refractor(auth): removed password from everywhere

Reviewed-on: #8

app/assets/css/style.css

@@ -376,3 +376,11 @@ html body .navbar .navbar-collapsable .navbar-nav li.nav-item a.nav-link[data-fo
         max-width: 14rem;
     }
 }
+
+.alert-danger {
+    background-position-y: center;
+}
+
+.card::after {
+    margin-top: 0!important;
+}

app/components/ConfirmModal.vue

@@ -0,0 +1,60 @@
+<script setup lang="ts">
+const props = withDefaults(defineProps<{
+  open: boolean
+  title: string
+  message: string
+  confirmLabel?: string
+  cancelLabel?: string
+  confirmClass?: string
+  pending?: boolean
+}>(), {
+  confirmLabel: 'Conferma',
+  cancelLabel: 'Annulla',
+  confirmClass: 'btn-danger',
+  pending: false,
+})
+
+const emit = defineEmits<{
+  cancel: []
+  confirm: []
+}>()
+
+const handleBackdropClick = (event: MouseEvent) => {
+  if (event.target === event.currentTarget && !props.pending) {
+    emit('cancel')
+  }
+}
+</script>
+
+<template>
+  <div v-if="open">
+    <div class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
+    <div
+      class="modal fade show d-block"
+      tabindex="-1"
+      style="z-index: 1050;"
+      @click="handleBackdropClick"
+    >
+      <div class="modal-dialog modal-dialog-centered">
+        <div class="modal-content shadow">
+          <div class="modal-header">
+            <h5 class="modal-title">{{ title }}</h5>
+            <button type="button" class="btn-close" :disabled="pending" @click="emit('cancel')"></button>
+          </div>
+          <div class="modal-body">
+            <p class="mb-0">{{ message }}</p>
+          </div>
+          <div class="modal-footer">
+            <button type="button" class="btn btn-outline-secondary" :disabled="pending" @click="emit('cancel')">
+              {{ cancelLabel }}
+            </button>
+            <button type="button" class="btn" :class="confirmClass" :disabled="pending" @click="emit('confirm')">
+              <span v-if="pending" class="spinner-border spinner-border-sm me-2"></span>
+              {{ confirmLabel }}
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+  </div>
+</template>

app/components/Header.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, computed, watch } from 'vue'
+import { ref, computed, watch, onUnmounted } from 'vue'
 import { useRoute } from 'vue-router'
 import BIIcon from "~/components/BIIcon.vue";
 
@@ -10,6 +10,22 @@ watch(() => route.path, () => {
   isMobileMenuOpen.value = false
 })
 
+watch(isMobileMenuOpen, (isOpen) => {
+  if (typeof document !== 'undefined') {
+    if (isOpen) {
+      document.body.style.overflow = 'hidden'
+    } else {
+      document.body.style.overflow = ''
+    }
+  }
+})
+
+onUnmounted(() => {
+  if (typeof document !== 'undefined') {
+    document.body.style.overflow = ''
+  }
+})
+
 const navLinks = [
   { name: 'Home', path: '/' },
   { name: 'Fai una segnalazione', path: '/reports/new' },
@@ -28,8 +44,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
         <div class="row">
           <div class="col-12">
             <div class="it-header-slim-wrapper-content">
-              <a class="d-none d-lg-block navbar-brand"
-                 href="https://www.cittametropolitana.ba.it/">
+              <a class="d-none d-lg-block navbar-brand" href="https://www.cittametropolitana.ba.it/">
                 Città metropolitana di Bari
               </a>
               <div class="nav-mobile">
@@ -78,7 +93,6 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                   <span class="d-none d-lg-block">Login</span>
                 </NuxtLink>
               </div>
-
             </div>
           </div>
         </div>
@@ -93,7 +107,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
               <div class="it-header-center-content-wrapper">
                 <div class="it-brand-wrapper">
                   <NuxtLink to="/">
-                  <img src="/icon.svg" alt="Logo Visione" style="width: 48px; height: 48px; margin-right: 16px;" />
+                    <img src="/icon.svg" alt="Logo Visione" class="logo"/>
                     <div class="it-brand-text">
                       <div class="it-brand-title">Visione</div>
                       <div class="it-brand-tagline d-none d-md-block">Un occhio per la sicurezza del cittadino.</div>
@@ -111,6 +125,7 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
           <div class="row">
             <div class="col-12">
               <nav class="navbar navbar-expand-lg has-megamenu" aria-label="Navigazione principale">
+
                 <button
                     class="custom-navbar-toggler"
                     type="button"
@@ -124,19 +139,16 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
                     class="overlay"
                     :class="{ 'show': isMobileMenuOpen }"
                     @click="isMobileMenuOpen = false"
-                    style="display: block;"
-                    v-show="isMobileMenuOpen"
                 ></div>
 
                 <div
                     class="navbar-collapsable"
                     :class="{ 'expanded': isMobileMenuOpen }"
-                    style="display: block;"
                 >
                   <div class="close-div">
                     <button class="btn close-menu" type="button" @click="isMobileMenuOpen = false">
                       <span class="visually-hidden">Nascondi la navigazione</span>
-                      <BIIcon name="it-close-big"/>
+                      <BIIcon name="it-close-big" color="black"/>
                     </button>
                   </div>
 
@@ -184,14 +196,102 @@ const panelLabel = computed(() => user.value?.role?.toUpperCase() === 'ADMIN' ?
   background-color: rgb(0, 76.5, 153);
 }
 
+@media (max-width: 991.98px) {
   .overlay {
-  transition: opacity 0.3s ease;
+    position: fixed;
+    top: 0;
+    left: 0;
+    width: 100vw;
+    height: 100vh;
+    background-color: rgba(0, 0, 0, 0.6) !important;
+    z-index: 1040;
     opacity: 0;
-  pointer-events: none;
+    visibility: hidden;
+    transition: opacity 0.3s ease, visibility 0.3s ease;
   }
 
   .overlay.show {
     opacity: 1;
-  pointer-events: auto;
+    visibility: visible;
+  }
+
+  .navbar-collapsable {
+    position: fixed !important;
+    top: 0;
+    left: 0;
+    width: 320px;
+    max-width: 85vw;
+    height: 100vh;
+    background-color: #ffffff !important;
+    z-index: 1050 !important;
+    transform: translateX(-100%);
+    transition: transform 0.3s ease-in-out;
+    display: flex;
+    flex-direction: column;
+    box-shadow: 4px 0 15px rgba(0, 0, 0, 0.2);
+    overflow-y: auto;
+  }
+
+  .navbar-collapsable.expanded {
+    transform: translateX(0);
+  }
+
+  .close-div {
+    display: flex;
+    justify-content: flex-end;
+    padding: 1rem 1.5rem;
+  }
+
+  .close-menu {
+    background: transparent;
+    border: none;
+    padding: 0;
+  }
+
+  .close-menu :deep(svg) {
+    width: 32px;
+    height: 32px;
+  }
+
+  .menu-wrapper {
+    padding: 1rem 0;
+  }
+
+  .navbar-nav {
+    display: flex;
+    flex-direction: column;
+    padding: 0;
+    margin: 0;
+    list-style: none;
+  }
+
+  .nav-item {
+    width: 100%;
+  }
+
+  .nav-link {
+    display: block;
+    padding: 1rem 1.5rem;
+    color: #1a1a1a !important;
+    font-size: 1.1rem;
+    font-weight: 600;
+    text-decoration: none;
+    border-bottom: 1px solid #f0f0f0;
+  }
+
+  .nav-link.active {
+    color: #004c99 !important;
+    background-color: #f8f9fa;
+  }
+}
+
+.btn-full {
+  padding: 14px;
+}
+
+.logo {
+  width: 48px;
+  height: 48px;
+  margin-inline: 16px;
 }
 </style>

app/components/MessageComposer.vue

@@ -44,6 +44,7 @@ const removeFile = (idx: number) => {
 <template>
   <div class="message-composer mt-3">
     <form @submit.prevent="handleSubmit">
+
       <div v-if="files.length > 0" class="message-files mb-3">
         <div v-for="(file, idx) in files" :key="idx" class="message-file-chip">
           <BIIcon name="it-clip" size="xs" />
@@ -52,7 +53,7 @@ const removeFile = (idx: number) => {
         </div>
       </div>
 
-      <div class="composer-shell">
+      <div class="d-flex align-items-stretch gap-2">
         <input
             ref="fileInputRef"
             type="file"
@@ -64,7 +65,7 @@ const removeFile = (idx: number) => {
 
         <button
             type="button"
-          class="btn btn-outline-primary btn-icon composer-attach"
+            class="btn btn-outline-primary btn-square flex-shrink-0"
             title="Allega file"
             @click="fileInputRef?.click()"
             :disabled="isSubmitting || files.length >= 5"
@@ -74,21 +75,20 @@ const removeFile = (idx: number) => {
 
         <textarea
             v-model="message"
-          class="form-control composer-textarea"
+            class="form-control chat-textarea m-0"
             placeholder="Scrivi aggiornamento o domanda"
-          rows="2"
             :disabled="isSubmitting"
             @keydown="handleKeydown"
-        />
+        ></textarea>
 
         <button
             type="submit"
-          class="btn btn-primary composer-submit"
+            class="btn btn-primary btn-square flex-shrink-0"
             :disabled="isSubmitting || (message.trim() === '' && files.length === 0)"
+            title="Invia"
         >
-          <span v-if="isSubmitting" class="spinner-border spinner-border-sm me-2" role="status" aria-hidden="true"></span>
-          <BIIcon v-else name="it-arrow-right" size="sm" color="white" class="me-1" />
-          Invia
+          <span v-if="isSubmitting" class="spinner-border spinner-border-sm" role="status" aria-hidden="true"></span>
+          <BIIcon v-else name="it-arrow-right" size="sm" color="white" />
         </button>
       </div>
 
@@ -126,54 +126,32 @@ const removeFile = (idx: number) => {
   max-width: 14rem;
 }
 
-.composer-shell {
-  align-items: flex-end;
-  background: #fff;
-  border: 1px solid #c5d0db;
-  border-radius: 4px;
-  display: grid;
-  gap: 0.75rem;
-  grid-template-columns: auto minmax(0, 1fr) auto;
-  padding: 0.75rem;
-}
-
-.composer-shell:focus-within {
-  border-color: #06c;
-  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.12);
-}
-
-.composer-attach {
-  flex-shrink: 0;
-}
-
-.composer-textarea {
-  border: 0;
-  box-shadow: none;
-  min-height: 4rem;
-  padding: 0;
-  resize: vertical;
-}
-
-.composer-submit {
-  min-width: 7rem;
-}
-
 .btn-close-sm {
   font-size: 0.55rem;
 }
 
-@media (max-width: 767.98px) {
-  .composer-shell {
-    grid-template-columns: auto 1fr;
+.chat-textarea {
+  resize: none !important;
+  height: 48px;
+  min-height: 48px;
+  overflow-y: auto;
+  padding-top: 12px;
+  padding-bottom: 12px;
+  border-radius: 6px;
 }
 
-  .composer-textarea {
-    grid-column: 1 / -1;
+.chat-textarea:focus {
+  border-color: #06c;
+  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.12);
 }
 
-  .composer-submit {
-    grid-column: 2;
-    justify-self: end;
-  }
+.btn-square {
+  width: 48px;
+  height: 48px;
+  padding: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 6px;
 }
 </style>

app/components/ReportTable.vue

@@ -9,6 +9,7 @@ interface Props {
   actionVariant?: ActionVariant
   actionLabel?: string
   showAssignee?: boolean
+  processingIds?: number[]
 }
 
 const props = withDefaults(defineProps<Props>(), {
@@ -16,6 +17,7 @@ const props = withDefaults(defineProps<Props>(), {
   actionVariant: 'open',
   actionLabel: 'Open report',
   showAssignee: false,
+  processingIds: () => [],
 })
 
 const emit = defineEmits<{
@@ -53,7 +55,7 @@ const reportHref = (report: Report) => `${props.detailBasePath}/${report.id}`
         <td class="report-table-id">#{{ report.id }}</td>
         <td class="text-nowrap">{{ report.category_name || '-' }}</td>
         <td>
-            <span class="report-address" :title="report.address">
+          <span class="report-address d-inline-block text-truncate align-middle" style="max-width: 10ch;" :title="report.address">
               {{ report.address || '-' }}
             </span>
         </td>
@@ -69,14 +71,16 @@ const reportHref = (report: Report) => `${props.detailBasePath}/${report.id}`
               v-if="actionVariant === 'manage'"
               type="button"
               class="btn btn-primary btn-xs"
+              :disabled="processingIds.includes(report.id)"
               @click="emit('take', report.id)"
           >
+            <span v-if="processingIds.includes(report.id)" class="spinner-border spinner-border-sm me-1" role="status" aria-hidden="true"></span>
             Prendi in carico
           </button>
           <NuxtLink
               v-else
               :to="reportHref(report)"
-              class="btn btn-outline-primary btn-xs btn-icon"
+              class="btn btn-outline-primary btn-xs btn-icon d-inline-flex align-items-center justify-content-center"
               :aria-label="actionLabel"
               :title="actionLabel"
           >

app/components/dashboard/OperatorDashboard.vue

@@ -4,11 +4,18 @@ const { getOpenReports, getAssignedReports, takeReport } = useOperator()
 const { data: openReportsRes, refresh: refreshOpen } = useAsyncData('open-reports', () => getOpenReports({ per_page: 5 }))
 const { data: assignedReportsRes, refresh: refreshAssigned } = useAsyncData('assigned-reports', () => getAssignedReports({ per_page: 5 }))
 
+const processingIds = ref<number[]>([])
+
 const handleTakeReport = async (id: number) => {
+  processingIds.value.push(id)
+  try {
     const res = await takeReport(id)
     if (res.ok) {
       await Promise.all([refreshOpen(), refreshAssigned()])
     }
+  } finally {
+    processingIds.value = processingIds.value.filter(pid => pid !== id)
+  }
 }
 </script>
 

app/composables/useAdmin.ts

@@ -3,6 +3,7 @@ import type {
   ModerationListResponse,
   OkResponse,
   OverviewStatsResponse, TeamListResponse, UpdateModerationRequest,
+  UpdateAreaRequest, UpdateCategoryRequest, UpdateTeamRequest,
   UpdateUserBanRequest, UpdateUserRolesRequest,
   UserListResponse
 } from "~/types/api";
@@ -26,18 +27,36 @@ export const useAdmin = () => {
   const createArea = (body: CreateAreaRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/areas', { method: 'POST', body })
 
+  const updateArea = (id: number, body: UpdateAreaRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/areas/${id}`, { method: 'PATCH', body })
+
+  const deleteArea = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/areas/${id}`, { method: 'DELETE' })
+
   const getCategories = () =>
       useApiFetch<CategoryListResponse>('/api/v1/admin/categories', { method: 'GET' })
 
   const createCategory = (body: CreateCategoryRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/categories', { method: 'POST', body })
 
+  const updateCategory = (id: number, body: UpdateCategoryRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/categories/${id}`, { method: 'PATCH', body })
+
+  const deleteCategory = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/categories/${id}`, { method: 'DELETE' })
+
   const getTeams = () =>
       useApiFetch<TeamListResponse>('/api/v1/admin/teams', { method: 'GET' })
 
   const createTeam = (body: CreateTeamRequest) =>
       useApiFetch<OkResponse>('/api/v1/admin/teams', { method: 'POST', body })
 
+  const updateTeam = (id: number, body: UpdateTeamRequest) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/teams/${id}`, { method: 'PATCH', body })
+
+  const deleteTeam = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/admin/teams/${id}`, { method: 'DELETE' })
+  
   const getModerationFlags = (query?: { status?: string; page?: number; per_page?: number }) =>
       useApiFetch<ModerationListResponse>('/api/v1/admin/moderation', { method: 'GET', query })
 
@@ -51,10 +70,16 @@ export const useAdmin = () => {
     updateUserRoles,
     getAreas,
     createArea,
+    updateArea,
+    deleteArea,
     getCategories,
     createCategory,
+    updateCategory,
+    deleteCategory,
     getTeams,
     createTeam,
+    updateTeam,
+    deleteTeam,
     getModerationFlags,
     updateModerationFlag,
   }

app/composables/useAuth.ts

@@ -1,8 +1,7 @@
 import type {
-  ChangePasswordRequest,
   CurrentUserResponse, EmailRequest, NotificationListResponse,
   OkResponse,
-  OtpRequestResponse, PasswordLoginRequest, RegisterCitizenRequest,
+  OtpRequestResponse, RegisterCitizenRequest,
   RegisterCitizenResponse, RewardsResponse,
   TokenResponse, VerifyOtpRequest, UpdateProfileRequest
 } from "~/types/api";
@@ -44,9 +43,7 @@ export const useAuth = () => {
         user.value = res.user
         const path = currentPath ?? useNuxtApp().$router.currentRoute.value.path
 
-        if (res.user.must_change_password && path !== '/auth/change-password') {
-          await nuxtApp.runWithContext(() => navigateTo('/auth/change-password'))
-        } else if (redirectOnSuccess && path.startsWith('/auth')) {
+        if (redirectOnSuccess && path.startsWith('/auth')) {
           await nuxtApp.runWithContext(() => navigateTo('/dashboard'))
         }
       }
@@ -85,12 +82,6 @@ export const useAuth = () => {
   const verifyOtp = (body: VerifyOtpRequest) =>
       useApiFetch<TokenResponse>('/api/v1/auth/otp/verify', { method: 'POST', body })
 
-  const loginWithPassword = (body: PasswordLoginRequest) =>
-      useApiFetch<TokenResponse>('/api/v1/auth/login/password', { method: 'POST', body })
-
-  const changePassword = (body: ChangePasswordRequest) =>
-      useApiFetch<OkResponse>('/api/v1/auth/change-password', { method: 'POST', body })
-
   const updateProfile = (body: UpdateProfileRequest) =>
       useApiFetch<CurrentUserResponse>('/api/v1/me', { method: 'PATCH', body })
 
@@ -119,8 +110,6 @@ export const useAuth = () => {
     register,
     requestOtp,
     verifyOtp,
-    loginWithPassword,
-    changePassword,
     updateProfile,
     fetchCurrentUser,
     fetchRewards,

app/composables/useOperator.ts

@@ -1,4 +1,5 @@
 import type {
+  AssignmentLinkResponse,
   AssignTeamRequest,
   InterventionSummaryResponse,
   OkResponse,
@@ -32,6 +33,12 @@ export const useOperator = () => {
   const getInterventionSummary = (id: number) =>
       useApiFetch<InterventionSummaryResponse>(`/api/v1/reports/${id}/intervention-summary`, { method: 'GET' })
 
+  const createInterventionLink = (id: number) =>
+      useApiFetch<AssignmentLinkResponse>(`/api/v1/reports/${id}/intervention-link`, { method: 'POST' })
+
+  const revokeInterventionLink = (id: number) =>
+      useApiFetch<OkResponse>(`/api/v1/reports/${id}/intervention-link`, { method: 'DELETE' })
+
   return {
     getOpenReports,
     getAssignedReports,
@@ -41,5 +48,7 @@ export const useOperator = () => {
     updateReportStatus,
     assignTeam,
     getInterventionSummary,
+    createInterventionLink,
+    revokeInterventionLink,
   }
 }

app/layouts/default.vue

@@ -11,6 +11,7 @@ import Footer from "~/components/Footer.vue";
       <slot />
     </main>
 
+    <div class="italian-flag"></div>
     <Footer />
   </div>
 </template>
@@ -22,6 +23,19 @@ import Footer from "~/components/Footer.vue";
   min-height: 100vh;
 }
 
+div.italian-flag {
+  height: 8px;
+  width: 100%;
+  background: linear-gradient(to right, #009246 0%, #009246 33.33%, #F1F2F1 33.33%, #F1F2F1 66.66%, #CE2B37 66.66%, #CE2B37 100%);
+}
+
+div.italian-flag {
+  height: 8px;
+  width: 100%;
+  box-shadow: rgb(0 0 0 / 0.7) 0 0 30px;
+  background: linear-gradient(to right, #009246 0%, #009246 33.33%, #F1F2F1 33.33%, #F1F2F1 66.66%, #CE2B37 66.66%, #CE2B37 100%);
+}
+
 .app-main {
   flex-grow: 1;
 }

app/pages/admin/areas.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, reactive, nextTick, onBeforeUnmount } from 'vue'
+import { ref, reactive, nextTick, onBeforeUnmount, computed } from 'vue'
 import { BARI_BOUNDS, BARI_CENTER, isWithinBariBounds } from '~/utils/bari'
 
 definePageMeta({
@@ -9,23 +9,37 @@ definePageMeta({
 
 useHead({ title: 'Aree - Admin' })
 
-const { getAreas, createArea } = useAdmin()
+const { getAreas, createArea, updateArea, deleteArea } = useAdmin()
 const { data: areasRes, pending, refresh } = useAsyncData('admin-areas', () => getAreas())
 
 const isCreating = ref(false)
+const editingAreaId = ref<number | null>(null)
 const formData = reactive({
   name: '',
   description: '',
   geojson: ''
 })
 const jsonError = ref('')
+const actionError = ref('')
+const deletingAreaId = ref<number | null>(null)
+const areaPendingDelete = ref<any | null>(null)
 
 // Map variables
 let map: any = null
 let polygon: any = null
 const mapPoints = ref<[number, number][]>([])
 
+const modalTitle = computed(() => editingAreaId.value ? 'Modifica Area' : 'Nuova Area')
+const submitLabel = computed(() => editingAreaId.value ? 'Salva Modifiche' : 'Crea Area')
+const isEditing = computed(() => editingAreaId.value !== null)
+const areas = computed(() => areasRes.value?.areas || [])
+const areaDeleteMessage = computed(() =>
+  areaPendingDelete.value ? `Vuoi eliminare area "${areaPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+
 const openCreateModal = () => {
+  actionError.value = ''
+  editingAreaId.value = null
   formData.name = ''
   formData.description = ''
   formData.geojson = ''
@@ -74,6 +88,74 @@ const openCreateModal = () => {
   })
 }
 
+const loadPolygonFromGeoJson = (boundaryGeojson: any) => {
+  const coordinates = boundaryGeojson?.coordinates?.[0]
+  if (!Array.isArray(coordinates)) {
+    mapPoints.value = []
+    return
+  }
+
+  const normalized = coordinates
+    .slice(0, -1)
+    .map(([longitude, latitude]: [number, number]) => [latitude, longitude] as [number, number])
+
+  mapPoints.value = normalized
+  if (polygon) {
+    polygon.setLatLngs(mapPoints.value)
+  }
+}
+
+const openEditModal = (area: any) => {
+  actionError.value = ''
+  editingAreaId.value = area.id
+  formData.name = area.name || ''
+  formData.description = area.description || ''
+  formData.geojson = area.boundary_geojson ? JSON.stringify(area.boundary_geojson, null, 2) : ''
+  jsonError.value = ''
+  mapPoints.value = []
+  isCreating.value = true
+
+  nextTick(async () => {
+    const L = (await import('leaflet')).default
+
+    if (map) {
+      map.remove()
+      map = null
+    }
+
+    const bariBounds = L.latLngBounds(
+      [BARI_BOUNDS.south, BARI_BOUNDS.west],
+      [BARI_BOUNDS.north, BARI_BOUNDS.east]
+    )
+
+    map = L.map('areaMap', {
+      maxBounds: bariBounds,
+      maxBoundsViscosity: 1,
+      minZoom: 12
+    }).setView(BARI_CENTER, 12)
+    L.tileLayer('https://{s}.tile.openstreetmap.org/{z}/{x}/{y}.png', {
+      maxZoom: 19,
+      attribution: '© OpenStreetMap'
+    }).addTo(map)
+
+    polygon = L.polygon([], { color: 'red' }).addTo(map)
+    map.fitBounds(bariBounds)
+    loadPolygonFromGeoJson(area.boundary_geojson)
+
+    map.on('click', (e: any) => {
+      if (!isWithinBariBounds(e.latlng.lat, e.latlng.lng)) {
+        jsonError.value = 'Puoi disegnare aree solo entro confini del Comune di Bari.'
+        return
+      }
+
+      jsonError.value = ''
+      mapPoints.value.push([e.latlng.lat, e.latlng.lng])
+      polygon.setLatLngs(mapPoints.value)
+      updateGeojson()
+    })
+  })
+}
+
 const clearMap = () => {
   mapPoints.value = []
   if (polygon) {
@@ -100,6 +182,7 @@ const updateGeojson = () => {
 
 const closeCreateModal = () => {
   isCreating.value = false
+  editingAreaId.value = null
   if (map) {
     map.remove()
     map = null
@@ -131,19 +214,58 @@ const handleCreate = async () => {
   }
 
   try {
-    const res = await createArea({
+    const payload = {
       name: formData.name,
       description: formData.description || undefined,
       boundary_geojson: parsedGeojson
-    })
+    }
+
+    const res = editingAreaId.value
+      ? await updateArea(editingAreaId.value, payload)
+      : await createArea(payload)
     
     if (res.ok) {
       await refresh()
       closeCreateModal()
+      actionError.value = ''
     }
   } catch (err) {
-    console.error('Failed to create area', err)
-    alert('Errore durante la creazione dell\'area.')
+    console.error('Failed to save area', err)
+    actionError.value = 'Errore durante il salvataggio dell\'area.'
+  }
+}
+
+const askDeleteArea = (area: any) => {
+  areaPendingDelete.value = area
+}
+
+const closeDeleteAreaModal = () => {
+  if (deletingAreaId.value) return
+  areaPendingDelete.value = null
+}
+
+const handleDeleteArea = async () => {
+  if (!areaPendingDelete.value) return
+
+  const area = areaPendingDelete.value
+
+  deletingAreaId.value = area.id
+  actionError.value = ''
+
+  try {
+    const res = await deleteArea(area.id)
+    if (res.ok) {
+      if (editingAreaId.value === area.id) {
+        closeCreateModal()
+      }
+      await refresh()
+      areaPendingDelete.value = null
+    }
+  } catch (err: any) {
+    console.error('Failed to delete area', err)
+    actionError.value = err?.data?.message || 'Errore durante eliminazione area.'
+  } finally {
+    deletingAreaId.value = null
   }
 }
 </script>
@@ -165,10 +287,14 @@ const handleCreate = async () => {
       <div class="spinner-border text-primary" role="status"></div>
     </div>
 
-    <div v-else-if="!areasRes?.areas || areasRes.areas.length === 0" class="alert alert-info">
+    <div v-else-if="areas.length === 0" class="alert alert-info">
       Nessuna area configurata.
     </div>
 
+    <div v-if="actionError" class="alert alert-danger">
+      {{ actionError }}
+    </div>
+
     <div v-else class="table-responsive">
       <table class="table table-hover align-middle bg-white shadow-sm rounded">
         <thead class="table-light">
@@ -176,23 +302,32 @@ const handleCreate = async () => {
             <th>ID</th>
             <th>Nome</th>
             <th>Descrizione</th>
-            <th>Stato</th>
             <th>GeoJSON</th>
+            <th class="text-end">Azioni</th>
           </tr>
         </thead>
         <tbody>
-          <tr v-for="area in areasRes.areas" :key="area.id">
+          <tr v-for="area in areas" :key="area.id">
             <td>{{ area.id }}</td>
             <td><strong>{{ area.name }}</strong></td>
             <td>{{ area.description || '-' }}</td>
-            <td>
-              <span v-if="area.active" class="badge bg-success">Attiva</span>
-              <span v-else class="badge bg-secondary">Inattiva</span>
-            </td>
             <td>
               <span v-if="area.boundary_geojson" class="badge border border-primary text-primary">Configurato</span>
               <span v-else class="badge border border-danger text-danger">Mancante</span>
             </td>
+            <td class="text-end">
+              <button class="btn btn-sm btn-outline-primary me-2" @click="openEditModal(area)">
+                Modifica
+              </button>
+              <button
+                class="btn btn-sm btn-outline-danger ms-2"
+                :disabled="deletingAreaId === area.id"
+                @click="askDeleteArea(area)"
+              >
+                <span v-if="deletingAreaId === area.id" class="spinner-border spinner-border-sm me-1"></span>
+                Elimina
+              </button>
+            </td>
           </tr>
         </tbody>
       </table>
@@ -204,7 +339,7 @@ const handleCreate = async () => {
       <div class="modal-dialog modal-xl modal-dialog-centered modal-dialog-scrollable">
         <div class="modal-content">
           <div class="modal-header">
-            <h5 class="modal-title">Nuova Area</h5>
+            <h5 class="modal-title">{{ modalTitle }}</h5>
             <button type="button" class="btn-close" @click="closeCreateModal"></button>
           </div>
           <div class="modal-body">
@@ -251,12 +386,23 @@ const handleCreate = async () => {
           <div class="modal-footer d-flex justify-content-end gap-2">
             <button type="button" class="btn btn-outline-secondary" @click="closeCreateModal">Annulla</button>
             <button type="button" class="btn btn-primary" :disabled="!formData.name || !formData.geojson" @click="handleCreate">
-              Crea Area
+              {{ submitLabel }}
             </button>
           </div>
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+      :open="areaPendingDelete !== null"
+      title="Elimina area"
+      :message="areaDeleteMessage"
+      confirm-label="Elimina area"
+      confirm-class="btn-danger"
+      :pending="deletingAreaId !== null"
+      @cancel="closeDeleteAreaModal"
+      @confirm="handleDeleteArea"
+    />
   </div>
 </template>
 

app/pages/admin/catalog.vue

@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import type { Category, Team } from '~/types/api'
+
 definePageMeta({
   middleware: 'auth',
   auth: { role: 'ADMIN' }
@@ -6,7 +8,7 @@ definePageMeta({
 
 useHead({ title: 'Categorie e Team - Admin' })
 
-const { createCategory, getTeams, createTeam, getAreas } = useAdmin()
+const { createCategory, updateCategory, deleteCategory, getTeams, createTeam, updateTeam, deleteTeam, getAreas } = useAdmin()
 const { getCategories } = useReports()
 
 const { data: categoriesRes, refresh: refreshCategories } = await useAsyncData('report-categories-admin-view', () => getCategories())
@@ -18,6 +20,8 @@ const categoryForm = reactive({
   description: '',
 })
 
+const editingCategoryId = ref<number | null>(null)
+
 const teamForm = reactive({
   name: '',
   description: '',
@@ -25,26 +29,70 @@ const teamForm = reactive({
   area_id: null as number | null,
 })
 
+const editingTeamId = ref<number | null>(null)
+
 const isSavingCategory = ref(false)
 const isSavingTeam = ref(false)
 const categoryError = ref('')
 const teamError = ref('')
+const deletingCategoryId = ref<number | null>(null)
+const deletingTeamId = ref<number | null>(null)
+const categoryPendingDelete = ref<Category | null>(null)
+const teamPendingDelete = ref<Team | null>(null)
 
 const categories = computed(() => categoriesRes.value?.categories || [])
 const teams = computed(() => teamsRes.value?.teams || [])
 const areas = computed(() => areasRes.value?.areas || [])
+const categoryDeleteMessage = computed(() =>
+  categoryPendingDelete.value ? `Vuoi eliminare categoria "${categoryPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+const teamDeleteMessage = computed(() =>
+  teamPendingDelete.value ? `Vuoi eliminare team "${teamPendingDelete.value.name}"? Operazione irreversibile.` : ''
+)
+
+const resetCategoryForm = () => {
+  editingCategoryId.value = null
+  categoryForm.name = ''
+  categoryForm.description = ''
+}
+
+const resetTeamForm = () => {
+  editingTeamId.value = null
+  teamForm.name = ''
+  teamForm.description = ''
+  teamForm.team_category_id = null
+  teamForm.area_id = null
+}
+
+const editCategory = (category: Category) => {
+  editingCategoryId.value = category.id
+  categoryForm.name = category.name
+  categoryForm.description = category.description || ''
+}
+
+const editTeam = (team: Team) => {
+  editingTeamId.value = team.id
+  teamForm.name = team.name
+  teamForm.description = team.description || ''
+  teamForm.team_category_id = team.team_category_id
+  teamForm.area_id = team.area_id ?? null
+}
 
 const submitCategory = async () => {
   categoryError.value = ''
   isSavingCategory.value = true
 
   try {
-    await createCategory({
+    const payload = {
       name: categoryForm.name.trim(),
       description: categoryForm.description.trim() || undefined,
-    })
-    categoryForm.name = ''
-    categoryForm.description = ''
+    }
+    if (editingCategoryId.value) {
+      await updateCategory(editingCategoryId.value, payload)
+    } else {
+      await createCategory(payload)
+    }
+    resetCategoryForm()
     await refreshCategories()
   } catch (error: any) {
     categoryError.value = error?.data?.message || 'Creazione categoria non riuscita.'
@@ -60,16 +108,18 @@ const submitTeam = async () => {
   isSavingTeam.value = true
 
   try {
-    await createTeam({
+    const payload = {
       name: teamForm.name.trim(),
       description: teamForm.description.trim() || undefined,
       team_category_id: teamForm.team_category_id,
       area_id: teamForm.area_id || undefined,
-    })
-    teamForm.name = ''
-    teamForm.description = ''
-    teamForm.team_category_id = null
-    teamForm.area_id = null
+    }
+    if (editingTeamId.value) {
+      await updateTeam(editingTeamId.value, payload)
+    } else {
+      await createTeam(payload)
+    }
+    resetTeamForm()
     await refreshTeams()
   } catch (error: any) {
     teamError.value = error?.data?.message || 'Creazione team non riuscita.'
@@ -77,6 +127,86 @@ const submitTeam = async () => {
     isSavingTeam.value = false
   }
 }
+
+const toggleCategoryActive = async (category: Category) => {
+  try {
+    await updateCategory(category.id, { active: category.active === false })
+    await refreshCategories()
+  } catch (error: any) {
+    categoryError.value = error?.data?.message || 'Aggiornamento categoria non riuscito.'
+  }
+}
+
+const askDeleteCategory = (category: Category) => {
+  categoryPendingDelete.value = category
+}
+
+const closeDeleteCategoryModal = () => {
+  if (deletingCategoryId.value) return
+  categoryPendingDelete.value = null
+}
+
+const handleDeleteCategory = async () => {
+  if (!categoryPendingDelete.value) return
+
+  const category = categoryPendingDelete.value
+
+  deletingCategoryId.value = category.id
+  categoryError.value = ''
+
+  try {
+    await deleteCategory(category.id)
+    if (editingCategoryId.value === category.id) {
+      resetCategoryForm()
+    }
+    await refreshCategories()
+    categoryPendingDelete.value = null
+  } catch (error: any) {
+    categoryError.value = error?.data?.message || 'Eliminazione categoria non riuscita.'
+  } finally {
+    deletingCategoryId.value = null
+  }
+}
+
+const toggleTeamActive = async (team: Team) => {
+  try {
+    await updateTeam(team.id, { active: team.active === false })
+    await refreshTeams()
+  } catch (error: any) {
+    teamError.value = error?.data?.message || 'Aggiornamento team non riuscito.'
+  }
+}
+
+const askDeleteTeam = (team: Team) => {
+  teamPendingDelete.value = team
+}
+
+const closeDeleteTeamModal = () => {
+  if (deletingTeamId.value) return
+  teamPendingDelete.value = null
+}
+
+const handleDeleteTeam = async () => {
+  if (!teamPendingDelete.value) return
+
+  const team = teamPendingDelete.value
+
+  deletingTeamId.value = team.id
+  teamError.value = ''
+
+  try {
+    await deleteTeam(team.id)
+    if (editingTeamId.value === team.id) {
+      resetTeamForm()
+    }
+    await refreshTeams()
+    teamPendingDelete.value = null
+  } catch (error: any) {
+    teamError.value = error?.data?.message || 'Eliminazione team non riuscita.'
+  } finally {
+    deletingTeamId.value = null
+  }
+}
 </script>
 
 <template>
@@ -113,7 +243,15 @@ const submitTeam = async () => {
               </div>
               <button type="submit" class="btn btn-primary" :disabled="isSavingCategory || !categoryForm.name.trim()">
                 <span v-if="isSavingCategory" class="spinner-border spinner-border-sm me-2"></span>
-                Crea categoria
+                {{ editingCategoryId ? 'Salva categoria' : 'Crea categoria' }}
+              </button>
+              <button
+                v-if="editingCategoryId"
+                type="button"
+                class="btn btn-outline-secondary ms-2"
+                @click="resetCategoryForm"
+              >
+                Annulla
               </button>
             </form>
 
@@ -124,6 +262,7 @@ const submitTeam = async () => {
                     <th>ID</th>
                     <th>Nome</th>
                     <th>Stato</th>
+                    <th class="text-end">Azioni</th>
                   </tr>
                 </thead>
                 <tbody>
@@ -138,9 +277,29 @@ const submitTeam = async () => {
                         {{ category.active === false ? 'Inattiva' : 'Attiva' }}
                       </span>
                     </td>
+                    <td class="text-end">
+                      <button class="btn btn-sm btn-outline-primary me-2" @click="editCategory(category)">
+                        Modifica
+                      </button>
+                      <button
+                        class="btn btn-sm"
+                        :class="category.active === false ? 'btn-outline-success' : 'btn-outline-secondary'"
+                        @click="toggleCategoryActive(category)"
+                      >
+                        {{ category.active === false ? 'Attiva' : 'Disattiva' }}
+                      </button>
+                      <button
+                        class="btn btn-sm btn-outline-danger ms-2"
+                        :disabled="deletingCategoryId === category.id"
+                        @click="askDeleteCategory(category)"
+                      >
+                        <span v-if="deletingCategoryId === category.id" class="spinner-border spinner-border-sm me-1"></span>
+                        Elimina
+                      </button>
+                    </td>
                   </tr>
                   <tr v-if="categories.length === 0">
-                    <td colspan="3" class="text-muted">Nessuna categoria configurata.</td>
+                    <td colspan="4" class="text-muted">Nessuna categoria configurata.</td>
                   </tr>
                 </tbody>
               </table>
@@ -191,7 +350,15 @@ const submitTeam = async () => {
               <div class="col-12">
                 <button type="submit" class="btn btn-primary" :disabled="isSavingTeam || !teamForm.name.trim() || !teamForm.team_category_id">
                   <span v-if="isSavingTeam" class="spinner-border spinner-border-sm me-2"></span>
-                  Crea team
+                  {{ editingTeamId ? 'Salva team' : 'Crea team' }}
+                </button>
+                <button
+                  v-if="editingTeamId"
+                  type="button"
+                  class="btn btn-outline-secondary ms-2"
+                  @click="resetTeamForm"
+                >
+                  Annulla
                 </button>
               </div>
             </form>
@@ -205,6 +372,7 @@ const submitTeam = async () => {
                     <th>Categoria</th>
                     <th>Area</th>
                     <th>Stato</th>
+                    <th class="text-end">Azioni</th>
                   </tr>
                 </thead>
                 <tbody>
@@ -221,9 +389,29 @@ const submitTeam = async () => {
                         {{ team.active === false ? 'Inattivo' : 'Attivo' }}
                       </span>
                     </td>
+                    <td class="text-end">
+                      <button class="btn btn-sm btn-outline-primary me-2" @click="editTeam(team)">
+                        Modifica
+                      </button>
+                      <button
+                        class="btn btn-sm"
+                        :class="team.active === false ? 'btn-outline-success' : 'btn-outline-secondary'"
+                        @click="toggleTeamActive(team)"
+                      >
+                        {{ team.active === false ? 'Attiva' : 'Disattiva' }}
+                      </button>
+                      <button
+                        class="btn btn-sm btn-outline-danger ms-2"
+                        :disabled="deletingTeamId === team.id"
+                        @click="askDeleteTeam(team)"
+                      >
+                        <span v-if="deletingTeamId === team.id" class="spinner-border spinner-border-sm me-1"></span>
+                        Elimina
+                      </button>
+                    </td>
                   </tr>
                   <tr v-if="teams.length === 0">
-                    <td colspan="5" class="text-muted">Nessun team configurato.</td>
+                    <td colspan="6" class="text-muted">Nessun team configurato.</td>
                   </tr>
                 </tbody>
               </table>
@@ -232,5 +420,27 @@ const submitTeam = async () => {
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+      :open="categoryPendingDelete !== null"
+      title="Elimina categoria"
+      :message="categoryDeleteMessage"
+      confirm-label="Elimina categoria"
+      confirm-class="btn-danger"
+      :pending="deletingCategoryId !== null"
+      @cancel="closeDeleteCategoryModal"
+      @confirm="handleDeleteCategory"
+    />
+
+    <ConfirmModal
+      :open="teamPendingDelete !== null"
+      title="Elimina team"
+      :message="teamDeleteMessage"
+      confirm-label="Elimina team"
+      confirm-class="btn-danger"
+      :pending="deletingTeamId !== null"
+      @cancel="closeDeleteTeamModal"
+      @confirm="handleDeleteTeam"
+    />
   </div>
 </template>

app/pages/admin/moderation.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { ref, watch } from 'vue'
+import { reactive, ref, watch } from 'vue'
 
 definePageMeta({
   middleware: 'auth',
@@ -13,6 +13,19 @@ const { getModerationFlags, updateModerationFlag } = useAdmin()
 const page = ref(1)
 const perPage = ref(10)
 const statusFilter = ref('')
+const actionError = ref('')
+const resolveModal = reactive({
+  open: false,
+  flagId: null as number | null,
+  rejectReport: false,
+  note: '',
+  pending: false,
+})
+const dismissModal = reactive({
+  open: false,
+  flagId: null as number | null,
+  pending: false,
+})
 
 const { data: flagsRes, pending, refresh } = useAsyncData(
   'admin-moderation-flags', 
@@ -20,36 +33,72 @@ const { data: flagsRes, pending, refresh } = useAsyncData(
   { watch: [page, statusFilter] }
 )
 
-const handleResolve = async (id: number, rejectReport: boolean) => {
-  const note = prompt('Inserisci una nota di risoluzione (opzionale):')
-  if (note === null) return // cancelled
+const openResolveModal = (id: number, rejectReport: boolean) => {
+  resolveModal.open = true
+  resolveModal.flagId = id
+  resolveModal.rejectReport = rejectReport
+  resolveModal.note = ''
+}
+
+const closeResolveModal = () => {
+  if (resolveModal.pending) return
+  resolveModal.open = false
+  resolveModal.flagId = null
+  resolveModal.note = ''
+}
+
+const handleResolve = async () => {
+  if (!resolveModal.flagId) return
+
+  resolveModal.pending = true
+  actionError.value = ''
 
   try {
-    const res = await updateModerationFlag(id, { 
+    const res = await updateModerationFlag(resolveModal.flagId, {
       status: 'RESOLVED', 
-      reject_report: rejectReport,
-      resolution_note: note
+      reject_report: resolveModal.rejectReport,
+      resolution_note: resolveModal.note || undefined
     })
     if (res.ok) {
       await refresh()
+      closeResolveModal()
     }
   } catch (err) {
     console.error('Failed to resolve flag', err)
-    alert('Errore durante la risoluzione della segnalazione.')
+    actionError.value = 'Errore durante la risoluzione della segnalazione.'
+  } finally {
+    resolveModal.pending = false
   }
 }
 
-const handleDismiss = async (id: number) => {
-  if (!confirm('Sei sicuro di voler ignorare (dismiss) questo flag?')) return
+const openDismissModal = (id: number) => {
+  dismissModal.open = true
+  dismissModal.flagId = id
+}
+
+const closeDismissModal = () => {
+  if (dismissModal.pending) return
+  dismissModal.open = false
+  dismissModal.flagId = null
+}
+
+const handleDismiss = async () => {
+  if (!dismissModal.flagId) return
+
+  dismissModal.pending = true
+  actionError.value = ''
 
   try {
-    const res = await updateModerationFlag(id, { status: 'DISMISSED' })
+    const res = await updateModerationFlag(dismissModal.flagId, { status: 'DISMISSED' })
     if (res.ok) {
       await refresh()
+      closeDismissModal()
     }
   } catch (err) {
     console.error('Failed to dismiss flag', err)
-    alert('Errore durante l\'aggiornamento.')
+    actionError.value = 'Errore durante l\'aggiornamento.'
+  } finally {
+    dismissModal.pending = false
   }
 }
 
@@ -88,6 +137,10 @@ const formatDate = (dateStr: string) => {
       Nessun elemento da moderare al momento.
     </div>
 
+    <div v-if="actionError" class="alert alert-danger">
+      {{ actionError }}
+    </div>
+
     <div v-else>
       <div class="card mb-3 shadow-sm border-0" v-for="flag in flagsRes.flags" :key="flag.id">
         <div class="card-header bg-light d-flex justify-content-between align-items-center">
@@ -134,13 +187,13 @@ const formatDate = (dateStr: string) => {
             
             <div class="col-md-4 text-end" v-if="flag.status === 'OPEN'">
               <div class="d-flex flex-column gap-2 mt-3 mt-md-0">
-                <button class="btn btn-outline-danger btn-sm" @click="handleResolve(flag.id, true)">
+                <button class="btn btn-outline-danger btn-sm" @click="openResolveModal(flag.id, true)">
                   <BIIcon name="it-ban" size="xs" /> Risolvi & Rigetta Segn.
                 </button>
-                <button class="btn btn-outline-warning btn-sm" @click="handleResolve(flag.id, false)">
+                <button class="btn btn-outline-warning btn-sm" @click="openResolveModal(flag.id, false)">
                   <BIIcon name="it-check" size="xs" /> Risolvi (Solo Avviso)
                 </button>
-                <button class="btn btn-outline-secondary btn-sm" @click="handleDismiss(flag.id)">
+                <button class="btn btn-outline-secondary btn-sm" @click="openDismissModal(flag.id)">
                   <BIIcon name="it-close" size="xs" /> Ignora Flag
                 </button>
               </div>
@@ -157,5 +210,39 @@ const formatDate = (dateStr: string) => {
         @page-change="page = $event"
       />
     </div>
+
+    <div v-if="resolveModal.open" class="modal-backdrop fade show d-block" style="background: rgba(0,0,0,0.5); z-index: 1040;"></div>
+    <div v-if="resolveModal.open" class="modal fade show d-block" tabindex="-1" style="z-index: 1050;">
+      <div class="modal-dialog modal-dialog-centered">
+        <div class="modal-content">
+          <div class="modal-header">
+            <h5 class="modal-title">{{ resolveModal.rejectReport ? 'Risolvi e rigetta segnalazione' : 'Risolvi flag' }}</h5>
+            <button type="button" class="btn-close" :disabled="resolveModal.pending" @click="closeResolveModal"></button>
+          </div>
+          <div class="modal-body">
+            <label class="form-label">Nota di risoluzione</label>
+            <textarea v-model="resolveModal.note" class="form-control" rows="4" placeholder="Nota opzionale"></textarea>
+          </div>
+          <div class="modal-footer">
+            <button type="button" class="btn btn-outline-secondary" :disabled="resolveModal.pending" @click="closeResolveModal">Annulla</button>
+            <button type="button" class="btn btn-primary" :disabled="resolveModal.pending" @click="handleResolve">
+              <span v-if="resolveModal.pending" class="spinner-border spinner-border-sm me-2"></span>
+              Conferma
+            </button>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <ConfirmModal
+      :open="dismissModal.open"
+      title="Ignora flag"
+      message="Vuoi ignorare questo flag? Azione registrata in moderazione."
+      confirm-label="Ignora flag"
+      confirm-class="btn-outline-secondary"
+      :pending="dismissModal.pending"
+      @cancel="closeDismissModal"
+      @confirm="handleDismiss"
+    />
   </div>
 </template>

app/pages/admin/users.vue

@@ -13,7 +13,18 @@ const { getUsers, updateUserBan, updateUserRoles } = useAdmin()
 const { data: usersRes, pending, refresh } = useAsyncData('admin-users', () => getUsers())
 
 const search = ref('')
+const banError = ref('')
+const roleError = ref('')
+const pendingBanUser = ref<any | null>(null)
+const isUpdatingBan = ref(false)
 const parseRoles = (roles?: string) => roles ? roles.split(',').map((r) => r.trim().toUpperCase()).filter(Boolean) : []
+const banConfirmMessage = computed(() =>
+  pendingBanUser.value
+    ? `Vuoi ${pendingBanUser.value.banned ? 'sbloccare' : 'bannare'} utente ${pendingBanUser.value.first_name} ${pendingBanUser.value.last_name}?`
+    : ''
+)
+const banConfirmLabel = computed(() => pendingBanUser.value?.banned ? 'Sblocca utente' : 'Banna utente')
+const banConfirmClass = computed(() => pendingBanUser.value?.banned ? 'btn-success' : 'btn-danger')
 
 const filteredUsers = computed(() => {
   if (!usersRes.value?.users) return []
@@ -27,17 +38,33 @@ const filteredUsers = computed(() => {
   )
 })
 
-const handleToggleBan = async (id: number, currentBanStatus: boolean) => {
-  if (!confirm(`Sei sicuro di voler ${currentBanStatus ? 'sbloccare' : 'bannare'} questo utente?`)) return
+const askToggleBan = (user: any) => {
+  pendingBanUser.value = user
+}
+
+const closeBanModal = () => {
+  if (isUpdatingBan.value) return
+  pendingBanUser.value = null
+}
+
+const handleToggleBan = async () => {
+  if (!pendingBanUser.value) return
+
+  const user = pendingBanUser.value
+  isUpdatingBan.value = true
+  banError.value = ''
 
   try {
-    const res = await updateUserBan(id, { banned: !currentBanStatus })
+    const res = await updateUserBan(user.id, { banned: !user.banned })
     if (res.ok) {
       await refresh()
+      pendingBanUser.value = null
     }
   } catch (err) {
     console.error('Failed to update user ban status', err)
-    alert('Errore durante l\'aggiornamento dello stato di ban.')
+    banError.value = 'Errore durante l\'aggiornamento dello stato di ban.'
+  } finally {
+    isUpdatingBan.value = false
   }
 }
 
@@ -59,6 +86,7 @@ const closeRoleModal = () => {
 const saveRoles = async () => {
   if (!editingUserId.value) return
 
+  roleError.value = ''
   try {
     const res = await updateUserRoles(editingUserId.value, { roles: selectedRoles.value })
     if (res.ok) {
@@ -67,7 +95,7 @@ const saveRoles = async () => {
     }
   } catch (err) {
     console.error('Failed to update roles', err)
-    alert('Errore durante l\'aggiornamento dei ruoli.')
+    roleError.value = 'Errore durante l\'aggiornamento dei ruoli.'
   }
 }
 </script>
@@ -95,6 +123,14 @@ const saveRoles = async () => {
       Nessun utente trovato.
     </div>
 
+    <div v-if="banError" class="alert alert-danger">
+      {{ banError }}
+    </div>
+
+    <div v-if="roleError" class="alert alert-danger">
+      {{ roleError }}
+    </div>
+
     <div v-else class="table-responsive">
       <table class="table table-hover align-middle">
         <thead>
@@ -138,7 +174,7 @@ const saveRoles = async () => {
               <button 
                 class="btn btn-sm"
                 :class="user.banned ? 'btn-outline-success' : 'btn-outline-danger'"
-                @click="handleToggleBan(user.id, !!user.banned)"
+                @click="askToggleBan(user)"
               >
                 {{ user.banned ? 'Sblocca' : 'Banna' }}
               </button>
@@ -177,5 +213,16 @@ const saveRoles = async () => {
         </div>
       </div>
     </div>
+
+    <ConfirmModal
+      :open="pendingBanUser !== null"
+      title="Conferma stato utente"
+      :message="banConfirmMessage"
+      :confirm-label="banConfirmLabel"
+      :confirm-class="banConfirmClass"
+      :pending="isUpdatingBan"
+      @cancel="closeBanModal"
+      @confirm="handleToggleBan"
+    />
   </div>
 </template>

app/pages/auth/change-password.vue

@@ -1,217 +0,0 @@
-<script setup lang="ts">
-definePageMeta({
-  middleware: 'auth'
-})
-
-useHead({ title: 'Cambio Password - Visione' })
-
-const { changePassword, user, syncUser } = useAuth()
-const router = useRouter()
-
-const formData = reactive({
-  current_password: '',
-  new_password: '',
-  confirm_password: ''
-})
-
-const isLoading = ref(false)
-const errorMessage = ref('')
-
-const showCurrent = ref(false)
-const showNew = ref(false)
-const showConfirm = ref(false)
-
-const canSubmit = computed(() => {
-  return (
-      formData.current_password.length > 0 &&
-      formData.new_password.length >= 8 &&
-      formData.new_password === formData.confirm_password
-  )
-})
-
-const handleSubmit = async () => {
-  if (!canSubmit.value) return
-
-  isLoading.value = true
-  errorMessage.value = ''
-
-  try {
-    const res = await changePassword({
-      current_password: formData.current_password,
-      new_password: formData.new_password
-    })
-
-    if (res.ok) {
-      await syncUser()
-      await router.push('/profile')
-    }
-  } catch (error: any) {
-    errorMessage.value = error.data?.message || 'Errore. Verifica la password attuale.'
-  } finally {
-    isLoading.value = false
-  }
-}
-</script>
-
-<template>
-  <div class="py-5">
-    <div class="container">
-      <div class="row justify-content-center">
-        <div class="col-12 col-lg-8 col-xl-6">
-          <div v-if="user?.must_change_password" class="callout callout-highlight callout-warning mb-4">
-            <div class="callout-title d-flex align-items-center">
-              <BIIcon name="it-warning-circle" size="sm" color="warning" class="me-2" />
-              Azione richiesta
-            </div>
-            <p class="mb-0">Per motivi di sicurezza, imposta una nuova password per il tuo account.</p>
-          </div>
-
-          <div class="card card-bg border-0 shadow-sm">
-            <div class="card-body p-4 p-lg-5">
-              <h1 class="h3 mb-3">Cambia password</h1>
-              <p class="text-muted mb-4">
-                Aggiorna credenziali prima di continuare. Password nuova deve essere diversa da quella attuale.
-              </p>
-
-              <form @submit.prevent="handleSubmit" class="d-grid gap-4">
-                <div class="password-field">
-                  <label for="current_password" class="form-label">Password attuale</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="current_password"
-                      v-model="formData.current_password"
-                      :type="showCurrent ? 'text' : 'password'"
-                      class="form-control"
-                      autocomplete="current-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showCurrent ? 'Nascondi password attuale' : 'Mostra password attuale'"
-                      @click="showCurrent = !showCurrent"
-                    >
-                      <BIIcon :name="showCurrent ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                </div>
-
-                <div class="password-field">
-                  <label for="new_password" class="form-label">Nuova password</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="new_password"
-                      v-model="formData.new_password"
-                      :type="showNew ? 'text' : 'password'"
-                      class="form-control"
-                      autocomplete="new-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showNew ? 'Nascondi nuova password' : 'Mostra nuova password'"
-                      @click="showNew = !showNew"
-                    >
-                      <BIIcon :name="showNew ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                  <div class="form-text">Minimo 8 caratteri.</div>
-                </div>
-
-                <div class="password-field">
-                  <label for="confirm_password" class="form-label">Conferma nuova password</label>
-                  <div class="password-field-control">
-                    <BIIcon name="it-lock" size="sm" class="password-field-icon" />
-                    <input
-                      id="confirm_password"
-                      v-model="formData.confirm_password"
-                      :type="showConfirm ? 'text' : 'password'"
-                      :class="{ 'is-invalid': formData.confirm_password && formData.confirm_password !== formData.new_password }"
-                      class="form-control"
-                      autocomplete="new-password"
-                    >
-                    <button
-                      type="button"
-                      class="btn btn-password-toggle"
-                      :aria-label="showConfirm ? 'Nascondi conferma password' : 'Mostra conferma password'"
-                      @click="showConfirm = !showConfirm"
-                    >
-                      <BIIcon :name="showConfirm ? 'it-password-visible' : 'it-password-invisible'" size="sm" />
-                    </button>
-                  </div>
-                </div>
-
-                <div v-if="errorMessage" class="alert alert-danger mb-0" role="alert">
-                  {{ errorMessage }}
-                </div>
-
-                <button
-                  type="submit"
-                  class="btn btn-primary w-100 py-2"
-                  :disabled="!canSubmit || isLoading"
-                >
-                  <span v-if="isLoading" class="spinner-border spinner-border-sm me-2"></span>
-                  {{ isLoading ? 'Aggiornamento in corso' : 'Aggiorna password' }}
-                </button>
-              </form>
-            </div>
-          </div>
-        </div>
-      </div>
-    </div>
-  </div>
-</template>
-
-<style scoped>
-.password-field {
-  display: grid;
-  gap: 0.5rem;
-}
-
-.password-field-control {
-  align-items: center;
-  background: #fff;
-  border: 1px solid #c5d0db;
-  border-radius: 8px;
-  display: grid;
-  gap: 0.5rem;
-  grid-template-columns: auto minmax(0, 1fr) auto;
-  padding-left: 0.875rem;
-}
-
-.password-field-control:focus-within {
-  border-color: #06c;
-  box-shadow: 0 0 0 2px rgba(0, 102, 204, 0.16);
-}
-
-.password-field-icon {
-  color: #5c6f82;
-}
-
-.password-field-control .form-control {
-  background: transparent;
-  border: 0;
-  border-radius: 0;
-  box-shadow: none;
-  min-width: 0;
-  padding-left: 0;
-  padding-right: 0;
-}
-
-.btn-password-toggle {
-  align-items: center;
-  color: #06c;
-  display: inline-flex;
-  height: 100%;
-  justify-content: center;
-  min-height: 3rem;
-  padding: 0 0.875rem;
-}
-
-.btn-password-toggle:hover,
-.btn-password-toggle:focus {
-  background: rgba(0, 102, 204, 0.08);
-  color: #06c;
-}
-</style>

app/pages/auth/login.vue

@@ -7,20 +7,15 @@ definePageMeta({
 
 useHead({ title: 'Accedi - Visione' })
 
-const { requestOtp, verifyOtp, loginWithPassword, handleLoginSuccess } = useAuth()
-const router = useRouter()
+const { requestOtp, verifyOtp, handleLoginSuccess } = useAuth()
 
 // UI State
-const loginMethod = ref<'otp' | 'password'>('otp')
 const otpStep = ref<1 | 2>(1)
 const isLoading = ref(false)
 const errorMessage = ref('')
 
-
 const email = ref('')
-const password = ref('')
 const otpCode = ref('')
-const showPassword = ref(false)
 
 const handleRequestOtp = async () => {
   isLoading.value = true
@@ -47,19 +42,6 @@ const handleVerifyOtp = async () => {
     isLoading.value = false
   }
 }
-
-const handlePasswordLogin = async () => {
-  isLoading.value = true
-  errorMessage.value = ''
-  try {
-    const res = await loginWithPassword({ email: email.value, password: password.value })
-    await handleLoginSuccess(res.token)
-  } catch (err: any) {
-    errorMessage.value = 'Credenziali non valide.'
-  } finally {
-    isLoading.value = false
-  }
-}
 </script>
 
 <template>
@@ -94,8 +76,6 @@ const handlePasswordLogin = async () => {
                 {{ errorMessage }}
               </div>
 
-              
-              <div v-if="loginMethod === 'otp'">
               <form v-if="otpStep === 1" @submit.prevent="handleRequestOtp">
                 <div class="form-group mb-4">
                   <input type="email" class="form-control" id="email" v-model="email" required>
@@ -123,44 +103,6 @@ const handlePasswordLogin = async () => {
                   <a href="#" class="small text-decoration-none" @click.prevent="otpStep = 1">Modifica indirizzo email</a>
                 </div>
               </form>
-              </div>
-
-              
-              <form v-else @submit.prevent="handlePasswordLogin">
-                <div class="form-group mb-4">
-                  <input type="email" class="form-control" id="emailPwd" v-model="email" required>
-                  <label for="emailPwd" :class="{ 'active': email.length > 0 }">Indirizzo Email</label>
-                </div>
-
-               
-                <div class="form-group mb-4 position-relative">
-                  <input :type="showPassword ? 'text' : 'password'" class="form-control pe-5" id="password" v-model="password" required>
-                  <label for="password" :class="{ 'active': password.length > 0 }">Password</label>
-
-                  <button
-                      type="button"
-                      class="btn bg-transparent border-0 shadow-none position-absolute p-2"
-                      style="right: 0; top: 2px; z-index: 10;"
-                      @click="showPassword = !showPassword"
-                      :aria-pressed="showPassword"
-                      aria-label="Mostra/Nascondi password"
-                  >
-                    <BIIcon :name="showPassword ? 'it-password-visible' : 'it-password-invisible'" color="primary" size="sm" />
-                  </button>
-                </div>
-
-                <button type="submit" class="btn btn-primary w-100 mb-3" :disabled="isLoading">
-                  <span v-if="isLoading" class="spinner-border spinner-border-sm me-2" role="status"></span>
-                  Accedi
-                </button>
-              </form>
-
-              
-              <div class="text-center mt-4">
-                <a href="#" class="small text-decoration-none" @click.prevent="loginMethod = loginMethod === 'otp' ? 'password' : 'otp'; errorMessage = ''">
-                  {{ loginMethod === 'otp' ? 'Vuoi usare la password? Clicca qui' : 'Usa il login sicuro senza password (OTP)' }}
-                </a>
-              </div>
 
             </div>
           </div>

app/pages/auth/register.vue

@@ -14,14 +14,12 @@ const router = useRouter()
 const isLoading = ref(false)
 const errorMessage = ref('')
 const successMessage = ref(false)
-const showPassword = ref(false)
 
 const form = ref({
   first_name: '',
   last_name: '',
   fiscal_code: '',
   email: '',
-  password: '',
   phone: '',
   privacy: false
 })
@@ -56,7 +54,6 @@ const handleRegister = async () => {
       last_name: form.value.last_name,
       fiscal_code: fiscalCode,
       email: form.value.email,
-      password: form.value.password,
       phone: form.value.phone || undefined
     })
 
@@ -89,7 +86,7 @@ const handleRegister = async () => {
             <div class="card-body p-4 p-md-5">
 
               <div v-if="successMessage" class="alert alert-success" role="alert">
-                Registrazione completata con successo! Reindirizzamento al login...
+                Registrazione completata con successo! Reindirizzamento all'accesso con OTP...
               </div>
 
               <div v-if="errorMessage" class="alert alert-danger mb-4" role="alert">
@@ -122,33 +119,15 @@ const handleRegister = async () => {
                   <small class="form-text text-muted">Sarà utilizzato come identificativo univoco nel sistema PA.</small>
                 </div>
 
-                <h2 class="h5 text-primary font-weight-bold mt-5 mb-4 border-bottom pb-2">Credenziali e Contatti</h2>
+                <h2 class="h5 text-primary font-weight-bold mt-5 mb-4 border-bottom pb-2">Contatti</h2>
 
                 <div class="row mb-4">
-                  <div class="col-12 col-md-6 mb-4 mb-md-0">
-                    <div class="form-group">
+                  <div class="col-12">
+                    <div class="form-group position-relative">
                       <input type="email" class="form-control" id="regEmail" v-model="form.email" required>
                       <label for="regEmail" :class="{ 'active': form.email.length > 0 }">Indirizzo Email</label>
                     </div>
                   </div>
-                  <div class="col-12 col-md-6">
-                    <!-- INPUT PASSWORD FIXATO -->
-                    <div class="form-group position-relative">
-                      <input :type="showPassword ? 'text' : 'password'" class="form-control pe-5" id="regPwd" v-model="form.password" required minlength="10">
-                      <label for="regPwd" :class="{ 'active': form.password.length > 0 }">Password (min. 10 crt)</label>
-
-                      <button
-                          type="button"
-                          class="btn bg-transparent border-0 shadow-none position-absolute p-2"
-                          style="right: 0; top: 2px; z-index: 10;"
-                          @click="showPassword = !showPassword"
-                          :aria-pressed="showPassword"
-                          aria-label="Mostra/Nascondi password"
-                      >
-                        <BIIcon :name="showPassword ? 'it-password-visible' : 'it-password-invisible'" color="primary" size="sm" />
-                      </button>
-                    </div>
-                  </div>
                 </div>
 
                 <div class="form-group mb-5">
@@ -169,6 +148,9 @@ const handleRegister = async () => {
                   <span v-if="isLoading" class="spinner-border spinner-border-sm me-2" role="status"></span>
                   Registra Profilo
                 </button>
+                <p class="small text-muted mt-3 mb-0">
+                  Dopo la registrazione potrai accedere usando OTP via email o CIE, quando disponibile.
+                </p>
               </form>
 
             </div>
@@ -185,8 +167,4 @@ const handleRegister = async () => {
 </template>
 
 <style scoped>
-/* Previene che il testo finisca sotto l'icona */
-.pe-5 {
-  padding-right: 3rem !important;
-}
 </style>

app/pages/info.vue

@@ -112,7 +112,7 @@ useHead({
             </li>
             <li class="mt-3">
               <BIIcon name="it-lock" color="primary" class="me-2" />
-              <strong>Sicurezza:</strong> Login Passwordless (OTP nativo) e sistema di autorizzazione Role-Based basato su token JWT.
+              <strong>Sicurezza:</strong> Accesso con OTP e sistema di autorizzazione Role-Based basato su token JWT.
             </li>
             <li class="mt-3">
               <BIIcon name="it-piu" color="primary" class="me-2" />

app/pages/open-data.vue

@@ -3,7 +3,6 @@ import { computed, nextTick, onBeforeUnmount, ref, watch } from 'vue'
 import type { Map as LeafletMap, CircleMarker, LatLngBoundsExpression } from 'leaflet'
 import { BARI_BOUNDS, BARI_CENTER, isWithinBariBounds } from '~/utils/bari'
 
-// 1. API Fetching Logic
 const { getOpenDataReports } = usePublic()
 
 // Reactive pagination state
@@ -34,14 +33,12 @@ const prevPage = () => {
   if (currentPage.value > 1) currentPage.value--
 }
 
-// 2. View Toggle (Grid vs Map)
 const currentView = ref<'grid' | 'map'>('grid')
 const mapContainer = ref<HTMLElement | null>(null)
 let leaflet: typeof import('leaflet') | null = null
 let map: LeafletMap | null = null
 let markers: CircleMarker[] = []
 
-// 3. Helper to style status badges
 const getStatusBadge = (status: string) => {
   switch (status) {
     case 'RESOLVED': return { class: 'bg-success', text: 'Risolto', icon: 'it-check-circle' }

app/pages/operator/reports/[id].vue

@@ -17,7 +17,7 @@ if (!reportId) {
 }
 
 const { getReportDetail, getMessages, addMessage, flagMessage } = useReports()
-const { getInterventionSummary, updateReportStatus, assignTeam, getTeams } = useOperator()
+const { getInterventionSummary, updateReportStatus, assignTeam, getTeams, createInterventionLink, revokeInterventionLink } = useOperator()
 const { user } = useAuth()
 
 // Dati principali
@@ -33,6 +33,7 @@ const messages = computed(() => (messagesData.value as any)?.messages || [])
 const summary = computed(() => (summaryData.value as any)?.summary)
 const summaryMedia = computed(() => (summaryData.value as any)?.media || [])
 const teams = computed(() => teamsData.value?.teams || [])
+
 const statusMeta: Record<string, string> = {
   OPEN: 'Aperta',
   UNDER_REVIEW: 'In revisione',
@@ -43,19 +44,15 @@ const statusMeta: Record<string, string> = {
   CLOSED: 'Chiusa'
 }
 
-// Form Cambia Stato
-const newStatus = ref<ReportStatus>('IN_PROGRESS')
-const statusNote = ref('')
-const isUpdatingStatus = ref(false)
-
-// Form Assegna Squadra
-const isAssignModalOpen = ref(false)
-const selectedTeamId = ref<number | null>(null)
-const isAssigning = ref(false)
-
-// Messaggi
-const isSubmittingMessage = ref(false)
-const isFlaggingMessageId = ref<number | null>(null)
+const statusTransitions: Record<string, string[]> = {
+  OPEN: ['UNDER_REVIEW', 'REJECTED'],
+  UNDER_REVIEW: ['ASSIGNED', 'REJECTED'],
+  ASSIGNED: ['IN_PROGRESS', 'REJECTED'],
+  IN_PROGRESS: ['RESOLVED', 'REJECTED'],
+  RESOLVED: ['CLOSED'],
+  REJECTED: ['CLOSED'],
+  CLOSED: []
+}
 
 const availableStatuses: { value: ReportStatus, label: string }[] = [
   { value: 'OPEN', label: 'Aperta' },
@@ -67,9 +64,50 @@ const availableStatuses: { value: ReportStatus, label: string }[] = [
   { value: 'CLOSED', label: 'Chiusa' }
 ]
 
-// Inizializza lo stato nel form
+const selectableStatuses = computed(() => {
+  if (!report.value?.status) return []
+  const allowed = statusTransitions[report.value.status] || []
+  return availableStatuses.filter(s => allowed.includes(s.value))
+})
+
+const canCreateInterventionLink = computed(() => {
+  if (summary.value?.assignments && Array.isArray(summary.value.assignments)) {
+    return summary.value.assignments.some((a: any) => !a.ended_at)
+  }
+  return ['ASSIGNED', 'IN_PROGRESS'].includes(report.value?.status)
+})
+
+const newStatus = ref<ReportStatus>('IN_PROGRESS')
+const statusNote = ref('')
+const isUpdatingStatus = ref(false)
+
+// Form Assegna Squadra
+const isAssignModalOpen = ref(false)
+const selectedTeamId = ref<number | null>(null)
+const isAssigning = ref(false)
+const interventionLink = ref('')
+const interventionLinkExpiresAt = ref('')
+const isGeneratingInterventionLink = ref(false)
+const isRevokingInterventionLink = ref(false)
+const interventionLinkError = ref('')
+const interventionLinkSuccess = ref('')
+const isRevokeInterventionModalOpen = ref(false)
+
+// Messaggi
+const isSubmittingMessage = ref(false)
+const flaggedMessageIds = ref<number[]>([])
+const isFlagMessageModalOpen = ref(false)
+const messageToFlag = ref<Message | null>(null)
+const isFlaggingMessage = ref(false)
+const isFlaggingMessageId = computed(() => isFlaggingMessage.value ? messageToFlag.value?.id : null)
+
 watch(() => report.value?.status, (val) => {
-  if (val) newStatus.value = val as ReportStatus
+  if (val) {
+    const allowed = statusTransitions[val] || []
+    if (allowed.length > 0) {
+      newStatus.value = allowed[0] as ReportStatus
+    }
+  }
 }, { immediate: true })
 
 const handleStatusUpdate = async () => {
@@ -109,6 +147,73 @@ const handleAssignTeam = async () => {
   }
 }
 
+const copyInterventionLink = async () => {
+  if (!interventionLink.value || !navigator?.clipboard) return
+
+  try {
+    await navigator.clipboard.writeText(interventionLink.value)
+    interventionLinkSuccess.value = 'Link copiato negli appunti.'
+    interventionLinkError.value = ''
+  } catch {
+    interventionLinkError.value = 'Copia automatica non riuscita.'
+    interventionLinkSuccess.value = ''
+  }
+}
+
+const handleCreateInterventionLink = async () => {
+  if (!canCreateInterventionLink.value) return
+  isGeneratingInterventionLink.value = true
+  interventionLinkError.value = ''
+  interventionLinkSuccess.value = ''
+
+  try {
+    const res = await createInterventionLink(reportId)
+    if (res.ok) {
+      interventionLink.value = res.url
+      interventionLinkExpiresAt.value = res.expires_at
+      interventionLinkSuccess.value = 'Link intervento generato.'
+    }
+  } catch (e: any) {
+    console.error('Failed to create intervention link', e)
+    interventionLinkError.value = e?.data?.message || 'Generazione link non riuscita.'
+  } finally {
+    isGeneratingInterventionLink.value = false
+  }
+}
+
+const openRevokeInterventionLinkModal = () => {
+  if (!interventionLink.value) return
+  isRevokeInterventionModalOpen.value = true
+}
+
+const closeRevokeInterventionLinkModal = () => {
+  if (isRevokingInterventionLink.value) return
+  isRevokeInterventionModalOpen.value = false
+}
+
+const handleRevokeInterventionLink = async () => {
+  if (!interventionLink.value) return
+
+  isRevokingInterventionLink.value = true
+  interventionLinkError.value = ''
+  interventionLinkSuccess.value = ''
+
+  try {
+    const res = await revokeInterventionLink(reportId)
+    if (res.ok) {
+      interventionLink.value = ''
+      interventionLinkExpiresAt.value = ''
+      interventionLinkSuccess.value = 'Link intervento revocato.'
+      isRevokeInterventionModalOpen.value = false
+    }
+  } catch (e: any) {
+    console.error('Failed to revoke intervention link', e)
+    interventionLinkError.value = e?.data?.message || 'Revoca link non riuscita.'
+  } finally {
+    isRevokingInterventionLink.value = false
+  }
+}
+
 const handleSendMessage = async (msgText: string, files: File[]) => {
   if (!msgText.trim() && files.length === 0) return
   isSubmittingMessage.value = true
@@ -124,21 +229,35 @@ const handleSendMessage = async (msgText: string, files: File[]) => {
 
 const canFlagMessage = (message: Message) => {
   if (!user.value) return false
-  return message.user_id !== user.value.id && message.user_id === report.value?.user_id
+  const isCitizenMessage = message.user_id !== user.value.id && message.user_id === report.value?.user_id
+  const isAlreadyFlagged = flaggedMessageIds.value.includes(message.id)
+  return isCitizenMessage && !isAlreadyFlagged
 }
 
-const handleFlagMessage = async (message: Message) => {
+const handleFlagMessage = (message: Message) => {
   if (!canFlagMessage(message)) return
 
-  isFlaggingMessageId.value = message.id
+  messageToFlag.value = message
+  isFlagMessageModalOpen.value = true
+}
+
+const executeFlagMessage = async () => {
+  if (!messageToFlag.value) return
+
+  isFlaggingMessage.value = true
   try {
-    await flagMessage(reportId, message.id, {
+    await flagMessage(reportId, messageToFlag.value.id, {
       reason: 'Messaggio segnalato da operatore responsabile per verifica moderazione',
     })
+
+    flaggedMessageIds.value.push(messageToFlag.value.id)
+
+    isFlagMessageModalOpen.value = false
+    messageToFlag.value = null
   } catch (e) {
     console.error('Failed to flag message', e)
   } finally {
-    isFlaggingMessageId.value = null
+    isFlaggingMessage.value = false
   }
 }
 
@@ -158,6 +277,10 @@ const latestCitizenMessage = computed(() => {
       .reverse()
       .find((message) => message.user_id === reportUserId) || null
 })
+
+const formattedInterventionLinkExpiry = computed(() =>
+    interventionLinkExpiresAt.value ? formatDate(interventionLinkExpiresAt.value) : ''
+)
 </script>
 
 <template>
@@ -292,14 +415,68 @@ const latestCitizenMessage = computed(() => {
               </div>
             </div>
 
+            <div class="card card-bg border-0 shadow-sm mb-4">
+              <div class="card-body">
+                <h2 class="h6 mb-3">Link intervento pubblico</h2>
+                <p class="text-muted small mb-3">Genera link temporaneo per team esterno. Nuova generazione ruota link esistente.</p>
+
+                <div v-if="interventionLinkError" class="alert alert-danger py-2" role="alert">
+                  {{ interventionLinkError }}
+                </div>
+                <div v-if="interventionLinkSuccess" class="alert alert-success py-2" role="alert">
+                  {{ interventionLinkSuccess }}
+                </div>
+
+                <template v-if="interventionLink">
+                  <label class="form-label">URL attivo</label>
+                  <div class="input-group mb-2">
+                    <input type="text" class="form-control" :value="interventionLink" readonly />
+                    <button type="button" class="btn btn-outline-primary" @click="copyInterventionLink">
+                      Copia
+                    </button>
+                  </div>
+                  <p class="small text-muted mb-3">
+                    Scade: {{ formattedInterventionLinkExpiry || '-' }}
+                  </p>
+                  <div class="d-grid gap-2">
+                    <button type="button" class="btn btn-outline-primary" :disabled="isGeneratingInterventionLink || !canCreateInterventionLink" @click="handleCreateInterventionLink">
+                      <span v-if="isGeneratingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                      Rigenera link
+                    </button>
+                    <button type="button" class="btn btn-outline-danger" :disabled="isRevokingInterventionLink" @click="openRevokeInterventionLinkModal">
+                      <span v-if="isRevokingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                      Revoca link
+                    </button>
+                  </div>
+                </template>
+
+                <button
+                    v-else
+                    type="button"
+                    class="btn btn-outline-primary w-100"
+                    :disabled="isGeneratingInterventionLink || !canCreateInterventionLink"
+                    @click="handleCreateInterventionLink"
+                >
+                  <span v-if="isGeneratingInterventionLink" class="spinner-border spinner-border-sm me-2"></span>
+                  Genera link
+                </button>
+
+                <div v-if="!canCreateInterventionLink" class="text-danger small mt-2">
+                  È necessaria un'assegnazione in corso per generare o rigenerare questo link.
+                </div>
+              </div>
+            </div>
+
             <div class="card card-bg border-0 shadow-sm mb-4">
               <div class="card-body">
                 <h2 class="h6 mb-3">Aggiorna stato</h2>
+
+                <template v-if="selectableStatuses.length > 0">
                   <form @submit.prevent="handleStatusUpdate">
                     <div class="mb-3">
                       <label class="form-label">Nuovo Stato</label>
                       <select class="form-select" v-model="newStatus">
-                    <option v-for="st in availableStatuses" :key="st.value" :value="st.value">
+                        <option v-for="st in selectableStatuses" :key="st.value" :value="st.value">
                           {{ st.label }}
                         </option>
                       </select>
@@ -308,11 +485,18 @@ const latestCitizenMessage = computed(() => {
                       <label class="form-label">Nota (visibile nella cronologia)</label>
                       <textarea class="form-control" v-model="statusNote" rows="2" placeholder="Motivazione o dettaglio..."></textarea>
                     </div>
-                <button type="submit" class="btn btn-primary w-100" :disabled="isUpdatingStatus || newStatus === report.status">
+                    <button type="submit" class="btn btn-primary w-100" :disabled="isUpdatingStatus">
                       <span v-if="isUpdatingStatus" class="spinner-border spinner-border-sm me-2"></span>
                       Aggiorna Stato
                     </button>
                   </form>
+                </template>
+
+                <template v-else>
+                  <div class="alert alert-info mb-0 small">
+                    La segnalazione è attualmente in stato <strong>{{ statusMeta[report.status] }}</strong>. Non sono consentite ulteriori transizioni.
+                  </div>
+                </template>
               </div>
             </div>
 
@@ -375,6 +559,27 @@ const latestCitizenMessage = computed(() => {
       </div>
     </div>
 
+    <ConfirmModal
+        :open="isRevokeInterventionModalOpen"
+        title="Revoca link intervento"
+        message="Vuoi revocare link pubblico per team esterno? Link non sara piu utilizzabile."
+        confirm-label="Revoca link"
+        confirm-class="btn-danger"
+        :pending="isRevokingInterventionLink"
+        @cancel="closeRevokeInterventionLinkModal"
+        @confirm="handleRevokeInterventionLink"
+    />
+
+    <ConfirmModal
+        :open="isFlagMessageModalOpen"
+        title="Segnala messaggio"
+        message="Sei sicuro di voler segnalare questo messaggio al team di moderazione per una verifica?"
+        confirm-label="Segnala"
+        confirm-class="btn-warning"
+        :pending="isFlaggingMessage"
+        @cancel="isFlagMessageModalOpen = false; messageToFlag = null"
+        @confirm="executeFlagMessage"
+    />
   </div>
   <div v-else class="text-center py-5">
     <div class="spinner-border text-primary" role="status"></div>

app/pages/privacy.vue

@@ -48,7 +48,7 @@ useHead({
           <h2 class="h3 font-weight-bold mb-3">3. Finalità del Trattamento</h2>
           <p class="text-muted mb-4">
             I dati forniti verranno trattati esclusivamente per le seguenti finalità:
-            <br>- Consentire la registrazione e l'autenticazione sicura (incluso login Passwordless tramite OTP).
+            <br>- Consentire la registrazione e l'autenticazione sicura tramite OTP.
             <br>- Gestire la presa in carico e la risoluzione delle segnalazioni urbane da parte delle squadre operative.
             <br>- Fornire comunicazioni di servizio relative allo stato di avanzamento delle segnalazioni.
             <br>- Attribuire punteggi virtuali all'utente nell'ambito del sistema di <em>Gamification</em> volto a incentivare la cittadinanza attiva.

app/pages/profile.vue

@@ -132,7 +132,6 @@ const formatDate = (dateString: string) =>
               <div class="d-grid gap-2">
                 <NuxtLink to="/reports/new" class="btn btn-primary">Nuova segnalazione</NuxtLink>
                 <NuxtLink to="/notifications" class="btn btn-outline-primary">Notifiche</NuxtLink>
-                <NuxtLink to="/auth/change-password" class="btn btn-outline-secondary">Cambia password</NuxtLink>
                 <button type="button" class="btn btn-outline-danger" @click="logout">
                   Logout
                 </button>
@@ -154,3 +153,9 @@ const formatDate = (dateString: string) =>
     </div>
   </div>
 </template>
+
+<style>
+.card .card-body .d-grid > a {
+  padding-block: 8px;
+}
+</style>

app/pages/reports/[id].vue

@@ -31,7 +31,10 @@ const statusHistory = computed(() => (reportData.value as any)?.history || [])
 const messages = computed(() => (messagesData.value as any)?.messages || [])
 
 const newMessage = ref('')
+const fileInput = ref<HTMLInputElement | null>(null)
+const selectedFiles = ref<File[]>([])
 const isSubmittingMessage = ref(false)
+
 const isFeedbackOpen = ref(false)
 const feedbackRating = ref(5)
 const feedbackComment = ref('')
@@ -39,14 +42,27 @@ const isSubmittingFeedback = ref(false)
 const selectedMediaIndex = ref(0)
 const isGalleryOpen = ref(false)
 
+// Gestione selezione file
+const handleFileSelect = (event: Event) => {
+  const target = event.target as HTMLInputElement
+  if (target.files) {
+    selectedFiles.value = Array.from(target.files)
+  }
+}
+
 // Invia messaggio
-const handleSendMessage = async (msgText: string, files: File[]) => {
-  if (!msgText.trim() && files.length === 0) return
+const handleSendMessage = async () => {
+  if (!newMessage.value.trim() && selectedFiles.value.length === 0) return
 
   isSubmittingMessage.value = true
   try {
-    // Gestione mock di file, nella realtà si usa FormData o simle
-    await addMessage(reportId, { body: msgText })
+    await addMessage(reportId, { body: newMessage.value })
+
+    // Pulisci i campi
+    newMessage.value = ''
+    selectedFiles.value = []
+    if (fileInput.value) fileInput.value.value = ''
+
     await refreshMessages()
   } catch (error) {
     console.error('Error sending message:', error)
@@ -75,7 +91,10 @@ const handleSubmitFeedback = async () => {
 }
 
 const isOwner = computed(() => report.value?.user_id === user.value?.id)
-const canFeedback = computed(() => report.value?.status === 'RESOLVED' || report.value?.status === 'CLOSED')
+
+// Valutazione solo se lo stato è specificamente "RESOLVED"
+const canFeedback = computed(() => report.value?.status === 'RESOLVED')
+
 const statusMeta: Record<string, { label: string; tone: string }> = {
   OPEN: { label: 'Aperta', tone: 'info' },
   UNDER_REVIEW: { label: 'In revisione', tone: 'warning' },
@@ -180,30 +199,21 @@ const formatDate = (dateString: string): string => {
             </div>
           </div>
 
-          <div v-if="statusHistory.length > 0" class="card card-bg border-0 shadow-sm mb-4">
+          <div class="card card-bg border-0 shadow-sm mb-4">
             <div class="card-body">
-              <div class="report-section-head mb-4">
-                <BIIcon name="it-history" size="sm" color="primary" class="me-2" />
-                <h2 class="h6 mb-0">Cronologia</h2>
-              </div>
-              <div class="timeline">
-                <div v-for="item in statusHistory" :key="item.id" class="timeline-item mb-3">
-                  <div class="d-flex gap-3">
-                    <div class="flex-shrink-0">
-                      <div class="timeline-marker"></div>
-                    </div>
-                    <div class="flex-grow-1">
-                      <small class="text-muted">{{ formatDate(item.created_at) }}</small>
-                      <div class="small font-weight-semibold d-flex align-items-center gap-2 mt-1">
+              <h2 class="h6 mb-3">Cronologia eventi</h2>
+              <div v-if="statusHistory.length === 0" class="small text-muted">Nessun evento registrato.</div>
+              <ul class="list-unstyled mb-0 ms-2">
+                <li v-for="item in statusHistory" :key="item.id" class="mb-3 border-start border-primary border-3 ps-3">
+                  <small class="text-muted d-block">{{ formatDate(item.created_at) }}</small>
+                  <div class="d-flex align-items-center gap-2 mt-1">
                     <StatusBadge :status="item.old_status" />
                     <BIIcon name="it-arrow-right" size="xs" />
                     <StatusBadge :status="item.new_status" />
                   </div>
-                      <small v-if="item.note" class="text-muted d-block">{{ item.note }}</small>
-                    </div>
-                  </div>
-                </div>
-              </div>
+                  <div v-if="item.note" class="small mt-1 bg-light p-1 rounded">{{ item.note }}</div>
+                </li>
+              </ul>
             </div>
           </div>
 
@@ -219,8 +229,10 @@ const formatDate = (dateString: string): string => {
                 </div>
                 <span class="badge bg-light text-dark border">{{ messages.length }} messaggi</span>
               </div>
+
               <MessageList :messages="messages" />
-              <MessageComposer @send="handleSendMessage" />
+
+              <MessageComposer @send=handleSendMessage />
             </div>
           </div>
         </div>
@@ -408,23 +420,24 @@ const formatDate = (dateString: string): string => {
   justify-content: space-between;
 }
 
-.timeline-marker {
-  width: 12px;
-  height: 12px;
-  background-color: #006f9d;
-  border-radius: 50%;
-  border: 3px solid #f0f0f0;
+.chat-textarea {
+  resize: none !important;
+  height: 48px;
+  min-height: 48px;
+  overflow-y: auto;
+  padding-top: 12px;
+  padding-bottom: 12px;
+  border-radius: 6px;
 }
 
-.timeline-item:not(:last-child) .timeline-marker::after {
-  content: '';
-  position: absolute;
-  left: 50%;
-  top: 20px;
-  width: 2px;
-  height: calc(100% + 20px);
-  background-color: #006f9d;
-  transform: translateX(-50%);
+.btn-square {
+  width: 48px;
+  height: 48px;
+  padding: 0;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  border-radius: 6px;
 }
 
 .ratio {
@@ -457,6 +470,3 @@ const formatDate = (dateString: string): string => {
   }
 }
 </style>
-
-
-

app/types/api.d.ts

@@ -29,7 +29,6 @@ export interface CurrentUser {
     email: string;
     fiscal_code: string;
     points: number;
-    must_change_password: boolean;
     role: string;
     roles: string[];
     permissions: string[];
@@ -45,7 +44,6 @@ export interface AdminUser {
     phone?: string;
     banned?: boolean;
     points?: number;
-    must_change_password?: boolean;
     roles?: string; // Comma-separated
 }
 
@@ -191,23 +189,12 @@ export interface RegisterCitizenRequest {
     first_name: string;
     last_name: string;
     email: string;
-    password: string;
     fiscal_code: string;
     phone?: string;
     birth_date?: string;
     birth_place?: string;
 }
 
-export interface PasswordLoginRequest {
-    email: string;
-    password: string;
-}
-
-export interface ChangePasswordRequest {
-    current_password: string;
-    new_password: string;
-}
-
 export interface UpdateProfileRequest {
     first_name?: string;
     last_name?: string;
@@ -267,11 +254,24 @@ export interface CreateAreaRequest {
     description?: string;
 }
 
+export interface UpdateAreaRequest {
+    name?: string;
+    boundary_geojson?: GeoJsonObject;
+    description?: string;
+    active?: boolean;
+}
+
 export interface CreateCategoryRequest {
     name: string;
     description?: string;
 }
 
+export interface UpdateCategoryRequest {
+    name?: string;
+    description?: string;
+    active?: boolean;
+}
+
 export interface CreateTeamRequest {
     team_category_id: number;
     name: string;
@@ -279,6 +279,14 @@ export interface CreateTeamRequest {
     area_id?: number;
 }
 
+export interface UpdateTeamRequest {
+    team_category_id?: number;
+    name?: string;
+    description?: string;
+    area_id?: number | null;
+    active?: boolean;
+}
+
 export interface UpdateUserBanRequest {
     banned: boolean;
 }
@@ -346,6 +354,12 @@ export interface InterventionSummaryResponse {
     latest_messages: Message[];
 }
 
+export interface AssignmentLinkResponse {
+    ok: boolean;
+    url: string;
+    expires_at: string;
+}
+
 export interface MediaUploadResponse {
     ok: boolean;
     media: Media[];