VisualLimsApiClientMock: fake data for all LIMS endpoints; getInstance() branches on SIMULATE_EXPORT_LIMS

get_clienti.php, get_fixed_field_data.php: simulate mode support
CustomField dropdown values mock added (get_customfield_values.php)

exportUnsavedModal: prompt save before export, MutationObserver waits for save, then proceeds to confirm
Removed old jQuery .export-lims-btn handler that bypassed confirm modal
Fix false "Unsaved changes" on page load: data-restoring guard in all programmatic trigger/dispatchEvent calls (populateSelect, populateClientDropdowns, populateDropdowns)

Fix ConsegnaRichiesta not shown on refresh: add to PHP $fixedAliasMap
Add step5_2_photos, step9_1_importa

public/userarea/class/VisualLimsApiClient.class.php

@@ -24,7 +24,17 @@ class VisualLimsApiClient
     public static function getInstance()
     {
         if (self::$instance === null) {
-            self::$instance = new VisualLimsApiClient();
+            $dotenv = Dotenv::createImmutable(dirname(__DIR__, 3));
+            $dotenv->load();
+
+            $simulate = ($_ENV['SIMULATE_EXPORT_LIMS'] ?? '') === 'true';
+
+            if ($simulate) {
+                require_once __DIR__ . '/VisualLimsApiClientMock.class.php';
+                self::$instance = new VisualLimsApiClientMock();
+            } else {
+                self::$instance = new VisualLimsApiClient();
+            }
         }
         return self::$instance;
     }
@@ -193,6 +203,56 @@ class VisualLimsApiClient
         return json_decode($response, true);
     }
 
+    /**
+     * POST a file as multipart/form-data (used for photo/attachment uploads).
+     *
+     * @param string $endpoint   OData endpoint, e.g. "AllegatoCommessaWeb"
+     * @param string $filePath   Absolute path to the file on disk
+     * @param string $fileName   Original file name to send
+     * @param int    $commessaId CommessaWeb ID to link the attachment to
+     * @return array|null        Decoded JSON response
+     */
+    public function postMultipart($endpoint, $filePath, $fileName, $commessaId)
+    {
+        $token = $this->getToken();
+        $url = "{$this->baseUrl}/api/odata/{$endpoint}";
+
+        $cfile = new CURLFile($filePath, mime_content_type($filePath) ?: 'application/octet-stream', $fileName);
+
+        $payload = [
+            'IdCommessa' => $commessaId,
+            'NomeFile'   => $fileName,
+            'file'       => $cfile,
+        ];
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_POST, true);
+        curl_setopt($ch, CURLOPT_POSTFIELDS, $payload);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: application/json",
+            // Content-Type is set automatically to multipart/form-data by cURL
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response  = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore nella richiesta POST multipart: {$curl_error}");
+        }
+
+        if ($http_code < 200 || $http_code >= 300) {
+            throw new Exception("POST multipart fallito: HTTP {$http_code}, Risposta: " . substr($response, 0, 1000));
+        }
+
+        return json_decode($response, true);
+    }
+
     public function getBaseUrl()
     {
         return $this->baseUrl;