <div class="row">
@@ -22,7 +21,6 @@ useHead({
       </div>
     </div>
 
-    <!-- CONTENUTO PRINCIPALE -->
     <div class="container my-5 py-4">
       <div class="row">
         <div class="col-12 col-lg-8 offset-lg-2">
@@ -53,7 +51,6 @@ useHead({
             Gli operatori e gli amministratori di sistema si riservano il diritto di moderare, nascondere o rimuovere segnalazioni contenenti materiale inappropriato, offensivo, non pertinente o illegale. L'abuso ripetuto del sistema comporterà il ban permanente dell'account dell'utente, associato al proprio Codice Fiscale.
           </p>
 
-          <!-- DISCLAIMER ACCADEMICO -->
           <div class="callout callout-highlight callout-info mt-5">
             <div class="callout-title">
               <BIIcon name="it-info-circle" />

app/pages/notifications.vue

@@ -92,7 +92,6 @@ const getNotificationColor = (type: string): string => {
 
 <template>
   <div>
-    <!-- HERO -->
     <div class="bg-light border-bottom py-4 mb-4">
       <div class="container">
         <div class="row">
@@ -109,18 +108,15 @@ const getNotificationColor = (type: string): string => {
       </div>
     </div>
 
-    <!-- CONTENUTO -->
     <div class="container mb-5">
       <div class="row">
         <div class="col-12 col-lg-10 offset-lg-1">
 
-          <!-- FILTRI (Opzionale) -->
           <div class="d-flex gap-2 mb-4">
             <button class="btn btn-sm btn-outline-primary active">Tutti</button>
             <button class="btn btn-sm btn-outline-secondary">Solo non letti</button>
           </div>
 
-          <!-- LISTA NOTIFICHE -->
           <div v-if="notifications.length === 0" class="text-center py-5">
             <BIIcon name="it-bell" size="xl" color="info" class="mb-3 d-block" />
             <h6 class="text-muted">Nessuna notifica</h6>
@@ -140,14 +136,12 @@ const getNotificationColor = (type: string): string => {
               @click="handleNotificationClick(notification)"
             >
               <div class="d-flex align-items-start gap-3">
-                <!-- ICONA -->
                 <div class="flex-shrink-0 mt-1">
                   <div class="rounded-circle p-2" :class="`bg-${getNotificationColor(notification.type)}`" style="width: 40px; height: 40px; display: flex; align-items: center; justify-content: center;">
                     <BIIcon :name="getNotificationIcon(notification.type)" size="sm" color="white" />
                   </div>
                 </div>
 
-                <!-- CONTENUTO -->
                 <div class="flex-grow-1">
                   <div class="d-flex align-items-start justify-content-between">
                     <div>
@@ -162,13 +156,11 @@ const getNotificationColor = (type: string): string => {
                       </small>
                     </div>
 
-                    <!-- INDICATORE NON LETTO -->
                     <div v-if="!notification.read_at" class="flex-shrink-0">
                       <span class="badge bg-primary rounded-pill">Nuovo</span>
                     </div>
                   </div>
 
-                  <!-- AZIONI RAPIDE -->
                   <div v-if="notification.report_id" class="mt-2 d-flex gap-2">
                     <NuxtLink :to="`/reports/${notification.report_id}`" class="btn btn-sm btn-outline-primary">
                       <BIIcon name="it-arrow-right" size="xs" class="me-1" />
@@ -188,7 +180,6 @@ const getNotificationColor = (type: string): string => {
             </button>
           </div>
 
-          <!-- PAGINATION -->
           <Pagination
             v-if="notifications.length > 0"
             :current-page="page"

app/pages/open-data.vue

@@ -1,27 +1,22 @@
 <script setup lang="ts">
 import { computed, nextTick, onBeforeUnmount, ref, watch } from 'vue'
-import type { Map as LeafletMap, CircleMarker, LatLngBoundsExpression } from 'leaflet'
+import type { CircleMarker, LatLngBoundsExpression, Map as LeafletMap } from 'leaflet'
 import { BARI_BOUNDS, BARI_CENTER, isWithinBariBounds } from '~/utils/bari'
 
-// 1. API Fetching Logic
 const { getOpenDataReports } = usePublic()
 
-// Reactive pagination state
 const currentPage = ref(1)
 const perPage = ref(9)
-
-// Fetch data automatically when currentPage changes
 const { data: openDataResponse, pending } = await useAsyncData(
     'open-data-reports',
     () => getOpenDataReports({ page: currentPage.value, per_page: perPage.value }),
-    { watch: [currentPage] } // Nuxt will re-fetch when currentPage changes
+    { watch: [currentPage] }
 )
 
 const visibleReports = computed(() =>
     (openDataResponse.value?.reports || []).filter((report) => isWithinBariBounds(report.latitude, report.longitude))
 )
 
-// Pagination logic: If we receive less items than `perPage`, we are on the last page.
 const isLastPage = computed(() => {
   if (!openDataResponse.value?.reports) return true
   return openDataResponse.value.reports.length < perPage.value
@@ -34,19 +29,20 @@ const prevPage = () => {
   if (currentPage.value > 1) currentPage.value--
 }
 
-// 2. View Toggle (Grid vs Map)
 const currentView = ref<'grid' | 'map'>('grid')
 const mapContainer = ref<HTMLElement | null>(null)
 let leaflet: typeof import('leaflet') | null = null
 let map: LeafletMap | null = null
 let markers: CircleMarker[] = []
 
-// 3. Helper to style status badges
 const getStatusBadge = (status: string) => {
   switch (status) {
-    case 'RESOLVED': return { class: 'bg-success', text: 'Risolto', icon: 'it-check-circle' }
+    case 'RESOLVED':
-    case 'CLOSED': return { class: 'bg-secondary', text: 'Chiuso', icon: 'it-lock' }
+      return { class: 'bg-success', text: 'Risolto', icon: 'it-check-circle' }
-    default: return { class: 'bg-info', text: status, icon: 'it-info-circle' }
+    case 'CLOSED':
+      return { class: 'bg-secondary', text: 'Chiuso', icon: 'it-lock' }
+    default:
+      return { class: 'bg-info', text: status, icon: 'it-info-circle' }
   }
 }
 
@@ -126,9 +122,13 @@ const initMap = async () => {
 watch(currentView, async (view) => {
   if (view !== 'map') return
   await nextTick()
+  // Inizializza la mappa se non esiste, altrimenti aggiornane solo dimensioni e dati
+  if (!map) {
     await initMap()
-  map?.invalidateSize()
+  } else {
+    map.invalidateSize()
     await renderMapMarkers()
+  }
 })
 
 watch(visibleReports, async () => {
@@ -146,7 +146,6 @@ onBeforeUnmount(() => {
 
 <template>
   <div>
-    <!-- HERO SECTION (Small version for internal pages) -->
     <div class="it-hero-wrapper it-primary">
       <div class="container">
         <div class="row">
@@ -162,19 +161,15 @@ onBeforeUnmount(() => {
       </div>
     </div>
 
-    <!-- MAIN CONTENT -->
     <div class="container my-5">
-
-      <!-- TOOLBAR: View Toggles & Export -->
       <div class="row align-items-center mb-5 pb-3 border-bottom">
         <div class="col-12 col-md-6 mb-3 mb-md-0 d-flex gap-2">
-          <!-- View Toggle Buttons -->
           <button
               class="btn btn-sm"
               :class="currentView === 'grid' ? 'btn-primary' : 'btn-outline-primary'"
               @click="currentView = 'grid'"
           >
-            <BIIcon name="it-grid" size="sm" class="me-1" :color="currentView === 'grid' ? 'white' : 'primary'" />
+            <BIIcon :color="currentView === 'grid' ? 'white' : 'primary'" class="me-1" name="it-grid" size="sm"/>
             Griglia Dati
           </button>
           <button
@@ -182,39 +177,37 @@ onBeforeUnmount(() => {
               :class="currentView === 'map' ? 'btn-primary' : 'btn-outline-primary'"
               @click="currentView = 'map'"
           >
-            <BIIcon name="it-map-marker" size="sm" class="me-1" :color="currentView === 'map' ? 'white' : 'primary'" />
+            <BIIcon :color="currentView === 'map' ? 'white' : 'primary'" class="me-1" name="it-map-marker" size="sm"/>
             Mappa
           </button>
         </div>
         <div class="col-12 col-md-6 text-md-end">
-          <!-- Fake Export CTA (Very common in Open Data portals) -->
           <button class="btn btn-sm btn-outline-secondary" title="Scarica dataset in formato JSON">
-            <BIIcon name="it-download" size="sm" class="me-1" />
+            <BIIcon class="me-1" name="it-download" size="sm"/>
             Scarica JSON
           </button>
         </div>
       </div>
 
-      <!-- LOADER -->
+      <!-- Sostituito v-else-if con v-show -->
       <div v-if="pending" class="d-flex justify-content-center my-5 py-5">
         <div class="progress-spinner progress-spinner-active" role="status">
           <span class="visually-hidden">Caricamento in corso...</span>
         </div>
       </div>
 
-      <!-- GRID VIEW -->
+      <div v-show="!pending && currentView === 'grid'">
-      <div v-else-if="currentView === 'grid'">
         <div class="row" v-if="openDataResponse?.reports && openDataResponse.reports.length > 0">
           <div class="col-12 col-md-6 col-lg-4 mb-4" v-for="report in visibleReports" :key="report.id">
-            <!-- Strict BI Card -->
             <div class="card-wrapper card-space h-100">
               <div class="card card-bg h-100 shadow-sm">
                 <div class="card-body d-flex flex-column">
 
                   <div class="d-flex justify-content-between align-items-start mb-3">
                     <div class="category-top m-0">
-                      <span class="badge rounded-pill text-white px-3 py-1" :class="getStatusBadge(report.status).class">
+                      <span :class="getStatusBadge(report.status).class"
-                        <BIIcon :name="getStatusBadge(report.status).icon" size="xs" color="white" class="me-1" />
+                            class="badge rounded-pill text-white px-3 py-1">
+                        <BIIcon :name="getStatusBadge(report.status).icon" class="me-1" color="white" size="xs"/>
                         {{ getStatusBadge(report.status).text }}
                       </span>
                     </div>
@@ -224,7 +217,7 @@ onBeforeUnmount(() => {
                   <h3 class="card-title h5 font-weight-bold">{{ report.category_name }}</h3>
 
                   <p class="card-text text-muted mb-4">
-                    <BIIcon name="it-map-marker-circle" size="sm" class="me-1" />
+                    <BIIcon class="me-1" name="it-map-marker-circle" size="sm"/>
                     {{ report.area_name || 'Area comunale non specificata' }}
                   </p>
 
@@ -251,12 +244,11 @@ onBeforeUnmount(() => {
           Nessun dato pubblico disponibile al momento.
         </div>
 
-        <!-- BOOTSTRAP ITALIA PAGINATION -->
         <nav class="pagination-wrapper justify-content-center mt-5" aria-label="Navigazione pagine open data">
           <ul class="pagination">
             <li class="page-item" :class="{ disabled: currentPage === 1 }">
               <a class="page-link" href="#" tabindex="-1" aria-disabled="true" @click.prevent="prevPage">
-                <BIIcon name="it-chevron-left" size="sm" />
+                <BIIcon name="it-chevron-left" size="sm"/>
                 <span class="visually-hidden">Pagina precedente</span>
               </a>
             </li>
@@ -266,15 +258,14 @@ onBeforeUnmount(() => {
             <li class="page-item" :class="{ disabled: isLastPage }">
               <a class="page-link" href="#" @click.prevent="nextPage">
                 <span class="visually-hidden">Pagina successiva</span>
-                <BIIcon name="it-chevron-right" size="sm" />
+                <BIIcon name="it-chevron-right" size="sm"/>
               </a>
             </li>
           </ul>
         </nav>
       </div>
 
-      <!-- MAP VIEW -->
+      <div v-show="!pending && currentView === 'map'" class="map-view-wrapper">
-      <div v-else-if="currentView === 'map'" class="map-view-wrapper">
         <div class="d-flex justify-content-between align-items-center flex-wrap gap-2 mb-3">
           <p class="text-muted mb-0">Mappa pubblica delle segnalazioni nell'area di Bari.</p>
           <span class="badge bg-light text-dark border">{{ visibleReports.length }} punti</span>
@@ -289,17 +280,18 @@ onBeforeUnmount(() => {
 </template>
 
 <style scoped>
-/* Ensures the cards inside the grid stretch to equal heights */
 .card-wrapper {
   height: 100%;
 }
+
 .card-bg {
-  border: 1px solid rgba(0,0,0,0.05);
+  border: 1px solid rgba(0, 0, 0, 0.05);
   transition: transform 0.2s ease, box-shadow 0.2s ease;
 }
+
 .card-bg:hover {
   transform: translateY(-2px);
-  box-shadow: 0 4px 15px rgba(0,0,0,0.1) !important;
+  box-shadow: 0 4px 15px rgba(0, 0, 0, 0.1) !important;
 }
 
 .open-data-map {

app/pages/operator/reports/[id].vue

@@ -17,10 +17,9 @@ if (!reportId) {
 }
 
 const { getReportDetail, getMessages, addMessage, flagMessage } = useReports()
-const { getInterventionSummary, updateReportStatus, assignTeam, getTeams } = useOperator()
+const { getInterventionSummary, updateReportStatus, assignTeam, getTeams, createInterventionLink, revokeInterventionLink } = useOperator()
 const { user } = useAuth()
 
-// Dati principali
 const { data: reportData, refresh: refreshReport } = await useAsyncData(`op-report-${reportId}`, () => getReportDetail(reportId))
 const { data: messagesData, refresh: refreshMessages } = await useAsyncData(`op-messages-${reportId}`, () => getMessages(reportId))
 const { data: summaryData, refresh: refreshSummary } = await useAsyncData(`op-summary-${reportId}`, () => getInterventionSummary(reportId))
@@ -33,6 +32,7 @@ const messages = computed(() => (messagesData.value as any)?.messages || [])
 const summary = computed(() => (summaryData.value as any)?.summary)
 const summaryMedia = computed(() => (summaryData.value as any)?.media || [])
 const teams = computed(() => teamsData.value?.teams || [])
+
 const statusMeta: Record<string, string> = {
   OPEN: 'Aperta',
   UNDER_REVIEW: 'In revisione',
@@ -43,19 +43,15 @@ const statusMeta: Record<string, string> = {
   CLOSED: 'Chiusa'
 }
 
-// Form Cambia Stato
+const statusTransitions: Record<string, string[]> = {
-const newStatus = ref<ReportStatus>('IN_PROGRESS')
+  OPEN: ['UNDER_REVIEW', 'REJECTED'],
-const statusNote = ref('')
+  UNDER_REVIEW: ['ASSIGNED', 'REJECTED'],
-const isUpdatingStatus = ref(false)
+  ASSIGNED: ['IN_PROGRESS', 'REJECTED'],
-
+  IN_PROGRESS: ['RESOLVED', 'REJECTED'],
-// Form Assegna Squadra
+  RESOLVED: ['CLOSED'],
-const isAssignModalOpen = ref(false)
+  REJECTED: ['CLOSED'],
-const selectedTeamId = ref<number | null>(null)
+  CLOSED: []
-const isAssigning = ref(false)
+}
-
-// Messaggi
-const isSubmittingMessage = ref(false)
-const isFlaggingMessageId = ref<number | null>(null)
 
 const availableStatuses: { value: ReportStatus, label: string }[] = [
   { value: 'OPEN', label: 'Aperta' },
@@ -67,9 +63,48 @@ const availableStatuses: { value: ReportStatus, label: string }[] = [
   { value: 'CLOSED', label: 'Chiusa' }
 ]
 
-// Inizializza lo stato nel form
+const selectableStatuses = computed(() => {
+  if (!report.value?.status) return []
+  const allowed = statusTransitions[report.value.status] || []
+  return availableStatuses.filter(s => allowed.includes(s.value))
+})
+
+const canCreateInterventionLink = computed(() => {
+  if (summary.value?.assignments && Array.isArray(summary.value.assignments)) {
+    return summary.value.assignments.some((a: any) => !a.ended_at)
+  }
+  return ['ASSIGNED', 'IN_PROGRESS'].includes(report.value?.status)
+})
+
+const newStatus = ref<ReportStatus>('IN_PROGRESS')
+const statusNote = ref('')
+const isUpdatingStatus = ref(false)
+
+const isAssignModalOpen = ref(false)
+const selectedTeamId = ref<number | null>(null)
+const isAssigning = ref(false)
+const interventionLink = ref('')
+const interventionLinkExpiresAt = ref('')
+const isGeneratingInterventionLink = ref(false)
+const isRevokingInterventionLink = ref(false)
+const interventionLinkError = ref('')
+const interventionLinkSuccess = ref('')
+const isRevokeInterventionModalOpen = ref(false)
+
+const isSubmittingMessage = ref(false)
+const flaggedMessageIds = ref<number[]>([])
+const isFlagMessageModalOpen = ref(false)
+const messageToFlag = ref<Message | null>(null)
+const isFlaggingMessage = ref(false)
+const isFlaggingMessageId = computed(() => isFlaggingMessage.value ? messageToFlag.value?.id : null)
+
 watch(() => report.value?.status, (val) => {
-  if (val) newStatus.value = val as ReportStatus
+  if (val) {
+    const allowed = statusTransitions[val] || []
+    if (allowed.length > 0) {
+      newStatus.value = allowed[0] as ReportStatus
+    }
+  }
 }, { immediate: true })
 
 const handleStatusUpdate = async () => {
@@ -91,7 +126,9 @@ const handleStatusUpdate = async () => {
 }
 
 const handleAssignTeam = async () => {
+  if (isAdmin(user.value?.role)) return
   if (!selectedTeamId.value) return
+
   isAssigning.value = true
   try {
     const res = await assignTeam(reportId, {
@@ -109,6 +146,73 @@ const handleAssignTeam = async () => {
   }
 }
 
+const copyInterventionLink = async () => {
+  if (!interventionLink.value || !navigator?.clipboard) return
+
+  try {
+    await navigator.clipboard.writeText(interventionLink.value)
+    interventionLinkSuccess.value = 'Link copiato negli appunti.'
+    interventionLinkError.value = ''
+  } catch {
+    interventionLinkError.value = 'Copia automatica non riuscita.'
+    interventionLinkSuccess.value = ''
+  }
+}
+
+const handleCreateInterventionLink = async () => {
+  if (!canCreateInterventionLink.value) return
+  isGeneratingInterventionLink.value = true
+  interventionLinkError.value = ''
+  interventionLinkSuccess.value = ''
+
+  try {
+    const res = await createInterventionLink(reportId)
+    if (res.ok) {
+      interventionLink.value = res.url
+      interventionLinkExpiresAt.value = res.expires_at
+      interventionLinkSuccess.value = 'Link intervento generato.'
+    }
+  } catch (e: any) {
+    console.error('Failed to create intervention link', e)
+    interventionLinkError.value = e?.data?.message || 'Generazione link non riuscita.'
+  } finally {
+    isGeneratingInterventionLink.value = false
+  }
+}
+
+const openRevokeInterventionLinkModal = () => {
+  if (!interventionLink.value) return
+  isRevokeInterventionModalOpen.value = true
+}
+
+const closeRevokeInterventionLinkModal = () => {
+  if (isRevokingInterventionLink.value) return
+  isRevokeInterventionModalOpen.value = false
+}
+
+const handleRevokeInterventionLink = async () => {
+  if (!interventionLink.value) return
+
+  isRevokingInterventionLink.value = true
+  interventionLinkError.value = ''
+  interventionLinkSuccess.value = ''
+
+  try {
+    const res = await revokeInterventionLink(reportId)
+    if (res.ok) {
+      interventionLink.value = ''
+      interventionLinkExpiresAt.value = ''
+      interventionLinkSuccess.value = 'Link intervento revocato.'
+      isRevokeInterventionModalOpen.value = false
+    }
+  } catch (e: any) {
+    console.error('Failed to revoke intervention link', e)
+    interventionLinkError.value = e?.data?.message || 'Revoca link non riuscita.'
+  } finally {
+    isRevokingInterventionLink.value = false
+  }
+}
+
 const handleSendMessage = async (msgText: string, files: File[]) => {
   if (!msgText.trim() && files.length === 0) return
   isSubmittingMessage.value = true
@@ -124,21 +228,37 @@ const handleSendMessage = async (msgText: string, files: File[]) => {
 
 const canFlagMessage = (message: Message) => {
   if (!user.value) return false
-  return message.user_id !== user.value.id && message.user_id === report.value?.user_id
+  if (isAdmin(user.value?.role)) return false
+
+  const isCitizenMessage = message.user_id !== user.value.id && message.user_id === report.value?.user_id
+  const isAlreadyFlagged = flaggedMessageIds.value.includes(message.id)
+  return isCitizenMessage && !isAlreadyFlagged
 }
 
-const handleFlagMessage = async (message: Message) => {
+const handleFlagMessage = (message: Message) => {
   if (!canFlagMessage(message)) return
 
-  isFlaggingMessageId.value = message.id
+  messageToFlag.value = message
+  isFlagMessageModalOpen.value = true
+}
+
+const executeFlagMessage = async () => {
+  if (!messageToFlag.value) return
+
+  isFlaggingMessage.value = true
   try {
-    await flagMessage(reportId, message.id, {
+    await flagMessage(reportId, messageToFlag.value.id, {
       reason: 'Messaggio segnalato da operatore responsabile per verifica moderazione',
     })
+
+    flaggedMessageIds.value.push(messageToFlag.value.id)
+
+    isFlagMessageModalOpen.value = false
+    messageToFlag.value = null
   } catch (e) {
     console.error('Failed to flag message', e)
   } finally {
-    isFlaggingMessageId.value = null
+    isFlaggingMessage.value = false
   }
 }
 
@@ -158,6 +278,10 @@ const latestCitizenMessage = computed(() => {
       .reverse()
       .find((message) => message.user_id === reportUserId) || null
 })
+
+const formattedInterventionLinkExpiry = computed(() =>
+    interventionLinkExpiresAt.value ? formatDate(interventionLinkExpiresAt.value) : ''
+)
 </script>
 
 <template>
@@ -285,21 +409,75 @@ const latestCitizenMessage = computed(() => {
                   </p>
                 </div>
               </div>
-            <div class="card-body pt-0">
+              <div v-if="!isAdmin(user?.role)" class="card-body pt-0">
                 <button class="btn btn-outline-primary w-100" @click="isAssignModalOpen = true" :disabled="teams.length === 0">
                   Assegna team
                 </button>
               </div>
             </div>
 
+            <div class="card card-bg border-0 shadow-sm mb-4">
+              <div class="card-body">
+                <h2 class="h6 mb-3">Link intervento pubblico</h2>
+                <p class="text-muted small mb-3">Genera link temporaneo per team esterno. Nuova generazione ruota link esistente.</p>
+
+                <div v-if="interventionLinkError" class="alert alert-danger py-2" role="alert">
+                  {{ interventionLinkError }}
+                </div>
+                <div v-if="interventionLinkSuccess" class="alert alert-success py-2" role="alert">
+                  {{ interventionLinkSuccess }}
+                </div>
+
+                <template v-if="interventionLink">
+                  <label class="form-label">URL attivo</label>
+                  <div class="input-group mb-2">
+                    <input type="text" class="form-control" :value="interventionLink" readonly />
+                    <button type="button" class="btn btn-outline-primary" @click="copyInterventionLink">
+                      Copia
+                    </button>
+                  </div>
+                  <p class="small text-muted mb-3">
+                    Scade: {{ formattedInterventionLinkExpiry || '-' }}
+                  </p>
+                  <div class="d-grid gap-2">
+                    <button type="button" class="btn btn-outline-primary" :disabled="isGeneratingInterventionLink || !canCreateInterventionLink" @click="handleCreateInterventionLink">
+                      <span v-if="isGeneratingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                      Rigenera link
+                    </button>
+                    <button type="button" class="btn btn-outline-danger" :disabled="isRevokingInterventionLink" @click="openRevokeInterventionLinkModal">
+                      <span v-if="isRevokingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                      Revoca link
+                    </button>
+                  </div>
+                </template>
+
+                <button
+                    v-else
+                    type="button"
+                    class="btn btn-outline-primary w-100"
+                    :disabled="isGeneratingInterventionLink || !canCreateInterventionLink"
+                    @click="handleCreateInterventionLink"
+                >
+                  <span v-if="isGeneratingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                  Genera link
+                </button>
+
+                <div v-if="!canCreateInterventionLink" class="text-danger small mt-2">
+                  È necessaria un'assegnazione in corso per generare o rigenerare questo link.
+                </div>
+              </div>
+            </div>
+
             <div class="card card-bg border-0 shadow-sm mb-4">
               <div class="card-body">
                 <h2 class="h6 mb-3">Aggiorna stato</h2>
+
+                <template v-if="selectableStatuses.length > 0">
                   <form @submit.prevent="handleStatusUpdate">
                     <div class="mb-3">
                       <label class="form-label">Nuovo Stato</label>
                       <select class="form-select" v-model="newStatus">
-                    <option v-for="st in availableStatuses" :key="st.value" :value="st.value">
+                        <option v-for="st in selectableStatuses" :key="st.value" :value="st.value">
                           {{ st.label }}
                         </option>
                       </select>
@@ -308,11 +486,18 @@ const latestCitizenMessage = computed(() => {
                       <label class="form-label">Nota (visibile nella cronologia)</label>
                       <textarea class="form-control" v-model="statusNote" rows="2" placeholder="Motivazione o dettaglio..."></textarea>
                     </div>
-                <button type="submit" class="btn btn-primary w-100" :disabled="isUpdatingStatus || newStatus === report.status">
+                    <button type="submit" class="btn btn-primary w-100" :disabled="isUpdatingStatus">
                       <span v-if="isUpdatingStatus" class="spinner-border spinner-border-sm me-2"></span>
                       Aggiorna Stato
                     </button>
                   </form>
+                </template>
+
+                <template v-else>
+                  <div class="alert alert-info mb-0 small">
+                    La segnalazione è attualmente in stato <strong>{{ statusMeta[report.status] }}</strong>. Non sono consentite ulteriori transizioni.
+                  </div>
+                </template>
               </div>
             </div>
 
@@ -338,7 +523,6 @@ const latestCitizenMessage = computed(() => {
       </div>
     </div>
 
-    <!-- Modale Assegnazione -->
     <div v-if="isAssignModalOpen" class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
     <div v-if="isAssignModalOpen" class="modal fade show d-block" tabindex="-1" style="z-index: 1050;">
       <div class="modal-dialog modal-dialog-centered">
@@ -375,6 +559,27 @@ const latestCitizenMessage = computed(() => {
       </div>
     </div>
 
+    <ConfirmModal
+        :open="isRevokeInterventionModalOpen"
+        title="Revoca link intervento"
+        message="Vuoi revocare link pubblico per team esterno? Link non sara piu utilizzabile."
+        confirm-label="Revoca link"
+        confirm-class="btn-danger"
+        :pending="isRevokingInterventionLink"
+        @cancel="closeRevokeInterventionLinkModal"
+        @confirm="handleRevokeInterventionLink"
+    />
+
+    <ConfirmModal
+        :open="isFlagMessageModalOpen"
+        title="Segnala messaggio"
+        message="Sei sicuro di voler segnalare questo messaggio al team di moderazione per una verifica?"
+        confirm-label="Segnala"
+        confirm-class="btn-warning"
+        :pending="isFlaggingMessage"
+        @cancel="isFlagMessageModalOpen = false; messageToFlag = null"
+        @confirm="executeFlagMessage"
+    />
   </div>
   <div v-else class="text-center py-5">
     <div class="spinner-border text-primary" role="status"></div>

app/pages/privacy.vue

@@ -6,7 +6,6 @@ useHead({
 
 <template>
   <div>
-    <!-- HERO SECTION -->
     <div class="it-hero-wrapper it-primary">
       <div class="container">
         <div class="row">
@@ -22,7 +21,6 @@ useHead({
       </div>
     </div>
 
-    <!-- CONTENUTO PRINCIPALE -->
     <div class="container my-5 py-4">
       <div class="row">
         <div class="col-12 col-lg-8 offset-lg-2">
@@ -48,7 +46,7 @@ useHead({
           <h2 class="h3 font-weight-bold mb-3">3. Finalità del Trattamento</h2>
           <p class="text-muted mb-4">
             I dati forniti verranno trattati esclusivamente per le seguenti finalità:
-            <br>- Consentire la registrazione e l'autenticazione sicura (incluso login Passwordless tramite OTP).
+            <br>- Consentire la registrazione e l'autenticazione sicura tramite OTP.
             <br>- Gestire la presa in carico e la risoluzione delle segnalazioni urbane da parte delle squadre operative.
             <br>- Fornire comunicazioni di servizio relative allo stato di avanzamento delle segnalazioni.
             <br>- Attribuire punteggi virtuali all'utente nell'ambito del sistema di <em>Gamification</em> volto a incentivare la cittadinanza attiva.

app/pages/profile.vue

@@ -71,7 +71,7 @@ const formatDate = (dateString: string) =>
                 </div>
                 <div class="col-md-6 mb-0">
                   <small class="text-muted d-block">Ruolo</small>
-                  <span class="badge bg-info">{{ user?.role }}</span>
+                  <span class="badge bg-info">{{ normalizeRole(user?.role) }}</span>
                 </div>
               </div>
             </div>
@@ -132,7 +132,6 @@ const formatDate = (dateString: string) =>
               <div class="d-grid gap-2">
                 <NuxtLink to="/reports/new" class="btn btn-primary">Nuova segnalazione</NuxtLink>
                 <NuxtLink to="/notifications" class="btn btn-outline-primary">Notifiche</NuxtLink>
-                <NuxtLink to="/auth/change-password" class="btn btn-outline-secondary">Cambia password</NuxtLink>
                 <button type="button" class="btn btn-outline-danger" @click="logout">
                   Logout
                 </button>
@@ -154,3 +153,9 @@ const formatDate = (dateString: string) =>
     </div>
   </div>
 </template>
+
+<style>
+.card .card-body .d-grid > a {
+  padding-block: 8px;
+}
+</style>

app/pages/reports/[id].vue

@@ -16,7 +16,6 @@ if (!reportId) {
   navigateTo('/')
 }
 
-// Fetch dati
 const { data: reportData, refresh: refreshReport } = await useAsyncData(`report-${reportId}`, () =>
     getReportDetail(reportId)
 )
@@ -31,7 +30,10 @@ const statusHistory = computed(() => (reportData.value as any)?.history || [])
 const messages = computed(() => (messagesData.value as any)?.messages || [])
 
 const newMessage = ref('')
+const fileInput = ref<HTMLInputElement | null>(null)
+const selectedFiles = ref<File[]>([])
 const isSubmittingMessage = ref(false)
+
 const isFeedbackOpen = ref(false)
 const feedbackRating = ref(5)
 const feedbackComment = ref('')
@@ -39,14 +41,24 @@ const isSubmittingFeedback = ref(false)
 const selectedMediaIndex = ref(0)
 const isGalleryOpen = ref(false)
 
-// Invia messaggio
+const handleFileSelect = (event: Event) => {
-const handleSendMessage = async (msgText: string, files: File[]) => {
+  const target = event.target as HTMLInputElement
-  if (!msgText.trim() && files.length === 0) return
+  if (target.files) {
+    selectedFiles.value = Array.from(target.files)
+  }
+}
+
+const handleSendMessage = async () => {
+  if (!newMessage.value.trim() && selectedFiles.value.length === 0) return
 
   isSubmittingMessage.value = true
   try {
-    // Gestione mock di file, nella realtà si usa FormData o simle
+    await addMessage(reportId, { body: newMessage.value })
-    await addMessage(reportId, { body: msgText })
+
+    newMessage.value = ''
+    selectedFiles.value = []
+    if (fileInput.value) fileInput.value.value = ''
+
     await refreshMessages()
   } catch (error) {
     console.error('Error sending message:', error)
@@ -55,7 +67,6 @@ const handleSendMessage = async (msgText: string, files: File[]) => {
   }
 }
 
-// Invia feedback (solo se risolta)
 const handleSubmitFeedback = async () => {
   isSubmittingFeedback.value = true
   try {
@@ -75,7 +86,9 @@ const handleSubmitFeedback = async () => {
 }
 
 const isOwner = computed(() => report.value?.user_id === user.value?.id)
-const canFeedback = computed(() => report.value?.status === 'RESOLVED' || report.value?.status === 'CLOSED')
+
+const canFeedback = computed(() => report.value?.status === 'RESOLVED')
+
 const statusMeta: Record<string, { label: string; tone: string }> = {
   OPEN: { label: 'Aperta', tone: 'info' },
   UNDER_REVIEW: { label: 'In revisione', tone: 'warning' },
@@ -180,30 +193,21 @@ const formatDate = (dateString: string): string => {
             </div>
           </div>
 
-          <div v-if="statusHistory.length > 0" class="card card-bg border-0 shadow-sm mb-4">
+          <div class="card card-bg border-0 shadow-sm mb-4">
             <div class="card-body">
-              <div class="report-section-head mb-4">
+              <h2 class="h6 mb-3">Cronologia eventi</h2>
-                <BIIcon name="it-history" size="sm" color="primary" class="me-2" />
+              <div v-if="statusHistory.length === 0" class="small text-muted">Nessun evento registrato.</div>
-                <h2 class="h6 mb-0">Cronologia</h2>
+              <ul class="list-unstyled mb-0 ms-2">
-              </div>
+                <li v-for="item in statusHistory" :key="item.id" class="mb-3 border-start border-primary border-3 ps-3">
-              <div class="timeline">
+                  <small class="text-muted d-block">{{ formatDate(item.created_at) }}</small>
-                <div v-for="item in statusHistory" :key="item.id" class="timeline-item mb-3">
+                  <div class="d-flex align-items-center gap-2 mt-1">
-                  <div class="d-flex gap-3">
-                    <div class="flex-shrink-0">
-                      <div class="timeline-marker"></div>
-                    </div>
-                    <div class="flex-grow-1">
-                      <small class="text-muted">{{ formatDate(item.created_at) }}</small>
-                      <div class="small font-weight-semibold d-flex align-items-center gap-2 mt-1">
                     <StatusBadge :status="item.old_status" />
                     <BIIcon name="it-arrow-right" size="xs" />
                     <StatusBadge :status="item.new_status" />
                   </div>
-                      <small v-if="item.note" class="text-muted d-block">{{ item.note }}</small>
+                  <div v-if="item.note" class="small mt-1 bg-light p-1 rounded">{{ item.note }}</div>
-                    </div>
+                </li>
-                  </div>
+              </ul>
-                </div>
-              </div>
             </div>
           </div>
 
@@ -219,8 +223,10 @@ const formatDate = (dateString: string): string => {
                 </div>
                 <span class="badge bg-light text-dark border">{{ messages.length }} messaggi</span>
               </div>
+
               <MessageList :messages="messages" />
-              <MessageComposer @send="handleSendMessage" />
+
+              <MessageComposer @send=handleSendMessage />
             </div>
           </div>
         </div>
@@ -408,23 +414,24 @@ const formatDate = (dateString: string): string => {
   justify-content: space-between;
 }
 
-.timeline-marker {
+.chat-textarea {
-  width: 12px;
+  resize: none !important;
-  height: 12px;
+  height: 48px;
-  background-color: #006f9d;
+  min-height: 48px;
-  border-radius: 50%;
+  overflow-y: auto;
-  border: 3px solid #f0f0f0;
+  padding-top: 12px;
+  padding-bottom: 12px;
+  border-radius: 6px;
 }
 
-.timeline-item:not(:last-child) .timeline-marker::after {
+.btn-square {
-  content: '';
+  width: 48px;
-  position: absolute;
+  height: 48px;
-  left: 50%;
+  padding: 0;
-  top: 20px;
+  display: flex;
-  width: 2px;
+  align-items: center;
-  height: calc(100% + 20px);
+  justify-content: center;
-  background-color: #006f9d;
+  border-radius: 6px;
-  transform: translateX(-50%);
 }
 
 .ratio {
@@ -457,6 +464,3 @@ const formatDate = (dateString: string): string => {
   }
 }
 </style>
-
-
-

app/types/api.d.ts

@@ -6,6 +6,7 @@ export type FlagContentType = 'REPORT' | 'MESSAGE';
 export interface GeoJsonObject {
   type: string;
   coordinates: any[];
+
   [key: string]: any;
 }
 
@@ -19,9 +20,6 @@ export interface OkResponse {
   ok: boolean;
 }
 
-/**
- * USER & AUTHENTICATION
- */
 export interface CurrentUser {
   id: number;
   first_name: string;
@@ -29,7 +27,6 @@ export interface CurrentUser {
   email: string;
   fiscal_code: string;
   points: number;
-    must_change_password: boolean;
   role: string;
   roles: string[];
   permissions: string[];
@@ -45,8 +42,7 @@ export interface AdminUser {
   phone?: string;
   banned?: boolean;
   points?: number;
-    must_change_password?: boolean;
+  roles?: string;
-    roles?: string; // Comma-separated
 }
 
 export interface TokenResponse {
@@ -56,9 +52,41 @@ export interface TokenResponse {
   expires_in_hours: number;
 }
 
-/**
+export interface CieStartRequest {
- * REPORTS & MEDIA
+  frontend_redirect_uri: string;
- */
+}
+
+export interface CieStartResponse {
+  ok: boolean;
+  authorization_url: string;
+  state: string;
+  status: string;
+}
+
+export interface CieExchangeRequest {
+  state: string;
+  issuer: string;
+  subject: string;
+  fiscal_code: string;
+  first_name?: string;
+  last_name?: string;
+  email?: string;
+}
+
+export interface CieSessionAuth {
+  token?: string;
+  token_type?: string;
+  expires_in_hours?: number;
+  [key: string]: any;
+}
+
+export interface CieSessionResponse {
+  ok: boolean;
+  status: string;
+  user_id?: number;
+  auth?: CieSessionAuth;
+}
+
 export interface Report {
   id: number;
   category_id: number;
@@ -120,9 +148,6 @@ export interface Message {
   created_at: string;
 }
 
-/**
- * ENTITIES (Areas, Teams, Categories, Notifications, Rewards, Moderation)
- */
 export interface Area {
   id: number;
   name: string;
@@ -184,30 +209,16 @@ export interface ModerationFlag {
   resolved_at?: string | null;
 }
 
-/**
- * REQUEST BODIES
- */
 export interface RegisterCitizenRequest {
   first_name: string;
   last_name: string;
   email: string;
-    password: string;
   fiscal_code: string;
   phone?: string;
   birth_date?: string;
   birth_place?: string;
 }
 
-export interface PasswordLoginRequest {
-    email: string;
-    password: string;
-}
-
-export interface ChangePasswordRequest {
-    current_password: string;
-    new_password: string;
-}
-
 export interface UpdateProfileRequest {
   first_name?: string;
   last_name?: string;
@@ -229,7 +240,7 @@ export interface CreateReportRequest {
   longitude: number;
   address: string;
   description: string;
-    media?: string[]; // Array of URLs if already uploaded
+  media?: string[];
 }
 
 export interface UpdateStatusRequest {
@@ -246,8 +257,8 @@ export interface MessageRequest {
 }
 
 export interface FeedbackRequest {
-    rating: number; // 1 to 5
+  rating: number;
-comment?: string;
+  comment?: string;
 }
 
 export interface FlagRequest {
@@ -267,11 +278,24 @@ export interface CreateAreaRequest {
   description?: string;
 }
 
+export interface UpdateAreaRequest {
+  name?: string;
+  boundary_geojson?: GeoJsonObject;
+  description?: string;
+  active?: boolean;
+}
+
 export interface CreateCategoryRequest {
   name: string;
   description?: string;
 }
 
+export interface UpdateCategoryRequest {
+  name?: string;
+  description?: string;
+  active?: boolean;
+}
+
 export interface CreateTeamRequest {
   team_category_id: number;
   name: string;
@@ -279,6 +303,14 @@ export interface CreateTeamRequest {
   area_id?: number;
 }
 
+export interface UpdateTeamRequest {
+  team_category_id?: number;
+  name?: string;
+  description?: string;
+  area_id?: number | null;
+  active?: boolean;
+}
+
 export interface UpdateUserBanRequest {
   banned: boolean;
 }
@@ -287,9 +319,6 @@ export interface UpdateUserRolesRequest {
   roles: string[];
 }
 
-/**
- * RESPONSE BODIES
- */
 export interface CurrentUserResponse {
   ok: boolean;
   user: CurrentUser;
@@ -346,6 +375,12 @@ export interface InterventionSummaryResponse {
   latest_messages: Message[];
 }
 
+export interface AssignmentLinkResponse {
+  ok: boolean;
+  url: string;
+  expires_at: string;
+}
+
 export interface MediaUploadResponse {
   ok: boolean;
   media: Media[];

app/utils/roles.ts

@@ -0,0 +1,43 @@
+export const ROLES = {
+  CITIZEN: 'CITIZEN',
+  OPERATOR: 'OPERATOR',
+  ADMIN: 'ADMIN'
+} as const
+
+export type Role = keyof typeof ROLES
+
+export const ROLE_LEVELS: Record<string, number> = {
+  [ROLES.CITIZEN]: 1,
+  [ROLES.OPERATOR]: 2,
+  [ROLES.ADMIN]: 3
+}
+
+export function normalizeRole(role?: string | null): string {
+  return role?.trim().toUpperCase() ?? ''
+}
+
+export function isRole(userRole: string | undefined | null, targetRole: string): boolean {
+  return normalizeRole(userRole) === targetRole.toUpperCase()
+}
+
+export function hasMinimumRole(userRole: string | undefined | null, requiredRole: string): boolean {
+  const userLvl = ROLE_LEVELS[normalizeRole(userRole)] || 0
+  const reqLvl = ROLE_LEVELS[requiredRole.toUpperCase()] || 0
+  return userLvl >= reqLvl
+}
+
+export function isAdmin(userRole?: string | null): boolean {
+  return isRole(userRole, ROLES.ADMIN)
+}
+
+export function isOperator(userRole?: string | null): boolean {
+  return isRole(userRole, ROLES.OPERATOR)
+}
+
+export function isCitizen(userRole?: string | null): boolean {
+  return isRole(userRole, ROLES.CITIZEN)
+}
+
+export function canAccess(userRole: string | undefined | null, requiredRole: string): boolean {
+  return hasMinimumRole(userRole, requiredRole)
+}