scroll table parts

.gitignore

@@ -40,10 +40,13 @@ yarn-error.log
 /public/userarea/logaspi/
 /public/userarea/logs/api/
 /public/userarea/logs/api/**
+/public/userarea/logs/
+/public/userarea/logs/**
 /public/userarea/photostrf/
 /public/userarea/class/*.log
 /public/userarea/class/curl_auth_debug.log
 /public/userarea/class/curl_request_debug.log
+/public/userarea/schema_dettagli_response.json
 
 # File XLSX temporanei importati
 /public/userarea/imported_trf/*.xlsx

public/userarea/apply_routine.php

@@ -3,6 +3,9 @@ ob_start();
 session_start();
 require_once '../../vendor/autoload.php';
 
+Dotenv\Dotenv::createImmutable(dirname(__DIR__, 2))->safeLoad();
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 $response = ['error' => '', 'rows' => [], 'columns' => [], 'template_id' => 0, 'filename' => '', 'excel_data' => []];
 
 try {

public/userarea/class/VisualLimsApiClient.class.php

@@ -255,4 +255,39 @@ class VisualLimsApiClient
     {
         return $this->baseUrl;
     }
+
+    /**
+     * Recupera contenuto binario - Adattato per https://bvcpsitaly-elims.com/limsapi
+     */
+    public function getRaw($endpoint)
+    {
+        $token = $this->getToken();
+
+        // IMPORTANTE: usa /odata/ e NON /api/odata/
+        $url = "{$this->baseUrl}/odata/{$endpoint}";
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, [
+            "Authorization: Bearer {$token}",
+            "Accept: */*"
+        ]);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+
+        $response = curl_exec($ch);
+        $http_code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $curl_error = curl_error($ch);
+        curl_close($ch);
+
+        if ($response === false) {
+            throw new Exception("Errore cURL: " . $curl_error);
+        }
+
+        if ($http_code !== 200) {
+            throw new Exception("HTTP {$http_code} su endpoint: " . $url);
+        }
+
+        return $response;
+    }
 }

public/userarea/class/db-functions.php

@@ -3,6 +3,9 @@ require_once dirname(__DIR__, 3) . '/vendor/autoload.php';
 
 use Dotenv\Dotenv;
 
+Dotenv::createImmutable(dirname(__DIR__, 3))->safeLoad();
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 class DBHandlerSelect
 {
     private static $instance = null;

public/userarea/cronfiles/get_matrici_cron.php

@@ -17,6 +17,8 @@ try {
     exit(1);
 }
 
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 // Recupera le variabili d'ambiente
 $dbHost = $_ENV['DB_HOST'];
 $dbName = $_ENV['DB_DATABASE'];

public/userarea/download_rapporto_file.php

@@ -0,0 +1,112 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+/**
+ * Uso:
+ *   download_rapporto_file.php?id=123
+ */
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $id = isset($_GET['id']) ? intval($_GET['id']) : 0;
+
+    if (!$id) {
+        throw new Exception("ID RapportoFile mancante");
+    }
+
+    $debugDir = __DIR__ . '/logs/lims_get_commessa/';
+
+    if (!is_dir($debugDir)) {
+        mkdir($debugDir, 0755, true);
+    }
+
+    /**
+     * Recupero il record RapportoFile.
+     */
+    $data = $api->get("RapportoFile({$id})", []);
+
+    file_put_contents(
+        $debugDir . "rapporto_file_{$id}.json",
+        json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE)
+    );
+
+    /**
+     * Provo vari nomi campo possibili per il contenuto PDF.
+     * Dopo il primo test potremo adattarlo al nome esatto.
+     */
+    $possibleContentFields = [
+        'File',
+        'file',
+        'Content',
+        'content',
+        'FileContent',
+        'fileContent',
+        'Contenuto',
+        'contenuto',
+        'Bytes',
+        'bytes'
+    ];
+
+    $base64 = null;
+
+    foreach ($possibleContentFields as $field) {
+        if (!empty($data[$field])) {
+            $base64 = $data[$field];
+            break;
+        }
+    }
+
+    if (!$base64) {
+        header('Content-Type: application/json; charset=utf-8');
+        echo json_encode([
+            'success' => false,
+            'message' => 'Record RapportoFile recuperato, ma non ho trovato un campo base64 del PDF.',
+            'hint' => 'Apri logs/lims_get_commessa/rapporto_file_' . $id . '.json e controlla il nome reale del campo file.',
+            'data' => $data
+        ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+
+    /**
+     * Se il contenuto ha prefisso data URI, lo pulisco.
+     */
+    if (strpos($base64, 'base64,') !== false) {
+        $parts = explode('base64,', $base64);
+        $base64 = end($parts);
+    }
+
+    $pdfBinary = base64_decode($base64, true);
+
+    if ($pdfBinary === false) {
+        throw new Exception("Il contenuto trovato non è un base64 valido");
+    }
+
+    $filename = $data['NomeFile']
+        ?? $data['nomeFile']
+        ?? $data['FileName']
+        ?? $data['fileName']
+        ?? "rapporto_{$id}.pdf";
+
+    if (!str_ends_with(strtolower($filename), '.pdf')) {
+        $filename .= '.pdf';
+    }
+
+    header('Content-Type: application/pdf');
+    header('Content-Disposition: inline; filename="' . basename($filename) . '"');
+    header('Content-Length: ' . strlen($pdfBinary));
+
+    echo $pdfBinary;
+} catch (Exception $e) {
+    http_response_code(500);
+    header('Content-Type: application/json; charset=utf-8');
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/edit_template_xls.php

@@ -25,6 +25,41 @@ if (!$template) {
 $stmt = $pdo->prepare("SELECT * FROM routine");
 $stmt->execute();
 $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
+
+$buttonBgPalette = [
+    '#0d6efd' => 'Blue',
+    '#6610f2' => 'Indigo',
+    '#6f42c1' => 'Purple',
+    '#d63384' => 'Pink',
+    '#dc3545' => 'Red',
+    '#fd7e14' => 'Orange',
+    '#ffc107' => 'Yellow',
+    '#198754' => 'Green',
+    '#20c997' => 'Teal',
+    '#0dcaf0' => 'Cyan',
+    '#212529' => 'Dark',
+    '#6c757d' => 'Gray',
+    '#495057' => 'Slate',
+    '#795548' => 'Brown',
+    '#2f5d50' => 'Sage Green',
+];
+
+$buttonTextPalette = [
+    '#ffffff' => 'White',
+    '#6c757d' => 'Gray',
+    '#000000' => 'Black',
+];
+
+$currentButtonBgColor = strtolower($template['button_bg_color'] ?? '#007bff');
+$currentButtonTextColor = strtolower($template['button_text_color'] ?? '#ffffff');
+
+if (!array_key_exists($currentButtonBgColor, array_change_key_case($buttonBgPalette, CASE_LOWER))) {
+    $currentButtonBgColor = '#0d6efd';
+}
+
+if (!array_key_exists($currentButtonTextColor, array_change_key_case($buttonTextPalette, CASE_LOWER))) {
+    $currentButtonTextColor = '#ffffff';
+}
 ?>
 <!doctype html>
 <html lang="en">
@@ -35,6 +70,64 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
     <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
     <link href="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/css/select2.min.css" rel="stylesheet" />
     <?php include('cssinclude.php'); ?>
+    <style>
+        .color-palette {
+            display: flex;
+            flex-wrap: wrap;
+            gap: 10px;
+            margin-top: 8px;
+        }
+
+        .color-option {
+            position: relative;
+            cursor: pointer;
+        }
+
+        .color-option input {
+            position: absolute;
+            opacity: 0;
+            pointer-events: none;
+        }
+
+        .color-swatch {
+            width: 42px;
+            height: 42px;
+            border-radius: 10px;
+            border: 2px solid #d6dbe0;
+            display: inline-flex;
+            align-items: center;
+            justify-content: center;
+            box-shadow: 0 2px 6px rgba(0, 0, 0, 0.12);
+            transition: all 0.18s ease;
+        }
+
+        .color-option input:checked+.color-swatch {
+            border: 3px solid #111827;
+            transform: scale(1.08);
+            box-shadow: 0 0 0 4px rgba(13, 110, 253, 0.18);
+        }
+
+        .color-swatch .check-mark {
+            display: none;
+            font-size: 18px;
+            font-weight: 700;
+            color: #ffffff;
+            text-shadow: 0 1px 3px rgba(0, 0, 0, 0.7);
+        }
+
+        .color-option input:checked+.color-swatch .check-mark {
+            display: inline-block;
+        }
+
+        .color-name {
+            display: block;
+            font-size: 11px;
+            text-align: center;
+            margin-top: 4px;
+            color: #555;
+            max-width: 55px;
+        }
+    </style>
     <script src="https://code.jquery.com/jquery-3.6.0.min.js" integrity="sha256-/xUj+3OJU5yExlq6GSYGSHk7tPXikynS7ogEvDej/m4=" crossorigin="anonymous"></script>
     <script src="https://cdn.jsdelivr.net/npm/select2@4.1.0-rc.0/dist/js/select2.min.js"></script>
     <title>Edit Template <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
@@ -123,12 +216,46 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
                                 <div class="mb-3">
                                     <label class="form-label">Button Background Color</label>
-                                    <input type="color" name="button_bg_color" class="form-control form-control-color" value="<?php echo htmlspecialchars($template['button_bg_color'] ?? '#007bff'); ?>">
+
+                                    <div class="color-palette">
+                                        <?php foreach ($buttonBgPalette as $colorValue => $colorLabel): ?>
+                                            <?php $isChecked = strtolower($colorValue) === $currentButtonBgColor; ?>
+
+                                            <label class="color-option" title="<?= htmlspecialchars($colorLabel, ENT_QUOTES, 'UTF-8'); ?>">
+                                                <input
+                                                    type="radio"
+                                                    name="button_bg_color"
+                                                    value="<?= htmlspecialchars($colorValue, ENT_QUOTES, 'UTF-8'); ?>"
+                                                    <?= $isChecked ? 'checked' : ''; ?>>
+                                                <span class="color-swatch" style="background-color: <?= htmlspecialchars($colorValue, ENT_QUOTES, 'UTF-8'); ?>;">
+                                                    <span class="check-mark">✓</span>
+                                                </span>
+                                                <span class="color-name"><?= htmlspecialchars($colorLabel, ENT_QUOTES, 'UTF-8'); ?></span>
+                                            </label>
+                                        <?php endforeach; ?>
+                                    </div>
                                 </div>
 
                                 <div class="mb-3">
                                     <label class="form-label">Button Text Color</label>
-                                    <input type="color" name="button_text_color" class="form-control form-control-color" value="<?php echo htmlspecialchars($template['button_text_color'] ?? '#ffffff'); ?>">
+
+                                    <div class="color-palette">
+                                        <?php foreach ($buttonTextPalette as $colorValue => $colorLabel): ?>
+                                            <?php $isChecked = strtolower($colorValue) === $currentButtonTextColor; ?>
+
+                                            <label class="color-option" title="<?= htmlspecialchars($colorLabel, ENT_QUOTES, 'UTF-8'); ?>">
+                                                <input
+                                                    type="radio"
+                                                    name="button_text_color"
+                                                    value="<?= htmlspecialchars($colorValue, ENT_QUOTES, 'UTF-8'); ?>"
+                                                    <?= $isChecked ? 'checked' : ''; ?>>
+                                                <span class="color-swatch" style="background-color: <?= htmlspecialchars($colorValue, ENT_QUOTES, 'UTF-8'); ?>;">
+                                                    <span class="check-mark">✓</span>
+                                                </span>
+                                                <span class="color-name"><?= htmlspecialchars($colorLabel, ENT_QUOTES, 'UTF-8'); ?></span>
+                                            </label>
+                                        <?php endforeach; ?>
+                                    </div>
                                 </div>
 
                                 <div class="mb-3">
@@ -258,6 +385,16 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
             sourceType.addEventListener('change', updateSourceFields);
             updateSourceFields();
 
+            function formatClientLabel(client) {
+                const nome = client.Nominativo || "Name not available";
+                const id = client.IdCliente || "";
+                const codiceCliente = (client.CodiceCliente ?? client.codiceCliente ?? "").toString().trim();
+                const suffix = (codiceCliente.split("_")[1] || "").trim();
+                const shortCode = suffix || (codiceCliente ? codiceCliente.charAt(0) : "--");
+
+                return `${nome.trim()} - ${shortCode} (ID: ${id})`;
+            }
+
             async function loadClients() {
                 try {
                     clientLoadingStatus.style.display = 'inline';
@@ -280,9 +417,8 @@ $routines = $stmt->fetchAll(PDO::FETCH_ASSOC);
                     select.innerHTML = '<option value="">Select a client...</option>';
 
                     data.value.forEach(client => {
-                        const nome = client.Nominativo || "Name not available";
                         const id = client.IdCliente || "";
-                        const option = new Option(`${nome.trim()} (ID: ${id})`, id);
+                        const option = new Option(formatClientLabel(client), id);
 
                         if (parseInt(id) === parseInt(selectedClientId)) {
                             option.selected = true;

public/userarea/error_log.txt

@@ -328,3 +328,6 @@
 2026-03-26 10:57:41 [MoltiplicatorePrezzo] Autenticazione fallita: HTTP 500, Errore cURL: , Risposta: {"title":"Internal Server Error","status":500,"detail":"Timeout expired.  The timeout period elapsed prior to obtaining a connection from the pool.  This may have occurred because all pooled connections were in use and max pool size was reached.","instance":"POST /api/authentication/authenticate","errorCode":"63ab532c6"}
 2026-03-26 10:57:56 [AnagraficaCertestObject] Autenticazione fallita: HTTP 500, Errore cURL: , Risposta: {"title":"Internal Server Error","status":500,"detail":"Timeout expired.  The timeout period elapsed prior to obtaining a connection from the pool.  This may have occurred because all pooled connections were in use and max pool size was reached.","instance":"POST /api/authentication/authenticate","errorCode":"63ab532c6"}
 2026-03-26 10:58:11 [AnagraficaCertestService] Autenticazione fallita: HTTP 500, Errore cURL: , Risposta: {"title":"Internal Server Error","status":500,"detail":"Timeout expired.  The timeout period elapsed prior to obtaining a connection from the pool.  This may have occurred because all pooled connections were in use and max pool size was reached.","instance":"POST /api/authentication/authenticate","errorCode":"63ab532c6"}
+2026-04-30 15:01:25 - Errore nel recupero dati: HTTP 404, Risposta: {"title":"Not Found","status":404,"detail":"Not Found","instance":"GET /api/odata/Rapporto(2621521)","errorCode":"d25cbd678"}
+2026-04-30 15:02:04 - Errore nel recupero dati: HTTP 404, Risposta: 
+2026-04-30 15:03:19 - Errore nella richiesta: URL rejected: Malformed input to a URL function

public/userarea/export_to_lims.php

@@ -432,71 +432,6 @@ try {
     $logFilePhotos = $logDir . "commessa_{$commessaId}_photos_step5_2_" . time() . ".txt";
     $writeLog($logFilePhotos, $logContentPhotos, "STEP 6.2 - Photos (commessa={$commessaId})");
 
-    // 🔹 STEP 6.3: Add Analyses (AnalisiCampione) via Campione({id})/AddAnalisi bound action
-    $stmt = $pdo->prepare("
-        SELECT part_id, analysis_recordkey, analysis_name, analysis_method
-        FROM identification_parts_analyses
-        WHERE iddatadb = :iddatadb
-        ORDER BY part_id, id
-    ");
-    $stmt->execute(['iddatadb' => $iddatadb]);
-    $analysesRows = $stmt->fetchAll(PDO::FETCH_ASSOC);
-
-    $partIdToIndex = [];
-    foreach ($parts as $idx => $part) {
-        $partIdToIndex[(int)$part['part_id']] = $idx;
-    }
-
-    $totalAnalyses = count($analysesRows);
-    $addedAnalyses = 0;
-    $failedAnalyses = [];
-    $logContentStep63Analisi = "Analyses for iddatadb={$iddatadb}: total={$totalAnalyses}\n\n";
-
-    foreach ($analysesRows as $a) {
-        $partId = (int)$a['part_id'];
-        $recordKey = trim((string)($a['analysis_recordkey'] ?? ''));
-        $idx = $partIdToIndex[$partId] ?? null;
-
-        if ($idx === null || !isset($campioni[$idx]) || $recordKey === '') {
-            $logContentStep63Analisi .= "SKIP (no campione for part_id={$partId} / empty recordkey): '{$recordKey}'\n";
-            continue;
-        }
-
-        $campioneId = (int)($campioni[$idx]['IdCampione'] ?? 0);
-        if ($campioneId <= 0) {
-            $logContentStep63Analisi .= "SKIP (invalid IdCampione for part_id={$partId}): '{$recordKey}'\n";
-            continue;
-        }
-
-        $payload = ['RecordKey' => $recordKey];
-        $jsonPayload = json_encode($payload, JSON_UNESCAPED_SLASHES);
-
-        $logContentStep63Analisi .= "curl --location --request POST '{$apiBaseUrl}Campione({$campioneId})/AddAnalisi' \\\n" .
-            "--header 'Content-Type: application/json' \\\n" .
-            "--header 'Authorization: Bearer ••••••' \\\n" .
-            "--data '{$jsonPayload}'\n";
-
-        try {
-            $result = $api->post("Campione({$campioneId})/AddAnalisi", $payload);
-            $logContentStep63Analisi .= "OK (part_id={$partId}, campione={$campioneId}): " .
-                ($a['analysis_name'] ?? '') . "\n---\n";
-            $addedAnalyses++;
-        } catch (Exception $e) {
-            $errMsg = $e->getMessage();
-            $logContentStep63Analisi .= "FAIL: {$errMsg}\n---\n";
-            $failedAnalyses[] = [
-                'part_id' => $partId,
-                'campione_id' => $campioneId,
-                'analysis_recordkey' => $recordKey,
-                'analysis_name' => $a['analysis_name'] ?? '',
-                'error' => $errMsg,
-            ];
-        }
-    }
-
-    $logFileStep63Analisi = $logDir . "commessa_{$commessaId}_analyses_step63_" . time() . ".txt";
-    $writeLog($logFileStep63Analisi, $logContentStep63Analisi, "STEP 6.3 - AddAnalisi (commessa={$commessaId})");
-
     // 🔹 STEP 7: Update Custom Fields for CommessaWeb
     if (!empty($fieldValues)) {
         // GET con espansione per CustomField
@@ -607,7 +542,23 @@ try {
         "RESPONSE:\n" . json_encode($commessaAfterPatch, JSON_PRETTY_PRINT);
     $logFileStep10 = $logDir . "commessa_{$commessaId}_get_step10_" . time() . ".txt";
     $writeLog($logFileStep10, $logContentStep10, "STEP 10 - GET verify (commessa={$commessaId})");
+    // 🔹 STEP 10.1: Save final CodiceCommessa into datadb.commessaweb
+    // After ImportaCommessa, the API returns the final LIMS job code in CodiceCommessa.
+    // Example: CodiceCommessa = 2614795, CodiceCommessaWeb = 26C0103.
+    $finalCodiceCommessa = trim((string)($commessaAfterPatch['CodiceCommessa'] ?? ''));
 
+    if ($finalCodiceCommessa !== '') {
+        $stmt = $pdo->prepare("
+        UPDATE datadb
+        SET commessaweb = :commessaweb,
+            status = 'l'
+        WHERE iddatadb = :iddatadb
+    ");
+        $stmt->execute([
+            'commessaweb' => substr($finalCodiceCommessa, 0, 30),
+            'iddatadb' => $iddatadb
+        ]);
+    }
     // 🔹 STEP 11: Prepare final response
     $finalCommessa = [
         "Cliente" => $clienteId,
@@ -622,21 +573,17 @@ try {
     echo json_encode([
         "success"              => true,
         "idcommessaweb"        => $commessaId,
-        "commessaweb"          => $commessaWebCode,
+        "commessaweb"          => $finalCodiceCommessa ?: $commessaWebCode,
         "commessaWeb"          => $finalCommessa,
         "commessaWebApiResponse" => $commessaWeb, // Incluso per debug
         "totalCampioni"        => count($campioni),
         "totalCustomFields"    => count($commessaAfterPatch["CommesseCustomFields"] ?? []),
         "totalPhotos"          => count($photos),
-        "totalAnalyses"        => $totalAnalyses,
-        "addedAnalyses"        => $addedAnalyses,
-        "failedAnalyses"       => $failedAnalyses,
         "message"              => "Export successful",
         "logFiles"             => [
             "step5_create"     => $logFileStep5,
             "step5_2_photos"   => $logFilePhotos,
             "step6_campioni"   => $logFileStep6,
-            "step63_analyses"  => $logFileStep63Analisi,
             "step7_patch"      => $logFileStep7 ?? null,
             "step9_1_importa"  => $logFileStep91,
             "step10_get"       => $logFileStep10
@@ -652,7 +599,6 @@ try {
             "step5_create"    => $logFileStep5   ?? null,
             "step5_2_photos"  => $logFilePhotos  ?? null,
             "step6_campioni"  => $logFileStep6   ?? null,
-            "step63_analyses" => $logFileStep63Analisi ?? null,
             "step7_patch"     => $logFileStep7   ?? null,
             "step9_1_importa" => $logFileStep91  ?? null,
             "step10_get"      => $logFileStep10  ?? null

public/userarea/get_analisiabilitate.php

@@ -0,0 +1,95 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // Campione hardcoded del tuo esempio
+    $idCampione = 749027;
+
+    // Analisi che stai provando ad assegnare
+    $targetRecordKey = '11;1218320';
+    $targetIdAnalisi = '1218320';
+
+    // Endpoint: recupera il campione espandendo le analisi abilitate
+    $endpoint = "Campione($idCampione)";
+
+    // ATTENZIONE:
+    // nella tua classe normalmente le opzioni vengono trasformate in query string.
+    // Qui serve: ?$expand=AnalisiAbilitate
+    $options = [
+        '$expand' => 'AnalisiAbilitate'
+    ];
+
+    // Debug: salva URL usato
+    $base_url = 'https://93.43.5.102/limsapi/api/odata/';
+    $query = http_build_query($options);
+    $query = urldecode($query); // rende leggibile $expand invece di %24expand
+
+    $full_url = $base_url . $endpoint . ($query ? '?' . $query : '');
+    file_put_contents(__DIR__ . '/last_url_analisi_abilitate.txt', $full_url . PHP_EOL, FILE_APPEND);
+
+    // Chiamata API
+    $data = $api->get($endpoint, $options);
+
+    // Recupera AnalisiAbilitate dalla risposta
+    $analisiAbilitate = $data['AnalisiAbilitate'] ?? [];
+
+    // Alcune API OData possono restituire collection dentro "value"
+    if (isset($analisiAbilitate['value']) && is_array($analisiAbilitate['value'])) {
+        $analisiAbilitate = $analisiAbilitate['value'];
+    }
+
+    // Cerca se il RecordKey / IdAnalisi che stai usando è effettivamente assegnabile
+    $matches = [];
+
+    foreach ($analisiAbilitate as $analisi) {
+        $recordKey = isset($analisi['RecordKey']) ? (string)$analisi['RecordKey'] : '';
+        $idAnalisi = isset($analisi['IdAnalisi']) ? (string)$analisi['IdAnalisi'] : '';
+
+        if ($recordKey === $targetRecordKey || $idAnalisi === $targetIdAnalisi) {
+            $matches[] = $analisi;
+        }
+    }
+
+    // Output diagnostico
+    $output = [
+        'success' => true,
+        'idCampione' => $idCampione,
+        'request_url' => $full_url,
+        'targetRecordKey' => $targetRecordKey,
+        'targetIdAnalisi' => $targetIdAnalisi,
+        'enabled_analyses_count' => is_array($analisiAbilitate) ? count($analisiAbilitate) : 0,
+        'target_found' => count($matches) > 0,
+        'target_matches' => $matches,
+        'analisi_abilitate' => $analisiAbilitate,
+        'raw_response' => $data
+    ];
+
+    // Salva il JSON in locale
+    file_put_contents(
+        __DIR__ . '/analisi_abilitate_campione_749027_response.json',
+        json_encode($output, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE)
+    );
+
+    echo json_encode($output, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    file_put_contents(
+        __DIR__ . '/error_log_analisi_abilitate.txt',
+        date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL,
+        FILE_APPEND
+    );
+
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/get_campionematrice.php

@@ -0,0 +1,88 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // Campione hardcoded del tuo esempio
+    $idCampione = 749027;
+
+    // Matrice attesa dal log STEP 6
+    $expectedMatriceId = 6430;
+
+    // Endpoint con expand della Matrice
+    $endpoint = "Campione($idCampione)";
+    $options = [
+        '$expand' => 'Matrice'
+    ];
+
+    // Debug URL
+    $base_url = 'https://93.43.5.102/limsapi/api/odata/';
+    $query = http_build_query($options);
+    $queryReadable = urldecode($query);
+
+    $full_url = $base_url . $endpoint . ($queryReadable ? '?' . $queryReadable : '');
+
+    file_put_contents(
+        __DIR__ . '/last_url_check_matrice.txt',
+        $full_url . PHP_EOL,
+        FILE_APPEND
+    );
+
+    // Chiamata API
+    $data = $api->get($endpoint, $options);
+
+    // Recupero Matrice dalla response
+    $matrice = $data['Matrice'] ?? null;
+
+    $actualMatriceId = null;
+
+    if (is_array($matrice)) {
+        // Provo i nomi più probabili
+        $actualMatriceId = $matrice['IdMatrice']
+            ?? $matrice['idMatrice']
+            ?? $matrice['Id']
+            ?? $matrice['ID']
+            ?? null;
+    }
+
+    $matrice_ok = ((int)$actualMatriceId === (int)$expectedMatriceId);
+
+    $output = [
+        'success' => true,
+        'idCampione' => $idCampione,
+        'expectedMatriceId' => $expectedMatriceId,
+        'actualMatriceId' => $actualMatriceId,
+        'matrice_ok' => $matrice_ok,
+        'request_url' => $full_url,
+        'matrice' => $matrice,
+        'raw_response' => $data
+    ];
+
+    // Salva JSON completo
+    file_put_contents(
+        __DIR__ . '/check_matrice_campione_749027_response.json',
+        json_encode($output, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE)
+    );
+
+    echo json_encode($output, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    file_put_contents(
+        __DIR__ . '/error_log_check_matrice.txt',
+        date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL,
+        FILE_APPEND
+    );
+
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/get_rapporto_full_by_codice.php

@@ -0,0 +1,256 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+/**
+ * Uso:
+ * rapporto_full_by_codice.php?codice=2621521
+ * rapporto_full_by_codice.php?codice=2621521&download=1
+ */
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $codiceRapporto = trim($_GET['codice'] ?? '');
+    $downloadPdf    = isset($_GET['download']) && $_GET['download'] == '1';
+
+    if ($codiceRapporto === '') {
+        throw new Exception("Parametro codice mancante. Usa ?codice=2621521");
+    }
+
+    $debugDir = __DIR__ . '/logs/lims_rapporti/';
+    $pdfDir   = __DIR__ . '/pdf/rapporti/';
+
+    if (!is_dir($debugDir)) mkdir($debugDir, 0755, true);
+    if (!is_dir($pdfDir))   mkdir($pdfDir, 0755, true);
+
+    $codiceRapportoSafe = str_replace("'", "''", $codiceRapporto);
+
+    /**
+     * STEP 1 - Search IdRapporto
+     */
+    $searchParams = [
+        '$filter' => "CodiceRapporto eq '{$codiceRapportoSafe}'",
+        '$select' => 'IdRapporto,CodiceRapporto,Data,Versione,Firmato,DataStampa',
+        '$top' => 1
+    ];
+
+    $searchEndpoint = "Rapporto?" . http_build_query($searchParams);
+    $searchData = $api->get($searchEndpoint);
+
+    $rapporti = $searchData['value'] ?? [];
+
+    if (empty($rapporti)) {
+        echo json_encode([
+            'success' => false,
+            'message' => 'Nessun rapporto trovato per questo CodiceRapporto.',
+            'codice_rapporto' => $codiceRapporto
+        ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+
+    $rapportoBase = $rapporti[0];
+    $idRapporto = intval($rapportoBase['IdRapporto'] ?? 0);
+
+    if (!$idRapporto) {
+        throw new Exception("IdRapporto non trovato nella risposta.");
+    }
+
+    /**
+     * STEP 2 - Dettaglio Rapporto
+     */
+    $clienteExpandError = null;
+    $detailEndpoint = "Rapporto({$idRapporto})?\$expand=Cliente,RapportiFiles,CampioniDatiRapporto";
+
+    try {
+        $detailData = $api->get($detailEndpoint);
+    } catch (Exception $e) {
+        $clienteExpandError = $e->getMessage();
+        $detailEndpoint = "Rapporto({$idRapporto})?\$expand=RapportiFiles,CampioniDatiRapporto";
+        $detailData = $api->get($detailEndpoint);
+    }
+
+    file_put_contents(
+        $debugDir . "rapporto_{$codiceRapportoSafe}_light.json",
+        json_encode($detailData, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE)
+    );
+
+    $cliente = $detailData['Cliente'] ?? null;
+    $rapportiFiles = $detailData['RapportiFiles'] ?? [];
+    $campioniDatiRapporto = $detailData['CampioniDatiRapporto'] ?? [];
+
+    // ====================== CLIENTE ======================
+    $clienteInfo = [
+        'found' => is_array($cliente),
+        'id_cliente' => $cliente['IdCliente'] ?? $cliente['Id'] ?? null,
+        'codice_cliente' => $cliente['CodiceCliente'] ?? $cliente['Codice'] ?? null,
+        'nome_cliente' => $cliente['Nominativo'] ?? $cliente['RagioneSociale'] ?? $cliente['Nome'] ?? $cliente['Descrizione'] ?? null,
+        'partita_iva' => $cliente['PartitaIva'] ?? null,
+        'codice_fiscale' => $cliente['CodiceFiscale'] ?? null
+    ];
+
+    // ====================== FILE PDF ======================
+    $selectedRapportoFile = null;
+    $idRapportoFile = null;
+    $pdfFileName = $codiceRapporto . '.pdf';
+    $pdfFullPath = $pdfDir . $pdfFileName;
+
+    if (is_array($rapportiFiles) && count($rapportiFiles) > 0) {
+        foreach ($rapportiFiles as $file) {
+            $fileName = $file['FileName'] ?? '';
+            $tipoRapporto = $file['TipoRapporto'] ?? '';
+            $categoria = $file['Categoria'] ?? '';
+
+            if (
+                stripos($fileName, '.pdf') !== false ||
+                stripos($tipoRapporto, 'Rapporto') !== false ||
+                stripos($categoria, 'Rapporti') !== false
+            ) {
+                $selectedRapportoFile = $file;
+                $idRapportoFile = $file['IdRapportoFile'] ?? null;
+                break;
+            }
+        }
+
+        if (!$selectedRapportoFile && count($rapportiFiles) > 0) {
+            $selectedRapportoFile = $rapportiFiles[0];
+            $idRapportoFile = $rapportiFiles[0]['IdRapportoFile'] ?? null;
+        }
+    }
+
+    // ====================== DOWNLOAD PDF - DEBUG AVANZATO ======================
+    $pdfDownloaded = false;
+    $pdfError = null;
+    $endpointUsato = null;
+
+    if ($downloadPdf && $idRapportoFile) {
+
+        $tentativi = [
+            "RapportoFile({$idRapportoFile})/\$value",
+            "RapportoFile({$idRapportoFile})/Contenuto/\$value",
+            "RapportoFile({$idRapportoFile})/File/\$value",
+            "Rapporto({$idRapporto})/RapportiFiles({$idRapportoFile})/\$value",
+            "Rapporto({$idRapporto})/RapportoFile/\$value",
+            "GetRapportoFile?IdRapportoFile={$idRapportoFile}",
+            "RapportoFile/Download?Id={$idRapportoFile}",
+            "Rapporto/DownloadFile?IdRapporto={$idRapporto}"
+        ];
+
+        foreach ($tentativi as $ep) {
+            try {
+                $pdfContent = $api->getRaw($ep);
+
+                if (strlen($pdfContent) > 2000) {        // PDF decente deve essere più grande
+                    file_put_contents($pdfFullPath, $pdfContent);
+                    $pdfDownloaded = true;
+                    $endpointUsato = $ep;
+                    $pdfError = "SUCCESSO con: " . $ep;
+                    break;
+                } else {
+                    $pdfError = "Contenuto troppo piccolo con: " . $ep;
+                }
+            } catch (Exception $e) {
+                $pdfError = "Fallito con " . $ep . " → " . $e->getMessage();
+            }
+        }
+    }
+
+    // ====================== CAMPIONI + RATING (ripristinato dal tuo originale) ======================
+    $campioniSintesi = [];
+    $ratingFinale = null;
+    $ratingSource = null;
+    $hasIrregolare = false;
+    $hasPositiveResults = false;
+
+    if (is_array($campioniDatiRapporto)) {
+        foreach ($campioniDatiRapporto as $campione) {
+            $giudizioRapporto = $campione['GiudizioRapporto'] ?? null;
+            $giudizioCertificato = $campione['GiudizioCertificato'] ?? null;
+            $esitoGiudizioLMR = $campione['EsitoGiudizioLMR'] ?? null;
+            $esitoGiudizioImpiego = $campione['EsitoGiudizioImpiego'] ?? null;
+            $risultatiIrregolari = ($campione['RisultatiIrregolari'] ?? false) === true;
+            $risultatiPositivi = ($campione['RisultatiPositivi'] ?? false) === true;
+
+            $campioniSintesi[] = [
+                'id_campione_dati_rapporto' => $campione['IdCampioneDatiRapporto'] ?? null,
+                'codice_campione' => $campione['CodiceCampione'] ?? null,
+                'stato_campione' => $campione['StatoCampione'] ?? null,
+                'stato_campione_web' => $campione['StatoCampioneWeb'] ?? null,
+                'matrice' => $campione['Matrice'] ?? null,
+                'macro_matrice' => $campione['MacroMatrice'] ?? null,
+                'giudizio_rapporto' => $giudizioRapporto,
+                'giudizio_certificato' => $giudizioCertificato,
+                'esito_giudizio_lmr' => $esitoGiudizioLMR,
+                'esito_giudizio_impiego' => $esitoGiudizioImpiego,
+                'risultati_positivi' => $risultatiPositivi,
+                'risultati_irregolari' => $risultatiIrregolari
+            ];
+
+            if (!$ratingFinale && !empty($giudizioRapporto)) {
+                $ratingFinale = $giudizioRapporto;
+                $ratingSource = 'CampioniDatiRapporto.GiudizioRapporto';
+            }
+
+            if (!$ratingFinale && !empty($giudizioCertificato)) {
+                $ratingFinale = $giudizioCertificato;
+                $ratingSource = 'CampioniDatiRapporto.GiudizioCertificato';
+            }
+
+            if ($risultatiIrregolari) $hasIrregolare = true;
+            if ($risultatiPositivi) $hasPositiveResults = true;
+        }
+    }
+
+    // Fallback rating
+    if (!$ratingFinale) {
+        if ($hasIrregolare) {
+            $ratingFinale = 'Irregolare';
+            $ratingSource = 'RisultatiIrregolari';
+        } elseif ($hasPositiveResults || count($campioniSintesi) > 0) {
+            $ratingFinale = 'Regolare';
+            $ratingSource = 'fallback';
+        }
+    }
+
+    // ====================== RISPOSTA FINALE ======================
+    echo json_encode([
+        'success' => true,
+
+        'codice_rapporto' => $codiceRapporto,
+        'id_rapporto' => $idRapporto,
+
+        'search_endpoint' => $searchEndpoint,
+        'detail_endpoint' => $detailEndpoint,
+        'cliente_expand_error' => $clienteExpandError,
+
+        'rapporto_base' => $rapportoBase,
+        'cliente' => $clienteInfo,
+
+        'rating_finale' => $ratingFinale,
+        'rating_source' => $ratingSource,
+
+        'rapporti_files_count' => count($rapportiFiles),
+        'selected_rapporto_file' => $selectedRapportoFile,
+
+        'pdf_file_name' => $pdfFileName,
+        'pdf_path' => $pdfDownloaded ? $pdfFullPath : null,
+        'pdf_downloaded' => $pdfDownloaded,
+        'pdf_error' => $pdfError,
+
+        'campioni_count' => count($campioniSintesi),
+        'campioni_sintesi' => $campioniSintesi,
+
+        'download_requested' => $downloadPdf
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    http_response_code(500);
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/get_rapporto_lims.php

@@ -0,0 +1,118 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $commessa = trim($_GET['commessa'] ?? '');
+
+    if ($commessa === '') {
+        throw new Exception("Parametro commessa mancante");
+    }
+
+    $debugDir = __DIR__ . '/logs/lims_rapporto/';
+    if (!is_dir($debugDir)) {
+        mkdir($debugDir, 0755, true);
+    }
+
+    /**
+     * STEP 1
+     * Provo a cercare il rapporto con filtri leggeri.
+     * NIENTE expand pesanti.
+     */
+    $attempts = [];
+
+    $filters = [
+        'CodiceCommessa' => "CodiceCommessa eq '{$commessa}'",
+        'Commessa_CodiceCommessa' => "Commessa/CodiceCommessa eq '{$commessa}'",
+        'Commessa_IdCommessa' => is_numeric($commessa) ? "Commessa/IdCommessa eq {$commessa}" : null,
+        'Codice' => "Codice eq '{$commessa}'"
+    ];
+
+    foreach ($filters as $label => $filter) {
+        if (!$filter) {
+            continue;
+        }
+
+        try {
+            $options = [
+                '$filter' => $filter,
+                '$top' => 10
+            ];
+
+            $data = $api->get('Rapporto', $options);
+
+            $attempts[$label] = [
+                'success' => true,
+                'filter' => $filter,
+                'records' => isset($data['value']) && is_array($data['value']) ? count($data['value']) : null,
+                'data' => $data
+            ];
+
+            file_put_contents(
+                $debugDir . "rapporto_{$commessa}_{$label}.json",
+                json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE)
+            );
+        } catch (Exception $e) {
+            $attempts[$label] = [
+                'success' => false,
+                'filter' => $filter,
+                'error' => $e->getMessage()
+            ];
+        }
+    }
+
+    /**
+     * STEP 2
+     * Prendo solo eventuali rapporti trovati.
+     */
+    $rapportiFound = [];
+
+    foreach ($attempts as $label => $attempt) {
+        if (!$attempt['success']) {
+            continue;
+        }
+
+        $items = $attempt['data']['value'] ?? [];
+
+        if (!is_array($items)) {
+            continue;
+        }
+
+        foreach ($items as $item) {
+            $rapportiFound[] = [
+                'matched_by' => $label,
+                'rapporto' => $item
+            ];
+        }
+    }
+
+    echo json_encode([
+        'success' => true,
+        'input_commessa' => $commessa,
+        'message' => 'Ricerca leggera su Rapporto completata. Se trovi un rapporto, poi recuperiamo RapportiFiles solo per quello.',
+        'rapporti_found_count' => count($rapportiFound),
+        'rapporti_found' => $rapportiFound,
+        'attempts_summary' => array_map(function ($a) {
+            return [
+                'success' => $a['success'],
+                'filter' => $a['filter'],
+                'records' => $a['records'] ?? null,
+                'error' => $a['error'] ?? null
+            ];
+        }, $attempts)
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/get_rapporto_prova.php

@@ -2,25 +2,140 @@
 require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
 require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
 
-header('Content-Type: application/json');
+header('Content-Type: application/json; charset=utf-8');
 
 ini_set('display_errors', '0');
 error_reporting(E_ALL);
 
 try {
     $api = VisualLimsApiClient::getInstance();
-    $rapporto_id = 533329;
 
-    // Costruzione manuale dell'endpoint con espansione annidata
-    $endpoint = "Rapporto($rapporto_id)?\$expand=CampioniDatiRapporto(\$expand=AnalisiDatiRapporto,CustomFieldsDatiRapporto)";
+    // Esempi:
+    // rapporto_by_codice_expand_step.php?codice=2541111&step=base
+    // rapporto_by_codice_expand_step.php?codice=2541111&step=files
+    // rapporto_by_codice_expand_step.php?codice=2541111&step=campioni
+    // rapporto_by_codice_expand_step.php?codice=2541111&step=files_campioni
 
-    // Non passiamo options, già incluso nell'endpoint
-    $data = $api->get($endpoint);
+    $codiceRapporto = trim($_GET['codice'] ?? '');
+    $step = trim($_GET['step'] ?? 'base');
 
-    file_put_contents(__DIR__ . '/rapporto_expanded.json', json_encode($data, JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES));
-    echo json_encode($data);
+    if ($codiceRapporto === '') {
+        throw new Exception("Parametro codice mancante. Usa ?codice=2541111");
+    }
+
+    $allowedSteps = [
+        'base' => '',
+        'files' => 'RapportiFiles',
+        'allegati' => 'RapportiAllegati',
+        'campioni' => 'CampioniDatiRapporto',
+        'files_campioni' => 'RapportiFiles,CampioniDatiRapporto'
+    ];
+
+    if (!array_key_exists($step, $allowedSteps)) {
+        throw new Exception("Step non valido. Usa: " . implode(', ', array_keys($allowedSteps)));
+    }
+
+    // Escape OData per eventuali apostrofi
+    $codiceRapportoSafe = str_replace("'", "''", $codiceRapporto);
+
+    /*
+     * STEP 1 - Trova IdRapporto partendo da CodiceRapporto.
+     * Query leggera, con $select e $top=1.
+     */
+    $searchParams = [
+        '$filter' => "CodiceRapporto eq '{$codiceRapportoSafe}'",
+        '$select' => 'IdRapporto,CodiceRapporto,Data,Versione,Firmato,DataStampa',
+        '$top' => 1
+    ];
+
+    $searchEndpoint = "Rapporto?" . http_build_query($searchParams);
+
+    $searchData = $api->get($searchEndpoint);
+
+    $items = $searchData['value'] ?? [];
+
+    if (!is_array($items) || count($items) === 0) {
+        echo json_encode([
+            'success' => false,
+            'message' => 'Nessun rapporto trovato per questo CodiceRapporto.',
+            'codice_rapporto' => $codiceRapporto,
+            'search_endpoint' => $searchEndpoint,
+            'search_data' => $searchData
+        ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+
+    $rapportoBase = $items[0];
+    $rapportoId = intval($rapportoBase['IdRapporto'] ?? 0);
+
+    if (!$rapportoId) {
+        throw new Exception("IdRapporto non trovato nella risposta.");
+    }
+
+    /*
+     * STEP 2 - Se step=base, restituisco solo la ricerca base.
+     */
+    if ($step === 'base') {
+        echo json_encode([
+            'success' => true,
+            'codice_rapporto' => $codiceRapporto,
+            'id_rapporto' => $rapportoId,
+            'step' => $step,
+            'search_endpoint' => $searchEndpoint,
+            'rapporto_base' => $rapportoBase
+        ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+        exit;
+    }
+
+    /*
+     * STEP 3 - Espande SOLO il rapporto trovato.
+     */
+    $expandValue = $allowedSteps[$step];
+
+    $detailParams = [
+        '$expand' => $expandValue
+    ];
+
+    $detailEndpoint = "Rapporto({$rapportoId})?" . http_build_query($detailParams);
+
+    file_put_contents(
+        __DIR__ . '/last_rapporto_by_codice_expand_endpoint.txt',
+        '[' . date('Y-m-d H:i:s') . '] SEARCH: ' . $searchEndpoint . PHP_EOL .
+            '[' . date('Y-m-d H:i:s') . '] DETAIL: ' . $detailEndpoint . PHP_EOL,
+        FILE_APPEND
+    );
+
+    $detailData = $api->get($detailEndpoint);
+
+    file_put_contents(
+        __DIR__ . "/rapporto_codice_{$codiceRapportoSafe}_{$step}.json",
+        json_encode([
+            'search' => $searchData,
+            'detail' => $detailData
+        ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE)
+    );
+
+    echo json_encode([
+        'success' => true,
+        'codice_rapporto' => $codiceRapporto,
+        'id_rapporto' => $rapportoId,
+        'step' => $step,
+        'search_endpoint' => $searchEndpoint,
+        'detail_endpoint' => $detailEndpoint,
+        'rapporto_base' => $rapportoBase,
+        'data' => $detailData
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
 } catch (Exception $e) {
-    file_put_contents(__DIR__ . '/error_log.txt', date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL, FILE_APPEND);
+    file_put_contents(
+        __DIR__ . '/error_log.txt',
+        date('Y-m-d H:i:s') . ' - ' . $e->getMessage() . PHP_EOL,
+        FILE_APPEND
+    );
+
     http_response_code(500);
-    echo json_encode(['error' => $e->getMessage()]);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
 }

public/userarea/gridRenderer.js

@@ -57,7 +57,20 @@
     // ── Client data (AJAX Select2, no bulk loading) ──────────────────────
 
     function formatClientLabel(client) {
-        return (client.Nominativo || "").trim();
+        const nome = client.Nominativo || client.text || "Nome non disponibile";
+        const id = client.IdCliente || client.id || "";
+        const codiceCliente = (
+            client.CodiceCliente ??
+            client.codiceCliente ??
+            ""
+        )
+            .toString()
+            .trim();
+        const suffix = (codiceCliente.split("_")[1] || "").trim();
+        const shortCode =
+            suffix || (codiceCliente ? codiceCliente.charAt(0) : "--");
+
+        return `${nome.trim()} - ${shortCode} (ID: ${id})`;
     }
 
     // Cache of resolved client names: id → name
@@ -102,7 +115,9 @@
                     );
                     const json = await resp.json();
                     const item = (json.results || [])[0];
-                    if (item) clientNameCache[id] = item.text;
+                    if (item) {
+                        clientNameCache[id] = formatClientLabel(item);
+                    }
                 } catch (e) {
                     /* ignore */
                 }
@@ -125,7 +140,12 @@
                 return { q: params.term || "", limit: 20 };
             },
             processResults: function (data) {
-                return { results: data.results || [] };
+                const results = (data.results || []).map((item) => ({
+                    ...item,
+                    text: formatClientLabel(item),
+                }));
+
+                return { results: results };
             },
             cache: true,
         },
@@ -331,6 +351,28 @@
     function createCell(col, rowIndex, cellIndex) {
         const div = document.createElement("div");
         div.className = "grid-cell editable-cell";
+
+        // Field color classification
+        // Schema/customfield fields are green.
+        // Fixed and standard fields stay white.
+        if (col.type === "detail" || col.type === "main_field") {
+            div.classList.add("schema-field");
+        } else if (col.type === "fixed") {
+            div.classList.add("fixed-field");
+        } else {
+            div.classList.add("standard-field");
+        }
+
+        // Required field classification.
+        // This comes from template_mapping.is_required or template_fixed_mapping.is_required.
+        if (
+            col.isRequired === true ||
+            col.isRequired === 1 ||
+            col.isRequired === "1"
+        ) {
+            div.classList.add("required-field");
+        }
+
         div.dataset.col = col.key;
         div.dataset.colType = col.type;
         div.dataset.row = rowIndex;
@@ -744,6 +786,27 @@
         columns.forEach((col, colIdx) => {
             const cell = document.createElement("div");
             cell.className = "grid-cell grid-top-cell";
+
+            // Field color classification for top propagation row
+            // Schema/customfield fields are green.
+            // Fixed and standard fields stay white.
+            if (col.type === "detail" || col.type === "main_field") {
+                cell.classList.add("schema-field");
+            } else if (col.type === "fixed") {
+                cell.classList.add("fixed-field");
+            } else {
+                cell.classList.add("standard-field");
+            }
+
+            // Required field classification also for the top propagation row.
+            if (
+                col.isRequired === true ||
+                col.isRequired === 1 ||
+                col.isRequired === "1"
+            ) {
+                cell.classList.add("required-field");
+            }
+
             cell.style.flex = `0 0 ${col.width}px`;
 
             if (

public/userarea/import_dashboard.php

@@ -10,65 +10,125 @@
     <title>Template Buttons - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
 
     <style>
-        /* Layout flessibile per gestire dimensioni diverse */
-        #templateButtons {
+        /* Main buttons container */
+        .template-buttons {
             display: flex;
             flex-wrap: wrap;
-            gap: 10px;
+            gap: 12px;
             justify-content: flex-start;
-            /* Allinea a sinistra */
-            padding: 20px;
+            padding: 10px 0;
         }
 
-        /* Definizione delle dimensioni */
-        /* Definizione delle dimensioni */
+        /* Button sizes */
         .btn-small {
             font-size: 12px;
             padding: 6px 12px;
             min-width: 100px;
-            min-height: 30px;
-            display: flex;
-            /* Aggiunto */
+            min-height: 36px;
+            display: inline-flex;
             justify-content: center;
-            /* Aggiunto */
             align-items: center;
-            /* Aggiunto */
+            gap: 8px;
+            border-radius: 8px;
+            text-align: center;
         }
 
         .btn-medium {
             font-size: 16px;
             padding: 10px 20px;
-            min-width: 130px;
-            min-height: 45px;
-            display: flex;
-            /* Aggiunto */
+            min-width: 140px;
+            min-height: 48px;
+            display: inline-flex;
             justify-content: center;
-            /* Aggiunto */
             align-items: center;
-            /* Aggiunto */
+            gap: 8px;
+            border-radius: 10px;
+            text-align: center;
         }
 
         .btn-large {
             font-size: 20px;
             padding: 14px 28px;
-            min-width: 180px;
-            min-height: 60px;
-            display: flex;
-            /* Aggiunto */
+            min-width: 190px;
+            min-height: 64px;
+            display: inline-flex;
             justify-content: center;
-            /* Aggiunto */
             align-items: center;
-            /* Aggiunto */
+            gap: 10px;
+            border-radius: 12px;
+            text-align: center;
         }
 
-        /* Stile della barra di ricerca */
+        .template-icon {
+            font-size: 18px;
+            line-height: 1;
+        }
+
+        .btn-large .template-icon {
+            font-size: 22px;
+        }
+
+        .btn-small .template-icon {
+            font-size: 15px;
+        }
+
+        /* Search box */
         #searchInput {
             width: 100%;
-            padding: 10px;
+            padding: 10px 14px;
             font-size: 16px;
-            margin-bottom: 15px;
-            border: 1px solid #ccc;
-            border-radius: 5px;
+            margin-bottom: 18px;
+            border: 1px solid #d9d9d9;
+            border-radius: 8px;
+            outline: none;
+        }
+
+        #searchInput:focus {
+            border-color: #0d6efd;
+            box-shadow: 0 0 0 0.15rem rgba(13, 110, 253, 0.15);
+        }
+
+        /* Tabs */
+        .custom-tabs {
+            border-bottom: 1px solid #e5e5e5;
+            margin-bottom: 20px;
+            gap: 6px;
+        }
+
+        .custom-tabs .nav-link {
+            border: none;
+            border-radius: 10px 10px 0 0;
+            color: #555;
+            font-weight: 500;
+            display: flex;
+            align-items: center;
+            gap: 8px;
+            padding: 10px 18px;
+        }
+
+        .custom-tabs .nav-link:hover {
+            background: #f8f9fa;
+            color: #0d6efd;
+        }
+
+        .custom-tabs .nav-link.active {
+            background: #0d6efd;
+            color: #fff;
+        }
+
+        .tab-pane {
+            min-height: 140px;
+        }
+
+        .empty-message {
+            color: #6c757d;
+            font-style: italic;
+            padding: 10px 0;
+        }
+
+        .loading-message {
+            color: #6c757d;
+            padding: 10px 0;
         }
     </style>
 </head>
@@ -87,14 +147,54 @@
                         <h6 class="mb-0">Active Templates</h6>
                     </div>
                     <div class="card-body">
-                        <!-- Barra di ricerca -->
                         <input type="text" id="searchInput" placeholder="Search template...">
-                        <div id="templateButtons"></div>
+
+                        <ul class="nav nav-tabs custom-tabs" id="templateTabs" role="tablist">
+                            <li class="nav-item" role="presentation">
+                                <button class="nav-link active" id="xls-tab" data-bs-toggle="tab" data-bs-target="#xls-pane" type="button" role="tab" aria-controls="xls-pane" aria-selected="true">
+                                    <i class="bx bx-spreadsheet template-icon"></i>
+                                    XLS
+                                </button>
+                            </li>
+                            <li class="nav-item" role="presentation">
+                                <button class="nav-link" id="api-tab" data-bs-toggle="tab" data-bs-target="#api-pane" type="button" role="tab" aria-controls="api-pane" aria-selected="false">
+                                    <i class="bx bx-transfer-alt template-icon"></i>
+                                    JSON/API
+                                </button>
+                            </li>
+                            <li class="nav-item" role="presentation">
+                                <button class="nav-link" id="pdf-tab" data-bs-toggle="tab" data-bs-target="#pdf-pane" type="button" role="tab" aria-controls="pdf-pane" aria-selected="false">
+                                    <i class="bx bx-file-pdf template-icon"></i>
+                                    PDF
+                                </button>
+                            </li>
+                        </ul>
+
+                        <div class="tab-content" id="templateTabsContent">
+                            <div class="tab-pane fade show active" id="xls-pane" role="tabpanel" aria-labelledby="xls-tab">
+                                <div id="templateButtonsXLS" class="template-buttons">
+                                    <div class="loading-message">Loading XLS templates...</div>
+                                </div>
+                            </div>
+
+                            <div class="tab-pane fade" id="api-pane" role="tabpanel" aria-labelledby="api-tab">
+                                <div id="templateButtonsAPI" class="template-buttons">
+                                    <div class="loading-message">Loading API templates...</div>
+                                </div>
+                            </div>
+
+                            <div class="tab-pane fade" id="pdf-pane" role="tabpanel" aria-labelledby="pdf-tab">
+                                <div id="templateButtonsPDF" class="template-buttons">
+                                    <div class="loading-message">Loading PDF templates...</div>
+                                </div>
+                            </div>
+                        </div>
                     </div>
                 </div>
 
             </div>
         </div>
+
         <div class="overlay toggle-icon"></div>
         <a href="javaScript:;" class="back-to-top"><i class='bx bxs-up-arrow-alt'></i></a>
         <?php include('include/footer.php'); ?>
@@ -104,46 +204,137 @@
 
     <script>
         document.addEventListener("DOMContentLoaded", function() {
+            const allTemplates = [];
+
+            const containers = {
+                XLS: document.getElementById("templateButtonsXLS"),
+                API: document.getElementById("templateButtonsAPI"),
+                PDF: document.getElementById("templateButtonsPDF")
+            };
+
+            function getSizeClass(buttonSize) {
+                if (buttonSize === "small") return "btn-small";
+                if (buttonSize === "large") return "btn-large";
+                return "btn-medium";
+            }
+
+            function getTemplateIcon(sourceType) {
+                switch ((sourceType || '').toUpperCase()) {
+                    case 'XLS':
+                        return 'bx bx-spreadsheet';
+                    case 'API':
+                        return 'bx bx-transfer-alt';
+                    case 'PDF':
+                        return 'bx bx-file-pdf';
+                    default:
+                        return 'bx bx-file';
+                }
+            }
+
+            function createButton(template) {
+                const sizeClass = getSizeClass(template.button_size);
+                const sourceType = (template.source_type || '').toUpperCase();
+                const iconClass = getTemplateIcon(sourceType);
+
+                const btn = document.createElement("a");
+                btn.href = `import_xls2.php?id=${template.id}`;
+                btn.className = `btn ${sizeClass}`;
+                btn.style.backgroundColor = template.button_bg_color || '#0d6efd';
+                btn.style.color = template.button_text_color || '#ffffff';
+                btn.setAttribute("data-label", (template.button_label || '').toLowerCase());
+                btn.setAttribute("data-source-type", sourceType);
+
+                btn.innerHTML = `
+                    <i class="${iconClass} template-icon"></i>
+                    <span>${escapeHtml(template.button_label || 'Unnamed')}</span>
+                `;
+
+                return btn;
+            }
+
+            function escapeHtml(text) {
+                const div = document.createElement('div');
+                div.textContent = text;
+                return div.innerHTML;
+            }
+
+            function clearContainers() {
+                Object.values(containers).forEach(container => {
+                    container.innerHTML = '';
+                });
+            }
+
+            function renderTemplates(searchValue = '') {
+                clearContainers();
+
+                const grouped = {
+                    XLS: [],
+                    API: [],
+                    PDF: []
+                };
+
+                allTemplates.forEach(template => {
+                    const sourceType = (template.source_type || '').toUpperCase();
+                    const label = (template.button_label || '').toLowerCase();
+
+                    if (searchValue && !label.includes(searchValue)) {
+                        return;
+                    }
+
+                    if (grouped[sourceType]) {
+                        grouped[sourceType].push(template);
+                    }
+                });
+
+                Object.keys(grouped).forEach(type => {
+                    const container = containers[type];
+                    if (!container) return;
+
+                    if (grouped[type].length === 0) {
+                        container.innerHTML = `<div class="empty-message">No templates found in this section.</div>`;
+                        return;
+                    }
+
+                    grouped[type].forEach(template => {
+                        container.appendChild(createButton(template));
+                    });
+                });
+            }
+
             fetch("load_active_templates.php")
                 .then(response => response.json())
                 .then(data => {
                     if (!data.success) {
                         console.error("Error loading templates:", data.message);
+                        clearContainers();
+                        Object.values(containers).forEach(container => {
+                            container.innerHTML = `<div class="empty-message">Error loading templates.</div>`;
+                        });
                         return;
                     }
 
-                    let templateButtons = document.getElementById("templateButtons");
-                    templateButtons.innerHTML = '';
-
-                    data.data.forEach(template => {
-                        let sizeClass = "btn-medium"; // Default
-                        if (template.button_size === "small") sizeClass = "btn-small";
-                        if (template.button_size === "large") sizeClass = "btn-large";
-
-                        let btn = document.createElement("a");
-                        btn.href = `import_xls2.php?id=${template.id}`;
-                        btn.className = `btn ${sizeClass}`;
-                        btn.style.backgroundColor = template.button_bg_color;
-                        btn.style.color = template.button_text_color;
-                        btn.textContent = template.button_label;
-                        btn.setAttribute("data-label", template.button_label.toLowerCase()); // Attributo per ricerca
-
-                        templateButtons.appendChild(btn);
-                    });
-                })
-                .catch(error => console.error("Fetch error:", error));
-
-            // Funzione per la ricerca live
-            document.getElementById("searchInput").addEventListener("input", function() {
-                let searchValue = this.value.toLowerCase();
-                document.querySelectorAll("#templateButtons a").forEach(btn => {
-                    let label = btn.getAttribute("data-label");
-                    if (label.includes(searchValue)) {
-                        btn.style.display = "inline-block";
-                    } else {
-                        btn.style.display = "none";
+                    if (!Array.isArray(data.data)) {
+                        clearContainers();
+                        Object.values(containers).forEach(container => {
+                            container.innerHTML = `<div class="empty-message">Invalid response format.</div>`;
+                        });
+                        return;
                     }
+
+                    allTemplates.push(...data.data);
+                    renderTemplates();
+                })
+                .catch(error => {
+                    console.error("Fetch error:", error);
+                    clearContainers();
+                    Object.values(containers).forEach(container => {
+                        container.innerHTML = `<div class="empty-message">Fetch error while loading templates.</div>`;
+                    });
                 });
+
+            document.getElementById("searchInput").addEventListener("input", function() {
+                const searchValue = this.value.toLowerCase().trim();
+                renderTemplates(searchValue);
             });
         });
     </script>

public/userarea/import_edit2.php

@@ -1,10 +1,6 @@
 <?php
 include('include/headscript.php');
 
-// ✅ FIX timezone (Rome)
-ini_set('date.timezone', 'Europe/Rome');
-date_default_timezone_set('Europe/Rome');
-
 if ($_SERVER['REQUEST_METHOD'] !== 'POST' || !isset($_POST['template_id']) || !isset($_POST['selected_rows']) || !isset($_POST['filename'])) {
     header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Richiesta non valida"));
     exit;

public/userarea/imported.php

@@ -1,10 +1,6 @@
 <?php
 include('include/headscript.php');
 
-// ✅ FIX timezone (Rome)
-ini_set('date.timezone', 'Europe/Rome');
-date_default_timezone_set('Europe/Rome');
-
 $template_id = intval($_GET['id'] ?? 0);
 if (!$template_id) {
     header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Template ID mancante"));
@@ -374,20 +370,10 @@ $gridMeta = [
             transition: background-color 0.3s ease;
         }
 
-        input.auto-input,
-        select.auto-input {
-            background-color: #d4edda;
-        }
 
-        input.manual-input,
-        select.manual-input {
-            background-color: #fff3cd;
-        }
 
-        input.required-input,
-        select.required-input {
-            background-color: #f8d7da;
-        }
+
+
 
         input.required-input,
         select.required-input {
@@ -426,17 +412,9 @@ $gridMeta = [
             outline: none !important;
         }
 
-        textarea.auto-input {
-            background-color: #d4edda;
-        }
 
-        textarea.manual-input {
-            background-color: #fff3cd;
-        }
 
-        textarea.required-input {
-            background-color: #f8d7da;
-        }
+
 
         .status-badge {
             display: inline-block;
@@ -1044,11 +1022,7 @@ $gridMeta = [
             font-style: italic;
         }
 
-        .api-fixed-select.required-input:invalid,
-        .api-fixed-select[required]:not([value]):not([data-select2-id]) {
-            background-color: #f8d7da !important;
-            border-color: #dc3545 !important;
-        }
+
 
         /* ── Pagination bar ── */
         .pager-bar {
@@ -1161,6 +1135,128 @@ $gridMeta = [
             color: #adb5bd;
             user-select: none;
         }
+
+        /* =========================================================
+   FINAL GRID COLORS
+   Schema/customfield fields = green
+   Fixed/standard fields = white
+   Required fields = red border only
+   ========================================================= */
+
+        /* Default: all fields white */
+        .grid-container input,
+        .grid-container select,
+        .grid-container textarea,
+        .grid-top input,
+        .grid-top select,
+        .grid-top textarea {
+            background-color: #ffffff !important;
+            color: #333 !important;
+        }
+
+        /* Schema/customfield fields: green background */
+        .grid-container .schema-field input,
+        .grid-container .schema-field select,
+        .grid-container .schema-field textarea,
+        .grid-top .schema-field input,
+        .grid-top .schema-field select,
+        .grid-top .schema-field textarea {
+            background-color: #dff3e3 !important;
+        }
+
+        /* Fixed and standard fields: white background */
+        .grid-container .fixed-field input,
+        .grid-container .fixed-field select,
+        .grid-container .fixed-field textarea,
+        .grid-container .standard-field input,
+        .grid-container .standard-field select,
+        .grid-container .standard-field textarea,
+        .grid-top .fixed-field input,
+        .grid-top .fixed-field select,
+        .grid-top .fixed-field textarea,
+        .grid-top .standard-field input,
+        .grid-top .standard-field select,
+        .grid-top .standard-field textarea {
+            background-color: #ffffff !important;
+        }
+
+        /* Required fields: red border only */
+        .grid-container .required-field input,
+        .grid-container .required-field select,
+        .grid-container .required-field textarea,
+        .grid-top .required-field input,
+        .grid-top .required-field select,
+        .grid-top .required-field textarea {
+            border: 2px solid #dc3545 !important;
+            box-shadow: 0 0 0 1px rgba(220, 53, 69, 0.15) !important;
+        }
+
+        /* Required schema/customfield fields: green + red border */
+        .grid-container .schema-field.required-field input,
+        .grid-container .schema-field.required-field select,
+        .grid-container .schema-field.required-field textarea,
+        .grid-top .schema-field.required-field input,
+        .grid-top .schema-field.required-field select,
+        .grid-top .schema-field.required-field textarea {
+            background-color: #dff3e3 !important;
+            border: 2px solid #dc3545 !important;
+        }
+
+        /* Required fixed/standard fields: white + red border */
+        .grid-container .fixed-field.required-field input,
+        .grid-container .fixed-field.required-field select,
+        .grid-container .fixed-field.required-field textarea,
+        .grid-container .standard-field.required-field input,
+        .grid-container .standard-field.required-field select,
+        .grid-container .standard-field.required-field textarea,
+        .grid-top .fixed-field.required-field input,
+        .grid-top .fixed-field.required-field select,
+        .grid-top .fixed-field.required-field textarea,
+        .grid-top .standard-field.required-field input,
+        .grid-top .standard-field.required-field select,
+        .grid-top .standard-field.required-field textarea {
+            background-color: #ffffff !important;
+            border: 2px solid #dc3545 !important;
+        }
+
+        /* Select2 - schema/customfield fields: green */
+        .grid-container .schema-field .select2-container--default .select2-selection--single,
+        .grid-top .schema-field .select2-container--default .select2-selection--single {
+            background-color: #dff3e3 !important;
+        }
+
+        /* Select2 - fixed/standard fields: white */
+        .grid-container .fixed-field .select2-container--default .select2-selection--single,
+        .grid-container .standard-field .select2-container--default .select2-selection--single,
+        .grid-top .fixed-field .select2-container--default .select2-selection--single,
+        .grid-top .standard-field .select2-container--default .select2-selection--single {
+            background-color: #ffffff !important;
+        }
+
+        /* Select2 - required fields: red border only */
+        .grid-container .required-field .select2-container--default .select2-selection--single,
+        .grid-top .required-field .select2-container--default .select2-selection--single {
+            border: 2px solid #dc3545 !important;
+            box-shadow: 0 0 0 1px rgba(220, 53, 69, 0.15) !important;
+        }
+
+        /* Remove old red background from required classes */
+        .grid-container input.required-input,
+        .grid-container select.required-input,
+        .grid-container textarea.required-input,
+        .grid-top input.required-input,
+        .grid-top select.required-input,
+        .grid-top textarea.required-input {
+            background-color: inherit !important;
+        }
+
+        /* Missing required cell: red outline only */
+        .grid-cell.missing-required {
+            background-color: inherit !important;
+            border-right: 1px solid #dee2e6 !important;
+            outline: 2px solid #dc3545 !important;
+            outline-offset: -2px;
+        }
     </style>
     <title>Edit Imported Data - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
 </head>

public/userarea/include/headscript.php

@@ -10,6 +10,9 @@ error_reporting(E_ALL | E_STRICT);
 include('../../extra/auth.php');
 //require_once __DIR__ . '/extra/auth.php';
 
+// Laravel bootstrap (loaded by auth.php) forces UTC via config/app.php — re-apply our TZ
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 // Here we just check if user is not 
 // logged in, and in that case we redirect
 // the user to vanguard login page.

public/userarea/load_active_templates.php

@@ -13,7 +13,10 @@ try {
     }
 
     // Recupera solo i template attivi
-    $stmt = $pdo->query("SELECT id, button_label, button_bg_color, button_text_color, button_size FROM excel_templates WHERE status = 'active'");
+    $stmt = $pdo->query("SELECT id, button_label, button_size, button_bg_color, button_text_color, source_type
+FROM excel_templates
+WHERE status = 'active'
+ORDER BY button_label ASC");
     $templates = $stmt->fetchAll(PDO::FETCH_ASSOC);
 
     $response["success"] = true;

public/userarea/modal_partsTable.php

@@ -32,6 +32,10 @@
                                 <button type="button" class="btn btn-secondary btn-sm ms-2" id="toggleVoiceBtn" style="padding: 0.1rem 0.5rem; font-size: 0.8rem;">
                                     <i class="fas fa-microphone"></i> Voce
                                 </button>
+                                <button type="button" class="btn btn-outline-primary btn-sm ms-2" id="showHideImageBtn" style="padding: 0.1rem 0.5rem; font-size: 0.8rem;">
+                                    <i class="fas fa-eye-slash" style="font-size: 0.8rem;"></i>
+                                    <i class="fas fa-image ms-1" style="font-size: 0.8rem;"></i>
+                                </button>
                             </div>
                         </div>
                         <!-- Seconda riga: +, M, MacroMatrice, Matrice globale, Propaga -->
@@ -44,45 +48,54 @@
                             <select id="global-matrice" class="form-control form-control-sm" style="width: 350px !important; margin-right: 10px;"></select>
                             <button type="button" class="btn btn-primary btn-sm propagate-all-btn" style="padding: 0.1rem 0.5rem; font-size: 0.8rem;"><i class="fas fa-arrow-right"></i> Propaga a tutte</button>
                         </div>
-                        <table class="table table-striped table-sm" id="partsTable">
-                            <thead>
-                                <tr>
-                                    <th style="width: 55px;">Num</th>
-                                    <th>Descrizione</th>
-                                    <th style="width: 200px;">Matrice</th>
-                                    <th style="width: 150px;">
-                                        <input type="date" class="form-control form-control-sm propagate-date-input" style="width: 130px; margin-left: 5px; display: inline-block;" title="Propaga data a tutte le parti">
-                                    </th>
-                                    <th style="width: 200px;">
-                                        <button type="button" class="btn btn-light btn-sm propagate-note-btn" style="padding: 0.2rem 0.4rem; font-size: 0.9rem; margin-left: 5px;" title="Propaga nota a tutte le parti">
-                                            <i class="fas fa-sticky-note"></i>
-                                        </button>
-                                        Azioni
+                        <div class="parts-table-scroll">
+                            <table class="table table-striped table-sm" id="partsTable">
+                                <colgroup id="partsTableColgroup">
+                                    <col class="parts-col-num">
+                                    <col class="parts-col-description">
+                                    <col class="parts-col-matrice">
+                                    <col class="parts-col-date">
+                                    <col class="parts-col-actions">
+                                </colgroup>
+                                <thead>
+                                    <tr>
+                                        <th style="width: 55px;">Num</th>
+                                        <th>Descrizione</th>
+                                        <th style="width: 200px;">Matrice</th>
+                                        <th style="width: 150px;">
+                                            <input type="date" class="form-control form-control-sm propagate-date-input" style="width: 130px; margin-left: 5px; display: inline-block;" title="Propaga data a tutte le parti">
+                                        </th>
+                                        <th style="width: 200px;">
+                                            <button type="button" class="btn btn-light btn-sm propagate-note-btn" style="padding: 0.2rem 0.4rem; font-size: 0.9rem; margin-left: 5px;" title="Propaga nota a tutte le parti">
+                                                <i class="fas fa-sticky-note"></i>
+                                            </button>
+                                            Azioni
 
-                                    </th>
-                                </tr>
-                            </thead>
-                            <tbody id="partsTableBody">
-                                <tr data-part-id="new">
-                                    <td><input type="number" class="form-control form-control-sm part-number" value="1" style="width: 55px;"></td>
-                                    <td><input type="text" class="form-control form-control-sm part-description" placeholder="Inserisci descrizione"></td>
-                                    <td>
-                                        <div style="display: flex; align-items: center;">
-                                            <button type="button" class="btn btn-primary btn-sm propagate-matrice-btn" style="padding: 0.1rem 0.3rem; font-size: 0.8rem; margin-right: 3px;"><i class="fas fa-arrow-right"></i></button>
-                                            <select class="part-matrice form-control form-control-sm" style="width: 150px;"></select>
-                                        </div>
-                                    </td>
-                                    <td><input type="date" class="form-control form-control-sm part-dateexpiry" style="width: 130px;"></td>
-                                    <td>
-                                        <button type="button" class="btn btn-light btn-sm note-btn" style="padding: 0.2rem 0.4rem; font-size: 0.9rem;" title="Aggiungi/Modifica nota"><i class="fas fa-sticky-note"></i></button>
-                                        <button type="button" class="btn btn-warning btn-sm add-mix-row" style="padding: 0.1rem 0.3rem; font-size: 0.8rem;">M+</button>
-                                        <button type="button" class="btn btn-danger btn-sm remove-row" style="padding: 0.1rem 0.3rem; font-size: 0.8rem; display: none;"><i class="fas fa-trash"></i></button>
-                                        <span class="save-status text-success" style="display: none; margin-left: 5px;"><i class="fas fa-check"></i></span>
-                                        <span class="save-loading text-warning" style="display: none; margin-left: 5px;"><i class="fas fa-spinner fa-spin"></i></span>
-                                    </td>
-                                </tr>
-                            </tbody>
-                        </table>
+                                        </th>
+                                    </tr>
+                                </thead>
+                                <tbody id="partsTableBody">
+                                    <tr data-part-id="new">
+                                        <td><input type="number" class="form-control form-control-sm part-number" value="1" style="width: 55px;"></td>
+                                        <td><input type="text" class="form-control form-control-sm part-description" placeholder="Inserisci descrizione"></td>
+                                        <td>
+                                            <div style="display: flex; align-items: center;">
+                                                <button type="button" class="btn btn-primary btn-sm propagate-matrice-btn" style="padding: 0.1rem 0.3rem; font-size: 0.8rem; margin-right: 3px;"><i class="fas fa-arrow-right"></i></button>
+                                                <select class="part-matrice form-control form-control-sm" style="width: 150px;"></select>
+                                            </div>
+                                        </td>
+                                        <td><input type="date" class="form-control form-control-sm part-dateexpiry" style="width: 130px;"></td>
+                                        <td>
+                                            <button type="button" class="btn btn-light btn-sm note-btn" style="padding: 0.2rem 0.4rem; font-size: 0.9rem;" title="Aggiungi/Modifica nota"><i class="fas fa-sticky-note"></i></button>
+                                            <button type="button" class="btn btn-warning btn-sm add-mix-row" style="padding: 0.1rem 0.3rem; font-size: 0.8rem;">M+</button>
+                                            <button type="button" class="btn btn-danger btn-sm remove-row" style="padding: 0.1rem 0.3rem; font-size: 0.8rem; display: none;"><i class="fas fa-trash"></i></button>
+                                            <span class="save-status text-success" style="display: none; margin-left: 5px;"><i class="fas fa-check"></i></span>
+                                            <span class="save-loading text-warning" style="display: none; margin-left: 5px;"><i class="fas fa-spinner fa-spin"></i></span>
+                                        </td>
+                                    </tr>
+                                </tbody>
+                            </table>
+                        </div>
                     </div>
                     <div class="col-md-3">
                         <h6>Foto del Campione</h6>
@@ -290,28 +303,20 @@
         white-space: nowrap;
     }
 
-    /* Select delle righe (colonna Matrice) = 150px */
+    /* Select delle righe Matrice: si adatta alla colonna */
     .part-matrice {
-        width: 300px !important;
-        min-width: 300px !important;
-        max-width: 300px !important;
-        flex: 0 0 300px !important;
+        width: 100% !important;
+        min-width: 0 !important;
+        max-width: 100% !important;
     }
 
     .part-matrice.select2-hidden-accessible+.select2 {
-        width: 300px !important;
-        min-width: 300px !important;
-        max-width: 300px !important;
-        flex: 0 0 300px !important;
+        width: 100% !important;
+        min-width: 0 !important;
+        max-width: 100% !important;
     }
 
-    /* Colonna Descrizione (2ª colonna) = 420px */
-    #partsTable th:nth-child(2),
-    #partsTable td:nth-child(2) {
-        width: 300px !important;
-        min-width: 300px !important;
-        max-width: 300px !important;
-    }
+
 
     #partsTable .part-number {
         text-align: center;
@@ -516,6 +521,77 @@
         }
     }
 
+    /* Resizable parts table - stable */
+    .parts-table-scroll {
+        width: 100%;
+        overflow-x: auto;
+        overflow-y: visible;
+        contain: inline-size;
+    }
+
+    #partsTable {
+        table-layout: fixed !important;
+        width: max-content !important;
+        min-width: unset !important;
+    }
+
+    #partsTable col.parts-col-num {
+        width: 55px;
+    }
+
+    #partsTable col.parts-col-description {
+        width: 320px;
+    }
+
+    #partsTable col.parts-col-matrice {
+        width: 360px;
+    }
+
+    #partsTable col.parts-col-date {
+        width: 150px;
+    }
+
+    #partsTable col.parts-col-actions {
+        width: 230px;
+    }
+
+    #partsTable th,
+    #partsTable td {
+        position: relative;
+        box-sizing: border-box;
+    }
+
+    #partsTable th {
+        user-select: none;
+    }
+
+    #partsTable th .parts-resizer {
+        position: absolute;
+        top: 0;
+        right: 0;
+        width: 9px;
+        height: 100%;
+        cursor: col-resize;
+        z-index: 50;
+        background: rgba(108, 117, 125, 0.12);
+        border-right: 1px solid rgba(108, 117, 125, 0.45);
+    }
+
+    #partsTable th .parts-resizer:hover {
+        background: rgba(108, 117, 125, 0.25);
+        border-right: 2px solid rgba(73, 80, 87, 0.7);
+    }
+
+    #partsTable td {
+        overflow: hidden;
+        text-overflow: ellipsis;
+    }
+
+    #partsTable td input,
+    #partsTable td select,
+    #partsTable td .select2-container {
+        max-width: 100% !important;
+    }
 
     /* rosso */
 </style>

public/userarea/partsTable.js

@@ -2463,4 +2463,142 @@ $(document).on("click", "#showHideImageBtn", function () {
             "<i class='fas fa-eye' style='font-size: 0.8rem;'></i><i class='fas fa-image ms-1' style='font-size: 0.8rem;'></i>",
         );
     }
+
+    if (typeof window.applyPartsColumnWidths === "function") {
+        setTimeout(window.applyPartsColumnWidths, 150);
+    }
 });
+// ===================
+// RESIZABLE PARTS TABLE COLUMNS - FIXED COLGROUP VERSION
+// ===================
+(function () {
+    // Larghezze default per indice colonna (0-based)
+    const defaultWidths = [55, 320, 360, 150, 230];
+    const savedWidths = [...defaultWidths];
+
+    function getColgroup() {
+        return $("#partsTableColgroup");
+    }
+
+    function syncColgroupToHeaders() {
+        const $table = $("#partsTable");
+        const $ths = $table.find("thead tr:first th");
+        const $colgroup = getColgroup();
+        const thCount = $ths.length;
+
+        // Assicura che ci siano esattamente tante <col> quante <th>
+        while ($colgroup.find("col").length < thCount) {
+            $colgroup.append("<col>");
+        }
+        while ($colgroup.find("col").length > thCount) {
+            $colgroup.find("col:last").remove();
+        }
+
+        // Applica le larghezze salvate
+        $colgroup.find("col").each(function (i) {
+            const w = savedWidths[i] !== undefined ? savedWidths[i] : 150;
+            $(this).css("width", w + "px");
+        });
+
+        // Imposta larghezza totale della tabella = somma colonne (evita reflow)
+        const total = savedWidths.slice(0, thCount).reduce((a, b) => a + b, 0);
+        $table.css("width", total + "px");
+    }
+
+    function applyColumnWidth(colIndex, newWidth) {
+        const w = Math.max(40, Math.round(newWidth));
+        savedWidths[colIndex] = w;
+
+        const $col = getColgroup().find("col").eq(colIndex);
+        if ($col.length) {
+            $col.css("width", w + "px");
+        }
+
+        // Aggiorna larghezza totale tabella senza toccare le altre colonne
+        const thCount = $("#partsTable thead tr:first th").length;
+        const total = savedWidths.slice(0, thCount).reduce((a, b) => a + b, 0);
+        $("#partsTable").css("width", total + "px");
+    }
+
+    function addResizers() {
+        const $table = $("#partsTable");
+        if (!$table.length) return;
+
+        $table.find("thead tr:first th").each(function (colIndex) {
+            const $th = $(this);
+
+            // Salta colonna Num (indice 0) — non ridimensionabile
+            if (colIndex === 0) return;
+
+            // Non aggiungere due volte
+            if ($th.find(".parts-resizer").length) return;
+
+            const $resizer = $("<span class='parts-resizer'></span>");
+            $th.css("position", "relative"); // necessario per il posizionamento assoluto
+            $th.append($resizer);
+
+            $resizer.on("mousedown", function (e) {
+                e.preventDefault();
+                e.stopPropagation();
+
+                const startX = e.pageX;
+                // Leggi la larghezza ESATTA dalla <col>, non dal <th>
+                const startWidth =
+                    savedWidths[colIndex] !== undefined
+                        ? savedWidths[colIndex]
+                        : parseInt(
+                              getColgroup()
+                                  .find("col")
+                                  .eq(colIndex)
+                                  .css("width"),
+                              10,
+                          ) || 150;
+
+                $("body")
+                    .css("user-select", "none")
+                    .css("cursor", "col-resize");
+
+                $(document).on("mousemove.partsResize", function (ev) {
+                    const delta = ev.pageX - startX;
+                    applyColumnWidth(colIndex, startWidth + delta);
+                });
+
+                $(document).on("mouseup.partsResize", function () {
+                    $("body").css("user-select", "").css("cursor", "");
+                    $(document).off(".partsResize");
+                });
+            });
+        });
+    }
+
+    function init() {
+        syncColgroupToHeaders();
+        addResizers();
+    }
+
+    // Init al primo show del modale
+    $(document).on("shown.bs.modal", "#partsModal", function () {
+        setTimeout(init, 120);
+    });
+
+    // Re-init dopo ogni AJAX (nuove righe, caricamenti)
+    $(document).ajaxComplete(function () {
+        if ($("#partsModal").hasClass("show")) {
+            setTimeout(syncColgroupToHeaders, 200);
+            setTimeout(addResizers, 220);
+        }
+    });
+
+    // Re-init dopo aggiunta/rimozione righe
+    $(document).on(
+        "click",
+        ".add-row-global, .add-mix-global, .add-mix-row, .remove-row, #renumberPartsBtn, #clonePartsBtn",
+        function () {
+            setTimeout(syncColgroupToHeaders, 120);
+            setTimeout(addResizers, 140);
+        },
+    );
+
+    window.initPartsResizableColumns = init;
+    window.applyPartsColumnWidths = syncColgroupToHeaders;
+})();

public/userarea/ping_lims_api.php

@@ -0,0 +1,36 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+set_time_limit(20);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $start = microtime(true);
+
+    // Chiamata minima: 1 solo record, 1 solo campo
+    $data = $api->get('Rapporto', [
+        '$top' => 1,
+        '$select' => 'IdRapporto'
+    ]);
+
+    $elapsed = round(microtime(true) - $start, 3);
+
+    echo json_encode([
+        'success' => true,
+        'elapsed_seconds' => $elapsed,
+        'data' => $data
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+} catch (Exception $e) {
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/process_import_xls.php

@@ -10,6 +10,9 @@ session_start();
 // Includi PHPSpreadsheet
 require_once '../../vendor/autoload.php';
 
+Dotenv\Dotenv::createImmutable(dirname(__DIR__, 2))->safeLoad();
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 $response = ['error' => '', 'rows' => [], 'columns' => [], 'template_id' => 0, 'filename' => ''];
 
 try {

public/userarea/save_mapping_json.php

@@ -16,9 +16,11 @@ if (!$data || !isset($data['id'])) {
     exit;
 }
 
-$mappingId = $data['id'];
+$mappingId = (int)$data['id'];
 $mappingType = $data['mapping_type'] ?? '';
+
 $excelColumn = $data['excel_column'] ?? null;
+$jsonNode = $data['json_node'] ?? null;
 $manualDefault = $data['manual_default'] ?? null;
 
 $autoValue = $data['auto_value'] ?? 'none';
@@ -26,7 +28,7 @@ $tablename = $data['tablename'] ?? '';
 
 try {
     // Normalize mapping type
-    $allowedTypes = ['', 'xls', 'manual', 'auto'];
+    $allowedTypes = ['', 'xls', 'json', 'manual', 'auto'];
     if (!in_array($mappingType, $allowedTypes, true)) {
         echo json_encode(["success" => false, "message" => "Invalid mapping_type"]);
         exit;
@@ -41,43 +43,67 @@ try {
     // Decide what to persist based on mapping_type
     $isManual = 0;
     $excelToSave = null;
+    $jsonNodeToSave = null;
     $manualToSave = null;
     $autoToSave = 'none';
 
     if ($mappingType === 'xls') {
+
         $isManual = 0;
         $excelToSave = $excelColumn ?: null;
+        $jsonNodeToSave = null;
+        $manualToSave = null;
+        $autoToSave = 'none';
+    } elseif ($mappingType === 'json') {
+
+        $isManual = 0;
+        $excelToSave = null;
+        $jsonNodeToSave = $jsonNode ?: null;
         $manualToSave = null;
         $autoToSave = 'none';
     } elseif ($mappingType === 'manual') {
+
         $isManual = 1;
         $excelToSave = null;
+        $jsonNodeToSave = null;
         $manualToSave = $manualDefault;
         $autoToSave = 'none';
     } elseif ($mappingType === 'auto') {
+
         $isManual = 0;
         $excelToSave = null;
+        $jsonNodeToSave = null;
         $manualToSave = null;
         $autoToSave = $autoValue ?: 'none';
     } else {
-        // reset
+
+        // Reset mapping
         $isManual = 0;
         $excelToSave = null;
+        $jsonNodeToSave = null;
         $manualToSave = null;
         $autoToSave = 'none';
     }
 
     $stmt = $pdo->prepare("
-    UPDATE template_mapping
-    SET
-        is_manual = ?,
-        excel_column = ?,
-        manual_default = ?,
-        auto_value = ?
-    WHERE id = ?
-");
+        UPDATE template_mapping
+        SET
+            is_manual = ?,
+            excel_column = ?,
+            json_node = ?,
+            manual_default = ?,
+            auto_value = ?
+        WHERE id = ?
+    ");
 
-    $result = $stmt->execute([$isManual, $excelToSave, $manualToSave, $autoToSave, $mappingId]);
+    $result = $stmt->execute([
+        $isManual,
+        $excelToSave,
+        $jsonNodeToSave,
+        $manualToSave,
+        $autoToSave,
+        $mappingId
+    ]);
 
     if (!$result) {
         echo json_encode(["success" => false, "message" => "Database update failed"]);
@@ -88,15 +114,17 @@ try {
         "success" => true,
         "message" => "Mapping updated successfully",
         "saved" => [
-            "id" => (int)$mappingId,
+            "id" => $mappingId,
             "mapping_type" => $mappingType,
             "is_manual" => $isManual,
             "excel_column" => $excelToSave,
+            "json_node" => $jsonNodeToSave,
             "manual_default" => $manualToSave,
             "auto_value" => $autoToSave
         ]
     ]);
-} catch (Exception $e) {
+} catch (Throwable $e) {
     echo json_encode(["success" => false, "message" => "Error: " . $e->getMessage()]);
 }
+
 exit;

public/userarea/schemi_base_response.json

@@ -653,7 +653,7 @@
             "IdSchemaCustomFields": 163,
             "ConteggioClienti": 0,
             "Nome": "Devred",
-            "Descrizione": "Schema creato per cliente DEVRED\r\nGR 18\/03\/2024\r\n\r\n"
+            "Descrizione": "Schema creato per cliente DEVRED\r\nGR 18\/03\/2024 aggiornato il 23\/04\/2026\r\n\r\n"
         },
         {
             "IdSchemaCustomFields": 164,

public/userarea/search_clienti.php

@@ -2,7 +2,12 @@
 require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
 require_once __DIR__ . '/class/db-functions.php';
 include dirname(__DIR__) . '/../extra/auth.php';
-if (!Auth::check()) { http_response_code(401); echo json_encode(['error' => 'Unauthorized']); exit; }
+
+if (!Auth::check()) {
+    http_response_code(401);
+    echo json_encode(['error' => 'Unauthorized']);
+    exit;
+}
 
 require_once __DIR__ . '/class/VisualLimsApiClient.class.php';
 
@@ -14,44 +19,95 @@ $q = mb_strtolower(trim($_GET['q'] ?? ''));
 $limit = max(1, min(50, intval($_GET['limit'] ?? 20)));
 $id = isset($_GET['id']) ? intval($_GET['id']) : null;
 
+function formatClientLabel(array $client): string
+{
+    $name = trim($client['Nominativo'] ?? '');
+    $id = trim((string)($client['IdCliente'] ?? ''));
+    $code = trim((string)($client['CodiceCliente'] ?? ''));
+
+    $parts = explode('_', $code);
+    $suffix = trim($parts[1] ?? '');
+
+    if ($suffix === '' && $code !== '') {
+        $suffix = substr($code, 0, 1);
+    }
+
+    if ($suffix === '') {
+        $suffix = '--';
+    }
+
+    return $name . ' - ' . $suffix . ' (ID: ' . $id . ')';
+}
+
 try {
     // Load from cache or API
     $cacheFile = __DIR__ . '/cache/clienti.json';
+
     if (file_exists($cacheFile) && (time() - filemtime($cacheFile) < 3600)) {
         $data = json_decode(file_get_contents($cacheFile), true);
     } else {
         $api = VisualLimsApiClient::getInstance();
+
         $params = [
             '$select' => 'IdCliente,Nominativo,CodiceCliente',
             '$orderby' => 'Nominativo asc'
         ];
+
         $data = $api->get("Cliente?" . http_build_query($params));
-        if (!is_dir(__DIR__ . '/cache')) mkdir(__DIR__ . '/cache', 0777, true);
+
+        if (!is_dir(__DIR__ . '/cache')) {
+            mkdir(__DIR__ . '/cache', 0777, true);
+        }
+
         file_put_contents($cacheFile, json_encode($data));
     }
 
     $clients = $data['value'] ?? [];
 
-    // If requesting by specific ID (for loading selected value)
+    // If requesting by specific ID, used for loading selected value
     if ($id !== null) {
         foreach ($clients as $c) {
             if ((int)$c['IdCliente'] === $id) {
-                echo json_encode(['results' => [['id' => $c['IdCliente'], 'text' => trim($c['Nominativo'] ?? '')]]]);
+                echo json_encode([
+                    'results' => [[
+                        'id' => $c['IdCliente'],
+                        'text' => formatClientLabel($c),
+                        'IdCliente' => $c['IdCliente'],
+                        'Nominativo' => trim($c['Nominativo'] ?? ''),
+                        'CodiceCliente' => trim($c['CodiceCliente'] ?? '')
+                    ]]
+                ]);
                 exit;
             }
         }
+
         echo json_encode(['results' => []]);
         exit;
     }
 
     // Search by query
     $results = [];
+
     foreach ($clients as $c) {
         $name = trim($c['Nominativo'] ?? '');
         $code = trim($c['CodiceCliente'] ?? '');
-        if ($q === '' || mb_strpos(mb_strtolower($name), $q) !== false || mb_strpos(mb_strtolower($code), $q) !== false) {
-            $results[] = ['id' => $c['IdCliente'], 'text' => $name];
-            if (count($results) >= $limit) break;
+
+        if (
+            $q === '' ||
+            mb_strpos(mb_strtolower($name), $q) !== false ||
+            mb_strpos(mb_strtolower($code), $q) !== false
+        ) {
+            $results[] = [
+                'id' => $c['IdCliente'],
+                'text' => formatClientLabel($c),
+                'IdCliente' => $c['IdCliente'],
+                'Nominativo' => $name,
+                'CodiceCliente' => $code
+            ];
+
+            if (count($results) >= $limit) {
+                break;
+            }
         }
     }
 

public/userarea/search_rapporto_min.php

@@ -0,0 +1,73 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+header('Content-Type: application/json; charset=utf-8');
+
+ini_set('display_errors', '0');
+error_reporting(E_ALL);
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    // Esempio: search_rapporto_min.php?codice=2621716
+    $codice = trim($_GET['codice'] ?? '');
+
+    if ($codice === '') {
+        throw new Exception("Parametro codice mancante. Usa ?codice=2621716");
+    }
+
+    /*
+     * Minimal:
+     * - niente expand
+     * - max 5 record
+     * - pochi campi
+     *
+     * Se il campo Codice non è quello giusto, sotto proviamo anche CodiceRapporto.
+     */
+    $attempts = [];
+
+    $filters = [
+        'Codice' => "Codice eq '{$codice}'",
+        'CodiceRapporto' => "CodiceRapporto eq '{$codice}'",
+        'Numero' => "Numero eq '{$codice}'"
+    ];
+
+    foreach ($filters as $label => $filter) {
+        try {
+            $data = $api->get('Rapporto', [
+                '$filter' => $filter,
+                '$top' => 5,
+                '$select' => 'IdRapporto,Codice,CodiceRapporto,Numero,Data,Versione,Cliente'
+            ]);
+
+            $attempts[$label] = [
+                'success' => true,
+                'filter' => $filter,
+                'records' => isset($data['value']) && is_array($data['value']) ? count($data['value']) : null,
+                'data' => $data
+            ];
+
+        } catch (Exception $e) {
+            $attempts[$label] = [
+                'success' => false,
+                'filter' => $filter,
+                'error' => $e->getMessage()
+            ];
+        }
+    }
+
+    echo json_encode([
+        'success' => true,
+        'input_codice' => $codice,
+        'attempts' => $attempts
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE | JSON_UNESCAPED_SLASHES);
+
+} catch (Exception $e) {
+    http_response_code(500);
+
+    echo json_encode([
+        'success' => false,
+        'error' => $e->getMessage()
+    ], JSON_PRETTY_PRINT | JSON_UNESCAPED_UNICODE);
+}

public/userarea/test_auth.php

@@ -8,6 +8,9 @@ ini_set('log_errors', 1);
 require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
 require_once __DIR__ . '/class/VisualLimsApiClient.class.php';
 
+Dotenv\Dotenv::createImmutable(dirname(__DIR__, 2))->safeLoad();
+date_default_timezone_set($_ENV['APP_TIMEZONE'] ?? 'Europe/Rome');
+
 header('Content-Type: application/json');
 
 try {

public/userarea/test_pdf_value.php

@@ -0,0 +1,117 @@
+<?php
+require_once dirname(__DIR__, 2) . '/vendor/autoload.php';
+require_once dirname(__FILE__) . '/class/VisualLimsApiClient.class.php';
+
+ini_set('display_errors', '1');
+error_reporting(E_ALL);
+set_time_limit(60);
+
+/**
+ * Uso: get_pdf.php?id=591749
+ */
+
+try {
+    $api = VisualLimsApiClient::getInstance();
+
+    $idRapportoFile = isset($_GET['id']) ? intval($_GET['id']) : 0;
+
+    if (!$idRapportoFile) {
+        throw new Exception("Parametro id mancante. Usa ?id=591749");
+    }
+
+    // STEP 1: leggi metadati entita
+    $entityData = $api->get("RapportoFile(" . $idRapportoFile . ")");
+
+    $pdfBody      = null;
+    $strategyUsed = null;
+    $debugLog     = array();
+
+    // Strategia A - campo FileContent base64
+    if (!empty($entityData['FileContent'])) {
+        $decoded = base64_decode($entityData['FileContent'], true);
+        if ($decoded !== false && substr($decoded, 0, 4) === '%PDF') {
+            $pdfBody      = $decoded;
+            $strategyUsed = 'A: FileContent base64';
+        }
+    }
+
+    // Strategia B - campo Contenuto base64
+    if (!$pdfBody && !empty($entityData['Contenuto'])) {
+        $decoded = base64_decode($entityData['Contenuto'], true);
+        if ($decoded !== false && substr($decoded, 0, 4) === '%PDF') {
+            $pdfBody      = $decoded;
+            $strategyUsed = 'B: Contenuto base64';
+        }
+    }
+
+    // Recupera token e baseUrl dalla classe
+    $token   = $api->getToken();
+    $baseUrl = rtrim($api->getBaseUrl(), '/');
+
+    $rawEndpoints = array(
+        'C: $value'             => $baseUrl . '/api/odata/RapportoFile(' . $idRapportoFile . ')/$value',
+        'D: FileContent/$value' => $baseUrl . '/api/odata/RapportoFile(' . $idRapportoFile . ')/FileContent/$value',
+        'E: Contenuto/$value'   => $baseUrl . '/api/odata/RapportoFile(' . $idRapportoFile . ')/Contenuto/$value',
+    );
+
+    foreach ($rawEndpoints as $label => $url) {
+        if ($pdfBody) break;
+
+        $ch = curl_init($url);
+        curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
+        curl_setopt($ch, CURLOPT_HTTPHEADER, array(
+            'Authorization: Bearer ' . $token,
+            'Accept: application/pdf, application/octet-stream, */*',
+        ));
+        curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, false);
+        curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, false);
+        curl_setopt($ch, CURLOPT_CONNECTTIMEOUT, 5);
+        curl_setopt($ch, CURLOPT_TIMEOUT, 30);
+
+        $body     = curl_exec($ch);
+        $httpCode = curl_getinfo($ch, CURLINFO_HTTP_CODE);
+        $ct       = curl_getinfo($ch, CURLINFO_CONTENT_TYPE);
+        curl_close($ch);
+
+        $debugLog[$label] = array(
+            'url'          => $url,
+            'http_code'    => $httpCode,
+            'content_type' => $ct,
+            'body_start'   => substr((string)$body, 0, 300),
+        );
+
+        if ($httpCode === 200 && is_string($body) && substr($body, 0, 4) === '%PDF') {
+            $pdfBody      = $body;
+            $strategyUsed = $label;
+        }
+    }
+
+    // RISPOSTA
+    if ($pdfBody) {
+        $fileName = isset($entityData['FileName']) ? $entityData['FileName'] : 'rapporto_' . $idRapportoFile . '.pdf';
+        header('Content-Type: application/pdf');
+        header('Content-Disposition: inline; filename="' . $fileName . '"');
+        header('Content-Length: ' . strlen($pdfBody));
+        header('Cache-Control: private, max-age=0, must-revalidate');
+        echo $pdfBody;
+        exit;
+    }
+
+    // Nessuna strategia ha funzionato
+    header('Content-Type: application/json; charset=utf-8');
+    echo json_encode(array(
+        'success'          => false,
+        'message'          => 'Nessuna strategia ha restituito un PDF valido.',
+        'id_rapporto_file' => $idRapportoFile,
+        'entity_fields'    => array_keys($entityData ? $entityData : array()),
+        'entity_data'      => $entityData,
+        'strategies_debug' => $debugLog,
+    ), JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+} catch (Exception $e) {
+    http_response_code(500);
+    header('Content-Type: application/json; charset=utf-8');
+    echo json_encode(array(
+        'success' => false,
+        'error'   => $e->getMessage(),
+    ), JSON_PRETTY_PRINT | JSON_UNESCAPED_SLASHES | JSON_UNESCAPED_UNICODE);
+}

public/userarea/tolims.php

@@ -1,10 +1,6 @@
 <?php
 include('include/headscript.php');
 
-// ✅ FIX timezone (Rome)
-ini_set('date.timezone', 'Europe/Rome');
-date_default_timezone_set('Europe/Rome');
-
 $template_id = intval($_GET['id'] ?? 0);
 if (!$template_id) {
     header("Location: xlstemplates_grid.php?status=error&message=" . urlencode("Template ID mancante"));

public/userarea/update_api_json_nodes.php

@@ -0,0 +1,63 @@
+<?php
+include('include/headscript.php');
+
+header('Content-Type: application/json');
+
+try {
+    $input = json_decode(file_get_contents('php://input'), true);
+
+    if (!$input) {
+        throw new Exception('Invalid JSON payload');
+    }
+
+    $templateId = isset($input['template_id']) ? (int)$input['template_id'] : 0;
+    $apiSampleJson = $input['api_sample_json'] ?? '';
+    $jsonNodes = $input['json_nodes'] ?? '';
+
+    if ($templateId <= 0) {
+        throw new Exception('Invalid template ID');
+    }
+
+    if (trim($apiSampleJson) === '') {
+        throw new Exception('API sample JSON is empty');
+    }
+
+    json_decode($apiSampleJson, true);
+
+    if (json_last_error() !== JSON_ERROR_NONE) {
+        throw new Exception('Invalid API sample JSON: ' . json_last_error_msg());
+    }
+
+    $decodedNodes = json_decode($jsonNodes, true);
+
+    if (!is_array($decodedNodes)) {
+        throw new Exception('Invalid JSON nodes array');
+    }
+
+    $db = DBHandlerSelect::getInstance();
+    $pdo = $db->getConnection();
+
+    $stmt = $pdo->prepare("
+        UPDATE excel_templates
+        SET 
+            api_sample_json = ?,
+            json_nodes = ?
+        WHERE id = ?
+    ");
+
+    $stmt->execute([
+        $apiSampleJson,
+        json_encode($decodedNodes, JSON_UNESCAPED_UNICODE),
+        $templateId
+    ]);
+
+    echo json_encode([
+        'success' => true,
+        'nodes_count' => count($decodedNodes)
+    ]);
+} catch (Throwable $e) {
+    echo json_encode([
+        'success' => false,
+        'message' => $e->getMessage()
+    ]);
+}