user profile

2026-05-14 16:09:39 +03:00
parent fa2f293835
commit d155d1cbab
55 changed files with 5691 additions and 144 deletions
@@ -0,0 +1,246 @@
 # 1. Database migration
 ```mysql
 ALTER TABLE employees
  ADD COLUMN address     varchar(500) DEFAULT NULL AFTER last_name,
  ADD COLUMN phone       varchar(255) DEFAULT NULL AFTER address,
  ADD COLUMN email       varchar(255) DEFAULT NULL AFTER phone,
  ADD COLUMN job_role_id int(10) UNSIGNED DEFAULT NULL AFTER department_id;
 -- Replace ENUM status with plain VARCHAR for easier maintenance.
 ALTER TABLE employees
  MODIFY status varchar(255) NOT NULL DEFAULT 'active';
 CREATE TABLE IF NOT EXISTS job_roles (
  id          int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  name        varchar(255) NOT NULL,
  description text DEFAULT NULL,
  sort_order  int(10) UNSIGNED NOT NULL DEFAULT 999,
  is_active   tinyint(1) NOT NULL DEFAULT 1,
  created_at  timestamp NULL DEFAULT current_timestamp(),
  updated_at  timestamp NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),
  PRIMARY KEY (id),
  UNIQUE KEY uniq_job_roles_name (name),
  KEY idx_job_roles_active (is_active),
  KEY idx_job_roles_sort_order (sort_order)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 ALTER TABLE employees
  ADD KEY idx_employees_job_role_id (job_role_id);
 ALTER TABLE employees
  ADD CONSTRAINT fk_employees_job_role
  FOREIGN KEY (job_role_id) REFERENCES job_roles (id)
  ON DELETE SET NULL
  ON UPDATE CASCADE;
 -- 1) Seed job_roles with every distinct non-empty value of employees.position.
 INSERT IGNORE INTO job_roles (name, is_active, sort_order, created_at, updated_at)
 SELECT DISTINCT TRIM(position), 1, 999, NOW(), NOW()
 FROM employees
 WHERE position IS NOT NULL AND TRIM(position) <> '';
 -- 2) Backfill employees.job_role_id by matching position text to job_roles.name.
 UPDATE employees e
 JOIN job_roles jr ON jr.name = TRIM(e.position)
 SET e.job_role_id = jr.id
 WHERE e.position IS NOT NULL AND TRIM(e.position) <> '';
 -- 3) Drop the legacy column.
 ALTER TABLE employees DROP COLUMN position;
 CREATE TABLE IF NOT EXISTS training_topics (
  id                       int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  name                     varchar(255) NOT NULL,
  description              text DEFAULT NULL,
  default_frequency_months int(10) UNSIGNED DEFAULT NULL,
  default_reminder_days    int(10) UNSIGNED NOT NULL DEFAULT 30,
  sort_order               int(10) UNSIGNED NOT NULL DEFAULT 999,
  is_active                tinyint(1) NOT NULL DEFAULT 1,
  is_mandatory             tinyint(1) NOT NULL DEFAULT 0,
  created_at               timestamp NULL DEFAULT current_timestamp(),
  updated_at               timestamp NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),
  PRIMARY KEY (id),
  UNIQUE KEY uniq_training_topics_name (name),
  KEY idx_training_topics_active (is_active),
  KEY idx_training_topics_mandatory (is_mandatory),
  KEY idx_training_topics_sort_order (sort_order)
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 CREATE TABLE IF NOT EXISTS employee_documents (
  id            int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  employee_id   int(10) UNSIGNED NOT NULL,
  category      varchar(255) NOT NULL DEFAULT 'other',
  original_name varchar(500) NOT NULL,
  stored_name   varchar(500) NOT NULL,
  mime_type     varchar(255) DEFAULT NULL,
  size          int(10) UNSIGNED DEFAULT NULL,
  notes         text DEFAULT NULL,
  uploaded_by   int(10) UNSIGNED DEFAULT NULL,
  created_at    timestamp NULL DEFAULT current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_employee_documents_employee (employee_id),
  KEY idx_employee_documents_category (category),
  KEY idx_employee_documents_uploaded_by (uploaded_by),
  CONSTRAINT fk_employee_documents_employee
    FOREIGN KEY (employee_id) REFERENCES employees (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_employee_documents_uploaded_by
    FOREIGN KEY (uploaded_by) REFERENCES auth_users (id)
    ON DELETE SET NULL ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 CREATE TABLE IF NOT EXISTS employee_ppe (
  id            int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  employee_id   int(10) UNSIGNED NOT NULL,
  item_name     varchar(255) NOT NULL,
  delivery_date date DEFAULT NULL,
  delivered_by  varchar(255) DEFAULT NULL,
  notes         text DEFAULT NULL,
  created_by    int(10) UNSIGNED DEFAULT NULL,
  created_at    timestamp NULL DEFAULT current_timestamp(),
  updated_at    timestamp NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_employee_ppe_employee (employee_id),
  KEY idx_employee_ppe_delivery_date (delivery_date),
  CONSTRAINT fk_employee_ppe_employee
    FOREIGN KEY (employee_id) REFERENCES employees (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_employee_ppe_created_by
    FOREIGN KEY (created_by) REFERENCES auth_users (id)
    ON DELETE SET NULL ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 CREATE TABLE IF NOT EXISTS employee_trainings (
  id                      int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  employee_id             int(10) UNSIGNED NOT NULL,
  training_topic_id       int(10) UNSIGNED NOT NULL,
  completed_date          date NOT NULL,
  delivered_by            varchar(255) DEFAULT NULL,
  description             text DEFAULT NULL,
  training_type           varchar(255) NOT NULL DEFAULT 'initial',
  update_frequency_months int(10) UNSIGNED DEFAULT NULL,
  reminder_days           int(10) UNSIGNED DEFAULT NULL,
  next_due_date           date DEFAULT NULL,
  created_by              int(10) UNSIGNED DEFAULT NULL,
  created_at              timestamp NULL DEFAULT current_timestamp(),
  updated_at              timestamp NULL DEFAULT current_timestamp() ON UPDATE current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_employee_trainings_employee (employee_id),
  KEY idx_employee_trainings_topic (training_topic_id),
  KEY idx_employee_trainings_next_due (next_due_date),
  KEY idx_employee_trainings_employee_topic (employee_id, training_topic_id),
  KEY idx_employee_trainings_created_by (created_by),
  CONSTRAINT fk_employee_trainings_employee
    FOREIGN KEY (employee_id) REFERENCES employees (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_employee_trainings_topic
    FOREIGN KEY (training_topic_id) REFERENCES training_topics (id)
    ON DELETE RESTRICT ON UPDATE CASCADE,
  CONSTRAINT fk_employee_trainings_created_by
    FOREIGN KEY (created_by) REFERENCES auth_users (id)
    ON DELETE SET NULL ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 CREATE TABLE IF NOT EXISTS employee_training_attachments (
  id            int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  training_id   int(10) UNSIGNED NOT NULL,
  original_name varchar(500) NOT NULL,
  stored_name   varchar(500) NOT NULL,
  mime_type     varchar(255) DEFAULT NULL,
  size          int(10) UNSIGNED DEFAULT NULL,
  uploaded_by   int(10) UNSIGNED DEFAULT NULL,
  created_at    timestamp NULL DEFAULT current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_employee_training_attachments_training (training_id),
  KEY idx_employee_training_attachments_uploaded_by (uploaded_by),
  CONSTRAINT fk_employee_training_attachments_training
    FOREIGN KEY (training_id) REFERENCES employee_trainings (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_employee_training_attachments_uploaded_by
    FOREIGN KEY (uploaded_by) REFERENCES auth_users (id)
    ON DELETE SET NULL ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 CREATE TABLE IF NOT EXISTS employee_training_log (
  id          int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  employee_id int(10) UNSIGNED DEFAULT NULL,
  training_id int(10) UNSIGNED DEFAULT NULL,
  action      varchar(255) NOT NULL,
  field       varchar(255) DEFAULT NULL,
  old_value   text DEFAULT NULL,
  new_value   text DEFAULT NULL,
  changed_by  int(10) UNSIGNED DEFAULT NULL,
  changed_at  timestamp NULL DEFAULT current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_employee_training_log_employee (employee_id),
  KEY idx_employee_training_log_training (training_id),
  KEY idx_employee_training_log_changed_at (changed_at),
  CONSTRAINT fk_employee_training_log_employee
    FOREIGN KEY (employee_id) REFERENCES employees (id)
    ON DELETE SET NULL ON UPDATE CASCADE,
  CONSTRAINT fk_employee_training_log_training
    FOREIGN KEY (training_id) REFERENCES employee_trainings (id)
    ON DELETE SET NULL ON UPDATE CASCADE,
  CONSTRAINT fk_employee_training_log_changed_by
    FOREIGN KEY (changed_by) REFERENCES auth_users (id)
    ON DELETE SET NULL ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 INSERT INTO auth_roles (name, display_name, description, removable, created_at, updated_at) VALUES
    ('employee',    'Employee',   'Read-only access to own employee profile.', 1, NOW(), NOW()),
    ('employee-hr', 'HR Manager', 'Can manage employee profiles, documents, PPE and training records.', 1, NOW(), NOW()),
    ('manager',     'Manager',    'Same permissions as HR Manager.', 1, NOW(), NOW())
 ON DUPLICATE KEY UPDATE
    display_name = VALUES(display_name),
    description  = VALUES(description),
    updated_at   = NOW();
 CREATE TABLE IF NOT EXISTS training_reminder_log (
  id                int(10) UNSIGNED NOT NULL AUTO_INCREMENT,
  training_id       int(10) UNSIGNED DEFAULT NULL,
  employee_id       int(10) UNSIGNED DEFAULT NULL,
  training_topic_id int(10) UNSIGNED DEFAULT NULL,
  addressee_email   varchar(255) NOT NULL,
  next_due_date     date DEFAULT NULL,
  status_at_send    varchar(255) NOT NULL,
  sent_at           timestamp NULL DEFAULT current_timestamp(),
  PRIMARY KEY (id),
  KEY idx_training_reminder_log_dedup (training_id, addressee_email, next_due_date),
  KEY idx_training_reminder_log_dedup_missing (employee_id, training_topic_id, addressee_email),
  KEY idx_training_reminder_log_sent_at (sent_at),
  CONSTRAINT fk_training_reminder_log_training
    FOREIGN KEY (training_id) REFERENCES employee_trainings (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_training_reminder_log_employee
    FOREIGN KEY (employee_id) REFERENCES employees (id)
    ON DELETE CASCADE ON UPDATE CASCADE,
  CONSTRAINT fk_training_reminder_log_topic
    FOREIGN KEY (training_topic_id) REFERENCES training_topics (id)
    ON DELETE CASCADE ON UPDATE CASCADE
 ) ENGINE=InnoDB DEFAULT CHARSET=utf8mb4 COLLATE=utf8mb4_unicode_ci;
 ```
 # 2. Upload storage folder
 Create the storage directory with the correct permissions for the web server:
 ```bash
 mkdir -p /var/www/zibo-dashboard/public/userarea/files/employees
 chown -R www-data:www-data /var/www/zibo-dashboard/public/userarea/files
 chmod -R 775 /var/www/zibo-dashboard/public/userarea/files
 ```
 Uploaded files will be organized as:
 ```
 files/employees/{employee_id}/documents/   # File Repository (HR)
 files/employees/{employee_id}/trainings/   # Training certificates
 ```
 # 3. Cron for automated emails
 ```cron
 0 7 * * * /usr/bin/php /var/www/zibo-dashboard/public/userarea/cron/send_training_reminders.php \
    >> /var/www/zibo-dashboard/storage/logs/training_reminders.log 2>&1
 ```
@@ -0,0 +1,18 @@
 <?php
 /**
 * Auth check for AJAX endpoints under /userarea/ajax/.
 * Include this at the top of every ajax handler.
 * Sets $currentUserId from session or returns 401 JSON.
 */
 if (session_status() === PHP_SESSION_NONE) {
    session_start();
 }
 if (empty($_SESSION['iduserlogin'])) {
    header('Content-Type: application/json');
    http_response_code(401);
    echo json_encode(['success' => false, 'message' => 'Non autorizzato. Effettua il login.']);
    exit;
 }
 $currentUserId = (int)$_SESSION['iduserlogin'];
@@ -0,0 +1,40 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID documento non valido.']);
    exit;
 }
 $stmt = $pdo->prepare("SELECT employee_id, stored_name FROM employee_documents WHERE id = :id LIMIT 1");
 $stmt->execute(['id' => $id]);
 $doc = $stmt->fetch(PDO::FETCH_ASSOC);
 if (!$doc) {
    echo json_encode(['success' => false, 'message' => 'Documento non trovato.']);
    exit;
 }
 try {
    $del = $pdo->prepare("DELETE FROM employee_documents WHERE id = :id");
    $del->execute(['id' => $id]);
    $path = __DIR__ . '/../../files/employees/' . (int)$doc['employee_id'] . '/documents/' . $doc['stored_name'];
    if (is_file($path)) {
        @unlink($path);
    }
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,26 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID DPI non valido.']);
    exit;
 }
 try {
    $stmt = $pdo->prepare("DELETE FROM employee_ppe WHERE id = :id");
    $stmt->execute(['id' => $id]);
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,60 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID formazione non valido.']);
    exit;
 }
 try {
    $pdo->beginTransaction();
    $row = $pdo->prepare("SELECT employee_id FROM employee_trainings WHERE id = :id");
    $row->execute(['id' => $id]);
    $tr = $row->fetch(PDO::FETCH_ASSOC);
    if (!$tr) {
        $pdo->rollBack();
        echo json_encode(['success' => false, 'message' => 'Formazione non trovata.']);
        exit;
    }
    // Collect attached files BEFORE deletion so we can unlink them after
    $files = $pdo->prepare("SELECT stored_name FROM employee_training_attachments WHERE training_id = :id");
    $files->execute(['id' => $id]);
    $stored = $files->fetchAll(PDO::FETCH_COLUMN);
    // Log BEFORE delete (FK on log allows SET NULL on training delete but we want a clean record)
    $pdo->prepare("
        INSERT INTO employee_training_log
            (employee_id, training_id, action, field, old_value, new_value, changed_by, changed_at)
        VALUES
            (:eid, NULL, 'deleted', NULL, NULL, NULL, :cb, NOW())
    ")->execute(['eid' => $tr['employee_id'], 'cb' => $currentUserId]);
    $pdo->prepare("DELETE FROM employee_trainings WHERE id = :id")->execute(['id' => $id]);
    $pdo->commit();
    foreach ($stored as $name) {
        $path = __DIR__ . '/../../files/employees/' . (int)$tr['employee_id'] . '/trainings/' . $name;
        if (is_file($path)) {
            @unlink($path);
        }
    }
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    if ($pdo->inTransaction()) $pdo->rollBack();
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,59 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID allegato non valido.']);
    exit;
 }
 $row = $pdo->prepare("
    SELECT a.stored_name, a.original_name, a.training_id, t.employee_id
    FROM employee_training_attachments a
    JOIN employee_trainings t ON t.id = a.training_id
    WHERE a.id = :id
    LIMIT 1
 ");
 $row->execute(['id' => $id]);
 $att = $row->fetch(PDO::FETCH_ASSOC);
 if (!$att) {
    echo json_encode(['success' => false, 'message' => 'Allegato non trovato.']);
    exit;
 }
 try {
    $pdo->beginTransaction();
    $pdo->prepare("DELETE FROM employee_training_attachments WHERE id = :id")->execute(['id' => $id]);
    $pdo->prepare("
        INSERT INTO employee_training_log
            (employee_id, training_id, action, field, old_value, new_value, changed_by, changed_at)
        VALUES
            (:eid, :tid, 'attachment_deleted', 'attachment', :name, NULL, :cb, NOW())
    ")->execute([
        'eid'  => $att['employee_id'],
        'tid'  => $att['training_id'],
        'name' => $att['original_name'],
        'cb'   => $currentUserId,
    ]);
    $pdo->commit();
    $path = __DIR__ . '/../../files/employees/' . (int)$att['employee_id'] . '/trainings/' . $att['stored_name'];
    if (is_file($path)) {
        @unlink($path);
    }
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    if ($pdo->inTransaction()) $pdo->rollBack();
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,57 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 $id = (int)($_GET['id'] ?? 0);
 if ($id <= 0) {
    http_response_code(400);
    exit('ID non valido.');
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $stmt = $pdo->prepare("
    SELECT d.*, e.auth_user_id
    FROM employee_documents d
    JOIN employees e ON e.id = d.employee_id
    WHERE d.id = :id
    LIMIT 1
 ");
 $stmt->execute(['id' => $id]);
 $doc = $stmt->fetch(PDO::FETCH_ASSOC);
 if (!$doc) {
    http_response_code(404);
    exit('Documento non trovato.');
 }
 /* Access check: HR roles can download any; otherwise only own employee */
 $roleStmt = $pdo->prepare("
    SELECT r.name
    FROM auth_users u
    LEFT JOIN auth_roles r ON r.id = u.role_id
    WHERE u.id = :id LIMIT 1
 ");
 $roleStmt->execute(['id' => $currentUserId]);
 $role = (string)$roleStmt->fetchColumn();
 $hrRoles = ['Admin', 'Superuser', 'employee-hr', 'manager'];
 $isHr = in_array($role, $hrRoles, true);
 if (!$isHr && (int)$doc['auth_user_id'] !== $currentUserId) {
    http_response_code(403);
    exit('Accesso negato.');
 }
 $path = __DIR__ . '/../../files/employees/' . (int)$doc['employee_id'] . '/documents/' . $doc['stored_name'];
 if (!is_file($path)) {
    http_response_code(404);
    exit('File non trovato sul server.');
 }
 while (ob_get_level() > 0) { ob_end_clean(); }
 header('Content-Type: ' . (!empty($doc['mime_type']) ? $doc['mime_type'] : 'application/octet-stream'));
 header('Content-Disposition: attachment; filename="' . rawurlencode($doc['original_name']) . '"');
 header('Content-Length: ' . filesize($path));
 header('Cache-Control: private, max-age=0, must-revalidate');
 readfile($path);
 exit;
@@ -0,0 +1,56 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 $id = (int)($_GET['id'] ?? 0);
 if ($id <= 0) {
    http_response_code(400);
    exit('ID non valido.');
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $stmt = $pdo->prepare("
    SELECT a.*, t.employee_id, e.auth_user_id
    FROM employee_training_attachments a
    JOIN employee_trainings t ON t.id = a.training_id
    JOIN employees e ON e.id = t.employee_id
    WHERE a.id = :id
    LIMIT 1
 ");
 $stmt->execute(['id' => $id]);
 $att = $stmt->fetch(PDO::FETCH_ASSOC);
 if (!$att) {
    http_response_code(404);
    exit('Allegato non trovato.');
 }
 /* Access: HR or owning employee */
 $roleStmt = $pdo->prepare("
    SELECT r.name FROM auth_users u
    LEFT JOIN auth_roles r ON r.id = u.role_id
    WHERE u.id = :id LIMIT 1
 ");
 $roleStmt->execute(['id' => $currentUserId]);
 $role = (string)$roleStmt->fetchColumn();
 $hrRoles = ['Admin', 'Superuser', 'employee-hr', 'manager'];
 $isHr = in_array($role, $hrRoles, true);
 if (!$isHr && (int)$att['auth_user_id'] !== $currentUserId) {
    http_response_code(403);
    exit('Accesso negato.');
 }
 $path = __DIR__ . '/../../files/employees/' . (int)$att['employee_id'] . '/trainings/' . $att['stored_name'];
 if (!is_file($path)) {
    http_response_code(404);
    exit('File non trovato sul server.');
 }
 while (ob_get_level() > 0) { ob_end_clean(); }
 header('Content-Type: ' . (!empty($att['mime_type']) ? $att['mime_type'] : 'application/octet-stream'));
 header('Content-Disposition: attachment; filename="' . rawurlencode($att['original_name']) . '"');
 header('Content-Length: ' . filesize($path));
 header('Cache-Control: private, max-age=0, must-revalidate');
 readfile($path);
 exit;
@@ -0,0 +1,58 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 $trainingId = (int)($_GET['training_id'] ?? 0);
 if ($trainingId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID formazione non valido.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 /* Access: HR or owner */
 $ownerStmt = $pdo->prepare("
    SELECT e.auth_user_id
    FROM employee_trainings t
    JOIN employees e ON e.id = t.employee_id
    WHERE t.id = :id LIMIT 1
 ");
 $ownerStmt->execute(['id' => $trainingId]);
 $ownerAuthUserId = $ownerStmt->fetchColumn();
 if ($ownerAuthUserId === false) {
    echo json_encode(['success' => false, 'message' => 'Formazione non trovata.']);
    exit;
 }
 $roleStmt = $pdo->prepare("
    SELECT r.name FROM auth_users u
    LEFT JOIN auth_roles r ON r.id = u.role_id
    WHERE u.id = :id LIMIT 1
 ");
 $roleStmt->execute(['id' => $currentUserId]);
 $role = (string)$roleStmt->fetchColumn();
 $hrRoles = ['Admin', 'Superuser', 'employee-hr', 'manager'];
 $isHr = in_array($role, $hrRoles, true);
 if (!$isHr && (int)$ownerAuthUserId !== $currentUserId) {
    http_response_code(403);
    echo json_encode(['success' => false, 'message' => 'Accesso negato.']);
    exit;
 }
 $stmt = $pdo->prepare("
    SELECT id, original_name, mime_type, size, created_at
    FROM employee_training_attachments
    WHERE training_id = :tid
    ORDER BY created_at DESC
 ");
 $stmt->execute(['tid' => $trainingId]);
 $attachments = $stmt->fetchAll(PDO::FETCH_ASSOC);
 echo json_encode([
    'success'     => true,
    'attachments' => $attachments,
    'can_edit'    => $isHr,
 ]);
@@ -0,0 +1,57 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 $trainingId = (int)($_GET['training_id'] ?? 0);
 if ($trainingId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID formazione non valido.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 /* Access: HR or owner */
 $ownerStmt = $pdo->prepare("
    SELECT e.auth_user_id
    FROM employee_trainings t
    JOIN employees e ON e.id = t.employee_id
    WHERE t.id = :id LIMIT 1
 ");
 $ownerStmt->execute(['id' => $trainingId]);
 $ownerAuthUserId = $ownerStmt->fetchColumn();
 if ($ownerAuthUserId === false) {
    echo json_encode(['success' => false, 'message' => 'Formazione non trovata.']);
    exit;
 }
 $roleStmt = $pdo->prepare("
    SELECT r.name FROM auth_users u
    LEFT JOIN auth_roles r ON r.id = u.role_id
    WHERE u.id = :id LIMIT 1
 ");
 $roleStmt->execute(['id' => $currentUserId]);
 $role = (string)$roleStmt->fetchColumn();
 $hrRoles = ['Admin', 'Superuser', 'employee-hr', 'manager'];
 $isHr = in_array($role, $hrRoles, true);
 if (!$isHr && (int)$ownerAuthUserId !== $currentUserId) {
    http_response_code(403);
    echo json_encode(['success' => false, 'message' => 'Accesso negato.']);
    exit;
 }
 $stmt = $pdo->prepare("
    SELECT l.id, l.action, l.field, l.old_value, l.new_value, l.changed_at,
           TRIM(CONCAT(COALESCE(u.first_name,''),' ',COALESCE(u.last_name,''))) AS changed_by_name,
           u.email AS changed_by_email
    FROM employee_training_log l
    LEFT JOIN auth_users u ON u.id = l.changed_by
    WHERE l.training_id = :tid
    ORDER BY l.changed_at DESC, l.id DESC
 ");
 $stmt->execute(['tid' => $trainingId]);
 $entries = $stmt->fetchAll(PDO::FETCH_ASSOC);
 echo json_encode(['success' => true, 'entries' => $entries]);
@@ -0,0 +1,116 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $employeeId    = (int)($_POST['employee_id'] ?? 0);
 $firstName     = trim($_POST['first_name'] ?? '');
 $lastName      = trim($_POST['last_name'] ?? '');
 $employeeCode  = trim($_POST['employee_code'] ?? '');
 $address       = trim($_POST['address'] ?? '');
 $phone         = trim($_POST['phone'] ?? '');
 $email         = trim($_POST['email'] ?? '');
 $hireDate      = trim($_POST['hire_date'] ?? '');
 $departmentId  = $_POST['department_id'] ?? '';
 $jobRoleId     = $_POST['job_role_id'] ?? '';
 $status        = trim($_POST['status'] ?? '');
 $authUserId    = $_POST['auth_user_id'] ?? '';
 $roleId        = $_POST['role_id'] ?? '';
 if ($employeeId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID dipendente non valido.']);
    exit;
 }
 if ($firstName === '' || $lastName === '') {
    echo json_encode(['success' => false, 'message' => 'Nome e cognome sono obbligatori.']);
    exit;
 }
 $allowedStatus = ['active', 'inactive', 'suspended'];
 if (!in_array($status, $allowedStatus, true)) {
    $status = 'active';
 }
 $departmentId = ($departmentId === '' || $departmentId === null) ? null : (int)$departmentId;
 $jobRoleId    = ($jobRoleId    === '' || $jobRoleId    === null) ? null : (int)$jobRoleId;
 $authUserId   = ($authUserId   === '' || $authUserId   === null) ? null : (int)$authUserId;
 $roleId       = ($roleId       === '' || $roleId       === null) ? null : (int)$roleId;
 $hireDate     = $hireDate === '' ? null : $hireDate;
 if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
    echo json_encode(['success' => false, 'message' => 'Email non valida.']);
    exit;
 }
 if ($employeeCode !== '') {
    $check = $pdo->prepare("SELECT COUNT(*) FROM employees WHERE employee_code = :code AND id <> :id");
    $check->execute(['code' => $employeeCode, 'id' => $employeeId]);
    if ((int)$check->fetchColumn() > 0) {
        echo json_encode(['success' => false, 'message' => 'Codice dipendente già in uso.']);
        exit;
    }
 }
 if ($authUserId !== null) {
    $check = $pdo->prepare("SELECT COUNT(*) FROM employees WHERE auth_user_id = :uid AND id <> :id");
    $check->execute(['uid' => $authUserId, 'id' => $employeeId]);
    if ((int)$check->fetchColumn() > 0) {
        echo json_encode(['success' => false, 'message' => 'Questo utente è già associato ad un altro dipendente.']);
        exit;
    }
 }
 try {
    $stmt = $pdo->prepare("
        UPDATE employees
        SET first_name    = :first_name,
            last_name     = :last_name,
            employee_code = :employee_code,
            address       = :address,
            phone         = :phone,
            email         = :email,
            hire_date     = :hire_date,
            department_id = :department_id,
            job_role_id   = :job_role_id,
            status        = :status,
            auth_user_id  = :auth_user_id,
            updated_at    = NOW()
        WHERE id = :id
    ");
    $stmt->execute([
        'first_name'    => $firstName,
        'last_name'     => $lastName,
        'employee_code' => $employeeCode !== '' ? $employeeCode : null,
        'address'       => $address !== '' ? $address : null,
        'phone'         => $phone !== '' ? $phone : null,
        'email'         => $email !== '' ? $email : null,
        'hire_date'     => $hireDate,
        'department_id' => $departmentId,
        'job_role_id'   => $jobRoleId,
        'status'        => $status,
        'auth_user_id'  => $authUserId,
        'id'            => $employeeId,
    ]);
    // Optionally update Vanguard role for the linked auth_user
    if ($authUserId !== null && $roleId !== null) {
        $check = $pdo->prepare("SELECT COUNT(*) FROM auth_roles WHERE id = ?");
        $check->execute([$roleId]);
        if ((int)$check->fetchColumn() > 0) {
            $upd = $pdo->prepare("UPDATE auth_users SET role_id = :role_id, updated_at = NOW() WHERE id = :uid");
            $upd->execute(['role_id' => $roleId, 'uid' => $authUserId]);
        }
    }
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,82 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id           = (int)($_POST['id'] ?? 0);
 $employeeId   = (int)($_POST['employee_id'] ?? 0);
 $itemName     = trim($_POST['item_name'] ?? '');
 $deliveryDate = trim($_POST['delivery_date'] ?? '');
 $deliveredBy  = trim($_POST['delivered_by'] ?? '');
 $notes        = trim($_POST['notes'] ?? '');
 if ($employeeId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID dipendente non valido.']);
    exit;
 }
 if ($itemName === '') {
    echo json_encode(['success' => false, 'message' => 'Il nome del DPI è obbligatorio.']);
    exit;
 }
 $deliveryDate = $deliveryDate === '' ? null : $deliveryDate;
 $deliveredBy  = $deliveredBy  !== '' ? $deliveredBy  : null;
 $notes        = $notes        !== '' ? $notes        : null;
 try {
    if ($id > 0) {
        $stmt = $pdo->prepare("
            UPDATE employee_ppe
            SET item_name     = :item_name,
                delivery_date = :delivery_date,
                delivered_by  = :delivered_by,
                notes         = :notes,
                updated_at    = NOW()
            WHERE id = :id AND employee_id = :eid
        ");
        $stmt->execute([
            'item_name'     => $itemName,
            'delivery_date' => $deliveryDate,
            'delivered_by'  => $deliveredBy,
            'notes'         => $notes,
            'id'            => $id,
            'eid'           => $employeeId,
        ]);
        echo json_encode(['success' => true, 'id' => $id]);
        exit;
    }
    $check = $pdo->prepare("SELECT COUNT(*) FROM employees WHERE id = :id");
    $check->execute(['id' => $employeeId]);
    if ((int)$check->fetchColumn() === 0) {
        echo json_encode(['success' => false, 'message' => 'Dipendente non trovato.']);
        exit;
    }
    $stmt = $pdo->prepare("
        INSERT INTO employee_ppe
            (employee_id, item_name, delivery_date, delivered_by, notes, created_by, created_at, updated_at)
        VALUES
            (:employee_id, :item_name, :delivery_date, :delivered_by, :notes, :created_by, NOW(), NOW())
    ");
    $stmt->execute([
        'employee_id'   => $employeeId,
        'item_name'     => $itemName,
        'delivery_date' => $deliveryDate,
        'delivered_by'  => $deliveredBy,
        'notes'         => $notes,
        'created_by'    => $currentUserId,
    ]);
    echo json_encode(['success' => true, 'id' => (int)$pdo->lastInsertId()]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,177 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id            = (int)($_POST['id'] ?? 0);
 $employeeId    = (int)($_POST['employee_id'] ?? 0);
 $topicId       = (int)($_POST['training_topic_id'] ?? 0);
 $completedDate = trim($_POST['completed_date'] ?? '');
 $deliveredBy   = trim($_POST['delivered_by'] ?? '');
 $description   = trim($_POST['description'] ?? '');
 $trainingType  = trim($_POST['training_type'] ?? 'initial');
 $freqRaw       = $_POST['update_frequency_months'] ?? '';
 $remRaw        = $_POST['reminder_days'] ?? '';
 if ($employeeId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID dipendente non valido.']);
    exit;
 }
 if ($topicId <= 0) {
    echo json_encode(['success' => false, 'message' => 'Selezionare un corso.']);
    exit;
 }
 if ($completedDate === '') {
    echo json_encode(['success' => false, 'message' => 'La data di completamento è obbligatoria.']);
    exit;
 }
 if (!in_array($trainingType, ['initial', 'refresher'], true)) {
    $trainingType = 'initial';
 }
 $topicStmt = $pdo->prepare("SELECT default_frequency_months, default_reminder_days FROM training_topics WHERE id = :id");
 $topicStmt->execute(['id' => $topicId]);
 $topic = $topicStmt->fetch(PDO::FETCH_ASSOC);
 if (!$topic) {
    echo json_encode(['success' => false, 'message' => 'Corso non trovato.']);
    exit;
 }
 $freq = ($freqRaw === '' || $freqRaw === null) ? null : max(0, (int)$freqRaw);
 $rem  = ($remRaw  === '' || $remRaw  === null) ? null : max(0, (int)$remRaw);
 /* Effective frequency for next_due_date: explicit override or topic default */
 $effFreq = $freq !== null ? $freq : ($topic['default_frequency_months'] !== null ? (int)$topic['default_frequency_months'] : null);
 $nextDue = null;
 if ($effFreq !== null && $effFreq > 0) {
    $d = DateTime::createFromFormat('Y-m-d', $completedDate);
    if ($d) {
        $d->modify('+' . (int)$effFreq . ' months');
        $nextDue = $d->format('Y-m-d');
    }
 }
 $deliveredBy = $deliveredBy !== '' ? $deliveredBy : null;
 $description = $description !== '' ? $description : null;
 try {
    $pdo->beginTransaction();
    if ($id > 0) {
        $old = $pdo->prepare("SELECT * FROM employee_trainings WHERE id = :id");
        $old->execute(['id' => $id]);
        $oldRow = $old->fetch(PDO::FETCH_ASSOC);
        if (!$oldRow) {
            $pdo->rollBack();
            echo json_encode(['success' => false, 'message' => 'Formazione non trovata.']);
            exit;
        }
        $upd = $pdo->prepare("
            UPDATE employee_trainings
            SET training_topic_id       = :topic_id,
                completed_date          = :completed_date,
                delivered_by            = :delivered_by,
                description             = :description,
                training_type           = :training_type,
                update_frequency_months = :freq,
                reminder_days           = :rem,
                next_due_date           = :next_due,
                updated_at              = NOW()
            WHERE id = :id
        ");
        $upd->execute([
            'topic_id'       => $topicId,
            'completed_date' => $completedDate,
            'delivered_by'   => $deliveredBy,
            'description'    => $description,
            'training_type'  => $trainingType,
            'freq'           => $freq,
            'rem'            => $rem,
            'next_due'       => $nextDue,
            'id'             => $id,
        ]);
        $fields = [
            'training_topic_id'       => $topicId,
            'completed_date'          => $completedDate,
            'delivered_by'            => $deliveredBy,
            'description'             => $description,
            'training_type'           => $trainingType,
            'update_frequency_months' => $freq,
            'reminder_days'           => $rem,
            'next_due_date'           => $nextDue,
        ];
        $logStmt = $pdo->prepare("
            INSERT INTO employee_training_log
                (employee_id, training_id, action, field, old_value, new_value, changed_by, changed_at)
            VALUES
                (:eid, :tid, 'updated', :field, :old_v, :new_v, :cb, NOW())
        ");
        foreach ($fields as $f => $newV) {
            $oldV = $oldRow[$f] ?? null;
            if ((string)$oldV !== (string)$newV) {
                $logStmt->execute([
                    'eid'    => $employeeId,
                    'tid'    => $id,
                    'field'  => $f,
                    'old_v'  => $oldV,
                    'new_v'  => $newV,
                    'cb'     => $currentUserId,
                ]);
            }
        }
        $pdo->commit();
        echo json_encode(['success' => true, 'id' => $id]);
        exit;
    }
    $ins = $pdo->prepare("
        INSERT INTO employee_trainings
            (employee_id, training_topic_id, completed_date,
             delivered_by, description,
             training_type, update_frequency_months, reminder_days, next_due_date,
             created_by, created_at, updated_at)
        VALUES
            (:eid, :tid, :completed_date,
             :delivered_by, :description,
             :training_type, :freq, :rem, :next_due,
             :cb, NOW(), NOW())
    ");
    $ins->execute([
        'eid'            => $employeeId,
        'tid'            => $topicId,
        'completed_date' => $completedDate,
        'delivered_by'   => $deliveredBy,
        'description'    => $description,
        'training_type'  => $trainingType,
        'freq'           => $freq,
        'rem'            => $rem,
        'next_due'       => $nextDue,
        'cb'             => $currentUserId,
    ]);
    $newId = (int)$pdo->lastInsertId();
    $pdo->prepare("
        INSERT INTO employee_training_log
            (employee_id, training_id, action, field, old_value, new_value, changed_by, changed_at)
        VALUES
            (:eid, :tid, 'created', NULL, NULL, NULL, :cb, NOW())
    ")->execute(['eid' => $employeeId, 'tid' => $newId, 'cb' => $currentUserId]);
    $pdo->commit();
    echo json_encode(['success' => true, 'id' => $newId]);
 } catch (Exception $e) {
    if ($pdo->inTransaction()) $pdo->rollBack();
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,89 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $employeeId = (int)($_POST['employee_id'] ?? 0);
 $category   = trim($_POST['category'] ?? 'other');
 $notes      = trim($_POST['notes'] ?? '');
 $allowedCategories = ['job_description', 'contract', 'rules', 'other'];
 if (!in_array($category, $allowedCategories, true)) {
    $category = 'other';
 }
 if ($employeeId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID dipendente non valido.']);
    exit;
 }
 $check = $pdo->prepare("SELECT COUNT(*) FROM employees WHERE id = :id");
 $check->execute(['id' => $employeeId]);
 if ((int)$check->fetchColumn() === 0) {
    echo json_encode(['success' => false, 'message' => 'Dipendente non trovato.']);
    exit;
 }
 if (empty($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) {
    $errCode = $_FILES['file']['error'] ?? -1;
    $msg = 'Errore nel caricamento del file.';
    if ($errCode === UPLOAD_ERR_INI_SIZE || $errCode === UPLOAD_ERR_FORM_SIZE) {
        $msg = 'Il file supera la dimensione massima consentita.';
    }
    echo json_encode(['success' => false, 'message' => $msg]);
    exit;
 }
 $originalName = $_FILES['file']['name'];
 $tmpPath      = $_FILES['file']['tmp_name'];
 $size         = (int)$_FILES['file']['size'];
 $mimeType     = mime_content_type($tmpPath) ?: ($_FILES['file']['type'] ?? null);
 $dir = __DIR__ . '/../../files/employees/' . $employeeId . '/documents';
 if (!is_dir($dir)) {
    if (!mkdir($dir, 0775, true) && !is_dir($dir)) {
        echo json_encode(['success' => false, 'message' => 'Impossibile creare la cartella di destinazione.']);
        exit;
    }
 }
 $safeOriginal = preg_replace('/[^a-zA-Z0-9._-]/', '_', $originalName);
 $storedName   = uniqid('doc_') . '_' . $safeOriginal;
 $destPath     = $dir . '/' . $storedName;
 if (!move_uploaded_file($tmpPath, $destPath)) {
    echo json_encode(['success' => false, 'message' => 'Impossibile salvare il file su disco.']);
    exit;
 }
 try {
    $stmt = $pdo->prepare("
        INSERT INTO employee_documents
            (employee_id, category, original_name, stored_name, mime_type, size, notes, uploaded_by, created_at)
        VALUES
            (:employee_id, :category, :original_name, :stored_name, :mime_type, :size, :notes, :uploaded_by, NOW())
    ");
    $stmt->execute([
        'employee_id'   => $employeeId,
        'category'      => $category,
        'original_name' => $originalName,
        'stored_name'   => $storedName,
        'mime_type'     => $mimeType,
        'size'          => $size,
        'notes'         => $notes !== '' ? $notes : null,
        'uploaded_by'   => $currentUserId,
    ]);
    echo json_encode(['success' => true, 'id' => (int)$pdo->lastInsertId()]);
 } catch (Exception $e) {
    @unlink($destPath);
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,98 @@
 <?php
 require_once(__DIR__ . '/../hr_auth_check.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $trainingId = (int)($_POST['training_id'] ?? 0);
 if ($trainingId <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID formazione non valido.']);
    exit;
 }
 $tr = $pdo->prepare("SELECT employee_id FROM employee_trainings WHERE id = :id");
 $tr->execute(['id' => $trainingId]);
 $trainingRow = $tr->fetch(PDO::FETCH_ASSOC);
 if (!$trainingRow) {
    echo json_encode(['success' => false, 'message' => 'Formazione non trovata.']);
    exit;
 }
 $employeeId = (int)$trainingRow['employee_id'];
 if (empty($_FILES['file']) || $_FILES['file']['error'] !== UPLOAD_ERR_OK) {
    $errCode = $_FILES['file']['error'] ?? -1;
    $msg = 'Errore nel caricamento del file.';
    if ($errCode === UPLOAD_ERR_INI_SIZE || $errCode === UPLOAD_ERR_FORM_SIZE) {
        $msg = 'Il file supera la dimensione massima consentita.';
    }
    echo json_encode(['success' => false, 'message' => $msg]);
    exit;
 }
 $originalName = $_FILES['file']['name'];
 $tmpPath      = $_FILES['file']['tmp_name'];
 $size         = (int)$_FILES['file']['size'];
 $mimeType     = mime_content_type($tmpPath) ?: ($_FILES['file']['type'] ?? null);
 $dir = __DIR__ . '/../../files/employees/' . $employeeId . '/trainings';
 if (!is_dir($dir)) {
    if (!mkdir($dir, 0775, true) && !is_dir($dir)) {
        echo json_encode(['success' => false, 'message' => 'Impossibile creare la cartella di destinazione.']);
        exit;
    }
 }
 $safeOriginal = preg_replace('/[^a-zA-Z0-9._-]/', '_', $originalName);
 $storedName   = uniqid('tr_') . '_' . $safeOriginal;
 $destPath     = $dir . '/' . $storedName;
 if (!move_uploaded_file($tmpPath, $destPath)) {
    echo json_encode(['success' => false, 'message' => 'Impossibile salvare il file su disco.']);
    exit;
 }
 try {
    $pdo->beginTransaction();
    $ins = $pdo->prepare("
        INSERT INTO employee_training_attachments
            (training_id, original_name, stored_name, mime_type, size, uploaded_by, created_at)
        VALUES
            (:tid, :original_name, :stored_name, :mime_type, :size, :uploaded_by, NOW())
    ");
    $ins->execute([
        'tid'           => $trainingId,
        'original_name' => $originalName,
        'stored_name'   => $storedName,
        'mime_type'     => $mimeType,
        'size'          => $size,
        'uploaded_by'   => $currentUserId,
    ]);
    $attachmentId = (int)$pdo->lastInsertId();
    $pdo->prepare("
        INSERT INTO employee_training_log
            (employee_id, training_id, action, field, old_value, new_value, changed_by, changed_at)
        VALUES
            (:eid, :tid, 'attachment_added', 'attachment', NULL, :name, :cb, NOW())
    ")->execute([
        'eid'  => $employeeId,
        'tid'  => $trainingId,
        'name' => $originalName,
        'cb'   => $currentUserId,
    ]);
    $pdo->commit();
    echo json_encode(['success' => true, 'id' => $attachmentId]);
 } catch (Exception $e) {
    if ($pdo->inTransaction()) $pdo->rollBack();
    @unlink($destPath);
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,32 @@
 <?php
 /**
 * HR auth check for AJAX endpoints that require HR-management permissions.
 * Allowed roles: Admin, User, Superuser, employee-hr, manager.
 * Sets $currentUserId and $currentUserRole, or returns 401/403 JSON.
 */
 require_once(__DIR__ . '/auth_check.php');
 require_once(__DIR__ . '/../class/db-functions.php');
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $stmt = $pdo->prepare("
    SELECT r.name AS role_name
    FROM auth_users u
    LEFT JOIN auth_roles r ON r.id = u.role_id
    WHERE u.id = :id
    LIMIT 1
 ");
 $stmt->execute(['id' => $currentUserId]);
 $currentUserRole = (string)$stmt->fetchColumn();
 $allowedHrRoles = ['Admin', 'Superuser', 'employee-hr', 'manager'];
 if (!in_array($currentUserRole, $allowedHrRoles, true)) {
    header('Content-Type: application/json');
    http_response_code(403);
    echo json_encode([
        'success' => false,
        'message' => 'Permessi insufficienti per questa operazione.',
    ]);
    exit;
 }
@@ -0,0 +1,38 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID mansione non valido.']);
    exit;
 }
 try {
    $usage = $pdo->prepare("SELECT COUNT(*) FROM employees WHERE job_role_id = :id");
    $usage->execute(['id' => $id]);
    if ((int)$usage->fetchColumn() > 0) {
        echo json_encode([
            'success' => false,
            'message' => 'Questa mansione è associata a uno o più dipendenti e non può essere cancellata.',
        ]);
        exit;
    }
    $stmt = $pdo->prepare("DELETE FROM job_roles WHERE id = :id");
    $stmt->execute(['id' => $id]);
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,77 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id          = (int)($_POST['id'] ?? 0);
 $name        = trim($_POST['name'] ?? '');
 $description = trim($_POST['description'] ?? '');
 $sort_order  = isset($_POST['sort_order']) && $_POST['sort_order'] !== '' ? (int)$_POST['sort_order'] : 999;
 $is_active   = isset($_POST['is_active']) ? ((int)$_POST['is_active'] === 1 ? 1 : 0) : 1;
 if ($name === '') {
    echo json_encode(['success' => false, 'message' => 'Il nome della mansione è obbligatorio.']);
    exit;
 }
 try {
    if ($id > 0) {
        $check = $pdo->prepare("SELECT COUNT(*) FROM job_roles WHERE name = :name AND id <> :id");
        $check->execute(['name' => $name, 'id' => $id]);
        if ((int)$check->fetchColumn() > 0) {
            echo json_encode(['success' => false, 'message' => 'Esiste già un\'altra mansione con questo nome.']);
            exit;
        }
        $stmt = $pdo->prepare("
            UPDATE job_roles
            SET name = :name,
                description = :description,
                sort_order = :sort_order,
                is_active = :is_active,
                updated_at = NOW()
            WHERE id = :id
        ");
        $stmt->execute([
            'name'        => $name,
            'description' => $description !== '' ? $description : null,
            'sort_order'  => $sort_order,
            'is_active'   => $is_active,
            'id'          => $id,
        ]);
        echo json_encode(['success' => true, 'id' => $id]);
        exit;
    }
    $check = $pdo->prepare("SELECT COUNT(*) FROM job_roles WHERE name = :name");
    $check->execute(['name' => $name]);
    if ((int)$check->fetchColumn() > 0) {
        echo json_encode(['success' => false, 'message' => 'Esiste già una mansione con questo nome.']);
        exit;
    }
    $stmt = $pdo->prepare("
        INSERT INTO job_roles (name, description, sort_order, is_active, created_at, updated_at)
        VALUES (:name, :description, :sort_order, :is_active, NOW(), NOW())
    ");
    $stmt->execute([
        'name'        => $name,
        'description' => $description !== '' ? $description : null,
        'sort_order'  => $sort_order,
        'is_active'   => $is_active,
    ]);
    echo json_encode(['success' => true, 'id' => (int)$pdo->lastInsertId()]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,38 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id = (int)($_POST['id'] ?? 0);
 if ($id <= 0) {
    echo json_encode(['success' => false, 'message' => 'ID corso non valido.']);
    exit;
 }
 try {
    $usage = $pdo->prepare("SELECT COUNT(*) FROM employee_trainings WHERE training_topic_id = :id");
    $usage->execute(['id' => $id]);
    if ((int)$usage->fetchColumn() > 0) {
        echo json_encode([
            'success' => false,
            'message' => 'Questo corso ha già delle registrazioni di formazione e non può essere cancellato.',
        ]);
        exit;
    }
    $stmt = $pdo->prepare("DELETE FROM training_topics WHERE id = :id");
    $stmt->execute(['id' => $id]);
    echo json_encode(['success' => true]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,94 @@
 <?php
 require_once(__DIR__ . '/../auth_check.php');
 require_once(__DIR__ . '/../../class/db-functions.php');
 header('Content-Type: application/json');
 if ($_SERVER['REQUEST_METHOD'] !== 'POST') {
    http_response_code(405);
    echo json_encode(['success' => false, 'message' => 'Metodo non consentito.']);
    exit;
 }
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 $id          = (int)($_POST['id'] ?? 0);
 $name        = trim($_POST['name'] ?? '');
 $description = trim($_POST['description'] ?? '');
 $freqRaw     = $_POST['default_frequency_months'] ?? '';
 $remRaw      = $_POST['default_reminder_days'] ?? '';
 $sort_order   = isset($_POST['sort_order']) && $_POST['sort_order'] !== '' ? (int)$_POST['sort_order'] : 999;
 $is_active    = isset($_POST['is_active']) ? ((int)$_POST['is_active'] === 1 ? 1 : 0) : 1;
 $is_mandatory = isset($_POST['is_mandatory']) && (int)$_POST['is_mandatory'] === 1 ? 1 : 0;
 $freq = ($freqRaw === '' || $freqRaw === null) ? null : max(0, (int)$freqRaw);
 $rem  = ($remRaw  === '' || $remRaw  === null) ? 30   : max(0, (int)$remRaw);
 if ($name === '') {
    echo json_encode(['success' => false, 'message' => 'Il nome del corso è obbligatorio.']);
    exit;
 }
 try {
    if ($id > 0) {
        $check = $pdo->prepare("SELECT COUNT(*) FROM training_topics WHERE name = :name AND id <> :id");
        $check->execute(['name' => $name, 'id' => $id]);
        if ((int)$check->fetchColumn() > 0) {
            echo json_encode(['success' => false, 'message' => 'Esiste già un altro corso con questo nome.']);
            exit;
        }
        $stmt = $pdo->prepare("
            UPDATE training_topics
            SET name = :name,
                description = :description,
                default_frequency_months = :freq,
                default_reminder_days = :rem,
                sort_order = :sort_order,
                is_active = :is_active,
                is_mandatory = :is_mandatory,
                updated_at = NOW()
            WHERE id = :id
        ");
        $stmt->execute([
            'name'         => $name,
            'description'  => $description !== '' ? $description : null,
            'freq'         => $freq,
            'rem'          => $rem,
            'sort_order'   => $sort_order,
            'is_active'    => $is_active,
            'is_mandatory' => $is_mandatory,
            'id'           => $id,
        ]);
        echo json_encode(['success' => true, 'id' => $id]);
        exit;
    }
    $check = $pdo->prepare("SELECT COUNT(*) FROM training_topics WHERE name = :name");
    $check->execute(['name' => $name]);
    if ((int)$check->fetchColumn() > 0) {
        echo json_encode(['success' => false, 'message' => 'Esiste già un corso con questo nome.']);
        exit;
    }
    $stmt = $pdo->prepare("
        INSERT INTO training_topics
            (name, description, default_frequency_months, default_reminder_days, sort_order, is_active, is_mandatory, created_at, updated_at)
        VALUES
            (:name, :description, :freq, :rem, :sort_order, :is_active, :is_mandatory, NOW(), NOW())
    ");
    $stmt->execute([
        'name'         => $name,
        'description'  => $description !== '' ? $description : null,
        'freq'         => $freq,
        'rem'          => $rem,
        'sort_order'   => $sort_order,
        'is_active'    => $is_active,
        'is_mandatory' => $is_mandatory,
    ]);
    echo json_encode(['success' => true, 'id' => (int)$pdo->lastInsertId()]);
 } catch (Exception $e) {
    echo json_encode(['success' => false, 'message' => $e->getMessage()]);
 }
@@ -0,0 +1,347 @@
 <?php
 /**
 * Formazione — Email reminder cron script
 * Run daily: 0 7 * * * php /var/www/html/public/userarea/cron/send_training_reminders.php
 *
 * Sends "due_soon" emails when next_due_date is within the reminder window
 *   (override reminder_days > topic default > 30 days).
 * Sends "expired" emails when next_due_date is in the past.
 * Skips rows with next_due_date IS NULL (one-off trainings).
 * Skips already-sent notifications (same training + addressee + next_due_date).
 * Recipients: the employee (employees.email or auth_users.email) + every HR user
 *   with role Admin / Superuser / employee-hr / manager.
 *
 * Optional CLI flags:
 *   --dry-run             — log only, no SMTP, no DB write
 *   --only-email=foo@bar  — restrict to a single addressee (for testing)
 */
 require_once __DIR__ . '/../class/db-functions.php';
 require_once __DIR__ . '/../../../vendor/autoload.php';
 use Dotenv\Dotenv;
 use PHPMailer\PHPMailer\PHPMailer;
 use PHPMailer\PHPMailer\Exception;
 $dotenv = Dotenv::createImmutable(__DIR__ . '/../../../');
 $dotenv->load();
 $db  = DBHandlerSelect::getInstance();
 $pdo = $db->getConnection();
 $today  = date('Y-m-d');
 $appUrl = rtrim($_ENV['APP_URL'] ?? 'http://localhost:8001', '/');
 /* CLI flags */
 $dryRun    = false;
 $onlyEmail = null;
 foreach (array_slice($argv ?? [], 1) as $a) {
    if ($a === '--dry-run' || $a === '-n') {
        $dryRun = true;
    } elseif (strpos($a, '--only-email=') === 0) {
        $onlyEmail = substr($a, strlen('--only-email='));
    }
 }
 $sent = 0;
 $skipped = 0;
 $errors = 0;
 /* Candidate trainings (with optional override reminder + topic default) */
 $stmt = $pdo->query("
    SELECT et.id, et.employee_id, et.completed_date, et.next_due_date,
           et.reminder_days, et.delivered_by,
           tt.name AS topic_name, tt.default_reminder_days AS topic_default_rem,
           e.first_name, e.last_name, e.employee_code,
           e.email AS employee_email_direct,
           au.email AS employee_email_auth
    FROM employee_trainings et
    JOIN training_topics tt ON tt.id = et.training_topic_id
    JOIN employees e ON e.id = et.employee_id
    LEFT JOIN auth_users au ON au.id = e.auth_user_id
    WHERE et.next_due_date IS NOT NULL
 ");
 $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
 if (empty($rows)) {
    echo date('Y-m-d H:i:s') . " — Nessuna formazione da notificare.\n";
    exit(0);
 }
 /* HR addressees (one query, reused per training) */
 $hrUsers = $pdo->query("
    SELECT u.id, u.email, TRIM(CONCAT(COALESCE(u.first_name,''),' ',COALESCE(u.last_name,''))) AS name
    FROM auth_users u
    JOIN auth_roles r ON r.id = u.role_id
    WHERE r.name IN ('Admin','Superuser','employee-hr','manager')
      AND u.email IS NOT NULL AND u.email <> ''
 ")->fetchAll(PDO::FETCH_ASSOC);
 $checkSent = $pdo->prepare("
    SELECT COUNT(*) FROM training_reminder_log
    WHERE training_id = ? AND addressee_email = ? AND next_due_date = ?
 ");
 $insertLog = $pdo->prepare("
    INSERT INTO training_reminder_log
        (training_id, addressee_email, next_due_date, status_at_send, sent_at)
    VALUES (?, ?, ?, ?, NOW())
 ");
 foreach ($rows as $r) {
    $rem = $r['reminder_days'] !== null
        ? (int)$r['reminder_days']
        : ($r['topic_default_rem'] !== null ? (int)$r['topic_default_rem'] : 30);
    $isOverdue = $r['next_due_date'] < $today;
    $daysLeft  = (int)((strtotime($r['next_due_date']) - strtotime($today)) / 86400);
    if (!$isOverdue && $daysLeft > $rem) {
        continue; // not yet in the reminder window
    }
    $type = $isOverdue ? 'expired' : 'update_to_be_scheduled';
    $employeeFullName = trim($r['first_name'] . ' ' . $r['last_name']);
    $employeeEmail    = !empty($r['employee_email_direct'])
        ? $r['employee_email_direct']
        : (!empty($r['employee_email_auth']) ? $r['employee_email_auth'] : null);
    /* Collect addressees (employee + HR), deduplicated by lowercased email */
    $recipients = [];
    if ($employeeEmail) {
        $key = strtolower(trim($employeeEmail));
        $recipients[$key] = ['email' => $employeeEmail, 'name' => $employeeFullName, 'is_hr' => false];
    }
    foreach ($hrUsers as $hr) {
        $key = strtolower(trim((string)$hr['email']));
        if ($key === '' || isset($recipients[$key])) continue;
        $recipients[$key] = ['email' => $hr['email'], 'name' => trim((string)$hr['name']), 'is_hr' => true];
    }
    if (empty($recipients)) {
        continue;
    }
    foreach ($recipients as $email => $rec) {
        if ($onlyEmail !== null && strcasecmp($rec['email'], $onlyEmail) !== 0) continue;
        $checkSent->execute([$r['id'], $rec['email'], $r['next_due_date']]);
        if ($checkSent->fetchColumn() > 0) {
            $skipped++;
            continue;
        }
        try {
            $mail = new PHPMailer(true);
            // SMTP config from .env
            $mailer = $_ENV['MAIL_MAILER'] ?? 'mail';
            if ($mailer === 'smtp') {
                $mail->isSMTP();
                $mail->Host = $_ENV['MAIL_HOST'] ?? 'localhost';
                $mail->Port = (int)($_ENV['MAIL_PORT'] ?? 587);
                if (!empty($_ENV['MAIL_USERNAME']) && $_ENV['MAIL_USERNAME'] !== 'null') {
                    $mail->SMTPAuth = true;
                    $mail->Username = $_ENV['MAIL_USERNAME'];
                    $mail->Password = $_ENV['MAIL_PASSWORD'] ?? '';
                }
                $enc = $_ENV['MAIL_ENCRYPTION'] ?? '';
                if ($enc && $enc !== 'null') {
                    $mail->SMTPSecure = $enc;
                }
            }
            $mail->CharSet = 'UTF-8';
            $mail->setFrom(
                $_ENV['MAIL_FROM_ADDRESS'] ?? 'noreply@zibogomma.it',
                $_ENV['MAIL_FROM_NAME']    ?? 'Formazione ZIBOGOMMA'
            );
            $mail->addAddress($rec['email'], $rec['name'] ?: $rec['email']);
            $profileUrl = $appUrl . '/userarea/employee-profile.php?id=' . (int)$r['employee_id'] . '#tab-training';
            $topicText  = $r['topic_name'] . ' — ' . $employeeFullName
                        . (!empty($r['employee_code']) ? ' (' . $r['employee_code'] . ')' : '');
            if ($isOverdue) {
                $mail->Subject = '⚠️ Formazione scaduta: ' . $r['topic_name'];
                $mail->Body = buildHtml(
                    'Formazione scaduta',
                    $topicText,
                    'Completata il <strong>' . date('d/m/Y', strtotime($r['completed_date'])) . '</strong>. '
                    . 'Il prossimo aggiornamento era previsto per <strong>' . date('d/m/Y', strtotime($r['next_due_date'])) . '</strong>'
                    . ' (scaduta da <strong>' . abs($daysLeft) . ' giorni</strong>).',
                    '#dc3545',
                    $profileUrl,
                    $rec['is_hr']
                );
            } else {
                $mail->Subject = '📚 Formazione in scadenza: ' . $r['topic_name'];
                $daysText = $daysLeft === 0 ? 'oggi' : 'tra <strong>' . $daysLeft . ' giorni</strong>';
                $mail->Body = buildHtml(
                    'Formazione in scadenza',
                    $topicText,
                    'Completata il <strong>' . date('d/m/Y', strtotime($r['completed_date'])) . '</strong>. '
                    . 'Prossimo aggiornamento previsto per <strong>' . date('d/m/Y', strtotime($r['next_due_date'])) . '</strong>'
                    . ' (' . $daysText . ').',
                    '#e8930c',
                    $profileUrl,
                    $rec['is_hr']
                );
            }
            $mail->isHTML(true);
            $mail->AltBody = strip_tags(str_replace('<br>', "\n", $mail->Body));
            if ($dryRun) {
                echo date('H:i:s') . " ◌ DRY {$type} → {$rec['email']} — {$r['topic_name']}\n";
                $sent++;
                continue;
            }
            $mail->send();
            $insertLog->execute([$r['id'], $rec['email'], $r['next_due_date'], $type]);
            $sent++;
            echo date('H:i:s') . " ✓ {$type} → {$rec['email']} — {$r['topic_name']}\n";
        } catch (Exception $e) {
            $errors++;
            echo date('H:i:s') . " ✗ Errore {$rec['email']}: {$e->getMessage()}\n";
        }
    }
 }
 /* ============================================================================
   NOT-PRESENT reminders — mandatory topics with no record for an employee.
   Notify HR only.
   De-dup by (employee_id, training_topic_id, addressee_email).
   ============================================================================ */
 $missingStmt = $pdo->query("
    SELECT e.id AS employee_id, e.first_name, e.last_name, e.employee_code,
           tt.id AS topic_id, tt.name AS topic_name
    FROM employees e
    CROSS JOIN training_topics tt
    WHERE tt.is_active = 1 AND tt.is_mandatory = 1
      AND (e.status IS NULL OR e.status = 'active')
      AND NOT EXISTS (
          SELECT 1 FROM employee_trainings et
          WHERE et.employee_id = e.id AND et.training_topic_id = tt.id
      )
    ORDER BY e.last_name, e.first_name, tt.name
 ");
 $missingRows = $missingStmt->fetchAll(PDO::FETCH_ASSOC);
 $checkMissingSent = $pdo->prepare("
    SELECT COUNT(*) FROM training_reminder_log
    WHERE employee_id = ? AND training_topic_id = ? AND addressee_email = ?
      AND status_at_send = 'not_present'
 ");
 $insertMissingLog = $pdo->prepare("
    INSERT INTO training_reminder_log
        (training_id, employee_id, training_topic_id, addressee_email, next_due_date, status_at_send, sent_at)
    VALUES (NULL, ?, ?, ?, NULL, 'not_present', NOW())
 ");
 foreach ($missingRows as $m) {
    $employeeFullName = trim($m['first_name'] . ' ' . $m['last_name']);
    foreach ($hrUsers as $hr) {
        $email = trim((string)$hr['email']);
        if ($email === '') continue;
        if ($onlyEmail !== null && strcasecmp($email, $onlyEmail) !== 0) continue;
        $checkMissingSent->execute([$m['employee_id'], $m['topic_id'], $email]);
        if ($checkMissingSent->fetchColumn() > 0) {
            $skipped++;
            continue;
        }
        try {
            $mail = new PHPMailer(true);
            $mailer = $_ENV['MAIL_MAILER'] ?? 'mail';
            if ($mailer === 'smtp') {
                $mail->isSMTP();
                $mail->Host = $_ENV['MAIL_HOST'] ?? 'localhost';
                $mail->Port = (int)($_ENV['MAIL_PORT'] ?? 587);
                if (!empty($_ENV['MAIL_USERNAME']) && $_ENV['MAIL_USERNAME'] !== 'null') {
                    $mail->SMTPAuth = true;
                    $mail->Username = $_ENV['MAIL_USERNAME'];
                    $mail->Password = $_ENV['MAIL_PASSWORD'] ?? '';
                }
                $enc = $_ENV['MAIL_ENCRYPTION'] ?? '';
                if ($enc && $enc !== 'null') {
                    $mail->SMTPSecure = $enc;
                }
            }
            $mail->CharSet = 'UTF-8';
            $mail->setFrom(
                $_ENV['MAIL_FROM_ADDRESS'] ?? 'noreply@zibogomma.it',
                $_ENV['MAIL_FROM_NAME']    ?? 'Formazione ZIBOGOMMA'
            );
            $mail->addAddress($email, trim((string)$hr['name']) ?: $email);
            $profileUrl = $appUrl . '/userarea/employee-profile.php?id=' . (int)$m['employee_id'] . '#tab-training';
            $topicText  = $m['topic_name'] . ' — ' . $employeeFullName
                        . (!empty($m['employee_code']) ? ' (' . $m['employee_code'] . ')' : '');
            $mail->Subject = '🔔 Formazione obbligatoria non presente: ' . $m['topic_name'];
            $mail->Body = buildHtml(
                'Formazione obbligatoria non presente',
                $topicText,
                'Il dipendente <strong>' . htmlspecialchars($employeeFullName) . '</strong> non ha nessuna registrazione per il corso obbligatorio <strong>' . htmlspecialchars($m['topic_name']) . '</strong>. Programma la prima erogazione.',
                '#6b7280',
                $profileUrl,
                true
            );
            $mail->isHTML(true);
            $mail->AltBody = strip_tags(str_replace('<br>', "\n", $mail->Body));
            if ($dryRun) {
                echo date('H:i:s') . " ◌ DRY not_present → {$email} — {$m['topic_name']} / {$employeeFullName}\n";
                $sent++;
                continue;
            }
            $mail->send();
            $insertMissingLog->execute([$m['employee_id'], $m['topic_id'], $email]);
            $sent++;
            echo date('H:i:s') . " ✓ not_present → {$email} — {$m['topic_name']} / {$employeeFullName}\n";
        } catch (Exception $e) {
            $errors++;
            echo date('H:i:s') . " ✗ Errore {$email}: {$e->getMessage()}\n";
        }
    }
 }
 echo "\n" . date('Y-m-d H:i:s') . " — Completato. Inviate: {$sent}, Saltate: {$skipped}, Errori: {$errors}\n";
 // --- HTML email template ---
 function buildHtml(string $title, string $topic, string $message, string $accentColor, string $url, bool $isForHr): string
 {
    $greeting = $isForHr
        ? 'Una formazione richiede attenzione.'
        : 'Una delle tue formazioni richiede attenzione.';
    return '
 <!DOCTYPE html>
 <html>
 <head><meta charset="UTF-8"></head>
 <body style="margin:0;padding:0;background:#f4f6f9;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,sans-serif">
 <table width="100%" cellpadding="0" cellspacing="0" style="padding:30px 0">
 <tr><td align="center">
 <table width="560" cellpadding="0" cellspacing="0" style="background:#fff;border-radius:12px;overflow:hidden;box-shadow:0 2px 8px rgba(0,0,0,0.06)">
    <tr><td style="background:' . $accentColor . ';padding:20px 30px">
        <h1 style="margin:0;color:#fff;font-size:18px">' . htmlspecialchars($title) . '</h1>
    </td></tr>
    <tr><td style="padding:30px">
        <p style="margin:0 0 12px;color:#444;font-size:14px">' . htmlspecialchars($greeting) . '</p>
        <h2 style="margin:0 0 15px;color:#2c3e6b;font-size:16px">' . htmlspecialchars($topic) . '</h2>
        <p style="margin:0 0 20px;color:#444;font-size:14px;line-height:1.6">' . $message . '</p>
        <a href="' . htmlspecialchars($url) . '" style="display:inline-block;background:#5a8fd8;color:#fff;padding:10px 24px;border-radius:6px;text-decoration:none;font-weight:600;font-size:14px">Apri profilo</a>
    </td></tr>
    <tr><td style="padding:15px 30px;background:#f8f9fb;border-top:1px solid #eee">
        <p style="margin:0;color:#999;font-size:11px">ZIBOGOMMA — Formazione</p>
    </td></tr>
 </table>
 </td></tr>
 </table>
 </body>
 </html>';
 }
@@ -256,7 +256,6 @@ $departments = $stmtDepartments->fetchAll(PDO::FETCH_ASSOC);
    <!-- jQuery and Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -367,7 +366,7 @@ $departments = $stmtDepartments->fetchAll(PDO::FETCH_ASSOC);
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -17,16 +17,18 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
    try {
        if ($action === 'add') {
            // Codice originale per add
            $employee_code = trim($_POST['employee_code'] ?? '');
            $first_name    = trim($_POST['first_name'] ?? '');
            $last_name     = trim($_POST['last_name'] ?? '');
            $address       = trim($_POST['address'] ?? '');
            $phone         = trim($_POST['phone'] ?? '');
            $email         = trim($_POST['email'] ?? '');
            $department_id = $_POST['department_id'] !== '' ? (int)$_POST['department_id'] : null;
-            $position      = trim($_POST['position'] ?? '');
+            $job_role_id   = ($_POST['job_role_id'] ?? '') !== '' ? (int)$_POST['job_role_id'] : null;
            $hire_date     = trim($_POST['hire_date'] ?? '');
            $status        = trim($_POST['status'] ?? 'active');
            $auth_user_id  = $_POST['auth_user_id'] !== '' ? (int)$_POST['auth_user_id'] : null;
-            $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
+            $role_id       = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
            if ($first_name === '' || $last_name === '') {
                echo json_encode([
@@ -35,23 +37,31 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
                ]);
                exit;
            }
-
+            if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
                echo json_encode(['success' => false, 'message' => 'Email non valida.']);
                exit;
            }
            if (!in_array($status, ['active', 'inactive', 'suspended'], true)) {
                $status = 'active';
            }
            $sql = "INSERT INTO employees
-                (auth_user_id, employee_code, first_name, last_name, department_id, position, hire_date, status, created_at, updated_at)
+                (auth_user_id, employee_code, first_name, last_name, address, phone, email,
                 department_id, job_role_id, hire_date, status, created_at, updated_at)
                VALUES
-                (:auth_user_id, :employee_code, :first_name, :last_name, :department_id, :position, :hire_date, :status, NOW(), NOW())";
+                (:auth_user_id, :employee_code, :first_name, :last_name, :address, :phone, :email,
                 :department_id, :job_role_id, :hire_date, :status, NOW(), NOW())";
            $stmt = $pdo->prepare($sql);
            $stmt->execute([
                'auth_user_id'  => $auth_user_id,
                'employee_code' => $employee_code !== '' ? $employee_code : null,
                'first_name'    => $first_name,
                'last_name'     => $last_name,
                'address'       => $address !== '' ? $address : null,
                'phone'         => $phone !== '' ? $phone : null,
                'email'         => $email !== '' ? $email : null,
                'department_id' => $department_id,
-                'position'      => $position !== '' ? $position : null,
+                'job_role_id'   => $job_role_id,
                'hire_date'     => $hire_date !== '' ? $hire_date : null,
                'status'        => $status
            ]);
@@ -74,17 +84,19 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
        }
        if ($action === 'edit') {
-            // Codice originale per edit
+            $id            = (int)($_POST['id'] ?? 0);
            $id           = (int)($_POST['id'] ?? 0);
            $employee_code = trim($_POST['employee_code'] ?? '');
            $first_name    = trim($_POST['first_name'] ?? '');
            $last_name     = trim($_POST['last_name'] ?? '');
            $address       = trim($_POST['address'] ?? '');
            $phone         = trim($_POST['phone'] ?? '');
            $email         = trim($_POST['email'] ?? '');
            $department_id = $_POST['department_id'] !== '' ? (int)$_POST['department_id'] : null;
-            $position      = trim($_POST['position'] ?? '');
+            $job_role_id   = ($_POST['job_role_id'] ?? '') !== '' ? (int)$_POST['job_role_id'] : null;
            $hire_date     = trim($_POST['hire_date'] ?? '');
            $status        = trim($_POST['status'] ?? 'active');
            $auth_user_id  = $_POST['auth_user_id'] !== '' ? (int)$_POST['auth_user_id'] : null;
-            $role_id = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
+            $role_id       = $_POST['role_id'] !== '' ? (int)$_POST['role_id'] : null;
            if ($id <= 0) {
                echo json_encode(['success' => false, 'message' => 'Invalid employee ID.']);
@@ -98,7 +110,10 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
                ]);
                exit;
            }
-
+            if ($email !== '' && !filter_var($email, FILTER_VALIDATE_EMAIL)) {
                echo json_encode(['success' => false, 'message' => 'Email non valida.']);
                exit;
            }
            if (!in_array($status, ['active', 'inactive', 'suspended'], true)) {
                $status = 'active';
            }
@@ -108,8 +123,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
                        employee_code = :employee_code,
                        first_name    = :first_name,
                        last_name     = :last_name,
                        address       = :address,
                        phone         = :phone,
                        email         = :email,
                        department_id = :department_id,
-                        position      = :position,
+                        job_role_id   = :job_role_id,
                        hire_date     = :hire_date,
                        status        = :status,
                        updated_at    = NOW()
@@ -120,8 +138,11 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && isset($_POST['ajax']) && $_POST['aj
                'employee_code' => $employee_code !== '' ? $employee_code : null,
                'first_name'    => $first_name,
                'last_name'     => $last_name,
                'address'       => $address !== '' ? $address : null,
                'phone'         => $phone !== '' ? $phone : null,
                'email'         => $email !== '' ? $email : null,
                'department_id' => $department_id,
-                'position'      => $position !== '' ? $position : null,
+                'job_role_id'   => $job_role_id,
                'hire_date'     => $hire_date !== '' ? $hire_date : null,
                'status'        => $status,
                'id'            => $id
@@ -223,6 +244,7 @@ $sql = "
    SELECT e.*,
           d.name AS department_name,
           d.color AS department_color,
           jr.name AS job_role_name,
           au.email AS user_email,
           au.role_id AS user_role_id,
           ar.display_name AS role_display_name,
@@ -230,6 +252,7 @@ $sql = "
           CONCAT(COALESCE(au.first_name, ''), ' ', COALESCE(au.last_name, '')) AS user_fullname
    FROM employees e
    LEFT JOIN departments d ON e.department_id = d.id
    LEFT JOIN job_roles jr  ON jr.id = e.job_role_id
    LEFT JOIN auth_users au ON e.auth_user_id = au.id
    LEFT JOIN auth_roles ar ON ar.id = au.role_id
    ORDER BY e.id DESC
@@ -237,6 +260,11 @@ $sql = "
 $stmtEmployees = $pdo->query($sql);
 $employees = $stmtEmployees->fetchAll(PDO::FETCH_ASSOC);
 // Job roles for the dropdown
 $jobRoles = $pdo->query("
    SELECT id, name FROM job_roles WHERE is_active = 1 ORDER BY sort_order, name
 ")->fetchAll(PDO::FETCH_ASSOC);
 // Users list for select
 $sqlUsers = "
    SELECT id,
@@ -297,7 +325,6 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -415,7 +442,7 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -448,14 +475,15 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                <thead>
                                    <tr>
                                        <th>ID</th>
-                                        <th>Code</th>
+                                        <th>Codice</th>
-                                        <th>Name</th>
+                                        <th>Nome</th>
-                                        <th>Department</th>
+                                        <th>Contatti</th>
-                                        <th>Position</th>
+                                        <th>Reparto</th>
-                                        <th>Hire Date</th>
+                                        <th>Mansione</th>
-                                        <th>Status</th>
+                                        <th>Data Assunzione</th>
-                                        <th>Linked User</th>
+                                        <th>Stato</th>
-                                        <th>Actions</th>
+                                        <th>Utente collegato</th>
                                        <th>Azioni</th>
                                    </tr>
                                </thead>
                                <tbody>
@@ -484,7 +512,24 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                            <tr>
                                                <td><?= (int)$row['id'] ?></td>
                                                <td><?= htmlspecialchars($row['employee_code'] ?? '') ?></td>
-                                                <td><?= htmlspecialchars($fullName) ?></td>
+                                                <td>
                                                    <a href="employee-profile.php?id=<?= (int)$row['id'] ?>" class="fw-semibold text-decoration-none">
                                                        <?= htmlspecialchars($fullName) ?>
                                                    </a>
                                                </td>
                                                <td class="text-start">
                                                    <?php if (!empty($row['email'])): ?>
                                                        <a href="mailto:<?= htmlspecialchars($row['email'], ENT_QUOTES) ?>" class="text-decoration-none small">
                                                            ✉️ <?= htmlspecialchars($row['email']) ?>
                                                        </a><br>
                                                    <?php endif; ?>
                                                    <?php if (!empty($row['phone'])): ?>
                                                        <a href="tel:<?= htmlspecialchars($row['phone'], ENT_QUOTES) ?>" class="text-decoration-none small">
                                                            📞 <?= htmlspecialchars($row['phone']) ?>
                                                        </a>
                                                    <?php endif; ?>
                                                    <?php if (empty($row['email']) && empty($row['phone'])): ?>-<?php endif; ?>
                                                </td>
                                                <td>
                                                    <?php if (!empty($row['department_name'])): ?>
                                                        <span class="department-badge" style="background-color: <?= htmlspecialchars($row['department_color'] ?? '#6c757d', ENT_QUOTES) ?>;">
@@ -494,7 +539,7 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                                        -
                                                    <?php endif; ?>
                                                </td>
-                                                <td><?= htmlspecialchars($row['position'] ?? '') ?></td>
+                                                <td><?= !empty($row['job_role_name']) ? htmlspecialchars($row['job_role_name']) : '-' ?></td>
                                                <td><?= $hireDate ?></td>
                                                <td>
                                                    <span class="badge-status <?= $statusClass ?>">
@@ -510,7 +555,10 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                                        data-first_name="<?= htmlspecialchars($row['first_name'] ?? '', ENT_QUOTES) ?>"
                                                        data-last_name="<?= htmlspecialchars($row['last_name'] ?? '', ENT_QUOTES) ?>"
                                                        data-department_id="<?= $row['department_id'] !== null ? (int)$row['department_id'] : '' ?>"
-                                                        data-position="<?= htmlspecialchars($row['position'] ?? '', ENT_QUOTES) ?>"
+                                                        data-job_role_id="<?= $row['job_role_id'] !== null ? (int)$row['job_role_id'] : '' ?>"
                                                        data-address="<?= htmlspecialchars($row['address'] ?? '', ENT_QUOTES) ?>"
                                                        data-phone="<?= htmlspecialchars($row['phone'] ?? '', ENT_QUOTES) ?>"
                                                        data-email="<?= htmlspecialchars($row['email'] ?? '', ENT_QUOTES) ?>"
                                                        data-hire_date="<?= htmlspecialchars($row['hire_date'] ?? '', ENT_QUOTES) ?>"
                                                        data-status="<?= htmlspecialchars($status, ENT_QUOTES) ?>"
                                                        data-auth_user_id="<?= $row['auth_user_id'] !== null ? (int)$row['auth_user_id'] : '' ?>"
@@ -560,26 +608,42 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                <div class="modal-body">
                    <form id="addEmployeeForm">
                        <div class="mb-3">
-                            <label class="form-label fw-semibold">Employee Code</label>
+                            <label class="form-label fw-semibold">Codice Dipendente</label>
-                            <input type="text" class="form-control" id="addEmployeeCode" name="employee_code" placeholder="Optional">
+                            <input type="text" class="form-control" id="addEmployeeCode" name="employee_code" placeholder="Opzionale">
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">First Name</label>
+                                <label class="form-label fw-semibold">Nome</label>
                                <input type="text" class="form-control" id="addFirstName" name="first_name" required>
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Last Name</label>
+                                <label class="form-label fw-semibold">Cognome</label>
                                <input type="text" class="form-control" id="addLastName" name="last_name" required>
                            </div>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Indirizzo</label>
                            <input type="text" class="form-control" id="addAddress" name="address" placeholder="Via, città, CAP">
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Department</label>
+                                <label class="form-label fw-semibold">Telefono</label>
                                <input type="tel" class="form-control" id="addPhone" name="phone">
                            </div>
                            <div class="col-md-6 mb-3">
                                <label class="form-label fw-semibold">Email</label>
                                <input type="email" class="form-control" id="addEmail" name="email">
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
                                <label class="form-label fw-semibold">Reparto</label>
                                <select class="form-select" id="addDepartmentId" name="department_id" style="width:100%;">
-                                    <option value="">-- Select Department --</option>
+                                    <option value="">-- Nessuno --</option>
                                    <?php foreach ($departments as $d): ?>
                                        <option value="<?= (int)$d['id'] ?>">
                                            <?= htmlspecialchars($d['name']) ?>
@@ -589,30 +653,35 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                </select>
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Position</label>
+                                <label class="form-label fw-semibold">Mansione</label>
-                                <input type="text" class="form-control" id="addPosition" name="position" placeholder="e.g. Line Operator">
+                                <select class="form-select" id="addJobRoleId" name="job_role_id" style="width:100%;">
                                    <option value="">-- Nessuna --</option>
                                    <?php foreach ($jobRoles as $jr): ?>
                                        <option value="<?= (int)$jr['id'] ?>"><?= htmlspecialchars($jr['name']) ?></option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Hire Date</label>
+                                <label class="form-label fw-semibold">Data Assunzione</label>
                                <input type="date" class="form-control" id="addHireDate" name="hire_date">
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Status</label>
+                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="addStatus" name="status">
-                                    <option value="active" selected>Active</option>
+                                    <option value="active" selected>Attivo</option>
-                                    <option value="inactive">Inactive</option>
+                                    <option value="inactive">Cessato</option>
-                                    <option value="suspended">Suspended</option>
+                                    <option value="suspended">Sospeso</option>
                                </select>
                            </div>
                        </div>
                        <div class="mb-3">
-                            <label class="form-label fw-semibold">Linked User (auth_users)</label>
+                            <label class="form-label fw-semibold">Utente collegato (account login)</label>
                            <select class="form-select" id="addAuthUserId" name="auth_user_id" style="width:100%;">
-                                <option value="">-- None --</option>
+                                <option value="">-- Nessuno --</option>
                                <?php foreach ($users as $u): ?>
                                    <option value="<?= (int)$u['id'] ?>" data-role_id="<?= (int)$u['role_id'] ?>">
                                        <?= htmlspecialchars($u['label']) ?>
@@ -622,16 +691,16 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                        </div>
                        <div class="mb-3 d-none" id="addRoleWrapper">
-                            <label class="form-label fw-semibold">User Role</label>
+                            <label class="form-label fw-semibold">Ruolo di accesso</label>
                            <select class="form-select" id="addRoleId" name="role_id" style="width:100%;">
-                                <option value="">-- Select Role --</option>
+                                <option value="">-- Seleziona ruolo --</option>
                                <?php foreach ($roles as $r): ?>
                                    <option value="<?= (int)$r['id'] ?>">
                                        <?= htmlspecialchars($r['display_name'] ?: $r['name']) ?>
                                    </option>
                                <?php endforeach; ?>
                            </select>
-                            <small class="text-muted">Visible only when an auth user is linked.</small>
+                            <small class="text-muted">Visibile solo quando è collegato un utente di sistema.</small>
                        </div>
                        <div class="text-center">
@@ -658,26 +727,42 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                        <input type="hidden" id="editEmployeeId">
                        <div class="mb-3">
-                            <label class="form-label fw-semibold">Employee Code</label>
+                            <label class="form-label fw-semibold">Codice Dipendente</label>
-                            <input type="text" class="form-control" id="editEmployeeCode" name="employee_code" placeholder="Optional">
+                            <input type="text" class="form-control" id="editEmployeeCode" name="employee_code" placeholder="Opzionale">
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">First Name</label>
+                                <label class="form-label fw-semibold">Nome</label>
                                <input type="text" class="form-control" id="editFirstName" name="first_name" required>
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Last Name</label>
+                                <label class="form-label fw-semibold">Cognome</label>
                                <input type="text" class="form-control" id="editLastName" name="last_name" required>
                            </div>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Indirizzo</label>
                            <input type="text" class="form-control" id="editAddress" name="address">
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Department</label>
+                                <label class="form-label fw-semibold">Telefono</label>
                                <input type="tel" class="form-control" id="editPhone" name="phone">
                            </div>
                            <div class="col-md-6 mb-3">
                                <label class="form-label fw-semibold">Email</label>
                                <input type="email" class="form-control" id="editEmail" name="email">
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
                                <label class="form-label fw-semibold">Reparto</label>
                                <select class="form-select" id="editDepartmentId" name="department_id" style="width:100%;">
-                                    <option value="">-- Select Department --</option>
+                                    <option value="">-- Nessuno --</option>
                                    <?php foreach ($departments as $d): ?>
                                        <option value="<?= (int)$d['id'] ?>">
                                            <?= htmlspecialchars($d['name']) ?>
@@ -687,30 +772,35 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                                </select>
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Position</label>
+                                <label class="form-label fw-semibold">Mansione</label>
-                                <input type="text" class="form-control" id="editPosition" name="position">
+                                <select class="form-select" id="editJobRoleId" name="job_role_id" style="width:100%;">
                                    <option value="">-- Nessuna --</option>
                                    <?php foreach ($jobRoles as $jr): ?>
                                        <option value="<?= (int)$jr['id'] ?>"><?= htmlspecialchars($jr['name']) ?></option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Hire Date</label>
+                                <label class="form-label fw-semibold">Data Assunzione</label>
                                <input type="date" class="form-control" id="editHireDate" name="hire_date">
                            </div>
                            <div class="col-md-6 mb-3">
-                                <label class="form-label fw-semibold">Status</label>
+                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="editStatus" name="status">
-                                    <option value="active">Active</option>
+                                    <option value="active">Attivo</option>
-                                    <option value="inactive">Inactive</option>
+                                    <option value="inactive">Cessato</option>
-                                    <option value="suspended">Suspended</option>
+                                    <option value="suspended">Sospeso</option>
                                </select>
                            </div>
                        </div>
                        <div class="mb-3">
-                            <label class="form-label fw-semibold">Linked User (auth_users)</label>
+                            <label class="form-label fw-semibold">Utente collegato (account login)</label>
                            <select class="form-select" id="editAuthUserId" name="auth_user_id" style="width:100%;">
-                                <option value="">-- None --</option>
+                                <option value="">-- Nessuno --</option>
                                <?php foreach ($users as $u): ?>
                                    <option value="<?= (int)$u['id'] ?>" data-role_id="<?= (int)$u['role_id'] ?>">
                                        <?= htmlspecialchars($u['label']) ?>
@@ -720,16 +810,16 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                        </div>
                        <div class="mb-3 d-none" id="editRoleWrapper">
-                            <label class="form-label fw-semibold">User Role</label>
+                            <label class="form-label fw-semibold">Ruolo di accesso</label>
                            <select class="form-select" id="editRoleId" name="role_id" style="width:100%;">
-                                <option value="">-- Select Role --</option>
+                                <option value="">-- Seleziona ruolo --</option>
                                <?php foreach ($roles as $r): ?>
                                    <option value="<?= (int)$r['id'] ?>">
                                        <?= htmlspecialchars($r['display_name'] ?: $r['name']) ?>
                                    </option>
                                <?php endforeach; ?>
                            </select>
-                            <small class="text-muted">Visible only when an auth user is linked.</small>
+                            <small class="text-muted">Visibile solo quando è collegato un utente di sistema.</small>
                        </div>
                        <div class="text-center">
@@ -784,7 +874,7 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
            // Select2 on user selects
-            $('#addAuthUserId, #editAuthUserId, #addDepartmentId, #editDepartmentId, #addRoleId, #editRoleId').select2({
+            $('#addAuthUserId, #editAuthUserId, #addDepartmentId, #editDepartmentId, #addRoleId, #editRoleId, #addJobRoleId, #editJobRoleId').select2({
                theme: 'bootstrap-5',
                width: '100%'
            });
@@ -834,8 +924,11 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                payload.append('employee_code', $("#addEmployeeCode").val().trim());
                payload.append('first_name', $("#addFirstName").val().trim());
                payload.append('last_name', $("#addLastName").val().trim());
                payload.append('address', $("#addAddress").val().trim());
                payload.append('phone', $("#addPhone").val().trim());
                payload.append('email', $("#addEmail").val().trim());
                payload.append('department_id', $("#addDepartmentId").val() || '');
-                payload.append('position', $("#addPosition").val().trim());
+                payload.append('job_role_id', $("#addJobRoleId").val() || '');
                payload.append('hire_date', $("#addHireDate").val());
                payload.append('status', $("#addStatus").val());
                payload.append('auth_user_id', $("#addAuthUserId").val() || '');
@@ -884,7 +977,10 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                $("#editFirstName").val(btn.data("first_name"));
                $("#editLastName").val(btn.data("last_name"));
                $("#editDepartmentId").val(btn.data("department_id") ? String(btn.data("department_id")) : '').trigger('change');
-                $("#editPosition").val(btn.data("position"));
+                $("#editJobRoleId").val(btn.data("job_role_id") ? String(btn.data("job_role_id")) : '').trigger('change');
                $("#editAddress").val(btn.data("address"));
                $("#editPhone").val(btn.data("phone"));
                $("#editEmail").val(btn.data("email"));
                $("#editHireDate").val(btn.data("hire_date"));
                $("#editStatus").val(btn.data("status"));
@@ -916,8 +1012,11 @@ $allSkills = $stmtSkills->fetchAll(PDO::FETCH_ASSOC);
                payload.append('employee_code', $("#editEmployeeCode").val().trim());
                payload.append('first_name', $("#editFirstName").val().trim());
                payload.append('last_name', $("#editLastName").val().trim());
                payload.append('address', $("#editAddress").val().trim());
                payload.append('phone', $("#editPhone").val().trim());
                payload.append('email', $("#editEmail").val().trim());
                payload.append('department_id', $("#editDepartmentId").val() || '');
-                payload.append('position', $("#editPosition").val().trim());
+                payload.append('job_role_id', $("#editJobRoleId").val() || '');
                payload.append('hire_date', $("#editHireDate").val());
                payload.append('status', $("#editStatus").val());
                payload.append('auth_user_id', $("#editAuthUserId").val() || '');
@@ -40,8 +40,7 @@ $kindofrole = $user->present()->role_id;
 //$iduserlogin="1";
 //$nameuser="Claudio";
 //$emailuser="info@claudiosironi.com";
-?>
+
 <?php
 if (session_status() == PHP_SESSION_NONE) {
 	session_start();
 }
@@ -54,10 +53,8 @@ $_SESSION["emailuser"] = $emailuser;
 $_SESSION["photouser"] = $avatar;
 $photouser = $_SESSION["photouser"];
 $photousername = basename($avatar);
 ?>
-
+//include files
 <?php //include files
 require_once(__DIR__ . '/../../languages/en/general.php');
@@ -11,8 +11,14 @@
    </div>
    <!--navigation-->
    <ul class="metismenu" id="menu">
-        <!-- user, admin, superuser menù -->
+        <!-- Production: Admin / User / Superuser / employee-hr / manager -->
-        <?php if ((Auth::user()->hasRole('Admin')) || (Auth::user()->hasRole('User')) || (Auth::user()->hasRole('Superuser'))) : ?>
+        <?php if (
            Auth::user()->hasRole('Admin')
            || Auth::user()->hasRole('User')
            || Auth::user()->hasRole('Superuser')
            || Auth::user()->hasRole('employee-hr')
            || Auth::user()->hasRole('manager')
        ) : ?>
            <li>
                <a href="production_dashboard.php">
                    <div class="parent-icon"><i class="bx bx-home-alt"></i>
@@ -59,6 +65,49 @@
        <?php endif; ?>
        <!-- Personale: only Admin / Superuser / employee-hr / manager (not regular User) -->
        <?php if (
            Auth::user()->hasRole('Admin')
            || Auth::user()->hasRole('Superuser')
            || Auth::user()->hasRole('employee-hr')
            || Auth::user()->hasRole('manager')
        ) : ?>
            <li>
                <a href="javascript:;" class="has-arrow">
                    <div class="parent-icon"><i class="bx bx-group"></i>
                    </div>
                    <div class="menu-title">Personale</div>
                </a>
                <ul>
                    <li>
                        <a href="employees.php"><i class='bx bx-radio-circle'></i>Dipendenti</a>
                    </li>
                    <li>
                        <a href="departments.php"><i class='bx bx-radio-circle'></i>Reparti</a>
                    </li>
                    <li>
                        <a href="job_roles.php"><i class='bx bx-radio-circle'></i>Mansioni</a>
                    </li>
                    <li>
                        <a href="training_topics.php"><i class='bx bx-radio-circle'></i>Corsi di Formazione</a>
                    </li>
                    <li>
                        <a href="trainings.php"><i class='bx bx-radio-circle'></i>Storico Formazione</a>
                    </li>
                </ul>
            </li>
        <?php endif; ?>
        <!-- Scadenzario: Admin / User / Superuser / employee-hr / manager -->
        <?php if (
            Auth::user()->hasRole('Admin')
            || Auth::user()->hasRole('User')
            || Auth::user()->hasRole('Superuser')
            || Auth::user()->hasRole('employee-hr')
            || Auth::user()->hasRole('manager')
        ) : ?>
            <li>
                <a href="javascript:;" class="has-arrow">
                    <div class="parent-icon"><i class="bx bx-calendar-check"></i>
@@ -1,3 +1,11 @@
 <?php
    // Build an absolute URL to employee-profile.php so it works from any depth
    // (e.g. /userarea/index.php, /userarea/scadenzario/index.php).
    $__scriptName = $_SERVER['SCRIPT_NAME'] ?? '';
    $__pos        = strpos($__scriptName, '/userarea/');
    $__base       = $__pos !== false ? substr($__scriptName, 0, $__pos) : '';
    $__myProfileHref = $__base . '/userarea/employee-profile.php';
 ?>
 <header>
    <div class="topbar d-flex align-items-center">
        <nav class="navbar navbar-expand gap-3">
@@ -85,6 +93,12 @@
                    </div>
                </a>
                <ul class="dropdown-menu dropdown-menu-end">
                    <li>
                        <a class="dropdown-item d-flex align-items-center" href="<?= htmlspecialchars($__myProfileHref) ?>"
                           onclick="event.preventDefault(); window.location.assign(this.href);">
                            <i class="bx bx-id-card fs-5"></i><span>Il Mio Profilo</span>
                        </a>
                    </li>
                    <li>
                        <a class="dropdown-item d-flex align-items-center" href="../users">
                            <i class="bx bx-user fs-5"></i><span>Utente</span>
@@ -0,0 +1,93 @@
 <?php
 /**
 * Training reminders widget for the production dashboard.
 * Visible to HR / manager / Admin / User / Superuser.
 *
 * Expects $pdo to be set (DBHandlerSelect connection).
 */
 if (!isset($pdo)) {
    $pdo = DBHandlerSelect::getInstance()->getConnection();
 }
 $__trWidgetHr = isset($user)
    && (   $user->hasRole('Admin')
        || $user->hasRole('Superuser')
        || $user->hasRole('employee-hr')
        || $user->hasRole('manager'));
 if (!$__trWidgetHr) {
    return;
 }
 $__trRows = $pdo->query("
    SELECT et.id,
           et.next_due_date,
           et.reminder_days,
           tt.default_reminder_days
    FROM employee_trainings et
    JOIN training_topics tt ON tt.id = et.training_topic_id
    WHERE et.next_due_date IS NOT NULL
 ")->fetchAll(PDO::FETCH_ASSOC);
 $__expiredCount = 0;
 $__dueSoonCount = 0;
 $__today = new DateTime('today');
 foreach ($__trRows as $__r) {
    $__rem = $__r['reminder_days'] !== null
        ? (int)$__r['reminder_days']
        : ($__r['default_reminder_days'] !== null ? (int)$__r['default_reminder_days'] : 30);
    $__due = DateTime::createFromFormat('Y-m-d', $__r['next_due_date']);
    if (!$__due) continue;
    $__days = (int)$__today->diff($__due)->format('%r%a');
    if ($__days < 0)             { $__expiredCount++; }
    elseif ($__days <= $__rem)   { $__dueSoonCount++; }
 }
 /* Missing mandatory trainings (status = not_present) */
 $__notPresentCount = (int)$pdo->query("
    SELECT COUNT(*)
    FROM employees e
    CROSS JOIN training_topics tt
    WHERE tt.is_active = 1 AND tt.is_mandatory = 1
      AND NOT EXISTS (
          SELECT 1 FROM employee_trainings et
          WHERE et.employee_id = e.id AND et.training_topic_id = tt.id
      )
 ")->fetchColumn();
 if ($__expiredCount === 0 && $__dueSoonCount === 0 && $__notPresentCount === 0) {
    return;
 }
 ?>
 <div class="my-deadlines-widgets">
 <?php if ($__expiredCount > 0): ?>
 <a class="mdw mdw-red" href="trainings.php?status=expired">
    <span class="mdw-icon"><i class="fa-solid fa-graduation-cap"></i></span>
    <span class="mdw-body">
        <span class="mdw-count"><?= (int)$__expiredCount ?></span>
        <span class="mdw-label d-block">Formazion<?= $__expiredCount === 1 ? 'e scaduta' : 'i scadute' ?></span>
    </span>
    <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
 </a>
 <?php endif; ?>
 <?php if ($__dueSoonCount > 0): ?>
 <a class="mdw mdw-orange" href="trainings.php?status=due_soon">
    <span class="mdw-icon"><i class="fa-solid fa-hourglass-half"></i></span>
    <span class="mdw-body">
        <span class="mdw-count"><?= (int)$__dueSoonCount ?></span>
        <span class="mdw-label d-block">Formazion<?= $__dueSoonCount === 1 ? 'e da aggiornare' : 'i da aggiornare' ?></span>
    </span>
    <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
 </a>
 <?php endif; ?>
 <?php if ($__notPresentCount > 0): ?>
 <a class="mdw mdw-gray" href="trainings.php?status=not_present">
    <span class="mdw-icon"><i class="fa-solid fa-circle-question"></i></span>
    <span class="mdw-body">
        <span class="mdw-count"><?= (int)$__notPresentCount ?></span>
        <span class="mdw-label d-block">Obbligator<?= $__notPresentCount === 1 ? 'ia non presente' : 'ie non presenti' ?></span>
    </span>
    <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
 </a>
 <?php endif; ?>
 </div>
@@ -0,0 +1,428 @@
 <?php
 include('include/headscript.php');
 $db  = DBHandlerSelect::getInstance();
 $pdo = $db->getConnection();
 /* ==========================================
   PAGE DATA
   ========================================== */
 $sql = "
    SELECT jr.*,
           (SELECT COUNT(*) FROM employees e WHERE e.job_role_id = jr.id) AS employees_count
    FROM job_roles jr
    ORDER BY jr.sort_order ASC, jr.name ASC
 ";
 $jobRoles = $pdo->query($sql)->fetchAll(PDO::FETCH_ASSOC);
 ?>
 <!doctype html>
 <html lang="it">
 <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
    <?php include('cssinclude.php'); ?>
    <title>Gestione Mansioni - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <link rel="stylesheet" href="https://cdn.datatables.net/1.13.6/css/dataTables.bootstrap5.min.css">
    <script src="https://cdn.datatables.net/1.13.6/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.13.6/js/dataTables.bootstrap5.min.js"></script>
    <style>
        body { font-size: 1.05rem; background: #f8fafc; }
        .card { border-radius: 16px; box-shadow: 0 4px 12px rgba(0, 0, 0, 0.08); }
        .back-dashboard {
            background-color: #cfe3ff !important; color: #1f2d3d !important;
            border: 1px solid #bcd4f4 !important; border-radius: 10px;
            font-weight: 600; padding: 10px 18px;
            box-shadow: 0 3px 8px rgba(0, 0, 0, 0.1);
            transition: all 0.2s ease-in-out;
        }
        .back-dashboard:hover { background-color: #b9d3ff !important; transform: translateY(-2px); }
        .btn-add { background-color: #0d6efd; color: #fff; border-radius: 8px; padding: 10px 20px; font-weight: 500; }
        .btn-add:hover { background-color: #0b5ed7; transform: scale(1.02); }
        .table thead { background-color: #cfe3ff; color: #1f2d3d; }
        .modal-content { border-radius: 16px; }
        #tabellaJobRoles thead th { text-align: center; vertical-align: middle; }
        .badge-status { padding: 0.25rem 0.6rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
        .badge-status.active { background-color: #d1fae5; color: #065f46; }
        .badge-status.inactive { background-color: #e5e7eb; color: #374151; }
        .description-cell {
            max-width: 320px; white-space: nowrap; overflow: hidden;
            text-overflow: ellipsis; text-align: left;
        }
        @media (max-width: 767.98px) {
            .card-header { flex-direction: column; align-items: flex-start !important; gap: .5rem; }
            .back-dashboard { width: 100%; }
            .btn-add { width: 100%; }
        }
        .jr-card {
            border: 1px solid #e2e8f0;
            border-radius: 14px;
            padding: 14px 16px;
            margin-bottom: 12px;
            background: #fff;
            box-shadow: 0 2px 6px rgba(0, 0, 0, 0.04);
        }
        .jr-card-title {
            font-size: 1.1rem;
            font-weight: 600;
            color: #1f2937;
            margin: 0 0 4px 0;
            word-break: break-word;
        }
        .jr-card-desc {
            color: #475569;
            font-size: 0.95rem;
            margin: 0 0 10px 0;
            word-break: break-word;
        }
        .jr-card-meta {
            display: flex;
            flex-wrap: wrap;
            gap: 8px 14px;
            font-size: 0.85rem;
            color: #64748b;
            margin-bottom: 12px;
        }
        .jr-card-meta b { color: #1f2937; font-weight: 600; }
        .jr-card-actions {
            display: flex;
            gap: 8px;
        }
        .jr-card-actions .btn {
            flex: 1;
        }
        .jr-empty {
            text-align: center;
            color: #94a3b8;
            padding: 24px 0;
        }
    </style>
 </head>
 <body>
    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
        <div class="page-wrapper">
            <div class="page-content">
                <div class="card p-3">
                    <div class="card-header d-flex justify-content-between align-items-center flex-wrap gap-2">
                        <h5 class="mb-0">Gestione Mansioni</h5>
                        <button type="button" class="btn back-dashboard" onclick="location.href='production_dashboard.php'">
                            ↩️ Torna alla Dashboard
                        </button>
                    </div>
                    <div class="card-body">
                        <div class="d-flex justify-content-between align-items-center mb-3 flex-wrap gap-2">
                            <h6 class="fw-semibold mb-0">Elenco Mansioni / Job Roles</h6>
                            <button class="btn btn-add" data-bs-toggle="modal" data-bs-target="#addJobRoleModal">
                                ➕ Aggiungi Mansione
                            </button>
                        </div>
                        <!-- DESKTOP / TABLET ≥768px: TABLE -->
                        <div class="table-responsive d-none d-md-block"><!-- hide on <md -->
                            <table id="tabellaJobRoles" class="table table-striped align-middle text-center" style="width:100%;">
                                <thead>
                                    <tr>
                                        <th>ID</th>
                                        <th>Nome</th>
                                        <th>Descrizione</th>
                                        <th>Ordine</th>
                                        <th>Stato</th>
                                        <th>Dipendenti</th>
                                        <th>Creato</th>
                                        <th>Azioni</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($jobRoles as $row): ?>
                                        <?php
                                        $id          = (int)$row['id'];
                                        $name        = $row['name'] ?? '';
                                        $description = $row['description'] ?? '';
                                        $sortOrder   = (int)($row['sort_order'] ?? 999);
                                        $isActive    = (int)($row['is_active'] ?? 1);
                                        $cnt         = (int)($row['employees_count'] ?? 0);
                                        $statusClass = $isActive === 1 ? 'active' : 'inactive';
                                        $statusLabel = $isActive === 1 ? 'Attivo' : 'Inattivo';
                                        $createdAt   = !empty($row['created_at'])
                                            ? date('d/m/Y H:i', strtotime($row['created_at']))
                                            : '-';
                                        ?>
                                        <tr>
                                            <td><?= $id ?></td>
                                            <td class="fw-semibold text-start"><?= htmlspecialchars($name) ?></td>
                                            <td class="description-cell" title="<?= htmlspecialchars($description, ENT_QUOTES) ?>">
                                                <?= $description !== '' ? htmlspecialchars($description) : '-' ?>
                                            </td>
                                            <td><?= $sortOrder ?></td>
                                            <td>
                                                <span class="badge-status <?= $statusClass ?>"><?= $statusLabel ?></span>
                                            </td>
                                            <td><?= $cnt ?></td>
                                            <td><?= $createdAt ?></td>
                                            <td>
                                                <button class="btn btn-sm btn-outline-secondary edit-job-role"
                                                    data-id="<?= $id ?>"
                                                    data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                                    data-description="<?= htmlspecialchars($description, ENT_QUOTES) ?>"
                                                    data-sort_order="<?= $sortOrder ?>"
                                                    data-is_active="<?= $isActive ?>">
                                                    ✏️ Modifica
                                                </button>
                                                <button class="btn btn-sm btn-outline-danger delete-job-role"
                                                    data-id="<?= $id ?>"
                                                    data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                                    data-count="<?= $cnt ?>">
                                                    🗑️ Cancella
                                                </button>
                                            </td>
                                        </tr>
                                    <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                        <!-- MOBILE <768px: CARDS -->
                        <div class="d-block d-md-none">
                            <?php if (empty($jobRoles)): ?>
                                <div class="jr-empty">Nessuna mansione presente</div>
                            <?php endif; ?>
                            <?php foreach ($jobRoles as $row): ?>
                                <?php
                                $id          = (int)$row['id'];
                                $name        = $row['name'] ?? '';
                                $description = $row['description'] ?? '';
                                $sortOrder   = (int)($row['sort_order'] ?? 999);
                                $isActive    = (int)($row['is_active'] ?? 1);
                                $cnt         = (int)($row['employees_count'] ?? 0);
                                $statusClass = $isActive === 1 ? 'active' : 'inactive';
                                $statusLabel = $isActive === 1 ? 'Attivo' : 'Inattivo';
                                ?>
                                <div class="jr-card">
                                    <h6 class="jr-card-title"><?= htmlspecialchars($name) ?></h6>
                                    <?php if ($description !== ''): ?>
                                        <p class="jr-card-desc"><?= htmlspecialchars($description) ?></p>
                                    <?php endif; ?>
                                    <div class="jr-card-meta">
                                        <span><span class="badge-status <?= $statusClass ?>"><?= $statusLabel ?></span></span>
                                        <span><b>Dipendenti:</b> <?= $cnt ?></span>
                                        <span><b>Ordine:</b> <?= $sortOrder ?></span>
                                    </div>
                                    <div class="jr-card-actions">
                                        <button class="btn btn-sm btn-outline-secondary edit-job-role"
                                            data-id="<?= $id ?>"
                                            data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                            data-description="<?= htmlspecialchars($description, ENT_QUOTES) ?>"
                                            data-sort_order="<?= $sortOrder ?>"
                                            data-is_active="<?= $isActive ?>">
                                            ✏️ Modifica
                                        </button>
                                        <button class="btn btn-sm btn-outline-danger delete-job-role"
                                            data-id="<?= $id ?>"
                                            data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                            data-count="<?= $cnt ?>">
                                            🗑️ Cancella
                                        </button>
                                    </div>
                                </div>
                            <?php endforeach; ?>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <?php include('include/footer.php'); ?>
    </div>
    <!-- ADD MODAL -->
    <div class="modal fade" id="addJobRoleModal" tabindex="-1">
        <div class="modal-dialog modal-dialog-centered modal-fullscreen-sm-down">
            <div class="modal-content">
                <div class="modal-header" style="background-color:#cfe3ff;">
                    <h5 class="modal-title">Aggiungi Mansione</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
                </div>
                <div class="modal-body">
                    <form id="addJobRoleForm">
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Nome</label>
                            <input type="text" class="form-control" id="addName" name="name" placeholder="es. Saldatore" required>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Descrizione</label>
                            <textarea class="form-control" id="addDescription" name="description" rows="3" placeholder="Opzionale"></textarea>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Ordine</label>
                                <input type="number" class="form-control" id="addSortOrder" name="sort_order" value="999" min="0">
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="addIsActive" name="is_active">
                                    <option value="1" selected>Attivo</option>
                                    <option value="0">Inattivo</option>
                                </select>
                            </div>
                        </div>
                        <div class="text-center">
                            <button type="submit" class="btn btn-add">💾 Salva</button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
    <!-- EDIT MODAL -->
    <div class="modal fade" id="editJobRoleModal" tabindex="-1">
        <div class="modal-dialog modal-dialog-centered modal-fullscreen-sm-down">
            <div class="modal-content">
                <div class="modal-header" style="background-color:#cfe3ff;">
                    <h5 class="modal-title">Modifica Mansione</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
                </div>
                <div class="modal-body">
                    <form id="editJobRoleForm">
                        <input type="hidden" id="editJobRoleId">
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Nome</label>
                            <input type="text" class="form-control" id="editName" name="name" required>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Descrizione</label>
                            <textarea class="form-control" id="editDescription" name="description" rows="3"></textarea>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Ordine</label>
                                <input type="number" class="form-control" id="editSortOrder" name="sort_order" value="999" min="0">
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="editIsActive" name="is_active">
                                    <option value="1">Attivo</option>
                                    <option value="0">Inattivo</option>
                                </select>
                            </div>
                        </div>
                        <div class="text-center">
                            <button type="submit" class="btn btn-add">💾 Salva Modifiche</button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
    <?php include('jsinclude.php'); ?>
    <script>
        $(document).ready(function() {
            $('#tabellaJobRoles').DataTable({
                order: [[3, 'asc'], [1, 'asc']],
                pageLength: 25,
                language: {
                    url: 'https://cdn.datatables.net/plug-ins/1.13.6/i18n/it-IT.json',
                    emptyTable: 'Nessuna mansione presente'
                }
            });
            function ajaxPost(url, payload, successTitle, errorFallback) {
                return fetch(url, {
                    method: "POST",
                    headers: { "Content-Type": "application/x-www-form-urlencoded" },
                    body: payload.toString()
                })
                .then(r => r.json())
                .then(data => {
                    if (data.success) {
                        Swal.fire({ icon: "success", title: successTitle, confirmButtonColor: "#3085d6" })
                            .then(() => location.reload());
                    } else {
                        Swal.fire({ icon: "error", title: "Errore", text: data.message || errorFallback });
                    }
                })
                .catch(err => {
                    Swal.fire({ icon: "error", title: "Errore", text: "Errore di comunicazione." });
                    console.error(err);
                });
            }
            $("#addJobRoleForm").on("submit", function(e) {
                e.preventDefault();
                const p = new URLSearchParams();
                p.append('name', $("#addName").val().trim());
                p.append('description', $("#addDescription").val().trim());
                p.append('sort_order', $("#addSortOrder").val());
                p.append('is_active', $("#addIsActive").val());
                ajaxPost("ajax/job_roles/save.php", p, "Salvato!", "Impossibile salvare la mansione.");
            });
            $(document).on("click", ".edit-job-role", function() {
                const b = $(this);
                $("#editJobRoleId").val(b.data("id"));
                $("#editName").val(b.data("name"));
                $("#editDescription").val(b.data("description"));
                $("#editSortOrder").val(b.data("sort_order"));
                $("#editIsActive").val(String(b.data("is_active")));
                $("#editJobRoleModal").modal("show");
            });
            $("#editJobRoleForm").on("submit", function(e) {
                e.preventDefault();
                const p = new URLSearchParams();
                p.append('id', $("#editJobRoleId").val());
                p.append('name', $("#editName").val().trim());
                p.append('description', $("#editDescription").val().trim());
                p.append('sort_order', $("#editSortOrder").val());
                p.append('is_active', $("#editIsActive").val());
                ajaxPost("ajax/job_roles/save.php", p, "Aggiornato!", "Impossibile aggiornare la mansione.");
            });
            $(document).on("click", ".delete-job-role", function() {
                const id = $(this).data("id");
                const name = $(this).data("name");
                const cnt = parseInt($(this).data("count")) || 0;
                if (cnt > 0) {
                    Swal.fire({
                        icon: "warning",
                        title: "Impossibile cancellare",
                        text: "La mansione \"" + name + "\" è assegnata a " + cnt + " dipendente/i. Rimuovi prima l'associazione."
                    });
                    return;
                }
                Swal.fire({
                    title: "Confermi la cancellazione?",
                    text: name ? ("Mansione: " + name) : "La mansione verrà cancellata.",
                    icon: "warning",
                    showCancelButton: true,
                    confirmButtonColor: "#d33",
                    cancelButtonColor: "#6c757d",
                    confirmButtonText: "Sì, cancella",
                    cancelButtonText: "Annulla"
                }).then((result) => {
                    if (!result.isConfirmed) return;
                    const p = new URLSearchParams();
                    p.append('id', id);
                    ajaxPost("ajax/job_roles/delete.php", p, "Cancellato!", "Impossibile cancellare la mansione.");
                });
            });
        });
    </script>
 </body>
 </html>
@@ -42,7 +42,6 @@ $params = $stmtParams->fetchAll(PDO::FETCH_ASSOC);
    <!-- jQuery / Bootstrap / SweetAlert -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -11,7 +11,6 @@
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -118,7 +117,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -261,7 +261,7 @@ function h($v)
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -874,7 +874,7 @@ $isEdit = ($worksheet_id > 0);
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -168,7 +168,7 @@ $rows_special = array_filter($rows, function ($r) {
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -551,7 +551,7 @@ function revisionLabel($rev)
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -11,7 +11,6 @@
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -138,7 +137,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -231,7 +231,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -11,7 +11,6 @@
    <!-- jQuery + Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -133,7 +132,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -13,7 +13,6 @@
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <!-- Bootstrap (se già incluso puoi rimuoverlo) -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <!-- SweetAlert2 -->
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
@@ -13,7 +13,6 @@
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <!-- Bootstrap -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <!-- DataTables -->
    <link rel="stylesheet" href="https://cdn.datatables.net/1.13.6/css/dataTables.bootstrap5.min.css">
@@ -298,17 +298,66 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
        <div class="page-wrapper">
            <div class="page-content">
-                <?php
+                <?php $pdo = DBHandlerSelect::getInstance()->getConnection(); ?>
-                $pdo = DBHandlerSelect::getInstance()->getConnection();
+                <style>
-                include(__DIR__ . '/scadenzario/include/my_deadlines_widget.php');
+                    .my-deadlines-widgets {
-                ?>
+                        display: flex;
                        flex-wrap: wrap;
                        gap: 0.75rem;
                        margin-bottom: 1rem;
                        width: 100%;
                    }
                    .my-deadlines-widgets:empty { display: none; }
                    /* Each widget wraps itself in .my-deadlines-widgets; collapse the nested
                       wrapper so all cards flow into the outer flex (single row). */
                    .my-deadlines-widgets .my-deadlines-widgets {
                        display: contents;
                    }
                    .my-deadlines-widgets .mdw {
                        flex: 1 1 0;
                        min-width: 0;
                        display: flex; align-items: center; gap: 0.75rem;
                        padding: 0.8rem 0.9rem;
                        border-radius: 0.6rem;
                        text-decoration: none;
                        color: #fff;
                        box-shadow: 0 2px 6px rgba(0,0,0,0.08);
                        transition: transform 0.15s, box-shadow 0.15s;
                    }
                    @media (max-width: 991.98px) {
                        .my-deadlines-widgets .mdw { flex: 1 1 calc(50% - 0.375rem); }
                    }
                    @media (max-width: 575.98px) {
                        .my-deadlines-widgets .mdw { flex: 1 1 100%; }
                    }
                    .my-deadlines-widgets .mdw:hover { transform: translateY(-1px); box-shadow: 0 4px 12px rgba(0,0,0,0.15); color: #fff; }
                    .my-deadlines-widgets .mdw-red    { background: linear-gradient(135deg, #dc3545 0%, #b02a37 100%); }
                    .my-deadlines-widgets .mdw-orange { background: linear-gradient(135deg, #e8930c 0%, #c77a00 100%); }
                    .my-deadlines-widgets .mdw-gray   { background: linear-gradient(135deg, #6b7280 0%, #4b5563 100%); }
                    .my-deadlines-widgets .mdw-icon {
                        width: 38px; height: 38px; border-radius: 50%;
                        display: flex; align-items: center; justify-content: center;
                        background: rgba(255,255,255,0.22); font-size: 1.05rem; flex-shrink: 0;
                    }
                    .my-deadlines-widgets .mdw-body { flex: 1; line-height: 1.2; min-width: 0; }
                    .my-deadlines-widgets .mdw-count { font-size: 1.5rem; font-weight: 700; }
                    .my-deadlines-widgets .mdw-label {
                        font-size: 0.78rem; opacity: 0.95;
                        overflow: hidden; text-overflow: ellipsis; white-space: nowrap;
                    }
                    .my-deadlines-widgets .mdw-arrow { opacity: 0.7; font-size: 0.85rem; flex-shrink: 0; }
                </style>
                <div class="my-deadlines-widgets">
                    <?php include(__DIR__ . '/scadenzario/include/my_deadlines_widget.php'); ?>
                    <?php include(__DIR__ . '/include/training_widget.php'); ?>
                </div>
                <h3 class="dashboard-title">Dashboard Produzione</h3>
@@ -1114,7 +1114,7 @@ if (!empty($_GET['ajax'])) {
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -80,7 +80,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -363,7 +363,7 @@ if ($_SERVER['REQUEST_METHOD'] === 'POST' && !empty($_POST['action'])) {
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php');
        include('include/topbar.php'); ?>
        <div class="page-wrapper">
@@ -43,49 +43,64 @@ if (!$_emp || ($_overdue === 0 && $_approaching === 0)) {
 }
 ?>
 <style>
-    .my-deadlines-widgets { display: flex; gap: 0.75rem; margin-bottom: 1rem; flex-wrap: wrap; }
+    .my-deadlines-widgets {
        display: flex; flex-wrap: wrap; gap: 0.75rem;
        margin-bottom: 1rem; width: 100%;
    }
    .my-deadlines-widgets:empty { display: none; }
    /* When two widget containers are nested inside an outer .my-deadlines-widgets
       (e.g. on the production dashboard), let their children flow into the outer flex. */
    .my-deadlines-widgets .my-deadlines-widgets {
        display: contents;
    }
    .my-deadlines-widgets .mdw {
-        flex: 1 1 260px;
+        flex: 1 1 0; min-width: 0;
-        display: flex; align-items: center; gap: 0.9rem;
+        display: flex; align-items: center; gap: 0.75rem;
-        padding: 0.85rem 1rem;
+        padding: 0.8rem 0.9rem; border-radius: 0.6rem;
-        border-radius: 0.6rem;
+        text-decoration: none; color: #fff;
        text-decoration: none;
        color: #fff;
        box-shadow: 0 2px 6px rgba(0,0,0,0.08);
        transition: transform 0.15s, box-shadow 0.15s;
    }
    .my-deadlines-widgets .mdw:hover { transform: translateY(-1px); box-shadow: 0 4px 12px rgba(0,0,0,0.15); color: #fff; }
    .my-deadlines-widgets .mdw-red    { background: linear-gradient(135deg, #dc3545 0%, #b02a37 100%); }
    .my-deadlines-widgets .mdw-orange { background: linear-gradient(135deg, #e8930c 0%, #c77a00 100%); }
    .my-deadlines-widgets .mdw-gray   { background: linear-gradient(135deg, #6b7280 0%, #4b5563 100%); }
    .my-deadlines-widgets .mdw-icon {
-        width: 42px; height: 42px; border-radius: 50%;
+        width: 38px; height: 38px; border-radius: 50%;
        display: flex; align-items: center; justify-content: center;
-        background: rgba(255,255,255,0.22); font-size: 1.2rem; flex-shrink: 0;
+        background: rgba(255,255,255,0.22); font-size: 1.05rem; flex-shrink: 0;
    }
    .my-deadlines-widgets .mdw-body { flex: 1; line-height: 1.2; min-width: 0; }
    .my-deadlines-widgets .mdw-count { font-size: 1.5rem; font-weight: 700; }
    .my-deadlines-widgets .mdw-label { font-size: 0.78rem; opacity: 0.95;
        overflow: hidden; text-overflow: ellipsis; white-space: nowrap; }
    .my-deadlines-widgets .mdw-arrow { opacity: 0.7; font-size: 0.85rem; flex-shrink: 0; }
    @media (max-width: 991.98px) {
        .my-deadlines-widgets .mdw { flex: 1 1 calc(50% - 0.375rem); }
    }
    @media (max-width: 575.98px) {
        .my-deadlines-widgets .mdw { flex: 1 1 100%; }
    }
    .my-deadlines-widgets .mdw-body { flex: 1; line-height: 1.2; }
    .my-deadlines-widgets .mdw-count { font-size: 1.6rem; font-weight: 700; }
    .my-deadlines-widgets .mdw-label { font-size: 0.8rem; opacity: 0.95; }
    .my-deadlines-widgets .mdw-arrow { opacity: 0.7; font-size: 0.9rem; }
 </style>
 <div class="my-deadlines-widgets">
-    <?php if ($_overdue > 0): ?>
+<?php if ($_overdue > 0): ?>
-    <a class="mdw mdw-red" href="scadenzario/index.php?filter_my=1&filter_status=scaduta">
+<a class="mdw mdw-red" href="scadenzario/index.php?filter_my=1&filter_status=scaduta">
-        <span class="mdw-icon"><i class="fa-solid fa-triangle-exclamation"></i></span>
+    <span class="mdw-icon"><i class="fa-solid fa-triangle-exclamation"></i></span>
-        <span class="mdw-body">
+    <span class="mdw-body">
-            <span class="mdw-count"><?= $_overdue ?></span>
+        <span class="mdw-count"><?= $_overdue ?></span>
-            <span class="mdw-label d-block">Scadenz<?= $_overdue === 1 ? 'a' : 'e' ?> scadut<?= $_overdue === 1 ? 'a' : 'e' ?> — <?= $_dept !== '' ? htmlspecialchars($_dept, ENT_QUOTES, 'UTF-8') : 'personali' ?></span>
+        <span class="mdw-label d-block">Scadenz<?= $_overdue === 1 ? 'a' : 'e' ?> scadut<?= $_overdue === 1 ? 'a' : 'e' ?> — <?= $_dept !== '' ? htmlspecialchars($_dept, ENT_QUOTES, 'UTF-8') : 'personali' ?></span>
-        </span>
+    </span>
-        <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
+    <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
-    </a>
+</a>
-    <?php endif; ?>
+<?php endif; ?>
-    <?php if ($_approaching > 0): ?>
+<?php if ($_approaching > 0): ?>
-    <a class="mdw mdw-orange" href="scadenzario/index.php?filter_my=1&filter_status=in-scadenza">
+<a class="mdw mdw-orange" href="scadenzario/index.php?filter_my=1&filter_status=in-scadenza">
-        <span class="mdw-icon"><i class="fa-solid fa-clock"></i></span>
+    <span class="mdw-icon"><i class="fa-solid fa-clock"></i></span>
-        <span class="mdw-body">
+    <span class="mdw-body">
-            <span class="mdw-count"><?= $_approaching ?></span>
+        <span class="mdw-count"><?= $_approaching ?></span>
-            <span class="mdw-label d-block">In scadenza a breve — <?= $_dept !== '' ? htmlspecialchars($_dept, ENT_QUOTES, 'UTF-8') : 'personali' ?></span>
+        <span class="mdw-label d-block">In scadenza a breve — <?= $_dept !== '' ? htmlspecialchars($_dept, ENT_QUOTES, 'UTF-8') : 'personali' ?></span>
-        </span>
+    </span>
-        <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
+    <span class="mdw-arrow"><i class="fa-solid fa-arrow-right"></i></span>
-    </a>
+</a>
-    <?php endif; ?>
+<?php endif; ?>
 </div>
@@ -208,7 +208,7 @@ while ($r = $stmt->fetch(PDO::FETCH_ASSOC)) {
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -130,7 +130,6 @@ $tools = $pdo->query("
    <title>Gestione Skills</title>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <link rel="stylesheet" href="https://cdn.datatables.net/1.13.6/css/dataTables.bootstrap5.min.css">
@@ -177,7 +176,7 @@ $tools = $pdo->query("
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -11,7 +11,6 @@
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -119,7 +118,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -13,7 +13,6 @@
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <!-- Bootstrap (se già incluso puoi rimuoverlo) -->
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <!-- SweetAlert2 -->
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
@@ -0,0 +1,530 @@
 <?php
 include('include/headscript.php');
 $db  = DBHandlerSelect::getInstance();
 $pdo = $db->getConnection();
 /* ==========================================
   PAGE DATA
   ========================================== */
 $sql = "
    SELECT tt.*,
           (SELECT COUNT(*) FROM employee_trainings et WHERE et.training_topic_id = tt.id) AS trainings_count
    FROM training_topics tt
    ORDER BY tt.sort_order ASC, tt.name ASC
 ";
 $topics = $pdo->query($sql)->fetchAll(PDO::FETCH_ASSOC);
 ?>
 <!doctype html>
 <html lang="it">
 <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
    <?php include('cssinclude.php'); ?>
    <title>Gestione Corsi di Formazione - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <link rel="stylesheet" href="https://cdn.datatables.net/1.13.6/css/dataTables.bootstrap5.min.css">
    <script src="https://cdn.datatables.net/1.13.6/js/jquery.dataTables.min.js"></script>
    <script src="https://cdn.datatables.net/1.13.6/js/dataTables.bootstrap5.min.js"></script>
    <style>
        body { font-size: 1.05rem; background: #f8fafc; }
        .card { border-radius: 16px; box-shadow: 0 4px 12px rgba(0, 0, 0, 0.08); }
        .back-dashboard {
            background-color: #cfe3ff !important; color: #1f2d3d !important;
            border: 1px solid #bcd4f4 !important; border-radius: 10px;
            font-weight: 600; padding: 10px 18px;
            box-shadow: 0 3px 8px rgba(0, 0, 0, 0.1);
            transition: all 0.2s ease-in-out;
        }
        .back-dashboard:hover { background-color: #b9d3ff !important; transform: translateY(-2px); }
        .btn-add { background-color: #0d6efd; color: #fff; border-radius: 8px; padding: 10px 20px; font-weight: 500; }
        .btn-add:hover { background-color: #0b5ed7; transform: scale(1.02); }
        .table thead { background-color: #cfe3ff; color: #1f2d3d; }
        .modal-content { border-radius: 16px; }
        #tabellaTopics thead th { text-align: center; vertical-align: middle; }
        .badge-status { padding: 0.25rem 0.6rem; border-radius: 999px; font-size: 0.8rem; font-weight: 600; }
        .badge-status.active { background-color: #d1fae5; color: #065f46; }
        .badge-status.inactive { background-color: #e5e7eb; color: #374151; }
        .description-cell {
            max-width: 280px; white-space: nowrap; overflow: hidden;
            text-overflow: ellipsis; text-align: left;
        }
        .num-pill {
            display: inline-block; padding: 2px 10px; border-radius: 999px;
            background: #eef2ff; color: #3730a3; font-weight: 600; font-size: 0.85rem;
        }
        @media (max-width: 767.98px) {
            .card-header { flex-direction: column; align-items: flex-start !important; gap: .5rem; }
            .back-dashboard { width: 100%; }
            .btn-add { width: 100%; }
        }
        .tt-card {
            border: 1px solid #e2e8f0;
            border-radius: 14px;
            padding: 14px 16px;
            margin-bottom: 12px;
            background: #fff;
            box-shadow: 0 2px 6px rgba(0, 0, 0, 0.04);
        }
        .tt-card-title {
            font-size: 1.1rem;
            font-weight: 600;
            color: #1f2937;
            margin: 0 0 4px 0;
            word-break: break-word;
        }
        .tt-card-desc {
            color: #475569;
            font-size: 0.95rem;
            margin: 0 0 10px 0;
            word-break: break-word;
        }
        .tt-card-meta {
            display: flex;
            flex-wrap: wrap;
            gap: 8px 14px;
            font-size: 0.85rem;
            color: #64748b;
            margin-bottom: 12px;
        }
        .tt-card-meta b { color: #1f2937; font-weight: 600; }
        .tt-card-actions {
            display: flex;
            gap: 8px;
        }
        .tt-card-actions .btn { flex: 1; }
        .tt-empty {
            text-align: center;
            color: #94a3b8;
            padding: 24px 0;
        }
    </style>
 </head>
 <body>
    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
        <div class="page-wrapper">
            <div class="page-content">
                <div class="card p-3">
                    <div class="card-header d-flex justify-content-between align-items-center flex-wrap gap-2">
                        <h5 class="mb-0">Gestione Corsi di Formazione</h5>
                        <button type="button" class="btn back-dashboard" onclick="location.href='production_dashboard.php'">
                            ↩️ Torna alla Dashboard
                        </button>
                    </div>
                    <div class="card-body">
                        <div class="d-flex justify-content-between align-items-center mb-3 flex-wrap gap-2">
                            <h6 class="fw-semibold mb-0">Elenco Corsi / Training Topics</h6>
                            <button class="btn btn-add" data-bs-toggle="modal" data-bs-target="#addTopicModal">
                                ➕ Aggiungi Corso
                            </button>
                        </div>
                        <!-- DESKTOP / TABLET ≥768px: TABLE -->
                        <div class="table-responsive d-none d-md-block">
                            <table id="tabellaTopics" class="table table-striped align-middle text-center" style="width:100%;">
                                <thead>
                                    <tr>
                                        <th>ID</th>
                                        <th>Nome</th>
                                        <th>Descrizione</th>
                                        <th>Frequenza<br>(mesi)</th>
                                        <th>Promemoria<br>(giorni)</th>
                                        <th>Ordine</th>
                                        <th>Stato</th>
                                        <th>Formazioni</th>
                                        <th>Azioni</th>
                                    </tr>
                                </thead>
                                <tbody>
                                    <?php foreach ($topics as $row): ?>
                                        <?php
                                        $id          = (int)$row['id'];
                                        $name        = $row['name'] ?? '';
                                        $description = $row['description'] ?? '';
                                        $freq        = $row['default_frequency_months'];
                                        $rem         = (int)($row['default_reminder_days'] ?? 30);
                                        $sortOrder   = (int)($row['sort_order'] ?? 999);
                                        $isActive    = (int)($row['is_active'] ?? 1);
                                        $isMandatory = (int)($row['is_mandatory'] ?? 0);
                                        $cnt         = (int)($row['trainings_count'] ?? 0);
                                        $statusClass = $isActive === 1 ? 'active' : 'inactive';
                                        $statusLabel = $isActive === 1 ? 'Attivo' : 'Inattivo';
                                        ?>
                                        <tr>
                                            <td><?= $id ?></td>
                                            <td class="fw-semibold text-start">
                                                <?= htmlspecialchars($name) ?>
                                                <?php if ($isMandatory === 1): ?>
                                                    <span class="badge bg-warning text-dark ms-1" title="Obbligatorio per tutti">★ Obbl.</span>
                                                <?php endif; ?>
                                            </td>
                                            <td class="description-cell" title="<?= htmlspecialchars($description, ENT_QUOTES) ?>">
                                                <?= $description !== '' ? htmlspecialchars($description) : '-' ?>
                                            </td>
                                            <td>
                                                <?php if ($freq === null || $freq === ''): ?>
                                                    <span class="text-muted">una tantum</span>
                                                <?php else: ?>
                                                    <span class="num-pill"><?= (int)$freq ?></span>
                                                <?php endif; ?>
                                            </td>
                                            <td><span class="num-pill"><?= $rem ?></span></td>
                                            <td><?= $sortOrder ?></td>
                                            <td><span class="badge-status <?= $statusClass ?>"><?= $statusLabel ?></span></td>
                                            <td><?= $cnt ?></td>
                                            <td>
                                                <button class="btn btn-sm btn-outline-secondary edit-topic"
                                                    data-id="<?= $id ?>"
                                                    data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                                    data-description="<?= htmlspecialchars($description, ENT_QUOTES) ?>"
                                                    data-freq="<?= $freq === null ? '' : (int)$freq ?>"
                                                    data-rem="<?= $rem ?>"
                                                    data-sort_order="<?= $sortOrder ?>"
                                                    data-is_active="<?= $isActive ?>"
                                                    data-is_mandatory="<?= $isMandatory ?>">
                                                    ✏️ Modifica
                                                </button>
                                                <button class="btn btn-sm btn-outline-danger delete-topic"
                                                    data-id="<?= $id ?>"
                                                    data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                                    data-count="<?= $cnt ?>">
                                                    🗑️ Cancella
                                                </button>
                                            </td>
                                        </tr>
                                    <?php endforeach; ?>
                                </tbody>
                            </table>
                        </div>
                        <!-- MOBILE <768px: CARDS -->
                        <div class="d-block d-md-none">
                            <?php if (empty($topics)): ?>
                                <div class="tt-empty">Nessun corso presente</div>
                            <?php endif; ?>
                            <?php foreach ($topics as $row): ?>
                                <?php
                                $id          = (int)$row['id'];
                                $name        = $row['name'] ?? '';
                                $description = $row['description'] ?? '';
                                $freq        = $row['default_frequency_months'];
                                $rem         = (int)($row['default_reminder_days'] ?? 30);
                                $sortOrder   = (int)($row['sort_order'] ?? 999);
                                $isActive    = (int)($row['is_active'] ?? 1);
                                $isMandatory = (int)($row['is_mandatory'] ?? 0);
                                $cnt         = (int)($row['trainings_count'] ?? 0);
                                $statusClass = $isActive === 1 ? 'active' : 'inactive';
                                $statusLabel = $isActive === 1 ? 'Attivo' : 'Inattivo';
                                $freqLabel   = ($freq === null || $freq === '') ? 'una tantum' : ((int)$freq . ' mesi');
                                ?>
                                <div class="tt-card">
                                    <h6 class="tt-card-title">
                                        <?= htmlspecialchars($name) ?>
                                        <?php if ($isMandatory === 1): ?>
                                            <span class="badge bg-warning text-dark ms-1" title="Obbligatorio per tutti">★ Obbl.</span>
                                        <?php endif; ?>
                                    </h6>
                                    <?php if ($description !== ''): ?>
                                        <p class="tt-card-desc"><?= htmlspecialchars($description) ?></p>
                                    <?php endif; ?>
                                    <div class="tt-card-meta">
                                        <span><span class="badge-status <?= $statusClass ?>"><?= $statusLabel ?></span></span>
                                        <span><b>Frequenza:</b> <?= htmlspecialchars($freqLabel) ?></span>
                                        <span><b>Promemoria:</b> <?= $rem ?> gg</span>
                                        <span><b>Formazioni:</b> <?= $cnt ?></span>
                                        <span><b>Ordine:</b> <?= $sortOrder ?></span>
                                    </div>
                                    <div class="tt-card-actions">
                                        <button class="btn btn-sm btn-outline-secondary edit-topic"
                                            data-id="<?= $id ?>"
                                            data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                            data-description="<?= htmlspecialchars($description, ENT_QUOTES) ?>"
                                            data-freq="<?= $freq === null ? '' : (int)$freq ?>"
                                            data-rem="<?= $rem ?>"
                                            data-sort_order="<?= $sortOrder ?>"
                                            data-is_active="<?= $isActive ?>"
                                            data-is_mandatory="<?= $isMandatory ?>">
                                            ✏️ Modifica
                                        </button>
                                        <button class="btn btn-sm btn-outline-danger delete-topic"
                                            data-id="<?= $id ?>"
                                            data-name="<?= htmlspecialchars($name, ENT_QUOTES) ?>"
                                            data-count="<?= $cnt ?>">
                                            🗑️ Cancella
                                        </button>
                                    </div>
                                </div>
                            <?php endforeach; ?>
                        </div>
                    </div>
                </div>
            </div>
        </div>
        <?php include('include/footer.php'); ?>
    </div>
    <!-- ADD -->
    <div class="modal fade" id="addTopicModal" tabindex="-1">
        <div class="modal-dialog modal-dialog-centered modal-lg modal-fullscreen-sm-down">
            <div class="modal-content">
                <div class="modal-header" style="background-color:#cfe3ff;">
                    <h5 class="modal-title">Aggiungi Corso</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
                </div>
                <div class="modal-body">
                    <form id="addTopicForm">
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Nome</label>
                            <input type="text" class="form-control" id="addName" name="name" placeholder="es. Sicurezza antincendio" required>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Descrizione</label>
                            <textarea class="form-control" id="addDescription" name="description" rows="3" placeholder="Opzionale"></textarea>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Frequenza aggiornamento</label>
                                <select class="form-select" id="addFreq" name="default_frequency_months">
                                    <option value="" selected>Una tantum (nessun aggiornamento)</option>
                                    <option value="3">3 mesi</option>
                                    <option value="6">6 mesi</option>
                                    <option value="12">12 mesi (1 anno)</option>
                                    <option value="18">18 mesi</option>
                                    <option value="24">24 mesi (2 anni)</option>
                                    <option value="36">36 mesi (3 anni)</option>
                                    <option value="48">48 mesi (4 anni)</option>
                                    <option value="60">60 mesi (5 anni)</option>
                                </select>
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Promemoria (giorni prima della scadenza)</label>
                                <input type="number" class="form-control" id="addRem" name="default_reminder_days" value="30" min="0">
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Ordine</label>
                                <input type="number" class="form-control" id="addSortOrder" name="sort_order" value="999" min="0">
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="addIsActive" name="is_active">
                                    <option value="1" selected>Attivo</option>
                                    <option value="0">Inattivo</option>
                                </select>
                            </div>
                        </div>
                        <div class="form-check mb-3">
                            <input class="form-check-input" type="checkbox" id="addIsMandatory" value="1">
                            <label class="form-check-label fw-semibold" for="addIsMandatory">
                                Obbligatorio per tutti i dipendenti
                            </label>
                            <div class="small text-muted">
                                Se attivo, i dipendenti senza registrazione di questo corso compaiono come "Non presente" nello storico.
                            </div>
                        </div>
                        <div class="text-center">
                            <button type="submit" class="btn btn-add">💾 Salva</button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
    <!-- EDIT -->
    <div class="modal fade" id="editTopicModal" tabindex="-1">
        <div class="modal-dialog modal-dialog-centered modal-lg modal-fullscreen-sm-down">
            <div class="modal-content">
                <div class="modal-header" style="background-color:#cfe3ff;">
                    <h5 class="modal-title">Modifica Corso</h5>
                    <button type="button" class="btn-close" data-bs-dismiss="modal"></button>
                </div>
                <div class="modal-body">
                    <form id="editTopicForm">
                        <input type="hidden" id="editTopicId">
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Nome</label>
                            <input type="text" class="form-control" id="editName" name="name" required>
                        </div>
                        <div class="mb-3">
                            <label class="form-label fw-semibold">Descrizione</label>
                            <textarea class="form-control" id="editDescription" name="description" rows="3"></textarea>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Frequenza aggiornamento</label>
                                <select class="form-select" id="editFreq" name="default_frequency_months">
                                    <option value="">Una tantum (nessun aggiornamento)</option>
                                    <option value="3">3 mesi</option>
                                    <option value="6">6 mesi</option>
                                    <option value="12">12 mesi (1 anno)</option>
                                    <option value="18">18 mesi</option>
                                    <option value="24">24 mesi (2 anni)</option>
                                    <option value="36">36 mesi (3 anni)</option>
                                    <option value="48">48 mesi (4 anni)</option>
                                    <option value="60">60 mesi (5 anni)</option>
                                </select>
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Promemoria (giorni prima della scadenza)</label>
                                <input type="number" class="form-control" id="editRem" name="default_reminder_days" min="0">
                            </div>
                        </div>
                        <div class="row">
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Ordine</label>
                                <input type="number" class="form-control" id="editSortOrder" name="sort_order" min="0">
                            </div>
                            <div class="col-12 col-md-6 mb-3">
                                <label class="form-label fw-semibold">Stato</label>
                                <select class="form-select" id="editIsActive" name="is_active">
                                    <option value="1">Attivo</option>
                                    <option value="0">Inattivo</option>
                                </select>
                            </div>
                        </div>
                        <div class="form-check mb-3">
                            <input class="form-check-input" type="checkbox" id="editIsMandatory" value="1">
                            <label class="form-check-label fw-semibold" for="editIsMandatory">
                                Obbligatorio per tutti i dipendenti
                            </label>
                            <div class="small text-muted">
                                Se attivo, i dipendenti senza registrazione di questo corso compaiono come "Non presente" nello storico.
                            </div>
                        </div>
                        <div class="text-center">
                            <button type="submit" class="btn btn-add">💾 Salva Modifiche</button>
                        </div>
                    </form>
                </div>
            </div>
        </div>
    </div>
    <?php include('jsinclude.php'); ?>
    <script>
        $(document).ready(function() {
            $('#tabellaTopics').DataTable({
                order: [[5, 'asc'], [1, 'asc']],
                pageLength: 25,
                language: {
                    url: 'https://cdn.datatables.net/plug-ins/1.13.6/i18n/it-IT.json',
                    emptyTable: 'Nessun corso presente'
                }
            });
            function ajaxPost(url, payload, successTitle, errorFallback) {
                return fetch(url, {
                    method: "POST",
                    headers: { "Content-Type": "application/x-www-form-urlencoded" },
                    body: payload.toString()
                })
                .then(r => r.json())
                .then(data => {
                    if (data.success) {
                        Swal.fire({ icon: "success", title: successTitle, confirmButtonColor: "#3085d6" })
                            .then(() => location.reload());
                    } else {
                        Swal.fire({ icon: "error", title: "Errore", text: data.message || errorFallback });
                    }
                })
                .catch(err => {
                    Swal.fire({ icon: "error", title: "Errore", text: "Errore di comunicazione." });
                    console.error(err);
                });
            }
            $("#addTopicForm").on("submit", function(e) {
                e.preventDefault();
                const p = new URLSearchParams();
                p.append('name', $("#addName").val().trim());
                p.append('description', $("#addDescription").val().trim());
                p.append('default_frequency_months', $("#addFreq").val());
                p.append('default_reminder_days', $("#addRem").val());
                p.append('sort_order', $("#addSortOrder").val());
                p.append('is_active', $("#addIsActive").val());
                p.append('is_mandatory', $("#addIsMandatory").is(':checked') ? '1' : '0');
                ajaxPost("ajax/training_topics/save.php", p, "Salvato!", "Impossibile salvare il corso.");
            });
            $(document).on("click", ".edit-topic", function() {
                const b = $(this);
                const rawFreq = b.data("freq");
                const freqStr = (rawFreq === '' || rawFreq === null || rawFreq === undefined) ? '' : String(rawFreq);
                if (freqStr !== '' && $("#editFreq option[value='" + freqStr + "']").length === 0) {
                    $("#editFreq").append('<option value="' + freqStr + '">' + freqStr + ' mesi</option>');
                }
                $("#editTopicId").val(b.data("id"));
                $("#editName").val(b.data("name"));
                $("#editDescription").val(b.data("description"));
                $("#editFreq").val(freqStr);
                $("#editRem").val(b.data("rem"));
                $("#editSortOrder").val(b.data("sort_order"));
                $("#editIsActive").val(String(b.data("is_active")));
                $("#editIsMandatory").prop('checked', String(b.data("is_mandatory")) === '1');
                $("#editTopicModal").modal("show");
            });
            $("#editTopicForm").on("submit", function(e) {
                e.preventDefault();
                const p = new URLSearchParams();
                p.append('id', $("#editTopicId").val());
                p.append('name', $("#editName").val().trim());
                p.append('description', $("#editDescription").val().trim());
                p.append('default_frequency_months', $("#editFreq").val());
                p.append('default_reminder_days', $("#editRem").val());
                p.append('sort_order', $("#editSortOrder").val());
                p.append('is_active', $("#editIsActive").val());
                p.append('is_mandatory', $("#editIsMandatory").is(':checked') ? '1' : '0');
                ajaxPost("ajax/training_topics/save.php", p, "Aggiornato!", "Impossibile aggiornare il corso.");
            });
            $(document).on("click", ".delete-topic", function() {
                const id = $(this).data("id");
                const name = $(this).data("name");
                const cnt = parseInt($(this).data("count")) || 0;
                if (cnt > 0) {
                    Swal.fire({
                        icon: "warning",
                        title: "Impossibile cancellare",
                        text: "Il corso \"" + name + "\" ha " + cnt + " registrazione/i di formazione. Cancella prima le registrazioni."
                    });
                    return;
                }
                Swal.fire({
                    title: "Confermi la cancellazione?",
                    text: name ? ("Corso: " + name) : "Il corso verrà cancellato.",
                    icon: "warning",
                    showCancelButton: true,
                    confirmButtonColor: "#d33",
                    cancelButtonColor: "#6c757d",
                    confirmButtonText: "Sì, cancella",
                    cancelButtonText: "Annulla"
                }).then((result) => {
                    if (!result.isConfirmed) return;
                    const p = new URLSearchParams();
                    p.append('id', id);
                    ajaxPost("ajax/training_topics/delete.php", p, "Cancellato!", "Impossibile cancellare il corso.");
                });
            });
        });
    </script>
 </body>
 </html>
@@ -0,0 +1,430 @@
 <?php
 include('include/headscript.php');
 $pdo = DBHandlerSelect::getInstance()->getConnection();
 /* ==========================================
   PERMISSIONS
   ========================================== */
 $isHrManager = Auth::user()->hasRole('Admin')
    || Auth::user()->hasRole('Superuser')
    || Auth::user()->hasRole('employee-hr')
    || Auth::user()->hasRole('manager');
 if (!$isHrManager) {
    header('Location: employee-profile.php');
    exit;
 }
 /* ==========================================
   FILTERS (from GET)
   ========================================== */
 $fEmployeeId    = isset($_GET['employee_id'])  && $_GET['employee_id']  !== '' ? (int)$_GET['employee_id']  : 0;
 $fTopicId       = isset($_GET['topic_id'])     && $_GET['topic_id']     !== '' ? (int)$_GET['topic_id']     : 0;
 $fStatus        = isset($_GET['status'])       ? trim($_GET['status'])       : '';
 $fType          = isset($_GET['type'])         ? trim($_GET['type'])         : '';
 $fDepartmentId  = isset($_GET['department_id'])&& $_GET['department_id']!== '' ? (int)$_GET['department_id']: 0;
 /* ==========================================
   LOAD DATA
   ========================================== */
 $where = [];
 $params = [];
 if ($fEmployeeId > 0)   { $where[] = 'et.employee_id = :eid';        $params['eid']  = $fEmployeeId; }
 if ($fTopicId > 0)      { $where[] = 'et.training_topic_id = :tid';  $params['tid']  = $fTopicId; }
 if ($fType !== '' && in_array($fType, ['initial', 'refresher'], true)) {
    $where[] = 'et.training_type = :ty';
    $params['ty'] = $fType;
 }
 if ($fDepartmentId > 0) { $where[] = 'e.department_id = :did';       $params['did']  = $fDepartmentId; }
 $whereSql = $where ? ('WHERE ' . implode(' AND ', $where)) : '';
 $stmt = $pdo->prepare("
    SELECT et.*,
           tt.name AS topic_name,
           tt.default_reminder_days AS topic_default_rem,
           e.first_name, e.last_name, e.employee_code,
           d.name AS department_name, d.color AS department_color,
           (SELECT COUNT(*) FROM employee_training_attachments a WHERE a.training_id = et.id) AS attachments_count
    FROM employee_trainings et
    JOIN training_topics tt ON tt.id = et.training_topic_id
    JOIN employees e       ON e.id = et.employee_id
    LEFT JOIN departments d ON d.id = e.department_id
    $whereSql
    ORDER BY et.next_due_date IS NULL, et.next_due_date ASC, e.last_name, e.first_name
 ");
 $stmt->execute($params);
 $rows = $stmt->fetchAll(PDO::FETCH_ASSOC);
 /* Filter by computed status */
 function trainingStatus(?string $nextDue, ?int $reminderDays, ?int $topicDefaultRem): array {
    if (!$nextDue) {
        return ['code' => 'compliant', 'label' => 'Conforme', 'class' => 'success'];
    }
    $rem = $reminderDays !== null ? $reminderDays : ($topicDefaultRem !== null ? $topicDefaultRem : 30);
    $today = new DateTime('today');
    $due   = DateTime::createFromFormat('Y-m-d', $nextDue);
    if (!$due) return ['code' => 'compliant', 'label' => 'Conforme', 'class' => 'success'];
    $daysLeft = (int)$today->diff($due)->format('%r%a');
    if ($daysLeft < 0)              return ['code' => 'expired',     'label' => 'Scaduto',          'class' => 'danger',  'days' => $daysLeft];
    if ($daysLeft <= $rem)          return ['code' => 'due_soon',    'label' => 'Da aggiornare',    'class' => 'warning', 'days' => $daysLeft];
    return                                  ['code' => 'compliant',  'label' => 'Conforme',         'class' => 'success', 'days' => $daysLeft];
 }
 $filtered = [];
 $counters = ['compliant' => 0, 'due_soon' => 0, 'expired' => 0, 'not_present' => 0, 'all' => 0];
 foreach ($rows as $r) {
    $s = trainingStatus($r['next_due_date'] ?: null,
        $r['reminder_days'] !== null ? (int)$r['reminder_days'] : null,
        $r['topic_default_rem'] !== null ? (int)$r['topic_default_rem'] : null);
    $r['_status'] = $s;
    $counters['all']++;
    $counters[$s['code']] = ($counters[$s['code']] ?? 0) + 1;
    if ($fStatus !== '' && $fStatus !== $s['code']) continue;
    $filtered[] = $r;
 }
 /* ==========================================
   "NOT PRESENT" — mandatory topics without any record for an employee.
   Apply the same filters (employee_id / topic_id / department_id / type=initial).
   ========================================== */
 if ($fType === '' || $fType === 'initial') {
    $missingWhere  = [];
    $missingParams = [];
    if ($fEmployeeId > 0)   { $missingWhere[] = 'e.id = :eid';                $missingParams['eid'] = $fEmployeeId; }
    if ($fTopicId > 0)      { $missingWhere[] = 'tt.id = :tid';               $missingParams['tid'] = $fTopicId; }
    if ($fDepartmentId > 0) { $missingWhere[] = 'e.department_id = :did';     $missingParams['did'] = $fDepartmentId; }
    $missingWhereSql = $missingWhere ? ('AND ' . implode(' AND ', $missingWhere)) : '';
    $missingStmt = $pdo->prepare("
        SELECT e.id AS employee_id, e.first_name, e.last_name, e.employee_code,
               d.name AS department_name, d.color AS department_color,
               tt.id AS topic_id, tt.name AS topic_name
        FROM employees e
        CROSS JOIN training_topics tt
        LEFT JOIN departments d ON d.id = e.department_id
        WHERE tt.is_active = 1 AND tt.is_mandatory = 1
          AND NOT EXISTS (
              SELECT 1 FROM employee_trainings et
              WHERE et.employee_id = e.id AND et.training_topic_id = tt.id
          )
          $missingWhereSql
        ORDER BY e.last_name, e.first_name, tt.name
    ");
    $missingStmt->execute($missingParams);
    $missingRows = $missingStmt->fetchAll(PDO::FETCH_ASSOC);
    foreach ($missingRows as $m) {
        $counters['all']++;
        $counters['not_present']++;
        if ($fStatus !== '' && $fStatus !== 'not_present') continue;
        $filtered[] = [
            'id'                 => null,
            '_virtual'           => true,
            'employee_id'        => $m['employee_id'],
            'first_name'         => $m['first_name'],
            'last_name'          => $m['last_name'],
            'employee_code'      => $m['employee_code'],
            'department_name'    => $m['department_name'],
            'department_color'   => $m['department_color'],
            'training_topic_id'  => $m['topic_id'],
            'topic_name'         => $m['topic_name'],
            'training_type'      => null,
            'completed_date'     => null,
            'next_due_date'      => null,
            'attachments_count'  => 0,
            '_status' => ['code' => 'not_present', 'label' => 'Non presente', 'class' => 'secondary', 'days' => null],
        ];
    }
 }
 /* Dropdown data */
 $employees = $pdo->query("
    SELECT id, first_name, last_name, employee_code
    FROM employees
    ORDER BY last_name, first_name
 ")->fetchAll(PDO::FETCH_ASSOC);
 $topics = $pdo->query("
    SELECT id, name FROM training_topics WHERE is_active = 1 ORDER BY sort_order, name
 ")->fetchAll(PDO::FETCH_ASSOC);
 $departments = $pdo->query("
    SELECT id, name, color FROM departments WHERE is_active = 1 ORDER BY sort_order, name
 ")->fetchAll(PDO::FETCH_ASSOC);
 function fmtDate(?string $d): string {
    if (!$d || $d === '0000-00-00') return '—';
    $ts = strtotime($d);
    return $ts ? date('d/m/Y', $ts) : '—';
 }
 ?>
 <!doctype html>
 <html lang="it">
 <head>
    <meta charset="utf-8">
    <meta name="viewport" content="width=device-width, initial-scale=1">
    <link rel="icon" href="assets/images/favicon-32x32.png" type="image/png" />
    <?php include('cssinclude.php'); ?>
    <title>Storico Formazione - <?= htmlspecialchars($titlewebsite, ENT_QUOTES, 'UTF-8'); ?></title>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <style>
        body { font-size: 1.05rem; background: #f8fafc; }
        .card { border-radius: 16px; box-shadow: 0 4px 12px rgba(0, 0, 0, 0.08); }
        .back-dashboard {
            background-color: #cfe3ff !important; color: #1f2d3d !important;
            border: 1px solid #bcd4f4 !important; border-radius: 10px;
            font-weight: 600; padding: 10px 18px;
        }
        .stat-row { display: grid; grid-template-columns: repeat(5, 1fr); gap: 12px; margin-bottom: 20px; }
        @media (max-width: 991.98px) { .stat-row { grid-template-columns: repeat(3, 1fr); } }
        @media (max-width: 575.98px) { .stat-row { grid-template-columns: repeat(2, 1fr); } }
        .stat-card {
            border-radius: 14px; padding: 14px 16px; text-align: center;
            background: #fff; box-shadow: 0 2px 6px rgba(0,0,0,.05);
            cursor: pointer; transition: transform .15s;
        }
        .stat-card:hover { transform: translateY(-2px); }
        .stat-card.active { outline: 3px solid #0d6efd; }
        .stat-card .stat-num { font-size: 1.8rem; font-weight: 700; line-height: 1; }
        .stat-card .stat-label { font-size: 0.85rem; color: #64748b; margin-top: 4px; }
        .stat-card.all         .stat-num { color: #1f2937; }
        .stat-card.compliant   .stat-num { color: #16a34a; }
        .stat-card.due_soon    .stat-num { color: #d97706; }
        .stat-card.expired     .stat-num { color: #dc2626; }
        .stat-card.not_present .stat-num { color: #6b7280; }
        .pill { display: inline-block; padding: 3px 10px; border-radius: 999px; font-size: 0.85rem; font-weight: 600; }
        .pill-success   { background: #d1fae5; color: #065f46; }
        .pill-warning   { background: #fef3c7; color: #92400e; }
        .pill-danger    { background: #fee2e2; color: #991b1b; }
        .pill-secondary { background: #e5e7eb; color: #374151; }
        .pill-role      { background: #fff; color: #334155; border: 1px solid #cbd5e1; }
        .pill-dept-inline { padding: 2px 8px; }
        .tr-card {
            border: 1px solid #e2e8f0; border-radius: 14px;
            padding: 14px 16px; margin-bottom: 12px;
            background: #fff;
            box-shadow: 0 2px 6px rgba(0, 0, 0, 0.04);
        }
        .tr-card .name a { color: #1f2937; font-weight: 600; text-decoration: none; }
        .tr-card .topic { color: #475569; }
        .tr-card .meta { display: flex; flex-wrap: wrap; gap: 6px 14px; font-size: 0.85rem; color: #64748b; margin-top: 8px; }
        .tr-card .meta b { color: #1f2937; font-weight: 600; }
        @media (max-width: 767.98px) {
            .card-header { flex-direction: column; align-items: flex-start !important; gap: .5rem; }
            .back-dashboard { width: 100%; }
        }
    </style>
 </head>
 <body>
    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
        <div class="page-wrapper">
            <div class="page-content">
                <div class="card p-3">
                    <div class="card-header d-flex justify-content-between align-items-center flex-wrap gap-2">
                        <h5 class="mb-0">📚 Storico Formazione</h5>
                        <button type="button" class="btn back-dashboard" onclick="location.href='production_dashboard.php'">
                            ↩️ Torna alla Dashboard
                        </button>
                    </div>
                    <div class="card-body">
                        <!-- COUNTERS -->
                        <div class="stat-row">
                            <a class="stat-card all <?= $fStatus === '' ? 'active' : '' ?>" href="?<?= http_build_query(array_filter(['employee_id' => $fEmployeeId, 'topic_id' => $fTopicId, 'type' => $fType, 'department_id' => $fDepartmentId])) ?>">
                                <div class="stat-num"><?= (int)$counters['all'] ?></div>
                                <div class="stat-label">Tutte</div>
                            </a>
                            <a class="stat-card compliant <?= $fStatus === 'compliant' ? 'active' : '' ?>" href="?<?= http_build_query(array_filter(['status' => 'compliant', 'employee_id' => $fEmployeeId, 'topic_id' => $fTopicId, 'type' => $fType, 'department_id' => $fDepartmentId])) ?>">
                                <div class="stat-num"><?= (int)($counters['compliant'] ?? 0) ?></div>
                                <div class="stat-label">Conformi</div>
                            </a>
                            <a class="stat-card due_soon <?= $fStatus === 'due_soon' ? 'active' : '' ?>" href="?<?= http_build_query(array_filter(['status' => 'due_soon', 'employee_id' => $fEmployeeId, 'topic_id' => $fTopicId, 'type' => $fType, 'department_id' => $fDepartmentId])) ?>">
                                <div class="stat-num"><?= (int)($counters['due_soon'] ?? 0) ?></div>
                                <div class="stat-label">Da aggiornare</div>
                            </a>
                            <a class="stat-card expired <?= $fStatus === 'expired' ? 'active' : '' ?>" href="?<?= http_build_query(array_filter(['status' => 'expired', 'employee_id' => $fEmployeeId, 'topic_id' => $fTopicId, 'type' => $fType, 'department_id' => $fDepartmentId])) ?>">
                                <div class="stat-num"><?= (int)($counters['expired'] ?? 0) ?></div>
                                <div class="stat-label">Scaduti</div>
                            </a>
                            <a class="stat-card not_present <?= $fStatus === 'not_present' ? 'active' : '' ?>" href="?<?= http_build_query(array_filter(['status' => 'not_present', 'employee_id' => $fEmployeeId, 'topic_id' => $fTopicId, 'department_id' => $fDepartmentId])) ?>">
                                <div class="stat-num"><?= (int)($counters['not_present'] ?? 0) ?></div>
                                <div class="stat-label">Non presenti</div>
                            </a>
                        </div>
                        <!-- FILTERS -->
                        <form method="get" class="row g-2 mb-3" id="filtersForm">
                            <input type="hidden" name="status" value="<?= htmlspecialchars($fStatus, ENT_QUOTES) ?>">
                            <div class="col-12 col-md-6 col-lg-3">
                                <label class="form-label small fw-semibold">Dipendente</label>
                                <select name="employee_id" class="form-select form-select-sm" onchange="this.form.submit()">
                                    <option value="">— Tutti —</option>
                                    <?php foreach ($employees as $e): ?>
                                        <option value="<?= (int)$e['id'] ?>" <?= $fEmployeeId === (int)$e['id'] ? 'selected' : '' ?>>
                                            <?= htmlspecialchars(trim($e['first_name'] . ' ' . $e['last_name'])) ?>
                                            <?php if (!empty($e['employee_code'])): ?>(<?= htmlspecialchars($e['employee_code']) ?>)<?php endif; ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                            <div class="col-12 col-md-6 col-lg-3">
                                <label class="form-label small fw-semibold">Corso</label>
                                <select name="topic_id" class="form-select form-select-sm" onchange="this.form.submit()">
                                    <option value="">— Tutti —</option>
                                    <?php foreach ($topics as $t): ?>
                                        <option value="<?= (int)$t['id'] ?>" <?= $fTopicId === (int)$t['id'] ? 'selected' : '' ?>>
                                            <?= htmlspecialchars($t['name']) ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                            <div class="col-12 col-md-6 col-lg-3">
                                <label class="form-label small fw-semibold">Reparto</label>
                                <select name="department_id" class="form-select form-select-sm" onchange="this.form.submit()">
                                    <option value="">— Tutti —</option>
                                    <?php foreach ($departments as $d): ?>
                                        <option value="<?= (int)$d['id'] ?>" <?= $fDepartmentId === (int)$d['id'] ? 'selected' : '' ?>>
                                            <?= htmlspecialchars($d['name']) ?>
                                        </option>
                                    <?php endforeach; ?>
                                </select>
                            </div>
                            <div class="col-12 col-md-6 col-lg-3">
                                <label class="form-label small fw-semibold">Tipo</label>
                                <select name="type" class="form-select form-select-sm" onchange="this.form.submit()">
                                    <option value="">— Tutti —</option>
                                    <option value="initial"   <?= $fType === 'initial'   ? 'selected' : '' ?>>Iniziale</option>
                                    <option value="refresher" <?= $fType === 'refresher' ? 'selected' : '' ?>>Aggiornamento</option>
                                </select>
                            </div>
                            <?php if ($fEmployeeId || $fTopicId || $fDepartmentId || $fType || $fStatus): ?>
                                <div class="col-12">
                                    <a href="trainings.php" class="btn btn-sm btn-outline-secondary">✖️ Pulisci filtri</a>
                                </div>
                            <?php endif; ?>
                        </form>
                        <?php if (empty($filtered)): ?>
                            <div class="text-center text-muted py-4">
                                Nessuna formazione corrispondente ai filtri.
                            </div>
                        <?php else: ?>
                            <!-- DESKTOP TABLE -->
                            <div class="table-responsive d-none d-md-block">
                                <table class="table table-striped align-middle">
                                    <thead style="background-color:#cfe3ff;">
                                        <tr>
                                            <th>Dipendente</th>
                                            <th>Reparto</th>
                                            <th>Corso</th>
                                            <th>Tipo</th>
                                            <th>Completato</th>
                                            <th>Prossimo agg.</th>
                                            <th>Stato</th>
                                            <th>Giorni</th>
                                        </tr>
                                    </thead>
                                    <tbody>
                                        <?php foreach ($filtered as $r): ?>
                                            <?php
                                            $fullName = trim($r['first_name'] . ' ' . $r['last_name']);
                                            $typeLbl  = $r['training_type'] === 'refresher' ? 'Aggiornamento' : ($r['training_type'] === 'initial' ? 'Iniziale' : '—');
                                            $days     = $r['_status']['days'] ?? null;
                                            ?>
                                            <tr>
                                                <td>
                                                    <a href="employee-profile.php?id=<?= (int)$r['employee_id'] ?>#tab-training" class="fw-semibold text-decoration-none">
                                                        <?= htmlspecialchars($fullName) ?>
                                                    </a>
                                                    <?php if (!empty($r['employee_code'])): ?>
                                                        <div class="small text-muted"><?= htmlspecialchars($r['employee_code']) ?></div>
                                                    <?php endif; ?>
                                                </td>
                                                <td>
                                                    <?php if (!empty($r['department_name'])): ?>
                                                        <span class="pill pill-dept-inline" style="background:<?= htmlspecialchars($r['department_color'] ?? '#e5e7eb', ENT_QUOTES) ?>20; color:<?= htmlspecialchars($r['department_color'] ?? '#374151', ENT_QUOTES) ?>;">
                                                            <?= htmlspecialchars($r['department_name']) ?>
                                                        </span>
                                                    <?php else: ?>—<?php endif; ?>
                                                </td>
                                                <td><?= htmlspecialchars($r['topic_name']) ?></td>
                                                <td><span class="pill pill-role"><?= $typeLbl ?></span></td>
                                                <td><?= fmtDate($r['completed_date']) ?></td>
                                                <td><?= fmtDate($r['next_due_date']) ?></td>
                                                <td><span class="pill pill-<?= $r['_status']['class'] ?>"><?= $r['_status']['label'] ?></span></td>
                                                <td>
                                                    <?php if ($days === null): ?>—
                                                    <?php elseif ($days < 0): ?>
                                                        <span class="text-danger fw-semibold"><?= $days ?></span>
                                                    <?php else: ?>
                                                        +<?= $days ?>
                                                    <?php endif; ?>
                                                </td>
                                            </tr>
                                        <?php endforeach; ?>
                                    </tbody>
                                </table>
                            </div>
                            <!-- MOBILE CARDS -->
                            <div class="d-block d-md-none">
                                <?php foreach ($filtered as $r): ?>
                                    <?php
                                    $fullName = trim($r['first_name'] . ' ' . $r['last_name']);
                                    $typeLbl  = $r['training_type'] === 'refresher' ? 'Aggiornamento' : ($r['training_type'] === 'initial' ? 'Iniziale' : '—');
                                    $days     = $r['_status']['days'] ?? null;
                                    ?>
                                    <div class="tr-card">
                                        <div class="d-flex justify-content-between align-items-start gap-2 mb-1">
                                            <div class="name">
                                                <a href="employee-profile.php?id=<?= (int)$r['employee_id'] ?>#tab-training">
                                                    <?= htmlspecialchars($fullName) ?>
                                                </a>
                                            </div>
                                            <span class="pill pill-<?= $r['_status']['class'] ?>"><?= $r['_status']['label'] ?></span>
                                        </div>
                                        <div class="topic">📖 <?= htmlspecialchars($r['topic_name']) ?></div>
                                        <div class="meta">
                                            <span><b>Tipo:</b> <?= $typeLbl ?></span>
                                            <span><b>Completato:</b> <?= fmtDate($r['completed_date']) ?></span>
                                            <?php if ($r['next_due_date']): ?>
                                                <span><b>Prossimo:</b> <?= fmtDate($r['next_due_date']) ?>
                                                    <?php if ($days !== null && $days < 0): ?>
                                                        <span class="text-danger fw-semibold">(<?= $days ?>g)</span>
                                                    <?php elseif ($days !== null): ?>
                                                        (+<?= $days ?>g)
                                                    <?php endif; ?>
                                                </span>
                                            <?php endif; ?>
                                            <?php if (!empty($r['department_name'])): ?>
                                                <span><b>Reparto:</b> <?= htmlspecialchars($r['department_name']) ?></span>
                                            <?php endif; ?>
                                        </div>
                                    </div>
                                <?php endforeach; ?>
                            </div>
                        <?php endif; ?>
                    </div>
                </div>
            </div>
        </div>
        <?php include('include/footer.php'); ?>
    </div>
    <?php include('jsinclude.php'); ?>
 </body>
 </html>
@@ -139,7 +139,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -11,7 +11,6 @@
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -117,7 +116,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -11,7 +11,6 @@
    <!-- jQuery e Bootstrap -->
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <!-- DataTables -->
@@ -111,7 +110,7 @@
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>
@@ -308,7 +308,6 @@ $worksheets = $pdo->query("
    <title>Fogli di Lavoro</title>
    <script src="https://code.jquery.com/jquery-3.6.0.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/bootstrap@5.3.3/dist/js/bootstrap.bundle.min.js"></script>
    <script src="https://cdn.jsdelivr.net/npm/sweetalert2@11"></script>
    <link rel="stylesheet" href="https://cdn.datatables.net/1.13.6/css/dataTables.bootstrap5.min.css">
@@ -454,7 +453,7 @@ $worksheets = $pdo->query("
 </head>
 <body>
-    <div class="wrapper toggled">
+    <div class="wrapper" id="appWrapper">
        <?php include('include/navbar.php'); ?>
        <?php include('include/topbar.php'); ?>